@pulumi/cloudflare 5.50.0-alpha.1744436206 → 6.0.0-alpha.1744627049

package/accessRule.d.ts

@@ -2,74 +2,27 @@ import * as pulumi from "@pulumi/pulumi";
 import * as inputs from "./types/input";
 import * as outputs from "./types/output";
 /**
- * Provides a Cloudflare IP Firewall Access Rule resource. Access
- * control can be applied on basis of IP addresses, IP ranges, AS
- * numbers or countries.
- *
  * ## Example Usage
  *
  * ```typescript
  * import * as pulumi from "@pulumi/pulumi";
  * import * as cloudflare from "@pulumi/cloudflare";
  *
- * // Challenge requests coming from known Tor exit nodes.
- * const torExitNodes = new cloudflare.AccessRule("tor_exit_nodes", {
- *     zoneId: "0da42c8d2132a9ddaf714f9e7c920711",
- *     notes: "Requests coming from known Tor exit nodes",
- *     mode: "challenge",
- *     configuration: {
- *         target: "country",
- *         value: "T1",
- *     },
- * });
- * // Allowlist requests coming from Antarctica, but only for single zone.
- * const antarctica = new cloudflare.AccessRule("antarctica", {
- *     zoneId: "0da42c8d2132a9ddaf714f9e7c920711",
- *     notes: "Requests coming from Antarctica",
- *     mode: "whitelist",
+ * const exampleAccessRule = new cloudflare.AccessRule("example_access_rule", {
  *     configuration: {
- *         target: "country",
- *         value: "AQ",
+ *         target: "ip",
+ *         value: "198.51.100.4",
  *     },
+ *     mode: "block",
+ *     zoneId: "zone_id",
+ *     notes: "This rule is enabled because of an event that occurred on date X.",
  * });
- * const config = new pulumi.Config();
- * const myOffice = config.getObject<Array<string>>("myOffice") || [
- *     "192.0.2.0/24",
- *     "198.51.100.0/24",
- *     "2001:db8::/56",
- * ];
- * const officeNetwork: cloudflare.AccessRule[] = [];
- * for (const range = {value: 0}; range.value < myOffice.length; range.value++) {
- *     officeNetwork.push(new cloudflare.AccessRule(`office_network-${range.value}`, {
- *         accountId: "f037e56e89293a057740de681ac9abbe",
- *         notes: "Requests coming from office network",
- *         mode: "whitelist",
- *         configuration: {
- *             target: "ip_range",
- *             value: myOffice[range.value],
- *         },
- *     }));
- * }
  * ```
  *
  * ## Import
  *
- * User level access rule import.
- *
  * ```sh
- * $ pulumi import cloudflare:index/accessRule:AccessRule default user/<user_id>/<rule_id>
- * ```
- *
- * Zone level access rule import.
- *
- * ```sh
- * $ pulumi import cloudflare:index/accessRule:AccessRule default zone/<zone_id>/<rule_id>
- * ```
- *
- * Account level access rule import.
- *
- * ```sh
- * $ pulumi import cloudflare:index/accessRule:AccessRule default account/<account_id>/<rule_id>
+ * $ pulumi import cloudflare:index/accessRule:AccessRule example '<{accounts|zones}/{account_id|zone_id}>/<rule_id>'
  * ```
  */
 export declare class AccessRule extends pulumi.CustomResource {
@@ -89,25 +42,42 @@ export declare class AccessRule extends pulumi.CustomResource {
      */
     static isInstance(obj: any): obj is AccessRule;
     /**
-     * The account identifier to target for the resource. Must provide only one of `accountId`, `zoneId`. **Modifying this attribute will force creation of a new resource.**
+     * The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
+     */
+    readonly accountId: pulumi.Output<string | undefined>;
+    /**
+     * The available actions that a rule can apply to a matched request.
      */
-    readonly accountId: pulumi.Output<string>;
+    readonly allowedModes: pulumi.Output<string[]>;
     /**
-     * Rule configuration to apply to a matched request. **Modifying this attribute will force creation of a new resource.**
+     * The rule configuration.
      */
     readonly configuration: pulumi.Output<outputs.AccessRuleConfiguration>;
     /**
-     * The action to apply to a matched request. Available values: `block`, `challenge`, `whitelist`, `jsChallenge`, `managedChallenge`.
