@puku-ai/sdk 4.0.0 → 4.0.2

package/dist/vendor/resources/beta/tunnels/certificates.d.ts

@@ -0,0 +1,162 @@
+import { APIResource } from '../../../core/resource';
+import * as BetaAPI from '../beta';
+import { APIPromise } from '../../../core/api-promise';
+import { PageCursor, type PageCursorParams, PagePromise } from '../../../core/pagination';
+import { RequestOptions } from '../../../internal/request-options';
+export declare class Certificates extends APIResource {
+    /**
+     * The Tunnels API is in research preview. It requires the
+     * `puku-beta: mcp-tunnels-2026-06-22` header and may change without a
+     * deprecation period. It supersedes the Admin API endpoints at
+     * `/v1/organizations/tunnels`, which remain available during a migration window.
+     *
+     * Registers a public CA certificate on a tunnel. PukuAI verifies the gateway's
+     * server certificate against this CA when it terminates the inner TLS session. A
+     * tunnel holds at most two non-archived certificates.
+     *
+     * @example
+     * ```ts
+     * const betaTunnelCertificate =
+     *   await client.beta.tunnels.certificates.create(
+     *     'tunnel_id',
+     *     { ca_certificate_pem: 'ca_certificate_pem' },
+     *   );
+     * ```
+     */
+    create(tunnelID: string, params: CertificateCreateParams, options?: RequestOptions): APIPromise<BetaTunnelCertificate>;
+    /**
+     * The Tunnels API is in research preview. It requires the
+     * `puku-beta: mcp-tunnels-2026-06-22` header and may change without a
+     * deprecation period. It supersedes the Admin API endpoints at
+     * `/v1/organizations/tunnels`, which remain available during a migration window.
+     *
+     * Fetches a tunnel certificate by ID.
+     *
+     * @example
+     * ```ts
+     * const betaTunnelCertificate =
+     *   await client.beta.tunnels.certificates.retrieve(
+     *     'certificate_id',
+     *     { tunnel_id: 'tunnel_id' },
+     *   );
+     * ```
+     */
+    retrieve(certificateID: string, params: CertificateRetrieveParams, options?: RequestOptions): APIPromise<BetaTunnelCertificate>;
+    /**
+     * The Tunnels API is in research preview. It requires the
+     * `puku-beta: mcp-tunnels-2026-06-22` header and may change without a
+     * deprecation period. It supersedes the Admin API endpoints at
+     * `/v1/organizations/tunnels`, which remain available during a migration window.
+     *
+     * Lists the certificates registered on a tunnel. Archived certificates are
+     * excluded unless include_archived is set.
+     *
+     * @example
+     * ```ts
+     * // Automatically fetches more pages as needed.
+     * for await (const betaTunnelCertificate of client.beta.tunnels.certificates.list(
+     *   'tunnel_id',
+     * )) {
+     *   // ...
+     * }
+     * ```
+     */
+    list(tunnelID: string, params?: CertificateListParams | null | undefined, options?: RequestOptions): PagePromise<BetaTunnelCertificatesPageCursor, BetaTunnelCertificate>;
+    /**
+     * The Tunnels API is in research preview. It requires the
+     * `puku-beta: mcp-tunnels-2026-06-22` header and may change without a
+     * deprecation period. It supersedes the Admin API endpoints at
