@distilled.cloud/cloudflare 1.0.0-rc.14 → 1.0.0-rc.15

package/lib/services/zero_trust.d.ts

@@ -3780,6 +3780,10 @@ export interface AccessApplicationsCreateResultEndUserApplication {
     name?: string | null;
     /** List of public domains that Access will secure. This field is deprecated in favor of `destinations` and will be supported until November 21, 2025. If `destinations` are provided, then `self_hosted_domains` will be ignored. */
     selfHostedDomains?: AccessApplicationsCreateResultEndUserApplicationSelfHostedDomainsList | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsCreateResultEndUserApplication: S.Schema<AccessApplicationsCreateResultEndUserApplication>;
 export type AccessApplicationsCreateResultSelfHostedApplicationType = "self_hosted" | "end_user" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint";
@@ -4644,6 +4648,10 @@ export interface AccessApplicationsCreateResultSelfHostedApplication {
     tags?: AccessApplicationsCreateResultSelfHostedApplicationTagsList | null;
     /** Determines if users can access this application via a clientless browser isolation URL. This allows users to access private domains without connecting to Gateway. The option requires Clientless Browser Isolation to be set up with policies that allow users of this application. */
     useClientlessIsolationAppLauncherUrl?: boolean | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsCreateResultSelfHostedApplication: S.Schema<AccessApplicationsCreateResultSelfHostedApplication>;
 export type AccessApplicationsCreateResultSaaSApplicationAllowedIdpsList = Array<unknown>;
@@ -5380,6 +5388,14 @@ export interface AccessApplicationsCreateResultSaaSApplication {
     tags?: AccessApplicationsCreateResultSaaSApplicationTagsList | null;
     /** The application type. */
     type?: AccessApplicationsCreateResultSaaSApplicationType | null;
+    /** The SSO endpoint of the application, e.g. `<team>.cloudflareaccess.com/cdn-cgi/access/sso/saml/<aud>`. */
+    domain?: string | null;
+    /** The amount of time that tokens issued for this application will be valid. */
+    sessionDuration?: string | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsCreateResultSaaSApplication: S.Schema<AccessApplicationsCreateResultSaaSApplication>;
 export type AccessApplicationsCreateResultBrowserSSHApplicationType = "self_hosted" | "end_user" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint";
@@ -6216,6 +6232,10 @@ export interface AccessApplicationsCreateResultBrowserSSHApplication {
     tags?: AccessApplicationsCreateResultBrowserSSHApplicationTagsList | null;
     /** Determines if users can access this application via a clientless browser isolation URL. This allows users to access private domains without connecting to Gateway. The option requires Clientless Browser Isolation to be set up with policies that allow users of this application. */
     useClientlessIsolationAppLauncherUrl?: boolean | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsCreateResultBrowserSSHApplication: S.Schema<AccessApplicationsCreateResultBrowserSSHApplication>;
 export type AccessApplicationsCreateResultBrowserVNCApplicationType = "self_hosted" | "end_user" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint";
@@ -7052,6 +7072,10 @@ export interface AccessApplicationsCreateResultBrowserVNCApplication {
     tags?: AccessApplicationsCreateResultBrowserVNCApplicationTagsList | null;
     /** Determines if users can access this application via a clientless browser isolation URL. This allows users to access private domains without connecting to Gateway. The option requires Clientless Browser Isolation to be set up with policies that allow users of this application. */
     useClientlessIsolationAppLauncherUrl?: boolean | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsCreateResultBrowserVNCApplication: S.Schema<AccessApplicationsCreateResultBrowserVNCApplication>;
 export type AccessApplicationsCreateResultAppLauncherApplicationType = "self_hosted" | "end_user" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint";
@@ -7533,6 +7557,10 @@ export interface AccessApplicationsCreateResultAppLauncherApplication {
     sessionDuration?: string | null;
     /** Determines when to skip the App Launcher landing page. */
     skipAppLauncherLoginPage?: boolean | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsCreateResultAppLauncherApplication: S.Schema<AccessApplicationsCreateResultAppLauncherApplication>;
 export type AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationType = "self_hosted" | "end_user" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint";
@@ -7985,6 +8013,10 @@ export interface AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplic
     policies?: AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplicationPoliciesList | null;
     /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */
     sessionDuration?: string | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplication: S.Schema<AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplication>;
 export type AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationType = "self_hosted" | "end_user" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint";
@@ -8437,6 +8469,10 @@ export interface AccessApplicationsCreateResultBrowserIsolationPermissionsApplic
     policies?: AccessApplicationsCreateResultBrowserIsolationPermissionsApplicationPoliciesList | null;
     /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */
     sessionDuration?: string | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsCreateResultBrowserIsolationPermissionsApplication: S.Schema<AccessApplicationsCreateResultBrowserIsolationPermissionsApplication>;