+     * The timestamp of when the rule was created.
+     */
+    readonly createdOn: pulumi.Output<string>;
+    /**
+     * The action to apply to a matched request.
+     * Available values: "block", "challenge", "whitelist", "js*challenge", "managed*challenge".
      */
     readonly mode: pulumi.Output<string>;
     /**
-     * A personal note about the rule. Typically used as a reminder or explanation for the rule.
+     * The timestamp of when the rule was last modified.
+     */
+    readonly modifiedOn: pulumi.Output<string>;
+    /**
+     * An informative summary of the rule, typically used as a reminder or explanation.
      */
     readonly notes: pulumi.Output<string | undefined>;
     /**
-     * The zone identifier to target for the resource. Must provide only one of `accountId`, `zoneId`. **Modifying this attribute will force creation of a new resource.**
+     * All zones owned by the user will have the rule applied.
      */
-    readonly zoneId: pulumi.Output<string>;
+    readonly scope: pulumi.Output<outputs.AccessRuleScope>;
+    /**
+     * The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
+     */
+    readonly zoneId: pulumi.Output<string | undefined>;
     /**
      * Create a AccessRule resource with the given unique name, arguments, and options.
      *
@@ -122,23 +92,40 @@ export declare class AccessRule extends pulumi.CustomResource {
  */
 export interface AccessRuleState {
     /**
-     * The account identifier to target for the resource. Must provide only one of `accountId`, `zoneId`. **Modifying this attribute will force creation of a new resource.**
+     * The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
      */
     accountId?: pulumi.Input<string>;
     /**
-     * Rule configuration to apply to a matched request. **Modifying this attribute will force creation of a new resource.**
+     * The available actions that a rule can apply to a matched request.
+     */
+    allowedModes?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * The rule configuration.
      */
     configuration?: pulumi.Input<inputs.AccessRuleConfiguration>;
     /**
-     * The action to apply to a matched request. Available values: `block`, `challenge`, `whitelist`, `jsChallenge`, `managedChallenge`.
+     * The timestamp of when the rule was created.
+     */
+    createdOn?: pulumi.Input<string>;
+    /**
+     * The action to apply to a matched request.
+     * Available values: "block", "challenge", "whitelist", "js*challenge", "managed*challenge".
      */
     mode?: pulumi.Input<string>;
     /**
-     * A personal note about the rule. Typically used as a reminder or explanation for the rule.
+     * The timestamp of when the rule was last modified.
+     */
+    modifiedOn?: pulumi.Input<string>;
+    /**
+     * An informative summary of the rule, typically used as a reminder or explanation.
      */
     notes?: pulumi.Input<string>;
     /**
-     * The zone identifier to target for the resource. Must provide only one of `accountId`, `zoneId`. **Modifying this attribute will force creation of a new resource.**
+     * All zones owned by the user will have the rule applied.
+     */
+    scope?: pulumi.Input<inputs.AccessRuleScope>;
+    /**
+     * The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
      */
     zoneId?: pulumi.Input<string>;
 }
@@ -147,23 +134,24 @@ export interface AccessRuleState {
  */
 export interface AccessRuleArgs {
     /**
-     * The account identifier to target for the resource. Must provide only one of `accountId`, `zoneId`. **Modifying this attribute will force creation of a new resource.**
+     * The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
      */
     accountId?: pulumi.Input<string>;
     /**
-     * Rule configuration to apply to a matched request. **Modifying this attribute will force creation of a new resource.**
+     * The rule configuration.
      */
     configuration: pulumi.Input<inputs.AccessRuleConfiguration>;
     /**
-     * The action to apply to a matched request. Available values: `block`, `challenge`, `whitelist`, `jsChallenge`, `managedChallenge`.
+     * The action to apply to a matched request.
+     * Available values: "block", "challenge", "whitelist", "js*challenge", "managed*challenge".
      */
     mode: pulumi.Input<string>;
     /**
-     * A personal note about the rule. Typically used as a reminder or explanation for the rule.
+     * An informative summary of the rule, typically used as a reminder or explanation.