+     * `/v1/organizations/tunnels`, which remain available during a migration window.
+     *
+     * Archives a tunnel certificate, removing it from the set PukuAI trusts for the
+     * tunnel. The certificate record is retained. Archiving the last non-archived
+     * certificate is permitted; the tunnel rejects MCP traffic until a new certificate
+     * is added.
+     *
+     * @example
+     * ```ts
+     * const betaTunnelCertificate =
+     *   await client.beta.tunnels.certificates.archive(
+     *     'certificate_id',
+     *     { tunnel_id: 'tunnel_id' },
+     *   );
+     * ```
+     */
+    archive(certificateID: string, params: CertificateArchiveParams, options?: RequestOptions): APIPromise<BetaTunnelCertificate>;
+}
+export type BetaTunnelCertificatesPageCursor = PageCursor<BetaTunnelCertificate>;
+/**
+ * A CA certificate attached to a tunnel.
+ */
+export interface BetaTunnelCertificate {
+    /**
+     * Unique identifier for the certificate, prefixed with `tcrt_`.
+     */
+    id: string;
+    /**
+     * A timestamp in RFC 3339 format
+     */
+    archived_at: string | null;
+    /**
+     * A timestamp in RFC 3339 format
+     */
+    created_at: string;
+    /**
+     * A timestamp in RFC 3339 format
+     */
+    expires_at: string | null;
+    /**
+     * Lowercase hex SHA-256 fingerprint of the certificate's DER encoding.
+     */
+    fingerprint: string;
+    /**
+     * ID of the tunnel the certificate is registered against.
+     */
+    tunnel_id: string;
+    type: 'tunnel_certificate';
+}
+export interface CertificateCreateParams {
+    /**
+     * Body param: PEM-encoded X.509 CA certificate. Must contain exactly one
+     * certificate and no private-key material. Maximum 8KB.
+     */
+    ca_certificate_pem: string;
+    /**
+     * Header param: Optional header to specify the beta version(s) you want to use.
+     */
+    betas?: Array<BetaAPI.PukuBeta>;
+}
+export interface CertificateRetrieveParams {
+    /**
+     * Path param: Path parameter tunnel_id
+     */
+    tunnel_id: string;
+    /**
+     * Header param: Optional header to specify the beta version(s) you want to use.
+     */
+    betas?: Array<BetaAPI.PukuBeta>;
+}
+export interface CertificateListParams extends PageCursorParams {
+    /**
+     * Query param: Whether to include archived certificates in the results. Defaults
+     * to false.
+     */
+    include_archived?: boolean;
+    /**
+     * Header param: Optional header to specify the beta version(s) you want to use.
+     */
+    betas?: Array<BetaAPI.PukuBeta>;
+}
+export interface CertificateArchiveParams {
+    /**
+     * Path param: Path parameter tunnel_id
+     */
+    tunnel_id: string;
+    /**
+     * Header param: Optional header to specify the beta version(s) you want to use.
+     */
+    betas?: Array<BetaAPI.PukuBeta>;
+}
+export declare namespace Certificates {
+    export { type BetaTunnelCertificate as BetaTunnelCertificate, type BetaTunnelCertificatesPageCursor as BetaTunnelCertificatesPageCursor, type CertificateCreateParams as CertificateCreateParams, type CertificateRetrieveParams as CertificateRetrieveParams, type CertificateListParams as CertificateListParams, type CertificateArchiveParams as CertificateArchiveParams, };
+}

