@rstreamlabs/tunnels 1.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -0,0 +1,4780 @@
1
+ import { RstreamCredentials, TURNCredentials, ClientCredentials } from '@rstreamlabs/rstream';
2
+ import * as z from 'zod';
3
+ import { JwtPayload } from 'jsonwebtoken';
4
+
5
+ declare const StringFilter: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
6
+ exact: z.ZodString;
7
+ }, z.core.$strip>, z.ZodObject<{
8
+ oneof: z.ZodArray<z.ZodString>;
9
+ }, z.core.$strip>, z.ZodObject<{
10
+ regex: z.ZodString;
11
+ }, z.core.$strip>]>;
12
+ type Schema = z.core.SomeType;
13
+ type Shape = z.ZodRawShape;
14
+ type RecordKey = z.core.$ZodRecordKey;
15
+ type TransformProps<T extends Schema> = T extends z.ZodOptional<infer U extends Schema> ? TransformProps<U> : T extends z.ZodString ? z.ZodOptional<typeof StringFilter> : T extends z.ZodRecord<infer K extends RecordKey, infer V extends Schema> ? z.ZodOptional<z.ZodRecord<K, TransformProps<V>>> : z.ZodOptional<T>;
16
+ type Logical<T> = T | {
17
+ AND: Logical<T>[];
18
+ } | {
19
+ OR: Logical<T>[];
20
+ };
21
+ type FilterObject<S extends Shape> = z.output<z.ZodObject<{
22
+ [K in keyof S]: TransformProps<S[K]>;
23
+ }>>;
24
+ type FilterNode<S extends Shape> = Logical<FilterObject<S>>;
25
+
26
+ declare const authTokenPermissionsSchema: z.ZodArray<z.ZodString>;
27
+ declare const authTokenTunnelsScopesSchema: z.ZodObject<{
28
+ create: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
29
+ filters: z.ZodOptional<z.ZodType<FilterNode<{
30
+ type: z.ZodOptional<z.ZodEnum<{
31
+ bytestream: "bytestream";
32
+ datagram: "datagram";
33
+ }>>;
34
+ name: z.ZodOptional<z.ZodString>;
35
+ publish: z.ZodOptional<z.ZodBoolean>;
36
+ protocol: z.ZodOptional<z.ZodEnum<{
37
+ tls: "tls";
38
+ dtls: "dtls";
39
+ quic: "quic";
40
+ http: "http";
41
+ }>>;
42
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
43
+ geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
44
+ trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
45
+ host: z.ZodOptional<z.ZodString>;
46
+ tls_mode: z.ZodOptional<z.ZodEnum<{
47
+ passthrough: "passthrough";
48
+ terminated: "terminated";
49
+ }>>;
50
+ tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
51
+ tls_min_version: z.ZodOptional<z.ZodString>;
52
+ tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
53
+ mtls: z.ZodOptional<z.ZodBoolean>;
54
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
55
+ http_version: z.ZodOptional<z.ZodEnum<{
56
+ "http/1.1": "http/1.1";
57
+ h2: "h2";
58
+ h2c: "h2c";
59
+ h3: "h3";
60
+ }>>;
61
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
62
+ token_auth: z.ZodOptional<z.ZodBoolean>;
63
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
64
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
65
+ }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
66
+ type: z.ZodOptional<z.ZodEnum<{
67
+ bytestream: "bytestream";
68
+ datagram: "datagram";
69
+ }>>;
70
+ name: z.ZodOptional<z.ZodString>;
71
+ publish: z.ZodOptional<z.ZodBoolean>;
72
+ protocol: z.ZodOptional<z.ZodEnum<{
73
+ tls: "tls";
74
+ dtls: "dtls";
75
+ quic: "quic";
76
+ http: "http";
77
+ }>>;
78
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
79
+ geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
80
+ trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
81
+ host: z.ZodOptional<z.ZodString>;
82
+ tls_mode: z.ZodOptional<z.ZodEnum<{
83
+ passthrough: "passthrough";
84
+ terminated: "terminated";
85
+ }>>;
86
+ tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
87
+ tls_min_version: z.ZodOptional<z.ZodString>;
88
+ tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
89
+ mtls: z.ZodOptional<z.ZodBoolean>;
90
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
91
+ http_version: z.ZodOptional<z.ZodEnum<{
92
+ "http/1.1": "http/1.1";
93
+ h2: "h2";
94
+ h2c: "h2c";
95
+ h3: "h3";
96
+ }>>;
97
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
98
+ token_auth: z.ZodOptional<z.ZodBoolean>;
99
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
100
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
101
+ }>, unknown>>>;
102
+ }, z.core.$strip>]>>;
103
+ connect: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
104
+ filters: z.ZodOptional<z.ZodType<FilterNode<{
105
+ client_id: z.ZodString;
106
+ user_id: z.ZodOptional<z.ZodString>;
107
+ workspace_id: z.ZodOptional<z.ZodString>;
108
+ project_id: z.ZodOptional<z.ZodString>;
109
+ cluster_id: z.ZodOptional<z.ZodString>;
110
+ plan: z.ZodOptional<z.ZodString>;
111
+ provider: z.ZodOptional<z.ZodString>;
112
+ region: z.ZodOptional<z.ZodString>;
113
+ status: z.ZodEnum<{
114
+ online: "online";
115
+ offline: "offline";
116
+ }>;
117
+ id: z.ZodString;
118
+ creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
119
+ name: z.ZodOptional<z.ZodString>;
120
+ type: z.ZodOptional<z.ZodEnum<{
121
+ bytestream: "bytestream";
122
+ datagram: "datagram";
123
+ }>>;
124
+ publish: z.ZodOptional<z.ZodBoolean>;
125
+ protocol: z.ZodOptional<z.ZodEnum<{
126
+ tls: "tls";
127
+ dtls: "dtls";
128
+ quic: "quic";
129
+ http: "http";
130
+ }>>;
131
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
132
+ geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
133
+ trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
134
+ host: z.ZodOptional<z.ZodString>;
135
+ tls_mode: z.ZodOptional<z.ZodEnum<{
136
+ passthrough: "passthrough";
137
+ terminated: "terminated";
138
+ }>>;
139
+ tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
140
+ tls_min_version: z.ZodOptional<z.ZodString>;
141
+ tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
142
+ mtls: z.ZodOptional<z.ZodBoolean>;
143
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
144
+ http_version: z.ZodOptional<z.ZodEnum<{
145
+ "http/1.1": "http/1.1";
146
+ h2: "h2";
147
+ h2c: "h2c";
148
+ h3: "h3";
149
+ }>>;
150
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
151
+ token_auth: z.ZodOptional<z.ZodBoolean>;
152
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
153
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
154
+ }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
155
+ client_id: z.ZodString;
156
+ user_id: z.ZodOptional<z.ZodString>;
157
+ workspace_id: z.ZodOptional<z.ZodString>;
158
+ project_id: z.ZodOptional<z.ZodString>;
159
+ cluster_id: z.ZodOptional<z.ZodString>;
160
+ plan: z.ZodOptional<z.ZodString>;
161
+ provider: z.ZodOptional<z.ZodString>;
162
+ region: z.ZodOptional<z.ZodString>;
163
+ status: z.ZodEnum<{
164
+ online: "online";
165
+ offline: "offline";
166
+ }>;
167
+ id: z.ZodString;
168
+ creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
169
+ name: z.ZodOptional<z.ZodString>;
170
+ type: z.ZodOptional<z.ZodEnum<{
171
+ bytestream: "bytestream";
172
+ datagram: "datagram";
173
+ }>>;
174
+ publish: z.ZodOptional<z.ZodBoolean>;
175
+ protocol: z.ZodOptional<z.ZodEnum<{
176
+ tls: "tls";
177
+ dtls: "dtls";
178
+ quic: "quic";
179
+ http: "http";
180
+ }>>;
181
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
182
+ geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
183
+ trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
184
+ host: z.ZodOptional<z.ZodString>;
185
+ tls_mode: z.ZodOptional<z.ZodEnum<{
186
+ passthrough: "passthrough";
187
+ terminated: "terminated";
188
+ }>>;
189
+ tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
190
+ tls_min_version: z.ZodOptional<z.ZodString>;
191
+ tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
192
+ mtls: z.ZodOptional<z.ZodBoolean>;
193
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
194
+ http_version: z.ZodOptional<z.ZodEnum<{
195
+ "http/1.1": "http/1.1";
196
+ h2: "h2";
197
+ h2c: "h2c";
198
+ h3: "h3";
199
+ }>>;
200
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
201
+ token_auth: z.ZodOptional<z.ZodBoolean>;
202
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
203
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
204
+ }>, unknown>>>;
205
+ params: z.ZodOptional<z.ZodType<FilterNode<{
206
+ path: z.ZodOptional<z.ZodString>;
207
+ }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
208
+ path: z.ZodOptional<z.ZodString>;
209
+ }>, unknown>>>;
210
+ }, z.core.$strip>]>>;
211
+ list: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
212
+ filters: z.ZodOptional<z.ZodType<FilterNode<{
213
+ client_id: z.ZodString;
214
+ user_id: z.ZodOptional<z.ZodString>;
215
+ workspace_id: z.ZodOptional<z.ZodString>;
216
+ project_id: z.ZodOptional<z.ZodString>;
217
+ cluster_id: z.ZodOptional<z.ZodString>;
218
+ plan: z.ZodOptional<z.ZodString>;
219
+ provider: z.ZodOptional<z.ZodString>;
220
+ region: z.ZodOptional<z.ZodString>;
221
+ status: z.ZodEnum<{
222
+ online: "online";
223
+ offline: "offline";
224
+ }>;
225
+ id: z.ZodString;
226
+ creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
227
+ name: z.ZodOptional<z.ZodString>;
228
+ type: z.ZodOptional<z.ZodEnum<{
229
+ bytestream: "bytestream";
230
+ datagram: "datagram";
231
+ }>>;
232
+ publish: z.ZodOptional<z.ZodBoolean>;
233
+ protocol: z.ZodOptional<z.ZodEnum<{
234
+ tls: "tls";
235
+ dtls: "dtls";
236
+ quic: "quic";
237
+ http: "http";
238
+ }>>;
239
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
240
+ geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
241
+ trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
242
+ host: z.ZodOptional<z.ZodString>;
243
+ tls_mode: z.ZodOptional<z.ZodEnum<{
244
+ passthrough: "passthrough";
245
+ terminated: "terminated";
246
+ }>>;
247
+ tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
248
+ tls_min_version: z.ZodOptional<z.ZodString>;
249
+ tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
250
+ mtls: z.ZodOptional<z.ZodBoolean>;
251
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
252
+ http_version: z.ZodOptional<z.ZodEnum<{
253
+ "http/1.1": "http/1.1";
254
+ h2: "h2";
255
+ h2c: "h2c";
256
+ h3: "h3";
257
+ }>>;
258
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
259
+ token_auth: z.ZodOptional<z.ZodBoolean>;
260
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
261
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
262
+ }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
263
+ client_id: z.ZodString;
264
+ user_id: z.ZodOptional<z.ZodString>;
265
+ workspace_id: z.ZodOptional<z.ZodString>;
266
+ project_id: z.ZodOptional<z.ZodString>;
267
+ cluster_id: z.ZodOptional<z.ZodString>;
268
+ plan: z.ZodOptional<z.ZodString>;
269
+ provider: z.ZodOptional<z.ZodString>;
270
+ region: z.ZodOptional<z.ZodString>;
271
+ status: z.ZodEnum<{
272
+ online: "online";
273
+ offline: "offline";
274
+ }>;
275
+ id: z.ZodString;
276
+ creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
277
+ name: z.ZodOptional<z.ZodString>;
278
+ type: z.ZodOptional<z.ZodEnum<{
279
+ bytestream: "bytestream";
280
+ datagram: "datagram";
281
+ }>>;
282
+ publish: z.ZodOptional<z.ZodBoolean>;
283
+ protocol: z.ZodOptional<z.ZodEnum<{
284
+ tls: "tls";
285
+ dtls: "dtls";
286
+ quic: "quic";
287
+ http: "http";
288
+ }>>;
289
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
290
+ geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
291
+ trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
292
+ host: z.ZodOptional<z.ZodString>;
293
+ tls_mode: z.ZodOptional<z.ZodEnum<{
294
+ passthrough: "passthrough";
295
+ terminated: "terminated";
296
+ }>>;
297
+ tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
298
+ tls_min_version: z.ZodOptional<z.ZodString>;
299
+ tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
300
+ mtls: z.ZodOptional<z.ZodBoolean>;
301
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
302
+ http_version: z.ZodOptional<z.ZodEnum<{
303
+ "http/1.1": "http/1.1";
304
+ h2: "h2";
305
+ h2c: "h2c";
306
+ h3: "h3";
307
+ }>>;
308
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
309
+ token_auth: z.ZodOptional<z.ZodBoolean>;
310
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
311
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
312
+ }>, unknown>>>;
313
+ select: z.ZodOptional<z.ZodObject<{
314
+ client_id: z.ZodOptional<z.ZodBoolean>;
315
+ user_id: z.ZodOptional<z.ZodBoolean>;
316
+ workspace_id: z.ZodOptional<z.ZodBoolean>;
317
+ project_id: z.ZodOptional<z.ZodBoolean>;
318
+ cluster_id: z.ZodOptional<z.ZodBoolean>;
319
+ plan: z.ZodOptional<z.ZodBoolean>;
320
+ provider: z.ZodOptional<z.ZodBoolean>;
321
+ region: z.ZodOptional<z.ZodBoolean>;
322
+ status: z.ZodOptional<z.ZodBoolean>;
323
+ id: z.ZodOptional<z.ZodBoolean>;
324
+ creation_date: z.ZodOptional<z.ZodBoolean>;
325
+ name: z.ZodOptional<z.ZodBoolean>;
326
+ type: z.ZodOptional<z.ZodBoolean>;
327
+ publish: z.ZodOptional<z.ZodBoolean>;
328
+ protocol: z.ZodOptional<z.ZodBoolean>;
329
+ labels: z.ZodOptional<z.ZodBoolean>;
330
+ geo_ip: z.ZodOptional<z.ZodBoolean>;
331
+ trusted_ips: z.ZodOptional<z.ZodBoolean>;
332
+ host: z.ZodOptional<z.ZodBoolean>;
333
+ tls_mode: z.ZodOptional<z.ZodBoolean>;
334
+ tls_alpns: z.ZodOptional<z.ZodBoolean>;
335
+ tls_min_version: z.ZodOptional<z.ZodBoolean>;
336
+ tls_ciphers: z.ZodOptional<z.ZodBoolean>;
337
+ mtls: z.ZodOptional<z.ZodBoolean>;
338
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodBoolean>;
339
+ http_version: z.ZodOptional<z.ZodBoolean>;
340
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
341
+ token_auth: z.ZodOptional<z.ZodBoolean>;
342
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
343
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
344
+ }, z.core.$strip>>;
345
+ }, z.core.$strip>]>>;
346
+ }, z.core.$strip>;
347
+ declare const authTokenScopesSchema: z.ZodObject<{
348
+ tunnels: z.ZodOptional<z.ZodObject<{
349
+ create: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
350
+ filters: z.ZodOptional<z.ZodType<FilterNode<{
351
+ type: z.ZodOptional<z.ZodEnum<{
352
+ bytestream: "bytestream";
353
+ datagram: "datagram";
354
+ }>>;
355
+ name: z.ZodOptional<z.ZodString>;
356
+ publish: z.ZodOptional<z.ZodBoolean>;
357
+ protocol: z.ZodOptional<z.ZodEnum<{
358
+ tls: "tls";
359
+ dtls: "dtls";
360
+ quic: "quic";
361
+ http: "http";
362
+ }>>;
363
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
364
+ geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
365
+ trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
366
+ host: z.ZodOptional<z.ZodString>;
367
+ tls_mode: z.ZodOptional<z.ZodEnum<{
368
+ passthrough: "passthrough";
369
+ terminated: "terminated";
370
+ }>>;
371
+ tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
372
+ tls_min_version: z.ZodOptional<z.ZodString>;
373
+ tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
374
+ mtls: z.ZodOptional<z.ZodBoolean>;
375
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
376
+ http_version: z.ZodOptional<z.ZodEnum<{
377
+ "http/1.1": "http/1.1";
378
+ h2: "h2";
379
+ h2c: "h2c";
380
+ h3: "h3";
381
+ }>>;
382
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
383
+ token_auth: z.ZodOptional<z.ZodBoolean>;
384
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
385
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
386
+ }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
387
+ type: z.ZodOptional<z.ZodEnum<{
388
+ bytestream: "bytestream";
389
+ datagram: "datagram";
390
+ }>>;
391
+ name: z.ZodOptional<z.ZodString>;
392
+ publish: z.ZodOptional<z.ZodBoolean>;
393
+ protocol: z.ZodOptional<z.ZodEnum<{
394
+ tls: "tls";
395
+ dtls: "dtls";
396
+ quic: "quic";
397
+ http: "http";
398
+ }>>;
399
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
400
+ geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
401
+ trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
402
+ host: z.ZodOptional<z.ZodString>;
403
+ tls_mode: z.ZodOptional<z.ZodEnum<{
404
+ passthrough: "passthrough";
405
+ terminated: "terminated";
406
+ }>>;
407
+ tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
408
+ tls_min_version: z.ZodOptional<z.ZodString>;
409
+ tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
410
+ mtls: z.ZodOptional<z.ZodBoolean>;
411
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
412
+ http_version: z.ZodOptional<z.ZodEnum<{
413
+ "http/1.1": "http/1.1";
414
+ h2: "h2";
415
+ h2c: "h2c";
416
+ h3: "h3";
417
+ }>>;
418
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
419
+ token_auth: z.ZodOptional<z.ZodBoolean>;
420
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
421
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
422
+ }>, unknown>>>;
423
+ }, z.core.$strip>]>>;
424
+ connect: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
425
+ filters: z.ZodOptional<z.ZodType<FilterNode<{
426
+ client_id: z.ZodString;
427
+ user_id: z.ZodOptional<z.ZodString>;
428
+ workspace_id: z.ZodOptional<z.ZodString>;
429
+ project_id: z.ZodOptional<z.ZodString>;
430
+ cluster_id: z.ZodOptional<z.ZodString>;
431
+ plan: z.ZodOptional<z.ZodString>;
432
+ provider: z.ZodOptional<z.ZodString>;
433
+ region: z.ZodOptional<z.ZodString>;
434
+ status: z.ZodEnum<{
435
+ online: "online";
436
+ offline: "offline";
437
+ }>;
438
+ id: z.ZodString;
439
+ creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
440
+ name: z.ZodOptional<z.ZodString>;
441
+ type: z.ZodOptional<z.ZodEnum<{
442
+ bytestream: "bytestream";
443
+ datagram: "datagram";
444
+ }>>;
445
+ publish: z.ZodOptional<z.ZodBoolean>;
446
+ protocol: z.ZodOptional<z.ZodEnum<{
447
+ tls: "tls";
448
+ dtls: "dtls";
449
+ quic: "quic";
450
+ http: "http";
451
+ }>>;
452
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
453
+ geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
454
+ trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
455
+ host: z.ZodOptional<z.ZodString>;
456
+ tls_mode: z.ZodOptional<z.ZodEnum<{
457
+ passthrough: "passthrough";
458
+ terminated: "terminated";
459
+ }>>;
460
+ tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
461
+ tls_min_version: z.ZodOptional<z.ZodString>;
462
+ tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
463
+ mtls: z.ZodOptional<z.ZodBoolean>;
464
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
465
+ http_version: z.ZodOptional<z.ZodEnum<{
466
+ "http/1.1": "http/1.1";
467
+ h2: "h2";
468
+ h2c: "h2c";
469
+ h3: "h3";
470
+ }>>;
471
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
472
+ token_auth: z.ZodOptional<z.ZodBoolean>;
473
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
474
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
475
+ }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
476
+ client_id: z.ZodString;
477
+ user_id: z.ZodOptional<z.ZodString>;
478
+ workspace_id: z.ZodOptional<z.ZodString>;
479
+ project_id: z.ZodOptional<z.ZodString>;
480
+ cluster_id: z.ZodOptional<z.ZodString>;
481
+ plan: z.ZodOptional<z.ZodString>;
482
+ provider: z.ZodOptional<z.ZodString>;
483
+ region: z.ZodOptional<z.ZodString>;
484
+ status: z.ZodEnum<{
485
+ online: "online";
486
+ offline: "offline";
487
+ }>;
488
+ id: z.ZodString;
489
+ creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
490
+ name: z.ZodOptional<z.ZodString>;
491
+ type: z.ZodOptional<z.ZodEnum<{
492
+ bytestream: "bytestream";
493
+ datagram: "datagram";
494
+ }>>;
495
+ publish: z.ZodOptional<z.ZodBoolean>;
496
+ protocol: z.ZodOptional<z.ZodEnum<{
497
+ tls: "tls";
498
+ dtls: "dtls";
499
+ quic: "quic";
500
+ http: "http";
501
+ }>>;
502
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
503
+ geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
504
+ trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
505
+ host: z.ZodOptional<z.ZodString>;
506
+ tls_mode: z.ZodOptional<z.ZodEnum<{
507
+ passthrough: "passthrough";
508
+ terminated: "terminated";
509
+ }>>;
510
+ tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
511
+ tls_min_version: z.ZodOptional<z.ZodString>;
512
+ tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
513
+ mtls: z.ZodOptional<z.ZodBoolean>;
514
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
515
+ http_version: z.ZodOptional<z.ZodEnum<{
516
+ "http/1.1": "http/1.1";
517
+ h2: "h2";
518
+ h2c: "h2c";
519
+ h3: "h3";
520
+ }>>;
521
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
522
+ token_auth: z.ZodOptional<z.ZodBoolean>;
523
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
524
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
525
+ }>, unknown>>>;
526
+ params: z.ZodOptional<z.ZodType<FilterNode<{
527
+ path: z.ZodOptional<z.ZodString>;
528
+ }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
529
+ path: z.ZodOptional<z.ZodString>;
530
+ }>, unknown>>>;
531
+ }, z.core.$strip>]>>;
532
+ list: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
533
+ filters: z.ZodOptional<z.ZodType<FilterNode<{
534
+ client_id: z.ZodString;
535
+ user_id: z.ZodOptional<z.ZodString>;
536
+ workspace_id: z.ZodOptional<z.ZodString>;
537
+ project_id: z.ZodOptional<z.ZodString>;
538
+ cluster_id: z.ZodOptional<z.ZodString>;
539
+ plan: z.ZodOptional<z.ZodString>;
540
+ provider: z.ZodOptional<z.ZodString>;
541
+ region: z.ZodOptional<z.ZodString>;
542
+ status: z.ZodEnum<{
543
+ online: "online";
544
+ offline: "offline";
545
+ }>;
546
+ id: z.ZodString;
547
+ creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
548
+ name: z.ZodOptional<z.ZodString>;
549
+ type: z.ZodOptional<z.ZodEnum<{
550
+ bytestream: "bytestream";
551
+ datagram: "datagram";
552
+ }>>;
553
+ publish: z.ZodOptional<z.ZodBoolean>;
554
+ protocol: z.ZodOptional<z.ZodEnum<{
555
+ tls: "tls";
556
+ dtls: "dtls";
557
+ quic: "quic";
558
+ http: "http";
559
+ }>>;
560
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
561
+ geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
562
+ trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
563
+ host: z.ZodOptional<z.ZodString>;
564
+ tls_mode: z.ZodOptional<z.ZodEnum<{
565
+ passthrough: "passthrough";
566
+ terminated: "terminated";
567
+ }>>;
568
+ tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
569
+ tls_min_version: z.ZodOptional<z.ZodString>;
570
+ tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
571
+ mtls: z.ZodOptional<z.ZodBoolean>;
572
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
573
+ http_version: z.ZodOptional<z.ZodEnum<{
574
+ "http/1.1": "http/1.1";
575
+ h2: "h2";
576
+ h2c: "h2c";
577
+ h3: "h3";
578
+ }>>;
579
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
580
+ token_auth: z.ZodOptional<z.ZodBoolean>;
581
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
582
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
583
+ }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
584
+ client_id: z.ZodString;
585