      */
     notes?: pulumi.Input<string>;
     /**
-     * The zone identifier to target for the resource. Must provide only one of `accountId`, `zoneId`. **Modifying this attribute will force creation of a new resource.**
+     * The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
      */
     zoneId?: pulumi.Input<string>;
 }

package/accessRule.js

@@ -6,74 +6,27 @@ exports.AccessRule = void 0;
 const pulumi = require("@pulumi/pulumi");
 const utilities = require("./utilities");
 /**
- * Provides a Cloudflare IP Firewall Access Rule resource. Access
- * control can be applied on basis of IP addresses, IP ranges, AS
- * numbers or countries.
- *
  * ## Example Usage
  *
  * ```typescript
  * import * as pulumi from "@pulumi/pulumi";
  * import * as cloudflare from "@pulumi/cloudflare";
  *
- * // Challenge requests coming from known Tor exit nodes.
- * const torExitNodes = new cloudflare.AccessRule("tor_exit_nodes", {
- *     zoneId: "0da42c8d2132a9ddaf714f9e7c920711",
- *     notes: "Requests coming from known Tor exit nodes",
- *     mode: "challenge",
- *     configuration: {
- *         target: "country",
- *         value: "T1",
- *     },
- * });
- * // Allowlist requests coming from Antarctica, but only for single zone.
- * const antarctica = new cloudflare.AccessRule("antarctica", {
- *     zoneId: "0da42c8d2132a9ddaf714f9e7c920711",
- *     notes: "Requests coming from Antarctica",
- *     mode: "whitelist",
+ * const exampleAccessRule = new cloudflare.AccessRule("example_access_rule", {
  *     configuration: {
- *         target: "country",
- *         value: "AQ",
+ *         target: "ip",
+ *         value: "198.51.100.4",
  *     },
+ *     mode: "block",
+ *     zoneId: "zone_id",
+ *     notes: "This rule is enabled because of an event that occurred on date X.",
  * });
- * const config = new pulumi.Config();
- * const myOffice = config.getObject<Array<string>>("myOffice") || [
- *     "192.0.2.0/24",
- *     "198.51.100.0/24",
- *     "2001:db8::/56",
- * ];
- * const officeNetwork: cloudflare.AccessRule[] = [];
- * for (const range = {value: 0}; range.value < myOffice.length; range.value++) {
- *     officeNetwork.push(new cloudflare.AccessRule(`office_network-${range.value}`, {
- *         accountId: "f037e56e89293a057740de681ac9abbe",
- *         notes: "Requests coming from office network",
- *         mode: "whitelist",
- *         configuration: {
- *             target: "ip_range",
- *             value: myOffice[range.value],
- *         },
- *     }));
- * }
  * ```
  *
  * ## Import
  *
- * User level access rule import.
- *
- * ```sh
- * $ pulumi import cloudflare:index/accessRule:AccessRule default user/<user_id>/<rule_id>
- * ```
- *
- * Zone level access rule import.
- *
- * ```sh
- * $ pulumi import cloudflare:index/accessRule:AccessRule default zone/<zone_id>/<rule_id>
- * ```
- *
- * Account level access rule import.