package/dist/vendor/resources/beta/tunnels/certificates.js

@@ -0,0 +1,125 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+import { APIResource } from '../../../core/resource.js';
+import { PageCursor } from '../../../core/pagination.js';
+import { buildHeaders } from '../../../internal/headers.js';
+import { path } from '../../../internal/utils/path.js';
+export class Certificates extends APIResource {
+    /**
+     * The Tunnels API is in research preview. It requires the
+     * `puku-beta: mcp-tunnels-2026-06-22` header and may change without a
+     * deprecation period. It supersedes the Admin API endpoints at
+     * `/v1/organizations/tunnels`, which remain available during a migration window.
+     *
+     * Registers a public CA certificate on a tunnel. PukuAI verifies the gateway's
+     * server certificate against this CA when it terminates the inner TLS session. A
+     * tunnel holds at most two non-archived certificates.
+     *
+     * @example
+     * ```ts
+     * const betaTunnelCertificate =
+     *   await client.beta.tunnels.certificates.create(
+     *     'tunnel_id',
+     *     { ca_certificate_pem: 'ca_certificate_pem' },
+     *   );
+     * ```
+     */
+    create(tunnelID, params, options) {
+        const { betas, ...body } = params;
+        return this._client.post(path `/v1/tunnels/${tunnelID}/certificates?beta=true`, {
+            body,
+            ...options,
+            headers: buildHeaders([
+                { 'puku-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
+                options?.headers,
+            ]),
+        });
+    }
+    /**
+     * The Tunnels API is in research preview. It requires the
+     * `puku-beta: mcp-tunnels-2026-06-22` header and may change without a
+     * deprecation period. It supersedes the Admin API endpoints at
+     * `/v1/organizations/tunnels`, which remain available during a migration window.
+     *
+     * Fetches a tunnel certificate by ID.
+     *
+     * @example
+     * ```ts
+     * const betaTunnelCertificate =
+     *   await client.beta.tunnels.certificates.retrieve(
+     *     'certificate_id',
+     *     { tunnel_id: 'tunnel_id' },
+     *   );
+     * ```
+     */
+    retrieve(certificateID, params, options) {
+        const { tunnel_id, betas } = params;
+        return this._client.get(path `/v1/tunnels/${tunnel_id}/certificates/${certificateID}?beta=true`, {
+            ...options,
+            headers: buildHeaders([
+                { 'puku-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
+                options?.headers,
+            ]),
+        });
+    }
+    /**
+     * The Tunnels API is in research preview. It requires the
+     * `puku-beta: mcp-tunnels-2026-06-22` header and may change without a
+     * deprecation period. It supersedes the Admin API endpoints at
+     * `/v1/organizations/tunnels`, which remain available during a migration window.
+     *
+     * Lists the certificates registered on a tunnel. Archived certificates are
+     * excluded unless include_archived is set.
+     *
+     * @example
+     * ```ts
+     * // Automatically fetches more pages as needed.
+     * for await (const betaTunnelCertificate of client.beta.tunnels.certificates.list(
+     *   'tunnel_id',
+     * )) {
+     *   // ...
+     * }
+     * ```
+     */
+    list(tunnelID, params = {}, options) {
+        const { betas, ...query } = params ?? {};
+        return this._client.getAPIList(path `/v1/tunnels/${tunnelID}/certificates?beta=true`, (PageCursor), {
+            query,
+            ...options,
+            headers: buildHeaders([
+                { 'puku-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
+                options?.headers,
+            ]),
+        });
+    }
+    /**
+     * The Tunnels API is in research preview. It requires the
+     * `puku-beta: mcp-tunnels-2026-06-22` header and may change without a
+     * deprecation period. It supersedes the Admin API endpoints at
+     * `/v1/organizations/tunnels`, which remain available during a migration window.
+     *
+     * Archives a tunnel certificate, removing it from the set PukuAI trusts for the
+     * tunnel. The certificate record is retained. Archiving the last non-archived
+     * certificate is permitted; the tunnel rejects MCP traffic until a new certificate
+     * is added.
+     *
+     * @example
+     * ```ts
+     * const betaTunnelCertificate =
+     *   await client.beta.tunnels.certificates.archive(
+     *     'certificate_id',
+     *     { tunnel_id: 'tunnel_id' },
+     *   );
+     * ```
+     */
+    archive(certificateID, params, options) {
+        const { tunnel_id, betas } = params;
+        return this._client.post(path `/v1/tunnels/${tunnel_id}/certificates/${certificateID}/archive?beta=true`, {
+            ...options,
+            headers: buildHeaders([
+                { 'puku-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
+                options?.headers,
+            ]),
+        });
+    }
+}
+//# sourceMappingURL=certificates.js.map