+ user_id: z.ZodOptional<z.ZodString>;
586
+ workspace_id: z.ZodOptional<z.ZodString>;
587
+ project_id: z.ZodOptional<z.ZodString>;
588
+ cluster_id: z.ZodOptional<z.ZodString>;
589
+ plan: z.ZodOptional<z.ZodString>;
590
+ provider: z.ZodOptional<z.ZodString>;
591
+ region: z.ZodOptional<z.ZodString>;
592
+ status: z.ZodEnum<{
593
+ online: "online";
594
+ offline: "offline";
595
+ }>;
596
+ id: z.ZodString;
597
+ creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
598
+ name: z.ZodOptional<z.ZodString>;
599
+ type: z.ZodOptional<z.ZodEnum<{
600
+ bytestream: "bytestream";
601
+ datagram: "datagram";
602
+ }>>;
603
+ publish: z.ZodOptional<z.ZodBoolean>;
604
+ protocol: z.ZodOptional<z.ZodEnum<{
605
+ tls: "tls";
606
+ dtls: "dtls";
607
+ quic: "quic";
608
+ http: "http";
609
+ }>>;
610
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
611
+ geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
612
+ trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
613
+ host: z.ZodOptional<z.ZodString>;
614
+ tls_mode: z.ZodOptional<z.ZodEnum<{
615
+ passthrough: "passthrough";
616
+ terminated: "terminated";
617
+ }>>;
618
+ tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
619
+ tls_min_version: z.ZodOptional<z.ZodString>;
620
+ tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
621
+ mtls: z.ZodOptional<z.ZodBoolean>;
622
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
623
+ http_version: z.ZodOptional<z.ZodEnum<{
624
+ "http/1.1": "http/1.1";
625
+ h2: "h2";
626
+ h2c: "h2c";
627
+ h3: "h3";
628
+ }>>;
629
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
630
+ token_auth: z.ZodOptional<z.ZodBoolean>;
631
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
632
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
633
+ }>, unknown>>>;
634
+ select: z.ZodOptional<z.ZodObject<{
635
+ client_id: z.ZodOptional<z.ZodBoolean>;
636
+ user_id: z.ZodOptional<z.ZodBoolean>;
637
+ workspace_id: z.ZodOptional<z.ZodBoolean>;
638
+ project_id: z.ZodOptional<z.ZodBoolean>;
639
+ cluster_id: z.ZodOptional<z.ZodBoolean>;
640
+ plan: z.ZodOptional<z.ZodBoolean>;
641
+ provider: z.ZodOptional<z.ZodBoolean>;
642
+ region: z.ZodOptional<z.ZodBoolean>;
643
+ status: z.ZodOptional<z.ZodBoolean>;
644
+ id: z.ZodOptional<z.ZodBoolean>;
645
+ creation_date: z.ZodOptional<z.ZodBoolean>;
646
+ name: z.ZodOptional<z.ZodBoolean>;
647
+ type: z.ZodOptional<z.ZodBoolean>;
648
+ publish: z.ZodOptional<z.ZodBoolean>;
649
+ protocol: z.ZodOptional<z.ZodBoolean>;
650
+ labels: z.ZodOptional<z.ZodBoolean>;
651
+ geo_ip: z.ZodOptional<z.ZodBoolean>;
652
+ trusted_ips: z.ZodOptional<z.ZodBoolean>;
653
+ host: z.ZodOptional<z.ZodBoolean>;
654
+ tls_mode: z.ZodOptional<z.ZodBoolean>;
655
+ tls_alpns: z.ZodOptional<z.ZodBoolean>;
656
+ tls_min_version: z.ZodOptional<z.ZodBoolean>;
657
+ tls_ciphers: z.ZodOptional<z.ZodBoolean>;
658
+ mtls: z.ZodOptional<z.ZodBoolean>;
659
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodBoolean>;
660
+ http_version: z.ZodOptional<z.ZodBoolean>;
661
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
662
+ token_auth: z.ZodOptional<z.ZodBoolean>;
663
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
664
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
665
+ }, z.core.$strip>>;
666
+ }, z.core.$strip>]>>;
667
+ }, z.core.$strip>>;
668
+ }, z.core.$strip>;
669
+ declare const authTokenSchema: z.ZodIntersection<z.ZodUnion<readonly [z.ZodObject<{
670
+ type: z.ZodLiteral<"auth">;
671
+ userId: z.ZodString;
672
+ permissions: z.ZodNullable<z.ZodArray<z.ZodString>>;
673
+ }, z.core.$strip>, z.ZodObject<{
674
+ type: z.ZodLiteral<"pat">;
675
+ token_endpoint: z.ZodOptional<z.ZodString>;
676
+ }, z.core.$strip>, z.ZodObject<{
677
+ type: z.ZodLiteral<"app">;
678
+ clientId: z.ZodString;
679
+ permissions: z.ZodNullable<z.ZodArray<z.ZodString>>;
680
+ }, z.core.$strip>]>, z.ZodObject<{
681
+ workspace_id: z.ZodOptional<z.ZodString>;
682
+ project_id: z.ZodOptional<z.ZodString>;
683
+ metadata: z.ZodOptional<z.ZodObject<{
684
+ engine: z.ZodOptional<z.ZodString>;
685
+ scopes: z.ZodOptional<z.ZodObject<{
686
+ tunnels: z.ZodOptional<z.ZodObject<{
687
+ create: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
688
+ filters: z.ZodOptional<z.ZodType<FilterNode<{
689
+ type: z.ZodOptional<z.ZodEnum<{
690
+ bytestream: "bytestream";
691
+ datagram: "datagram";
692
+ }>>;
693
+ name: z.ZodOptional<z.ZodString>;
694
+ publish: z.ZodOptional<z.ZodBoolean>;
695
+ protocol: z.ZodOptional<z.ZodEnum<{
696
+ tls: "tls";
697
+ dtls: "dtls";
698
+ quic: "quic";
699
+ http: "http";
700
+ }>>;
701
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
702
+ geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
703
+ trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
704
+ host: z.ZodOptional<z.ZodString>;
705
+ tls_mode: z.ZodOptional<z.ZodEnum<{
706
+ passthrough: "passthrough";
707
+ terminated: "terminated";
708
+ }>>;
709
+ tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
710
+ tls_min_version: z.ZodOptional<z.ZodString>;
711
+ tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
712
+ mtls: z.ZodOptional<z.ZodBoolean>;
713
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
714
+ http_version: z.ZodOptional<z.ZodEnum<{
715
+ "http/1.1": "http/1.1";
716
+ h2: "h2";
717
+ h2c: "h2c";
718
+ h3: "h3";
719
+ }>>;
720
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
721
+ token_auth: z.ZodOptional<z.ZodBoolean>;
722
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
723
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
724
+ }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
725
+ type: z.ZodOptional<z.ZodEnum<{
726
+ bytestream: "bytestream";
727
+ datagram: "datagram";
728
+ }>>;
729
+ name: z.ZodOptional<z.ZodString>;
730
+ publish: z.ZodOptional<z.ZodBoolean>;
731
+ protocol: z.ZodOptional<z.ZodEnum<{
732
+ tls: "tls";
733
+ dtls: "dtls";
734
+ quic: "quic";
735
+ http: "http";
736
+ }>>;
737
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
738
+ geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
739
+ trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
740
+ host: z.ZodOptional<z.ZodString>;
741
+ tls_mode: z.ZodOptional<z.ZodEnum<{
742
+ passthrough: "passthrough";
743
+ terminated: "terminated";
744
+ }>>;
745
+ tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
746
+ tls_min_version: z.ZodOptional<z.ZodString>;
747
+ tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
748
+ mtls: z.ZodOptional<z.ZodBoolean>;
749
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
750
+ http_version: z.ZodOptional<z.ZodEnum<{
751
+ "http/1.1": "http/1.1";
752
+ h2: "h2";
753
+ h2c: "h2c";
754
+ h3: "h3";
755
+ }>>;
756
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
757
+ token_auth: z.ZodOptional<z.ZodBoolean>;
758
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
759
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
760
+ }>, unknown>>>;
761
+ }, z.core.$strip>]>>;
762
+ connect: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
763
+ filters: z.ZodOptional<z.ZodType<FilterNode<{
764
+ client_id: z.ZodString;
765
+ user_id: z.ZodOptional<z.ZodString>;
766
+ workspace_id: z.ZodOptional<z.ZodString>;
767
+ project_id: z.ZodOptional<z.ZodString>;
768
+ cluster_id: z.ZodOptional<z.ZodString>;
769
+ plan: z.ZodOptional<z.ZodString>;
770
+ provider: z.ZodOptional<z.ZodString>;
771
+ region: z.ZodOptional<z.ZodString>;
772
+ status: z.ZodEnum<{
773
+ online: "online";
774
+ offline: "offline";
775
+ }>;
776
+ id: z.ZodString;
777
+ creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
778
+ name: z.ZodOptional<z.ZodString>;
779
+ type: z.ZodOptional<z.ZodEnum<{
780
+ bytestream: "bytestream";
781
+ datagram: "datagram";
782
+ }>>;
783
+ publish: z.ZodOptional<z.ZodBoolean>;
784
+ protocol: z.ZodOptional<z.ZodEnum<{
785
+ tls: "tls";
786
+ dtls: "dtls";
787
+ quic: "quic";
788
+ http: "http";
789
+ }>>;
790
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
791
+ geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
792
+ trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
793
+ host: z.ZodOptional<z.ZodString>;
794
+ tls_mode: z.ZodOptional<z.ZodEnum<{
795
+ passthrough: "passthrough";
796
+ terminated: "terminated";
797
+ }>>;
798
+ tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
799
+ tls_min_version: z.ZodOptional<z.ZodString>;
800
+ tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
801
+ mtls: z.ZodOptional<z.ZodBoolean>;
802
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
803
+ http_version: z.ZodOptional<z.ZodEnum<{
804
+ "http/1.1": "http/1.1";
805
+ h2: "h2";
806
+ h2c: "h2c";
807
+ h3: "h3";
808
+ }>>;
809
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
810
+ token_auth: z.ZodOptional<z.ZodBoolean>;
811
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
812
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
813
+ }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
814
+ client_id: z.ZodString;
815
+ user_id: z.ZodOptional<z.ZodString>;
816
+ workspace_id: z.ZodOptional<z.ZodString>;
817
+ project_id: z.ZodOptional<z.ZodString>;
818
+ cluster_id: z.ZodOptional<z.ZodString>;
819
+ plan: z.ZodOptional<z.ZodString>;
820
+ provider: z.ZodOptional<z.ZodString>;
821
+ region: z.ZodOptional<z.ZodString>;
822
+ status: z.ZodEnum<{
823
+ online: "online";
824
+ offline: "offline";
825
+ }>;
826
+ id: z.ZodString;
827
+ creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
828
+ name: z.ZodOptional<z.ZodString>;
829
+ type: z.ZodOptional<z.ZodEnum<{
830
+ bytestream: "bytestream";
831
+ datagram: "datagram";
832
+ }>>;
833
+ publish: z.ZodOptional<z.ZodBoolean>;
834
+ protocol: z.ZodOptional<z.ZodEnum<{
835
+ tls: "tls";
836
+ dtls: "dtls";
837
+ quic: "quic";
838
+ http: "http";
839
+ }>>;
840
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
841
+ geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
842
+ trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
843
+ host: z.ZodOptional<z.ZodString>;
844
+ tls_mode: z.ZodOptional<z.ZodEnum<{
845
+ passthrough: "passthrough";
846
+ terminated: "terminated";
847
+ }>>;
848
+ tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
849
+ tls_min_version: z.ZodOptional<z.ZodString>;
850
+ tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
851
+ mtls: z.ZodOptional<z.ZodBoolean>;
852
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
853
+ http_version: z.ZodOptional<z.ZodEnum<{
854
+ "http/1.1": "http/1.1";
855
+ h2: "h2";
856
+ h2c: "h2c";
857
+ h3: "h3";
858
+ }>>;
859
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
860
+ token_auth: z.ZodOptional<z.ZodBoolean>;
861
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
862
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
863
+ }>, unknown>>>;
864
+ params: z.ZodOptional<z.ZodType<FilterNode<{
865
+ path: z.ZodOptional<z.ZodString>;
866
+ }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
867
+ path: z.ZodOptional<z.ZodString>;
868
+ }>, unknown>>>;
869
+ }, z.core.$strip>]>>;
870
+ list: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
871
+ filters: z.ZodOptional<z.ZodType<FilterNode<{
872
+ client_id: z.ZodString;
873
+ user_id: z.ZodOptional<z.ZodString>;
874
+ workspace_id: z.ZodOptional<z.ZodString>;
875
+ project_id: z.ZodOptional<z.ZodString>;
876
+ cluster_id: z.ZodOptional<z.ZodString>;
877
+ plan: z.ZodOptional<z.ZodString>;
878
+ provider: z.ZodOptional<z.ZodString>;
879
+ region: z.ZodOptional<z.ZodString>;
880
+ status: z.ZodEnum<{
881
+ online: "online";
882
+ offline: "offline";
883
+ }>;
884
+ id: z.ZodString;
885
+ creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
886
+ name: z.ZodOptional<z.ZodString>;
887
+ type: z.ZodOptional<z.ZodEnum<{
888
+ bytestream: "bytestream";
889
+ datagram: "datagram";
890
+ }>>;
891
+ publish: z.ZodOptional<z.ZodBoolean>;
892
+ protocol: z.ZodOptional<z.ZodEnum<{
893
+ tls: "tls";
894
+ dtls: "dtls";
895
+ quic: "quic";
896
+ http: "http";
897
+ }>>;
898
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
899
+ geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
900
+ trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
901
+ host: z.ZodOptional<z.ZodString>;
902
+ tls_mode: z.ZodOptional<z.ZodEnum<{
903
+ passthrough: "passthrough";
904
+ terminated: "terminated";
905
+ }>>;
906
+ tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
907
+ tls_min_version: z.ZodOptional<z.ZodString>;
908
+ tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
909
+ mtls: z.ZodOptional<z.ZodBoolean>;
910
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
911
+ http_version: z.ZodOptional<z.ZodEnum<{
912
+ "http/1.1": "http/1.1";
913
+ h2: "h2";
914
+ h2c: "h2c";
915
+ h3: "h3";
916
+ }>>;
917
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
918
+ token_auth: z.ZodOptional<z.ZodBoolean>;
919
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
920
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
921
+ }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
922
+ client_id: z.ZodString;
923
+ user_id: z.ZodOptional<z.ZodString>;
924
+ workspace_id: z.ZodOptional<z.ZodString>;
925
+ project_id: z.ZodOptional<z.ZodString>;
926
+ cluster_id: z.ZodOptional<z.ZodString>;
927
+ plan: z.ZodOptional<z.ZodString>;
928
+ provider: z.ZodOptional<z.ZodString>;
929
+ region: z.ZodOptional<z.ZodString>;
930
+ status: z.ZodEnum<{
931
+ online: "online";
932
+ offline: "offline";
933
+ }>;
934
+ id: z.ZodString;
935
+ creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
936
+ name: z.ZodOptional<z.ZodString>;
937
+ type: z.ZodOptional<z.ZodEnum<{
938
+ bytestream: "bytestream";
939
+ datagram: "datagram";
940
+ }>>;
941
+ publish: z.ZodOptional<z.ZodBoolean>;
942
+ protocol: z.ZodOptional<z.ZodEnum<{
943
+ tls: "tls";
944
+ dtls: "dtls";
945
+ quic: "quic";
946
+ http: "http";
947
+ }>>;
948
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
949
+ geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
950
+ trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
951
+ host: z.ZodOptional<z.ZodString>;
952
+ tls_mode: z.ZodOptional<z.ZodEnum<{
953
+ passthrough: "passthrough";
954
+ terminated: "terminated";
955
+ }>>;
956
+ tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
957
+ tls_min_version: z.ZodOptional<z.ZodString>;
958
+ tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
959
+ mtls: z.ZodOptional<z.ZodBoolean>;
960
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
961
+ http_version: z.ZodOptional<z.ZodEnum<{
962
+ "http/1.1": "http/1.1";
963
+ h2: "h2";
964
+ h2c: "h2c";
965
+ h3: "h3";
966
+ }>>;
967
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
968
+ token_auth: z.ZodOptional<z.ZodBoolean>;
969
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
970
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
971
+ }>, unknown>>>;
972
+ select: z.ZodOptional<z.ZodObject<{
973
+ client_id: z.ZodOptional<z.ZodBoolean>;
974
+ user_id: z.ZodOptional<z.ZodBoolean>;
975
+ workspace_id: z.ZodOptional<z.ZodBoolean>;
976
+ project_id: z.ZodOptional<z.ZodBoolean>;
977
+ cluster_id: z.ZodOptional<z.ZodBoolean>;
978
+ plan: z.ZodOptional<z.ZodBoolean>;
979
+ provider: z.ZodOptional<z.ZodBoolean>;
980
+ region: z.ZodOptional<z.ZodBoolean>;
981
+ status: z.ZodOptional<z.ZodBoolean>;
982
+ id: z.ZodOptional<z.ZodBoolean>;
983
+ creation_date: z.ZodOptional<z.ZodBoolean>;
984
+ name: z.ZodOptional<z.ZodBoolean>;
985
+ type: z.ZodOptional<z.ZodBoolean>;
986
+ publish: z.ZodOptional<z.ZodBoolean>;
987
+ protocol: z.ZodOptional<z.ZodBoolean>;
988
+ labels: z.ZodOptional<z.ZodBoolean>;
989
+ geo_ip: z.ZodOptional<z.ZodBoolean>;
990
+ trusted_ips: z.ZodOptional<z.ZodBoolean>;
991
+ host: z.ZodOptional<z.ZodBoolean>;
992
+ tls_mode: z.ZodOptional<z.ZodBoolean>;
993
+ tls_alpns: z.ZodOptional<z.ZodBoolean>;
994
+ tls_min_version: z.ZodOptional<z.ZodBoolean>;
995
+ tls_ciphers: z.ZodOptional<z.ZodBoolean>;
996
+ mtls: z.ZodOptional<z.ZodBoolean>;
997
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodBoolean>;
998
+ http_version: z.ZodOptional<z.ZodBoolean>;
999
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
1000
+ token_auth: z.ZodOptional<z.ZodBoolean>;
1001
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
1002
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
1003
+ }, z.core.$strip>>;
1004
+ }, z.core.$strip>]>>;
1005
+ }, z.core.$strip>>;
1006
+ }, z.core.$strip>>;
1007
+ }, z.core.$strip>>;
1008
+ }, z.core.$strip>>;
1009
+ declare const tokenSchema: z.ZodIntersection<z.ZodUnion<readonly [z.ZodObject<{
1010
+ type: z.ZodLiteral<"auth">;
1011
+ userId: z.ZodString;
1012
+ permissions: z.ZodNullable<z.ZodArray<z.ZodString>>;
1013
+ }, z.core.$strip>, z.ZodObject<{
1014
+ type: z.ZodLiteral<"pat">;
1015
+ token_endpoint: z.ZodOptional<z.ZodString>;
1016
+ }, z.core.$strip>, z.ZodObject<{
1017
+ type: z.ZodLiteral<"app">;
1018
+ clientId: z.ZodString;
1019
+ permissions: z.ZodNullable<z.ZodArray<z.ZodString>>;
1020
+ }, z.core.$strip>]>, z.ZodObject<{
1021
+ workspace_id: z.ZodOptional<z.ZodString>;
1022
+ project_id: z.ZodOptional<z.ZodString>;
1023
+ metadata: z.ZodOptional<z.ZodObject<{
1024
+ engine: z.ZodOptional<z.ZodString>;
1025
+ scopes: z.ZodOptional<z.ZodObject<{
1026
+ tunnels: z.ZodOptional<z.ZodObject<{
1027
+ create: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
1028
+ filters: z.ZodOptional<z.ZodType<FilterNode<{
1029
+ type: z.ZodOptional<z.ZodEnum<{
1030
+ bytestream: "bytestream";
1031
+ datagram: "datagram";
1032
+ }>>;
1033
+ name: z.ZodOptional<z.ZodString>;
1034
+ publish: z.ZodOptional<z.ZodBoolean>;
1035
+ protocol: z.ZodOptional<z.ZodEnum<{
1036
+ tls: "tls";
1037
+ dtls: "dtls";
1038
+ quic: "quic";
1039
+ http: "http";
1040
+ }>>;
1041
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1042
+ geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
1043
+ trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
1044
+ host: z.ZodOptional<z.ZodString>;
1045
+ tls_mode: z.ZodOptional<z.ZodEnum<{
1046
+ passthrough: "passthrough";
1047
+ terminated: "terminated";
1048
+ }>>;
1049
+ tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
1050
+ tls_min_version: z.ZodOptional<z.ZodString>;
1051
+ tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
1052
+ mtls: z.ZodOptional<z.ZodBoolean>;
1053
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1054
+ http_version: z.ZodOptional<z.ZodEnum<{
1055
+ "http/1.1": "http/1.1";
1056
+ h2: "h2";
1057
+ h2c: "h2c";
1058
+ h3: "h3";
1059
+ }>>;
1060
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
1061
+ token_auth: z.ZodOptional<z.ZodBoolean>;
1062
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
1063
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
1064
+ }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
1065
+ type: z.ZodOptional<z.ZodEnum<{
1066
+ bytestream: "bytestream";
1067
+ datagram: "datagram";
1068
+ }>>;
1069
+ name: z.ZodOptional<z.ZodString>;
1070
+ publish: z.ZodOptional<z.ZodBoolean>;
1071
+ protocol: z.ZodOptional<z.ZodEnum<{
1072
+ tls: "tls";
1073
+ dtls: "dtls";
1074
+ quic: "quic";
1075
+ http: "http";
1076
+ }>>;
1077
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1078
+ geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
1079
+ trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
1080
+ host: z.ZodOptional<z.ZodString>;
1081
+ tls_mode: z.ZodOptional<z.ZodEnum<{
1082
+ passthrough: "passthrough";
1083
+ terminated: "terminated";
1084
+ }>>;
1085
+ tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
1086
+ tls_min_version: z.ZodOptional<z.ZodString>;
1087
+ tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
1088
+ mtls: z.ZodOptional<z.ZodBoolean>;
1089
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1090
+ http_version: z.ZodOptional<z.ZodEnum<{
1091
+ "http/1.1": "http/1.1";
1092
+ h2: "h2";
1093
+ h2c: "h2c";
1094
+ h3: "h3";
1095
+ }>>;
1096
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
1097
+ token_auth: z.ZodOptional<z.ZodBoolean>;
1098
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
1099
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
1100
+ }>, unknown>>>;
1101
+ }, z.core.$strip>]>>;
1102
+ connect: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
1103
+ filters: z.ZodOptional<z.ZodType<FilterNode<{
1104
+ client_id: z.ZodString;
1105
+ user_id: z.ZodOptional<z.ZodString>;
1106
+ workspace_id: z.ZodOptional<z.ZodString>;
1107
+ project_id: z.ZodOptional<z.ZodString>;
1108
+ cluster_id: z.ZodOptional<z.ZodString>;
1109
+ plan: z.ZodOptional<z.ZodString>;
1110
+ provider: z.ZodOptional<z.ZodString>;
1111
+ region: z.ZodOptional<z.ZodString>;
1112
+ status: z.ZodEnum<{
1113
+ online: "online";
1114
+ offline: "offline";
1115
+ }>;
1116
+ id: z.ZodString;
1117
+ creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
1118
+ name: z.ZodOptional<z.ZodString>;
1119
+ type: z.ZodOptional<z.ZodEnum<{
1120
+ bytestream: "bytestream";
1121
+ datagram: "datagram";
1122
+ }>>;
1123
+ publish: z.ZodOptional<z.ZodBoolean>;
1124
+ protocol: z.ZodOptional<z.ZodEnum<{
1125
+ tls: "tls";
1126
+ dtls: "dtls";
1127
+ quic: "quic";
1128
+ http: "http";
1129
+ }>>;
1130
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1131
+ geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
1132
+ trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
1133
+ host: z.ZodOptional<z.ZodString>;
1134
+ tls_mode: z.ZodOptional<z.ZodEnum<{
1135
+ passthrough: "passthrough";
1136
+ terminated: "terminated";
1137
+ }>>;
1138
+ tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
1139
+ tls_min_version: z.ZodOptional<z.ZodString>;
1140
+ tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
1141
+ mtls: z.ZodOptional<z.ZodBoolean>;
1142
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1143
+ http_version: z.ZodOptional<z.ZodEnum<{
1144
+ "http/1.1": "http/1.1";
1145
+ h2: "h2";
1146
+ h2c: "h2c";
1147
+ h3: "h3";
1148
+ }>>;
1149
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
1150
+ token_auth: z.ZodOptional<z.ZodBoolean>;
1151
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
1152
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
1153
+ }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
1154
+ client_id: z.ZodString;
1155
+ user_id: z.ZodOptional<z.ZodString>;
1156
+ workspace_id: z.ZodOptional<z.ZodString>;
1157
+ project_id: z.ZodOptional<z.ZodString>;
1158
+ cluster_id: z.ZodOptional<z.ZodString>;
1159
+ plan: z.ZodOptional<z.ZodString>;
1160
+ provider: z.ZodOptional<z.ZodString>;
1161
+ region: z.ZodOptional<z.ZodString>;