- *
  * ```sh
- * $ pulumi import cloudflare:index/accessRule:AccessRule default account/<account_id>/<rule_id>
+ * $ pulumi import cloudflare:index/accessRule:AccessRule example '<{accounts|zones}/{account_id|zone_id}>/<rule_id>'
  * ```
  */
 class AccessRule extends pulumi.CustomResource {
@@ -105,9 +58,13 @@ class AccessRule extends pulumi.CustomResource {
         if (opts.id) {
             const state = argsOrState;
             resourceInputs["accountId"] = state ? state.accountId : undefined;
+            resourceInputs["allowedModes"] = state ? state.allowedModes : undefined;
             resourceInputs["configuration"] = state ? state.configuration : undefined;
+            resourceInputs["createdOn"] = state ? state.createdOn : undefined;
             resourceInputs["mode"] = state ? state.mode : undefined;
+            resourceInputs["modifiedOn"] = state ? state.modifiedOn : undefined;
             resourceInputs["notes"] = state ? state.notes : undefined;
+            resourceInputs["scope"] = state ? state.scope : undefined;
             resourceInputs["zoneId"] = state ? state.zoneId : undefined;
         }
         else {
@@ -123,6 +80,10 @@ class AccessRule extends pulumi.CustomResource {
             resourceInputs["mode"] = args ? args.mode : undefined;
             resourceInputs["notes"] = args ? args.notes : undefined;
             resourceInputs["zoneId"] = args ? args.zoneId : undefined;
+            resourceInputs["allowedModes"] = undefined /*out*/;
+            resourceInputs["createdOn"] = undefined /*out*/;
+            resourceInputs["modifiedOn"] = undefined /*out*/;
+            resourceInputs["scope"] = undefined /*out*/;
         }
         opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
         super(AccessRule.__pulumiType, name, resourceInputs, opts);

package/accessRule.js.map

@@ -1 +1 @@
-{"version":3,"file":"accessRule.js","sourceRoot":"","sources":["../accessRule.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsEG;AACH,MAAa,UAAW,SAAQ,MAAM,CAAC,cAAc;IACjD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAuB,EAAE,IAAmC;QACrH,OAAO,IAAI,UAAU,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACjE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,UAAU,CAAC,YAAY,CAAC;IAC3D,CAAC;IA+BD,YAAY,IAAY,EAAE,WAA8C,EAAE,IAAmC;QACzG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA0C,CAAC;YACzD,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/D;aAAM;YACH,MAAM,IAAI,GAAG,WAAyC,CAAC;YACvD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC1D,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;aAChE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;aACvD;YACD,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;SAC7D;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,UAAU,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC/D,CAAC;;AAnFL,gCAoFC;AAtEG,gBAAgB;AACO,uBAAY,GAAG,wCAAwC,CAAC"}
+{"version":3,"file":"accessRule.js","sourceRoot":"","sources":["../accessRule.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAa,UAAW,SAAQ,MAAM,CAAC,cAAc;IACjD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAuB,EAAE,IAAmC;QACrH,OAAO,IAAI,UAAU,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACjE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,UAAU,CAAC,YAAY,CAAC;IAC3D,CAAC;IAgDD,YAAY,IAAY,EAAE,WAA8C,EAAE,IAAmC;QACzG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA0C,CAAC;YACzD,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/D;aAAM;YACH,MAAM,IAAI,GAAG,WAAyC,CAAC;YACvD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC1D,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;aAChE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;aACvD;YACD,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,cAAc,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACnD,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChD,cAAc,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACjD,cAAc,CAAC,OAAO,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAC/C;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,UAAU,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC/D,CAAC;;AA5GL,gCA6GC;AA/FG,gBAAgB;AACO,uBAAY,GAAG,wCAAwC,CAAC"}

package/accessServiceToken.d.ts

@@ -1,21 +1,25 @@
 import * as pulumi from "@pulumi/pulumi";
 /**
- * Access Service Tokens are used for service-to-service communication
- * when an application is behind Cloudflare Access.
+ * ## Example Usage
  *
- * ## Import
- *
- * If you are importing an Access Service Token you will not have the
- *
- * client_secret available in the state for use. The client_secret is only
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as cloudflare from "@pulumi/cloudflare";
  *
- * available once, at creation. In most cases, it is better to just create a new
+ * const exampleZeroTrustAccessServiceToken = new cloudflare.ZeroTrustAccessServiceToken("example_zero_trust_access_service_token", {
+ *     name: "CI/CD token",
+ *     zoneId: "zone_id",
+ *     duration: "60m",
+ * });
+ * ```
  *
- * resource should you need to reference it in other resources.
+ * ## Import
  *
  * ```sh
- * $ pulumi import cloudflare:index/accessServiceToken:AccessServiceToken example <account_id>/<service_token_id>
+ * $ pulumi import cloudflare:index/accessServiceToken:AccessServiceToken example '<{accounts|zones}/{account_id|zone_id}>/<service_token_id>'
  * ```
+ *
+ * @deprecated cloudflare.index/accessservicetoken.AccessServiceToken has been deprecated in favor of cloudflare.index/zerotrustaccessservicetoken.ZeroTrustAccessServiceToken
  */
 export declare class AccessServiceToken extends pulumi.CustomResource {
     /**
@@ -34,32 +38,31 @@ export declare class AccessServiceToken extends pulumi.CustomResource {
      */
     static isInstance(obj: any): obj is AccessServiceToken;
     /**
-     * The account identifier to target for the resource. Conflicts with `zoneId`.
