@rstreamlabs/tunnels 1.0.7 → 1.0.9

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (11) hide show
  1. package/README.md +20 -16
  2. package/dist/{chunk-OPJKEDVS.mjs → chunk-TVDZNVSF.mjs} +7 -14
  3. package/dist/index.d.mts +224 -2658
  4. package/dist/index.d.ts +224 -2658
  5. package/dist/index.js +572 -171
  6. package/dist/index.mjs +563 -157
  7. package/dist/openapi.d.mts +8 -30
  8. package/dist/openapi.d.ts +8 -30
  9. package/dist/openapi.js +7 -14
  10. package/dist/openapi.mjs +1 -1
  11. package/package.json +3 -3
package/dist/index.d.ts CHANGED
@@ -1,15 +1,15 @@
1
- import { RstreamCredentials, TURNCredentials, ClientCredentials } from '@rstreamlabs/rstream';
1
+ import { RstreamCredentials, TURNCredentials, ClientCredentials, TunnelsProject } from '@rstreamlabs/rstream';
2
2
  import * as z from 'zod';
3
3
  import { JwtPayload } from 'jsonwebtoken';
4
4
  export { engineOpenApiDocument, engineOpenApiJson } from './openapi.js';
5
5
 
6
6
  declare const StringFilter: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
7
7
  exact: z.ZodString;
8
- }, z.core.$strip>, z.ZodObject<{
8
+ }, z.core.$strict>, z.ZodObject<{
9
9
  oneof: z.ZodArray<z.ZodString>;
10
- }, z.core.$strip>, z.ZodObject<{
10
+ }, z.core.$strict>, z.ZodObject<{
11
11
  regex: z.ZodString;
12
- }, z.core.$strip>]>;
12
+ }, z.core.$strict>]>;
13
13
  type Schema = z.core.SomeType;
14
14
  type Shape = z.ZodRawShape;
15
15
  type RecordKey = z.core.$ZodRecordKey;
@@ -28,6 +28,7 @@ declare const authTokenPermissionsSchema: z.ZodArray<z.ZodString>;
28
28
  declare const authTokenTunnelsScopesSchema: z.ZodObject<{
29
29
  create: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
30
30
  filters: z.ZodOptional<z.ZodType<FilterNode<{
31
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
31
32
  type: z.ZodOptional<z.ZodEnum<{
32
33
  bytestream: "bytestream";
33
34
  datagram: "datagram";
@@ -40,7 +41,6 @@ declare const authTokenTunnelsScopesSchema: z.ZodObject<{
40
41
  quic: "quic";
41
42
  http: "http";
42
43
  }>>;
43
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
44
44
  geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
45
45
  trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
46
46
  host: z.ZodOptional<z.ZodString>;
@@ -53,8 +53,7 @@ declare const authTokenTunnelsScopesSchema: z.ZodObject<{
53
53
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
54
54
  tls_min_version: z.ZodOptional<z.ZodString>;
55
55
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
56
- mtls: z.ZodOptional<z.ZodBoolean>;
57
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
56
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
58
57
  http_version: z.ZodOptional<z.ZodEnum<{
59
58
  "http/1.1": "http/1.1";
60
59
  h2: "h2";
@@ -67,6 +66,7 @@ declare const authTokenTunnelsScopesSchema: z.ZodObject<{
67
66
  rstream_auth: z.ZodOptional<z.ZodBoolean>;
68
67
  challenge_mode: z.ZodOptional<z.ZodBoolean>;
69
68
  }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
69
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
70
70
  type: z.ZodOptional<z.ZodEnum<{
71
71
  bytestream: "bytestream";
72
72
  datagram: "datagram";
@@ -79,7 +79,6 @@ declare const authTokenTunnelsScopesSchema: z.ZodObject<{
79
79
  quic: "quic";
80
80
  http: "http";
81
81
  }>>;
82
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
83
82
  geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
84
83
  trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
85
84
  host: z.ZodOptional<z.ZodString>;
@@ -92,8 +91,7 @@ declare const authTokenTunnelsScopesSchema: z.ZodObject<{
92
91
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
93
92
  tls_min_version: z.ZodOptional<z.ZodString>;
94
93
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
95
- mtls: z.ZodOptional<z.ZodBoolean>;
96
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
94
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
97
95
  http_version: z.ZodOptional<z.ZodEnum<{
98
96
  "http/1.1": "http/1.1";
99
97
  h2: "h2";
@@ -106,7 +104,7 @@ declare const authTokenTunnelsScopesSchema: z.ZodObject<{
106
104
  rstream_auth: z.ZodOptional<z.ZodBoolean>;
107
105
  challenge_mode: z.ZodOptional<z.ZodBoolean>;
108
106
  }>, unknown>>>;
109
- }, z.core.$strip>]>>;
107
+ }, z.core.$strict>]>>;
110
108
  connect: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
111
109
  filters: z.ZodOptional<z.ZodType<FilterNode<{
112
110
  client_id: z.ZodString;
@@ -148,8 +146,7 @@ declare const authTokenTunnelsScopesSchema: z.ZodObject<{
148
146
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
149
147
  tls_min_version: z.ZodOptional<z.ZodString>;
150
148
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
151
- mtls: z.ZodOptional<z.ZodBoolean>;
152
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
149
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
153
150
  http_version: z.ZodOptional<z.ZodEnum<{
154
151
  "http/1.1": "http/1.1";
155
152
  h2: "h2";
@@ -201,8 +198,7 @@ declare const authTokenTunnelsScopesSchema: z.ZodObject<{
201
198
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
202
199
  tls_min_version: z.ZodOptional<z.ZodString>;
203
200
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
204
- mtls: z.ZodOptional<z.ZodBoolean>;
205
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
201
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
206
202
  http_version: z.ZodOptional<z.ZodEnum<{
207
203
  "http/1.1": "http/1.1";
208
204
  h2: "h2";
@@ -220,7 +216,7 @@ declare const authTokenTunnelsScopesSchema: z.ZodObject<{
220
216
  }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
221
217
  path: z.ZodOptional<z.ZodString>;
222
218
  }>, unknown>>>;
223
- }, z.core.$strip>]>>;
219
+ }, z.core.$strict>]>>;
224
220
  list: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
225
221
  filters: z.ZodOptional<z.ZodType<FilterNode<{
226
222
  client_id: z.ZodString;
@@ -262,8 +258,7 @@ declare const authTokenTunnelsScopesSchema: z.ZodObject<{
262
258
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
263
259
  tls_min_version: z.ZodOptional<z.ZodString>;
264
260
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
265
- mtls: z.ZodOptional<z.ZodBoolean>;
266
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
261
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
267
262
  http_version: z.ZodOptional<z.ZodEnum<{
268
263
  "http/1.1": "http/1.1";
269
264
  h2: "h2";
@@ -315,8 +310,7 @@ declare const authTokenTunnelsScopesSchema: z.ZodObject<{
315
310
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
316
311
  tls_min_version: z.ZodOptional<z.ZodString>;
317
312
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
318
- mtls: z.ZodOptional<z.ZodBoolean>;
319
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
313
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
320
314
  http_version: z.ZodOptional<z.ZodEnum<{
321
315
  "http/1.1": "http/1.1";
322
316
  h2: "h2";
@@ -355,8 +349,7 @@ declare const authTokenTunnelsScopesSchema: z.ZodObject<{
355
349
  tls_alpns: z.ZodOptional<z.ZodBoolean>;
356
350
  tls_min_version: z.ZodOptional<z.ZodBoolean>;
357
351
  tls_ciphers: z.ZodOptional<z.ZodBoolean>;
358
- mtls: z.ZodOptional<z.ZodBoolean>;
359
- mtls_ca_cert_pem: z.ZodOptional<z.ZodBoolean>;
352
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
360
353
  http_version: z.ZodOptional<z.ZodBoolean>;
361
354
  http_use_tls: z.ZodOptional<z.ZodBoolean>;
362
355
  upstream_tls: z.ZodOptional<z.ZodBoolean>;
@@ -364,12 +357,13 @@ declare const authTokenTunnelsScopesSchema: z.ZodObject<{
364
357
  rstream_auth: z.ZodOptional<z.ZodBoolean>;
365
358
  challenge_mode: z.ZodOptional<z.ZodBoolean>;
366
359
  }, z.core.$strip>>;
367
- }, z.core.$strip>]>>;
368
- }, z.core.$strip>;
360
+ }, z.core.$strict>]>>;
361
+ }, z.core.$strict>;
369
362
  declare const authTokenScopesSchema: z.ZodObject<{
370
363
  tunnels: z.ZodOptional<z.ZodObject<{
371
364
  create: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
372
365
  filters: z.ZodOptional<z.ZodType<FilterNode<{
366
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
373
367
  type: z.ZodOptional<z.ZodEnum<{
374
368
  bytestream: "bytestream";
375
369
  datagram: "datagram";
@@ -382,7 +376,6 @@ declare const authTokenScopesSchema: z.ZodObject<{
382
376
  quic: "quic";
383
377
  http: "http";
384
378
  }>>;
385
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
386
379
  geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
387
380
  trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
388
381
  host: z.ZodOptional<z.ZodString>;
@@ -395,8 +388,7 @@ declare const authTokenScopesSchema: z.ZodObject<{
395
388
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
396
389
  tls_min_version: z.ZodOptional<z.ZodString>;
397
390
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
398
- mtls: z.ZodOptional<z.ZodBoolean>;
399
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
391
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
400
392
  http_version: z.ZodOptional<z.ZodEnum<{
401
393
  "http/1.1": "http/1.1";
402
394
  h2: "h2";
@@ -409,6 +401,7 @@ declare const authTokenScopesSchema: z.ZodObject<{
409
401
  rstream_auth: z.ZodOptional<z.ZodBoolean>;
410
402
  challenge_mode: z.ZodOptional<z.ZodBoolean>;
411
403
  }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
404
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
412
405
  type: z.ZodOptional<z.ZodEnum<{
413
406
  bytestream: "bytestream";
414
407
  datagram: "datagram";
@@ -421,7 +414,6 @@ declare const authTokenScopesSchema: z.ZodObject<{
421
414
  quic: "quic";
422
415
  http: "http";
423
416
  }>>;
424
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
425
417
  geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
426
418
  trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
427
419
  host: z.ZodOptional<z.ZodString>;
@@ -434,8 +426,7 @@ declare const authTokenScopesSchema: z.ZodObject<{
434
426
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
435
427
  tls_min_version: z.ZodOptional<z.ZodString>;
436
428
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
437
- mtls: z.ZodOptional<z.ZodBoolean>;
438
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
429
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
439
430
  http_version: z.ZodOptional<z.ZodEnum<{
440
431
  "http/1.1": "http/1.1";
441
432
  h2: "h2";
@@ -448,7 +439,7 @@ declare const authTokenScopesSchema: z.ZodObject<{
448
439
  rstream_auth: z.ZodOptional<z.ZodBoolean>;
449
440
  challenge_mode: z.ZodOptional<z.ZodBoolean>;
450
441
  }>, unknown>>>;
451
- }, z.core.$strip>]>>;
442
+ }, z.core.$strict>]>>;
452
443
  connect: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
453
444
  filters: z.ZodOptional<z.ZodType<FilterNode<{
454
445
  client_id: z.ZodString;
@@ -490,8 +481,7 @@ declare const authTokenScopesSchema: z.ZodObject<{
490
481
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
491
482
  tls_min_version: z.ZodOptional<z.ZodString>;
492
483
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
493
- mtls: z.ZodOptional<z.ZodBoolean>;
494
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
484
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
495
485
  http_version: z.ZodOptional<z.ZodEnum<{
496
486
  "http/1.1": "http/1.1";
497
487
  h2: "h2";
@@ -543,8 +533,7 @@ declare const authTokenScopesSchema: z.ZodObject<{
543
533
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
544
534
  tls_min_version: z.ZodOptional<z.ZodString>;
545
535
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
546
- mtls: z.ZodOptional<z.ZodBoolean>;
547
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
536
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
548
537
  http_version: z.ZodOptional<z.ZodEnum<{
549
538
  "http/1.1": "http/1.1";
550
539
  h2: "h2";
@@ -562,7 +551,7 @@ declare const authTokenScopesSchema: z.ZodObject<{
562
551
  }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
563
552
  path: z.ZodOptional<z.ZodString>;
564
553
  }>, unknown>>>;
565
- }, z.core.$strip>]>>;
554
+ }, z.core.$strict>]>>;
566
555
  list: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
567
556
  filters: z.ZodOptional<z.ZodType<FilterNode<{
568
557
  client_id: z.ZodString;
@@ -604,8 +593,7 @@ declare const authTokenScopesSchema: z.ZodObject<{
604
593
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
605
594
  tls_min_version: z.ZodOptional<z.ZodString>;
606
595
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
607
- mtls: z.ZodOptional<z.ZodBoolean>;
608
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
596
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
609
597
  http_version: z.ZodOptional<z.ZodEnum<{
610
598
  "http/1.1": "http/1.1";
611
599
  h2: "h2";
@@ -657,8 +645,7 @@ declare const authTokenScopesSchema: z.ZodObject<{
657
645
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
658
646
  tls_min_version: z.ZodOptional<z.ZodString>;
659
647
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
660
- mtls: z.ZodOptional<z.ZodBoolean>;
661
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
648
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
662
649
  http_version: z.ZodOptional<z.ZodEnum<{
663
650
  "http/1.1": "http/1.1";
664
651
  h2: "h2";
@@ -697,8 +684,7 @@ declare const authTokenScopesSchema: z.ZodObject<{
697
684
  tls_alpns: z.ZodOptional<z.ZodBoolean>;
698
685
  tls_min_version: z.ZodOptional<z.ZodBoolean>;
699
686
  tls_ciphers: z.ZodOptional<z.ZodBoolean>;
700
- mtls: z.ZodOptional<z.ZodBoolean>;
701
- mtls_ca_cert_pem: z.ZodOptional<z.ZodBoolean>;
687
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
702
688
  http_version: z.ZodOptional<z.ZodBoolean>;
703
689
  http_use_tls: z.ZodOptional<z.ZodBoolean>;
704
690
  upstream_tls: z.ZodOptional<z.ZodBoolean>;
@@ -706,16 +692,17 @@ declare const authTokenScopesSchema: z.ZodObject<{
706
692
  rstream_auth: z.ZodOptional<z.ZodBoolean>;
707
693
  challenge_mode: z.ZodOptional<z.ZodBoolean>;
708
694
  }, z.core.$strip>>;
709
- }, z.core.$strip>]>>;
710
- }, z.core.$strip>>;
711
- }, z.core.$strip>;
712
- declare const authTokenTunnelGrantSchema: z.ZodObject<{
695
+ }, z.core.$strict>]>>;
696
+ }, z.core.$strict>>;
697
+ }, z.core.$strict>;
698
+ declare const authTokenTunnelGrantLeafSchema: z.ZodObject<{
713
699
  workspaces: z.ZodOptional<z.ZodArray<z.ZodString>>;
714
700
  projects: z.ZodOptional<z.ZodArray<z.ZodString>>;
715
701
  scopes: z.ZodOptional<z.ZodObject<{
716
702
  tunnels: z.ZodOptional<z.ZodObject<{
717
703
  create: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
718
704
  filters: z.ZodOptional<z.ZodType<FilterNode<{
705
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
719
706
  type: z.ZodOptional<z.ZodEnum<{
720
707
  bytestream: "bytestream";
721
708
  datagram: "datagram";
@@ -728,7 +715,6 @@ declare const authTokenTunnelGrantSchema: z.ZodObject<{
728
715
  quic: "quic";
729
716
  http: "http";
730
717
  }>>;
731
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
732
718
  geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
733
719
  trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
734
720
  host: z.ZodOptional<z.ZodString>;
@@ -741,8 +727,7 @@ declare const authTokenTunnelGrantSchema: z.ZodObject<{
741
727
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
742
728
  tls_min_version: z.ZodOptional<z.ZodString>;
743
729
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
744
- mtls: z.ZodOptional<z.ZodBoolean>;
745
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
730
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
746
731
  http_version: z.ZodOptional<z.ZodEnum<{
747
732
  "http/1.1": "http/1.1";
748
733
  h2: "h2";
@@ -755,6 +740,7 @@ declare const authTokenTunnelGrantSchema: z.ZodObject<{
755
740
  rstream_auth: z.ZodOptional<z.ZodBoolean>;
756
741
  challenge_mode: z.ZodOptional<z.ZodBoolean>;
757
742
  }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
743
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
758
744
  type: z.ZodOptional<z.ZodEnum<{
759
745
  bytestream: "bytestream";
760
746
  datagram: "datagram";
@@ -767,7 +753,6 @@ declare const authTokenTunnelGrantSchema: z.ZodObject<{
767
753
  quic: "quic";
768
754
  http: "http";
769
755
  }>>;
770
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
771
756
  geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
772
757
  trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
773
758
  host: z.ZodOptional<z.ZodString>;
@@ -780,8 +765,7 @@ declare const authTokenTunnelGrantSchema: z.ZodObject<{
780
765
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
781
766
  tls_min_version: z.ZodOptional<z.ZodString>;
782
767
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
783
- mtls: z.ZodOptional<z.ZodBoolean>;
784
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
768
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
785
769
  http_version: z.ZodOptional<z.ZodEnum<{
786
770
  "http/1.1": "http/1.1";
787
771
  h2: "h2";
@@ -794,7 +778,7 @@ declare const authTokenTunnelGrantSchema: z.ZodObject<{
794
778
  rstream_auth: z.ZodOptional<z.ZodBoolean>;
795
779
  challenge_mode: z.ZodOptional<z.ZodBoolean>;
796
780
  }>, unknown>>>;
797
- }, z.core.$strip>]>>;
781
+ }, z.core.$strict>]>>;
798
782
  connect: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
799
783
  filters: z.ZodOptional<z.ZodType<FilterNode<{
800
784
  client_id: z.ZodString;