package/dist/vendor/resources/beta/tunnels/certificates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"certificates.js","sourceRoot":"","sources":["../../../../../src/vendor/resources/beta/tunnels/certificates.ts"],"names":[],"mappings":"AAAA,sFAAsF;AAEtF,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAGrD,OAAO,EAAE,UAAU,EAAsC,MAAM,0BAA0B,CAAC;AAC1F,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAEzD,OAAO,EAAE,IAAI,EAAE,MAAM,8BAA8B,CAAC;AAEpD,MAAM,OAAO,YAAa,SAAQ,WAAW;IAC3C;;;;;;;;;;;;;;;;;;OAkBG;IACH,MAAM,CACJ,QAAgB,EAChB,MAA+B,EAC/B,OAAwB;QAExB,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;QAClC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAA,eAAe,QAAQ,yBAAyB,EAAE;YAC7E,IAAI;YACJ,GAAG,OAAO;YACV,OAAO,EAAE,YAAY,CAAC;gBACpB,EAAE,WAAW,EAAE,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,wBAAwB,CAAC,CAAC,QAAQ,EAAE,EAAE;gBACxE,OAAO,EAAE,OAAO;aACjB,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,QAAQ,CACN,aAAqB,EACrB,MAAiC,EACjC,OAAwB;QAExB,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC;QACpC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAA,eAAe,SAAS,iBAAiB,aAAa,YAAY,EAAE;YAC9F,GAAG,OAAO;YACV,OAAO,EAAE,YAAY,CAAC;gBACpB,EAAE,WAAW,EAAE,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,wBAAwB,CAAC,CAAC,QAAQ,EAAE,EAAE;gBACxE,OAAO,EAAE,OAAO;aACjB,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACH,IAAI,CACF,QAAgB,EAChB,SAAmD,EAAE,EACrD,OAAwB;QAExB,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;QACzC,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAC5B,IAAI,CAAA,eAAe,QAAQ,yBAAyB,EACpD,CAAA,UAAiC,CAAA,EACjC;YACE,KAAK;YACL,GAAG,OAAO;YACV,OAAO,EAAE,YAAY,CAAC;gBACpB,EAAE,WAAW,EAAE,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,wBAAwB,CAAC,CAAC,QAAQ,EAAE,EAAE;gBACxE,OAAO,EAAE,OAAO;aACjB,CAAC;SACH,CACF,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;;OAmBG;IACH,OAAO,CACL,aAAqB,EACrB,MAAgC,EAChC,OAAwB;QAExB,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC;QACpC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAA,eAAe,SAAS,iBAAiB,aAAa,oBAAoB,EAAE;YACvG,GAAG,OAAO;YACV,OAAO,EAAE,YAAY,CAAC;gBACpB,EAAE,WAAW,EAAE,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,wBAAwB,CAAC,CAAC,QAAQ,EAAE,EAAE;gBACxE,OAAO,EAAE,OAAO;aACjB,CAAC;SACH,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/vendor/resources/beta/tunnels/index.d.ts

@@ -0,0 +1,2 @@
+export { Certificates, type BetaTunnelCertificate, type CertificateCreateParams, type CertificateRetrieveParams, type CertificateListParams, type CertificateArchiveParams, type BetaTunnelCertificatesPageCursor, } from './certificates';
+export { Tunnels, type BetaTunnel, type BetaTunnelToken, type TunnelCreateParams, type TunnelRetrieveParams, type TunnelListParams, type TunnelArchiveParams, type TunnelRevealTokenParams, type TunnelRotateTokenParams, type BetaTunnelsPageCursor, } from './tunnels';

package/dist/vendor/resources/beta/tunnels/index.js

@@ -0,0 +1,4 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+export { Certificates, } from './certificates.js';
+export { Tunnels, } from './tunnels.js';
+//# sourceMappingURL=index.js.map

package/dist/vendor/resources/beta/tunnels/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/vendor/resources/beta/tunnels/index.ts"],"names":[],"mappings":"AAAA,sFAAsF;AAEtF,OAAO,EACL,YAAY,GAOb,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,OAAO,GAUR,MAAM,WAAW,CAAC"}