1162
+ status: z.ZodEnum<{
1163
+ online: "online";
1164
+ offline: "offline";
1165
+ }>;
1166
+ id: z.ZodString;
1167
+ creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
1168
+ name: z.ZodOptional<z.ZodString>;
1169
+ type: z.ZodOptional<z.ZodEnum<{
1170
+ bytestream: "bytestream";
1171
+ datagram: "datagram";
1172
+ }>>;
1173
+ publish: z.ZodOptional<z.ZodBoolean>;
1174
+ protocol: z.ZodOptional<z.ZodEnum<{
1175
+ tls: "tls";
1176
+ dtls: "dtls";
1177
+ quic: "quic";
1178
+ http: "http";
1179
+ }>>;
1180
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1181
+ geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
1182
+ trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
1183
+ host: z.ZodOptional<z.ZodString>;
1184
+ tls_mode: z.ZodOptional<z.ZodEnum<{
1185
+ passthrough: "passthrough";
1186
+ terminated: "terminated";
1187
+ }>>;
1188
+ tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
1189
+ tls_min_version: z.ZodOptional<z.ZodString>;
1190
+ tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
1191
+ mtls: z.ZodOptional<z.ZodBoolean>;
1192
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1193
+ http_version: z.ZodOptional<z.ZodEnum<{
1194
+ "http/1.1": "http/1.1";
1195
+ h2: "h2";
1196
+ h2c: "h2c";
1197
+ h3: "h3";
1198
+ }>>;
1199
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
1200
+ token_auth: z.ZodOptional<z.ZodBoolean>;
1201
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
1202
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
1203
+ }>, unknown>>>;
1204
+ params: z.ZodOptional<z.ZodType<FilterNode<{
1205
+ path: z.ZodOptional<z.ZodString>;
1206
+ }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
1207
+ path: z.ZodOptional<z.ZodString>;
1208
+ }>, unknown>>>;
1209
+ }, z.core.$strip>]>>;
1210
+ list: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
1211
+ filters: z.ZodOptional<z.ZodType<FilterNode<{
1212
+ client_id: z.ZodString;
1213
+ user_id: z.ZodOptional<z.ZodString>;
1214
+ workspace_id: z.ZodOptional<z.ZodString>;
1215
+ project_id: z.ZodOptional<z.ZodString>;
1216
+ cluster_id: z.ZodOptional<z.ZodString>;
1217
+ plan: z.ZodOptional<z.ZodString>;
1218
+ provider: z.ZodOptional<z.ZodString>;
1219
+ region: z.ZodOptional<z.ZodString>;
1220
+ status: z.ZodEnum<{
1221
+ online: "online";
1222
+ offline: "offline";
1223
+ }>;
1224
+ id: z.ZodString;
1225
+ creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
1226
+ name: z.ZodOptional<z.ZodString>;
1227
+ type: z.ZodOptional<z.ZodEnum<{
1228
+ bytestream: "bytestream";
1229
+ datagram: "datagram";
1230
+ }>>;
1231
+ publish: z.ZodOptional<z.ZodBoolean>;
1232
+ protocol: z.ZodOptional<z.ZodEnum<{
1233
+ tls: "tls";
1234
+ dtls: "dtls";
1235
+ quic: "quic";
1236
+ http: "http";
1237
+ }>>;
1238
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1239
+ geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
1240
+ trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
1241
+ host: z.ZodOptional<z.ZodString>;
1242
+ tls_mode: z.ZodOptional<z.ZodEnum<{
1243
+ passthrough: "passthrough";
1244
+ terminated: "terminated";
1245
+ }>>;
1246
+ tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
1247
+ tls_min_version: z.ZodOptional<z.ZodString>;
1248
+ tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
1249
+ mtls: z.ZodOptional<z.ZodBoolean>;
1250
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1251
+ http_version: z.ZodOptional<z.ZodEnum<{
1252
+ "http/1.1": "http/1.1";
1253
+ h2: "h2";
1254
+ h2c: "h2c";
1255
+ h3: "h3";
1256
+ }>>;
1257
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
1258
+ token_auth: z.ZodOptional<z.ZodBoolean>;
1259
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
1260
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
1261
+ }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
1262
+ client_id: z.ZodString;
1263
+ user_id: z.ZodOptional<z.ZodString>;
1264
+ workspace_id: z.ZodOptional<z.ZodString>;
1265
+ project_id: z.ZodOptional<z.ZodString>;
1266
+ cluster_id: z.ZodOptional<z.ZodString>;
1267
+ plan: z.ZodOptional<z.ZodString>;
1268
+ provider: z.ZodOptional<z.ZodString>;
1269
+ region: z.ZodOptional<z.ZodString>;
1270
+ status: z.ZodEnum<{
1271
+ online: "online";
1272
+ offline: "offline";
1273
+ }>;
1274
+ id: z.ZodString;
1275
+ creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
1276
+ name: z.ZodOptional<z.ZodString>;
1277
+ type: z.ZodOptional<z.ZodEnum<{
1278
+ bytestream: "bytestream";
1279
+ datagram: "datagram";
1280
+ }>>;
1281
+ publish: z.ZodOptional<z.ZodBoolean>;
1282
+ protocol: z.ZodOptional<z.ZodEnum<{
1283
+ tls: "tls";
1284
+ dtls: "dtls";
1285
+ quic: "quic";
1286
+ http: "http";
1287
+ }>>;
1288
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1289
+ geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
1290
+ trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
1291
+ host: z.ZodOptional<z.ZodString>;
1292
+ tls_mode: z.ZodOptional<z.ZodEnum<{
1293
+ passthrough: "passthrough";
1294
+ terminated: "terminated";
1295
+ }>>;
1296
+ tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
1297
+ tls_min_version: z.ZodOptional<z.ZodString>;
1298
+ tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
1299
+ mtls: z.ZodOptional<z.ZodBoolean>;
1300
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1301
+ http_version: z.ZodOptional<z.ZodEnum<{
1302
+ "http/1.1": "http/1.1";
1303
+ h2: "h2";
1304
+ h2c: "h2c";
1305
+ h3: "h3";
1306
+ }>>;
1307
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
1308
+ token_auth: z.ZodOptional<z.ZodBoolean>;
1309
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
1310
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
1311
+ }>, unknown>>>;
1312
+ select: z.ZodOptional<z.ZodObject<{
1313
+ client_id: z.ZodOptional<z.ZodBoolean>;
1314
+ user_id: z.ZodOptional<z.ZodBoolean>;
1315
+ workspace_id: z.ZodOptional<z.ZodBoolean>;
1316
+ project_id: z.ZodOptional<z.ZodBoolean>;
1317
+ cluster_id: z.ZodOptional<z.ZodBoolean>;
1318
+ plan: z.ZodOptional<z.ZodBoolean>;
1319
+ provider: z.ZodOptional<z.ZodBoolean>;
1320
+ region: z.ZodOptional<z.ZodBoolean>;
1321
+ status: z.ZodOptional<z.ZodBoolean>;
1322
+ id: z.ZodOptional<z.ZodBoolean>;
1323
+ creation_date: z.ZodOptional<z.ZodBoolean>;
1324
+ name: z.ZodOptional<z.ZodBoolean>;
1325
+ type: z.ZodOptional<z.ZodBoolean>;
1326
+ publish: z.ZodOptional<z.ZodBoolean>;
1327
+ protocol: z.ZodOptional<z.ZodBoolean>;
1328
+ labels: z.ZodOptional<z.ZodBoolean>;
1329
+ geo_ip: z.ZodOptional<z.ZodBoolean>;
1330
+ trusted_ips: z.ZodOptional<z.ZodBoolean>;
1331
+ host: z.ZodOptional<z.ZodBoolean>;
1332
+ tls_mode: z.ZodOptional<z.ZodBoolean>;
1333
+ tls_alpns: z.ZodOptional<z.ZodBoolean>;
1334
+ tls_min_version: z.ZodOptional<z.ZodBoolean>;
1335
+ tls_ciphers: z.ZodOptional<z.ZodBoolean>;
1336
+ mtls: z.ZodOptional<z.ZodBoolean>;
1337
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodBoolean>;
1338
+ http_version: z.ZodOptional<z.ZodBoolean>;
1339
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
1340
+ token_auth: z.ZodOptional<z.ZodBoolean>;
1341
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
1342
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
1343
+ }, z.core.$strip>>;
1344
+ }, z.core.$strip>]>>;
1345
+ }, z.core.$strip>>;
1346
+ }, z.core.$strip>>;
1347
+ }, z.core.$strip>>;
1348
+ }, z.core.$strip>>;
1349
+ declare const createAuthTokenParamsSchema: z.ZodObject<{
1350
+ expires_in: z.ZodDefault<z.ZodNumber>;
1351
+ workspace_id: z.ZodOptional<z.ZodString>;
1352
+ project_id: z.ZodOptional<z.ZodString>;
1353
+ scopes: z.ZodOptional<z.ZodObject<{
1354
+ tunnels: z.ZodOptional<z.ZodObject<{
1355
+ create: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
1356
+ filters: z.ZodOptional<z.ZodType<FilterNode<{
1357
+ type: z.ZodOptional<z.ZodEnum<{
1358
+ bytestream: "bytestream";
1359
+ datagram: "datagram";
1360
+ }>>;
1361
+ name: z.ZodOptional<z.ZodString>;
1362
+ publish: z.ZodOptional<z.ZodBoolean>;
1363
+ protocol: z.ZodOptional<z.ZodEnum<{
1364
+ tls: "tls";
1365
+ dtls: "dtls";
1366
+ quic: "quic";
1367
+ http: "http";
1368
+ }>>;
1369
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1370
+ geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
1371
+ trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
1372
+ host: z.ZodOptional<z.ZodString>;
1373
+ tls_mode: z.ZodOptional<z.ZodEnum<{
1374
+ passthrough: "passthrough";
1375
+ terminated: "terminated";
1376
+ }>>;
1377
+ tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
1378
+ tls_min_version: z.ZodOptional<z.ZodString>;
1379
+ tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
1380
+ mtls: z.ZodOptional<z.ZodBoolean>;
1381
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1382
+ http_version: z.ZodOptional<z.ZodEnum<{
1383
+ "http/1.1": "http/1.1";
1384
+ h2: "h2";
1385
+ h2c: "h2c";
1386
+ h3: "h3";
1387
+ }>>;
1388
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
1389
+ token_auth: z.ZodOptional<z.ZodBoolean>;
1390
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
1391
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
1392
+ }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
1393
+ type: z.ZodOptional<z.ZodEnum<{
1394
+ bytestream: "bytestream";
1395
+ datagram: "datagram";
1396
+ }>>;
1397
+ name: z.ZodOptional<z.ZodString>;
1398
+ publish: z.ZodOptional<z.ZodBoolean>;
1399
+ protocol: z.ZodOptional<z.ZodEnum<{
1400
+ tls: "tls";
1401
+ dtls: "dtls";
1402
+ quic: "quic";
1403
+ http: "http";
1404
+ }>>;
1405
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1406
+ geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
1407
+ trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
1408
+ host: z.ZodOptional<z.ZodString>;
1409
+ tls_mode: z.ZodOptional<z.ZodEnum<{
1410
+ passthrough: "passthrough";
1411
+ terminated: "terminated";
1412
+ }>>;
1413
+ tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
1414
+ tls_min_version: z.ZodOptional<z.ZodString>;
1415
+ tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
1416
+ mtls: z.ZodOptional<z.ZodBoolean>;
1417
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1418
+ http_version: z.ZodOptional<z.ZodEnum<{
1419
+ "http/1.1": "http/1.1";
1420
+ h2: "h2";
1421
+ h2c: "h2c";
1422
+ h3: "h3";
1423
+ }>>;
1424
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
1425
+ token_auth: z.ZodOptional<z.ZodBoolean>;
1426
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
1427
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
1428
+ }>, unknown>>>;
1429
+ }, z.core.$strip>]>>;
1430
+ connect: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
1431
+ filters: z.ZodOptional<z.ZodType<FilterNode<{
1432
+ client_id: z.ZodString;
1433
+ user_id: z.ZodOptional<z.ZodString>;
1434
+ workspace_id: z.ZodOptional<z.ZodString>;
1435
+ project_id: z.ZodOptional<z.ZodString>;
1436
+ cluster_id: z.ZodOptional<z.ZodString>;
1437
+ plan: z.ZodOptional<z.ZodString>;
1438
+ provider: z.ZodOptional<z.ZodString>;
1439
+ region: z.ZodOptional<z.ZodString>;
1440
+ status: z.ZodEnum<{
1441
+ online: "online";
1442
+ offline: "offline";
1443
+ }>;
1444
+ id: z.ZodString;
1445
+ creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
1446
+ name: z.ZodOptional<z.ZodString>;
1447
+ type: z.ZodOptional<z.ZodEnum<{
1448
+ bytestream: "bytestream";
1449
+ datagram: "datagram";
1450
+ }>>;
1451
+ publish: z.ZodOptional<z.ZodBoolean>;
1452
+ protocol: z.ZodOptional<z.ZodEnum<{
1453
+ tls: "tls";
1454
+ dtls: "dtls";
1455
+ quic: "quic";
1456
+ http: "http";
1457
+ }>>;
1458
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1459
+ geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
1460
+ trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
1461
+ host: z.ZodOptional<z.ZodString>;
1462
+ tls_mode: z.ZodOptional<z.ZodEnum<{
1463
+ passthrough: "passthrough";
1464
+ terminated: "terminated";
1465
+ }>>;
1466
+ tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
1467
+ tls_min_version: z.ZodOptional<z.ZodString>;
1468
+ tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
1469
+ mtls: z.ZodOptional<z.ZodBoolean>;
1470
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1471
+ http_version: z.ZodOptional<z.ZodEnum<{
1472
+ "http/1.1": "http/1.1";
1473
+ h2: "h2";
1474
+ h2c: "h2c";
1475
+ h3: "h3";
1476
+ }>>;
1477
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
1478
+ token_auth: z.ZodOptional<z.ZodBoolean>;
1479
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
1480
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
1481
+ }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
1482
+ client_id: z.ZodString;
1483
+ user_id: z.ZodOptional<z.ZodString>;
1484
+ workspace_id: z.ZodOptional<z.ZodString>;
1485
+ project_id: z.ZodOptional<z.ZodString>;
1486
+ cluster_id: z.ZodOptional<z.ZodString>;
1487
+ plan: z.ZodOptional<z.ZodString>;
1488
+ provider: z.ZodOptional<z.ZodString>;
1489
+ region: z.ZodOptional<z.ZodString>;
1490
+ status: z.ZodEnum<{
1491
+ online: "online";
1492
+ offline: "offline";
1493
+ }>;
1494
+ id: z.ZodString;
1495
+ creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
1496
+ name: z.ZodOptional<z.ZodString>;
1497
+ type: z.ZodOptional<z.ZodEnum<{
1498
+ bytestream: "bytestream";
1499
+ datagram: "datagram";
1500
+ }>>;
1501
+ publish: z.ZodOptional<z.ZodBoolean>;
1502
+ protocol: z.ZodOptional<z.ZodEnum<{
1503
+ tls: "tls";
1504
+ dtls: "dtls";
1505
+ quic: "quic";
1506
+ http: "http";
1507
+ }>>;
1508
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1509
+ geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
1510
+ trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
1511
+ host: z.ZodOptional<z.ZodString>;
1512
+ tls_mode: z.ZodOptional<z.ZodEnum<{
1513
+ passthrough: "passthrough";
1514
+ terminated: "terminated";
1515
+ }>>;
1516
+ tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
1517
+ tls_min_version: z.ZodOptional<z.ZodString>;
1518
+ tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
1519
+ mtls: z.ZodOptional<z.ZodBoolean>;
1520
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1521
+ http_version: z.ZodOptional<z.ZodEnum<{
1522
+ "http/1.1": "http/1.1";
1523
+ h2: "h2";
1524
+ h2c: "h2c";
1525
+ h3: "h3";
1526
+ }>>;
1527
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
1528
+ token_auth: z.ZodOptional<z.ZodBoolean>;
1529
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
1530
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
1531
+ }>, unknown>>>;
1532
+ params: z.ZodOptional<z.ZodType<FilterNode<{
1533
+ path: z.ZodOptional<z.ZodString>;
1534
+ }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
1535
+ path: z.ZodOptional<z.ZodString>;
1536
+ }>, unknown>>>;
1537
+ }, z.core.$strip>]>>;
1538
+ list: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
1539
+ filters: z.ZodOptional<z.ZodType<FilterNode<{
1540
+ client_id: z.ZodString;
1541
+ user_id: z.ZodOptional<z.ZodString>;
1542
+ workspace_id: z.ZodOptional<z.ZodString>;
1543
+ project_id: z.ZodOptional<z.ZodString>;
1544
+ cluster_id: z.ZodOptional<z.ZodString>;
1545
+ plan: z.ZodOptional<z.ZodString>;
1546
+ provider: z.ZodOptional<z.ZodString>;
1547
+ region: z.ZodOptional<z.ZodString>;
1548
+ status: z.ZodEnum<{
1549
+ online: "online";
1550
+ offline: "offline";
1551
+ }>;
1552
+ id: z.ZodString;
1553
+ creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
1554
+ name: z.ZodOptional<z.ZodString>;
1555
+ type: z.ZodOptional<z.ZodEnum<{
1556
+ bytestream: "bytestream";
1557
+ datagram: "datagram";
1558
+ }>>;
1559
+ publish: z.ZodOptional<z.ZodBoolean>;
1560
+ protocol: z.ZodOptional<z.ZodEnum<{
1561
+ tls: "tls";
1562
+ dtls: "dtls";
1563
+ quic: "quic";
1564
+ http: "http";
1565
+ }>>;
1566
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1567
+ geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
1568
+ trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
1569
+ host: z.ZodOptional<z.ZodString>;
1570
+ tls_mode: z.ZodOptional<z.ZodEnum<{
1571
+ passthrough: "passthrough";
1572
+ terminated: "terminated";
1573
+ }>>;
1574
+ tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
1575
+ tls_min_version: z.ZodOptional<z.ZodString>;
1576
+ tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
1577
+ mtls: z.ZodOptional<z.ZodBoolean>;
1578
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1579
+ http_version: z.ZodOptional<z.ZodEnum<{
1580
+ "http/1.1": "http/1.1";
1581
+ h2: "h2";
1582
+ h2c: "h2c";
1583
+ h3: "h3";
1584
+ }>>;
1585
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
1586
+ token_auth: z.ZodOptional<z.ZodBoolean>;
1587
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
1588
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
1589
+ }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
1590
+ client_id: z.ZodString;
1591
+ user_id: z.ZodOptional<z.ZodString>;
1592
+ workspace_id: z.ZodOptional<z.ZodString>;
1593
+ project_id: z.ZodOptional<z.ZodString>;
1594
+ cluster_id: z.ZodOptional<z.ZodString>;
1595
+ plan: z.ZodOptional<z.ZodString>;
1596
+ provider: z.ZodOptional<z.ZodString>;
1597
+ region: z.ZodOptional<z.ZodString>;
1598
+ status: z.ZodEnum<{
1599
+ online: "online";
1600
+ offline: "offline";
1601
+ }>;
1602
+ id: z.ZodString;
1603
+ creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
1604
+ name: z.ZodOptional<z.ZodString>;
1605
+ type: z.ZodOptional<z.ZodEnum<{
1606
+ bytestream: "bytestream";
1607
+ datagram: "datagram";
1608
+ }>>;
1609
+ publish: z.ZodOptional<z.ZodBoolean>;
1610
+ protocol: z.ZodOptional<z.ZodEnum<{
1611
+ tls: "tls";
1612
+ dtls: "dtls";
1613
+ quic: "quic";
1614
+ http: "http";
1615
+ }>>;
1616
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1617
+ geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
1618
+ trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
1619
+ host: z.ZodOptional<z.ZodString>;
1620
+ tls_mode: z.ZodOptional<z.ZodEnum<{
1621
+ passthrough: "passthrough";
1622
+ terminated: "terminated";
1623
+ }>>;
1624
+ tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
1625
+ tls_min_version: z.ZodOptional<z.ZodString>;
1626
+ tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
1627
+ mtls: z.ZodOptional<z.ZodBoolean>;
1628
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1629
+ http_version: z.ZodOptional<z.ZodEnum<{
1630
+ "http/1.1": "http/1.1";
1631
+ h2: "h2";
1632
+ h2c: "h2c";
1633
+ h3: "h3";
1634
+ }>>;
1635
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
1636
+ token_auth: z.ZodOptional<z.ZodBoolean>;
1637
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
1638
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
1639
+ }>, unknown>>>;
1640
+ select: z.ZodOptional<z.ZodObject<{
1641
+ client_id: z.ZodOptional<z.ZodBoolean>;
1642
+ user_id: z.ZodOptional<z.ZodBoolean>;
1643
+ workspace_id: z.ZodOptional<z.ZodBoolean>;
1644
+ project_id: z.ZodOptional<z.ZodBoolean>;
1645
+ cluster_id: z.ZodOptional<z.ZodBoolean>;
1646
+ plan: z.ZodOptional<z.ZodBoolean>;
1647
+ provider: z.ZodOptional<z.ZodBoolean>;
1648
+ region: z.ZodOptional<z.ZodBoolean>;
1649
+ status: z.ZodOptional<z.ZodBoolean>;
1650
+ id: z.ZodOptional<z.ZodBoolean>;
1651
+ creation_date: z.ZodOptional<z.ZodBoolean>;
1652
+ name: z.ZodOptional<z.ZodBoolean>;
1653
+ type: z.ZodOptional<z.ZodBoolean>;
1654
+ publish: z.ZodOptional<z.ZodBoolean>;
1655
+ protocol: z.ZodOptional<z.ZodBoolean>;
1656
+ labels: z.ZodOptional<z.ZodBoolean>;
1657
+ geo_ip: z.ZodOptional<z.ZodBoolean>;
1658
+ trusted_ips: z.ZodOptional<z.ZodBoolean>;
1659
+ host: z.ZodOptional<z.ZodBoolean>;
1660
+ tls_mode: z.ZodOptional<z.ZodBoolean>;
1661
+ tls_alpns: z.ZodOptional<z.ZodBoolean>;
1662
+ tls_min_version: z.ZodOptional<z.ZodBoolean>;
1663
+ tls_ciphers: z.ZodOptional<z.ZodBoolean>;
1664
+ mtls: z.ZodOptional<z.ZodBoolean>;
1665
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodBoolean>;
1666
+ http_version: z.ZodOptional<z.ZodBoolean>;
1667
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
1668
+ token_auth: z.ZodOptional<z.ZodBoolean>;
1669
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
1670
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
1671
+ }, z.core.$strip>>;
1672
+ }, z.core.$strip>]>>;
1673
+ }, z.core.$strip>>;
1674
+ }, z.core.$strip>>;
1675
+ metadata: z.ZodOptional<z.ZodUnknown>;
1676
+ }, z.core.$strip>;
1677
+ declare const createAuthTokenResponseSchema: z.ZodObject<{
1678
+ token: z.ZodString;
1679
+ }, z.core.$strip>;
1680
+ type RstreamAuthTokenPermissions = z.infer<typeof authTokenPermissionsSchema>;
1681
+ type RstreamAuthTokenScopes = z.infer<typeof authTokenTunnelsScopesSchema>;
1682
+ type RstreamAuthToken = z.infer<typeof authTokenSchema>;
1683
+ type Token = z.infer<typeof tokenSchema>;
1684
+ type CreateAuthTokenParams = z.infer<typeof createAuthTokenParamsSchema>;
1685
+ type CreateAuthTokenResponse = z.infer<typeof createAuthTokenResponseSchema>;
1686
+ type RstreamAuth = (() => Promise<string>) | string;
1687
+ type RstreamAuthJwtPayload = JwtPayload & RstreamAuthToken;
1688
+
1689
+ declare const clientSchema: z.ZodObject<{
1690
+ id: z.ZodString;
1691
+ status: z.ZodEnum<{
1692
+ online: "online";
1693
+ offline: "offline";
1694
+ }>;
1695
+ user_id: z.ZodOptional<z.ZodString>;
1696
+ workspace_id: z.ZodOptional<z.ZodString>;
1697
+ project_id: z.ZodOptional<z.ZodString>;
1698
+ cluster_id: z.ZodOptional<z.ZodString>;
1699
+ plan: z.ZodOptional<z.ZodString>;
1700
+ provider: z.ZodOptional<z.ZodString>;
1701
+ region: z.ZodOptional<z.ZodString>;
1702
+ agent: z.ZodOptional<z.ZodString>;
1703
+ channel: z.ZodOptional<z.ZodString>;
1704
+ version: z.ZodOptional<z.ZodString>;
1705
+ os: z.ZodOptional<z.ZodString>;
1706
+ arch: z.ZodOptional<z.ZodString>;
1707
+ protocol_version: z.ZodOptional<z.ZodString>;
1708
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1709
+ }, z.core.$strip>;
1710
+ declare const listClientsParamsSchema: z.ZodObject<{
1711
+ limit: z.ZodOptional<z.ZodNumber>;
1712
+ filters: z.ZodOptional<z.ZodObject<{
1713
+ labels: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
1714
+ }, z.core.$strip>>;
1715
+ }, z.core.$strip>;
1716
+ declare const listClientsResponseSchema: z.ZodArray<z.ZodObject<{
1717
+ id: z.ZodString;
1718
+ status: z.ZodEnum<{
1719
+ online: "online";
1720
+ offline: "offline";
1721
+ }>;
1722
+ user_id: z.ZodOptional<z.ZodString>;
1723
+ workspace_id: z.ZodOptional<z.ZodString>;
1724
+ project_id: z.ZodOptional<z.ZodString>;
1725
+ cluster_id: z.ZodOptional<z.ZodString>;
1726
+ plan: z.ZodOptional<z.ZodString>;
1727
+ provider: z.ZodOptional<z.ZodString>;
1728
+ region: z.ZodOptional<z.ZodString>;