@@ -836,8 +820,7 @@ declare const authTokenTunnelGrantSchema: z.ZodObject<{
836
820
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
837
821
  tls_min_version: z.ZodOptional<z.ZodString>;
838
822
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
839
- mtls: z.ZodOptional<z.ZodBoolean>;
840
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
823
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
841
824
  http_version: z.ZodOptional<z.ZodEnum<{
842
825
  "http/1.1": "http/1.1";
843
826
  h2: "h2";
@@ -889,8 +872,7 @@ declare const authTokenTunnelGrantSchema: z.ZodObject<{
889
872
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
890
873
  tls_min_version: z.ZodOptional<z.ZodString>;
891
874
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
892
- mtls: z.ZodOptional<z.ZodBoolean>;
893
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
875
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
894
876
  http_version: z.ZodOptional<z.ZodEnum<{
895
877
  "http/1.1": "http/1.1";
896
878
  h2: "h2";
@@ -908,7 +890,7 @@ declare const authTokenTunnelGrantSchema: z.ZodObject<{
908
890
  }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
909
891
  path: z.ZodOptional<z.ZodString>;
910
892
  }>, unknown>>>;
911
- }, z.core.$strip>]>>;
893
+ }, z.core.$strict>]>>;
912
894
  list: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
913
895
  filters: z.ZodOptional<z.ZodType<FilterNode<{
914
896
  client_id: z.ZodString;
@@ -950,8 +932,7 @@ declare const authTokenTunnelGrantSchema: z.ZodObject<{
950
932
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
951
933
  tls_min_version: z.ZodOptional<z.ZodString>;
952
934
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
953
- mtls: z.ZodOptional<z.ZodBoolean>;
954
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
935
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
955
936
  http_version: z.ZodOptional<z.ZodEnum<{
956
937
  "http/1.1": "http/1.1";
957
938
  h2: "h2";
@@ -1003,8 +984,7 @@ declare const authTokenTunnelGrantSchema: z.ZodObject<{
1003
984
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
1004
985
  tls_min_version: z.ZodOptional<z.ZodString>;
1005
986
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
1006
- mtls: z.ZodOptional<z.ZodBoolean>;
1007
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
987
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
1008
988
  http_version: z.ZodOptional<z.ZodEnum<{
1009
989
  "http/1.1": "http/1.1";
1010
990
  h2: "h2";
@@ -1043,8 +1023,7 @@ declare const authTokenTunnelGrantSchema: z.ZodObject<{
1043
1023
  tls_alpns: z.ZodOptional<z.ZodBoolean>;
1044
1024
  tls_min_version: z.ZodOptional<z.ZodBoolean>;
1045
1025
  tls_ciphers: z.ZodOptional<z.ZodBoolean>;
1046
- mtls: z.ZodOptional<z.ZodBoolean>;
1047
- mtls_ca_cert_pem: z.ZodOptional<z.ZodBoolean>;
1026
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
1048
1027
  http_version: z.ZodOptional<z.ZodBoolean>;
1049
1028
  http_use_tls: z.ZodOptional<z.ZodBoolean>;
1050
1029
  upstream_tls: z.ZodOptional<z.ZodBoolean>;
@@ -1052,360 +1031,21 @@ declare const authTokenTunnelGrantSchema: z.ZodObject<{
1052
1031
  rstream_auth: z.ZodOptional<z.ZodBoolean>;
1053
1032
  challenge_mode: z.ZodOptional<z.ZodBoolean>;
1054
1033
  }, z.core.$strip>>;
1055
- }, z.core.$strip>]>>;
1056
- }, z.core.$strip>>;
1057
- }, z.core.$strip>>;
1034
+ }, z.core.$strict>]>>;
1035
+ }, z.core.$strict>>;
1036
+ }, z.core.$strict>>;
1058
1037
  }, z.core.$strict>;
1038
+ type AuthTokenTunnelGrantLeaf = z.infer<typeof authTokenTunnelGrantLeafSchema>;
1039
+ type RstreamAuthTokenTunnelGrant = AuthTokenTunnelGrantLeaf | {
1040
+ AND: RstreamAuthTokenTunnelGrant[];
1041
+ } | {
1042
+ OR: RstreamAuthTokenTunnelGrant[];
1043
+ };
1044
+ declare const authTokenTunnelGrantSchema: z.ZodType<RstreamAuthTokenTunnelGrant>;
1059
1045
  declare const authTokenSchema: z.ZodUnion<readonly [z.ZodObject<{
1060
1046
  aud: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
1061
1047
  exp: z.ZodOptional<z.ZodNumber>;
1062
- tunnelsGrants: z.ZodOptional<z.ZodArray<z.ZodObject<{
1063
- workspaces: z.ZodOptional<z.ZodArray<z.ZodString>>;
1064
- projects: z.ZodOptional<z.ZodArray<z.ZodString>>;
1065
- scopes: z.ZodOptional<z.ZodObject<{
1066
- tunnels: z.ZodOptional<z.ZodObject<{
1067
- create: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
1068
- filters: z.ZodOptional<z.ZodType<FilterNode<{
1069
- type: z.ZodOptional<z.ZodEnum<{
1070
- bytestream: "bytestream";
1071
- datagram: "datagram";
1072
- }>>;
1073
- name: z.ZodOptional<z.ZodString>;
1074
- publish: z.ZodOptional<z.ZodBoolean>;
1075
- protocol: z.ZodOptional<z.ZodEnum<{
1076
- tls: "tls";
1077
- dtls: "dtls";
1078
- quic: "quic";
1079
- http: "http";
1080
- }>>;
1081
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1082
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
1083
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
1084
- host: z.ZodOptional<z.ZodString>;
1085
- hostname: z.ZodOptional<z.ZodString>;
1086
- port: z.ZodOptional<z.ZodNumber>;
1087
- tls_mode: z.ZodOptional<z.ZodEnum<{
1088
- passthrough: "passthrough";
1089
- terminated: "terminated";
1090
- }>>;
1091
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
1092
- tls_min_version: z.ZodOptional<z.ZodString>;
1093
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
1094
- mtls: z.ZodOptional<z.ZodBoolean>;
1095
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1096
- http_version: z.ZodOptional<z.ZodEnum<{
1097
- "http/1.1": "http/1.1";
1098
- h2: "h2";
1099
- h2c: "h2c";
1100
- h3: "h3";
1101
- }>>;
1102
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
1103
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
1104
- token_auth: z.ZodOptional<z.ZodBoolean>;
1105
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
1106
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
1107
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
1108
- type: z.ZodOptional<z.ZodEnum<{
1109
- bytestream: "bytestream";
1110
- datagram: "datagram";
1111
- }>>;
1112
- name: z.ZodOptional<z.ZodString>;
1113
- publish: z.ZodOptional<z.ZodBoolean>;
1114
- protocol: z.ZodOptional<z.ZodEnum<{
1115
- tls: "tls";
1116
- dtls: "dtls";
1117
- quic: "quic";
1118
- http: "http";
1119
- }>>;
1120
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1121
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
1122
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
1123
- host: z.ZodOptional<z.ZodString>;
1124
- hostname: z.ZodOptional<z.ZodString>;
1125
- port: z.ZodOptional<z.ZodNumber>;
1126
- tls_mode: z.ZodOptional<z.ZodEnum<{
1127
- passthrough: "passthrough";
1128
- terminated: "terminated";
1129
- }>>;
1130
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
1131
- tls_min_version: z.ZodOptional<z.ZodString>;
1132
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
1133
- mtls: z.ZodOptional<z.ZodBoolean>;
1134
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1135
- http_version: z.ZodOptional<z.ZodEnum<{
1136
- "http/1.1": "http/1.1";
1137
- h2: "h2";
1138
- h2c: "h2c";
1139
- h3: "h3";
1140
- }>>;
1141
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
1142
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
1143
- token_auth: z.ZodOptional<z.ZodBoolean>;
1144
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
1145
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
1146
- }>, unknown>>>;
1147
- }, z.core.$strip>]>>;
1148
- connect: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
1149
- filters: z.ZodOptional<z.ZodType<FilterNode<{
1150
- client_id: z.ZodString;
1151
- user_id: z.ZodOptional<z.ZodString>;
1152
- workspace_id: z.ZodOptional<z.ZodString>;
1153
- project_id: z.ZodOptional<z.ZodString>;
1154
- cluster_id: z.ZodOptional<z.ZodString>;
1155
- plan: z.ZodOptional<z.ZodString>;
1156
- provider: z.ZodOptional<z.ZodString>;
1157
- region: z.ZodOptional<z.ZodString>;
1158
- status: z.ZodEnum<{
1159
- online: "online";
1160
- offline: "offline";
1161
- }>;
1162
- id: z.ZodString;
1163
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
1164
- name: z.ZodOptional<z.ZodString>;
1165
- type: z.ZodOptional<z.ZodEnum<{
1166
- bytestream: "bytestream";
1167
- datagram: "datagram";
1168
- }>>;
1169
- publish: z.ZodOptional<z.ZodBoolean>;
1170
- protocol: z.ZodOptional<z.ZodEnum<{
1171
- tls: "tls";
1172
- dtls: "dtls";
1173
- quic: "quic";
1174
- http: "http";
1175
- }>>;
1176
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1177
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
1178
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
1179
- host: z.ZodOptional<z.ZodString>;
1180
- hostname: z.ZodOptional<z.ZodString>;
1181
- port: z.ZodOptional<z.ZodNumber>;
1182
- tls_mode: z.ZodOptional<z.ZodEnum<{
1183
- passthrough: "passthrough";
1184
- terminated: "terminated";
1185
- }>>;
1186
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
1187
- tls_min_version: z.ZodOptional<z.ZodString>;
1188
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
1189
- mtls: z.ZodOptional<z.ZodBoolean>;
1190
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1191
- http_version: z.ZodOptional<z.ZodEnum<{
1192
- "http/1.1": "http/1.1";
1193
- h2: "h2";
1194
- h2c: "h2c";
1195
- h3: "h3";
1196
- }>>;
1197
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
1198
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
1199
- token_auth: z.ZodOptional<z.ZodBoolean>;
1200
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
1201
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
1202
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
1203
- client_id: z.ZodString;
1204
- user_id: z.ZodOptional<z.ZodString>;
1205
- workspace_id: z.ZodOptional<z.ZodString>;
1206
- project_id: z.ZodOptional<z.ZodString>;
1207
- cluster_id: z.ZodOptional<z.ZodString>;
1208
- plan: z.ZodOptional<z.ZodString>;
1209
- provider: z.ZodOptional<z.ZodString>;
1210
- region: z.ZodOptional<z.ZodString>;
1211
- status: z.ZodEnum<{
1212
- online: "online";
1213
- offline: "offline";
1214
- }>;
1215
- id: z.ZodString;
1216
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
1217
- name: z.ZodOptional<z.ZodString>;
1218
- type: z.ZodOptional<z.ZodEnum<{
1219
- bytestream: "bytestream";
1220
- datagram: "datagram";
1221
- }>>;
1222
- publish: z.ZodOptional<z.ZodBoolean>;
1223
- protocol: z.ZodOptional<z.ZodEnum<{
1224
- tls: "tls";
1225
- dtls: "dtls";
1226
- quic: "quic";
1227
- http: "http";
1228
- }>>;
1229
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1230
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
1231
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
1232
- host: z.ZodOptional<z.ZodString>;
1233
- hostname: z.ZodOptional<z.ZodString>;
1234
- port: z.ZodOptional<z.ZodNumber>;
1235
- tls_mode: z.ZodOptional<z.ZodEnum<{
1236
- passthrough: "passthrough";
1237
- terminated: "terminated";
1238
- }>>;
1239
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
1240
- tls_min_version: z.ZodOptional<z.ZodString>;
1241
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
1242
- mtls: z.ZodOptional<z.ZodBoolean>;
1243
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1244
- http_version: z.ZodOptional<z.ZodEnum<{
1245
- "http/1.1": "http/1.1";
1246
- h2: "h2";
1247
- h2c: "h2c";
1248
- h3: "h3";
1249
- }>>;
1250
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
1251
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
1252
- token_auth: z.ZodOptional<z.ZodBoolean>;
1253
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
1254
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
1255
- }>, unknown>>>;
1256
- params: z.ZodOptional<z.ZodType<FilterNode<{
1257
- path: z.ZodOptional<z.ZodString>;
1258
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
1259
- path: z.ZodOptional<z.ZodString>;
1260
- }>, unknown>>>;
1261
- }, z.core.$strip>]>>;
1262
- list: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
1263
- filters: z.ZodOptional<z.ZodType<FilterNode<{
1264
- client_id: z.ZodString;
1265
- user_id: z.ZodOptional<z.ZodString>;
1266
- workspace_id: z.ZodOptional<z.ZodString>;
1267
- project_id: z.ZodOptional<z.ZodString>;
1268
- cluster_id: z.ZodOptional<z.ZodString>;
1269
- plan: z.ZodOptional<z.ZodString>;
1270
- provider: z.ZodOptional<z.ZodString>;
1271
- region: z.ZodOptional<z.ZodString>;
1272
- status: z.ZodEnum<{
1273
- online: "online";
1274
- offline: "offline";
1275
- }>;
1276
- id: z.ZodString;
1277
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
1278
- name: z.ZodOptional<z.ZodString>;
1279
- type: z.ZodOptional<z.ZodEnum<{
1280
- bytestream: "bytestream";
1281
- datagram: "datagram";
1282
- }>>;
1283
- publish: z.ZodOptional<z.ZodBoolean>;
1284
- protocol: z.ZodOptional<z.ZodEnum<{
1285
- tls: "tls";
1286
- dtls: "dtls";
1287
- quic: "quic";
1288
- http: "http";
1289
- }>>;
1290
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1291
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
1292
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
1293
- host: z.ZodOptional<z.ZodString>;
1294
- hostname: z.ZodOptional<z.ZodString>;
1295
- port: z.ZodOptional<z.ZodNumber>;
1296
- tls_mode: z.ZodOptional<z.ZodEnum<{
1297
- passthrough: "passthrough";
1298
- terminated: "terminated";
1299
- }>>;
1300
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
1301
- tls_min_version: z.ZodOptional<z.ZodString>;
1302
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
1303
- mtls: z.ZodOptional<z.ZodBoolean>;
1304
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1305
- http_version: z.ZodOptional<z.ZodEnum<{
1306
- "http/1.1": "http/1.1";
1307
- h2: "h2";
1308
- h2c: "h2c";
1309
- h3: "h3";
1310
- }>>;
1311
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
1312
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
1313
- token_auth: z.ZodOptional<z.ZodBoolean>;
1314
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
1315
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
1316
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
1317
- client_id: z.ZodString;
1318
- user_id: z.ZodOptional<z.ZodString>;
1319
- workspace_id: z.ZodOptional<z.ZodString>;
1320
- project_id: z.ZodOptional<z.ZodString>;
1321
- cluster_id: z.ZodOptional<z.ZodString>;
1322
- plan: z.ZodOptional<z.ZodString>;
1323
- provider: z.ZodOptional<z.ZodString>;
1324
- region: z.ZodOptional<z.ZodString>;
1325
- status: z.ZodEnum<{
1326
- online: "online";
1327
- offline: "offline";
1328
- }>;
1329
- id: z.ZodString;
1330
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
1331
- name: z.ZodOptional<z.ZodString>;
1332
- type: z.ZodOptional<z.ZodEnum<{
1333
- bytestream: "bytestream";
1334
- datagram: "datagram";
1335
- }>>;
1336
- publish: z.ZodOptional<z.ZodBoolean>;
1337
- protocol: z.ZodOptional<z.ZodEnum<{
1338
- tls: "tls";
1339
- dtls: "dtls";
1340
- quic: "quic";
1341
- http: "http";
1342
- }>>;
1343
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1344
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
1345
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
1346
- host: z.ZodOptional<z.ZodString>;
1347
- hostname: z.ZodOptional<z.ZodString>;
1348
- port: z.ZodOptional<z.ZodNumber>;
1349
- tls_mode: z.ZodOptional<z.ZodEnum<{
1350
- passthrough: "passthrough";
1351
- terminated: "terminated";
1352
- }>>;
1353
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
1354
- tls_min_version: z.ZodOptional<z.ZodString>;
1355
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
1356
- mtls: z.ZodOptional<z.ZodBoolean>;
1357
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1358
- http_version: z.ZodOptional<z.ZodEnum<{
1359
- "http/1.1": "http/1.1";
1360
- h2: "h2";
1361
- h2c: "h2c";
1362
- h3: "h3";
1363
- }>>;
1364
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
1365
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
1366
- token_auth: z.ZodOptional<z.ZodBoolean>;
1367
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
1368
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
1369
- }>, unknown>>>;
1370
- select: z.ZodOptional<z.ZodObject<{
1371
- client_id: z.ZodOptional<z.ZodBoolean>;
1372
- user_id: z.ZodOptional<z.ZodBoolean>;
1373
- workspace_id: z.ZodOptional<z.ZodBoolean>;
1374
- project_id: z.ZodOptional<z.ZodBoolean>;
1375
- cluster_id: z.ZodOptional<z.ZodBoolean>;
1376
- plan: z.ZodOptional<z.ZodBoolean>;
1377
- provider: z.ZodOptional<z.ZodBoolean>;
1378
- region: z.ZodOptional<z.ZodBoolean>;
1379
- status: z.ZodOptional<z.ZodBoolean>;
1380
- id: z.ZodOptional<z.ZodBoolean>;
1381
- creation_date: z.ZodOptional<z.ZodBoolean>;
1382
- name: z.ZodOptional<z.ZodBoolean>;
1383
- type: z.ZodOptional<z.ZodBoolean>;
1384
- publish: z.ZodOptional<z.ZodBoolean>;
1385
- protocol: z.ZodOptional<z.ZodBoolean>;
1386
- labels: z.ZodOptional<z.ZodBoolean>;
1387
- geo_ip: z.ZodOptional<z.ZodBoolean>;
1388
- trusted_ips: z.ZodOptional<z.ZodBoolean>;
1389
- host: z.ZodOptional<z.ZodBoolean>;
1390
- hostname: z.ZodOptional<z.ZodBoolean>;
1391
- port: z.ZodOptional<z.ZodBoolean>;
1392
- tls_mode: z.ZodOptional<z.ZodBoolean>;
1393
- tls_alpns: z.ZodOptional<z.ZodBoolean>;
1394
- tls_min_version: z.ZodOptional<z.ZodBoolean>;
1395
- tls_ciphers: z.ZodOptional<z.ZodBoolean>;
1396
- mtls: z.ZodOptional<z.ZodBoolean>;
1397
- mtls_ca_cert_pem: z.ZodOptional<z.ZodBoolean>;
1398
- http_version: z.ZodOptional<z.ZodBoolean>;
1399
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
1400
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