+     * The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
      */
     readonly accountId: pulumi.Output<string | undefined>;
     /**
-     * Client ID associated with the Service Token. **Modifying this attribute will force creation of a new resource.**
+     * The Client ID for the service token. Access will check for this value in the `CF-Access-Client-ID` request header.
      */
     readonly clientId: pulumi.Output<string>;
     /**
-     * A secret for interacting with Access protocols. **Modifying this attribute will force creation of a new resource.**
+     * The Client Secret for the service token. Access will check for this value in the `CF-Access-Client-Secret` request header.
      */
     readonly clientSecret: pulumi.Output<string>;
+    readonly createdAt: pulumi.Output<string>;
     /**
-     * Length of time the service token is valid for. Available values: `8760h`, `17520h`, `43800h`, `87600h`, `forever`.
+     * The duration for how long the service token will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. The default is 1 year in hours (8760h).
      */
     readonly duration: pulumi.Output<string>;
-    /**
-     * Date when the token expires.
-     */
     readonly expiresAt: pulumi.Output<string>;
-    readonly minDaysForRenewal: pulumi.Output<number | undefined>;
+    readonly lastSeenAt: pulumi.Output<string>;
     /**
-     * Friendly name of the token's intent.
+     * The name of the service token.
      */
     readonly name: pulumi.Output<string>;
+    readonly updatedAt: pulumi.Output<string>;
     /**
-     * The zone identifier to target for the resource. Conflicts with `accountId`.
+     * The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
      */
     readonly zoneId: pulumi.Output<string | undefined>;
     /**
@@ -69,6 +72,7 @@ export declare class AccessServiceToken extends pulumi.CustomResource {
      * @param args The arguments to use to populate this resource's properties.
      * @param opts A bag of options that control this resource's behavior.
      */
+    /** @deprecated cloudflare.index/accessservicetoken.AccessServiceToken has been deprecated in favor of cloudflare.index/zerotrustaccessservicetoken.ZeroTrustAccessServiceToken */
     constructor(name: string, args: AccessServiceTokenArgs, opts?: pulumi.CustomResourceOptions);
 }
 /**
@@ -76,32 +80,31 @@ export declare class AccessServiceToken extends pulumi.CustomResource {
  */
 export interface AccessServiceTokenState {
     /**
-     * The account identifier to target for the resource. Conflicts with `zoneId`.
+     * The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
      */
     accountId?: pulumi.Input<string>;
     /**
-     * Client ID associated with the Service Token. **Modifying this attribute will force creation of a new resource.**
+     * The Client ID for the service token. Access will check for this value in the `CF-Access-Client-ID` request header.
      */
     clientId?: pulumi.Input<string>;
     /**
-     * A secret for interacting with Access protocols. **Modifying this attribute will force creation of a new resource.**
+     * The Client Secret for the service token. Access will check for this value in the `CF-Access-Client-Secret` request header.
      */
     clientSecret?: pulumi.Input<string>;
+    createdAt?: pulumi.Input<string>;
     /**
-     * Length of time the service token is valid for. Available values: `8760h`, `17520h`, `43800h`, `87600h`, `forever`.
+     * The duration for how long the service token will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. The default is 1 year in hours (8760h).
      */
     duration?: pulumi.Input<string>;
-    /**
-     * Date when the token expires.
-     */
     expiresAt?: pulumi.Input<string>;
-    minDaysForRenewal?: pulumi.Input<number>;
+    lastSeenAt?: pulumi.Input<string>;
     /**
-     * Friendly name of the token's intent.
+     * The name of the service token.
      */
     name?: pulumi.Input<string>;
+    updatedAt?: pulumi.Input<string>;
     /**
-     * The zone identifier to target for the resource. Conflicts with `accountId`.
+     * The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
      */
     zoneId?: pulumi.Input<string>;
 }
@@ -110,20 +113,19 @@ export interface AccessServiceTokenState {
  */
 export interface AccessServiceTokenArgs {
     /**
-     * The account identifier to target for the resource. Conflicts with `zoneId`.