 export type AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationType = "self_hosted" | "end_user" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint";
@@ -8889,6 +8925,10 @@ export interface AccessApplicationsCreateResultGatewayIdentityProxyEndpointAppli
     policies?: AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplicationPoliciesList | null;
     /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */
     sessionDuration?: string | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplication: S.Schema<AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplication>;
 export type AccessApplicationsCreateResultBookmarkApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array<string>;
@@ -9333,6 +9373,10 @@ export interface AccessApplicationsCreateResultBookmarkApplication {
     tags?: AccessApplicationsCreateResultBookmarkApplicationTagsList | null;
     /** The application type. */
     type?: AccessApplicationsCreateResultBookmarkApplicationType | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsCreateResultBookmarkApplication: S.Schema<AccessApplicationsCreateResultBookmarkApplication>;
 export type AccessApplicationsCreateResultInfrastructureApplicationTargetCriteriaItemProtocol = "SSH";
@@ -9830,6 +9874,10 @@ export interface AccessApplicationsCreateResultInfrastructureApplication {
     /** The name of the application. */
     name?: string | null;
     policies?: AccessApplicationsCreateResultInfrastructureApplicationPoliciesList | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsCreateResultInfrastructureApplication: S.Schema<AccessApplicationsCreateResultInfrastructureApplication>;
 export type AccessApplicationsCreateResultBrowserRDPApplicationTargetCriteriaItemProtocol = "RDP";
@@ -10749,6 +10797,10 @@ export interface AccessApplicationsCreateResultBrowserRDPApplication {
     tags?: AccessApplicationsCreateResultBrowserRDPApplicationTagsList | null;
     /** Determines if users can access this application via a clientless browser isolation URL. This allows users to access private domains without connecting to Gateway. The option requires Clientless Browser Isolation to be set up with policies that allow users of this application. */
     useClientlessIsolationAppLauncherUrl?: boolean | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsCreateResultBrowserRDPApplication: S.Schema<AccessApplicationsCreateResultBrowserRDPApplication>;
 export type AccessApplicationsCreateResultMcpServerApplicationType = "self_hosted" | "end_user" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint";
@@ -11518,6 +11570,10 @@ export interface AccessApplicationsCreateResultMcpServerApplication {
     sessionDuration?: string | null;
     /** The tags you want assigned to an application. Tags are used to filter applications in the App Launcher dashboard. */
     tags?: AccessApplicationsCreateResultMcpServerApplicationTagsList | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsCreateResultMcpServerApplication: S.Schema<AccessApplicationsCreateResultMcpServerApplication>;
 export type AccessApplicationsCreateResultMcpServerPortalApplicationType = "self_hosted" | "end_user" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint";
@@ -12289,6 +12345,10 @@ export interface AccessApplicationsCreateResultMcpServerPortalApplication {
     sessionDuration?: string | null;
     /** The tags you want assigned to an application. Tags are used to filter applications in the App Launcher dashboard. */
     tags?: AccessApplicationsCreateResultMcpServerPortalApplicationTagsList | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsCreateResultMcpServerPortalApplication: S.Schema<AccessApplicationsCreateResultMcpServerPortalApplication>;
 export type AccessApplicationsCreateResult = AccessApplicationsCreateResultEndUserApplication | AccessApplicationsCreateResultSelfHostedApplication | AccessApplicationsCreateResultSaaSApplication | AccessApplicationsCreateResultBrowserSSHApplication | AccessApplicationsCreateResultBrowserVNCApplication | AccessApplicationsCreateResultAppLauncherApplication | AccessApplicationsCreateResultDeviceEnrollmentPermissionsApplication | AccessApplicationsCreateResultBrowserIsolationPermissionsApplication | AccessApplicationsCreateResultGatewayIdentityProxyEndpointApplication | AccessApplicationsCreateResultBookmarkApplication | AccessApplicationsCreateResultInfrastructureApplication | AccessApplicationsCreateResultBrowserRDPApplication | AccessApplicationsCreateResultMcpServerApplication | AccessApplicationsCreateResultMcpServerPortalApplication;
@@ -14802,6 +14862,7 @@ export declare const AccessPoliciesCreateRequestConnectionRulesRdp: S.Schema<Acc
 export interface AccessPoliciesCreateRequestConnectionRules {
     /** The RDP-specific rules that define clipboard behavior for RDP connections. */
     rdp?: AccessPoliciesCreateRequestConnectionRulesRdp;
+    ssh?: AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemConnectionRulesSsh;
 }
 export declare const AccessPoliciesCreateRequestConnectionRules: S.Schema<AccessPoliciesCreateRequestConnectionRules>;
 export type AccessPoliciesCreateRequestMfaConfigAllowedAuthenticatorsItem = "totp" | "biometrics" | "security_key";
@@ -14876,9 +14937,15 @@ export interface AccessPoliciesCreateResponseConnectionRulesRdp {
     allowedClipboardRemoteToLocalFormats?: AccessPoliciesCreateResponseConnectionRulesRdpAllowedClipboardRemoteToLocalFormatsList | null;
 }
 export declare const AccessPoliciesCreateResponseConnectionRulesRdp: S.Schema<AccessPoliciesCreateResponseConnectionRulesRdp>;
+export interface AccessPoliciesResponseConnectionRulesSsh {
+    usernames?: AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemConnectionRulesSshUsernamesList | null;
+    allowEmailAlias?: boolean | null;
+}
+export declare const AccessPoliciesResponseConnectionRulesSsh: S.Schema<AccessPoliciesResponseConnectionRulesSsh>;
 export interface AccessPoliciesCreateResponseConnectionRules {
     /** The RDP-specific rules that define clipboard behavior for RDP connections. */
     rdp?: AccessPoliciesCreateResponseConnectionRulesRdp | null;
+    ssh?: AccessPoliciesResponseConnectionRulesSsh | null;
 }
 export declare const AccessPoliciesCreateResponseConnectionRules: S.Schema<AccessPoliciesCreateResponseConnectionRules>;
 export type AccessPoliciesCreateResponseDecision = "allow" | "deny" | "non_identity" | "bypass";
@@ -23159,6 +23226,10 @@ export interface AccessApplicationsGetResultEndUserApplication {
     name?: string | null;
     /** List of public domains that Access will secure. This field is deprecated in favor of `destinations` and will be supported until November 21, 2025. If `destinations` are provided, then `self_hosted_domains` will be ignored. */
     selfHostedDomains?: AccessApplicationsGetResultEndUserApplicationSelfHostedDomainsList | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsGetResultEndUserApplication: S.Schema<AccessApplicationsGetResultEndUserApplication>;
 export type AccessApplicationsGetResultSelfHostedApplicationType = "self_hosted" | "end_user" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint";
@@ -23995,6 +24066,10 @@ export interface AccessApplicationsGetResultSelfHostedApplication {
     tags?: AccessApplicationsGetResultSelfHostedApplicationTagsList | null;
     /** Determines if users can access this application via a clientless browser isolation URL. This allows users to access private domains without connecting to Gateway. The option requires Clientless Browser Isolation to be set up with policies that allow users of this application. */
     useClientlessIsolationAppLauncherUrl?: boolean | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsGetResultSelfHostedApplication: S.Schema<AccessApplicationsGetResultSelfHostedApplication>;
 export type AccessApplicationsGetResultSaaSApplicationAllowedIdpsList = Array<unknown>;
@@ -24718,6 +24793,14 @@ export interface AccessApplicationsGetResultSaaSApplication {
     tags?: AccessApplicationsGetResultSaaSApplicationTagsList | null;
     /** The application type. */
     type?: AccessApplicationsGetResultSaaSApplicationType | null;
+    /** The SSO endpoint of the application, e.g. `<team>.cloudflareaccess.com/cdn-cgi/access/sso/saml/<aud>`. */
+    domain?: string | null;
+    /** The amount of time that tokens issued for this application will be valid. */
+    sessionDuration?: string | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsGetResultSaaSApplication: S.Schema<AccessApplicationsGetResultSaaSApplication>;
 export type AccessApplicationsGetResultBrowserSSHApplicationType = "self_hosted" | "end_user" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint";
@@ -25554,6 +25637,10 @@ export interface AccessApplicationsGetResultBrowserSSHApplication {
     tags?: AccessApplicationsGetResultBrowserSSHApplicationTagsList | null;
     /** Determines if users can access this application via a clientless browser isolation URL. This allows users to access private domains without connecting to Gateway. The option requires Clientless Browser Isolation to be set up with policies that allow users of this application. */
     useClientlessIsolationAppLauncherUrl?: boolean | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsGetResultBrowserSSHApplication: S.Schema<AccessApplicationsGetResultBrowserSSHApplication>;
 export type AccessApplicationsGetResultBrowserVNCApplicationType = "self_hosted" | "end_user" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint";
@@ -26390,6 +26477,10 @@ export interface AccessApplicationsGetResultBrowserVNCApplication {
     tags?: AccessApplicationsGetResultBrowserVNCApplicationTagsList | null;
     /** Determines if users can access this application via a clientless browser isolation URL. This allows users to access private domains without connecting to Gateway. The option requires Clientless Browser Isolation to be set up with policies that allow users of this application. */
     useClientlessIsolationAppLauncherUrl?: boolean | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsGetResultBrowserVNCApplication: S.Schema<AccessApplicationsGetResultBrowserVNCApplication>;
 export type AccessApplicationsGetResultAppLauncherApplicationType = "self_hosted" | "end_user" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint";
@@ -26860,6 +26951,10 @@ export interface AccessApplicationsGetResultAppLauncherApplication {
     sessionDuration?: string | null;
     /** Determines when to skip the App Launcher landing page. */
     skipAppLauncherLoginPage?: boolean | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsGetResultAppLauncherApplication: S.Schema<AccessApplicationsGetResultAppLauncherApplication>;
 export type AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationType = "self_hosted" | "end_user" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint";
@@ -27312,6 +27407,10 @@ export interface AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicati
     policies?: AccessApplicationsGetResultDeviceEnrollmentPermissionsApplicationPoliciesList | null;
     /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */
     sessionDuration?: string | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsGetResultDeviceEnrollmentPermissionsApplication: S.Schema<AccessApplicationsGetResultDeviceEnrollmentPermissionsApplication>;