1729
+ agent: z.ZodOptional<z.ZodString>;
1730
+ channel: z.ZodOptional<z.ZodString>;
1731
+ version: z.ZodOptional<z.ZodString>;
1732
+ os: z.ZodOptional<z.ZodString>;
1733
+ arch: z.ZodOptional<z.ZodString>;
1734
+ protocol_version: z.ZodOptional<z.ZodString>;
1735
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1736
+ }, z.core.$strip>>;
1737
+ type Client = z.infer<typeof clientSchema>;
1738
+ type ListClientsParams = z.infer<typeof listClientsParamsSchema>;
1739
+ type ListClientsResponse = z.infer<typeof listClientsResponseSchema>;
1740
+
1741
+ declare class RstreamClientsResource {
1742
+ private readonly client;
1743
+ constructor(client: RstreamTunnelsClient);
1744
+ list(params?: ListClientsParams): Promise<ListClientsResponse>;
1745
+ get(id: string): Promise<Client>;
1746
+ }
1747
+
1748
+ declare const tunnelSchema: z.ZodObject<{
1749
+ client_id: z.ZodString;
1750
+ user_id: z.ZodOptional<z.ZodString>;
1751
+ workspace_id: z.ZodOptional<z.ZodString>;
1752
+ project_id: z.ZodOptional<z.ZodString>;
1753
+ cluster_id: z.ZodOptional<z.ZodString>;
1754
+ plan: z.ZodOptional<z.ZodString>;
1755
+ provider: z.ZodOptional<z.ZodString>;
1756
+ region: z.ZodOptional<z.ZodString>;
1757
+ status: z.ZodEnum<{
1758
+ online: "online";
1759
+ offline: "offline";
1760
+ }>;
1761
+ id: z.ZodString;
1762
+ creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
1763
+ name: z.ZodOptional<z.ZodString>;
1764
+ type: z.ZodOptional<z.ZodEnum<{
1765
+ bytestream: "bytestream";
1766
+ datagram: "datagram";
1767
+ }>>;
1768
+ publish: z.ZodOptional<z.ZodBoolean>;
1769
+ protocol: z.ZodOptional<z.ZodEnum<{
1770
+ tls: "tls";
1771
+ dtls: "dtls";
1772
+ quic: "quic";
1773
+ http: "http";
1774
+ }>>;
1775
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1776
+ geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
1777
+ trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
1778
+ host: z.ZodOptional<z.ZodString>;
1779
+ tls_mode: z.ZodOptional<z.ZodEnum<{
1780
+ passthrough: "passthrough";
1781
+ terminated: "terminated";
1782
+ }>>;
1783
+ tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
1784
+ tls_min_version: z.ZodOptional<z.ZodString>;
1785
+ tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
1786
+ mtls: z.ZodOptional<z.ZodBoolean>;
1787
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1788
+ http_version: z.ZodOptional<z.ZodEnum<{
1789
+ "http/1.1": "http/1.1";
1790
+ h2: "h2";
1791
+ h2c: "h2c";
1792
+ h3: "h3";
1793
+ }>>;
1794
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
1795
+ token_auth: z.ZodOptional<z.ZodBoolean>;
1796
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
1797
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
1798
+ }, z.core.$strip>;
1799
+ declare const listTunnelsParamsSchema: z.ZodObject<{
1800
+ limit: z.ZodOptional<z.ZodNumber>;
1801
+ filters: z.ZodOptional<z.ZodObject<{
1802
+ client_id: z.ZodOptional<z.ZodString>;
1803
+ status: z.ZodOptional<z.ZodEnum<{
1804
+ online: "online";
1805
+ offline: "offline";
1806
+ }>>;
1807
+ publish: z.ZodOptional<z.ZodOptional<z.ZodBoolean>>;
1808
+ protocol: z.ZodOptional<z.ZodOptional<z.ZodEnum<{
1809
+ tls: "tls";
1810
+ dtls: "dtls";
1811
+ quic: "quic";
1812
+ http: "http";
1813
+ }>>>;
1814
+ labels: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
1815
+ }, z.core.$strip>>;
1816
+ }, z.core.$strip>;
1817
+ declare const listTunnelsResponseSchema: z.ZodArray<z.ZodObject<{
1818
+ client_id: z.ZodString;
1819
+ user_id: z.ZodOptional<z.ZodString>;
1820
+ workspace_id: z.ZodOptional<z.ZodString>;
1821
+ project_id: z.ZodOptional<z.ZodString>;
1822
+ cluster_id: z.ZodOptional<z.ZodString>;
1823
+ plan: z.ZodOptional<z.ZodString>;
1824
+ provider: z.ZodOptional<z.ZodString>;
1825
+ region: z.ZodOptional<z.ZodString>;
1826
+ status: z.ZodEnum<{
1827
+ online: "online";
1828
+ offline: "offline";
1829
+ }>;
1830
+ id: z.ZodString;
1831
+ creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
1832
+ name: z.ZodOptional<z.ZodString>;
1833
+ type: z.ZodOptional<z.ZodEnum<{
1834
+ bytestream: "bytestream";
1835
+ datagram: "datagram";
1836
+ }>>;
1837
+ publish: z.ZodOptional<z.ZodBoolean>;
1838
+ protocol: z.ZodOptional<z.ZodEnum<{
1839
+ tls: "tls";
1840
+ dtls: "dtls";
1841
+ quic: "quic";
1842
+ http: "http";
1843
+ }>>;
1844
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1845
+ geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
1846
+ trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
1847
+ host: z.ZodOptional<z.ZodString>;
1848
+ tls_mode: z.ZodOptional<z.ZodEnum<{
1849
+ passthrough: "passthrough";
1850
+ terminated: "terminated";
1851
+ }>>;
1852
+ tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
1853
+ tls_min_version: z.ZodOptional<z.ZodString>;
1854
+ tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
1855
+ mtls: z.ZodOptional<z.ZodBoolean>;
1856
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1857
+ http_version: z.ZodOptional<z.ZodEnum<{
1858
+ "http/1.1": "http/1.1";
1859
+ h2: "h2";
1860
+ h2c: "h2c";
1861
+ h3: "h3";
1862
+ }>>;
1863
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
1864
+ token_auth: z.ZodOptional<z.ZodBoolean>;
1865
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
1866
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
1867
+ }, z.core.$strip>>;
1868
+ type Tunnel = z.infer<typeof tunnelSchema>;
1869
+ type ListTunnelsParams = z.infer<typeof listTunnelsParamsSchema>;
1870
+ type ListTunnelsResponse = z.infer<typeof listTunnelsResponseSchema>;
1871
+
1872
+ declare class RstreamTunnelsResource {
1873
+ private readonly client;
1874
+ constructor(client: RstreamTunnelsClient);
1875
+ list(params?: ListTunnelsParams): Promise<ListTunnelsResponse>;
1876
+ get(id: string): Promise<Tunnel>;
1877
+ }
1878
+
1879
+ declare const turnCredentialModeSchema: z.ZodEnum<{
1880
+ pat: "pat";
1881
+ app: "app";
1882
+ api: "api";
1883
+ }>;
1884
+ type TURNCredentialMode = z.infer<typeof turnCredentialModeSchema>;
1885
+ interface CreateAPITURNCredentialsOptions {
1886
+ apiUrl?: string;
1887
+ credentials: RstreamCredentials;
1888
+ projectEndpoint?: string;
1889
+ projectId?: string;
1890
+ }
1891
+ interface CreatePATTURNCredentialsOptions {
1892
+ clusterDomain: string;
1893
+ now?: Date | number;
1894
+ projectEndpoint: string;
1895
+ token: string;
1896
+ ttlSeconds?: number;
1897
+ turnPort?: number;
1898
+ turnsPort?: number;
1899
+ }
1900
+ interface CreateAPPTURNCredentialsOptions {
1901
+ apiUrl?: string;
1902
+ clientId: string;
1903
+ clientSecret: string;
1904
+ clusterDomain: string;
1905
+ keyringBaseUrl?: string;
1906
+ now?: Date | number;
1907
+ projectEndpoint: string;
1908
+ serverPublicKeyHex?: string;
1909
+ ttlSeconds?: number;
1910
+ turnPort?: number;
1911
+ turnsPort?: number;
1912
+ }
1913
+ interface CreateTURNCredentialsOptions {
1914
+ apiUrl?: string;
1915
+ clusterDomain?: string;
1916
+ controlPlaneCredentials?: RstreamCredentials;
1917
+ credentials?: RstreamCredentials;
1918
+ engine?: string;
1919
+ keyringBaseUrl?: string;
1920
+ mode?: TURNCredentialMode;
1921
+ now?: Date | number;
1922
+ projectEndpoint?: string;
1923
+ projectId?: string;
1924
+ serverPublicKeyHex?: string;
1925
+ ttlSeconds?: number;
1926
+ turnPort?: number;
1927
+ turnsPort?: number;
1928
+ }
1929
+ declare function createAPITURNCredentials(options: CreateAPITURNCredentialsOptions): Promise<TURNCredentials>;
1930
+ declare function createPATTURNCredentials(options: CreatePATTURNCredentialsOptions): TURNCredentials;
1931
+ declare function createAPPTURNCredentials(options: CreateAPPTURNCredentialsOptions): Promise<TURNCredentials>;
1932
+ declare function createTURNCredentials(options: CreateTURNCredentialsOptions): Promise<TURNCredentials>;
1933
+
1934
+ declare class RstreamTURNResource {
1935
+ private readonly client;
1936
+ constructor(client: RstreamTunnelsClient);
1937
+ createCredentials(options?: CreateTURNCredentialsOptions): Promise<TURNCredentials>;
1938
+ }
1939
+
1940
+ declare const initialStateSchema: z.ZodObject<{
1941
+ snapshot_at: z.ZodString;
1942
+ clients: z.ZodArray<z.ZodObject<{
1943
+ id: z.ZodString;
1944
+ status: z.ZodEnum<{
1945
+ online: "online";
1946
+ offline: "offline";
1947
+ }>;
1948
+ user_id: z.ZodOptional<z.ZodString>;
1949
+ workspace_id: z.ZodOptional<z.ZodString>;
1950
+ project_id: z.ZodOptional<z.ZodString>;
1951
+ cluster_id: z.ZodOptional<z.ZodString>;
1952
+ plan: z.ZodOptional<z.ZodString>;
1953
+ provider: z.ZodOptional<z.ZodString>;
1954
+ region: z.ZodOptional<z.ZodString>;
1955
+ agent: z.ZodOptional<z.ZodString>;
1956
+ channel: z.ZodOptional<z.ZodString>;
1957
+ version: z.ZodOptional<z.ZodString>;
1958
+ os: z.ZodOptional<z.ZodString>;
1959
+ arch: z.ZodOptional<z.ZodString>;
1960
+ protocol_version: z.ZodOptional<z.ZodString>;
1961
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1962
+ }, z.core.$strip>>;
1963
+ tunnels: z.ZodArray<z.ZodObject<{
1964
+ client_id: z.ZodString;
1965
+ user_id: z.ZodOptional<z.ZodString>;
1966
+ workspace_id: z.ZodOptional<z.ZodString>;
1967
+ project_id: z.ZodOptional<z.ZodString>;
1968
+ cluster_id: z.ZodOptional<z.ZodString>;
1969
+ plan: z.ZodOptional<z.ZodString>;
1970
+ provider: z.ZodOptional<z.ZodString>;
1971
+ region: z.ZodOptional<z.ZodString>;
1972
+ status: z.ZodEnum<{
1973
+ online: "online";
1974
+ offline: "offline";
1975
+ }>;
1976
+ id: z.ZodString;
1977
+ creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
1978
+ name: z.ZodOptional<z.ZodString>;
1979
+ type: z.ZodOptional<z.ZodEnum<{
1980
+ bytestream: "bytestream";
1981
+ datagram: "datagram";
1982
+ }>>;
1983
+ publish: z.ZodOptional<z.ZodBoolean>;
1984
+ protocol: z.ZodOptional<z.ZodEnum<{
1985
+ tls: "tls";
1986
+ dtls: "dtls";
1987
+ quic: "quic";
1988
+ http: "http";
1989
+ }>>;
1990
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1991
+ geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
1992
+ trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
1993
+ host: z.ZodOptional<z.ZodString>;
1994
+ tls_mode: z.ZodOptional<z.ZodEnum<{
1995
+ passthrough: "passthrough";
1996
+ terminated: "terminated";
1997
+ }>>;
1998
+ tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
1999
+ tls_min_version: z.ZodOptional<z.ZodString>;
2000
+ tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
2001
+ mtls: z.ZodOptional<z.ZodBoolean>;
2002
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2003
+ http_version: z.ZodOptional<z.ZodEnum<{
2004
+ "http/1.1": "http/1.1";
2005
+ h2: "h2";
2006
+ h2c: "h2c";
2007
+ h3: "h3";
2008
+ }>>;
2009
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
2010
+ token_auth: z.ZodOptional<z.ZodBoolean>;
2011
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
2012
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
2013
+ }, z.core.$strip>>;
2014
+ }, z.core.$strip>;
2015
+ declare const wsEventsSchema: z.ZodUnion<readonly [z.ZodObject<{
2016
+ type: z.ZodLiteral<"state.initial">;
2017
+ object: z.ZodObject<{
2018
+ snapshot_at: z.ZodString;
2019
+ clients: z.ZodArray<z.ZodObject<{
2020
+ id: z.ZodString;
2021
+ status: z.ZodEnum<{
2022
+ online: "online";
2023
+ offline: "offline";
2024
+ }>;
2025
+ user_id: z.ZodOptional<z.ZodString>;
2026
+ workspace_id: z.ZodOptional<z.ZodString>;
2027
+ project_id: z.ZodOptional<z.ZodString>;
2028
+ cluster_id: z.ZodOptional<z.ZodString>;
2029
+ plan: z.ZodOptional<z.ZodString>;
2030
+ provider: z.ZodOptional<z.ZodString>;
2031
+ region: z.ZodOptional<z.ZodString>;
2032
+ agent: z.ZodOptional<z.ZodString>;
2033
+ channel: z.ZodOptional<z.ZodString>;
2034
+ version: z.ZodOptional<z.ZodString>;
2035
+ os: z.ZodOptional<z.ZodString>;
2036
+ arch: z.ZodOptional<z.ZodString>;
2037
+ protocol_version: z.ZodOptional<z.ZodString>;
2038
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
2039
+ }, z.core.$strip>>;
2040
+ tunnels: z.ZodArray<z.ZodObject<{
2041
+ client_id: z.ZodString;
2042
+ user_id: z.ZodOptional<z.ZodString>;
2043
+ workspace_id: z.ZodOptional<z.ZodString>;
2044
+ project_id: z.ZodOptional<z.ZodString>;
2045
+ cluster_id: z.ZodOptional<z.ZodString>;
2046
+ plan: z.ZodOptional<z.ZodString>;
2047
+ provider: z.ZodOptional<z.ZodString>;
2048
+ region: z.ZodOptional<z.ZodString>;
2049
+ status: z.ZodEnum<{
2050
+ online: "online";
2051
+ offline: "offline";
2052
+ }>;
2053
+ id: z.ZodString;
2054
+ creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
2055
+ name: z.ZodOptional<z.ZodString>;
2056
+ type: z.ZodOptional<z.ZodEnum<{
2057
+ bytestream: "bytestream";
2058
+ datagram: "datagram";
2059
+ }>>;
2060
+ publish: z.ZodOptional<z.ZodBoolean>;
2061
+ protocol: z.ZodOptional<z.ZodEnum<{
2062
+ tls: "tls";
2063
+ dtls: "dtls";
2064
+ quic: "quic";
2065
+ http: "http";
2066
+ }>>;
2067
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
2068
+ geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
2069
+ trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
2070
+ host: z.ZodOptional<z.ZodString>;
2071
+ tls_mode: z.ZodOptional<z.ZodEnum<{
2072
+ passthrough: "passthrough";
2073
+ terminated: "terminated";
2074
+ }>>;
2075
+ tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
2076
+ tls_min_version: z.ZodOptional<z.ZodString>;
2077
+ tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
2078
+ mtls: z.ZodOptional<z.ZodBoolean>;
2079
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2080
+ http_version: z.ZodOptional<z.ZodEnum<{
2081
+ "http/1.1": "http/1.1";
2082
+ h2: "h2";
2083
+ h2c: "h2c";
2084
+ h3: "h3";
2085
+ }>>;
2086
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
2087
+ token_auth: z.ZodOptional<z.ZodBoolean>;
2088
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
2089
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
2090
+ }, z.core.$strip>>;
2091
+ }, z.core.$strip>;
2092
+ id: z.ZodOptional<z.ZodString>;
2093
+ created_at: z.ZodOptional<z.ZodString>;
2094
+ user_id: z.ZodOptional<z.ZodString>;
2095
+ workspace_id: z.ZodOptional<z.ZodString>;
2096
+ project_id: z.ZodOptional<z.ZodString>;
2097
+ cluster_id: z.ZodOptional<z.ZodString>;
2098
+ }, z.core.$loose>, z.ZodObject<{
2099
+ type: z.ZodLiteral<"client.created">;
2100
+ object: z.ZodObject<{
2101
+ id: z.ZodString;
2102
+ status: z.ZodEnum<{
2103
+ online: "online";
2104
+ offline: "offline";
2105
+ }>;
2106
+ user_id: z.ZodOptional<z.ZodString>;
2107
+ workspace_id: z.ZodOptional<z.ZodString>;
2108
+ project_id: z.ZodOptional<z.ZodString>;
2109
+ cluster_id: z.ZodOptional<z.ZodString>;
2110
+ plan: z.ZodOptional<z.ZodString>;
2111
+ provider: z.ZodOptional<z.ZodString>;
2112
+ region: z.ZodOptional<z.ZodString>;
2113
+ agent: z.ZodOptional<z.ZodString>;
2114
+ channel: z.ZodOptional<z.ZodString>;
2115
+ version: z.ZodOptional<z.ZodString>;
2116
+ os: z.ZodOptional<z.ZodString>;
2117
+ arch: z.ZodOptional<z.ZodString>;
2118
+ protocol_version: z.ZodOptional<z.ZodString>;
2119
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
2120
+ }, z.core.$strip>;
2121
+ id: z.ZodOptional<z.ZodString>;
2122
+ created_at: z.ZodOptional<z.ZodString>;
2123
+ user_id: z.ZodOptional<z.ZodString>;
2124
+ workspace_id: z.ZodOptional<z.ZodString>;
2125
+ project_id: z.ZodOptional<z.ZodString>;
2126
+ cluster_id: z.ZodOptional<z.ZodString>;
2127
+ }, z.core.$loose>, z.ZodObject<{
2128
+ type: z.ZodLiteral<"client.updated">;
2129
+ object: z.ZodObject<{
2130
+ id: z.ZodString;
2131
+ status: z.ZodEnum<{
2132
+ online: "online";
2133
+ offline: "offline";
2134
+ }>;
2135
+ user_id: z.ZodOptional<z.ZodString>;
2136
+ workspace_id: z.ZodOptional<z.ZodString>;
2137
+ project_id: z.ZodOptional<z.ZodString>;
2138
+ cluster_id: z.ZodOptional<z.ZodString>;
2139
+ plan: z.ZodOptional<z.ZodString>;
2140
+ provider: z.ZodOptional<z.ZodString>;
2141
+ region: z.ZodOptional<z.ZodString>;
2142
+ agent: z.ZodOptional<z.ZodString>;
2143
+ channel: z.ZodOptional<z.ZodString>;
2144
+ version: z.ZodOptional<z.ZodString>;
2145
+ os: z.ZodOptional<z.ZodString>;
2146
+ arch: z.ZodOptional<z.ZodString>;
2147
+ protocol_version: z.ZodOptional<z.ZodString>;
2148
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
2149
+ }, z.core.$strip>;
2150
+ id: z.ZodOptional<z.ZodString>;
2151
+ created_at: z.ZodOptional<z.ZodString>;
2152
+ user_id: z.ZodOptional<z.ZodString>;
2153
+ workspace_id: z.ZodOptional<z.ZodString>;
2154
+ project_id: z.ZodOptional<z.ZodString>;
2155
+ cluster_id: z.ZodOptional<z.ZodString>;
2156
+ }, z.core.$loose>, z.ZodObject<{
2157
+ type: z.ZodLiteral<"client.deleted">;
2158
+ object: z.ZodObject<{
2159
+ id: z.ZodString;
2160
+ status: z.ZodEnum<{
2161
+ online: "online";
2162
+ offline: "offline";
2163
+ }>;
2164
+ user_id: z.ZodOptional<z.ZodString>;
2165
+ workspace_id: z.ZodOptional<z.ZodString>;
2166
+ project_id: z.ZodOptional<z.ZodString>;
2167
+ cluster_id: z.ZodOptional<z.ZodString>;
2168
+ plan: z.ZodOptional<z.ZodString>;
2169
+ provider: z.ZodOptional<z.ZodString>;
2170
+ region: z.ZodOptional<z.ZodString>;
2171
+ agent: z.ZodOptional<z.ZodString>;
2172
+ channel: z.ZodOptional<z.ZodString>;
2173
+ version: z.ZodOptional<z.ZodString>;
2174
+ os: z.ZodOptional<z.ZodString>;
2175
+ arch: z.ZodOptional<z.ZodString>;
2176
+ protocol_version: z.ZodOptional<z.ZodString>;
2177
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
2178
+ }, z.core.$strip>;
2179
+ id: z.ZodOptional<z.ZodString>;
2180
+ created_at: z.ZodOptional<z.ZodString>;
2181
+ user_id: z.ZodOptional<z.ZodString>;
2182
+ workspace_id: z.ZodOptional<z.ZodString>;
2183
+ project_id: z.ZodOptional<z.ZodString>;
2184
+ cluster_id: z.ZodOptional<z.ZodString>;
2185
+ }, z.core.$loose>, z.ZodObject<{
2186
+ type: z.ZodLiteral<"tunnel.created">;
2187
+ object: z.ZodObject<{
2188
+ client_id: z.ZodString;
2189
+ user_id: z.ZodOptional<z.ZodString>;
2190
+ workspace_id: z.ZodOptional<z.ZodString>;
2191
+ project_id: z.ZodOptional<z.ZodString>;
2192
+ cluster_id: z.ZodOptional<z.ZodString>;
2193
+ plan: z.ZodOptional<z.ZodString>;
2194
+ provider: z.ZodOptional<z.ZodString>;
2195
+ region: z.ZodOptional<z.ZodString>;
2196
+ status: z.ZodEnum<{
2197
+ online: "online";
2198
+ offline: "offline";
2199
+ }>;
2200
+ id: z.ZodString;
2201
+ creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
2202
+ name: z.ZodOptional<z.ZodString>;
2203
+ type: z.ZodOptional<z.ZodEnum<{
2204
+ bytestream: "bytestream";
2205
+ datagram: "datagram";
2206
+ }>>;
2207
+ publish: z.ZodOptional<z.ZodBoolean>;
2208
+ protocol: z.ZodOptional<z.ZodEnum<{
2209
+ tls: "tls";
2210
+ dtls: "dtls";
2211
+ quic: "quic";
2212
+ http: "http";
2213
+ }>>;
2214
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
2215
+ geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
2216
+ trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
2217
+ host: z.ZodOptional<z.ZodString>;
2218
+ tls_mode: z.ZodOptional<z.ZodEnum<{
2219
+ passthrough: "passthrough";
2220
+ terminated: "terminated";
2221
+ }>>;
2222
+ tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
2223
+ tls_min_version: z.ZodOptional<z.ZodString>;
2224
+ tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
2225
+ mtls: z.ZodOptional<z.ZodBoolean>;
2226
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2227
+ http_version: z.ZodOptional<z.ZodEnum<{
2228
+ "http/1.1": "http/1.1";
2229
+ h2: "h2";
2230
+ h2c: "h2c";
2231
+ h3: "h3";
2232
+ }>>;
2233
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
2234
+ token_auth: z.ZodOptional<z.ZodBoolean>;
2235
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
2236
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
2237
+ }, z.core.$strip>;
2238
+ id: z.ZodOptional<z.ZodString>;
2239
+ created_at: z.ZodOptional<z.ZodString>;
2240
+ user_id: z.ZodOptional<z.ZodString>;
2241
+ workspace_id: z.ZodOptional<z.ZodString>;
2242
+ project_id: z.ZodOptional<z.ZodString>;
2243
+ cluster_id: z.ZodOptional<z.ZodString>;
2244
+ }, z.core.$loose>, z.ZodObject<{
2245
+ type: z.ZodLiteral<"tunnel.updated">;
2246
+ object: z.ZodObject<{
2247
+ client_id: z.ZodString;
2248
+ user_id: z.ZodOptional<z.ZodString>;
2249
+ workspace_id: z.ZodOptional<z.ZodString>;
2250
+ project_id: z.ZodOptional<z.ZodString>;
2251
+ cluster_id: z.ZodOptional<z.ZodString>;
2252
+ plan: z.ZodOptional<z.ZodString>;
2253
+ provider: z.ZodOptional<z.ZodString>;
2254
+ region: z.ZodOptional<z.ZodString>;
2255
+ status: z.ZodEnum<{
2256
+ online: "online";
2257
+ offline: "offline";
2258
+ }>;
2259
+ id: z.ZodString;
2260
+ creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
2261
+ name: z.ZodOptional<z.ZodString>;
2262
+ type: z.ZodOptional<z.ZodEnum<{
2263
+ bytestream: "bytestream";
2264
+ datagram: "datagram";
2265
+ }>>;
2266
+ publish: z.ZodOptional<z.ZodBoolean>;
2267
+ protocol: z.ZodOptional<z.ZodEnum<{
2268
+ tls: "tls";
2269
+ dtls: "dtls";
2270
+ quic: "quic";
2271
+ http: "http";
2272
+ }>>;
2273
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
2274
+ geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
2275
+ trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
2276
+ host: z.ZodOptional<z.ZodString>;
2277
+ tls_mode: z.ZodOptional<z.ZodEnum<{
2278
+ passthrough: "passthrough";
2279
+ terminated: "terminated";
2280
+ }>>;
2281
+ tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
2282
+ tls_min_version: z.ZodOptional<z.ZodString>;
2283
+ tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
2284
+ mtls: z.ZodOptional<z.ZodBoolean>;
2285
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2286
+ http_version: z.ZodOptional<z.ZodEnum<{
2287
+ "http/1.1": "http/1.1";
2288
+ h2: "h2";
2289
+ h2c: "h2c";
2290
+ h3: "h3";
2291
+ }>>;
2292
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
2293
+ token_auth: z.ZodOptional<z.ZodBoolean>;
2294
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
2295
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
2296
+ }, z.core.$strip>;
2297
+ id: z.ZodOptional<z.ZodString>;
2298
+ created_at: z.ZodOptional<z.ZodString>;
2299
+ user_id: z.ZodOptional<z.ZodString>;
2300
+ workspace_id: z.ZodOptional<z.ZodString>;
2301
+ project_id: z.ZodOptional<z.ZodString>;
2302
+ cluster_id: z.ZodOptional<z.ZodString>;
2303
+ }, z.core.$loose>, z.ZodObject<{
2304
+ type: z.ZodLiteral<"tunnel.deleted">;
2305
+ object: z.ZodObject<{
2306
+ client_id: z.ZodString;
2307
+ user_id: z.ZodOptional<z.ZodString>;
2308
+ workspace_id: z.ZodOptional<z.ZodString>;
2309
+ project_id: z.ZodOptional<z.ZodString>;
2310
+ cluster_id: z.ZodOptional<z.ZodString>;
2311
+ plan: z.ZodOptional<z.ZodString>;
2312
+ provider: z.ZodOptional<z.ZodString>;