1401
- token_auth: z.ZodOptional<z.ZodBoolean>;
1402
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
1403
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
1404
- }, z.core.$strip>>;
1405
- }, z.core.$strip>]>>;
1406
- }, z.core.$strip>>;
1407
- }, z.core.$strip>>;
1408
- }, z.core.$strict>>>;
1048
+ tunnelsGrants: z.ZodOptional<z.ZodType<RstreamAuthTokenTunnelGrant, unknown, z.core.$ZodTypeInternals<RstreamAuthTokenTunnelGrant, unknown>>>;
1409
1049
  iat: z.ZodOptional<z.ZodNumber>;
1410
1050
  iss: z.ZodOptional<z.ZodString>;
1411
1051
  jti: z.ZodOptional<z.ZodString>;
@@ -1420,353 +1060,7 @@ declare const authTokenSchema: z.ZodUnion<readonly [z.ZodObject<{
1420
1060
  }, z.core.$strict>, z.ZodObject<{
1421
1061
  aud: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
1422
1062
  exp: z.ZodOptional<z.ZodNumber>;
1423
- tunnelsGrants: z.ZodOptional<z.ZodArray<z.ZodObject<{
1424
- workspaces: z.ZodOptional<z.ZodArray<z.ZodString>>;
1425
- projects: z.ZodOptional<z.ZodArray<z.ZodString>>;
1426
- scopes: z.ZodOptional<z.ZodObject<{
1427
- tunnels: z.ZodOptional<z.ZodObject<{
1428
- create: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
1429
- filters: z.ZodOptional<z.ZodType<FilterNode<{
1430
- type: z.ZodOptional<z.ZodEnum<{
1431
- bytestream: "bytestream";
1432
- datagram: "datagram";
1433
- }>>;
1434
- name: z.ZodOptional<z.ZodString>;
1435
- publish: z.ZodOptional<z.ZodBoolean>;
1436
- protocol: z.ZodOptional<z.ZodEnum<{
1437
- tls: "tls";
1438
- dtls: "dtls";
1439
- quic: "quic";
1440
- http: "http";
1441
- }>>;
1442
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1443
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
1444
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
1445
- host: z.ZodOptional<z.ZodString>;
1446
- hostname: z.ZodOptional<z.ZodString>;
1447
- port: z.ZodOptional<z.ZodNumber>;
1448
- tls_mode: z.ZodOptional<z.ZodEnum<{
1449
- passthrough: "passthrough";
1450
- terminated: "terminated";
1451
- }>>;
1452
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
1453
- tls_min_version: z.ZodOptional<z.ZodString>;
1454
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
1455
- mtls: z.ZodOptional<z.ZodBoolean>;
1456
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1457
- http_version: z.ZodOptional<z.ZodEnum<{
1458
- "http/1.1": "http/1.1";
1459
- h2: "h2";
1460
- h2c: "h2c";
1461
- h3: "h3";
1462
- }>>;
1463
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
1464
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
1465
- token_auth: z.ZodOptional<z.ZodBoolean>;
1466
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
1467
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
1468
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
1469
- type: z.ZodOptional<z.ZodEnum<{
1470
- bytestream: "bytestream";
1471
- datagram: "datagram";
1472
- }>>;
1473
- name: z.ZodOptional<z.ZodString>;
1474
- publish: z.ZodOptional<z.ZodBoolean>;
1475
- protocol: z.ZodOptional<z.ZodEnum<{
1476
- tls: "tls";
1477
- dtls: "dtls";
1478
- quic: "quic";
1479
- http: "http";
1480
- }>>;
1481
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1482
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
1483
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
1484
- host: z.ZodOptional<z.ZodString>;
1485
- hostname: z.ZodOptional<z.ZodString>;
1486
- port: z.ZodOptional<z.ZodNumber>;
1487
- tls_mode: z.ZodOptional<z.ZodEnum<{
1488
- passthrough: "passthrough";
1489
- terminated: "terminated";
1490
- }>>;
1491
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
1492
- tls_min_version: z.ZodOptional<z.ZodString>;
1493
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
1494
- mtls: z.ZodOptional<z.ZodBoolean>;
1495
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1496
- http_version: z.ZodOptional<z.ZodEnum<{
1497
- "http/1.1": "http/1.1";
1498
- h2: "h2";
1499
- h2c: "h2c";
1500
- h3: "h3";
1501
- }>>;
1502
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
1503
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
1504
- token_auth: z.ZodOptional<z.ZodBoolean>;
1505
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
1506
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
1507
- }>, unknown>>>;
1508
- }, z.core.$strip>]>>;
1509
- connect: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
1510
- filters: z.ZodOptional<z.ZodType<FilterNode<{
1511
- client_id: z.ZodString;
1512
- user_id: z.ZodOptional<z.ZodString>;
1513
- workspace_id: z.ZodOptional<z.ZodString>;
1514
- project_id: z.ZodOptional<z.ZodString>;
1515
- cluster_id: z.ZodOptional<z.ZodString>;
1516
- plan: z.ZodOptional<z.ZodString>;
1517
- provider: z.ZodOptional<z.ZodString>;
1518
- region: z.ZodOptional<z.ZodString>;
1519
- status: z.ZodEnum<{
1520
- online: "online";
1521
- offline: "offline";
1522
- }>;
1523
- id: z.ZodString;
1524
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
1525
- name: z.ZodOptional<z.ZodString>;
1526
- type: z.ZodOptional<z.ZodEnum<{
1527
- bytestream: "bytestream";
1528
- datagram: "datagram";
1529
- }>>;
1530
- publish: z.ZodOptional<z.ZodBoolean>;
1531
- protocol: z.ZodOptional<z.ZodEnum<{
1532
- tls: "tls";
1533
- dtls: "dtls";
1534
- quic: "quic";
1535
- http: "http";
1536
- }>>;
1537
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1538
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
1539
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
1540
- host: z.ZodOptional<z.ZodString>;
1541
- hostname: z.ZodOptional<z.ZodString>;
1542
- port: z.ZodOptional<z.ZodNumber>;
1543
- tls_mode: z.ZodOptional<z.ZodEnum<{
1544
- passthrough: "passthrough";
1545
- terminated: "terminated";
1546
- }>>;
1547
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
1548
- tls_min_version: z.ZodOptional<z.ZodString>;
1549
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
1550
- mtls: z.ZodOptional<z.ZodBoolean>;
1551
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1552
- http_version: z.ZodOptional<z.ZodEnum<{
1553
- "http/1.1": "http/1.1";
1554
- h2: "h2";
1555
- h2c: "h2c";
1556
- h3: "h3";
1557
- }>>;
1558
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
1559
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
1560
- token_auth: z.ZodOptional<z.ZodBoolean>;
1561
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
1562
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
1563
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
1564
- client_id: z.ZodString;
1565
- user_id: z.ZodOptional<z.ZodString>;
1566
- workspace_id: z.ZodOptional<z.ZodString>;
1567
- project_id: z.ZodOptional<z.ZodString>;
1568
- cluster_id: z.ZodOptional<z.ZodString>;
1569
- plan: z.ZodOptional<z.ZodString>;
1570
- provider: z.ZodOptional<z.ZodString>;
1571
- region: z.ZodOptional<z.ZodString>;
1572
- status: z.ZodEnum<{
1573
- online: "online";
1574
- offline: "offline";
1575
- }>;
1576
- id: z.ZodString;
1577
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
1578
- name: z.ZodOptional<z.ZodString>;
1579
- type: z.ZodOptional<z.ZodEnum<{
1580
- bytestream: "bytestream";
1581
- datagram: "datagram";
1582
- }>>;
1583
- publish: z.ZodOptional<z.ZodBoolean>;
1584
- protocol: z.ZodOptional<z.ZodEnum<{
1585
- tls: "tls";
1586
- dtls: "dtls";
1587
- quic: "quic";
1588
- http: "http";
1589
- }>>;
1590
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1591
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
1592
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
1593
- host: z.ZodOptional<z.ZodString>;
1594
- hostname: z.ZodOptional<z.ZodString>;
1595
- port: z.ZodOptional<z.ZodNumber>;
1596
- tls_mode: z.ZodOptional<z.ZodEnum<{
1597
- passthrough: "passthrough";
1598
- terminated: "terminated";
1599
- }>>;
1600
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
1601
- tls_min_version: z.ZodOptional<z.ZodString>;
1602
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
1603
- mtls: z.ZodOptional<z.ZodBoolean>;
1604
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1605
- http_version: z.ZodOptional<z.ZodEnum<{
1606
- "http/1.1": "http/1.1";
1607
- h2: "h2";
1608
- h2c: "h2c";
1609
- h3: "h3";
1610
- }>>;
1611
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
1612
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
1613
- token_auth: z.ZodOptional<z.ZodBoolean>;
1614
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
1615
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
1616
- }>, unknown>>>;
1617
- params: z.ZodOptional<z.ZodType<FilterNode<{
1618
- path: z.ZodOptional<z.ZodString>;
1619
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
1620
- path: z.ZodOptional<z.ZodString>;
1621
- }>, unknown>>>;
1622
- }, z.core.$strip>]>>;
1623
- list: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
1624
- filters: z.ZodOptional<z.ZodType<FilterNode<{
1625
- client_id: z.ZodString;
1626
- user_id: z.ZodOptional<z.ZodString>;
1627
- workspace_id: z.ZodOptional<z.ZodString>;
1628
- project_id: z.ZodOptional<z.ZodString>;
1629
- cluster_id: z.ZodOptional<z.ZodString>;
1630
- plan: z.ZodOptional<z.ZodString>;
1631
- provider: z.ZodOptional<z.ZodString>;
1632
- region: z.ZodOptional<z.ZodString>;
1633
- status: z.ZodEnum<{
1634
- online: "online";
1635
- offline: "offline";
1636
- }>;
1637
- id: z.ZodString;
1638
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
1639
- name: z.ZodOptional<z.ZodString>;
1640
- type: z.ZodOptional<z.ZodEnum<{
1641
- bytestream: "bytestream";
1642
- datagram: "datagram";
1643
- }>>;
1644
- publish: z.ZodOptional<z.ZodBoolean>;
1645
- protocol: z.ZodOptional<z.ZodEnum<{
1646
- tls: "tls";
1647
- dtls: "dtls";
1648
- quic: "quic";
1649
- http: "http";
1650
- }>>;
1651
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1652
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
1653
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
1654
- host: z.ZodOptional<z.ZodString>;
1655
- hostname: z.ZodOptional<z.ZodString>;
1656
- port: z.ZodOptional<z.ZodNumber>;
1657
- tls_mode: z.ZodOptional<z.ZodEnum<{
1658
- passthrough: "passthrough";
1659
- terminated: "terminated";
1660
- }>>;
1661
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
1662
- tls_min_version: z.ZodOptional<z.ZodString>;
1663
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
1664
- mtls: z.ZodOptional<z.ZodBoolean>;
1665
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1666
- http_version: z.ZodOptional<z.ZodEnum<{
1667
- "http/1.1": "http/1.1";
1668
- h2: "h2";
1669
- h2c: "h2c";
1670
- h3: "h3";
1671
- }>>;
1672
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
1673
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
1674
- token_auth: z.ZodOptional<z.ZodBoolean>;
1675
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
1676
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
1677
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
1678
- client_id: z.ZodString;
1679
- user_id: z.ZodOptional<z.ZodString>;
1680
- workspace_id: z.ZodOptional<z.ZodString>;
1681
- project_id: z.ZodOptional<z.ZodString>;
1682
- cluster_id: z.ZodOptional<z.ZodString>;
1683
- plan: z.ZodOptional<z.ZodString>;
1684
- provider: z.ZodOptional<z.ZodString>;
1685
- region: z.ZodOptional<z.ZodString>;
1686
- status: z.ZodEnum<{
1687
- online: "online";
1688
- offline: "offline";
1689
- }>;
1690
- id: z.ZodString;
1691
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
1692
- name: z.ZodOptional<z.ZodString>;
1693
- type: z.ZodOptional<z.ZodEnum<{
1694
- bytestream: "bytestream";
1695
- datagram: "datagram";
1696
- }>>;
1697
- publish: z.ZodOptional<z.ZodBoolean>;
1698
- protocol: z.ZodOptional<z.ZodEnum<{
1699
- tls: "tls";
1700
- dtls: "dtls";
1701
- quic: "quic";
1702
- http: "http";
1703
- }>>;
1704
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1705
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
1706
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
1707
- host: z.ZodOptional<z.ZodString>;
1708
- hostname: z.ZodOptional<z.ZodString>;
1709
- port: z.ZodOptional<z.ZodNumber>;
1710
- tls_mode: z.ZodOptional<z.ZodEnum<{
1711
- passthrough: "passthrough";
1712
- terminated: "terminated";
1713
- }>>;
1714
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
1715
- tls_min_version: z.ZodOptional<z.ZodString>;
1716
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
1717
- mtls: z.ZodOptional<z.ZodBoolean>;
1718
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1719
- http_version: z.ZodOptional<z.ZodEnum<{
1720
- "http/1.1": "http/1.1";
1721
- h2: "h2";
1722
- h2c: "h2c";
1723
- h3: "h3";
1724
- }>>;
1725
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
1726
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
1727
- token_auth: z.ZodOptional<z.ZodBoolean>;
1728
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
1729
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
1730
- }>, unknown>>>;
1731
- select: z.ZodOptional<z.ZodObject<{
1732
- client_id: z.ZodOptional<z.ZodBoolean>;
1733
- user_id: z.ZodOptional<z.ZodBoolean>;
1734
- workspace_id: z.ZodOptional<z.ZodBoolean>;
1735
- project_id: z.ZodOptional<z.ZodBoolean>;
1736
- cluster_id: z.ZodOptional<z.ZodBoolean>;
1737
- plan: z.ZodOptional<z.ZodBoolean>;
1738
- provider: z.ZodOptional<z.ZodBoolean>;
1739
- region: z.ZodOptional<z.ZodBoolean>;
1740
- status: z.ZodOptional<z.ZodBoolean>;
1741
- id: z.ZodOptional<z.ZodBoolean>;
1742
- creation_date: z.ZodOptional<z.ZodBoolean>;
1743
- name: z.ZodOptional<z.ZodBoolean>;
1744
- type: z.ZodOptional<z.ZodBoolean>;
1745
- publish: z.ZodOptional<z.ZodBoolean>;
1746
- protocol: z.ZodOptional<z.ZodBoolean>;
1747
- labels: z.ZodOptional<z.ZodBoolean>;
1748
- geo_ip: z.ZodOptional<z.ZodBoolean>;
1749
- trusted_ips: z.ZodOptional<z.ZodBoolean>;
1750
- host: z.ZodOptional<z.ZodBoolean>;
1751
- hostname: z.ZodOptional<z.ZodBoolean>;
1752
- port: z.ZodOptional<z.ZodBoolean>;
1753
- tls_mode: z.ZodOptional<z.ZodBoolean>;
1754
- tls_alpns: z.ZodOptional<z.ZodBoolean>;
1755
- tls_min_version: z.ZodOptional<z.ZodBoolean>;
1756
- tls_ciphers: z.ZodOptional<z.ZodBoolean>;
1757
- mtls: z.ZodOptional<z.ZodBoolean>;
1758
- mtls_ca_cert_pem: z.ZodOptional<z.ZodBoolean>;
1759
- http_version: z.ZodOptional<z.ZodBoolean>;
1760
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
1761
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
1762
- token_auth: z.ZodOptional<z.ZodBoolean>;
1763
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
1764
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
1765
- }, z.core.$strip>>;
1766
- }, z.core.$strip>]>>;
1767
- }, z.core.$strip>>;
1768
- }, z.core.$strip>>;
1769
- }, z.core.$strict>>>;
1063
+ tunnelsGrants: z.ZodOptional<z.ZodType<RstreamAuthTokenTunnelGrant, unknown, z.core.$ZodTypeInternals<RstreamAuthTokenTunnelGrant, unknown>>>;
1770
1064
  iat: z.ZodOptional<z.ZodNumber>;
1771
1065
  iss: z.ZodOptional<z.ZodString>;
1772
1066
  jti: z.ZodOptional<z.ZodString>;
@@ -1776,357 +1070,12 @@ declare const authTokenSchema: z.ZodUnion<readonly [z.ZodObject<{
1776
1070
  nbf: z.ZodOptional<z.ZodNumber>;
1777
1071
  sub: z.ZodOptional<z.ZodString>;
1778
1072
  type: z.ZodLiteral<"pat">;
1073
+ tokendpoint: z.ZodOptional<z.ZodString>;
1779
1074
  token_endpoint: z.ZodOptional<z.ZodString>;
1780
1075
  }, z.core.$strict>, z.ZodObject<{
1781
1076
  aud: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
1782
1077
  exp: z.ZodOptional<z.ZodNumber>;
1783
- tunnelsGrants: z.ZodOptional<z.ZodArray<z.ZodObject<{
1784
- workspaces: z.ZodOptional<z.ZodArray<z.ZodString>>;
1785
- projects: z.ZodOptional<z.ZodArray<z.ZodString>>;
1786
- scopes: z.ZodOptional<z.ZodObject<{
1787
- tunnels: z.ZodOptional<z.ZodObject<{
1788
- create: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
1789
- filters: z.ZodOptional<z.ZodType<FilterNode<{
1790
- type: z.ZodOptional<z.ZodEnum<{
1791
- bytestream: "bytestream";
1792
- datagram: "datagram";
1793
- }>>;
1794
- name: z.ZodOptional<z.ZodString>;
1795
- publish: z.ZodOptional<z.ZodBoolean>;
1796
- protocol: z.ZodOptional<z.ZodEnum<{
1797
- tls: "tls";
1798
- dtls: "dtls";
1799
- quic: "quic";
1800
- http: "http";
1801
- }>>;
1802
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1803
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
1804
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
1805
- host: z.ZodOptional<z.ZodString>;
1806
- hostname: z.ZodOptional<z.ZodString>;
1807
- port: z.ZodOptional<z.ZodNumber>;
1808
- tls_mode: z.ZodOptional<z.ZodEnum<{
1809
- passthrough: "passthrough";
1810
- terminated: "terminated";
1811
- }>>;
1812
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
1813
- tls_min_version: z.ZodOptional<z.ZodString>;
1814
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
1815
- mtls: z.ZodOptional<z.ZodBoolean>;
1816
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1817
- http_version: z.ZodOptional<z.ZodEnum<{
1818
- "http/1.1": "http/1.1";
1819
- h2: "h2";
1820
- h2c: "h2c";
1821
- h3: "h3";
1822
- }>>;
1823
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
1824
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
1825
- token_auth: z.ZodOptional<z.ZodBoolean>;
1826
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
1827
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
1828
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
1829
- type: z.ZodOptional<z.ZodEnum<{
1830
- bytestream: "bytestream";
1831
- datagram: "datagram";
1832
- }>>;
1833
- name: z.ZodOptional<z.ZodString>;
1834
- publish: z.ZodOptional<z.ZodBoolean>;
1835
- protocol: z.ZodOptional<z.ZodEnum<{