 export type AccessApplicationsGetResultBrowserIsolationPermissionsApplicationType = "self_hosted" | "end_user" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint";
@@ -27764,6 +27863,10 @@ export interface AccessApplicationsGetResultBrowserIsolationPermissionsApplicati
     policies?: AccessApplicationsGetResultBrowserIsolationPermissionsApplicationPoliciesList | null;
     /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */
     sessionDuration?: string | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsGetResultBrowserIsolationPermissionsApplication: S.Schema<AccessApplicationsGetResultBrowserIsolationPermissionsApplication>;
 export type AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationType = "self_hosted" | "end_user" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint";
@@ -28216,6 +28319,10 @@ export interface AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicat
     policies?: AccessApplicationsGetResultGatewayIdentityProxyEndpointApplicationPoliciesList | null;
     /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */
     sessionDuration?: string | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsGetResultGatewayIdentityProxyEndpointApplication: S.Schema<AccessApplicationsGetResultGatewayIdentityProxyEndpointApplication>;
 export type AccessApplicationsGetResultBookmarkApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array<string>;
@@ -28660,6 +28767,10 @@ export interface AccessApplicationsGetResultBookmarkApplication {
     tags?: AccessApplicationsGetResultBookmarkApplicationTagsList | null;
     /** The application type. */
     type?: AccessApplicationsGetResultBookmarkApplicationType | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsGetResultBookmarkApplication: S.Schema<AccessApplicationsGetResultBookmarkApplication>;
 export type AccessApplicationsGetResultInfrastructureApplicationTargetCriteriaItemProtocol = "SSH";
@@ -29157,6 +29268,10 @@ export interface AccessApplicationsGetResultInfrastructureApplication {
     /** The name of the application. */
     name?: string | null;
     policies?: AccessApplicationsGetResultInfrastructureApplicationPoliciesList | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsGetResultInfrastructureApplication: S.Schema<AccessApplicationsGetResultInfrastructureApplication>;
 export type AccessApplicationsGetResultBrowserRDPApplicationTargetCriteriaItemProtocol = "RDP";
@@ -30076,6 +30191,10 @@ export interface AccessApplicationsGetResultBrowserRDPApplication {
     tags?: AccessApplicationsGetResultBrowserRDPApplicationTagsList | null;
     /** Determines if users can access this application via a clientless browser isolation URL. This allows users to access private domains without connecting to Gateway. The option requires Clientless Browser Isolation to be set up with policies that allow users of this application. */
     useClientlessIsolationAppLauncherUrl?: boolean | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsGetResultBrowserRDPApplication: S.Schema<AccessApplicationsGetResultBrowserRDPApplication>;
 export type AccessApplicationsGetResultMcpServerApplicationType = "self_hosted" | "end_user" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint";
@@ -30845,6 +30964,10 @@ export interface AccessApplicationsGetResultMcpServerApplication {
     sessionDuration?: string | null;
     /** The tags you want assigned to an application. Tags are used to filter applications in the App Launcher dashboard. */
     tags?: AccessApplicationsGetResultMcpServerApplicationTagsList | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsGetResultMcpServerApplication: S.Schema<AccessApplicationsGetResultMcpServerApplication>;
 export type AccessApplicationsGetResultMcpServerPortalApplicationType = "self_hosted" | "end_user" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint";
@@ -31616,6 +31739,10 @@ export interface AccessApplicationsGetResultMcpServerPortalApplication {
     sessionDuration?: string | null;
     /** The tags you want assigned to an application. Tags are used to filter applications in the App Launcher dashboard. */
     tags?: AccessApplicationsGetResultMcpServerPortalApplicationTagsList | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsGetResultMcpServerPortalApplication: S.Schema<AccessApplicationsGetResultMcpServerPortalApplication>;
 export type AccessApplicationsGetResult = AccessApplicationsGetResultEndUserApplication | AccessApplicationsGetResultSelfHostedApplication | AccessApplicationsGetResultSaaSApplication | AccessApplicationsGetResultBrowserSSHApplication | AccessApplicationsGetResultBrowserVNCApplication | AccessApplicationsGetResultAppLauncherApplication | AccessApplicationsGetResultDeviceEnrollmentPermissionsApplication | AccessApplicationsGetResultBrowserIsolationPermissionsApplication | AccessApplicationsGetResultGatewayIdentityProxyEndpointApplication | AccessApplicationsGetResultBookmarkApplication | AccessApplicationsGetResultInfrastructureApplication | AccessApplicationsGetResultBrowserRDPApplication | AccessApplicationsGetResultMcpServerApplication | AccessApplicationsGetResultMcpServerPortalApplication;
@@ -33053,6 +33180,7 @@ export declare const AccessPoliciesGetResponseConnectionRulesRdp: S.Schema<Acces
 export interface AccessPoliciesGetResponseConnectionRules {
     /** The RDP-specific rules that define clipboard behavior for RDP connections. */
     rdp?: AccessPoliciesGetResponseConnectionRulesRdp | null;
+    ssh?: AccessPoliciesResponseConnectionRulesSsh | null;
 }
 export declare const AccessPoliciesGetResponseConnectionRules: S.Schema<AccessPoliciesGetResponseConnectionRules>;
 export type AccessPoliciesGetResponseDecision = "allow" | "deny" | "non_identity" | "bypass";