package/dist/vendor/resources/beta/tunnels/tunnels.d.ts

@@ -0,0 +1,211 @@
+import { APIResource } from '../../../core/resource';
+import * as BetaAPI from '../beta';
+import * as CertificatesAPI from './certificates';
+import { BetaTunnelCertificate, BetaTunnelCertificatesPageCursor, CertificateArchiveParams, CertificateCreateParams, CertificateListParams, CertificateRetrieveParams, Certificates } from './certificates';
+import { APIPromise } from '../../../core/api-promise';
+import { PageCursor, type PageCursorParams, PagePromise } from '../../../core/pagination';
+import { RequestOptions } from '../../../internal/request-options';
+export declare class Tunnels extends APIResource {
+    certificates: CertificatesAPI.Certificates;
+    /**
+     * The Tunnels API is in research preview. It requires the
+     * `puku-beta: mcp-tunnels-2026-06-22` header and may change without a
+     * deprecation period. It supersedes the Admin API endpoints at
+     * `/v1/organizations/tunnels`, which remain available during a migration window.
+     *
+     * Creates a tunnel. Creation allocates a fresh hostname and provisions the tunnel;
+     * it is not idempotent. The new tunnel rejects MCP traffic until at least one CA
+     * certificate is added.
+     *
+     * @example
+     * ```ts
+     * const betaTunnel = await client.beta.tunnels.create();
+     * ```
+     */
+    create(params: TunnelCreateParams, options?: RequestOptions): APIPromise<BetaTunnel>;
+    /**
+     * The Tunnels API is in research preview. It requires the
+     * `puku-beta: mcp-tunnels-2026-06-22` header and may change without a
+     * deprecation period. It supersedes the Admin API endpoints at
+     * `/v1/organizations/tunnels`, which remain available during a migration window.
+     *
+     * Fetches a tunnel by ID.
+     *
+     * @example
+     * ```ts
+     * const betaTunnel = await client.beta.tunnels.retrieve(
+     *   'tunnel_id',
+     * );
+     * ```
+     */
+    retrieve(tunnelID: string, params?: TunnelRetrieveParams | null | undefined, options?: RequestOptions): APIPromise<BetaTunnel>;
+    /**
+     * The Tunnels API is in research preview. It requires the
+     * `puku-beta: mcp-tunnels-2026-06-22` header and may change without a
+     * deprecation period. It supersedes the Admin API endpoints at
+     * `/v1/organizations/tunnels`, which remain available during a migration window.
+     *
+     * Lists tunnels. Results are ordered by creation time, newest first; archived
+     * tunnels are excluded unless include_archived is set.
+     *
+     * @example
+     * ```ts
+     * // Automatically fetches more pages as needed.
+     * for await (const betaTunnel of client.beta.tunnels.list()) {
+     *   // ...
+     * }
+     * ```
+     */
+    list(params?: TunnelListParams | null | undefined, options?: RequestOptions): PagePromise<BetaTunnelsPageCursor, BetaTunnel>;
+    /**
+     * The Tunnels API is in research preview. It requires the
+     * `puku-beta: mcp-tunnels-2026-06-22` header and may change without a
+     * deprecation period. It supersedes the Admin API endpoints at
+     * `/v1/organizations/tunnels`, which remain available during a migration window.
+     *
+     * Archives a tunnel. Archival is irreversible: every non-archived certificate on
+     * the tunnel is archived in the same operation, the hostname is retired and never
+     * re-allocated, and the tunnel token is invalidated. Retrying against an
+     * already-archived tunnel returns the existing record unchanged.
+     *
+     * @example
+     * ```ts
+     * const betaTunnel = await client.beta.tunnels.archive(
+     *   'tunnel_id',
+     * );
+     * ```
+     */
+    archive(tunnelID: string, params?: TunnelArchiveParams | null | undefined, options?: RequestOptions): APIPromise<BetaTunnel>;
+    /**
+     * The Tunnels API is in research preview. It requires the
+     * `puku-beta: mcp-tunnels-2026-06-22` header and may change without a
+     * deprecation period. It supersedes the Admin API endpoints at
+     * `/v1/organizations/tunnels`, which remain available during a migration window.
+     *
+     * Reveals a tunnel's connector token. The value is fetched live on each call;
+     * PukuAI does not store it. Repeated calls return the same value until the
+     * token is rotated. Exposed as POST so the token does not appear in intermediary
+     * access logs.
+     *
+     * @example
+     * ```ts
+     * const betaTunnelToken =
+     *   await client.beta.tunnels.revealToken('tunnel_id');
+     * ```