1836
- tls: "tls";
1837
- dtls: "dtls";
1838
- quic: "quic";
1839
- http: "http";
1840
- }>>;
1841
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1842
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
1843
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
1844
- host: z.ZodOptional<z.ZodString>;
1845
- hostname: z.ZodOptional<z.ZodString>;
1846
- port: z.ZodOptional<z.ZodNumber>;
1847
- tls_mode: z.ZodOptional<z.ZodEnum<{
1848
- passthrough: "passthrough";
1849
- terminated: "terminated";
1850
- }>>;
1851
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
1852
- tls_min_version: z.ZodOptional<z.ZodString>;
1853
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
1854
- mtls: z.ZodOptional<z.ZodBoolean>;
1855
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1856
- http_version: z.ZodOptional<z.ZodEnum<{
1857
- "http/1.1": "http/1.1";
1858
- h2: "h2";
1859
- h2c: "h2c";
1860
- h3: "h3";
1861
- }>>;
1862
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
1863
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
1864
- token_auth: z.ZodOptional<z.ZodBoolean>;
1865
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
1866
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
1867
- }>, unknown>>>;
1868
- }, z.core.$strip>]>>;
1869
- connect: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
1870
- filters: z.ZodOptional<z.ZodType<FilterNode<{
1871
- client_id: z.ZodString;
1872
- user_id: z.ZodOptional<z.ZodString>;
1873
- workspace_id: z.ZodOptional<z.ZodString>;
1874
- project_id: z.ZodOptional<z.ZodString>;
1875
- cluster_id: z.ZodOptional<z.ZodString>;
1876
- plan: z.ZodOptional<z.ZodString>;
1877
- provider: z.ZodOptional<z.ZodString>;
1878
- region: z.ZodOptional<z.ZodString>;
1879
- status: z.ZodEnum<{
1880
- online: "online";
1881
- offline: "offline";
1882
- }>;
1883
- id: z.ZodString;
1884
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
1885
- name: z.ZodOptional<z.ZodString>;
1886
- type: z.ZodOptional<z.ZodEnum<{
1887
- bytestream: "bytestream";
1888
- datagram: "datagram";
1889
- }>>;
1890
- publish: z.ZodOptional<z.ZodBoolean>;
1891
- protocol: z.ZodOptional<z.ZodEnum<{
1892
- tls: "tls";
1893
- dtls: "dtls";
1894
- quic: "quic";
1895
- http: "http";
1896
- }>>;
1897
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1898
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
1899
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
1900
- host: z.ZodOptional<z.ZodString>;
1901
- hostname: z.ZodOptional<z.ZodString>;
1902
- port: z.ZodOptional<z.ZodNumber>;
1903
- tls_mode: z.ZodOptional<z.ZodEnum<{
1904
- passthrough: "passthrough";
1905
- terminated: "terminated";
1906
- }>>;
1907
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
1908
- tls_min_version: z.ZodOptional<z.ZodString>;
1909
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
1910
- mtls: z.ZodOptional<z.ZodBoolean>;
1911
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1912
- http_version: z.ZodOptional<z.ZodEnum<{
1913
- "http/1.1": "http/1.1";
1914
- h2: "h2";
1915
- h2c: "h2c";
1916
- h3: "h3";
1917
- }>>;
1918
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
1919
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
1920
- token_auth: z.ZodOptional<z.ZodBoolean>;
1921
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
1922
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
1923
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
1924
- client_id: z.ZodString;
1925
- user_id: z.ZodOptional<z.ZodString>;
1926
- workspace_id: z.ZodOptional<z.ZodString>;
1927
- project_id: z.ZodOptional<z.ZodString>;
1928
- cluster_id: z.ZodOptional<z.ZodString>;
1929
- plan: z.ZodOptional<z.ZodString>;
1930
- provider: z.ZodOptional<z.ZodString>;
1931
- region: z.ZodOptional<z.ZodString>;
1932
- status: z.ZodEnum<{
1933
- online: "online";
1934
- offline: "offline";
1935
- }>;
1936
- id: z.ZodString;
1937
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
1938
- name: z.ZodOptional<z.ZodString>;
1939
- type: z.ZodOptional<z.ZodEnum<{
1940
- bytestream: "bytestream";
1941
- datagram: "datagram";
1942
- }>>;
1943
- publish: z.ZodOptional<z.ZodBoolean>;
1944
- protocol: z.ZodOptional<z.ZodEnum<{
1945
- tls: "tls";
1946
- dtls: "dtls";
1947
- quic: "quic";
1948
- http: "http";
1949
- }>>;
1950
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1951
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
1952
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
1953
- host: z.ZodOptional<z.ZodString>;
1954
- hostname: z.ZodOptional<z.ZodString>;
1955
- port: z.ZodOptional<z.ZodNumber>;
1956
- tls_mode: z.ZodOptional<z.ZodEnum<{
1957
- passthrough: "passthrough";
1958
- terminated: "terminated";
1959
- }>>;
1960
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
1961
- tls_min_version: z.ZodOptional<z.ZodString>;
1962
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
1963
- mtls: z.ZodOptional<z.ZodBoolean>;
1964
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1965
- http_version: z.ZodOptional<z.ZodEnum<{
1966
- "http/1.1": "http/1.1";
1967
- h2: "h2";
1968
- h2c: "h2c";
1969
- h3: "h3";
1970
- }>>;
1971
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
1972
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
1973
- token_auth: z.ZodOptional<z.ZodBoolean>;
1974
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
1975
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
1976
- }>, unknown>>>;
1977
- params: z.ZodOptional<z.ZodType<FilterNode<{
1978
- path: z.ZodOptional<z.ZodString>;
1979
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
1980
- path: z.ZodOptional<z.ZodString>;
1981
- }>, unknown>>>;
1982
- }, z.core.$strip>]>>;
1983
- list: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
1984
- filters: z.ZodOptional<z.ZodType<FilterNode<{
1985
- client_id: z.ZodString;
1986
- user_id: z.ZodOptional<z.ZodString>;
1987
- workspace_id: z.ZodOptional<z.ZodString>;
1988
- project_id: z.ZodOptional<z.ZodString>;
1989
- cluster_id: z.ZodOptional<z.ZodString>;
1990
- plan: z.ZodOptional<z.ZodString>;
1991
- provider: z.ZodOptional<z.ZodString>;
1992
- region: z.ZodOptional<z.ZodString>;
1993
- status: z.ZodEnum<{
1994
- online: "online";
1995
- offline: "offline";
1996
- }>;
1997
- id: z.ZodString;
1998
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
1999
- name: z.ZodOptional<z.ZodString>;
2000
- type: z.ZodOptional<z.ZodEnum<{
2001
- bytestream: "bytestream";
2002
- datagram: "datagram";
2003
- }>>;
2004
- publish: z.ZodOptional<z.ZodBoolean>;
2005
- protocol: z.ZodOptional<z.ZodEnum<{
2006
- tls: "tls";
2007
- dtls: "dtls";
2008
- quic: "quic";
2009
- http: "http";
2010
- }>>;
2011
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
2012
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
2013
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
2014
- host: z.ZodOptional<z.ZodString>;
2015
- hostname: z.ZodOptional<z.ZodString>;
2016
- port: z.ZodOptional<z.ZodNumber>;
2017
- tls_mode: z.ZodOptional<z.ZodEnum<{
2018
- passthrough: "passthrough";
2019
- terminated: "terminated";
2020
- }>>;
2021
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
2022
- tls_min_version: z.ZodOptional<z.ZodString>;
2023
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
2024
- mtls: z.ZodOptional<z.ZodBoolean>;
2025
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2026
- http_version: z.ZodOptional<z.ZodEnum<{
2027
- "http/1.1": "http/1.1";
2028
- h2: "h2";
2029
- h2c: "h2c";
2030
- h3: "h3";
2031
- }>>;
2032
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
2033
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
2034
- token_auth: z.ZodOptional<z.ZodBoolean>;
2035
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
2036
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
2037
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
2038
- client_id: z.ZodString;
2039
- user_id: z.ZodOptional<z.ZodString>;
2040
- workspace_id: z.ZodOptional<z.ZodString>;
2041
- project_id: z.ZodOptional<z.ZodString>;
2042
- cluster_id: z.ZodOptional<z.ZodString>;
2043
- plan: z.ZodOptional<z.ZodString>;
2044
- provider: z.ZodOptional<z.ZodString>;
2045
- region: z.ZodOptional<z.ZodString>;
2046
- status: z.ZodEnum<{
2047
- online: "online";
2048
- offline: "offline";
2049
- }>;
2050
- id: z.ZodString;
2051
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
2052
- name: z.ZodOptional<z.ZodString>;
2053
- type: z.ZodOptional<z.ZodEnum<{
2054
- bytestream: "bytestream";
2055
- datagram: "datagram";
2056
- }>>;
2057
- publish: z.ZodOptional<z.ZodBoolean>;
2058
- protocol: z.ZodOptional<z.ZodEnum<{
2059
- tls: "tls";
2060
- dtls: "dtls";
2061
- quic: "quic";
2062
- http: "http";
2063
- }>>;
2064
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
2065
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
2066
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
2067
- host: z.ZodOptional<z.ZodString>;
2068
- hostname: z.ZodOptional<z.ZodString>;
2069
- port: z.ZodOptional<z.ZodNumber>;
2070
- tls_mode: z.ZodOptional<z.ZodEnum<{
2071
- passthrough: "passthrough";
2072
- terminated: "terminated";
2073
- }>>;
2074
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
2075
- tls_min_version: z.ZodOptional<z.ZodString>;
2076
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
2077
- mtls: z.ZodOptional<z.ZodBoolean>;
2078
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2079
- http_version: z.ZodOptional<z.ZodEnum<{
2080
- "http/1.1": "http/1.1";
2081
- h2: "h2";
2082
- h2c: "h2c";
2083
- h3: "h3";
2084
- }>>;
2085
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
2086
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
2087
- token_auth: z.ZodOptional<z.ZodBoolean>;
2088
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
2089
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
2090
- }>, unknown>>>;
2091
- select: z.ZodOptional<z.ZodObject<{
2092
- client_id: z.ZodOptional<z.ZodBoolean>;
2093
- user_id: z.ZodOptional<z.ZodBoolean>;
2094
- workspace_id: z.ZodOptional<z.ZodBoolean>;
2095
- project_id: z.ZodOptional<z.ZodBoolean>;
2096
- cluster_id: z.ZodOptional<z.ZodBoolean>;
2097
- plan: z.ZodOptional<z.ZodBoolean>;
2098
- provider: z.ZodOptional<z.ZodBoolean>;
2099
- region: z.ZodOptional<z.ZodBoolean>;
2100
- status: z.ZodOptional<z.ZodBoolean>;
2101
- id: z.ZodOptional<z.ZodBoolean>;
2102
- creation_date: z.ZodOptional<z.ZodBoolean>;
2103
- name: z.ZodOptional<z.ZodBoolean>;
2104
- type: z.ZodOptional<z.ZodBoolean>;
2105
- publish: z.ZodOptional<z.ZodBoolean>;
2106
- protocol: z.ZodOptional<z.ZodBoolean>;
2107
- labels: z.ZodOptional<z.ZodBoolean>;
2108
- geo_ip: z.ZodOptional<z.ZodBoolean>;
2109
- trusted_ips: z.ZodOptional<z.ZodBoolean>;
2110
- host: z.ZodOptional<z.ZodBoolean>;
2111
- hostname: z.ZodOptional<z.ZodBoolean>;
2112
- port: z.ZodOptional<z.ZodBoolean>;
2113
- tls_mode: z.ZodOptional<z.ZodBoolean>;
2114
- tls_alpns: z.ZodOptional<z.ZodBoolean>;
2115
- tls_min_version: z.ZodOptional<z.ZodBoolean>;
2116
- tls_ciphers: z.ZodOptional<z.ZodBoolean>;
2117
- mtls: z.ZodOptional<z.ZodBoolean>;
2118
- mtls_ca_cert_pem: z.ZodOptional<z.ZodBoolean>;
2119
- http_version: z.ZodOptional<z.ZodBoolean>;
2120
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
2121
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
2122
- token_auth: z.ZodOptional<z.ZodBoolean>;
2123
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
2124
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
2125
- }, z.core.$strip>>;
2126
- }, z.core.$strip>]>>;
2127
- }, z.core.$strip>>;
2128
- }, z.core.$strip>>;
2129
- }, z.core.$strict>>>;
1078
+ tunnelsGrants: z.ZodOptional<z.ZodType<RstreamAuthTokenTunnelGrant, unknown, z.core.$ZodTypeInternals<RstreamAuthTokenTunnelGrant, unknown>>>;
2130
1079
  iat: z.ZodOptional<z.ZodNumber>;
2131
1080
  iss: z.ZodOptional<z.ZodString>;
2132
1081
  jti: z.ZodOptional<z.ZodString>;
@@ -2142,353 +1091,7 @@ declare const authTokenSchema: z.ZodUnion<readonly [z.ZodObject<{
2142
1091
  declare const tokenSchema: z.ZodUnion<readonly [z.ZodObject<{
2143
1092
  aud: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
2144
1093
  exp: z.ZodOptional<z.ZodNumber>;
2145
- tunnelsGrants: z.ZodOptional<z.ZodArray<z.ZodObject<{
2146
- workspaces: z.ZodOptional<z.ZodArray<z.ZodString>>;
2147
- projects: z.ZodOptional<z.ZodArray<z.ZodString>>;
2148
- scopes: z.ZodOptional<z.ZodObject<{
2149
- tunnels: z.ZodOptional<z.ZodObject<{
2150
- create: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
2151
- filters: z.ZodOptional<z.ZodType<FilterNode<{
2152
- type: z.ZodOptional<z.ZodEnum<{
2153
- bytestream: "bytestream";
2154
- datagram: "datagram";
2155
- }>>;
2156
- name: z.ZodOptional<z.ZodString>;
2157
- publish: z.ZodOptional<z.ZodBoolean>;
2158
- protocol: z.ZodOptional<z.ZodEnum<{
2159
- tls: "tls";
2160
- dtls: "dtls";
2161
- quic: "quic";
2162
- http: "http";
2163
- }>>;
2164
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
2165
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
2166
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
2167
- host: z.ZodOptional<z.ZodString>;
2168
- hostname: z.ZodOptional<z.ZodString>;
2169
- port: z.ZodOptional<z.ZodNumber>;
2170
- tls_mode: z.ZodOptional<z.ZodEnum<{
2171
- passthrough: "passthrough";
2172
- terminated: "terminated";
2173
- }>>;
2174
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
2175
- tls_min_version: z.ZodOptional<z.ZodString>;
2176
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
2177
- mtls: z.ZodOptional<z.ZodBoolean>;
2178
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2179
- http_version: z.ZodOptional<z.ZodEnum<{
2180
- "http/1.1": "http/1.1";
2181
- h2: "h2";
2182
- h2c: "h2c";
2183
- h3: "h3";
2184
- }>>;
2185
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
2186
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
2187
- token_auth: z.ZodOptional<z.ZodBoolean>;
2188
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
2189
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
2190
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
2191
- type: z.ZodOptional<z.ZodEnum<{
2192
- bytestream: "bytestream";
2193
- datagram: "datagram";
2194
- }>>;
2195
- name: z.ZodOptional<z.ZodString>;
2196
- publish: z.ZodOptional<z.ZodBoolean>;
2197
- protocol: z.ZodOptional<z.ZodEnum<{
2198
- tls: "tls";
2199
- dtls: "dtls";
2200
- quic: "quic";
2201
- http: "http";
2202
- }>>;
2203
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
2204
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
2205
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
2206
- host: z.ZodOptional<z.ZodString>;
2207
- hostname: z.ZodOptional<z.ZodString>;
2208
- port: z.ZodOptional<z.ZodNumber>;
2209
- tls_mode: z.ZodOptional<z.ZodEnum<{
2210
- passthrough: "passthrough";
2211
- terminated: "terminated";
2212
- }>>;
2213
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
2214
- tls_min_version: z.ZodOptional<z.ZodString>;
2215
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
2216
- mtls: z.ZodOptional<z.ZodBoolean>;
2217
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2218
- http_version: z.ZodOptional<z.ZodEnum<{
2219
- "http/1.1": "http/1.1";
2220
- h2: "h2";
2221
- h2c: "h2c";
2222
- h3: "h3";
2223
- }>>;
2224
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
2225
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
2226
- token_auth: z.ZodOptional<z.ZodBoolean>;
2227
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
2228
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
2229
- }>, unknown>>>;
2230
- }, z.core.$strip>]>>;
2231
- connect: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
2232
- filters: z.ZodOptional<z.ZodType<FilterNode<{
2233
- client_id: z.ZodString;
2234
- user_id: z.ZodOptional<z.ZodString>;
2235
- workspace_id: z.ZodOptional<z.ZodString>;
2236
- project_id: z.ZodOptional<z.ZodString>;
2237
- cluster_id: z.ZodOptional<z.ZodString>;
2238
- plan: z.ZodOptional<z.ZodString>;
2239
- provider: z.ZodOptional<z.ZodString>;
2240
- region: z.ZodOptional<z.ZodString>;
2241
- status: z.ZodEnum<{
2242
- online: "online";
2243
- offline: "offline";
2244
- }>;
2245
- id: z.ZodString;
2246
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
2247
- name: z.ZodOptional<z.ZodString>;
2248
- type: z.ZodOptional<z.ZodEnum<{
2249
- bytestream: "bytestream";
2250
- datagram: "datagram";
2251
- }>>;
2252
- publish: z.ZodOptional<z.ZodBoolean>;
2253
- protocol: z.ZodOptional<z.ZodEnum<{
2254
- tls: "tls";
2255
- dtls: "dtls";
2256
- quic: "quic";
2257
- http: "http";
2258
- }>>;
2259
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
2260
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
2261
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
2262
- host: z.ZodOptional<z.ZodString>;
2263
- hostname: z.ZodOptional<z.ZodString>;
2264
- port: z.ZodOptional<z.ZodNumber>;
2265
- tls_mode: z.ZodOptional<z.ZodEnum<{
2266
- passthrough: "passthrough";
2267
- terminated: "terminated";
2268
- }>>;
2269
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
2270
- tls_min_version: z.ZodOptional<z.ZodString>;
2271
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
2272
- mtls: z.ZodOptional<z.ZodBoolean>;
2273
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2274
- http_version: z.ZodOptional<z.ZodEnum<{
2275
- "http/1.1": "http/1.1";
2276
- h2: "h2";
2277
- h2c: "h2c";
2278
- h3: "h3";
2279
- }>>;
2280
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
2281