+     * The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
      */
     accountId?: pulumi.Input<string>;
     /**
-     * Length of time the service token is valid for. Available values: `8760h`, `17520h`, `43800h`, `87600h`, `forever`.
+     * The duration for how long the service token will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. The default is 1 year in hours (8760h).
      */
     duration?: pulumi.Input<string>;
-    minDaysForRenewal?: pulumi.Input<number>;
     /**
-     * Friendly name of the token's intent.
+     * The name of the service token.
      */
     name: pulumi.Input<string>;
     /**
-     * The zone identifier to target for the resource. Conflicts with `accountId`.
+     * The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
      */
     zoneId?: pulumi.Input<string>;
 }

package/accessServiceToken.js

@@ -6,22 +6,26 @@ exports.AccessServiceToken = void 0;
 const pulumi = require("@pulumi/pulumi");
 const utilities = require("./utilities");
 /**
- * Access Service Tokens are used for service-to-service communication
- * when an application is behind Cloudflare Access.
+ * ## Example Usage
  *
- * ## Import
- *
- * If you are importing an Access Service Token you will not have the
- *
- * client_secret available in the state for use. The client_secret is only
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as cloudflare from "@pulumi/cloudflare";
  *
- * available once, at creation. In most cases, it is better to just create a new
+ * const exampleZeroTrustAccessServiceToken = new cloudflare.ZeroTrustAccessServiceToken("example_zero_trust_access_service_token", {
+ *     name: "CI/CD token",
+ *     zoneId: "zone_id",
+ *     duration: "60m",
+ * });
+ * ```
  *
- * resource should you need to reference it in other resources.
+ * ## Import
  *
  * ```sh
- * $ pulumi import cloudflare:index/accessServiceToken:AccessServiceToken example <account_id>/<service_token_id>
+ * $ pulumi import cloudflare:index/accessServiceToken:AccessServiceToken example '<{accounts|zones}/{account_id|zone_id}>/<service_token_id>'
  * ```
+ *
+ * @deprecated cloudflare.index/accessservicetoken.AccessServiceToken has been deprecated in favor of cloudflare.index/zerotrustaccessservicetoken.ZeroTrustAccessServiceToken
  */
 class AccessServiceToken extends pulumi.CustomResource {
     /**
@@ -34,6 +38,7 @@ class AccessServiceToken extends pulumi.CustomResource {
      * @param opts Optional settings to control the behavior of the CustomResource.
      */
     static get(name, id, state, opts) {
+        pulumi.log.warn("AccessServiceToken is deprecated: cloudflare.index/accessservicetoken.AccessServiceToken has been deprecated in favor of cloudflare.index/zerotrustaccessservicetoken.ZeroTrustAccessServiceToken");
         return new AccessServiceToken(name, state, Object.assign(Object.assign({}, opts), { id: id }));
     }
     /**
@@ -46,7 +51,9 @@ class AccessServiceToken extends pulumi.CustomResource {
         }
         return obj['__pulumiType'] === AccessServiceToken.__pulumiType;
     }
+    /** @deprecated cloudflare.index/accessservicetoken.AccessServiceToken has been deprecated in favor of cloudflare.index/zerotrustaccessservicetoken.ZeroTrustAccessServiceToken */
     constructor(name, argsOrState, opts) {
+        pulumi.log.warn("AccessServiceToken is deprecated: cloudflare.index/accessservicetoken.AccessServiceToken has been deprecated in favor of cloudflare.index/zerotrustaccessservicetoken.ZeroTrustAccessServiceToken");
         let resourceInputs = {};
         opts = opts || {};
         if (opts.id) {
@@ -54,10 +61,12 @@ class AccessServiceToken extends pulumi.CustomResource {
             resourceInputs["accountId"] = state ? state.accountId : undefined;
             resourceInputs["clientId"] = state ? state.clientId : undefined;
             resourceInputs["clientSecret"] = state ? state.clientSecret : undefined;
+            resourceInputs["createdAt"] = state ? state.createdAt : undefined;
             resourceInputs["duration"] = state ? state.duration : undefined;
             resourceInputs["expiresAt"] = state ? state.expiresAt : undefined;
-            resourceInputs["minDaysForRenewal"] = state ? state.minDaysForRenewal : undefined;
+            resourceInputs["lastSeenAt"] = state ? state.lastSeenAt : undefined;
             resourceInputs["name"] = state ? state.name : undefined;