+     */
+    revealToken(tunnelID: string, params?: TunnelRevealTokenParams | null | undefined, options?: RequestOptions): APIPromise<BetaTunnelToken>;
+    /**
+     * The Tunnels API is in research preview. It requires the
+     * `puku-beta: mcp-tunnels-2026-06-22` header and may change without a
+     * deprecation period. It supersedes the Admin API endpoints at
+     * `/v1/organizations/tunnels`, which remain available during a migration window.
+     *
+     * Rotates a tunnel's connector token. Rotation invalidates the current token for
+     * new connections and returns a fresh value; established connections are not
+     * severed. A connector restarted after rotation must use the new value.
+     *
+     * @example
+     * ```ts
+     * const betaTunnelToken =
+     *   await client.beta.tunnels.rotateToken('tunnel_id');
+     * ```
+     */
+    rotateToken(tunnelID: string, params: TunnelRotateTokenParams, options?: RequestOptions): APIPromise<BetaTunnelToken>;
+}
+export type BetaTunnelsPageCursor = PageCursor<BetaTunnel>;
+/**
+ * An MCP tunnel.
+ */
+export interface BetaTunnel {
+    /**
+     * Unique identifier for the tunnel, prefixed with `tnl_`.
+     */
+    id: string;
+    /**
+     * A timestamp in RFC 3339 format
+     */
+    archived_at: string | null;
+    /**
+     * A timestamp in RFC 3339 format
+     */
+    created_at: string;
+    /**
+     * Human-readable name for the tunnel (1-255 characters). Null if unset.
+     */
+    display_name: string | null;
+    /**
+     * PukuAI-assigned hostname for the tunnel. MCP server URLs whose host is a
+     * subdomain of this value are routed through the tunnel. Globally unique and never
+     * reused, even after the tunnel is archived.
+     */
+    domain: string;
+    type: 'tunnel';
+}
+/**
+ * A tunnel's connector token.
+ */
+export interface BetaTunnelToken {
+    /**
+     * Stable identifier for the current token value. Changes when the token is
+     * rotated.
+     */
+    id: string;
+    /**
+     * The connector token used to run the tunnel. Treat as a credential.
+     */
+    tunnel_token: string;
+    type: 'tunnel_token';
+}
+export interface TunnelCreateParams {
+    /**
+     * Body param: Optional human-readable name for the tunnel (1-255 characters).
+     */
+    display_name?: string | null;
+    /**
+     * Header param: Optional header to specify the beta version(s) you want to use.
+     */
+    betas?: Array<BetaAPI.PukuBeta>;
+}
+export interface TunnelRetrieveParams {
+    /**
+     * Optional header to specify the beta version(s) you want to use.
+     */
+    betas?: Array<BetaAPI.PukuBeta>;
+}
+export interface TunnelListParams extends PageCursorParams {
+    /**
+     * Query param: Whether to include archived tunnels in the results. Defaults to
+     * false.
+     */
+    include_archived?: boolean;
+    /**
+     * Header param: Optional header to specify the beta version(s) you want to use.
+     */
+    betas?: Array<BetaAPI.PukuBeta>;
+}
+export interface TunnelArchiveParams {
+    /**
+     * Optional header to specify the beta version(s) you want to use.
+     */
+    betas?: Array<BetaAPI.PukuBeta>;
+}
+export interface TunnelRevealTokenParams {
+    /**
+     * Optional header to specify the beta version(s) you want to use.
+     */
+    betas?: Array<BetaAPI.PukuBeta>;
+}
+export interface TunnelRotateTokenParams {
+    /**
+     * Body param: Optional free-text reason for the rotation, recorded for audit.
+     */
+    reason?: string | null;
+    /**
+     * Header param: Optional header to specify the beta version(s) you want to use.
+     */
+    betas?: Array<BetaAPI.PukuBeta>;
+}
+export declare namespace Tunnels {
+    export { type BetaTunnel as BetaTunnel, type BetaTunnelToken as BetaTunnelToken, type BetaTunnelsPageCursor as BetaTunnelsPageCursor, type TunnelCreateParams as TunnelCreateParams, type TunnelRetrieveParams as TunnelRetrieveParams, type TunnelListParams as TunnelListParams, type TunnelArchiveParams as TunnelArchiveParams, type TunnelRevealTokenParams as TunnelRevealTokenParams, type TunnelRotateTokenParams as TunnelRotateTokenParams, };
+    export { Certificates as Certificates, type BetaTunnelCertificate as BetaTunnelCertificate, type BetaTunnelCertificatesPageCursor as BetaTunnelCertificatesPageCursor, type CertificateCreateParams as CertificateCreateParams, type CertificateRetrieveParams as CertificateRetrieveParams, type CertificateListParams as CertificateListParams, type CertificateArchiveParams as CertificateArchiveParams, };
+}