@@ -42707,6 +42835,10 @@ export interface AccessApplicationsListResultItemEndUserApplication {
     name?: string | null;
     /** List of public domains that Access will secure. This field is deprecated in favor of `destinations` and will be supported until November 21, 2025. If `destinations` are provided, then `self_hosted_domains` will be ignored. */
     selfHostedDomains?: AccessApplicationsListResultItemEndUserApplicationSelfHostedDomainsList | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsListResultItemEndUserApplication: S.Schema<AccessApplicationsListResultItemEndUserApplication>;
 export type AccessApplicationsListResultItemSelfHostedApplicationType = "self_hosted" | "end_user" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint";
@@ -43543,6 +43675,10 @@ export interface AccessApplicationsListResultItemSelfHostedApplication {
     tags?: AccessApplicationsListResultItemSelfHostedApplicationTagsList | null;
     /** Determines if users can access this application via a clientless browser isolation URL. This allows users to access private domains without connecting to Gateway. The option requires Clientless Browser Isolation to be set up with policies that allow users of this application. */
     useClientlessIsolationAppLauncherUrl?: boolean | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsListResultItemSelfHostedApplication: S.Schema<AccessApplicationsListResultItemSelfHostedApplication>;
 export type AccessApplicationsListResultItemSaaSApplicationAllowedIdpsList = Array<unknown>;
@@ -44266,6 +44402,14 @@ export interface AccessApplicationsListResultItemSaaSApplication {
     tags?: AccessApplicationsListResultItemSaaSApplicationTagsList | null;
     /** The application type. */
     type?: AccessApplicationsListResultItemSaaSApplicationType | null;
+    /** The SSO endpoint of the application, e.g. `<team>.cloudflareaccess.com/cdn-cgi/access/sso/saml/<aud>`. */
+    domain?: string | null;
+    /** The amount of time that tokens issued for this application will be valid. */
+    sessionDuration?: string | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsListResultItemSaaSApplication: S.Schema<AccessApplicationsListResultItemSaaSApplication>;
 export type AccessApplicationsListResultItemBrowserSSHApplicationType = "self_hosted" | "end_user" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint";
@@ -45102,6 +45246,10 @@ export interface AccessApplicationsListResultItemBrowserSSHApplication {
     tags?: AccessApplicationsListResultItemBrowserSSHApplicationTagsList | null;
     /** Determines if users can access this application via a clientless browser isolation URL. This allows users to access private domains without connecting to Gateway. The option requires Clientless Browser Isolation to be set up with policies that allow users of this application. */
     useClientlessIsolationAppLauncherUrl?: boolean | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsListResultItemBrowserSSHApplication: S.Schema<AccessApplicationsListResultItemBrowserSSHApplication>;
 export type AccessApplicationsListResultItemBrowserVNCApplicationType = "self_hosted" | "end_user" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint";
@@ -45938,6 +46086,10 @@ export interface AccessApplicationsListResultItemBrowserVNCApplication {
     tags?: AccessApplicationsListResultItemBrowserVNCApplicationTagsList | null;
     /** Determines if users can access this application via a clientless browser isolation URL. This allows users to access private domains without connecting to Gateway. The option requires Clientless Browser Isolation to be set up with policies that allow users of this application. */
     useClientlessIsolationAppLauncherUrl?: boolean | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsListResultItemBrowserVNCApplication: S.Schema<AccessApplicationsListResultItemBrowserVNCApplication>;
 export type AccessApplicationsListResultItemAppLauncherApplicationType = "self_hosted" | "end_user" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint";
@@ -46408,6 +46560,10 @@ export interface AccessApplicationsListResultItemAppLauncherApplication {
     sessionDuration?: string | null;
     /** Determines when to skip the App Launcher landing page. */
     skipAppLauncherLoginPage?: boolean | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsListResultItemAppLauncherApplication: S.Schema<AccessApplicationsListResultItemAppLauncherApplication>;
 export type AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationType = "self_hosted" | "end_user" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint";
@@ -46860,6 +47016,10 @@ export interface AccessApplicationsListResultItemDeviceEnrollmentPermissionsAppl
     policies?: AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplicationPoliciesList | null;
     /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */
     sessionDuration?: string | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplication: S.Schema<AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplication>;
 export type AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationType = "self_hosted" | "end_user" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint";
@@ -47312,6 +47472,10 @@ export interface AccessApplicationsListResultItemBrowserIsolationPermissionsAppl
     policies?: AccessApplicationsListResultItemBrowserIsolationPermissionsApplicationPoliciesList | null;
     /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */
     sessionDuration?: string | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsListResultItemBrowserIsolationPermissionsApplication: S.Schema<AccessApplicationsListResultItemBrowserIsolationPermissionsApplication>;