2313
+ region: z.ZodOptional<z.ZodString>;
2314
+ status: z.ZodEnum<{
2315
+ online: "online";
2316
+ offline: "offline";
2317
+ }>;
2318
+ id: z.ZodString;
2319
+ creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
2320
+ name: z.ZodOptional<z.ZodString>;
2321
+ type: z.ZodOptional<z.ZodEnum<{
2322
+ bytestream: "bytestream";
2323
+ datagram: "datagram";
2324
+ }>>;
2325
+ publish: z.ZodOptional<z.ZodBoolean>;
2326
+ protocol: z.ZodOptional<z.ZodEnum<{
2327
+ tls: "tls";
2328
+ dtls: "dtls";
2329
+ quic: "quic";
2330
+ http: "http";
2331
+ }>>;
2332
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
2333
+ geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
2334
+ trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
2335
+ host: z.ZodOptional<z.ZodString>;
2336
+ tls_mode: z.ZodOptional<z.ZodEnum<{
2337
+ passthrough: "passthrough";
2338
+ terminated: "terminated";
2339
+ }>>;
2340
+ tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
2341
+ tls_min_version: z.ZodOptional<z.ZodString>;
2342
+ tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
2343
+ mtls: z.ZodOptional<z.ZodBoolean>;
2344
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2345
+ http_version: z.ZodOptional<z.ZodEnum<{
2346
+ "http/1.1": "http/1.1";
2347
+ h2: "h2";
2348
+ h2c: "h2c";
2349
+ h3: "h3";
2350
+ }>>;
2351
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
2352
+ token_auth: z.ZodOptional<z.ZodBoolean>;
2353
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
2354
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
2355
+ }, z.core.$strip>;
2356
+ id: z.ZodOptional<z.ZodString>;
2357
+ created_at: z.ZodOptional<z.ZodString>;
2358
+ user_id: z.ZodOptional<z.ZodString>;
2359
+ workspace_id: z.ZodOptional<z.ZodString>;
2360
+ project_id: z.ZodOptional<z.ZodString>;
2361
+ cluster_id: z.ZodOptional<z.ZodString>;
2362
+ }, z.core.$loose>]>;
2363
+ declare const webhookEventsSchema: z.ZodUnion<readonly [z.ZodObject<{
2364
+ type: z.ZodLiteral<"client.created">;
2365
+ object: z.ZodObject<{
2366
+ id: z.ZodString;
2367
+ status: z.ZodEnum<{
2368
+ online: "online";
2369
+ offline: "offline";
2370
+ }>;
2371
+ user_id: z.ZodOptional<z.ZodString>;
2372
+ workspace_id: z.ZodOptional<z.ZodString>;
2373
+ project_id: z.ZodOptional<z.ZodString>;
2374
+ cluster_id: z.ZodOptional<z.ZodString>;
2375
+ plan: z.ZodOptional<z.ZodString>;
2376
+ provider: z.ZodOptional<z.ZodString>;
2377
+ region: z.ZodOptional<z.ZodString>;
2378
+ agent: z.ZodOptional<z.ZodString>;
2379
+ channel: z.ZodOptional<z.ZodString>;
2380
+ version: z.ZodOptional<z.ZodString>;
2381
+ os: z.ZodOptional<z.ZodString>;
2382
+ arch: z.ZodOptional<z.ZodString>;
2383
+ protocol_version: z.ZodOptional<z.ZodString>;
2384
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
2385
+ }, z.core.$strip>;
2386
+ id: z.ZodOptional<z.ZodString>;
2387
+ created_at: z.ZodOptional<z.ZodString>;
2388
+ user_id: z.ZodOptional<z.ZodString>;
2389
+ workspace_id: z.ZodOptional<z.ZodString>;
2390
+ project_id: z.ZodOptional<z.ZodString>;
2391
+ cluster_id: z.ZodOptional<z.ZodString>;
2392
+ }, z.core.$loose>, z.ZodObject<{
2393
+ type: z.ZodLiteral<"client.updated">;
2394
+ object: z.ZodObject<{
2395
+ id: z.ZodString;
2396
+ status: z.ZodEnum<{
2397
+ online: "online";
2398
+ offline: "offline";
2399
+ }>;
2400
+ user_id: z.ZodOptional<z.ZodString>;
2401
+ workspace_id: z.ZodOptional<z.ZodString>;
2402
+ project_id: z.ZodOptional<z.ZodString>;
2403
+ cluster_id: z.ZodOptional<z.ZodString>;
2404
+ plan: z.ZodOptional<z.ZodString>;
2405
+ provider: z.ZodOptional<z.ZodString>;
2406
+ region: z.ZodOptional<z.ZodString>;
2407
+ agent: z.ZodOptional<z.ZodString>;
2408
+ channel: z.ZodOptional<z.ZodString>;
2409
+ version: z.ZodOptional<z.ZodString>;
2410
+ os: z.ZodOptional<z.ZodString>;
2411
+ arch: z.ZodOptional<z.ZodString>;
2412
+ protocol_version: z.ZodOptional<z.ZodString>;
2413
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
2414
+ }, z.core.$strip>;
2415
+ id: z.ZodOptional<z.ZodString>;
2416
+ created_at: z.ZodOptional<z.ZodString>;
2417
+ user_id: z.ZodOptional<z.ZodString>;
2418
+ workspace_id: z.ZodOptional<z.ZodString>;
2419
+ project_id: z.ZodOptional<z.ZodString>;
2420
+ cluster_id: z.ZodOptional<z.ZodString>;
2421
+ }, z.core.$loose>, z.ZodObject<{
2422
+ type: z.ZodLiteral<"client.deleted">;
2423
+ object: z.ZodObject<{
2424
+ id: z.ZodString;
2425
+ status: z.ZodEnum<{
2426
+ online: "online";
2427
+ offline: "offline";
2428
+ }>;
2429
+ user_id: z.ZodOptional<z.ZodString>;
2430
+ workspace_id: z.ZodOptional<z.ZodString>;
2431
+ project_id: z.ZodOptional<z.ZodString>;
2432
+ cluster_id: z.ZodOptional<z.ZodString>;
2433
+ plan: z.ZodOptional<z.ZodString>;
2434
+ provider: z.ZodOptional<z.ZodString>;
2435
+ region: z.ZodOptional<z.ZodString>;
2436
+ agent: z.ZodOptional<z.ZodString>;
2437
+ channel: z.ZodOptional<z.ZodString>;
2438
+ version: z.ZodOptional<z.ZodString>;
2439
+ os: z.ZodOptional<z.ZodString>;
2440
+ arch: z.ZodOptional<z.ZodString>;
2441
+ protocol_version: z.ZodOptional<z.ZodString>;
2442
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
2443
+ }, z.core.$strip>;
2444
+ id: z.ZodOptional<z.ZodString>;
2445
+ created_at: z.ZodOptional<z.ZodString>;
2446
+ user_id: z.ZodOptional<z.ZodString>;
2447
+ workspace_id: z.ZodOptional<z.ZodString>;
2448
+ project_id: z.ZodOptional<z.ZodString>;
2449
+ cluster_id: z.ZodOptional<z.ZodString>;
2450
+ }, z.core.$loose>, z.ZodObject<{
2451
+ type: z.ZodLiteral<"tunnel.created">;
2452
+ object: z.ZodObject<{
2453
+ client_id: z.ZodString;
2454
+ user_id: z.ZodOptional<z.ZodString>;
2455
+ workspace_id: z.ZodOptional<z.ZodString>;
2456
+ project_id: z.ZodOptional<z.ZodString>;
2457
+ cluster_id: z.ZodOptional<z.ZodString>;
2458
+ plan: z.ZodOptional<z.ZodString>;
2459
+ provider: z.ZodOptional<z.ZodString>;
2460
+ region: z.ZodOptional<z.ZodString>;
2461
+ status: z.ZodEnum<{
2462
+ online: "online";
2463
+ offline: "offline";
2464
+ }>;
2465
+ id: z.ZodString;
2466
+ creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
2467
+ name: z.ZodOptional<z.ZodString>;
2468
+ type: z.ZodOptional<z.ZodEnum<{
2469
+ bytestream: "bytestream";
2470
+ datagram: "datagram";
2471
+ }>>;
2472
+ publish: z.ZodOptional<z.ZodBoolean>;
2473
+ protocol: z.ZodOptional<z.ZodEnum<{
2474
+ tls: "tls";
2475
+ dtls: "dtls";
2476
+ quic: "quic";
2477
+ http: "http";
2478
+ }>>;
2479
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
2480
+ geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
2481
+ trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
2482
+ host: z.ZodOptional<z.ZodString>;
2483
+ tls_mode: z.ZodOptional<z.ZodEnum<{
2484
+ passthrough: "passthrough";
2485
+ terminated: "terminated";
2486
+ }>>;
2487
+ tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
2488
+ tls_min_version: z.ZodOptional<z.ZodString>;
2489
+ tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
2490
+ mtls: z.ZodOptional<z.ZodBoolean>;
2491
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2492
+ http_version: z.ZodOptional<z.ZodEnum<{
2493
+ "http/1.1": "http/1.1";
2494
+ h2: "h2";
2495
+ h2c: "h2c";
2496
+ h3: "h3";
2497
+ }>>;
2498
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
2499
+ token_auth: z.ZodOptional<z.ZodBoolean>;
2500
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
2501
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
2502
+ }, z.core.$strip>;
2503
+ id: z.ZodOptional<z.ZodString>;
2504
+ created_at: z.ZodOptional<z.ZodString>;
2505
+ user_id: z.ZodOptional<z.ZodString>;
2506
+ workspace_id: z.ZodOptional<z.ZodString>;
2507
+ project_id: z.ZodOptional<z.ZodString>;
2508
+ cluster_id: z.ZodOptional<z.ZodString>;
2509
+ }, z.core.$loose>, z.ZodObject<{
2510
+ type: z.ZodLiteral<"tunnel.updated">;
2511
+ object: z.ZodObject<{
2512
+ client_id: z.ZodString;
2513
+ user_id: z.ZodOptional<z.ZodString>;
2514
+ workspace_id: z.ZodOptional<z.ZodString>;
2515
+ project_id: z.ZodOptional<z.ZodString>;
2516
+ cluster_id: z.ZodOptional<z.ZodString>;
2517
+ plan: z.ZodOptional<z.ZodString>;
2518
+ provider: z.ZodOptional<z.ZodString>;
2519
+ region: z.ZodOptional<z.ZodString>;
2520
+ status: z.ZodEnum<{
2521
+ online: "online";
2522
+ offline: "offline";
2523
+ }>;
2524
+ id: z.ZodString;
2525
+ creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
2526
+ name: z.ZodOptional<z.ZodString>;
2527
+ type: z.ZodOptional<z.ZodEnum<{
2528
+ bytestream: "bytestream";
2529
+ datagram: "datagram";
2530
+ }>>;
2531
+ publish: z.ZodOptional<z.ZodBoolean>;
2532
+ protocol: z.ZodOptional<z.ZodEnum<{
2533
+ tls: "tls";
2534
+ dtls: "dtls";
2535
+ quic: "quic";
2536
+ http: "http";
2537
+ }>>;
2538
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
2539
+ geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
2540
+ trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
2541
+ host: z.ZodOptional<z.ZodString>;
2542
+ tls_mode: z.ZodOptional<z.ZodEnum<{
2543
+ passthrough: "passthrough";
2544
+ terminated: "terminated";
2545
+ }>>;
2546
+ tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
2547
+ tls_min_version: z.ZodOptional<z.ZodString>;
2548
+ tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
2549
+ mtls: z.ZodOptional<z.ZodBoolean>;
2550
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2551
+ http_version: z.ZodOptional<z.ZodEnum<{
2552
+ "http/1.1": "http/1.1";
2553
+ h2: "h2";
2554
+ h2c: "h2c";
2555
+ h3: "h3";
2556
+ }>>;
2557
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
2558
+ token_auth: z.ZodOptional<z.ZodBoolean>;
2559
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
2560
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
2561
+ }, z.core.$strip>;
2562
+ id: z.ZodOptional<z.ZodString>;
2563
+ created_at: z.ZodOptional<z.ZodString>;
2564
+ user_id: z.ZodOptional<z.ZodString>;
2565
+ workspace_id: z.ZodOptional<z.ZodString>;
2566
+ project_id: z.ZodOptional<z.ZodString>;
2567
+ cluster_id: z.ZodOptional<z.ZodString>;
2568
+ }, z.core.$loose>, z.ZodObject<{
2569
+ type: z.ZodLiteral<"tunnel.deleted">;
2570
+ object: z.ZodObject<{
2571
+ client_id: z.ZodString;
2572
+ user_id: z.ZodOptional<z.ZodString>;
2573
+ workspace_id: z.ZodOptional<z.ZodString>;
2574
+ project_id: z.ZodOptional<z.ZodString>;
2575
+ cluster_id: z.ZodOptional<z.ZodString>;
2576
+ plan: z.ZodOptional<z.ZodString>;
2577
+ provider: z.ZodOptional<z.ZodString>;
2578
+ region: z.ZodOptional<z.ZodString>;
2579
+ status: z.ZodEnum<{
2580
+ online: "online";
2581
+ offline: "offline";
2582
+ }>;
2583
+ id: z.ZodString;
2584
+ creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
2585
+ name: z.ZodOptional<z.ZodString>;
2586
+ type: z.ZodOptional<z.ZodEnum<{
2587
+ bytestream: "bytestream";
2588
+ datagram: "datagram";
2589
+ }>>;
2590
+ publish: z.ZodOptional<z.ZodBoolean>;
2591
+ protocol: z.ZodOptional<z.ZodEnum<{
2592
+ tls: "tls";
2593
+ dtls: "dtls";
2594
+ quic: "quic";
2595
+ http: "http";
2596
+ }>>;
2597
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
2598
+ geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
2599
+ trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
2600
+ host: z.ZodOptional<z.ZodString>;
2601
+ tls_mode: z.ZodOptional<z.ZodEnum<{
2602
+ passthrough: "passthrough";
2603
+ terminated: "terminated";
2604
+ }>>;
2605
+ tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
2606
+ tls_min_version: z.ZodOptional<z.ZodString>;
2607
+ tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
2608
+ mtls: z.ZodOptional<z.ZodBoolean>;
2609
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2610
+ http_version: z.ZodOptional<z.ZodEnum<{
2611
+ "http/1.1": "http/1.1";
2612
+ h2: "h2";
2613
+ h2c: "h2c";
2614
+ h3: "h3";
2615
+ }>>;
2616
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
2617
+ token_auth: z.ZodOptional<z.ZodBoolean>;
2618
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
2619
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
2620
+ }, z.core.$strip>;
2621
+ id: z.ZodOptional<z.ZodString>;
2622
+ created_at: z.ZodOptional<z.ZodString>;
2623
+ user_id: z.ZodOptional<z.ZodString>;
2624
+ workspace_id: z.ZodOptional<z.ZodString>;
2625
+ project_id: z.ZodOptional<z.ZodString>;
2626
+ cluster_id: z.ZodOptional<z.ZodString>;
2627
+ }, z.core.$loose>, z.ZodObject<{
2628
+ type: z.ZodLiteral<"stream.summary">;
2629
+ object: z.ZodObject<{
2630
+ workspace_id: z.ZodOptional<z.ZodString>;
2631
+ project_id: z.ZodOptional<z.ZodString>;
2632
+ cluster_id: z.ZodOptional<z.ZodString>;
2633
+ user_id: z.ZodOptional<z.ZodString>;
2634
+ client_id: z.ZodOptional<z.ZodString>;
2635
+ tunnel_id: z.ZodOptional<z.ZodString>;
2636
+ stream_id: z.ZodString;
2637
+ created_at: z.ZodString;
2638
+ terminated_at: z.ZodString;
2639
+ request: z.ZodObject<{
2640
+ downstream: z.ZodObject<{
2641
+ ip: z.ZodOptional<z.ZodString>;
2642
+ geolocation: z.ZodOptional<z.ZodObject<{
2643
+ country: z.ZodOptional<z.ZodString>;
2644
+ region: z.ZodOptional<z.ZodString>;
2645
+ }, z.core.$strip>>;
2646
+ }, z.core.$strip>;
2647
+ http: z.ZodOptional<z.ZodObject<{
2648
+ protocol: z.ZodOptional<z.ZodEnum<{
2649
+ "http/1.1": "http/1.1";
2650
+ h2: "h2";
2651
+ h2c: "h2c";
2652
+ h3: "h3";
2653
+ }>>;
2654
+ request: z.ZodObject<{
2655
+ method: z.ZodString;
2656
+ scheme: z.ZodOptional<z.ZodString>;
2657
+ host: z.ZodOptional<z.ZodString>;
2658
+ path: z.ZodOptional<z.ZodString>;
2659
+ query: z.ZodOptional<z.ZodString>;
2660
+ url: z.ZodOptional<z.ZodString>;
2661
+ headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>>;
2662
+ userAgent: z.ZodOptional<z.ZodString>;
2663
+ }, z.core.$strip>;
2664
+ }, z.core.$strip>>;
2665
+ }, z.core.$strip>;
2666
+ firewall: z.ZodDiscriminatedUnion<[z.ZodObject<{
2667
+ decision: z.ZodLiteral<"allowed">;
2668
+ rule: z.ZodDiscriminatedUnion<[z.ZodObject<{
2669
+ kind: z.ZodLiteral<"none">;
2670
+ }, z.core.$strip>, z.ZodObject<{
2671
+ kind: z.ZodLiteral<"mtls">;
2672
+ }, z.core.$strip>, z.ZodObject<{
2673
+ kind: z.ZodLiteral<"rstream_auth">;
2674
+ source: z.ZodLiteral<"rstream_auth">;
2675
+ }, z.core.$strip>, z.ZodObject<{
2676
+ kind: z.ZodLiteral<"token">;
2677
+ source: z.ZodOptional<z.ZodEnum<{
2678
+ unknown: "unknown";
2679
+ query: "query";
2680
+ authorization: "authorization";
2681
+ client: "client";
2682
+ }>>;
2683
+ tokenType: z.ZodOptional<z.ZodEnum<{
2684
+ unknown: "unknown";
2685
+ auth: "auth";
2686
+ pat: "pat";
2687
+ app: "app";
2688
+ }>>;
2689
+ }, z.core.$strip>], "kind">;
2690
+ }, z.core.$strip>, z.ZodObject<{
2691
+ decision: z.ZodLiteral<"denied">;
2692
+ rule: z.ZodDiscriminatedUnion<[z.ZodObject<{
2693
+ kind: z.ZodLiteral<"none">;
2694
+ }, z.core.$strip>, z.ZodObject<{
2695
+ kind: z.ZodLiteral<"mtls">;
2696
+ }, z.core.$strip>, z.ZodObject<{
2697
+ kind: z.ZodLiteral<"rstream_auth">;
2698
+ source: z.ZodLiteral<"rstream_auth">;
2699
+ }, z.core.$strip>, z.ZodObject<{
2700
+ kind: z.ZodLiteral<"token">;
2701
+ source: z.ZodOptional<z.ZodEnum<{
2702
+ unknown: "unknown";
2703
+ query: "query";
2704
+ authorization: "authorization";
2705
+ client: "client";
2706
+ }>>;
2707
+ tokenType: z.ZodOptional<z.ZodEnum<{
2708
+ unknown: "unknown";
2709
+ auth: "auth";
2710
+ pat: "pat";
2711
+ app: "app";
2712
+ }>>;
2713
+ }, z.core.$strip>], "kind">;
2714
+ failure: z.ZodDiscriminatedUnion<[z.ZodObject<{
2715
+ kind: z.ZodLiteral<"timeout">;
2716
+ timeoutMs: z.ZodOptional<z.ZodNumber>;
2717
+ message: z.ZodOptional<z.ZodString>;
2718
+ }, z.core.$strip>, z.ZodObject<{
2719
+ kind: z.ZodLiteral<"unauthorized">;
2720
+ why: z.ZodDiscriminatedUnion<[z.ZodObject<{
2721
+ reason: z.ZodLiteral<"missing_token">;
2722
+ source: z.ZodEnum<{
2723
+ unknown: "unknown";
2724
+ query: "query";
2725
+ authorization: "authorization";
2726
+ client: "client";
2727
+ }>;
2728
+ }, z.core.$strip>, z.ZodObject<{
2729
+ reason: z.ZodLiteral<"invalid_token">;
2730
+ source: z.ZodEnum<{
2731
+ unknown: "unknown";
2732
+ query: "query";
2733
+ authorization: "authorization";
2734
+ client: "client";
2735
+ }>;
2736
+ }, z.core.$strip>, z.ZodObject<{
2737
+ reason: z.ZodLiteral<"expired_token">;
2738
+ source: z.ZodEnum<{
2739
+ unknown: "unknown";
2740
+ query: "query";
2741
+ authorization: "authorization";
2742
+ client: "client";
2743
+ }>;
2744
+ }, z.core.$strip>, z.ZodObject<{
2745
+ reason: z.ZodLiteral<"invalid_secret">;
2746
+ source: z.ZodEnum<{
2747
+ unknown: "unknown";
2748
+ query: "query";
2749
+ authorization: "authorization";
2750
+ client: "client";
2751
+ }>;
2752
+ }, z.core.$strip>, z.ZodObject<{
2753
+ reason: z.ZodLiteral<"user_mismatch">;
2754
+ source: z.ZodEnum<{
2755
+ unknown: "unknown";
2756
+ query: "query";
2757
+ authorization: "authorization";
2758
+ client: "client";
2759
+ }>;
2760
+ }, z.core.$strip>, z.ZodObject<{
2761
+ reason: z.ZodLiteral<"policy_denied">;
2762
+ policy: z.ZodEnum<{
2763
+ mtls: "mtls";
2764
+ ip: "ip";
2765
+ geo: "geo";
2766
+ challenge: "challenge";
2767
+ other: "other";
2768
+ }>;
2769
+ value: z.ZodOptional<z.ZodString>;
2770
+ source: z.ZodEnum<{
2771
+ unknown: "unknown";
2772
+ query: "query";
2773
+ authorization: "authorization";
2774
+ client: "client";
2775
+ }>;
2776
+ }, z.core.$strip>], "reason">;
2777
+ message: z.ZodOptional<z.ZodString>;
2778
+ }, z.core.$strip>, z.ZodObject<{
2779
+ kind: z.ZodLiteral<"not_found">;
2780
+ resource: z.ZodEnum<{
2781
+ client: "client";
2782
+ tunnel: "tunnel";
2783
+ route: "route";
2784
+ }>;
2785
+ message: z.ZodOptional<z.ZodString>;
2786
+ }, z.core.$strip>, z.ZodObject<{
2787
+ kind: z.ZodLiteral<"refused">;
2788
+ reason: z.ZodEnum<{
2789
+ policy: "policy";
2790
+ other: "other";
2791
+ capacity: "capacity";
2792
+ unsupported: "unsupported";
2793
+ }>;
2794
+ message: z.ZodOptional<z.ZodString>;
2795
+ }, z.core.$strip>, z.ZodObject<{
2796
+ kind: z.ZodLiteral<"io">;
2797
+ message: z.ZodOptional<z.ZodString>;
2798
+ }, z.core.$strip>, z.ZodObject<{
2799
+ kind: z.ZodLiteral<"internal">;
2800
+ message: z.ZodOptional<z.ZodString>;
2801
+ }, z.core.$strip>], "kind">;
2802
+ }, z.core.$strip>], "decision">;
2803
+ routing: z.ZodDiscriminatedUnion<[z.ZodObject<{
2804
+ decision: z.ZodLiteral<"routed">;
2805
+ tunnel: z.ZodObject<{
2806
+ tunnelId: z.ZodOptional<z.ZodString>;
2807
+ tunnelName: z.ZodOptional<z.ZodString>;
2808
+ protocol: z.ZodOptional<z.ZodString>;
2809
+ published: z.ZodOptional<z.ZodBoolean>;
2810
+ type: z.ZodOptional<z.ZodString>;
2811
+ tlsMode: z.ZodOptional<z.ZodString>;
2812
+ httpVersion: z.ZodOptional<z.ZodString>;
2813
+ httpUseTls: z.ZodOptional<z.ZodBoolean>;
2814
+ tokenAuth: z.ZodOptional<z.ZodBoolean>;
2815
+ mtls: z.ZodOptional<z.ZodBoolean>;
2816
+ }, z.core.$strip>;
2817
+ }, z.core.$strip>, z.ZodObject<{
2818
+ decision: z.ZodLiteral<"not_routed">;
2819
+ failure: z.ZodDiscriminatedUnion<[z.ZodObject<{
2820
+ kind: z.ZodLiteral<"timeout">;
2821
+ timeoutMs: z.ZodOptional<z.ZodNumber>;
2822
+ message: z.ZodOptional<z.ZodString>;
2823
+ }, z.core.$strip>, z.ZodObject<{
2824
+ kind: z.ZodLiteral<"unauthorized">;
2825
+ why: z.ZodDiscriminatedUnion<[z.ZodObject<{
2826
+ reason: z.ZodLiteral<"missing_token">;
2827
+ source: z.ZodEnum<{
2828
+ unknown: "unknown";
2829
+ query: "query";
2830
+ authorization: "authorization";
2831
+ client: "client";
2832
+ }>;
2833
+ }, z.core.$strip>, z.ZodObject<{
2834
+ reason: z.ZodLiteral<"invalid_token">;
2835
+ source: z.ZodEnum<{
2836
+ unknown: "unknown";
2837
+ query: "query";
2838
+ authorization: "authorization";
2839
+ client: "client";
2840
+ }>;
2841
+ }, z.core.$strip>, z.ZodObject<{
2842
+ reason: z.ZodLiteral<"expired_token">;
2843
+ source: z.ZodEnum<{
2844
+ unknown: "unknown";
2845
+ query: "query";
2846
+ authorization: "authorization";
2847
+ client: "client";
2848
+ }>;
2849
+ }, z.core.$strip>, z.ZodObject<{
2850
+ reason: z.ZodLiteral<"invalid_secret">;
2851
+ source: z.ZodEnum<{
2852
+ unknown: "unknown";
2853
+ query: "query";
2854
+ authorization: "authorization";
2855
+ client: "client";
2856
+ }>;
2857
+ }, z.core.$strip>, z.ZodObject<{
2858
+ reason: z.ZodLiteral<"user_mismatch">;
2859
+ source: z.ZodEnum<{
2860
+ unknown: "unknown";
2861
+ query: "query";
2862
+ authorization: "authorization";
2863
+ client: "client";
2864
+ }>;
2865
+ }, z.core.$strip>, z.ZodObject<{
2866
+ reason: z.ZodLiteral<"policy_denied">;
2867
+ policy: z.ZodEnum<{
2868
+ mtls: "mtls";
2869
+ ip: "ip";
2870
+ geo: "geo";
2871
+ challenge: "challenge";
2872
+ other: "other";
2873
+ }>;
2874
+ value: z.ZodOptional<z.ZodString>;
2875
+ source: z.ZodEnum<{
2876
+ unknown: "unknown";
2877
+ query: "query";
2878
+ authorization: "authorization";
2879
+ client: "client";
2880
+ }>;
2881
+ }, z.core.$strip>], "reason">;
2882
+ message: z.ZodOptional<z.ZodString>;
2883
+ }, z.core.$strip>, z.ZodObject<{
2884
+ kind: z.ZodLiteral<"not_found">;
2885
+ resource: z.ZodEnum<{
2886
+ client: "client";
2887
+ tunnel: "tunnel";
2888
+ route: "route";
2889
+ }>;
2890
+ message: z.ZodOptional<z.ZodString>;
2891
+ }, z.core.$strip>, z.ZodObject<{
2892
+ kind: z.ZodLiteral<"refused">;
2893
+ reason: z.ZodEnum<{
2894
+ policy: "policy";
2895
+ other: "other";
2896
+ capacity: "capacity";
2897
+ unsupported: "unsupported";
2898
+ }>;
2899
+ message: z.ZodOptional<z.ZodString>;
2900
+ }, z.core.$strip>, z.ZodObject<{
2901
+ kind: z.ZodLiteral<"io">;
2902
+ message: z.ZodOptional<z.ZodString>;
2903
+ }, z.core.$strip>, z.ZodObject<{
2904
+ kind: z.ZodLiteral<"internal">;
2905
+ message: z.ZodOptional<z.ZodString>;
2906
+ }, z.core.$strip>], "kind">;
2907
+ }, z.core.$strip>], "decision">;
2908
+ response: z.ZodDiscriminatedUnion<[z.ZodObject<{
2909
+ outcome: z.ZodLiteral<"connected">;
2910
+ established_at: z.ZodString;
2911
+ upstream: z.ZodOptional<z.ZodObject<{
2912
+ ip: z.ZodOptional<z.ZodString>;
2913
+ geolocation: z.ZodOptional<z.ZodObject<{
2914
+ country: z.ZodOptional<z.ZodString>;
2915
+ region: z.ZodOptional<z.ZodString>;
2916
+ }, z.core.$strip>>;
2917
+ }, z.core.$strip>>;
2918
+ metrics: z.ZodObject<{
2919
+ establish_ms: z.ZodNumber;
2920
+ duration_ms: z.ZodNumber;
2921
+ upstream_bytes: z.ZodNumber;
2922
+ downstream_bytes: z.ZodNumber;
2923
+ }, z.core.$strip>;
2924
+ termination: z.ZodOptional<z.ZodObject<{
2925
+ by: z.ZodEnum<{
2926
+ unknown: "unknown";
2927
+ downstream: "downstream";
2928
+ upstream: "upstream";
2929
+ server: "server";
2930
+ }>;
2931
+ reason: z.ZodEnum<{
2932
+ unknown: "unknown";
2933
+ error: "error";
2934
+ timeout: "timeout";
2935
+ closed: "closed";
2936
+ reset: "reset";
2937
+ }>;
2938
+ message: z.ZodOptional<z.ZodString>;
2939