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
2282
- token_auth: z.ZodOptional<z.ZodBoolean>;
2283
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
2284
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
2285
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
2286
- client_id: z.ZodString;
2287
- user_id: z.ZodOptional<z.ZodString>;
2288
- workspace_id: z.ZodOptional<z.ZodString>;
2289
- project_id: z.ZodOptional<z.ZodString>;
2290
- cluster_id: z.ZodOptional<z.ZodString>;
2291
- plan: z.ZodOptional<z.ZodString>;
2292
- provider: z.ZodOptional<z.ZodString>;
2293
- region: z.ZodOptional<z.ZodString>;
2294
- status: z.ZodEnum<{
2295
- online: "online";
2296
- offline: "offline";
2297
- }>;
2298
- id: z.ZodString;
2299
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
2300
- name: z.ZodOptional<z.ZodString>;
2301
- type: z.ZodOptional<z.ZodEnum<{
2302
- bytestream: "bytestream";
2303
- datagram: "datagram";
2304
- }>>;
2305
- publish: z.ZodOptional<z.ZodBoolean>;
2306
- protocol: z.ZodOptional<z.ZodEnum<{
2307
- tls: "tls";
2308
- dtls: "dtls";
2309
- quic: "quic";
2310
- http: "http";
2311
- }>>;
2312
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
2313
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
2314
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
2315
- host: z.ZodOptional<z.ZodString>;
2316
- hostname: z.ZodOptional<z.ZodString>;
2317
- port: z.ZodOptional<z.ZodNumber>;
2318
- tls_mode: z.ZodOptional<z.ZodEnum<{
2319
- passthrough: "passthrough";
2320
- terminated: "terminated";
2321
- }>>;
2322
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
2323
- tls_min_version: z.ZodOptional<z.ZodString>;
2324
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
2325
- mtls: z.ZodOptional<z.ZodBoolean>;
2326
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2327
- http_version: z.ZodOptional<z.ZodEnum<{
2328
- "http/1.1": "http/1.1";
2329
- h2: "h2";
2330
- h2c: "h2c";
2331
- h3: "h3";
2332
- }>>;
2333
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
2334
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
2335
- token_auth: z.ZodOptional<z.ZodBoolean>;
2336
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
2337
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
2338
- }>, unknown>>>;
2339
- params: z.ZodOptional<z.ZodType<FilterNode<{
2340
- path: z.ZodOptional<z.ZodString>;
2341
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
2342
- path: z.ZodOptional<z.ZodString>;
2343
- }>, unknown>>>;
2344
- }, z.core.$strip>]>>;
2345
- list: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
2346
- filters: z.ZodOptional<z.ZodType<FilterNode<{
2347
- client_id: z.ZodString;
2348
- user_id: z.ZodOptional<z.ZodString>;
2349
- workspace_id: z.ZodOptional<z.ZodString>;
2350
- project_id: z.ZodOptional<z.ZodString>;
2351
- cluster_id: z.ZodOptional<z.ZodString>;
2352
- plan: z.ZodOptional<z.ZodString>;
2353
- provider: z.ZodOptional<z.ZodString>;
2354
- region: z.ZodOptional<z.ZodString>;
2355
- status: z.ZodEnum<{
2356
- online: "online";
2357
- offline: "offline";
2358
- }>;
2359
- id: z.ZodString;
2360
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
2361
- name: z.ZodOptional<z.ZodString>;
2362
- type: z.ZodOptional<z.ZodEnum<{
2363
- bytestream: "bytestream";
2364
- datagram: "datagram";
2365
- }>>;
2366
- publish: z.ZodOptional<z.ZodBoolean>;
2367
- protocol: z.ZodOptional<z.ZodEnum<{
2368
- tls: "tls";
2369
- dtls: "dtls";
2370
- quic: "quic";
2371
- http: "http";
2372
- }>>;
2373
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
2374
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
2375
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
2376
- host: z.ZodOptional<z.ZodString>;
2377
- hostname: z.ZodOptional<z.ZodString>;
2378
- port: z.ZodOptional<z.ZodNumber>;
2379
- tls_mode: z.ZodOptional<z.ZodEnum<{
2380
- passthrough: "passthrough";
2381
- terminated: "terminated";
2382
- }>>;
2383
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
2384
- tls_min_version: z.ZodOptional<z.ZodString>;
2385
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
2386
- mtls: z.ZodOptional<z.ZodBoolean>;
2387
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2388
- http_version: z.ZodOptional<z.ZodEnum<{
2389
- "http/1.1": "http/1.1";
2390
- h2: "h2";
2391
- h2c: "h2c";
2392
- h3: "h3";
2393
- }>>;
2394
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
2395
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
2396
- token_auth: z.ZodOptional<z.ZodBoolean>;
2397
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
2398
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
2399
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
2400
- client_id: z.ZodString;
2401
- user_id: z.ZodOptional<z.ZodString>;
2402
- workspace_id: z.ZodOptional<z.ZodString>;
2403
- project_id: z.ZodOptional<z.ZodString>;
2404
- cluster_id: z.ZodOptional<z.ZodString>;
2405
- plan: z.ZodOptional<z.ZodString>;
2406
- provider: z.ZodOptional<z.ZodString>;
2407
- region: z.ZodOptional<z.ZodString>;
2408
- status: z.ZodEnum<{
2409
- online: "online";
2410
- offline: "offline";
2411
- }>;
2412
- id: z.ZodString;
2413
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
2414
- name: z.ZodOptional<z.ZodString>;
2415
- type: z.ZodOptional<z.ZodEnum<{
2416
- bytestream: "bytestream";
2417
- datagram: "datagram";
2418
- }>>;
2419
- publish: z.ZodOptional<z.ZodBoolean>;
2420
- protocol: z.ZodOptional<z.ZodEnum<{
2421
- tls: "tls";
2422
- dtls: "dtls";
2423
- quic: "quic";
2424
- http: "http";
2425
- }>>;
2426
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
2427
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
2428
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
2429
- host: z.ZodOptional<z.ZodString>;
2430
- hostname: z.ZodOptional<z.ZodString>;
2431
- port: z.ZodOptional<z.ZodNumber>;
2432
- tls_mode: z.ZodOptional<z.ZodEnum<{
2433
- passthrough: "passthrough";
2434
- terminated: "terminated";
2435
- }>>;
2436
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
2437
- tls_min_version: z.ZodOptional<z.ZodString>;
2438
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
2439
- mtls: z.ZodOptional<z.ZodBoolean>;
2440
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2441
- http_version: z.ZodOptional<z.ZodEnum<{
2442
- "http/1.1": "http/1.1";
2443
- h2: "h2";
2444
- h2c: "h2c";
2445
- h3: "h3";
2446
- }>>;
2447
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
2448
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
2449
- token_auth: z.ZodOptional<z.ZodBoolean>;
2450
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
2451
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
2452
- }>, unknown>>>;
2453
- select: z.ZodOptional<z.ZodObject<{
2454
- client_id: z.ZodOptional<z.ZodBoolean>;
2455
- user_id: z.ZodOptional<z.ZodBoolean>;
2456
- workspace_id: z.ZodOptional<z.ZodBoolean>;
2457
- project_id: z.ZodOptional<z.ZodBoolean>;
2458
- cluster_id: z.ZodOptional<z.ZodBoolean>;
2459
- plan: z.ZodOptional<z.ZodBoolean>;
2460
- provider: z.ZodOptional<z.ZodBoolean>;
2461
- region: z.ZodOptional<z.ZodBoolean>;
2462
- status: z.ZodOptional<z.ZodBoolean>;
2463
- id: z.ZodOptional<z.ZodBoolean>;
2464
- creation_date: z.ZodOptional<z.ZodBoolean>;
2465
- name: z.ZodOptional<z.ZodBoolean>;
2466
- type: z.ZodOptional<z.ZodBoolean>;
2467
- publish: z.ZodOptional<z.ZodBoolean>;
2468
- protocol: z.ZodOptional<z.ZodBoolean>;
2469
- labels: z.ZodOptional<z.ZodBoolean>;
2470
- geo_ip: z.ZodOptional<z.ZodBoolean>;
2471
- trusted_ips: z.ZodOptional<z.ZodBoolean>;
2472
- host: z.ZodOptional<z.ZodBoolean>;
2473
- hostname: z.ZodOptional<z.ZodBoolean>;
2474
- port: z.ZodOptional<z.ZodBoolean>;
2475
- tls_mode: z.ZodOptional<z.ZodBoolean>;
2476
- tls_alpns: z.ZodOptional<z.ZodBoolean>;
2477
- tls_min_version: z.ZodOptional<z.ZodBoolean>;
2478
- tls_ciphers: z.ZodOptional<z.ZodBoolean>;
2479
- mtls: z.ZodOptional<z.ZodBoolean>;
2480
- mtls_ca_cert_pem: z.ZodOptional<z.ZodBoolean>;
2481
- http_version: z.ZodOptional<z.ZodBoolean>;
2482
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
2483
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
2484
- token_auth: z.ZodOptional<z.ZodBoolean>;
2485
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
2486
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
2487
- }, z.core.$strip>>;
2488
- }, z.core.$strip>]>>;
2489
- }, z.core.$strip>>;
2490
- }, z.core.$strip>>;
2491
- }, z.core.$strict>>>;
1094
+ tunnelsGrants: z.ZodOptional<z.ZodType<RstreamAuthTokenTunnelGrant, unknown, z.core.$ZodTypeInternals<RstreamAuthTokenTunnelGrant, unknown>>>;
2492
1095
  iat: z.ZodOptional<z.ZodNumber>;
2493
1096
  iss: z.ZodOptional<z.ZodString>;
2494
1097
  jti: z.ZodOptional<z.ZodString>;
@@ -2503,353 +1106,7 @@ declare const tokenSchema: z.ZodUnion<readonly [z.ZodObject<{
2503
1106
  }, z.core.$strict>, z.ZodObject<{
2504
1107
  aud: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
2505
1108
  exp: z.ZodOptional<z.ZodNumber>;
2506
- tunnelsGrants: z.ZodOptional<z.ZodArray<z.ZodObject<{
2507
- workspaces: z.ZodOptional<z.ZodArray<z.ZodString>>;
2508
- projects: z.ZodOptional<z.ZodArray<z.ZodString>>;
2509
- scopes: z.ZodOptional<z.ZodObject<{
2510
- tunnels: z.ZodOptional<z.ZodObject<{
2511
- create: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
2512
- filters: z.ZodOptional<z.ZodType<FilterNode<{
2513
- type: z.ZodOptional<z.ZodEnum<{
2514
- bytestream: "bytestream";
2515
- datagram: "datagram";
2516
- }>>;
2517
- name: z.ZodOptional<z.ZodString>;
2518
- publish: z.ZodOptional<z.ZodBoolean>;
2519
- protocol: z.ZodOptional<z.ZodEnum<{
2520
- tls: "tls";
2521
- dtls: "dtls";
2522
- quic: "quic";
2523
- http: "http";
2524
- }>>;
2525
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
2526
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
2527
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
2528
- host: z.ZodOptional<z.ZodString>;
2529
- hostname: z.ZodOptional<z.ZodString>;
2530
- port: z.ZodOptional<z.ZodNumber>;
2531
- tls_mode: z.ZodOptional<z.ZodEnum<{
2532
- passthrough: "passthrough";
2533
- terminated: "terminated";
2534
- }>>;
2535
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
2536
- tls_min_version: z.ZodOptional<z.ZodString>;
2537
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
2538
- mtls: z.ZodOptional<z.ZodBoolean>;
2539
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2540
- http_version: z.ZodOptional<z.ZodEnum<{
2541
- "http/1.1": "http/1.1";
2542
- h2: "h2";
2543
- h2c: "h2c";
2544
- h3: "h3";
2545
- }>>;
2546
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
2547
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
2548
- token_auth: z.ZodOptional<z.ZodBoolean>;
2549
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
2550
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
2551
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
2552
- type: z.ZodOptional<z.ZodEnum<{
2553
- bytestream: "bytestream";
2554
- datagram: "datagram";
2555
- }>>;
2556
- name: z.ZodOptional<z.ZodString>;
2557
- publish: z.ZodOptional<z.ZodBoolean>;
2558
- protocol: z.ZodOptional<z.ZodEnum<{
2559
- tls: "tls";
2560
- dtls: "dtls";
2561
- quic: "quic";
2562
- http: "http";
2563
- }>>;
2564
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
2565
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
2566
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
2567
- host: z.ZodOptional<z.ZodString>;
2568
- hostname: z.ZodOptional<z.ZodString>;
2569
- port: z.ZodOptional<z.ZodNumber>;
2570
- tls_mode: z.ZodOptional<z.ZodEnum<{
2571
- passthrough: "passthrough";
2572
- terminated: "terminated";
2573
- }>>;
2574
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
2575
- tls_min_version: z.ZodOptional<z.ZodString>;
2576
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
2577
- mtls: z.ZodOptional<z.ZodBoolean>;
2578
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2579
- http_version: z.ZodOptional<z.ZodEnum<{
2580
- "http/1.1": "http/1.1";
2581
- h2: "h2";
2582
- h2c: "h2c";
2583
- h3: "h3";
2584
- }>>;
2585
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
2586
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
2587
- token_auth: z.ZodOptional<z.ZodBoolean>;
2588
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
2589
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
2590
- }>, unknown>>>;
2591
- }, z.core.$strip>]>>;
2592
- connect: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
2593
- filters: z.ZodOptional<z.ZodType<FilterNode<{
2594
- client_id: z.ZodString;
2595
- user_id: z.ZodOptional<z.ZodString>;
2596
- workspace_id: z.ZodOptional<z.ZodString>;
2597
- project_id: z.ZodOptional<z.ZodString>;
2598
- cluster_id: z.ZodOptional<z.ZodString>;
2599
- plan: z.ZodOptional<z.ZodString>;
2600
- provider: z.ZodOptional<z.ZodString>;
2601
- region: z.ZodOptional<z.ZodString>;
2602
- status: z.ZodEnum<{
2603
- online: "online";
2604
- offline: "offline";
2605
- }>;
2606
- id: z.ZodString;
2607
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
2608
- name: z.ZodOptional<z.ZodString>;
2609
- type: z.ZodOptional<z.ZodEnum<{
2610
- bytestream: "bytestream";
2611
- datagram: "datagram";
2612
- }>>;
2613
- publish: z.ZodOptional<z.ZodBoolean>;
2614
- protocol: z.ZodOptional<z.ZodEnum<{
2615
- tls: "tls";
2616
- dtls: "dtls";
2617
- quic: "quic";
2618
- http: "http";
2619
- }>>;
2620
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
2621
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
2622
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
2623
- host: z.ZodOptional<z.ZodString>;
2624
- hostname: z.ZodOptional<z.ZodString>;
2625
- port: z.ZodOptional<z.ZodNumber>;
2626
- tls_mode: z.ZodOptional<z.ZodEnum<{
2627
- passthrough: "passthrough";
2628
- terminated: "terminated";
2629
- }>>;
2630
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
2631
- tls_min_version: z.ZodOptional<z.ZodString>;
2632
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
2633
- mtls: z.ZodOptional<z.ZodBoolean>;
2634
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2635
- http_version: z.ZodOptional<z.ZodEnum<{
2636
- "http/1.1": "http/1.1";
2637
- h2: "h2";
2638
- h2c: "h2c";
2639
- h3: "h3";
2640
- }>>;
2641
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
2642
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
2643
- token_auth: z.ZodOptional<z.ZodBoolean>;
2644
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
2645
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
2646
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
2647
- client_id: z.ZodString;
2648
- user_id: z.ZodOptional<z.ZodString>;
2649
- workspace_id: z.ZodOptional<z.ZodString>;
2650
- project_id: z.ZodOptional<z.ZodString>;
2651
- cluster_id: z.ZodOptional<z.ZodString>;
2652
- plan: z.ZodOptional<z.ZodString>;
2653
- provider: z.ZodOptional<z.ZodString>;
2654
- region: z.ZodOptional<z.ZodString>;
2655
- status: z.ZodEnum<{
2656
- online: "online";
2657
- offline: "offline";
2658
- }>;
2659
- id: z.ZodString;
2660
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
2661
- name: z.ZodOptional<z.ZodString>;
2662
- type: z.ZodOptional<z.ZodEnum<{
2663
- bytestream: "bytestream";
2664
- datagram: "datagram";
2665
- }>>;
2666
- publish: z.ZodOptional<z.ZodBoolean>;
2667
- protocol: z.ZodOptional<z.ZodEnum<{
2668
- tls: "tls";
2669
- dtls: "dtls";
2670
- quic: "quic";
2671
- http: "http";
2672
- }>>;
2673
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
2674
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
2675
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
2676
- host: z.ZodOptional<z.ZodString>;
2677
- hostname: z.ZodOptional<z.ZodString>;
2678
- port: z.ZodOptional<z.ZodNumber>;
2679
- tls_mode: z.ZodOptional<z.ZodEnum<{
2680
- passthrough: "passthrough";
2681
- terminated: "terminated";
2682
- }>>;
2683
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
2684
- tls_min_version: z.ZodOptional<z.ZodString>;
2685
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
2686
- mtls: z.ZodOptional<z.ZodBoolean>;
2687
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2688
- http_version: z.ZodOptional<z.ZodEnum<{
2689
- "http/1.1": "http/1.1";
2690
- h2: "h2";
2691
- h2c: "h2c";
2692
- h3: "h3";
2693
- }>>;
2694
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
2695
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
2696
- token_auth: z.ZodOptional<z.ZodBoolean>;
2697
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
2698
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
2699
- }>, unknown>>>;
2700
- params: z.ZodOptional<z.ZodType<FilterNode<{
2701
- path: z.ZodOptional<z.ZodString>;
2702
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
2703
- path: z.ZodOptional<z.ZodString>;
2704
- }>, unknown>>>;
2705
- }, z.core.$strip>]>>;
2706
- list: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
2707
- filters: z.ZodOptional<z.ZodType<FilterNode<{
2708
- client_id: z.ZodString;
2709
- user_id: z.ZodOptional<z.ZodString>;
2710
- workspace_id: z.ZodOptional<z.ZodString>;
2711
- project_id: z.ZodOptional<z.ZodString>;
2712
- cluster_id: z.ZodOptional<z.ZodString>;
2713
- plan: z.ZodOptional<z.ZodString>;
2714
- provider: z.ZodOptional<z.ZodString>;
2715
- region: z.ZodOptional<z.ZodString>;
2716
- status: z.ZodEnum<{
2717
- online: "online";
2718
- offline: "offline";
2719
- }>;
2720
- id: z.ZodString;
2721
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
2722
- name: z.ZodOptional<z.ZodString>;