 export type AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationType = "self_hosted" | "end_user" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint";
@@ -47764,6 +47928,10 @@ export interface AccessApplicationsListResultItemGatewayIdentityProxyEndpointApp
     policies?: AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplicationPoliciesList | null;
     /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */
     sessionDuration?: string | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplication: S.Schema<AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplication>;
 export type AccessApplicationsListResultItemBookmarkApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array<string>;
@@ -48208,6 +48376,10 @@ export interface AccessApplicationsListResultItemBookmarkApplication {
     tags?: AccessApplicationsListResultItemBookmarkApplicationTagsList | null;
     /** The application type. */
     type?: AccessApplicationsListResultItemBookmarkApplicationType | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsListResultItemBookmarkApplication: S.Schema<AccessApplicationsListResultItemBookmarkApplication>;
 export type AccessApplicationsListResultItemInfrastructureApplicationTargetCriteriaItemProtocol = "SSH";
@@ -48705,6 +48877,10 @@ export interface AccessApplicationsListResultItemInfrastructureApplication {
     /** The name of the application. */
     name?: string | null;
     policies?: AccessApplicationsListResultItemInfrastructureApplicationPoliciesList | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsListResultItemInfrastructureApplication: S.Schema<AccessApplicationsListResultItemInfrastructureApplication>;
 export type AccessApplicationsListResultItemBrowserRDPApplicationTargetCriteriaItemProtocol = "RDP";
@@ -49624,6 +49800,10 @@ export interface AccessApplicationsListResultItemBrowserRDPApplication {
     tags?: AccessApplicationsListResultItemBrowserRDPApplicationTagsList | null;
     /** Determines if users can access this application via a clientless browser isolation URL. This allows users to access private domains without connecting to Gateway. The option requires Clientless Browser Isolation to be set up with policies that allow users of this application. */
     useClientlessIsolationAppLauncherUrl?: boolean | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsListResultItemBrowserRDPApplication: S.Schema<AccessApplicationsListResultItemBrowserRDPApplication>;
 export type AccessApplicationsListResultItemMcpServerApplicationType = "self_hosted" | "end_user" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint";
@@ -50393,6 +50573,10 @@ export interface AccessApplicationsListResultItemMcpServerApplication {
     sessionDuration?: string | null;
     /** The tags you want assigned to an application. Tags are used to filter applications in the App Launcher dashboard. */
     tags?: AccessApplicationsListResultItemMcpServerApplicationTagsList | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsListResultItemMcpServerApplication: S.Schema<AccessApplicationsListResultItemMcpServerApplication>;
 export type AccessApplicationsListResultItemMcpServerPortalApplicationType = "self_hosted" | "end_user" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint";
@@ -51164,6 +51348,10 @@ export interface AccessApplicationsListResultItemMcpServerPortalApplication {
     sessionDuration?: string | null;
     /** The tags you want assigned to an application. Tags are used to filter applications in the App Launcher dashboard. */
     tags?: AccessApplicationsListResultItemMcpServerPortalApplicationTagsList | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsListResultItemMcpServerPortalApplication: S.Schema<AccessApplicationsListResultItemMcpServerPortalApplication>;
 export type AccessApplicationsListResultItem = AccessApplicationsListResultItemEndUserApplication | AccessApplicationsListResultItemSelfHostedApplication | AccessApplicationsListResultItemSaaSApplication | AccessApplicationsListResultItemBrowserSSHApplication | AccessApplicationsListResultItemBrowserVNCApplication | AccessApplicationsListResultItemAppLauncherApplication | AccessApplicationsListResultItemDeviceEnrollmentPermissionsApplication | AccessApplicationsListResultItemBrowserIsolationPermissionsApplication | AccessApplicationsListResultItemGatewayIdentityProxyEndpointApplication | AccessApplicationsListResultItemBookmarkApplication | AccessApplicationsListResultItemInfrastructureApplication | AccessApplicationsListResultItemBrowserRDPApplication | AccessApplicationsListResultItemMcpServerApplication | AccessApplicationsListResultItemMcpServerPortalApplication;
@@ -52079,6 +52267,7 @@ export declare const AccessPoliciesListResultItemConnectionRulesRdp: S.Schema<Ac
 export interface AccessPoliciesListResultItemConnectionRules {
     /** The RDP-specific rules that define clipboard behavior for RDP connections. */
     rdp?: AccessPoliciesListResultItemConnectionRulesRdp | null;
+    ssh?: AccessPoliciesResponseConnectionRulesSsh | null;
 }
 export declare const AccessPoliciesListResultItemConnectionRules: S.Schema<AccessPoliciesListResultItemConnectionRules>;
 export type AccessPoliciesListResultItemDecision = "allow" | "deny" | "non_identity" | "bypass";
@@ -65384,6 +65573,10 @@ export interface AccessApplicationsUpdateResultEndUserApplication {
     name?: string | null;
     /** List of public domains that Access will secure. This field is deprecated in favor of `destinations` and will be supported until November 21, 2025. If `destinations` are provided, then `self_hosted_domains` will be ignored. */