+ }, z.core.$strip>>;
2940
+ http: z.ZodOptional<z.ZodObject<{
2941
+ protocol: z.ZodOptional<z.ZodEnum<{
2942
+ "http/1.1": "http/1.1";
2943
+ h2: "h2";
2944
+ h2c: "h2c";
2945
+ h3: "h3";
2946
+ }>>;
2947
+ response: z.ZodObject<{
2948
+ status: z.ZodNumber;
2949
+ headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>>;
2950
+ }, z.core.$strip>;
2951
+ }, z.core.$strip>>;
2952
+ }, z.core.$strip>, z.ZodObject<{
2953
+ outcome: z.ZodLiteral<"failed">;
2954
+ failure: z.ZodDiscriminatedUnion<[z.ZodObject<{
2955
+ kind: z.ZodLiteral<"timeout">;
2956
+ timeoutMs: z.ZodOptional<z.ZodNumber>;
2957
+ message: z.ZodOptional<z.ZodString>;
2958
+ }, z.core.$strip>, z.ZodObject<{
2959
+ kind: z.ZodLiteral<"unauthorized">;
2960
+ why: z.ZodDiscriminatedUnion<[z.ZodObject<{
2961
+ reason: z.ZodLiteral<"missing_token">;
2962
+ source: z.ZodEnum<{
2963
+ unknown: "unknown";
2964
+ query: "query";
2965
+ authorization: "authorization";
2966
+ client: "client";
2967
+ }>;
2968
+ }, z.core.$strip>, z.ZodObject<{
2969
+ reason: z.ZodLiteral<"invalid_token">;
2970
+ source: z.ZodEnum<{
2971
+ unknown: "unknown";
2972
+ query: "query";
2973
+ authorization: "authorization";
2974
+ client: "client";
2975
+ }>;
2976
+ }, z.core.$strip>, z.ZodObject<{
2977
+ reason: z.ZodLiteral<"expired_token">;
2978
+ source: z.ZodEnum<{
2979
+ unknown: "unknown";
2980
+ query: "query";
2981
+ authorization: "authorization";
2982
+ client: "client";
2983
+ }>;
2984
+ }, z.core.$strip>, z.ZodObject<{
2985
+ reason: z.ZodLiteral<"invalid_secret">;
2986
+ source: z.ZodEnum<{
2987
+ unknown: "unknown";
2988
+ query: "query";
2989
+ authorization: "authorization";
2990
+ client: "client";
2991
+ }>;
2992
+ }, z.core.$strip>, z.ZodObject<{
2993
+ reason: z.ZodLiteral<"user_mismatch">;
2994
+ source: z.ZodEnum<{
2995
+ unknown: "unknown";
2996
+ query: "query";
2997
+ authorization: "authorization";
2998
+ client: "client";
2999
+ }>;
3000
+ }, z.core.$strip>, z.ZodObject<{
3001
+ reason: z.ZodLiteral<"policy_denied">;
3002
+ policy: z.ZodEnum<{
3003
+ mtls: "mtls";
3004
+ ip: "ip";
3005
+ geo: "geo";
3006
+ challenge: "challenge";
3007
+ other: "other";
3008
+ }>;
3009
+ value: z.ZodOptional<z.ZodString>;
3010
+ source: z.ZodEnum<{
3011
+ unknown: "unknown";
3012
+ query: "query";
3013
+ authorization: "authorization";
3014
+ client: "client";
3015
+ }>;
3016
+ }, z.core.$strip>], "reason">;
3017
+ message: z.ZodOptional<z.ZodString>;
3018
+ }, z.core.$strip>, z.ZodObject<{
3019
+ kind: z.ZodLiteral<"not_found">;
3020
+ resource: z.ZodEnum<{
3021
+ client: "client";
3022
+ tunnel: "tunnel";
3023
+ route: "route";
3024
+ }>;
3025
+ message: z.ZodOptional<z.ZodString>;
3026
+ }, z.core.$strip>, z.ZodObject<{
3027
+ kind: z.ZodLiteral<"refused">;
3028
+ reason: z.ZodEnum<{
3029
+ policy: "policy";
3030
+ other: "other";
3031
+ capacity: "capacity";
3032
+ unsupported: "unsupported";
3033
+ }>;
3034
+ message: z.ZodOptional<z.ZodString>;
3035
+ }, z.core.$strip>, z.ZodObject<{
3036
+ kind: z.ZodLiteral<"io">;
3037
+ message: z.ZodOptional<z.ZodString>;
3038
+ }, z.core.$strip>, z.ZodObject<{
3039
+ kind: z.ZodLiteral<"internal">;
3040
+ message: z.ZodOptional<z.ZodString>;
3041
+ }, z.core.$strip>], "kind">;
3042
+ upstream: z.ZodOptional<z.ZodObject<{
3043
+ ip: z.ZodOptional<z.ZodString>;
3044
+ geolocation: z.ZodOptional<z.ZodObject<{
3045
+ country: z.ZodOptional<z.ZodString>;
3046
+ region: z.ZodOptional<z.ZodString>;
3047
+ }, z.core.$strip>>;
3048
+ }, z.core.$strip>>;
3049
+ metrics: z.ZodOptional<z.ZodObject<{
3050
+ time_to_fail_ms: z.ZodOptional<z.ZodNumber>;
3051
+ establish_ms: z.ZodOptional<z.ZodNumber>;
3052
+ }, z.core.$strip>>;
3053
+ termination: z.ZodOptional<z.ZodObject<{
3054
+ by: z.ZodEnum<{
3055
+ unknown: "unknown";
3056
+ downstream: "downstream";
3057
+ upstream: "upstream";
3058
+ server: "server";
3059
+ }>;
3060
+ reason: z.ZodEnum<{
3061
+ unknown: "unknown";
3062
+ error: "error";
3063
+ timeout: "timeout";
3064
+ closed: "closed";
3065
+ reset: "reset";
3066
+ }>;
3067
+ message: z.ZodOptional<z.ZodString>;
3068
+ }, z.core.$strip>>;
3069
+ http: z.ZodOptional<z.ZodObject<{
3070
+ protocol: z.ZodOptional<z.ZodEnum<{
3071
+ "http/1.1": "http/1.1";
3072
+ h2: "h2";
3073
+ h2c: "h2c";
3074
+ h3: "h3";
3075
+ }>>;
3076
+ response: z.ZodObject<{
3077
+ status: z.ZodNumber;
3078
+ headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>>;
3079
+ }, z.core.$strip>;
3080
+ }, z.core.$strip>>;
3081
+ }, z.core.$strip>], "outcome">;
3082
+ }, z.core.$strip>;
3083
+ id: z.ZodOptional<z.ZodString>;
3084
+ created_at: z.ZodOptional<z.ZodString>;
3085
+ user_id: z.ZodOptional<z.ZodString>;
3086
+ workspace_id: z.ZodOptional<z.ZodString>;
3087
+ project_id: z.ZodOptional<z.ZodString>;
3088
+ cluster_id: z.ZodOptional<z.ZodString>;
3089
+ }, z.core.$loose>]>;
3090
+ declare const eventSchema: z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodObject<{
3091
+ type: z.ZodLiteral<"state.initial">;
3092
+ object: z.ZodObject<{
3093
+ snapshot_at: z.ZodString;
3094
+ clients: z.ZodArray<z.ZodObject<{
3095
+ id: z.ZodString;
3096
+ status: z.ZodEnum<{
3097
+ online: "online";
3098
+ offline: "offline";
3099
+ }>;
3100
+ user_id: z.ZodOptional<z.ZodString>;
3101
+ workspace_id: z.ZodOptional<z.ZodString>;
3102
+ project_id: z.ZodOptional<z.ZodString>;
3103
+ cluster_id: z.ZodOptional<z.ZodString>;
3104
+ plan: z.ZodOptional<z.ZodString>;
3105
+ provider: z.ZodOptional<z.ZodString>;
3106
+ region: z.ZodOptional<z.ZodString>;
3107
+ agent: z.ZodOptional<z.ZodString>;
3108
+ channel: z.ZodOptional<z.ZodString>;
3109
+ version: z.ZodOptional<z.ZodString>;
3110
+ os: z.ZodOptional<z.ZodString>;
3111
+ arch: z.ZodOptional<z.ZodString>;
3112
+ protocol_version: z.ZodOptional<z.ZodString>;
3113
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
3114
+ }, z.core.$strip>>;
3115
+ tunnels: z.ZodArray<z.ZodObject<{
3116
+ client_id: z.ZodString;
3117
+ user_id: z.ZodOptional<z.ZodString>;
3118
+ workspace_id: z.ZodOptional<z.ZodString>;
3119
+ project_id: z.ZodOptional<z.ZodString>;
3120
+ cluster_id: z.ZodOptional<z.ZodString>;
3121
+ plan: z.ZodOptional<z.ZodString>;
3122
+ provider: z.ZodOptional<z.ZodString>;
3123
+ region: z.ZodOptional<z.ZodString>;
3124
+ status: z.ZodEnum<{
3125
+ online: "online";
3126
+ offline: "offline";
3127
+ }>;
3128
+ id: z.ZodString;
3129
+ creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
3130
+ name: z.ZodOptional<z.ZodString>;
3131
+ type: z.ZodOptional<z.ZodEnum<{
3132
+ bytestream: "bytestream";
3133
+ datagram: "datagram";
3134
+ }>>;
3135
+ publish: z.ZodOptional<z.ZodBoolean>;
3136
+ protocol: z.ZodOptional<z.ZodEnum<{
3137
+ tls: "tls";
3138
+ dtls: "dtls";
3139
+ quic: "quic";
3140
+ http: "http";
3141
+ }>>;
3142
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
3143
+ geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
3144
+ trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
3145
+ host: z.ZodOptional<z.ZodString>;
3146
+ tls_mode: z.ZodOptional<z.ZodEnum<{
3147
+ passthrough: "passthrough";
3148
+ terminated: "terminated";
3149
+ }>>;
3150
+ tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
3151
+ tls_min_version: z.ZodOptional<z.ZodString>;
3152
+ tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
3153
+ mtls: z.ZodOptional<z.ZodBoolean>;
3154
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
3155
+ http_version: z.ZodOptional<z.ZodEnum<{
3156
+ "http/1.1": "http/1.1";
3157
+ h2: "h2";
3158
+ h2c: "h2c";
3159
+ h3: "h3";
3160
+ }>>;
3161
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
3162
+ token_auth: z.ZodOptional<z.ZodBoolean>;
3163
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
3164
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
3165
+ }, z.core.$strip>>;
3166
+ }, z.core.$strip>;
3167
+ id: z.ZodOptional<z.ZodString>;
3168
+ created_at: z.ZodOptional<z.ZodString>;
3169
+ user_id: z.ZodOptional<z.ZodString>;
3170
+ workspace_id: z.ZodOptional<z.ZodString>;
3171
+ project_id: z.ZodOptional<z.ZodString>;
3172
+ cluster_id: z.ZodOptional<z.ZodString>;
3173
+ }, z.core.$loose>, z.ZodObject<{
3174
+ type: z.ZodLiteral<"client.created">;
3175
+ object: z.ZodObject<{
3176
+ id: z.ZodString;
3177
+ status: z.ZodEnum<{
3178
+ online: "online";
3179
+ offline: "offline";
3180
+ }>;
3181
+ user_id: z.ZodOptional<z.ZodString>;
3182
+ workspace_id: z.ZodOptional<z.ZodString>;
3183
+ project_id: z.ZodOptional<z.ZodString>;
3184
+ cluster_id: z.ZodOptional<z.ZodString>;
3185
+ plan: z.ZodOptional<z.ZodString>;
3186
+ provider: z.ZodOptional<z.ZodString>;
3187
+ region: z.ZodOptional<z.ZodString>;
3188
+ agent: z.ZodOptional<z.ZodString>;
3189
+ channel: z.ZodOptional<z.ZodString>;
3190
+ version: z.ZodOptional<z.ZodString>;
3191
+ os: z.ZodOptional<z.ZodString>;
3192
+ arch: z.ZodOptional<z.ZodString>;
3193
+ protocol_version: z.ZodOptional<z.ZodString>;
3194
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
3195
+ }, z.core.$strip>;
3196
+ id: z.ZodOptional<z.ZodString>;
3197
+ created_at: z.ZodOptional<z.ZodString>;
3198
+ user_id: z.ZodOptional<z.ZodString>;
3199
+ workspace_id: z.ZodOptional<z.ZodString>;
3200
+ project_id: z.ZodOptional<z.ZodString>;
3201
+ cluster_id: z.ZodOptional<z.ZodString>;
3202
+ }, z.core.$loose>, z.ZodObject<{
3203
+ type: z.ZodLiteral<"client.updated">;
3204
+ object: z.ZodObject<{
3205
+ id: z.ZodString;
3206
+ status: z.ZodEnum<{
3207
+ online: "online";
3208
+ offline: "offline";
3209
+ }>;
3210
+ user_id: z.ZodOptional<z.ZodString>;
3211
+ workspace_id: z.ZodOptional<z.ZodString>;
3212
+ project_id: z.ZodOptional<z.ZodString>;
3213
+ cluster_id: z.ZodOptional<z.ZodString>;
3214
+ plan: z.ZodOptional<z.ZodString>;
3215
+ provider: z.ZodOptional<z.ZodString>;
3216
+ region: z.ZodOptional<z.ZodString>;
3217
+ agent: z.ZodOptional<z.ZodString>;
3218
+ channel: z.ZodOptional<z.ZodString>;
3219
+ version: z.ZodOptional<z.ZodString>;
3220
+ os: z.ZodOptional<z.ZodString>;
3221
+ arch: z.ZodOptional<z.ZodString>;
3222
+ protocol_version: z.ZodOptional<z.ZodString>;
3223
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
3224
+ }, z.core.$strip>;
3225
+ id: z.ZodOptional<z.ZodString>;
3226
+ created_at: z.ZodOptional<z.ZodString>;
3227
+ user_id: z.ZodOptional<z.ZodString>;
3228
+ workspace_id: z.ZodOptional<z.ZodString>;
3229
+ project_id: z.ZodOptional<z.ZodString>;
3230
+ cluster_id: z.ZodOptional<z.ZodString>;
3231
+ }, z.core.$loose>, z.ZodObject<{
3232
+ type: z.ZodLiteral<"client.deleted">;
3233
+ object: z.ZodObject<{
3234
+ id: z.ZodString;
3235
+ status: z.ZodEnum<{
3236
+ online: "online";
3237
+ offline: "offline";
3238
+ }>;
3239
+ user_id: z.ZodOptional<z.ZodString>;
3240
+ workspace_id: z.ZodOptional<z.ZodString>;
3241
+ project_id: z.ZodOptional<z.ZodString>;
3242
+ cluster_id: z.ZodOptional<z.ZodString>;
3243
+ plan: z.ZodOptional<z.ZodString>;
3244
+ provider: z.ZodOptional<z.ZodString>;
3245
+ region: z.ZodOptional<z.ZodString>;
3246
+ agent: z.ZodOptional<z.ZodString>;
3247
+ channel: z.ZodOptional<z.ZodString>;
3248
+ version: z.ZodOptional<z.ZodString>;
3249
+ os: z.ZodOptional<z.ZodString>;
3250
+ arch: z.ZodOptional<z.ZodString>;
3251
+ protocol_version: z.ZodOptional<z.ZodString>;
3252
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
3253
+ }, z.core.$strip>;
3254
+ id: z.ZodOptional<z.ZodString>;
3255
+ created_at: z.ZodOptional<z.ZodString>;
3256
+ user_id: z.ZodOptional<z.ZodString>;
3257
+ workspace_id: z.ZodOptional<z.ZodString>;
3258
+ project_id: z.ZodOptional<z.ZodString>;
3259
+ cluster_id: z.ZodOptional<z.ZodString>;
3260
+ }, z.core.$loose>, z.ZodObject<{
3261
+ type: z.ZodLiteral<"tunnel.created">;
3262
+ object: z.ZodObject<{
3263
+ client_id: z.ZodString;
3264
+ user_id: z.ZodOptional<z.ZodString>;
3265
+ workspace_id: z.ZodOptional<z.ZodString>;
3266
+ project_id: z.ZodOptional<z.ZodString>;
3267
+ cluster_id: z.ZodOptional<z.ZodString>;
3268
+ plan: z.ZodOptional<z.ZodString>;
3269
+ provider: z.ZodOptional<z.ZodString>;
3270
+ region: z.ZodOptional<z.ZodString>;
3271
+ status: z.ZodEnum<{
3272
+ online: "online";
3273
+ offline: "offline";
3274
+ }>;
3275
+ id: z.ZodString;
3276
+ creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
3277
+ name: z.ZodOptional<z.ZodString>;
3278
+ type: z.ZodOptional<z.ZodEnum<{
3279
+ bytestream: "bytestream";
3280
+ datagram: "datagram";
3281
+ }>>;
3282
+ publish: z.ZodOptional<z.ZodBoolean>;
3283
+ protocol: z.ZodOptional<z.ZodEnum<{
3284
+ tls: "tls";
3285
+ dtls: "dtls";
3286
+ quic: "quic";
3287
+ http: "http";
3288
+ }>>;
3289
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
3290
+ geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
3291
+ trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
3292
+ host: z.ZodOptional<z.ZodString>;
3293
+ tls_mode: z.ZodOptional<z.ZodEnum<{
3294
+ passthrough: "passthrough";
3295
+ terminated: "terminated";
3296
+ }>>;
3297
+ tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
3298
+ tls_min_version: z.ZodOptional<z.ZodString>;
3299
+ tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
3300
+ mtls: z.ZodOptional<z.ZodBoolean>;
3301
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
3302
+ http_version: z.ZodOptional<z.ZodEnum<{
3303
+ "http/1.1": "http/1.1";
3304
+ h2: "h2";
3305
+ h2c: "h2c";
3306
+ h3: "h3";
3307
+ }>>;
3308
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
3309
+ token_auth: z.ZodOptional<z.ZodBoolean>;
3310
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
3311
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
3312
+ }, z.core.$strip>;
3313
+ id: z.ZodOptional<z.ZodString>;
3314
+ created_at: z.ZodOptional<z.ZodString>;
3315
+ user_id: z.ZodOptional<z.ZodString>;
3316
+ workspace_id: z.ZodOptional<z.ZodString>;
3317
+ project_id: z.ZodOptional<z.ZodString>;
3318
+ cluster_id: z.ZodOptional<z.ZodString>;
3319
+ }, z.core.$loose>, z.ZodObject<{
3320
+ type: z.ZodLiteral<"tunnel.updated">;
3321
+ object: z.ZodObject<{
3322
+ client_id: z.ZodString;
3323
+ user_id: z.ZodOptional<z.ZodString>;
3324
+ workspace_id: z.ZodOptional<z.ZodString>;
3325
+ project_id: z.ZodOptional<z.ZodString>;
3326
+ cluster_id: z.ZodOptional<z.ZodString>;
3327
+ plan: z.ZodOptional<z.ZodString>;
3328
+ provider: z.ZodOptional<z.ZodString>;
3329
+ region: z.ZodOptional<z.ZodString>;
3330
+ status: z.ZodEnum<{
3331
+ online: "online";
3332
+ offline: "offline";
3333
+ }>;
3334
+ id: z.ZodString;
3335
+ creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
3336
+ name: z.ZodOptional<z.ZodString>;
3337
+ type: z.ZodOptional<z.ZodEnum<{
3338
+ bytestream: "bytestream";
3339
+ datagram: "datagram";
3340
+ }>>;
3341
+ publish: z.ZodOptional<z.ZodBoolean>;
3342
+ protocol: z.ZodOptional<z.ZodEnum<{
3343
+ tls: "tls";
3344
+ dtls: "dtls";
3345
+ quic: "quic";
3346
+ http: "http";
3347
+ }>>;
3348
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
3349
+ geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
3350
+ trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
3351
+ host: z.ZodOptional<z.ZodString>;
3352
+ tls_mode: z.ZodOptional<z.ZodEnum<{
3353
+ passthrough: "passthrough";
3354
+ terminated: "terminated";
3355
+ }>>;
3356
+ tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
3357
+ tls_min_version: z.ZodOptional<z.ZodString>;
3358
+ tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
3359
+ mtls: z.ZodOptional<z.ZodBoolean>;
3360
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
3361
+ http_version: z.ZodOptional<z.ZodEnum<{
3362
+ "http/1.1": "http/1.1";
3363
+ h2: "h2";
3364
+ h2c: "h2c";
3365
+ h3: "h3";
3366
+ }>>;
3367
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
3368
+ token_auth: z.ZodOptional<z.ZodBoolean>;
3369
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
3370
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
3371
+ }, z.core.$strip>;
3372
+ id: z.ZodOptional<z.ZodString>;
3373
+ created_at: z.ZodOptional<z.ZodString>;
3374
+ user_id: z.ZodOptional<z.ZodString>;
3375
+ workspace_id: z.ZodOptional<z.ZodString>;
3376
+ project_id: z.ZodOptional<z.ZodString>;
3377
+ cluster_id: z.ZodOptional<z.ZodString>;
3378
+ }, z.core.$loose>, z.ZodObject<{
3379
+ type: z.ZodLiteral<"tunnel.deleted">;
3380
+ object: z.ZodObject<{
3381
+ client_id: z.ZodString;
3382
+ user_id: z.ZodOptional<z.ZodString>;
3383
+ workspace_id: z.ZodOptional<z.ZodString>;
3384
+ project_id: z.ZodOptional<z.ZodString>;
3385
+ cluster_id: z.ZodOptional<z.ZodString>;
3386
+ plan: z.ZodOptional<z.ZodString>;
3387
+ provider: z.ZodOptional<z.ZodString>;
3388
+ region: z.ZodOptional<z.ZodString>;
3389
+ status: z.ZodEnum<{
3390
+ online: "online";
3391
+ offline: "offline";
3392
+ }>;
3393
+ id: z.ZodString;
3394
+ creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
3395
+ name: z.ZodOptional<z.ZodString>;
3396
+ type: z.ZodOptional<z.ZodEnum<{
3397
+ bytestream: "bytestream";
3398
+ datagram: "datagram";
3399
+ }>>;
3400
+ publish: z.ZodOptional<z.ZodBoolean>;
3401
+ protocol: z.ZodOptional<z.ZodEnum<{
3402
+ tls: "tls";
3403
+ dtls: "dtls";
3404
+ quic: "quic";
3405
+ http: "http";
3406
+ }>>;
3407
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
3408
+ geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
3409
+ trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
3410
+ host: z.ZodOptional<z.ZodString>;
3411
+ tls_mode: z.ZodOptional<z.ZodEnum<{
3412
+ passthrough: "passthrough";
3413
+ terminated: "terminated";
3414
+ }>>;
3415
+ tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
3416
+ tls_min_version: z.ZodOptional<z.ZodString>;
3417
+ tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
3418
+ mtls: z.ZodOptional<z.ZodBoolean>;
3419
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
3420
+ http_version: z.ZodOptional<z.ZodEnum<{
3421
+ "http/1.1": "http/1.1";
3422
+ h2: "h2";
3423
+ h2c: "h2c";
3424
+ h3: "h3";
3425
+ }>>;
3426
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
3427
+ token_auth: z.ZodOptional<z.ZodBoolean>;
3428
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
3429
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
3430
+ }, z.core.$strip>;
3431
+ id: z.ZodOptional<z.ZodString>;
3432
+ created_at: z.ZodOptional<z.ZodString>;
3433
+ user_id: z.ZodOptional<z.ZodString>;
3434
+ workspace_id: z.ZodOptional<z.ZodString>;
3435
+ project_id: z.ZodOptional<z.ZodString>;
3436
+ cluster_id: z.ZodOptional<z.ZodString>;
3437
+ }, z.core.$loose>]>, z.ZodUnion<readonly [z.ZodObject<{
3438
+ type: z.ZodLiteral<"client.created">;
3439
+ object: z.ZodObject<{
3440
+ id: z.ZodString;
3441
+ status: z.ZodEnum<{
3442
+ online: "online";
3443
+ offline: "offline";
3444
+ }>;
3445
+ user_id: z.ZodOptional<z.ZodString>;
3446
+ workspace_id: z.ZodOptional<z.ZodString>;
3447
+ project_id: z.ZodOptional<z.ZodString>;
3448
+ cluster_id: z.ZodOptional<z.ZodString>;
3449
+ plan: z.ZodOptional<z.ZodString>;
3450
+ provider: z.ZodOptional<z.ZodString>;
3451
+ region: z.ZodOptional<z.ZodString>;
3452
+ agent: z.ZodOptional<z.ZodString>;
3453
+ channel: z.ZodOptional<z.ZodString>;
3454
+ version: z.ZodOptional<z.ZodString>;
3455
+ os: z.ZodOptional<z.ZodString>;
3456
+ arch: z.ZodOptional<z.ZodString>;
3457
+ protocol_version: z.ZodOptional<z.ZodString>;
3458
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
3459
+ }, z.core.$strip>;
3460
+ id: z.ZodOptional<z.ZodString>;
3461
+ created_at: z.ZodOptional<z.ZodString>;
3462
+ user_id: z.ZodOptional<z.ZodString>;
3463
+ workspace_id: z.ZodOptional<z.ZodString>;
3464
+ project_id: z.ZodOptional<z.ZodString>;
3465
+ cluster_id: z.ZodOptional<z.ZodString>;
3466
+ }, z.core.$loose>, z.ZodObject<{
3467
+ type: z.ZodLiteral<"client.updated">;
3468
+ object: z.ZodObject<{
3469
+ id: z.ZodString;
3470
+ status: z.ZodEnum<{
3471
+ online: "online";
3472
+ offline: "offline";
3473
+ }>;
3474
+ user_id: z.ZodOptional<z.ZodString>;
3475
+ workspace_id: z.ZodOptional<z.ZodString>;
3476
+ project_id: z.ZodOptional<z.ZodString>;
3477
+ cluster_id: z.ZodOptional<z.ZodString>;
3478
+ plan: z.ZodOptional<z.ZodString>;
3479
+ provider: z.ZodOptional<z.ZodString>;
3480
+ region: z.ZodOptional<z.ZodString>;
3481
+ agent: z.ZodOptional<z.ZodString>;
3482
+ channel: z.ZodOptional<z.ZodString>;
3483
+ version: z.ZodOptional<z.ZodString>;
3484
+ os: z.ZodOptional<z.ZodString>;
3485
+ arch: z.ZodOptional<z.ZodString>;
3486
+ protocol_version: z.ZodOptional<z.ZodString>;
3487
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
3488
+ }, z.core.$strip>;
3489
+ id: z.ZodOptional<z.ZodString>;
3490
+ created_at: z.ZodOptional<z.ZodString>;
3491
+ user_id: z.ZodOptional<z.ZodString>;
3492
+ workspace_id: z.ZodOptional<z.ZodString>;
3493
+ project_id: z.ZodOptional<z.ZodString>;
3494
+ cluster_id: z.ZodOptional<z.ZodString>;
3495
+ }, z.core.$loose>, z.ZodObject<{
3496
+ type: z.ZodLiteral<"client.deleted">;
3497
+ object: z.ZodObject<{
3498
+ id: z.ZodString;
3499
+ status: z.ZodEnum<{
3500
+ online: "online";
3501
+ offline: "offline";
3502
+ }>;
3503
+ user_id: z.ZodOptional<z.ZodString>;
3504
+ workspace_id: z.ZodOptional<z.ZodString>;
3505
+ project_id: z.ZodOptional<z.ZodString>;
3506
+ cluster_id: z.ZodOptional<z.ZodString>;
3507
+ plan: z.ZodOptional<z.ZodString>;
3508
+ provider: z.ZodOptional<z.ZodString>;
3509
+ region: z.ZodOptional<z.ZodString>;
3510
+ agent: z.ZodOptional<z.ZodString>;
3511
+ channel: z.ZodOptional<z.ZodString>;
3512
+ version: z.ZodOptional<z.ZodString>;
3513
+ os: z.ZodOptional<z.ZodString>;
3514
+ arch: z.ZodOptional<z.ZodString>;
3515
+ protocol_version: z.ZodOptional<z.ZodString>;
3516
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
3517
+ }, z.core.$strip>;
3518
+ id: z.ZodOptional<z.ZodString>;
3519
+ created_at: z.ZodOptional<z.ZodString>;
3520
+ user_id: z.ZodOptional<z.ZodString>;
3521
+ workspace_id: z.ZodOptional<z.ZodString>;
3522
+ project_id: z.ZodOptional<z.ZodString>;
3523
+ cluster_id: z.ZodOptional<z.ZodString>;
3524
+ }, z.core.$loose>, z.ZodObject<{
3525
+ type: z.ZodLiteral<"tunnel.created">;
3526
+ object: z.ZodObject<{
3527
+ client_id: z.ZodString;
3528
+ user_id: z.ZodOptional<z.ZodString>;
3529
+ workspace_id: z.ZodOptional<z.ZodString>;
3530
+ project_id: z.ZodOptional<z.ZodString>;
3531
+ cluster_id: z.ZodOptional<z.ZodString>;
3532
+ plan: z.ZodOptional<z.ZodString>;
3533
+ provider: z.ZodOptional<z.ZodString>;
3534
+ region: z.ZodOptional<z.ZodString>;
3535
+ status: z.ZodEnum<{
3536
+ online: "online";
3537
+ offline: "offline";
3538
+ }>;
3539
+ id: z.ZodString;
3540
+ creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
3541