2723
- type: z.ZodOptional<z.ZodEnum<{
2724
- bytestream: "bytestream";
2725
- datagram: "datagram";
2726
- }>>;
2727
- publish: z.ZodOptional<z.ZodBoolean>;
2728
- protocol: z.ZodOptional<z.ZodEnum<{
2729
- tls: "tls";
2730
- dtls: "dtls";
2731
- quic: "quic";
2732
- http: "http";
2733
- }>>;
2734
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
2735
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
2736
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
2737
- host: z.ZodOptional<z.ZodString>;
2738
- hostname: z.ZodOptional<z.ZodString>;
2739
- port: z.ZodOptional<z.ZodNumber>;
2740
- tls_mode: z.ZodOptional<z.ZodEnum<{
2741
- passthrough: "passthrough";
2742
- terminated: "terminated";
2743
- }>>;
2744
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
2745
- tls_min_version: z.ZodOptional<z.ZodString>;
2746
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
2747
- mtls: z.ZodOptional<z.ZodBoolean>;
2748
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2749
- http_version: z.ZodOptional<z.ZodEnum<{
2750
- "http/1.1": "http/1.1";
2751
- h2: "h2";
2752
- h2c: "h2c";
2753
- h3: "h3";
2754
- }>>;
2755
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
2756
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
2757
- token_auth: z.ZodOptional<z.ZodBoolean>;
2758
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
2759
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
2760
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
2761
- client_id: z.ZodString;
2762
- user_id: z.ZodOptional<z.ZodString>;
2763
- workspace_id: z.ZodOptional<z.ZodString>;
2764
- project_id: z.ZodOptional<z.ZodString>;
2765
- cluster_id: z.ZodOptional<z.ZodString>;
2766
- plan: z.ZodOptional<z.ZodString>;
2767
- provider: z.ZodOptional<z.ZodString>;
2768
- region: z.ZodOptional<z.ZodString>;
2769
- status: z.ZodEnum<{
2770
- online: "online";
2771
- offline: "offline";
2772
- }>;
2773
- id: z.ZodString;
2774
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
2775
- name: z.ZodOptional<z.ZodString>;
2776
- type: z.ZodOptional<z.ZodEnum<{
2777
- bytestream: "bytestream";
2778
- datagram: "datagram";
2779
- }>>;
2780
- publish: z.ZodOptional<z.ZodBoolean>;
2781
- protocol: z.ZodOptional<z.ZodEnum<{
2782
- tls: "tls";
2783
- dtls: "dtls";
2784
- quic: "quic";
2785
- http: "http";
2786
- }>>;
2787
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
2788
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
2789
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
2790
- host: z.ZodOptional<z.ZodString>;
2791
- hostname: z.ZodOptional<z.ZodString>;
2792
- port: z.ZodOptional<z.ZodNumber>;
2793
- tls_mode: z.ZodOptional<z.ZodEnum<{
2794
- passthrough: "passthrough";
2795
- terminated: "terminated";
2796
- }>>;
2797
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
2798
- tls_min_version: z.ZodOptional<z.ZodString>;
2799
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
2800
- mtls: z.ZodOptional<z.ZodBoolean>;
2801
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2802
- http_version: z.ZodOptional<z.ZodEnum<{
2803
- "http/1.1": "http/1.1";
2804
- h2: "h2";
2805
- h2c: "h2c";
2806
- h3: "h3";
2807
- }>>;
2808
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
2809
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
2810
- token_auth: z.ZodOptional<z.ZodBoolean>;
2811
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
2812
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
2813
- }>, unknown>>>;
2814
- select: z.ZodOptional<z.ZodObject<{
2815
- client_id: z.ZodOptional<z.ZodBoolean>;
2816
- user_id: z.ZodOptional<z.ZodBoolean>;
2817
- workspace_id: z.ZodOptional<z.ZodBoolean>;
2818
- project_id: z.ZodOptional<z.ZodBoolean>;
2819
- cluster_id: z.ZodOptional<z.ZodBoolean>;
2820
- plan: z.ZodOptional<z.ZodBoolean>;
2821
- provider: z.ZodOptional<z.ZodBoolean>;
2822
- region: z.ZodOptional<z.ZodBoolean>;
2823
- status: z.ZodOptional<z.ZodBoolean>;
2824
- id: z.ZodOptional<z.ZodBoolean>;
2825
- creation_date: z.ZodOptional<z.ZodBoolean>;
2826
- name: z.ZodOptional<z.ZodBoolean>;
2827
- type: z.ZodOptional<z.ZodBoolean>;
2828
- publish: z.ZodOptional<z.ZodBoolean>;
2829
- protocol: z.ZodOptional<z.ZodBoolean>;
2830
- labels: z.ZodOptional<z.ZodBoolean>;
2831
- geo_ip: z.ZodOptional<z.ZodBoolean>;
2832
- trusted_ips: z.ZodOptional<z.ZodBoolean>;
2833
- host: z.ZodOptional<z.ZodBoolean>;
2834
- hostname: z.ZodOptional<z.ZodBoolean>;
2835
- port: z.ZodOptional<z.ZodBoolean>;
2836
- tls_mode: z.ZodOptional<z.ZodBoolean>;
2837
- tls_alpns: z.ZodOptional<z.ZodBoolean>;
2838
- tls_min_version: z.ZodOptional<z.ZodBoolean>;
2839
- tls_ciphers: z.ZodOptional<z.ZodBoolean>;
2840
- mtls: z.ZodOptional<z.ZodBoolean>;
2841
- mtls_ca_cert_pem: z.ZodOptional<z.ZodBoolean>;
2842
- http_version: z.ZodOptional<z.ZodBoolean>;
2843
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
2844
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
2845
- token_auth: z.ZodOptional<z.ZodBoolean>;
2846
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
2847
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
2848
- }, z.core.$strip>>;
2849
- }, z.core.$strip>]>>;
2850
- }, z.core.$strip>>;
2851
- }, z.core.$strip>>;
2852
- }, z.core.$strict>>>;
1109
+ tunnelsGrants: z.ZodOptional<z.ZodType<RstreamAuthTokenTunnelGrant, unknown, z.core.$ZodTypeInternals<RstreamAuthTokenTunnelGrant, unknown>>>;
2853
1110
  iat: z.ZodOptional<z.ZodNumber>;
2854
1111
  iss: z.ZodOptional<z.ZodString>;
2855
1112
  jti: z.ZodOptional<z.ZodString>;
@@ -2859,357 +1116,12 @@ declare const tokenSchema: z.ZodUnion<readonly [z.ZodObject<{
2859
1116
  nbf: z.ZodOptional<z.ZodNumber>;
2860
1117
  sub: z.ZodOptional<z.ZodString>;
2861
1118
  type: z.ZodLiteral<"pat">;
1119
+ tokendpoint: z.ZodOptional<z.ZodString>;
2862
1120
  token_endpoint: z.ZodOptional<z.ZodString>;
2863
1121
  }, z.core.$strict>, z.ZodObject<{
2864
1122
  aud: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
2865
1123
  exp: z.ZodOptional<z.ZodNumber>;
2866
- tunnelsGrants: z.ZodOptional<z.ZodArray<z.ZodObject<{
2867
- workspaces: z.ZodOptional<z.ZodArray<z.ZodString>>;
2868
- projects: z.ZodOptional<z.ZodArray<z.ZodString>>;
2869
- scopes: z.ZodOptional<z.ZodObject<{
2870
- tunnels: z.ZodOptional<z.ZodObject<{
2871
- create: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
2872
- filters: z.ZodOptional<z.ZodType<FilterNode<{
2873
- type: z.ZodOptional<z.ZodEnum<{
2874
- bytestream: "bytestream";
2875
- datagram: "datagram";
2876
- }>>;
2877
- name: z.ZodOptional<z.ZodString>;
2878
- publish: z.ZodOptional<z.ZodBoolean>;
2879
- protocol: z.ZodOptional<z.ZodEnum<{
2880
- tls: "tls";
2881
- dtls: "dtls";
2882
- quic: "quic";
2883
- http: "http";
2884
- }>>;
2885
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
2886
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
2887
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
2888
- host: z.ZodOptional<z.ZodString>;
2889
- hostname: z.ZodOptional<z.ZodString>;
2890
- port: z.ZodOptional<z.ZodNumber>;
2891
- tls_mode: z.ZodOptional<z.ZodEnum<{
2892
- passthrough: "passthrough";
2893
- terminated: "terminated";
2894
- }>>;
2895
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
2896
- tls_min_version: z.ZodOptional<z.ZodString>;
2897
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
2898
- mtls: z.ZodOptional<z.ZodBoolean>;
2899
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2900
- http_version: z.ZodOptional<z.ZodEnum<{
2901
- "http/1.1": "http/1.1";
2902
- h2: "h2";
2903
- h2c: "h2c";
2904
- h3: "h3";
2905
- }>>;
2906
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
2907
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
2908
- token_auth: z.ZodOptional<z.ZodBoolean>;
2909
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
2910
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
2911
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
2912
- type: z.ZodOptional<z.ZodEnum<{
2913
- bytestream: "bytestream";
2914
- datagram: "datagram";
2915
- }>>;
2916
- name: z.ZodOptional<z.ZodString>;
2917
- publish: z.ZodOptional<z.ZodBoolean>;
2918
- protocol: z.ZodOptional<z.ZodEnum<{
2919
- tls: "tls";
2920
- dtls: "dtls";
2921
- quic: "quic";
2922
- http: "http";
2923
- }>>;
2924
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
2925
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
2926
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
2927
- host: z.ZodOptional<z.ZodString>;
2928
- hostname: z.ZodOptional<z.ZodString>;
2929
- port: z.ZodOptional<z.ZodNumber>;
2930
- tls_mode: z.ZodOptional<z.ZodEnum<{
2931
- passthrough: "passthrough";
2932
- terminated: "terminated";
2933
- }>>;
2934
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
2935
- tls_min_version: z.ZodOptional<z.ZodString>;
2936
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
2937
- mtls: z.ZodOptional<z.ZodBoolean>;
2938
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2939
- http_version: z.ZodOptional<z.ZodEnum<{
2940
- "http/1.1": "http/1.1";
2941
- h2: "h2";
2942
- h2c: "h2c";
2943
- h3: "h3";
2944
- }>>;
2945
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
2946
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
2947
- token_auth: z.ZodOptional<z.ZodBoolean>;
2948
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
2949
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
2950
- }>, unknown>>>;
2951
- }, z.core.$strip>]>>;
2952
- connect: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
2953
- filters: z.ZodOptional<z.ZodType<FilterNode<{
2954
- client_id: z.ZodString;
2955
- user_id: z.ZodOptional<z.ZodString>;
2956
- workspace_id: z.ZodOptional<z.ZodString>;
2957
- project_id: z.ZodOptional<z.ZodString>;
2958
- cluster_id: z.ZodOptional<z.ZodString>;
2959
- plan: z.ZodOptional<z.ZodString>;
2960
- provider: z.ZodOptional<z.ZodString>;
2961
- region: z.ZodOptional<z.ZodString>;
2962
- status: z.ZodEnum<{
2963
- online: "online";
2964
- offline: "offline";
2965
- }>;
2966
- id: z.ZodString;
2967
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
2968
- name: z.ZodOptional<z.ZodString>;
2969
- type: z.ZodOptional<z.ZodEnum<{
2970
- bytestream: "bytestream";
2971
- datagram: "datagram";
2972
- }>>;
2973
- publish: z.ZodOptional<z.ZodBoolean>;
2974
- protocol: z.ZodOptional<z.ZodEnum<{
2975
- tls: "tls";
2976
- dtls: "dtls";
2977
- quic: "quic";
2978
- http: "http";
2979
- }>>;
2980
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
2981
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
2982
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
2983
- host: z.ZodOptional<z.ZodString>;
2984
- hostname: z.ZodOptional<z.ZodString>;
2985
- port: z.ZodOptional<z.ZodNumber>;
2986
- tls_mode: z.ZodOptional<z.ZodEnum<{
2987
- passthrough: "passthrough";
2988
- terminated: "terminated";
2989
- }>>;
2990
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
2991
- tls_min_version: z.ZodOptional<z.ZodString>;
2992
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
2993
- mtls: z.ZodOptional<z.ZodBoolean>;
2994
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2995
- http_version: z.ZodOptional<z.ZodEnum<{
2996
- "http/1.1": "http/1.1";
2997
- h2: "h2";
2998
- h2c: "h2c";
2999
- h3: "h3";
3000
- }>>;
3001
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
3002
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
3003
- token_auth: z.ZodOptional<z.ZodBoolean>;
3004
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
3005
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
3006
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
3007
- client_id: z.ZodString;
3008
- user_id: z.ZodOptional<z.ZodString>;
3009
- workspace_id: z.ZodOptional<z.ZodString>;
3010
- project_id: z.ZodOptional<z.ZodString>;
3011
- cluster_id: z.ZodOptional<z.ZodString>;
3012
- plan: z.ZodOptional<z.ZodString>;
3013
- provider: z.ZodOptional<z.ZodString>;
3014
- region: z.ZodOptional<z.ZodString>;
3015
- status: z.ZodEnum<{
3016
- online: "online";
3017
- offline: "offline";
3018
- }>;
3019
- id: z.ZodString;
3020
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
3021
- name: z.ZodOptional<z.ZodString>;
3022
- type: z.ZodOptional<z.ZodEnum<{
3023
- bytestream: "bytestream";
3024
- datagram: "datagram";
3025
- }>>;
3026
- publish: z.ZodOptional<z.ZodBoolean>;
3027
- protocol: z.ZodOptional<z.ZodEnum<{
3028
- tls: "tls";
3029
- dtls: "dtls";
3030
- quic: "quic";
3031
- http: "http";
3032
- }>>;
3033
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
3034
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
3035
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
3036
- host: z.ZodOptional<z.ZodString>;
3037
- hostname: z.ZodOptional<z.ZodString>;
3038
- port: z.ZodOptional<z.ZodNumber>;
3039
- tls_mode: z.ZodOptional<z.ZodEnum<{
3040
- passthrough: "passthrough";
3041
- terminated: "terminated";
3042
- }>>;
3043
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
3044
- tls_min_version: z.ZodOptional<z.ZodString>;
3045
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
3046
- mtls: z.ZodOptional<z.ZodBoolean>;
3047
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
3048
- http_version: z.ZodOptional<z.ZodEnum<{
3049
- "http/1.1": "http/1.1";
3050
- h2: "h2";
3051
- h2c: "h2c";
3052
- h3: "h3";
3053
- }>>;
3054
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
3055
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
3056
- token_auth: z.ZodOptional<z.ZodBoolean>;
3057
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
3058
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
3059
- }>, unknown>>>;
3060
- params: z.ZodOptional<z.ZodType<FilterNode<{
3061
- path: z.ZodOptional<z.ZodString>;
3062
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
3063
- path: z.ZodOptional<z.ZodString>;
3064
- }>, unknown>>>;
3065
- }, z.core.$strip>]>>;
3066
- list: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
3067
- filters: z.ZodOptional<z.ZodType<FilterNode<{
3068
- client_id: z.ZodString;
3069
- user_id: z.ZodOptional<z.ZodString>;
3070
- workspace_id: z.ZodOptional<z.ZodString>;
3071
- project_id: z.ZodOptional<z.ZodString>;
3072
- cluster_id: z.ZodOptional<z.ZodString>;
3073
- plan: z.ZodOptional<z.ZodString>;
3074
- provider: z.ZodOptional<z.ZodString>;
3075
- region: z.ZodOptional<z.ZodString>;
3076
- status: z.ZodEnum<{
3077
- online: "online";
3078
- offline: "offline";
3079
- }>;
3080
- id: z.ZodString;
3081
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
3082
- name: z.ZodOptional<z.ZodString>;
3083
- type: z.ZodOptional<z.ZodEnum<{
3084
- bytestream: "bytestream";
3085
- datagram: "datagram";
3086
- }>>;
3087
- publish: z.ZodOptional<z.ZodBoolean>;
3088
- protocol: z.ZodOptional<z.ZodEnum<{
3089
- tls: "tls";
3090
- dtls: "dtls";
3091
- quic: "quic";
3092
- http: "http";
3093
- }>>;
3094
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
3095
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
3096
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
3097
- host: z.ZodOptional<z.ZodString>;
3098
- hostname: z.ZodOptional<z.ZodString>;
3099
- port: z.ZodOptional<z.ZodNumber>;
3100
- tls_mode: z.ZodOptional<z.ZodEnum<{
3101
- passthrough: "passthrough";
3102
- terminated: "terminated";
3103
- }>>;
3104
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
3105
- tls_min_version: z.ZodOptional<z.ZodString>;
3106
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
3107
- mtls: z.ZodOptional<z.ZodBoolean>;
3108
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
3109
- http_version: z.ZodOptional<z.ZodEnum<{
3110
- "http/1.1": "http/1.1";
3111
- h2: "h2";
3112
- h2c: "h2c";
3113
- h3: "h3";
3114
- }>>;
3115
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
3116
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
3117
- token_auth: z.ZodOptional<z.ZodBoolean>;
3118
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
3119
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
3120
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
3121
- client_id: z.ZodString;
3122
- user_id: z.ZodOptional<z.ZodString>;
3123
- workspace_id: z.ZodOptional<z.ZodString>;
3124
- project_id: z.ZodOptional<z.ZodString>;
3125
- cluster_id: z.ZodOptional<z.ZodString>;
3126
- plan: z.ZodOptional<z.ZodString>;
3127
- provider: z.ZodOptional<z.ZodString>;
3128
- region: z.ZodOptional<z.ZodString>;
3129
- status: z.ZodEnum<{
3130
- online: "online";
3131
- offline: "offline";
3132
- }>;
3133
- id: z.ZodString;
3134
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
3135
- name: z.ZodOptional<z.ZodString>;
3136
- type: z.ZodOptional<z.ZodEnum<{
3137
- bytestream: "bytestream";
3138
- datagram: "datagram";
3139
- }>>;
3140
- publish: z.ZodOptional<z.ZodBoolean>;
3141
- protocol: z.ZodOptional<z.ZodEnum<{
3142
- tls: "tls";
3143
- dtls: "dtls";
3144
- quic: "quic";
3145
- http: "http";
3146
- }>>;
3147
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
3148
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
3149
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
3150
- host: z.ZodOptional<z.ZodString>;
3151
- hostname: z.ZodOptional<z.ZodString>;
3152
- port: z.ZodOptional<z.ZodNumber>;
3153
- tls_mode: z.ZodOptional<z.ZodEnum<{
3154
- passthrough: "passthrough";
3155
- terminated: "terminated";
3156
- }>>;
3157
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
3158
- tls_min_version: z.ZodOptional<z.ZodString>;
3159
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
3160
- mtls: z.ZodOptional<z.ZodBoolean>;