     selfHostedDomains?: AccessApplicationsUpdateResultEndUserApplicationSelfHostedDomainsList | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsUpdateResultEndUserApplication: S.Schema<AccessApplicationsUpdateResultEndUserApplication>;
 export type AccessApplicationsUpdateResultSelfHostedApplicationType = "self_hosted" | "end_user" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint";
@@ -66220,6 +66413,10 @@ export interface AccessApplicationsUpdateResultSelfHostedApplication {
     tags?: AccessApplicationsUpdateResultSelfHostedApplicationTagsList | null;
     /** Determines if users can access this application via a clientless browser isolation URL. This allows users to access private domains without connecting to Gateway. The option requires Clientless Browser Isolation to be set up with policies that allow users of this application. */
     useClientlessIsolationAppLauncherUrl?: boolean | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsUpdateResultSelfHostedApplication: S.Schema<AccessApplicationsUpdateResultSelfHostedApplication>;
 export type AccessApplicationsUpdateResultSaaSApplicationAllowedIdpsList = Array<unknown>;
@@ -66943,6 +67140,14 @@ export interface AccessApplicationsUpdateResultSaaSApplication {
     tags?: AccessApplicationsUpdateResultSaaSApplicationTagsList | null;
     /** The application type. */
     type?: AccessApplicationsUpdateResultSaaSApplicationType | null;
+    /** The SSO endpoint of the application, e.g. `<team>.cloudflareaccess.com/cdn-cgi/access/sso/saml/<aud>`. */
+    domain?: string | null;
+    /** The amount of time that tokens issued for this application will be valid. */
+    sessionDuration?: string | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsUpdateResultSaaSApplication: S.Schema<AccessApplicationsUpdateResultSaaSApplication>;
 export type AccessApplicationsUpdateResultBrowserSSHApplicationType = "self_hosted" | "end_user" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint";
@@ -67779,6 +67984,10 @@ export interface AccessApplicationsUpdateResultBrowserSSHApplication {
     tags?: AccessApplicationsUpdateResultBrowserSSHApplicationTagsList | null;
     /** Determines if users can access this application via a clientless browser isolation URL. This allows users to access private domains without connecting to Gateway. The option requires Clientless Browser Isolation to be set up with policies that allow users of this application. */
     useClientlessIsolationAppLauncherUrl?: boolean | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsUpdateResultBrowserSSHApplication: S.Schema<AccessApplicationsUpdateResultBrowserSSHApplication>;
 export type AccessApplicationsUpdateResultBrowserVNCApplicationType = "self_hosted" | "end_user" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint";
@@ -68615,6 +68824,10 @@ export interface AccessApplicationsUpdateResultBrowserVNCApplication {
     tags?: AccessApplicationsUpdateResultBrowserVNCApplicationTagsList | null;
     /** Determines if users can access this application via a clientless browser isolation URL. This allows users to access private domains without connecting to Gateway. The option requires Clientless Browser Isolation to be set up with policies that allow users of this application. */
     useClientlessIsolationAppLauncherUrl?: boolean | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsUpdateResultBrowserVNCApplication: S.Schema<AccessApplicationsUpdateResultBrowserVNCApplication>;
 export type AccessApplicationsUpdateResultAppLauncherApplicationType = "self_hosted" | "end_user" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint";
@@ -69085,6 +69298,10 @@ export interface AccessApplicationsUpdateResultAppLauncherApplication {
     sessionDuration?: string | null;
     /** Determines when to skip the App Launcher landing page. */
     skipAppLauncherLoginPage?: boolean | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsUpdateResultAppLauncherApplication: S.Schema<AccessApplicationsUpdateResultAppLauncherApplication>;
 export type AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationType = "self_hosted" | "end_user" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint";
@@ -69537,6 +69754,10 @@ export interface AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplic
     policies?: AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplicationPoliciesList | null;
     /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */
     sessionDuration?: string | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplication: S.Schema<AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplication>;
 export type AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationType = "self_hosted" | "end_user" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint";
@@ -69989,6 +70210,10 @@ export interface AccessApplicationsUpdateResultBrowserIsolationPermissionsApplic
     policies?: AccessApplicationsUpdateResultBrowserIsolationPermissionsApplicationPoliciesList | null;
     /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */
     sessionDuration?: string | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsUpdateResultBrowserIsolationPermissionsApplication: S.Schema<AccessApplicationsUpdateResultBrowserIsolationPermissionsApplication>;
 export type AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationType = "self_hosted" | "end_user" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint";
@@ -70441,6 +70666,10 @@ export interface AccessApplicationsUpdateResultGatewayIdentityProxyEndpointAppli
     policies?: AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplicationPoliciesList | null;
     /** The amount of time that tokens issued for this application will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. Note: unsupported for infrastructure type applications. */