+            resourceInputs["updatedAt"] = state ? state.updatedAt : undefined;
             resourceInputs["zoneId"] = state ? state.zoneId : undefined;
         }
         else {
@@ -67,14 +76,18 @@ class AccessServiceToken extends pulumi.CustomResource {
             }
             resourceInputs["accountId"] = args ? args.accountId : undefined;
             resourceInputs["duration"] = args ? args.duration : undefined;
-            resourceInputs["minDaysForRenewal"] = args ? args.minDaysForRenewal : undefined;
             resourceInputs["name"] = args ? args.name : undefined;
             resourceInputs["zoneId"] = args ? args.zoneId : undefined;
             resourceInputs["clientId"] = undefined /*out*/;
             resourceInputs["clientSecret"] = undefined /*out*/;
+            resourceInputs["createdAt"] = undefined /*out*/;
             resourceInputs["expiresAt"] = undefined /*out*/;
+            resourceInputs["lastSeenAt"] = undefined /*out*/;
+            resourceInputs["updatedAt"] = undefined /*out*/;
         }
         opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        const aliasOpts = { aliases: [{ type: "cloudflare:index/accessServiceToken:AccessServiceToken" }] };
+        opts = pulumi.mergeOptions(opts, aliasOpts);
         const secretOpts = { additionalSecretOutputs: ["clientSecret"] };
         opts = pulumi.mergeOptions(opts, secretOpts);
         super(AccessServiceToken.__pulumiType, name, resourceInputs, opts);

package/accessServiceToken.js.map

@@ -1 +1 @@
-{"version":3,"file":"accessServiceToken.js","sourceRoot":"","sources":["../accessServiceToken.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAa,kBAAmB,SAAQ,MAAM,CAAC,cAAc;IACzD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA+B,EAAE,IAAmC;QAC7H,OAAO,IAAI,kBAAkB,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACzE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,kBAAkB,CAAC,YAAY,CAAC;IACnE,CAAC;IAwCD,YAAY,IAAY,EAAE,WAA8D,EAAE,IAAmC;QACzH,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAkD,CAAC;YACjE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/D;aAAM;YACH,MAAM,IAAI,GAAG,WAAiD,CAAC;YAC/D,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;aACvD;YACD,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC/C,cAAc,CAAC,cAAc,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACnD,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACnD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,EAAE,uBAAuB,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC;QACjE,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7C,KAAK,CAAC,kBAAkB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACvE,CAAC;;AAjGL,gDAkGC;AApFG,gBAAgB;AACO,+BAAY,GAAG,wDAAwD,CAAC"}
+{"version":3,"file":"accessServiceToken.js","sourceRoot":"","sources":["../accessServiceToken.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAa,kBAAmB,SAAQ,MAAM,CAAC,cAAc;IACzD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA+B,EAAE,IAAmC;QAC7H,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,mMAAmM,CAAC,CAAA;QACpN,OAAO,IAAI,kBAAkB,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACzE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,kBAAkB,CAAC,YAAY,CAAC;IACnE,CAAC;IAwCD,kLAAkL;IAClL,YAAY,IAAY,EAAE,WAA8D,EAAE,IAAmC;QACzH,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,mMAAmM,CAAC,CAAA;QACpN,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAkD,CAAC;YACjE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/D;aAAM;YACH,MAAM,IAAI,GAAG,WAAiD,CAAC;YAC/D,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;aACvD;YACD,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC/C,cAAc,CAAC,cAAc,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACnD,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChD,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChD,cAAc,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACjD,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACnD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,SAAS,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,wDAAwD,EAAE,CAAC,EAAE,CAAC;QACpG,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC5C,MAAM,UAAU,GAAG,EAAE,uBAAuB,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC;QACjE,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7C,KAAK,CAAC,kBAAkB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACvE,CAAC;;AA1GL,gDA2GC;AA5FG,gBAAgB;AACO,+BAAY,GAAG,wDAAwD,CAAC"}