+ name: z.ZodOptional<z.ZodString>;
3542
+ type: z.ZodOptional<z.ZodEnum<{
3543
+ bytestream: "bytestream";
3544
+ datagram: "datagram";
3545
+ }>>;
3546
+ publish: z.ZodOptional<z.ZodBoolean>;
3547
+ protocol: z.ZodOptional<z.ZodEnum<{
3548
+ tls: "tls";
3549
+ dtls: "dtls";
3550
+ quic: "quic";
3551
+ http: "http";
3552
+ }>>;
3553
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
3554
+ geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
3555
+ trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
3556
+ host: z.ZodOptional<z.ZodString>;
3557
+ tls_mode: z.ZodOptional<z.ZodEnum<{
3558
+ passthrough: "passthrough";
3559
+ terminated: "terminated";
3560
+ }>>;
3561
+ tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
3562
+ tls_min_version: z.ZodOptional<z.ZodString>;
3563
+ tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
3564
+ mtls: z.ZodOptional<z.ZodBoolean>;
3565
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
3566
+ http_version: z.ZodOptional<z.ZodEnum<{
3567
+ "http/1.1": "http/1.1";
3568
+ h2: "h2";
3569
+ h2c: "h2c";
3570
+ h3: "h3";
3571
+ }>>;
3572
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
3573
+ token_auth: z.ZodOptional<z.ZodBoolean>;
3574
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
3575
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
3576
+ }, z.core.$strip>;
3577
+ id: z.ZodOptional<z.ZodString>;
3578
+ created_at: z.ZodOptional<z.ZodString>;
3579
+ user_id: z.ZodOptional<z.ZodString>;
3580
+ workspace_id: z.ZodOptional<z.ZodString>;
3581
+ project_id: z.ZodOptional<z.ZodString>;
3582
+ cluster_id: z.ZodOptional<z.ZodString>;
3583
+ }, z.core.$loose>, z.ZodObject<{
3584
+ type: z.ZodLiteral<"tunnel.updated">;
3585
+ object: z.ZodObject<{
3586
+ client_id: z.ZodString;
3587
+ user_id: z.ZodOptional<z.ZodString>;
3588
+ workspace_id: z.ZodOptional<z.ZodString>;
3589
+ project_id: z.ZodOptional<z.ZodString>;
3590
+ cluster_id: z.ZodOptional<z.ZodString>;
3591
+ plan: z.ZodOptional<z.ZodString>;
3592
+ provider: z.ZodOptional<z.ZodString>;
3593
+ region: z.ZodOptional<z.ZodString>;
3594
+ status: z.ZodEnum<{
3595
+ online: "online";
3596
+ offline: "offline";
3597
+ }>;
3598
+ id: z.ZodString;
3599
+ creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
3600
+ name: z.ZodOptional<z.ZodString>;
3601
+ type: z.ZodOptional<z.ZodEnum<{
3602
+ bytestream: "bytestream";
3603
+ datagram: "datagram";
3604
+ }>>;
3605
+ publish: z.ZodOptional<z.ZodBoolean>;
3606
+ protocol: z.ZodOptional<z.ZodEnum<{
3607
+ tls: "tls";
3608
+ dtls: "dtls";
3609
+ quic: "quic";
3610
+ http: "http";
3611
+ }>>;
3612
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
3613
+ geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
3614
+ trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
3615
+ host: z.ZodOptional<z.ZodString>;
3616
+ tls_mode: z.ZodOptional<z.ZodEnum<{
3617
+ passthrough: "passthrough";
3618
+ terminated: "terminated";
3619
+ }>>;
3620
+ tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
3621
+ tls_min_version: z.ZodOptional<z.ZodString>;
3622
+ tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
3623
+ mtls: z.ZodOptional<z.ZodBoolean>;
3624
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
3625
+ http_version: z.ZodOptional<z.ZodEnum<{
3626
+ "http/1.1": "http/1.1";
3627
+ h2: "h2";
3628
+ h2c: "h2c";
3629
+ h3: "h3";
3630
+ }>>;
3631
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
3632
+ token_auth: z.ZodOptional<z.ZodBoolean>;
3633
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
3634
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
3635
+ }, z.core.$strip>;
3636
+ id: z.ZodOptional<z.ZodString>;
3637
+ created_at: z.ZodOptional<z.ZodString>;
3638
+ user_id: z.ZodOptional<z.ZodString>;
3639
+ workspace_id: z.ZodOptional<z.ZodString>;
3640
+ project_id: z.ZodOptional<z.ZodString>;
3641
+ cluster_id: z.ZodOptional<z.ZodString>;
3642
+ }, z.core.$loose>, z.ZodObject<{
3643
+ type: z.ZodLiteral<"tunnel.deleted">;
3644
+ object: z.ZodObject<{
3645
+ client_id: z.ZodString;
3646
+ user_id: z.ZodOptional<z.ZodString>;
3647
+ workspace_id: z.ZodOptional<z.ZodString>;
3648
+ project_id: z.ZodOptional<z.ZodString>;
3649
+ cluster_id: z.ZodOptional<z.ZodString>;
3650
+ plan: z.ZodOptional<z.ZodString>;
3651
+ provider: z.ZodOptional<z.ZodString>;
3652
+ region: z.ZodOptional<z.ZodString>;
3653
+ status: z.ZodEnum<{
3654
+ online: "online";
3655
+ offline: "offline";
3656
+ }>;
3657
+ id: z.ZodString;
3658
+ creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
3659
+ name: z.ZodOptional<z.ZodString>;
3660
+ type: z.ZodOptional<z.ZodEnum<{
3661
+ bytestream: "bytestream";
3662
+ datagram: "datagram";
3663
+ }>>;
3664
+ publish: z.ZodOptional<z.ZodBoolean>;
3665
+ protocol: z.ZodOptional<z.ZodEnum<{
3666
+ tls: "tls";
3667
+ dtls: "dtls";
3668
+ quic: "quic";
3669
+ http: "http";
3670
+ }>>;
3671
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
3672
+ geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
3673
+ trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
3674
+ host: z.ZodOptional<z.ZodString>;
3675
+ tls_mode: z.ZodOptional<z.ZodEnum<{
3676
+ passthrough: "passthrough";
3677
+ terminated: "terminated";
3678
+ }>>;
3679
+ tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
3680
+ tls_min_version: z.ZodOptional<z.ZodString>;
3681
+ tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
3682
+ mtls: z.ZodOptional<z.ZodBoolean>;
3683
+ mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
3684
+ http_version: z.ZodOptional<z.ZodEnum<{
3685
+ "http/1.1": "http/1.1";
3686
+ h2: "h2";
3687
+ h2c: "h2c";
3688
+ h3: "h3";
3689
+ }>>;
3690
+ http_use_tls: z.ZodOptional<z.ZodBoolean>;
3691
+ token_auth: z.ZodOptional<z.ZodBoolean>;
3692
+ rstream_auth: z.ZodOptional<z.ZodBoolean>;
3693
+ challenge_mode: z.ZodOptional<z.ZodBoolean>;
3694
+ }, z.core.$strip>;
3695
+ id: z.ZodOptional<z.ZodString>;
3696
+ created_at: z.ZodOptional<z.ZodString>;
3697
+ user_id: z.ZodOptional<z.ZodString>;
3698
+ workspace_id: z.ZodOptional<z.ZodString>;
3699
+ project_id: z.ZodOptional<z.ZodString>;
3700
+ cluster_id: z.ZodOptional<z.ZodString>;
3701
+ }, z.core.$loose>, z.ZodObject<{
3702
+ type: z.ZodLiteral<"stream.summary">;
3703
+ object: z.ZodObject<{
3704
+ workspace_id: z.ZodOptional<z.ZodString>;
3705
+ project_id: z.ZodOptional<z.ZodString>;
3706
+ cluster_id: z.ZodOptional<z.ZodString>;
3707
+ user_id: z.ZodOptional<z.ZodString>;
3708
+ client_id: z.ZodOptional<z.ZodString>;
3709
+ tunnel_id: z.ZodOptional<z.ZodString>;
3710
+ stream_id: z.ZodString;
3711
+ created_at: z.ZodString;
3712
+ terminated_at: z.ZodString;
3713
+ request: z.ZodObject<{
3714
+ downstream: z.ZodObject<{
3715
+ ip: z.ZodOptional<z.ZodString>;
3716
+ geolocation: z.ZodOptional<z.ZodObject<{
3717
+ country: z.ZodOptional<z.ZodString>;
3718
+ region: z.ZodOptional<z.ZodString>;
3719
+ }, z.core.$strip>>;
3720
+ }, z.core.$strip>;
3721
+ http: z.ZodOptional<z.ZodObject<{
3722
+ protocol: z.ZodOptional<z.ZodEnum<{
3723
+ "http/1.1": "http/1.1";
3724
+ h2: "h2";
3725
+ h2c: "h2c";
3726
+ h3: "h3";
3727
+ }>>;
3728
+ request: z.ZodObject<{
3729
+ method: z.ZodString;
3730
+ scheme: z.ZodOptional<z.ZodString>;
3731
+ host: z.ZodOptional<z.ZodString>;
3732
+ path: z.ZodOptional<z.ZodString>;
3733
+ query: z.ZodOptional<z.ZodString>;
3734
+ url: z.ZodOptional<z.ZodString>;
3735
+ headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>>;
3736
+ userAgent: z.ZodOptional<z.ZodString>;
3737
+ }, z.core.$strip>;
3738
+ }, z.core.$strip>>;
3739
+ }, z.core.$strip>;
3740
+ firewall: z.ZodDiscriminatedUnion<[z.ZodObject<{
3741
+ decision: z.ZodLiteral<"allowed">;
3742
+ rule: z.ZodDiscriminatedUnion<[z.ZodObject<{
3743
+ kind: z.ZodLiteral<"none">;
3744
+ }, z.core.$strip>, z.ZodObject<{
3745
+ kind: z.ZodLiteral<"mtls">;
3746
+ }, z.core.$strip>, z.ZodObject<{
3747
+ kind: z.ZodLiteral<"rstream_auth">;
3748
+ source: z.ZodLiteral<"rstream_auth">;
3749
+ }, z.core.$strip>, z.ZodObject<{
3750
+ kind: z.ZodLiteral<"token">;
3751
+ source: z.ZodOptional<z.ZodEnum<{
3752
+ unknown: "unknown";
3753
+ query: "query";
3754
+ authorization: "authorization";
3755
+ client: "client";
3756
+ }>>;
3757
+ tokenType: z.ZodOptional<z.ZodEnum<{
3758
+ unknown: "unknown";
3759
+ auth: "auth";
3760
+ pat: "pat";
3761
+ app: "app";
3762
+ }>>;
3763
+ }, z.core.$strip>], "kind">;
3764
+ }, z.core.$strip>, z.ZodObject<{
3765
+ decision: z.ZodLiteral<"denied">;
3766
+ rule: z.ZodDiscriminatedUnion<[z.ZodObject<{
3767
+ kind: z.ZodLiteral<"none">;
3768
+ }, z.core.$strip>, z.ZodObject<{
3769
+ kind: z.ZodLiteral<"mtls">;
3770
+ }, z.core.$strip>, z.ZodObject<{
3771
+ kind: z.ZodLiteral<"rstream_auth">;
3772
+ source: z.ZodLiteral<"rstream_auth">;
3773
+ }, z.core.$strip>, z.ZodObject<{
3774
+ kind: z.ZodLiteral<"token">;
3775
+ source: z.ZodOptional<z.ZodEnum<{
3776
+ unknown: "unknown";
3777
+ query: "query";
3778
+ authorization: "authorization";
3779
+ client: "client";
3780
+ }>>;
3781
+ tokenType: z.ZodOptional<z.ZodEnum<{
3782
+ unknown: "unknown";
3783
+ auth: "auth";
3784
+ pat: "pat";
3785
+ app: "app";
3786
+ }>>;
3787
+ }, z.core.$strip>], "kind">;
3788
+ failure: z.ZodDiscriminatedUnion<[z.ZodObject<{
3789
+ kind: z.ZodLiteral<"timeout">;
3790
+ timeoutMs: z.ZodOptional<z.ZodNumber>;
3791
+ message: z.ZodOptional<z.ZodString>;
3792
+ }, z.core.$strip>, z.ZodObject<{
3793
+ kind: z.ZodLiteral<"unauthorized">;
3794
+ why: z.ZodDiscriminatedUnion<[z.ZodObject<{
3795
+ reason: z.ZodLiteral<"missing_token">;
3796
+ source: z.ZodEnum<{
3797
+ unknown: "unknown";
3798
+ query: "query";
3799
+ authorization: "authorization";
3800
+ client: "client";
3801
+ }>;
3802
+ }, z.core.$strip>, z.ZodObject<{
3803
+ reason: z.ZodLiteral<"invalid_token">;
3804
+ source: z.ZodEnum<{
3805
+ unknown: "unknown";
3806
+ query: "query";
3807
+ authorization: "authorization";
3808
+ client: "client";
3809
+ }>;
3810
+ }, z.core.$strip>, z.ZodObject<{
3811
+ reason: z.ZodLiteral<"expired_token">;
3812
+ source: z.ZodEnum<{
3813
+ unknown: "unknown";
3814
+ query: "query";
3815
+ authorization: "authorization";
3816
+ client: "client";
3817
+ }>;
3818
+ }, z.core.$strip>, z.ZodObject<{
3819
+ reason: z.ZodLiteral<"invalid_secret">;
3820
+ source: z.ZodEnum<{
3821
+ unknown: "unknown";
3822
+ query: "query";
3823
+ authorization: "authorization";
3824
+ client: "client";
3825
+ }>;
3826
+ }, z.core.$strip>, z.ZodObject<{
3827
+ reason: z.ZodLiteral<"user_mismatch">;
3828
+ source: z.ZodEnum<{
3829
+ unknown: "unknown";
3830
+ query: "query";
3831
+ authorization: "authorization";
3832
+ client: "client";
3833
+ }>;
3834
+ }, z.core.$strip>, z.ZodObject<{
3835
+ reason: z.ZodLiteral<"policy_denied">;
3836
+ policy: z.ZodEnum<{
3837
+ mtls: "mtls";
3838
+ ip: "ip";
3839
+ geo: "geo";
3840
+ challenge: "challenge";
3841
+ other: "other";
3842
+ }>;
3843
+ value: z.ZodOptional<z.ZodString>;
3844
+ source: z.ZodEnum<{
3845
+ unknown: "unknown";
3846
+ query: "query";
3847
+ authorization: "authorization";
3848
+ client: "client";
3849
+ }>;
3850
+ }, z.core.$strip>], "reason">;
3851
+ message: z.ZodOptional<z.ZodString>;
3852
+ }, z.core.$strip>, z.ZodObject<{
3853
+ kind: z.ZodLiteral<"not_found">;
3854
+ resource: z.ZodEnum<{
3855
+ client: "client";
3856
+ tunnel: "tunnel";
3857
+ route: "route";
3858
+ }>;
3859
+ message: z.ZodOptional<z.ZodString>;
3860
+ }, z.core.$strip>, z.ZodObject<{
3861
+ kind: z.ZodLiteral<"refused">;
3862
+ reason: z.ZodEnum<{
3863
+ policy: "policy";
3864
+ other: "other";
3865
+ capacity: "capacity";
3866
+ unsupported: "unsupported";
3867
+ }>;
3868
+ message: z.ZodOptional<z.ZodString>;
3869
+ }, z.core.$strip>, z.ZodObject<{
3870
+ kind: z.ZodLiteral<"io">;
3871
+ message: z.ZodOptional<z.ZodString>;
3872
+ }, z.core.$strip>, z.ZodObject<{
3873
+ kind: z.ZodLiteral<"internal">;
3874
+ message: z.ZodOptional<z.ZodString>;
3875
+ }, z.core.$strip>], "kind">;
3876
+ }, z.core.$strip>], "decision">;
3877
+ routing: z.ZodDiscriminatedUnion<[z.ZodObject<{
3878
+ decision: z.ZodLiteral<"routed">;
3879
+ tunnel: z.ZodObject<{
3880
+ tunnelId: z.ZodOptional<z.ZodString>;
3881
+ tunnelName: z.ZodOptional<z.ZodString>;
3882
+ protocol: z.ZodOptional<z.ZodString>;
3883
+ published: z.ZodOptional<z.ZodBoolean>;
3884
+ type: z.ZodOptional<z.ZodString>;
3885
+ tlsMode: z.ZodOptional<z.ZodString>;
3886
+ httpVersion: z.ZodOptional<z.ZodString>;
3887
+ httpUseTls: z.ZodOptional<z.ZodBoolean>;
3888
+ tokenAuth: z.ZodOptional<z.ZodBoolean>;
3889
+ mtls: z.ZodOptional<z.ZodBoolean>;
3890
+ }, z.core.$strip>;
3891
+ }, z.core.$strip>, z.ZodObject<{
3892
+ decision: z.ZodLiteral<"not_routed">;
3893
+ failure: z.ZodDiscriminatedUnion<[z.ZodObject<{
3894
+ kind: z.ZodLiteral<"timeout">;
3895
+ timeoutMs: z.ZodOptional<z.ZodNumber>;
3896
+ message: z.ZodOptional<z.ZodString>;
3897
+ }, z.core.$strip>, z.ZodObject<{
3898
+ kind: z.ZodLiteral<"unauthorized">;
3899
+ why: z.ZodDiscriminatedUnion<[z.ZodObject<{
3900
+ reason: z.ZodLiteral<"missing_token">;
3901
+ source: z.ZodEnum<{
3902
+ unknown: "unknown";
3903
+ query: "query";
3904
+ authorization: "authorization";
3905
+ client: "client";
3906
+ }>;
3907
+ }, z.core.$strip>, z.ZodObject<{
3908
+ reason: z.ZodLiteral<"invalid_token">;
3909
+ source: z.ZodEnum<{
3910
+ unknown: "unknown";
3911
+ query: "query";
3912
+ authorization: "authorization";
3913
+ client: "client";
3914
+ }>;
3915
+ }, z.core.$strip>, z.ZodObject<{
3916
+ reason: z.ZodLiteral<"expired_token">;
3917
+ source: z.ZodEnum<{
3918
+ unknown: "unknown";
3919
+ query: "query";
3920
+ authorization: "authorization";
3921
+ client: "client";
3922
+ }>;
3923
+ }, z.core.$strip>, z.ZodObject<{
3924
+ reason: z.ZodLiteral<"invalid_secret">;
3925
+ source: z.ZodEnum<{
3926
+ unknown: "unknown";
3927
+ query: "query";
3928
+ authorization: "authorization";
3929
+ client: "client";
3930
+ }>;
3931
+ }, z.core.$strip>, z.ZodObject<{
3932
+ reason: z.ZodLiteral<"user_mismatch">;
3933
+ source: z.ZodEnum<{
3934
+ unknown: "unknown";
3935
+ query: "query";
3936
+ authorization: "authorization";
3937
+ client: "client";
3938
+ }>;
3939
+ }, z.core.$strip>, z.ZodObject<{
3940
+ reason: z.ZodLiteral<"policy_denied">;
3941
+ policy: z.ZodEnum<{
3942
+ mtls: "mtls";
3943
+ ip: "ip";
3944
+ geo: "geo";
3945
+ challenge: "challenge";
3946
+ other: "other";
3947
+ }>;
3948
+ value: z.ZodOptional<z.ZodString>;
3949
+ source: z.ZodEnum<{
3950
+ unknown: "unknown";
3951
+ query: "query";
3952
+ authorization: "authorization";
3953
+ client: "client";
3954
+ }>;
3955
+ }, z.core.$strip>], "reason">;
3956
+ message: z.ZodOptional<z.ZodString>;
3957
+ }, z.core.$strip>, z.ZodObject<{
3958
+ kind: z.ZodLiteral<"not_found">;
3959
+ resource: z.ZodEnum<{
3960
+ client: "client";
3961
+ tunnel: "tunnel";
3962
+ route: "route";
3963
+ }>;
3964
+ message: z.ZodOptional<z.ZodString>;
3965
+ }, z.core.$strip>, z.ZodObject<{
3966
+ kind: z.ZodLiteral<"refused">;
3967
+ reason: z.ZodEnum<{
3968
+ policy: "policy";
3969
+ other: "other";
3970
+ capacity: "capacity";
3971
+ unsupported: "unsupported";
3972
+ }>;
3973
+ message: z.ZodOptional<z.ZodString>;
3974
+ }, z.core.$strip>, z.ZodObject<{
3975
+ kind: z.ZodLiteral<"io">;
3976
+ message: z.ZodOptional<z.ZodString>;
3977
+ }, z.core.$strip>, z.ZodObject<{
3978
+ kind: z.ZodLiteral<"internal">;
3979
+ message: z.ZodOptional<z.ZodString>;
3980
+ }, z.core.$strip>], "kind">;
3981
+ }, z.core.$strip>], "decision">;
3982
+ response: z.ZodDiscriminatedUnion<[z.ZodObject<{
3983
+ outcome: z.ZodLiteral<"connected">;
3984
+ established_at: z.ZodString;
3985
+ upstream: z.ZodOptional<z.ZodObject<{
3986
+ ip: z.ZodOptional<z.ZodString>;
3987
+ geolocation: z.ZodOptional<z.ZodObject<{
3988
+ country: z.ZodOptional<z.ZodString>;
3989
+ region: z.ZodOptional<z.ZodString>;
3990
+ }, z.core.$strip>>;
3991
+ }, z.core.$strip>>;
3992
+ metrics: z.ZodObject<{
3993
+ establish_ms: z.ZodNumber;
3994
+ duration_ms: z.ZodNumber;
3995
+ upstream_bytes: z.ZodNumber;
3996
+ downstream_bytes: z.ZodNumber;
3997
+ }, z.core.$strip>;
3998
+ termination: z.ZodOptional<z.ZodObject<{
3999
+ by: z.ZodEnum<{
4000
+ unknown: "unknown";
4001
+ downstream: "downstream";
4002
+ upstream: "upstream";
4003
+ server: "server";
4004
+ }>;
4005
+ reason: z.ZodEnum<{
4006
+ unknown: "unknown";
4007
+ error: "error";
4008
+ timeout: "timeout";
4009
+ closed: "closed";
4010
+ reset: "reset";
4011
+ }>;
4012
+ message: z.ZodOptional<z.ZodString>;
4013
+ }, z.core.$strip>>;
4014
+ http: z.ZodOptional<z.ZodObject<{
4015
+ protocol: z.ZodOptional<z.ZodEnum<{
4016
+ "http/1.1": "http/1.1";
4017
+ h2: "h2";
4018
+ h2c: "h2c";
4019
+ h3: "h3";
4020
+ }>>;
4021
+ response: z.ZodObject<{
4022
+ status: z.ZodNumber;
4023
+ headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>>;
4024
+ }, z.core.$strip>;
4025
+ }, z.core.$strip>>;
4026
+ }, z.core.$strip>, z.ZodObject<{
4027
+ outcome: z.ZodLiteral<"failed">;
4028
+ failure: z.ZodDiscriminatedUnion<[z.ZodObject<{
4029
+ kind: z.ZodLiteral<"timeout">;
4030
+ timeoutMs: z.ZodOptional<z.ZodNumber>;
4031
+ message: z.ZodOptional<z.ZodString>;
4032
+ }, z.core.$strip>, z.ZodObject<{
4033
+ kind: z.ZodLiteral<"unauthorized">;
4034
+ why: z.ZodDiscriminatedUnion<[z.ZodObject<{
4035
+ reason: z.ZodLiteral<"missing_token">;
4036
+ source: z.ZodEnum<{
4037
+ unknown: "unknown";
4038
+ query: "query";
4039
+ authorization: "authorization";
4040
+ client: "client";
4041
+ }>;
4042
+ }, z.core.$strip>, z.ZodObject<{
4043
+ reason: z.ZodLiteral<"invalid_token">;
4044
+ source: z.ZodEnum<{
4045
+ unknown: "unknown";
4046
+ query: "query";
4047
+ authorization: "authorization";
4048
+ client: "client";
4049
+ }>;
4050
+ }, z.core.$strip>, z.ZodObject<{
4051
+ reason: z.ZodLiteral<"expired_token">;
4052
+ source: z.ZodEnum<{
4053
+ unknown: "unknown";
4054
+ query: "query";
4055
+ authorization: "authorization";
4056
+ client: "client";
4057
+ }>;
4058
+ }, z.core.$strip>, z.ZodObject<{
4059
+ reason: z.ZodLiteral<"invalid_secret">;
4060
+ source: z.ZodEnum<{
4061
+ unknown: "unknown";
4062
+ query: "query";
4063
+ authorization: "authorization";
4064
+ client: "client";
4065
+ }>;
4066
+ }, z.core.$strip>, z.ZodObject<{
4067
+ reason: z.ZodLiteral<"user_mismatch">;
4068
+ source: z.ZodEnum<{
4069
+ unknown: "unknown";
4070
+ query: "query";
4071
+ authorization: "authorization";
4072
+ client: "client";
4073
+ }>;
4074
+ }, z.core.$strip>, z.ZodObject<{
4075
+ reason: z.ZodLiteral<"policy_denied">;
4076
+ policy: z.ZodEnum<{
4077
+ mtls: "mtls";
4078
+ ip: "ip";
4079
+ geo: "geo";
4080
+ challenge: "challenge";
4081
+ other: "other";
4082
+ }>;
4083
+ value: z.ZodOptional<z.ZodString>;
4084
+ source: z.ZodEnum<{
4085
+ unknown: "unknown";
4086
+ query: "query";
4087
+ authorization: "authorization";
4088
+ client: "client";
4089
+ }>;
4090
+ }, z.core.$strip>], "reason">;
4091
+ message: z.ZodOptional<z.ZodString>;
4092
+ }, z.core.$strip>, z.ZodObject<{
4093
+ kind: z.ZodLiteral<"not_found">;
4094
+ resource: z.ZodEnum<{
4095
+ client: "client";
4096
+ tunnel: "tunnel";
4097
+ route: "route";
4098
+ }>;
4099
+ message: z.ZodOptional<z.ZodString>;
4100
+ }, z.core.$strip>, z.ZodObject<{
4101
+ kind: z.ZodLiteral<"refused">;
4102
+ reason: z.ZodEnum<{
4103
+ policy: "policy";
4104
+ other: "other";
4105
+ capacity: "capacity";
4106
+ unsupported: "unsupported";
4107
+ }>;
4108
+ message: z.ZodOptional<z.ZodString>;
4109
+ }, z.core.$strip>, z.ZodObject<{
4110
+ kind: z.ZodLiteral<"io">;
4111
+ message: z.ZodOptional<z.ZodString>;
4112
+ }, z.core.$strip>, z.ZodObject<{
4113
+ kind: z.ZodLiteral<"internal">;
4114
+ message: z.ZodOptional<z.ZodString>;
4115
+ }, z.core.$strip>], "kind">;
4116
+ upstream: z.ZodOptional<z.ZodObject<{
4117
+ ip: z.ZodOptional<z.ZodString>;
4118
+ geolocation: z.ZodOptional<z.ZodObject<{
4119
+ country: z.ZodOptional<z.ZodString>;
4120
+ region: z.ZodOptional<z.ZodString>;
4121
+ }, z.core.$strip>>;
4122
+ }, z.core.$strip>>;
4123
+ metrics: z.ZodOptional<z.ZodObject<{
4124
+ time_to_fail_ms: z.ZodOptional<z.ZodNumber>;
4125
+ establish_ms: z.ZodOptional<z.ZodNumber>;
4126
+ }, z.core.$strip>>;
4127
+ termination: z.ZodOptional<z.ZodObject<{
4128
+ by: z.ZodEnum<{
4129
+ unknown: "unknown";
4130
+ downstream: "downstream";
4131
+ upstream: "upstream";
4132
+ server: "server";
4133
+ }>;
4134
+ reason: z.ZodEnum<{
4135
+ unknown: "unknown";
4136
+ error: "error";
4137
+ timeout: "timeout";
4138
+ closed: "closed";
4139
+ reset: "reset";
4140
+ }>;
4141
+ message: z.ZodOptional<z.ZodString>;
4142
+ }, z.core.$strip>>;
4143
+ http: z.ZodOptional<z.ZodObject<{
4144
+ protocol: z.ZodOptional<z.ZodEnum<{
4145
+ "http/1.1": "http/1.1";
4146
+ h2: "h2";
4147
+ h2c: "h2c";
4148
+ h3: "h3";
4149
+ }>>;
4150
+ response: z.ZodObject<{
4151
+ status: z.ZodNumber;
4152
+ headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>>;
4153
+ }, z.core.$strip>;
4154
+ }, z.core.$strip>>;
4155
+ }, z.core.$strip>], "outcome">;
4156
+ }, z.core.$strip>;
4157
+ id: z.ZodOptional<z.ZodString>;
4158
+ created_at: z.ZodOptional<z.ZodString>;
4159
+ user_id: z.ZodOptional<z.ZodString>;
4160
+ workspace_id: z.ZodOptional<z.ZodString>;
4161
+ project_id: z.ZodOptional<z.ZodString>;
4162
+ cluster_id: z.ZodOptional<z.ZodString>;
4163
+ }, z.core.$loose>]>]>;
4164
+ type InitialState = z.infer<typeof initialStateSchema>;
4165
+ type WsEvent = z.infer<typeof wsEventsSchema>;
4166
+ type WebhookEvent = z.infer<typeof webhookEventsSchema>;
4167
+ type Event = z.infer<typeof eventSchema>;
4168
+
4169
+ declare class RstreamWebhookResource {
4170
+ event(payload: string | Buffer, header: string | Buffer | Array<string>, secret: string, tolerance?: number, receivedAt?: number): Promise<WebhookEvent>;
4171
+ }
4172
+
4173
+ interface RstreamTunnelsConfig {
4174
+ /**
4175
+ * Data-plane credentials used against the engine.
4176
+ */
4177
+ credentials?: RstreamCredentials;
4178
+ /**
4179
+ * Engine URL to connect to. (e.g. "project-endpoint.cluster.example.rstream.test:443").
4180
+ */
4181
+ engine?: string;
4182
+ /**
4183
+ * Control-plane API URL used to resolve a managed project endpoint.
4184
+ * Defaults to https://rstream.io.
4185
+ */
4186
+ apiUrl?: string;
4187
+ /**
4188
+ * Managed tunnels project endpoint.
4189
+ * Used when the engine is not set explicitly.
4190
+ */
4191
+ projectEndpoint?: string;
4192
+ /**
4193
+ * Control-plane credentials used when resolving a managed project endpoint.
4194
+ * Defaults to the same credentials used against the engine when available.