     sessionDuration?: string | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplication: S.Schema<AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplication>;
 export type AccessApplicationsUpdateResultBookmarkApplicationPoliciesItemApprovalGroupsItemEmailAddressesList = Array<string>;
@@ -70885,6 +71114,10 @@ export interface AccessApplicationsUpdateResultBookmarkApplication {
     tags?: AccessApplicationsUpdateResultBookmarkApplicationTagsList | null;
     /** The application type. */
     type?: AccessApplicationsUpdateResultBookmarkApplicationType | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsUpdateResultBookmarkApplication: S.Schema<AccessApplicationsUpdateResultBookmarkApplication>;
 export type AccessApplicationsUpdateResultInfrastructureApplicationTargetCriteriaItemProtocol = "SSH";
@@ -71382,6 +71615,10 @@ export interface AccessApplicationsUpdateResultInfrastructureApplication {
     /** The name of the application. */
     name?: string | null;
     policies?: AccessApplicationsUpdateResultInfrastructureApplicationPoliciesList | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsUpdateResultInfrastructureApplication: S.Schema<AccessApplicationsUpdateResultInfrastructureApplication>;
 export type AccessApplicationsUpdateResultBrowserRDPApplicationTargetCriteriaItemProtocol = "RDP";
@@ -72301,6 +72538,10 @@ export interface AccessApplicationsUpdateResultBrowserRDPApplication {
     tags?: AccessApplicationsUpdateResultBrowserRDPApplicationTagsList | null;
     /** Determines if users can access this application via a clientless browser isolation URL. This allows users to access private domains without connecting to Gateway. The option requires Clientless Browser Isolation to be set up with policies that allow users of this application. */
     useClientlessIsolationAppLauncherUrl?: boolean | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsUpdateResultBrowserRDPApplication: S.Schema<AccessApplicationsUpdateResultBrowserRDPApplication>;
 export type AccessApplicationsUpdateResultMcpServerApplicationType = "self_hosted" | "end_user" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint";
@@ -73070,6 +73311,10 @@ export interface AccessApplicationsUpdateResultMcpServerApplication {
     sessionDuration?: string | null;
     /** The tags you want assigned to an application. Tags are used to filter applications in the App Launcher dashboard. */
     tags?: AccessApplicationsUpdateResultMcpServerApplicationTagsList | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsUpdateResultMcpServerApplication: S.Schema<AccessApplicationsUpdateResultMcpServerApplication>;
 export type AccessApplicationsUpdateResultMcpServerPortalApplicationType = "self_hosted" | "end_user" | "saas" | "ssh" | "vnc" | "app_launcher" | "warp" | "biso" | "bookmark" | "dash_sso" | "infrastructure" | "rdp" | "mcp" | "mcp_portal" | "proxy_endpoint";
@@ -73841,6 +74086,10 @@ export interface AccessApplicationsUpdateResultMcpServerPortalApplication {
     sessionDuration?: string | null;
     /** The tags you want assigned to an application. Tags are used to filter applications in the App Launcher dashboard. */
     tags?: AccessApplicationsUpdateResultMcpServerPortalApplicationTagsList | null;
+    /** When the application was created. */
+    createdAt?: string | null;
+    /** When the application was last updated. */
+    updatedAt?: string | null;
 }
 export declare const AccessApplicationsUpdateResultMcpServerPortalApplication: S.Schema<AccessApplicationsUpdateResultMcpServerPortalApplication>;
 export type AccessApplicationsUpdateResult = AccessApplicationsUpdateResultEndUserApplication | AccessApplicationsUpdateResultSelfHostedApplication | AccessApplicationsUpdateResultSaaSApplication | AccessApplicationsUpdateResultBrowserSSHApplication | AccessApplicationsUpdateResultBrowserVNCApplication | AccessApplicationsUpdateResultAppLauncherApplication | AccessApplicationsUpdateResultDeviceEnrollmentPermissionsApplication | AccessApplicationsUpdateResultBrowserIsolationPermissionsApplication | AccessApplicationsUpdateResultGatewayIdentityProxyEndpointApplication | AccessApplicationsUpdateResultBookmarkApplication | AccessApplicationsUpdateResultInfrastructureApplication | AccessApplicationsUpdateResultBrowserRDPApplication | AccessApplicationsUpdateResultMcpServerApplication | AccessApplicationsUpdateResultMcpServerPortalApplication;
@@ -76029,6 +76278,7 @@ export declare const AccessPoliciesUpdateRequestConnectionRulesRdp: S.Schema<Acc
 export interface AccessPoliciesUpdateRequestConnectionRules {
     /** The RDP-specific rules that define clipboard behavior for RDP connections. */
     rdp?: AccessPoliciesUpdateRequestConnectionRulesRdp;
+    ssh?: AccessApplicationsCreateRequestPoliciesInfrastructureApplicationItemConnectionRulesSsh;
 }
 export declare const AccessPoliciesUpdateRequestConnectionRules: S.Schema<AccessPoliciesUpdateRequestConnectionRules>;
 export type AccessPoliciesUpdateRequestMfaConfigAllowedAuthenticatorsItem = "totp" | "biometrics" | "security_key";
@@ -76108,6 +76358,7 @@ export declare const AccessPoliciesUpdateResponseConnectionRulesRdp: S.Schema<Ac
 export interface AccessPoliciesUpdateResponseConnectionRules {
     /** The RDP-specific rules that define clipboard behavior for RDP connections. */
     rdp?: AccessPoliciesUpdateResponseConnectionRulesRdp | null;
+    ssh?: AccessPoliciesResponseConnectionRulesSsh | null;
 }
 export declare const AccessPoliciesUpdateResponseConnectionRules: S.Schema<AccessPoliciesUpdateResponseConnectionRules>;
 export type AccessPoliciesUpdateResponseDecision = "allow" | "deny" | "non_identity" | "bypass";