3161
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
3162
- http_version: z.ZodOptional<z.ZodEnum<{
3163
- "http/1.1": "http/1.1";
3164
- h2: "h2";
3165
- h2c: "h2c";
3166
- h3: "h3";
3167
- }>>;
3168
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
3169
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
3170
- token_auth: z.ZodOptional<z.ZodBoolean>;
3171
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
3172
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
3173
- }>, unknown>>>;
3174
- select: z.ZodOptional<z.ZodObject<{
3175
- client_id: z.ZodOptional<z.ZodBoolean>;
3176
- user_id: z.ZodOptional<z.ZodBoolean>;
3177
- workspace_id: z.ZodOptional<z.ZodBoolean>;
3178
- project_id: z.ZodOptional<z.ZodBoolean>;
3179
- cluster_id: z.ZodOptional<z.ZodBoolean>;
3180
- plan: z.ZodOptional<z.ZodBoolean>;
3181
- provider: z.ZodOptional<z.ZodBoolean>;
3182
- region: z.ZodOptional<z.ZodBoolean>;
3183
- status: z.ZodOptional<z.ZodBoolean>;
3184
- id: z.ZodOptional<z.ZodBoolean>;
3185
- creation_date: z.ZodOptional<z.ZodBoolean>;
3186
- name: z.ZodOptional<z.ZodBoolean>;
3187
- type: z.ZodOptional<z.ZodBoolean>;
3188
- publish: z.ZodOptional<z.ZodBoolean>;
3189
- protocol: z.ZodOptional<z.ZodBoolean>;
3190
- labels: z.ZodOptional<z.ZodBoolean>;
3191
- geo_ip: z.ZodOptional<z.ZodBoolean>;
3192
- trusted_ips: z.ZodOptional<z.ZodBoolean>;
3193
- host: z.ZodOptional<z.ZodBoolean>;
3194
- hostname: z.ZodOptional<z.ZodBoolean>;
3195
- port: z.ZodOptional<z.ZodBoolean>;
3196
- tls_mode: z.ZodOptional<z.ZodBoolean>;
3197
- tls_alpns: z.ZodOptional<z.ZodBoolean>;
3198
- tls_min_version: z.ZodOptional<z.ZodBoolean>;
3199
- tls_ciphers: z.ZodOptional<z.ZodBoolean>;
3200
- mtls: z.ZodOptional<z.ZodBoolean>;
3201
- mtls_ca_cert_pem: z.ZodOptional<z.ZodBoolean>;
3202
- http_version: z.ZodOptional<z.ZodBoolean>;
3203
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
3204
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
3205
- token_auth: z.ZodOptional<z.ZodBoolean>;
3206
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
3207
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
3208
- }, z.core.$strip>>;
3209
- }, z.core.$strip>]>>;
3210
- }, z.core.$strip>>;
3211
- }, z.core.$strip>>;
3212
- }, z.core.$strict>>>;
1124
+ tunnelsGrants: z.ZodOptional<z.ZodType<RstreamAuthTokenTunnelGrant, unknown, z.core.$ZodTypeInternals<RstreamAuthTokenTunnelGrant, unknown>>>;
3213
1125
  iat: z.ZodOptional<z.ZodNumber>;
3214
1126
  iss: z.ZodOptional<z.ZodString>;
3215
1127
  jti: z.ZodOptional<z.ZodString>;
@@ -3228,6 +1140,7 @@ declare const createAuthTokenParamsSchema: z.ZodObject<{
3228
1140
  tunnels: z.ZodOptional<z.ZodObject<{
3229
1141
  create: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
3230
1142
  filters: z.ZodOptional<z.ZodType<FilterNode<{
1143
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
3231
1144
  type: z.ZodOptional<z.ZodEnum<{
3232
1145
  bytestream: "bytestream";
3233
1146
  datagram: "datagram";
@@ -3240,7 +1153,6 @@ declare const createAuthTokenParamsSchema: z.ZodObject<{
3240
1153
  quic: "quic";
3241
1154
  http: "http";
3242
1155
  }>>;
3243
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
3244
1156
  geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
3245
1157
  trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
3246
1158
  host: z.ZodOptional<z.ZodString>;
@@ -3253,8 +1165,7 @@ declare const createAuthTokenParamsSchema: z.ZodObject<{
3253
1165
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
3254
1166
  tls_min_version: z.ZodOptional<z.ZodString>;
3255
1167
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
3256
- mtls: z.ZodOptional<z.ZodBoolean>;
3257
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1168
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
3258
1169
  http_version: z.ZodOptional<z.ZodEnum<{
3259
1170
  "http/1.1": "http/1.1";
3260
1171
  h2: "h2";
@@ -3267,6 +1178,7 @@ declare const createAuthTokenParamsSchema: z.ZodObject<{
3267
1178
  rstream_auth: z.ZodOptional<z.ZodBoolean>;
3268
1179
  challenge_mode: z.ZodOptional<z.ZodBoolean>;
3269
1180
  }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
1181
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
3270
1182
  type: z.ZodOptional<z.ZodEnum<{
3271
1183
  bytestream: "bytestream";
3272
1184
  datagram: "datagram";
@@ -3279,7 +1191,6 @@ declare const createAuthTokenParamsSchema: z.ZodObject<{
3279
1191
  quic: "quic";
3280
1192
  http: "http";
3281
1193
  }>>;
3282
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
3283
1194
  geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
3284
1195
  trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
3285
1196
  host: z.ZodOptional<z.ZodString>;
@@ -3292,8 +1203,7 @@ declare const createAuthTokenParamsSchema: z.ZodObject<{
3292
1203
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
3293
1204
  tls_min_version: z.ZodOptional<z.ZodString>;
3294
1205
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
3295
- mtls: z.ZodOptional<z.ZodBoolean>;
3296
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1206
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
3297
1207
  http_version: z.ZodOptional<z.ZodEnum<{
3298
1208
  "http/1.1": "http/1.1";
3299
1209
  h2: "h2";
@@ -3306,7 +1216,7 @@ declare const createAuthTokenParamsSchema: z.ZodObject<{
3306
1216
  rstream_auth: z.ZodOptional<z.ZodBoolean>;
3307
1217
  challenge_mode: z.ZodOptional<z.ZodBoolean>;
3308
1218
  }>, unknown>>>;
3309
- }, z.core.$strip>]>>;
1219
+ }, z.core.$strict>]>>;
3310
1220
  connect: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
3311
1221
  filters: z.ZodOptional<z.ZodType<FilterNode<{
3312
1222
  client_id: z.ZodString;
@@ -3348,8 +1258,7 @@ declare const createAuthTokenParamsSchema: z.ZodObject<{
3348
1258
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
3349
1259
  tls_min_version: z.ZodOptional<z.ZodString>;
3350
1260
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
3351
- mtls: z.ZodOptional<z.ZodBoolean>;
3352
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1261
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
3353
1262
  http_version: z.ZodOptional<z.ZodEnum<{
3354
1263
  "http/1.1": "http/1.1";
3355
1264
  h2: "h2";
@@ -3401,8 +1310,7 @@ declare const createAuthTokenParamsSchema: z.ZodObject<{
3401
1310
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
3402
1311
  tls_min_version: z.ZodOptional<z.ZodString>;
3403
1312
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
3404
- mtls: z.ZodOptional<z.ZodBoolean>;
3405
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1313
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
3406
1314
  http_version: z.ZodOptional<z.ZodEnum<{
3407
1315
  "http/1.1": "http/1.1";
3408
1316
  h2: "h2";
@@ -3420,7 +1328,7 @@ declare const createAuthTokenParamsSchema: z.ZodObject<{
3420
1328
  }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
3421
1329
  path: z.ZodOptional<z.ZodString>;
3422
1330
  }>, unknown>>>;
3423
- }, z.core.$strip>]>>;
1331
+ }, z.core.$strict>]>>;
3424
1332
  list: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
3425
1333
  filters: z.ZodOptional<z.ZodType<FilterNode<{
3426
1334
  client_id: z.ZodString;
@@ -3462,8 +1370,7 @@ declare const createAuthTokenParamsSchema: z.ZodObject<{
3462
1370
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
3463
1371
  tls_min_version: z.ZodOptional<z.ZodString>;
3464
1372
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
3465
- mtls: z.ZodOptional<z.ZodBoolean>;
3466
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1373
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
3467
1374
  http_version: z.ZodOptional<z.ZodEnum<{
3468
1375
  "http/1.1": "http/1.1";
3469
1376
  h2: "h2";
@@ -3515,8 +1422,7 @@ declare const createAuthTokenParamsSchema: z.ZodObject<{
3515
1422
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
3516
1423
  tls_min_version: z.ZodOptional<z.ZodString>;
3517
1424
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
3518
- mtls: z.ZodOptional<z.ZodBoolean>;
3519
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1425
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
3520
1426
  http_version: z.ZodOptional<z.ZodEnum<{
3521
1427
  "http/1.1": "http/1.1";
3522
1428
  h2: "h2";
@@ -3555,8 +1461,7 @@ declare const createAuthTokenParamsSchema: z.ZodObject<{
3555
1461
  tls_alpns: z.ZodOptional<z.ZodBoolean>;
3556
1462
  tls_min_version: z.ZodOptional<z.ZodBoolean>;
3557
1463
  tls_ciphers: z.ZodOptional<z.ZodBoolean>;
3558
- mtls: z.ZodOptional<z.ZodBoolean>;
3559
- mtls_ca_cert_pem: z.ZodOptional<z.ZodBoolean>;
1464
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
3560
1465
  http_version: z.ZodOptional<z.ZodBoolean>;
3561
1466
  http_use_tls: z.ZodOptional<z.ZodBoolean>;
3562
1467
  upstream_tls: z.ZodOptional<z.ZodBoolean>;
@@ -3564,367 +1469,21 @@ declare const createAuthTokenParamsSchema: z.ZodObject<{
3564
1469
  rstream_auth: z.ZodOptional<z.ZodBoolean>;
3565
1470
  challenge_mode: z.ZodOptional<z.ZodBoolean>;
3566
1471
  }, z.core.$strip>>;
3567
- }, z.core.$strip>]>>;
3568
- }, z.core.$strip>>;
3569
- }, z.core.$strip>>;
3570
- tunnelsGrants: z.ZodOptional<z.ZodArray<z.ZodObject<{
3571
- workspaces: z.ZodOptional<z.ZodArray<z.ZodString>>;
3572
- projects: z.ZodOptional<z.ZodArray<z.ZodString>>;
3573
- scopes: z.ZodOptional<z.ZodObject<{
3574
- tunnels: z.ZodOptional<z.ZodObject<{
3575
- create: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
3576
- filters: z.ZodOptional<z.ZodType<FilterNode<{
3577
- type: z.ZodOptional<z.ZodEnum<{
3578
- bytestream: "bytestream";
3579
- datagram: "datagram";
3580
- }>>;
3581
- name: z.ZodOptional<z.ZodString>;
3582
- publish: z.ZodOptional<z.ZodBoolean>;
3583
- protocol: z.ZodOptional<z.ZodEnum<{
3584
- tls: "tls";
3585
- dtls: "dtls";
3586
- quic: "quic";
3587
- http: "http";
3588
- }>>;
3589
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
3590
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
3591
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
3592
- host: z.ZodOptional<z.ZodString>;
3593
- hostname: z.ZodOptional<z.ZodString>;
3594
- port: z.ZodOptional<z.ZodNumber>;
3595
- tls_mode: z.ZodOptional<z.ZodEnum<{
3596
- passthrough: "passthrough";
3597
- terminated: "terminated";
3598
- }>>;
3599
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
3600
- tls_min_version: z.ZodOptional<z.ZodString>;
3601
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
3602
- mtls: z.ZodOptional<z.ZodBoolean>;
3603
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
3604
- http_version: z.ZodOptional<z.ZodEnum<{
3605
- "http/1.1": "http/1.1";
3606
- h2: "h2";
3607
- h2c: "h2c";
3608
- h3: "h3";
3609
- }>>;
3610
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
3611
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
3612
- token_auth: z.ZodOptional<z.ZodBoolean>;
3613
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
3614
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
3615
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
3616
- type: z.ZodOptional<z.ZodEnum<{
3617
- bytestream: "bytestream";
3618
- datagram: "datagram";
3619
- }>>;
3620
- name: z.ZodOptional<z.ZodString>;
3621
- publish: z.ZodOptional<z.ZodBoolean>;
3622
- protocol: z.ZodOptional<z.ZodEnum<{
3623
- tls: "tls";
3624
- dtls: "dtls";
3625
- quic: "quic";
3626
- http: "http";
3627
- }>>;
3628
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
3629
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
3630
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
3631
- host: z.ZodOptional<z.ZodString>;
3632
- hostname: z.ZodOptional<z.ZodString>;
3633
- port: z.ZodOptional<z.ZodNumber>;
3634
- tls_mode: z.ZodOptional<z.ZodEnum<{
3635
- passthrough: "passthrough";
3636
- terminated: "terminated";
3637
- }>>;
3638
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
3639
- tls_min_version: z.ZodOptional<z.ZodString>;
3640
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
3641
- mtls: z.ZodOptional<z.ZodBoolean>;
3642
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
3643
- http_version: z.ZodOptional<z.ZodEnum<{
3644
- "http/1.1": "http/1.1";
3645
- h2: "h2";
3646
- h2c: "h2c";
3647
- h3: "h3";
3648
- }>>;
3649
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
3650
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
3651
- token_auth: z.ZodOptional<z.ZodBoolean>;
3652
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
3653
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
3654
- }>, unknown>>>;
3655
- }, z.core.$strip>]>>;
3656
- connect: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
3657
- filters: z.ZodOptional<z.ZodType<FilterNode<{
3658
- client_id: z.ZodString;
3659
- user_id: z.ZodOptional<z.ZodString>;
3660
- workspace_id: z.ZodOptional<z.ZodString>;
3661
- project_id: z.ZodOptional<z.ZodString>;
3662
- cluster_id: z.ZodOptional<z.ZodString>;
3663
- plan: z.ZodOptional<z.ZodString>;
3664
- provider: z.ZodOptional<z.ZodString>;
3665
- region: z.ZodOptional<z.ZodString>;
3666
- status: z.ZodEnum<{
3667
- online: "online";
3668
- offline: "offline";
3669
- }>;
3670
- id: z.ZodString;
3671
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
3672
- name: z.ZodOptional<z.ZodString>;
3673
- type: z.ZodOptional<z.ZodEnum<{
3674
- bytestream: "bytestream";
3675
- datagram: "datagram";
3676
- }>>;
3677
- publish: z.ZodOptional<z.ZodBoolean>;
3678
- protocol: z.ZodOptional<z.ZodEnum<{
3679
- tls: "tls";
3680
- dtls: "dtls";
3681
- quic: "quic";
3682
- http: "http";
3683
- }>>;
3684
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
3685
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
3686
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
3687
- host: z.ZodOptional<z.ZodString>;
3688
- hostname: z.ZodOptional<z.ZodString>;
3689
- port: z.ZodOptional<z.ZodNumber>;
3690
- tls_mode: z.ZodOptional<z.ZodEnum<{
3691
- passthrough: "passthrough";
3692
- terminated: "terminated";
3693
- }>>;
3694
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
3695
- tls_min_version: z.ZodOptional<z.ZodString>;
3696
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
3697
- mtls: z.ZodOptional<z.ZodBoolean>;
3698
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
3699
- http_version: z.ZodOptional<z.ZodEnum<{
3700
- "http/1.1": "http/1.1";
3701
- h2: "h2";
3702
- h2c: "h2c";
3703
- h3: "h3";
3704
- }>>;
3705
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
3706
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
3707
- token_auth: z.ZodOptional<z.ZodBoolean>;
3708
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
3709
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
3710
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
3711
- client_id: z.ZodString;
3712
- user_id: z.ZodOptional<z.ZodString>;
3713
- workspace_id: z.ZodOptional<z.ZodString>;
3714
- project_id: z.ZodOptional<z.ZodString>;
3715
- cluster_id: z.ZodOptional<z.ZodString>;
3716
- plan: z.ZodOptional<z.ZodString>;
3717
- provider: z.ZodOptional<z.ZodString>;
3718
- region: z.ZodOptional<z.ZodString>;
3719
- status: z.ZodEnum<{
3720
- online: "online";
3721
- offline: "offline";
3722
- }>;
3723
- id: z.ZodString;
3724
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
3725
- name: z.ZodOptional<z.ZodString>;
3726
- type: z.ZodOptional<z.ZodEnum<{
3727
- bytestream: "bytestream";
3728
- datagram: "datagram";
3729
- }>>;
3730
- publish: z.ZodOptional<z.ZodBoolean>;
3731
- protocol: z.ZodOptional<z.ZodEnum<{
3732
- tls: "tls";
3733
- dtls: "dtls";
3734
- quic: "quic";
3735
- http: "http";
3736
- }>>;
3737
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
3738
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
3739
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
3740
- host: z.ZodOptional<z.ZodString>;
3741
- hostname: z.ZodOptional<z.ZodString>;
3742
- port: z.ZodOptional<z.ZodNumber>;
3743
- tls_mode: z.ZodOptional<z.ZodEnum<{
3744
- passthrough: "passthrough";
3745
- terminated: "terminated";
3746
- }>>;
3747
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
3748
- tls_min_version: z.ZodOptional<z.ZodString>;
3749
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
3750
- mtls: z.ZodOptional<z.ZodBoolean>;
3751
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
3752
- http_version: z.ZodOptional<z.ZodEnum<{
3753
- "http/1.1": "http/1.1";
3754
- h2: "h2";
3755
- h2c: "h2c";
3756
- h3: "h3";
3757
- }>>;
3758
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
3759
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
3760
- token_auth: z.ZodOptional<z.ZodBoolean>;
3761
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
3762
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
3763
- }>, unknown>>>;
3764
- params: z.ZodOptional<z.ZodType<FilterNode<{
3765
- path: z.ZodOptional<z.ZodString>;
3766
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
3767
- path: z.ZodOptional<z.ZodString>;
3768
- }>, unknown>>>;
3769
- }, z.core.$strip>]>>;
3770
- list: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
3771
- filters: z.ZodOptional<z.ZodType<FilterNode<{
3772
- client_id: z.ZodString;
3773
- user_id: z.ZodOptional<z.ZodString>;
3774
- workspace_id: z.ZodOptional<z.ZodString>;
3775
- project_id: z.ZodOptional<z.ZodString>;
3776
- cluster_id: z.ZodOptional<z.ZodString>;
3777
- plan: z.ZodOptional<z.ZodString>;
3778
- provider: z.ZodOptional<z.ZodString>;
3779
- region: z.ZodOptional<z.ZodString>;
3780
- status: z.ZodEnum<{