4195
+ */
4196
+ controlPlaneCredentials?: RstreamCredentials;
4197
+ }
4198
+ declare class RstreamTunnelsClient {
4199
+ private readonly config?;
4200
+ constructor(config?: RstreamTunnelsConfig);
4201
+ get apiUrl(): string;
4202
+ get credentials(): RstreamCredentials | undefined;
4203
+ get controlPlaneCredentials(): RstreamCredentials | undefined;
4204
+ get projectEndpoint(): string | undefined;
4205
+ getEngine(): Promise<string>;
4206
+ get auth(): RstreamAuthResource;
4207
+ get clients(): RstreamClientsResource;
4208
+ get tunnels(): RstreamTunnelsResource;
4209
+ get webhooks(): RstreamWebhookResource;
4210
+ get turn(): RstreamTURNResource;
4211
+ getToken(engine?: string): Promise<string | undefined>;
4212
+ request<T>(path: string, options?: RequestInit): Promise<T>;
4213
+ }
4214
+
4215
+ declare class RstreamAuthResource {
4216
+ private readonly client;
4217
+ constructor(client: RstreamTunnelsClient);
4218
+ createAuthToken(params?: CreateAuthTokenParams, options?: {
4219
+ credentials?: ClientCredentials;
4220
+ engine?: string;
4221
+ }): Promise<CreateAuthTokenResponse>;
4222
+ }
4223
+ declare function createAuthTokenFromClientCredentials(credentials: ClientCredentials, params?: CreateAuthTokenParams, options?: {
4224
+ engine?: string;
4225
+ }): CreateAuthTokenResponse;
4226
+
4227
+ interface TunnelsResolutionConfig {
4228
+ apiUrl?: string;
4229
+ controlPlaneCredentials?: RstreamCredentials;
4230
+ credentials?: RstreamCredentials;
4231
+ engine?: string;
4232
+ projectEndpoint?: string;
4233
+ token?: string;
4234
+ }
4235
+ declare function resolveTunnelsAPIURL(apiUrl?: string): string;
4236
+ declare function resolveTunnelsCredentials(credentials?: RstreamCredentials): RstreamCredentials | undefined;
4237
+ declare function resolveControlPlaneCredentials(controlPlaneCredentials?: RstreamCredentials, credentials?: RstreamCredentials, authToken?: string): RstreamCredentials | undefined;
4238
+ declare function resolveTunnelsEngine(config: TunnelsResolutionConfig): Promise<string>;
4239
+
4240
+ declare const streamSummarySchema: z.ZodObject<{
4241
+ workspace_id: z.ZodOptional<z.ZodString>;
4242
+ project_id: z.ZodOptional<z.ZodString>;
4243
+ cluster_id: z.ZodOptional<z.ZodString>;
4244
+ user_id: z.ZodOptional<z.ZodString>;
4245
+ client_id: z.ZodOptional<z.ZodString>;
4246
+ tunnel_id: z.ZodOptional<z.ZodString>;
4247
+ stream_id: z.ZodString;
4248
+ created_at: z.ZodString;
4249
+ terminated_at: z.ZodString;
4250
+ request: z.ZodObject<{
4251
+ downstream: z.ZodObject<{
4252
+ ip: z.ZodOptional<z.ZodString>;
4253
+ geolocation: z.ZodOptional<z.ZodObject<{
4254
+ country: z.ZodOptional<z.ZodString>;
4255
+ region: z.ZodOptional<z.ZodString>;
4256
+ }, z.core.$strip>>;
4257
+ }, z.core.$strip>;
4258
+ http: z.ZodOptional<z.ZodObject<{
4259
+ protocol: z.ZodOptional<z.ZodEnum<{
4260
+ "http/1.1": "http/1.1";
4261
+ h2: "h2";
4262
+ h2c: "h2c";
4263
+ h3: "h3";
4264
+ }>>;
4265
+ request: z.ZodObject<{
4266
+ method: z.ZodString;
4267
+ scheme: z.ZodOptional<z.ZodString>;
4268
+ host: z.ZodOptional<z.ZodString>;
4269
+ path: z.ZodOptional<z.ZodString>;
4270
+ query: z.ZodOptional<z.ZodString>;
4271
+ url: z.ZodOptional<z.ZodString>;
4272
+ headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>>;
4273
+ userAgent: z.ZodOptional<z.ZodString>;
4274
+ }, z.core.$strip>;
4275
+ }, z.core.$strip>>;
4276
+ }, z.core.$strip>;
4277
+ firewall: z.ZodDiscriminatedUnion<[z.ZodObject<{
4278
+ decision: z.ZodLiteral<"allowed">;
4279
+ rule: z.ZodDiscriminatedUnion<[z.ZodObject<{
4280
+ kind: z.ZodLiteral<"none">;
4281
+ }, z.core.$strip>, z.ZodObject<{
4282
+ kind: z.ZodLiteral<"mtls">;
4283
+ }, z.core.$strip>, z.ZodObject<{
4284
+ kind: z.ZodLiteral<"rstream_auth">;
4285
+ source: z.ZodLiteral<"rstream_auth">;
4286
+ }, z.core.$strip>, z.ZodObject<{
4287
+ kind: z.ZodLiteral<"token">;
4288
+ source: z.ZodOptional<z.ZodEnum<{
4289
+ unknown: "unknown";
4290
+ query: "query";
4291
+ authorization: "authorization";
4292
+ client: "client";
4293
+ }>>;
4294
+ tokenType: z.ZodOptional<z.ZodEnum<{
4295
+ unknown: "unknown";
4296
+ auth: "auth";
4297
+ pat: "pat";
4298
+ app: "app";
4299
+ }>>;
4300
+ }, z.core.$strip>], "kind">;
4301
+ }, z.core.$strip>, z.ZodObject<{
4302
+ decision: z.ZodLiteral<"denied">;
4303
+ rule: z.ZodDiscriminatedUnion<[z.ZodObject<{
4304
+ kind: z.ZodLiteral<"none">;
4305
+ }, z.core.$strip>, z.ZodObject<{
4306
+ kind: z.ZodLiteral<"mtls">;
4307
+ }, z.core.$strip>, z.ZodObject<{
4308
+ kind: z.ZodLiteral<"rstream_auth">;
4309
+ source: z.ZodLiteral<"rstream_auth">;
4310
+ }, z.core.$strip>, z.ZodObject<{
4311
+ kind: z.ZodLiteral<"token">;
4312
+ source: z.ZodOptional<z.ZodEnum<{
4313
+ unknown: "unknown";
4314
+ query: "query";
4315
+ authorization: "authorization";
4316
+ client: "client";
4317
+ }>>;
4318
+ tokenType: z.ZodOptional<z.ZodEnum<{
4319
+ unknown: "unknown";
4320
+ auth: "auth";
4321
+ pat: "pat";
4322
+ app: "app";
4323
+ }>>;
4324
+ }, z.core.$strip>], "kind">;
4325
+ failure: z.ZodDiscriminatedUnion<[z.ZodObject<{
4326
+ kind: z.ZodLiteral<"timeout">;
4327
+ timeoutMs: z.ZodOptional<z.ZodNumber>;
4328
+ message: z.ZodOptional<z.ZodString>;
4329
+ }, z.core.$strip>, z.ZodObject<{
4330
+ kind: z.ZodLiteral<"unauthorized">;
4331
+ why: z.ZodDiscriminatedUnion<[z.ZodObject<{
4332
+ reason: z.ZodLiteral<"missing_token">;
4333
+ source: z.ZodEnum<{
4334
+ unknown: "unknown";
4335
+ query: "query";
4336
+ authorization: "authorization";
4337
+ client: "client";
4338
+ }>;
4339
+ }, z.core.$strip>, z.ZodObject<{
4340
+ reason: z.ZodLiteral<"invalid_token">;
4341
+ source: z.ZodEnum<{
4342
+ unknown: "unknown";
4343
+ query: "query";
4344
+ authorization: "authorization";
4345
+ client: "client";
4346
+ }>;
4347
+ }, z.core.$strip>, z.ZodObject<{
4348
+ reason: z.ZodLiteral<"expired_token">;
4349
+ source: z.ZodEnum<{
4350
+ unknown: "unknown";
4351
+ query: "query";
4352
+ authorization: "authorization";
4353
+ client: "client";
4354
+ }>;
4355
+ }, z.core.$strip>, z.ZodObject<{
4356
+ reason: z.ZodLiteral<"invalid_secret">;
4357
+ source: z.ZodEnum<{
4358
+ unknown: "unknown";
4359
+ query: "query";
4360
+ authorization: "authorization";
4361
+ client: "client";
4362
+ }>;
4363
+ }, z.core.$strip>, z.ZodObject<{
4364
+ reason: z.ZodLiteral<"user_mismatch">;
4365
+ source: z.ZodEnum<{
4366
+ unknown: "unknown";
4367
+ query: "query";
4368
+ authorization: "authorization";
4369
+ client: "client";
4370
+ }>;
4371
+ }, z.core.$strip>, z.ZodObject<{
4372
+ reason: z.ZodLiteral<"policy_denied">;
4373
+ policy: z.ZodEnum<{
4374
+ mtls: "mtls";
4375
+ ip: "ip";
4376
+ geo: "geo";
4377
+ challenge: "challenge";
4378
+ other: "other";
4379
+ }>;
4380
+ value: z.ZodOptional<z.ZodString>;
4381
+ source: z.ZodEnum<{
4382
+ unknown: "unknown";
4383
+ query: "query";
4384
+ authorization: "authorization";
4385
+ client: "client";
4386
+ }>;
4387
+ }, z.core.$strip>], "reason">;
4388
+ message: z.ZodOptional<z.ZodString>;
4389
+ }, z.core.$strip>, z.ZodObject<{
4390
+ kind: z.ZodLiteral<"not_found">;
4391
+ resource: z.ZodEnum<{
4392
+ client: "client";
4393
+ tunnel: "tunnel";
4394
+ route: "route";
4395
+ }>;
4396
+ message: z.ZodOptional<z.ZodString>;
4397
+ }, z.core.$strip>, z.ZodObject<{
4398
+ kind: z.ZodLiteral<"refused">;
4399
+ reason: z.ZodEnum<{
4400
+ policy: "policy";
4401
+ other: "other";
4402
+ capacity: "capacity";
4403
+ unsupported: "unsupported";
4404
+ }>;
4405
+ message: z.ZodOptional<z.ZodString>;
4406
+ }, z.core.$strip>, z.ZodObject<{
4407
+ kind: z.ZodLiteral<"io">;
4408
+ message: z.ZodOptional<z.ZodString>;
4409
+ }, z.core.$strip>, z.ZodObject<{
4410
+ kind: z.ZodLiteral<"internal">;
4411
+ message: z.ZodOptional<z.ZodString>;
4412
+ }, z.core.$strip>], "kind">;
4413
+ }, z.core.$strip>], "decision">;
4414
+ routing: z.ZodDiscriminatedUnion<[z.ZodObject<{
4415
+ decision: z.ZodLiteral<"routed">;
4416
+ tunnel: z.ZodObject<{
4417
+ tunnelId: z.ZodOptional<z.ZodString>;
4418
+ tunnelName: z.ZodOptional<z.ZodString>;
4419
+ protocol: z.ZodOptional<z.ZodString>;
4420
+ published: z.ZodOptional<z.ZodBoolean>;
4421
+ type: z.ZodOptional<z.ZodString>;
4422
+ tlsMode: z.ZodOptional<z.ZodString>;
4423
+ httpVersion: z.ZodOptional<z.ZodString>;
4424
+ httpUseTls: z.ZodOptional<z.ZodBoolean>;
4425
+ tokenAuth: z.ZodOptional<z.ZodBoolean>;
4426
+ mtls: z.ZodOptional<z.ZodBoolean>;
4427
+ }, z.core.$strip>;
4428
+ }, z.core.$strip>, z.ZodObject<{
4429
+ decision: z.ZodLiteral<"not_routed">;
4430
+ failure: z.ZodDiscriminatedUnion<[z.ZodObject<{
4431
+ kind: z.ZodLiteral<"timeout">;
4432
+ timeoutMs: z.ZodOptional<z.ZodNumber>;
4433
+ message: z.ZodOptional<z.ZodString>;
4434
+ }, z.core.$strip>, z.ZodObject<{
4435
+ kind: z.ZodLiteral<"unauthorized">;
4436
+ why: z.ZodDiscriminatedUnion<[z.ZodObject<{
4437
+ reason: z.ZodLiteral<"missing_token">;
4438
+ source: z.ZodEnum<{
4439
+ unknown: "unknown";
4440
+ query: "query";
4441
+ authorization: "authorization";
4442
+ client: "client";
4443
+ }>;
4444
+ }, z.core.$strip>, z.ZodObject<{
4445
+ reason: z.ZodLiteral<"invalid_token">;
4446
+ source: z.ZodEnum<{
4447
+ unknown: "unknown";
4448
+ query: "query";
4449
+ authorization: "authorization";
4450
+ client: "client";
4451
+ }>;
4452
+ }, z.core.$strip>, z.ZodObject<{
4453
+ reason: z.ZodLiteral<"expired_token">;
4454
+ source: z.ZodEnum<{
4455
+ unknown: "unknown";
4456
+ query: "query";
4457
+ authorization: "authorization";
4458
+ client: "client";
4459
+ }>;
4460
+ }, z.core.$strip>, z.ZodObject<{
4461
+ reason: z.ZodLiteral<"invalid_secret">;
4462
+ source: z.ZodEnum<{
4463
+ unknown: "unknown";
4464
+ query: "query";
4465
+ authorization: "authorization";
4466
+ client: "client";
4467
+ }>;
4468
+ }, z.core.$strip>, z.ZodObject<{
4469
+ reason: z.ZodLiteral<"user_mismatch">;
4470
+ source: z.ZodEnum<{
4471
+ unknown: "unknown";
4472
+ query: "query";
4473
+ authorization: "authorization";
4474
+ client: "client";
4475
+ }>;
4476
+ }, z.core.$strip>, z.ZodObject<{
4477
+ reason: z.ZodLiteral<"policy_denied">;
4478
+ policy: z.ZodEnum<{
4479
+ mtls: "mtls";
4480
+ ip: "ip";
4481
+ geo: "geo";
4482
+ challenge: "challenge";
4483
+ other: "other";
4484
+ }>;
4485
+ value: z.ZodOptional<z.ZodString>;
4486
+ source: z.ZodEnum<{
4487
+ unknown: "unknown";
4488
+ query: "query";
4489
+ authorization: "authorization";
4490
+ client: "client";
4491
+ }>;
4492
+ }, z.core.$strip>], "reason">;
4493
+ message: z.ZodOptional<z.ZodString>;
4494
+ }, z.core.$strip>, z.ZodObject<{
4495
+ kind: z.ZodLiteral<"not_found">;
4496
+ resource: z.ZodEnum<{
4497
+ client: "client";
4498
+ tunnel: "tunnel";
4499
+ route: "route";
4500
+ }>;
4501
+ message: z.ZodOptional<z.ZodString>;
4502
+ }, z.core.$strip>, z.ZodObject<{
4503
+ kind: z.ZodLiteral<"refused">;
4504
+ reason: z.ZodEnum<{
4505
+ policy: "policy";
4506
+ other: "other";
4507
+ capacity: "capacity";
4508
+ unsupported: "unsupported";
4509
+ }>;
4510
+ message: z.ZodOptional<z.ZodString>;
4511
+ }, z.core.$strip>, z.ZodObject<{
4512
+ kind: z.ZodLiteral<"io">;
4513
+ message: z.ZodOptional<z.ZodString>;
4514
+ }, z.core.$strip>, z.ZodObject<{
4515
+ kind: z.ZodLiteral<"internal">;
4516
+ message: z.ZodOptional<z.ZodString>;
4517
+ }, z.core.$strip>], "kind">;
4518
+ }, z.core.$strip>], "decision">;
4519
+ response: z.ZodDiscriminatedUnion<[z.ZodObject<{
4520
+ outcome: z.ZodLiteral<"connected">;
4521
+ established_at: z.ZodString;
4522
+ upstream: z.ZodOptional<z.ZodObject<{
4523
+ ip: z.ZodOptional<z.ZodString>;
4524
+ geolocation: z.ZodOptional<z.ZodObject<{
4525
+ country: z.ZodOptional<z.ZodString>;
4526
+ region: z.ZodOptional<z.ZodString>;
4527
+ }, z.core.$strip>>;
4528
+ }, z.core.$strip>>;
4529
+ metrics: z.ZodObject<{
4530
+ establish_ms: z.ZodNumber;
4531
+ duration_ms: z.ZodNumber;
4532
+ upstream_bytes: z.ZodNumber;
4533
+ downstream_bytes: z.ZodNumber;
4534
+ }, z.core.$strip>;
4535
+ termination: z.ZodOptional<z.ZodObject<{
4536
+ by: z.ZodEnum<{
4537
+ unknown: "unknown";
4538
+ downstream: "downstream";
4539
+ upstream: "upstream";
4540
+ server: "server";
4541
+ }>;
4542
+ reason: z.ZodEnum<{
4543
+ unknown: "unknown";
4544
+ error: "error";
4545
+ timeout: "timeout";
4546
+ closed: "closed";
4547
+ reset: "reset";
4548
+ }>;
4549
+ message: z.ZodOptional<z.ZodString>;
4550
+ }, z.core.$strip>>;
4551
+ http: z.ZodOptional<z.ZodObject<{
4552
+ protocol: z.ZodOptional<z.ZodEnum<{
4553
+ "http/1.1": "http/1.1";
4554
+ h2: "h2";
4555
+ h2c: "h2c";
4556
+ h3: "h3";
4557
+ }>>;
4558
+ response: z.ZodObject<{
4559
+ status: z.ZodNumber;
4560
+ headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>>;
4561
+ }, z.core.$strip>;
4562
+ }, z.core.$strip>>;
4563
+ }, z.core.$strip>, z.ZodObject<{
4564
+ outcome: z.ZodLiteral<"failed">;
4565
+ failure: z.ZodDiscriminatedUnion<[z.ZodObject<{
4566
+ kind: z.ZodLiteral<"timeout">;
4567
+ timeoutMs: z.ZodOptional<z.ZodNumber>;
4568
+ message: z.ZodOptional<z.ZodString>;
4569
+ }, z.core.$strip>, z.ZodObject<{
4570
+ kind: z.ZodLiteral<"unauthorized">;
4571
+ why: z.ZodDiscriminatedUnion<[z.ZodObject<{
4572
+ reason: z.ZodLiteral<"missing_token">;
4573
+ source: z.ZodEnum<{
4574
+ unknown: "unknown";
4575
+ query: "query";
4576
+ authorization: "authorization";
4577
+ client: "client";
4578
+ }>;
4579
+ }, z.core.$strip>, z.ZodObject<{
4580
+ reason: z.ZodLiteral<"invalid_token">;
4581
+ source: z.ZodEnum<{
4582
+ unknown: "unknown";
4583
+ query: "query";
4584
+ authorization: "authorization";
4585
+ client: "client";
4586
+ }>;
4587
+ }, z.core.$strip>, z.ZodObject<{
4588
+ reason: z.ZodLiteral<"expired_token">;
4589
+ source: z.ZodEnum<{
4590
+ unknown: "unknown";
4591
+ query: "query";
4592
+ authorization: "authorization";
4593
+ client: "client";
4594
+ }>;
4595
+ }, z.core.$strip>, z.ZodObject<{
4596
+ reason: z.ZodLiteral<"invalid_secret">;
4597
+ source: z.ZodEnum<{
4598
+ unknown: "unknown";
4599
+ query: "query";
4600
+ authorization: "authorization";
4601
+ client: "client";
4602
+ }>;
4603
+ }, z.core.$strip>, z.ZodObject<{
4604
+ reason: z.ZodLiteral<"user_mismatch">;
4605
+ source: z.ZodEnum<{
4606
+ unknown: "unknown";
4607
+ query: "query";
4608
+ authorization: "authorization";
4609
+ client: "client";
4610
+ }>;
4611
+ }, z.core.$strip>, z.ZodObject<{
4612
+ reason: z.ZodLiteral<"policy_denied">;
4613
+ policy: z.ZodEnum<{
4614
+ mtls: "mtls";
4615
+ ip: "ip";
4616
+ geo: "geo";
4617
+ challenge: "challenge";
4618
+ other: "other";
4619
+ }>;
4620
+ value: z.ZodOptional<z.ZodString>;
4621
+ source: z.ZodEnum<{
4622
+ unknown: "unknown";
4623
+ query: "query";
4624
+ authorization: "authorization";
4625
+ client: "client";
4626
+ }>;
4627
+ }, z.core.$strip>], "reason">;
4628
+ message: z.ZodOptional<z.ZodString>;
4629
+ }, z.core.$strip>, z.ZodObject<{
4630
+ kind: z.ZodLiteral<"not_found">;
4631
+ resource: z.ZodEnum<{
4632
+ client: "client";
4633
+ tunnel: "tunnel";
4634
+ route: "route";
4635
+ }>;
4636
+ message: z.ZodOptional<z.ZodString>;
4637
+ }, z.core.$strip>, z.ZodObject<{
4638
+ kind: z.ZodLiteral<"refused">;
4639
+ reason: z.ZodEnum<{
4640
+ policy: "policy";
4641
+ other: "other";
4642
+ capacity: "capacity";
4643
+ unsupported: "unsupported";
4644
+ }>;
4645
+ message: z.ZodOptional<z.ZodString>;
4646
+ }, z.core.$strip>, z.ZodObject<{
4647
+ kind: z.ZodLiteral<"io">;
4648
+ message: z.ZodOptional<z.ZodString>;
4649
+ }, z.core.$strip>, z.ZodObject<{
4650
+ kind: z.ZodLiteral<"internal">;
4651
+ message: z.ZodOptional<z.ZodString>;
4652
+ }, z.core.$strip>], "kind">;
4653
+ upstream: z.ZodOptional<z.ZodObject<{
4654
+ ip: z.ZodOptional<z.ZodString>;
4655
+ geolocation: z.ZodOptional<z.ZodObject<{
4656
+ country: z.ZodOptional<z.ZodString>;
4657
+ region: z.ZodOptional<z.ZodString>;
4658
+ }, z.core.$strip>>;
4659
+ }, z.core.$strip>>;
4660
+ metrics: z.ZodOptional<z.ZodObject<{
4661
+ time_to_fail_ms: z.ZodOptional<z.ZodNumber>;
4662
+ establish_ms: z.ZodOptional<z.ZodNumber>;
4663
+ }, z.core.$strip>>;
4664
+ termination: z.ZodOptional<z.ZodObject<{
4665
+ by: z.ZodEnum<{
4666
+ unknown: "unknown";
4667
+ downstream: "downstream";
4668
+ upstream: "upstream";
4669
+ server: "server";
4670
+ }>;
4671
+ reason: z.ZodEnum<{
4672
+ unknown: "unknown";
4673
+ error: "error";
4674
+ timeout: "timeout";
4675
+ closed: "closed";
4676
+ reset: "reset";
4677
+ }>;
4678
+ message: z.ZodOptional<z.ZodString>;
4679
+ }, z.core.$strip>>;
4680
+ http: z.ZodOptional<z.ZodObject<{
4681
+ protocol: z.ZodOptional<z.ZodEnum<{
4682
+ "http/1.1": "http/1.1";
4683
+ h2: "h2";
4684
+ h2c: "h2c";
4685
+ h3: "h3";
4686
+ }>>;
4687
+ response: z.ZodObject<{
4688
+ status: z.ZodNumber;
4689
+ headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>>;
4690
+ }, z.core.$strip>;
4691
+ }, z.core.$strip>>;
4692
+ }, z.core.$strip>], "outcome">;
4693
+ }, z.core.$strip>;
4694
+ type StreamSummary = z.infer<typeof streamSummarySchema>;
4695
+
4696
+ /**
4697
+ * Configuration for the Watch connection.
4698
+ */
4699
+ interface WatchConfig {
4700
+ /**
4701
+ * Short-term authentication token provider.
4702
+ */
4703
+ auth: RstreamAuth;
4704
+ /**
4705
+ * Engine URL to connect to. (e.g. "project-endpoint.cluster.example.rstream.test:443").
4706
+ */
4707
+ engine?: string;
4708
+ /**
4709
+ * Control-plane API URL used to resolve a managed project endpoint.
4710
+ * Defaults to https://rstream.io.
4711
+ */
4712
+ apiUrl?: string;
4713
+ /**
4714
+ * Managed tunnels project endpoint.
4715
+ * Used when the engine is not set explicitly.
4716
+ */
4717
+ projectEndpoint?: string;
4718
+ /**
4719
+ * Control-plane credentials used when resolving a managed project endpoint.
4720
+ * Defaults to the watch token itself.
4721
+ */
4722
+ controlPlaneCredentials?: RstreamCredentials;
4723
+ /**
4724
+ * Which protocol to use.
4725
+ * Defaults to "sse" (Server-Sent Events).
4726
+ */
4727
+ transport?: "sse" | "websocket";
4728
+ }
4729
+ /**
4730
+ * Callbacks for the different Watch events.
4731
+ */
4732
+ interface WatchWsEvents {
4733
+ /**
4734
+ * Called when a new message event is received.
4735
+ */
4736
+ onEvent?: (event: WsEvent) => void;
4737
+ /**
4738
+ * Called when the connection is successfully opened.
4739
+ */
4740
+ onConnect?: () => void;
4741
+ /**
4742
+ * Called when the connection is closed.
4743
+ */
4744
+ onClose?: () => void;
4745
+ }
4746
+ declare class Watch {
4747
+ private connection;
4748
+ private connectionState;
4749
+ private readonly config;
4750
+ private readonly events;
4751
+ constructor(config: WatchConfig, events: WatchWsEvents);
4752
+ connect(): Promise<void>;
4753
+ disconnect(): void;
4754
+ }
4755
+
4756
+ declare const webttyServerSchema: z.ZodObject<{
4757
+ tunnel_id: z.ZodString;
4758
+ host: z.ZodString;
4759
+ token_auth: z.ZodBoolean;
4760
+ os_family: z.ZodOptional<z.ZodEnum<{
4761
+ linux: "linux";
4762
+ macos: "macos";
4763
+ windows: "windows";
4764
+ netbsd: "netbsd";
4765
+ openbsd: "openbsd";
4766
+ freebsd: "freebsd";
4767
+ }>>;
4768
+ arch: z.ZodOptional<z.ZodString>;
4769
+ os_id: z.ZodOptional<z.ZodString>;
4770
+ os_version_id: z.ZodOptional<z.ZodString>;
4771
+ os_version_codename: z.ZodOptional<z.ZodString>;
4772
+ os_pretty_name: z.ZodOptional<z.ZodString>;
4773
+ kernel_release: z.ZodOptional<z.ZodString>;
4774
+ hostname: z.ZodOptional<z.ZodString>;
4775
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodOptional<z.ZodString>>>;
4776
+ }, z.core.$strip>;
4777
+ type WebTTYServer = z.infer<typeof webttyServerSchema>;
4778
+ declare function parseWebTTYServers(tunnels: Tunnel[]): WebTTYServer[];
4779
+
4780
+ export { type Client, type CreateAPITURNCredentialsOptions, type CreateAPPTURNCredentialsOptions, type CreateAuthTokenParams, type CreateAuthTokenResponse, type CreatePATTURNCredentialsOptions, type CreateTURNCredentialsOptions, type Event, type InitialState, type ListClientsParams, type ListClientsResponse, type ListTunnelsParams, type ListTunnelsResponse, type RstreamAuth, type RstreamAuthJwtPayload, RstreamAuthResource, RstreamAuthResource as RstreamAuthRessource, type RstreamAuthToken, type RstreamAuthTokenPermissions, type RstreamAuthTokenScopes, RstreamTunnelsClient as RstreamClient, RstreamClientsResource, RstreamClientsResource as RstreamClientsRessource, RstreamTURNResource, RstreamTunnelsClient, type RstreamTunnelsConfig, RstreamTunnelsResource, RstreamTunnelsResource as RstreamTunnelsRessource, RstreamWebhookResource, RstreamWebhookResource as RstreamWebhookRessource, type StreamSummary, type TURNCredentialMode, type Token, type Tunnel, RstreamTunnelsClient as Tunnels, type TunnelsResolutionConfig, Watch, type WatchConfig, type WatchWsEvents, type WebTTYServer, type WebhookEvent, type WsEvent, authTokenPermissionsSchema, authTokenSchema, authTokenScopesSchema, authTokenTunnelsScopesSchema, clientSchema, createAPITURNCredentials, createAPPTURNCredentials, createAuthTokenFromClientCredentials, createAuthTokenParamsSchema, createAuthTokenResponseSchema, createPATTURNCredentials, createTURNCredentials, eventSchema, listClientsParamsSchema, listClientsResponseSchema, listTunnelsParamsSchema, listTunnelsResponseSchema, parseWebTTYServers, resolveControlPlaneCredentials, resolveTunnelsAPIURL, resolveTunnelsCredentials, resolveTunnelsEngine, streamSummarySchema, tokenSchema, tunnelSchema, turnCredentialModeSchema, webhookEventsSchema, webttyServerSchema, wsEventsSchema };