3781
- online: "online";
3782
- offline: "offline";
3783
- }>;
3784
- id: z.ZodString;
3785
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
3786
- name: z.ZodOptional<z.ZodString>;
3787
- type: z.ZodOptional<z.ZodEnum<{
3788
- bytestream: "bytestream";
3789
- datagram: "datagram";
3790
- }>>;
3791
- publish: z.ZodOptional<z.ZodBoolean>;
3792
- protocol: z.ZodOptional<z.ZodEnum<{
3793
- tls: "tls";
3794
- dtls: "dtls";
3795
- quic: "quic";
3796
- http: "http";
3797
- }>>;
3798
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
3799
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
3800
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
3801
- host: z.ZodOptional<z.ZodString>;
3802
- hostname: z.ZodOptional<z.ZodString>;
3803
- port: z.ZodOptional<z.ZodNumber>;
3804
- tls_mode: z.ZodOptional<z.ZodEnum<{
3805
- passthrough: "passthrough";
3806
- terminated: "terminated";
3807
- }>>;
3808
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
3809
- tls_min_version: z.ZodOptional<z.ZodString>;
3810
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
3811
- mtls: z.ZodOptional<z.ZodBoolean>;
3812
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
3813
- http_version: z.ZodOptional<z.ZodEnum<{
3814
- "http/1.1": "http/1.1";
3815
- h2: "h2";
3816
- h2c: "h2c";
3817
- h3: "h3";
3818
- }>>;
3819
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
3820
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
3821
- token_auth: z.ZodOptional<z.ZodBoolean>;
3822
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
3823
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
3824
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
3825
- client_id: z.ZodString;
3826
- user_id: z.ZodOptional<z.ZodString>;
3827
- workspace_id: z.ZodOptional<z.ZodString>;
3828
- project_id: z.ZodOptional<z.ZodString>;
3829
- cluster_id: z.ZodOptional<z.ZodString>;
3830
- plan: z.ZodOptional<z.ZodString>;
3831
- provider: z.ZodOptional<z.ZodString>;
3832
- region: z.ZodOptional<z.ZodString>;
3833
- status: z.ZodEnum<{
3834
- online: "online";
3835
- offline: "offline";
3836
- }>;
3837
- id: z.ZodString;
3838
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
3839
- name: z.ZodOptional<z.ZodString>;
3840
- type: z.ZodOptional<z.ZodEnum<{
3841
- bytestream: "bytestream";
3842
- datagram: "datagram";
3843
- }>>;
3844
- publish: z.ZodOptional<z.ZodBoolean>;
3845
- protocol: z.ZodOptional<z.ZodEnum<{
3846
- tls: "tls";
3847
- dtls: "dtls";
3848
- quic: "quic";
3849
- http: "http";
3850
- }>>;
3851
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
3852
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
3853
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
3854
- host: z.ZodOptional<z.ZodString>;
3855
- hostname: z.ZodOptional<z.ZodString>;
3856
- port: z.ZodOptional<z.ZodNumber>;
3857
- tls_mode: z.ZodOptional<z.ZodEnum<{
3858
- passthrough: "passthrough";
3859
- terminated: "terminated";
3860
- }>>;
3861
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
3862
- tls_min_version: z.ZodOptional<z.ZodString>;
3863
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
3864
- mtls: z.ZodOptional<z.ZodBoolean>;
3865
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
3866
- http_version: z.ZodOptional<z.ZodEnum<{
3867
- "http/1.1": "http/1.1";
3868
- h2: "h2";
3869
- h2c: "h2c";
3870
- h3: "h3";
3871
- }>>;
3872
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
3873
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
3874
- token_auth: z.ZodOptional<z.ZodBoolean>;
3875
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
3876
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
3877
- }>, unknown>>>;
3878
- select: z.ZodOptional<z.ZodObject<{
3879
- client_id: z.ZodOptional<z.ZodBoolean>;
3880
- user_id: z.ZodOptional<z.ZodBoolean>;
3881
- workspace_id: z.ZodOptional<z.ZodBoolean>;
3882
- project_id: z.ZodOptional<z.ZodBoolean>;
3883
- cluster_id: z.ZodOptional<z.ZodBoolean>;
3884
- plan: z.ZodOptional<z.ZodBoolean>;
3885
- provider: z.ZodOptional<z.ZodBoolean>;
3886
- region: z.ZodOptional<z.ZodBoolean>;
3887
- status: z.ZodOptional<z.ZodBoolean>;
3888
- id: z.ZodOptional<z.ZodBoolean>;
3889
- creation_date: z.ZodOptional<z.ZodBoolean>;
3890
- name: z.ZodOptional<z.ZodBoolean>;
3891
- type: z.ZodOptional<z.ZodBoolean>;
3892
- publish: z.ZodOptional<z.ZodBoolean>;
3893
- protocol: z.ZodOptional<z.ZodBoolean>;
3894
- labels: z.ZodOptional<z.ZodBoolean>;
3895
- geo_ip: z.ZodOptional<z.ZodBoolean>;
3896
- trusted_ips: z.ZodOptional<z.ZodBoolean>;
3897
- host: z.ZodOptional<z.ZodBoolean>;
3898
- hostname: z.ZodOptional<z.ZodBoolean>;
3899
- port: z.ZodOptional<z.ZodBoolean>;
3900
- tls_mode: z.ZodOptional<z.ZodBoolean>;
3901
- tls_alpns: z.ZodOptional<z.ZodBoolean>;
3902
- tls_min_version: z.ZodOptional<z.ZodBoolean>;
3903
- tls_ciphers: z.ZodOptional<z.ZodBoolean>;
3904
- mtls: z.ZodOptional<z.ZodBoolean>;
3905
- mtls_ca_cert_pem: z.ZodOptional<z.ZodBoolean>;
3906
- http_version: z.ZodOptional<z.ZodBoolean>;
3907
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
3908
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
3909
- token_auth: z.ZodOptional<z.ZodBoolean>;
3910
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
3911
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
3912
- }, z.core.$strip>>;
3913
- }, z.core.$strip>]>>;
3914
- }, z.core.$strip>>;
3915
- }, z.core.$strip>>;
3916
- }, z.core.$strict>>>;
1472
+ }, z.core.$strict>]>>;
1473
+ }, z.core.$strict>>;
1474
+ }, z.core.$strict>>;
1475
+ tunnelsGrants: z.ZodOptional<z.ZodType<RstreamAuthTokenTunnelGrant, unknown, z.core.$ZodTypeInternals<RstreamAuthTokenTunnelGrant, unknown>>>;
3917
1476
  metadata: z.ZodOptional<z.ZodUnknown>;
3918
1477
  }, z.core.$strict>;
3919
1478
  declare const createAuthTokenResponseSchema: z.ZodObject<{
3920
1479
  token: z.ZodString;
3921
1480
  }, z.core.$strip>;
3922
1481
  type RstreamAuthTokenPermissions = z.infer<typeof authTokenPermissionsSchema>;
3923
- type RstreamAuthTokenTunnelGrant = z.infer<typeof authTokenTunnelGrantSchema>;
3924
1482
  type RstreamAuthTokenScopes = z.infer<typeof authTokenTunnelsScopesSchema>;
3925
1483
  type RstreamAuthToken = z.infer<typeof authTokenSchema>;
3926
1484
  type Token = z.infer<typeof tokenSchema>;
3927
- type CreateAuthTokenParams = z.infer<typeof createAuthTokenParamsSchema>;
1485
+ type CreateAuthTokenParams = z.input<typeof createAuthTokenParamsSchema>;
1486
+ type ParsedCreateAuthTokenParams = z.infer<typeof createAuthTokenParamsSchema>;
3928
1487
  type CreateAuthTokenResponse = z.infer<typeof createAuthTokenResponseSchema>;
3929
1488
  type RstreamAuth = (() => Promise<string>) | string;
3930
1489
  type RstreamAuthJwtPayload = JwtPayload & RstreamAuthToken;
@@ -3952,35 +1511,35 @@ declare const clientSchema: z.ZodObject<{
3952
1511
  }, z.core.$strip>;
3953
1512
  declare const clientFilterSchema: z.ZodObject<{
3954
1513
  id: z.ZodOptional<z.ZodString>;
3955
- user_id: z.ZodOptional<z.ZodOptional<z.ZodString>>;
3956
1514
  status: z.ZodOptional<z.ZodEnum<{
3957
1515
  online: "online";
3958
1516
  offline: "offline";
3959
1517
  }>>;
3960
- labels: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
1518
+ user_id: z.ZodOptional<z.ZodOptional<z.ZodString>>;
3961
1519
  agent: z.ZodOptional<z.ZodOptional<z.ZodString>>;
3962
1520
  channel: z.ZodOptional<z.ZodOptional<z.ZodString>>;
3963
1521
  version: z.ZodOptional<z.ZodOptional<z.ZodString>>;
3964
1522
  os: z.ZodOptional<z.ZodOptional<z.ZodString>>;
3965
1523
  arch: z.ZodOptional<z.ZodOptional<z.ZodString>>;
3966
1524
  protocol_version: z.ZodOptional<z.ZodOptional<z.ZodString>>;
1525
+ labels: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
3967
1526
  }, z.core.$strip>;
3968
1527
  declare const listClientsParamsSchema: z.ZodObject<{
3969
1528
  limit: z.ZodOptional<z.ZodNumber>;
3970
1529
  filters: z.ZodOptional<z.ZodObject<{
3971
1530
  id: z.ZodOptional<z.ZodString>;
3972
- user_id: z.ZodOptional<z.ZodOptional<z.ZodString>>;
3973
1531
  status: z.ZodOptional<z.ZodEnum<{
3974
1532
  online: "online";
3975
1533
  offline: "offline";
3976
1534
  }>>;
3977
- labels: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
1535
+ user_id: z.ZodOptional<z.ZodOptional<z.ZodString>>;
3978
1536
  agent: z.ZodOptional<z.ZodOptional<z.ZodString>>;
3979
1537
  channel: z.ZodOptional<z.ZodOptional<z.ZodString>>;
3980
1538
  version: z.ZodOptional<z.ZodOptional<z.ZodString>>;
3981
1539
  os: z.ZodOptional<z.ZodOptional<z.ZodString>>;
3982
1540
  arch: z.ZodOptional<z.ZodOptional<z.ZodString>>;
3983
1541
  protocol_version: z.ZodOptional<z.ZodOptional<z.ZodString>>;
1542
+ labels: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
3984
1543
  }, z.core.$strip>>;
3985
1544
  }, z.core.$strip>;
3986
1545
  declare const listClientsResponseSchema: z.ZodArray<z.ZodObject<{
@@ -4056,8 +1615,7 @@ declare const tunnelSchema: z.ZodObject<{
4056
1615
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
4057
1616
  tls_min_version: z.ZodOptional<z.ZodString>;
4058
1617
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
4059
- mtls: z.ZodOptional<z.ZodBoolean>;
4060
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1618
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
4061
1619
  http_version: z.ZodOptional<z.ZodEnum<{
4062
1620
  "http/1.1": "http/1.1";
4063
1621
  h2: "h2";
@@ -4071,17 +1629,18 @@ declare const tunnelSchema: z.ZodObject<{
4071
1629
  challenge_mode: z.ZodOptional<z.ZodBoolean>;
4072
1630
  }, z.core.$strip>;
4073
1631
  declare const tunnelFilterSchema: z.ZodObject<{
4074
- type: z.ZodOptional<z.ZodOptional<z.ZodEnum<{
4075
- bytestream: "bytestream";
4076
- datagram: "datagram";
4077
- }>>>;
4078
1632
  id: z.ZodOptional<z.ZodString>;
4079
- client_id: z.ZodOptional<z.ZodString>;
4080
- user_id: z.ZodOptional<z.ZodOptional<z.ZodString>>;
4081
1633
  status: z.ZodOptional<z.ZodEnum<{
4082
1634
  online: "online";
4083
1635
  offline: "offline";
4084
1636
  }>>;
1637
+ user_id: z.ZodOptional<z.ZodOptional<z.ZodString>>;
1638
+ labels: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
1639
+ client_id: z.ZodOptional<z.ZodString>;
1640
+ type: z.ZodOptional<z.ZodOptional<z.ZodEnum<{
1641
+ bytestream: "bytestream";
1642
+ datagram: "datagram";
1643
+ }>>>;
4085
1644
  name: z.ZodOptional<z.ZodOptional<z.ZodString>>;
4086
1645
  publish: z.ZodOptional<z.ZodOptional<z.ZodBoolean>>;
4087
1646
  protocol: z.ZodOptional<z.ZodOptional<z.ZodEnum<{
@@ -4090,7 +1649,6 @@ declare const tunnelFilterSchema: z.ZodObject<{
4090
1649
  quic: "quic";
4091
1650
  http: "http";
4092
1651
  }>>>;
4093
- labels: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
4094
1652
  hostname: z.ZodOptional<z.ZodOptional<z.ZodString>>;
4095
1653
  http_version: z.ZodOptional<z.ZodOptional<z.ZodEnum<{
4096
1654
  "http/1.1": "http/1.1";
@@ -4102,17 +1660,18 @@ declare const tunnelFilterSchema: z.ZodObject<{
4102
1660
  declare const listTunnelsParamsSchema: z.ZodObject<{
4103
1661
  limit: z.ZodOptional<z.ZodNumber>;
4104
1662
  filters: z.ZodOptional<z.ZodObject<{
4105
- type: z.ZodOptional<z.ZodOptional<z.ZodEnum<{
4106
- bytestream: "bytestream";
4107
- datagram: "datagram";
4108
- }>>>;
4109
1663
  id: z.ZodOptional<z.ZodString>;
4110
- client_id: z.ZodOptional<z.ZodString>;
4111
- user_id: z.ZodOptional<z.ZodOptional<z.ZodString>>;
4112
1664
  status: z.ZodOptional<z.ZodEnum<{
4113
1665
  online: "online";
4114
1666
  offline: "offline";
4115
1667
  }>>;
1668
+ user_id: z.ZodOptional<z.ZodOptional<z.ZodString>>;
1669
+ labels: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
1670
+ client_id: z.ZodOptional<z.ZodString>;
1671
+ type: z.ZodOptional<z.ZodOptional<z.ZodEnum<{
1672
+ bytestream: "bytestream";
1673
+ datagram: "datagram";
1674
+ }>>>;
4116
1675
  name: z.ZodOptional<z.ZodOptional<z.ZodString>>;
4117
1676
  publish: z.ZodOptional<z.ZodOptional<z.ZodBoolean>>;
4118
1677
  protocol: z.ZodOptional<z.ZodOptional<z.ZodEnum<{
@@ -4121,7 +1680,6 @@ declare const listTunnelsParamsSchema: z.ZodObject<{
4121
1680
  quic: "quic";
4122
1681
  http: "http";
4123
1682
  }>>>;
4124
- labels: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
4125
1683
  hostname: z.ZodOptional<z.ZodOptional<z.ZodString>>;
4126
1684
  http_version: z.ZodOptional<z.ZodOptional<z.ZodEnum<{
4127
1685
  "http/1.1": "http/1.1";
@@ -4171,8 +1729,7 @@ declare const listTunnelsResponseSchema: z.ZodArray<z.ZodObject<{
4171
1729
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
4172
1730
  tls_min_version: z.ZodOptional<z.ZodString>;
4173
1731
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
4174
- mtls: z.ZodOptional<z.ZodBoolean>;
4175
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1732
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
4176
1733
  http_version: z.ZodOptional<z.ZodEnum<{
4177
1734
  "http/1.1": "http/1.1";
4178
1735
  h2: "h2";
@@ -4215,6 +1772,7 @@ interface CreatePATTURNCredentialsOptions {
4215
1772
  now?: Date | number;
4216
1773
  projectEndpoint: string;
4217
1774
  token: string;
1775
+ tokenEndpoint: string;
4218
1776
  ttlSeconds?: number;
4219
1777
  turnPort?: number;
4220
1778
  turnsPort?: number;
@@ -4244,6 +1802,7 @@ interface CreateTURNCredentialsOptions {
4244
1802
  projectEndpoint?: string;
4245
1803
  projectId?: string;
4246
1804
  serverPublicKeyHex?: string;
1805
+ tokenEndpoint?: string;
4247
1806
  ttlSeconds?: number;
4248
1807
  turnPort?: number;
4249
1808
  turnsPort?: number;
@@ -4322,8 +1881,7 @@ declare const initialStateSchema: z.ZodObject<{
4322
1881
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
4323
1882
  tls_min_version: z.ZodOptional<z.ZodString>;
4324
1883
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
4325
- mtls: z.ZodOptional<z.ZodBoolean>;
4326
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1884
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
4327
1885
  http_version: z.ZodOptional<z.ZodEnum<{
4328
1886
  "http/1.1": "http/1.1";
4329
1887
  h2: "h2";
@@ -4402,8 +1960,7 @@ declare const wsEventsSchema: z.ZodUnion<readonly [z.ZodObject<{
4402
1960
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
4403
1961
  tls_min_version: z.ZodOptional<z.ZodString>;
4404
1962
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
4405
- mtls: z.ZodOptional<z.ZodBoolean>;
4406
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1963
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
4407
1964
  http_version: z.ZodOptional<z.ZodEnum<{
4408
1965
  "http/1.1": "http/1.1";
4409
1966
  h2: "h2";
@@ -4552,8 +2109,7 @@ declare const wsEventsSchema: z.ZodUnion<readonly [z.ZodObject<{
4552
2109
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
4553
2110
  tls_min_version: z.ZodOptional<z.ZodString>;
4554
2111
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
4555
- mtls: z.ZodOptional<z.ZodBoolean>;
4556
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2112
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
4557
2113
  http_version: z.ZodOptional<z.ZodEnum<{
4558
2114
  "http/1.1": "http/1.1";
4559
2115
  h2: "h2";
@@ -4614,8 +2170,7 @@ declare const wsEventsSchema: z.ZodUnion<readonly [z.ZodObject<{
4614
2170
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
4615
2171
  tls_min_version: z.ZodOptional<z.ZodString>;
4616
2172
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
4617
- mtls: z.ZodOptional<z.ZodBoolean>;
4618
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2173
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
4619
2174
  http_version: z.ZodOptional<z.ZodEnum<{
4620
2175
  "http/1.1": "http/1.1";
4621
2176
  h2: "h2";
@@ -4676,8 +2231,7 @@ declare const wsEventsSchema: z.ZodUnion<readonly [z.ZodObject<{
4676
2231
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
4677
2232
  tls_min_version: z.ZodOptional<z.ZodString>;
4678
2233
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
4679
- mtls: z.ZodOptional<z.ZodBoolean>;
4680
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2234
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
4681
2235
  http_version: z.ZodOptional<z.ZodEnum<{
4682
2236
  "http/1.1": "http/1.1";
4683
2237
  h2: "h2";
@@ -4826,8 +2380,7 @@ declare const webhookEventsSchema: z.ZodUnion<readonly [z.ZodObject<{
4826
2380
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
4827
2381
  tls_min_version: z.ZodOptional<z.ZodString>;
4828
2382
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
4829
- mtls: z.ZodOptional<z.ZodBoolean>;
4830
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2383
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
4831
2384
  http_version: z.ZodOptional<z.ZodEnum<{
4832
2385
  "http/1.1": "http/1.1";
4833
2386
  h2: "h2";
@@ -4888,8 +2441,7 @@ declare const webhookEventsSchema: z.ZodUnion<readonly [z.ZodObject<{
4888
2441
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
4889
2442
  tls_min_version: z.ZodOptional<z.ZodString>;
4890
2443
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
4891
- mtls: z.ZodOptional<z.ZodBoolean>;
4892
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2444
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
4893
2445
  http_version: z.ZodOptional<z.ZodEnum<{
4894
2446
  "http/1.1": "http/1.1";
4895
2447
  h2: "h2";
@@ -4950,8 +2502,7 @@ declare const webhookEventsSchema: z.ZodUnion<readonly [z.ZodObject<{
4950
2502
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
4951
2503
  tls_min_version: z.ZodOptional<z.ZodString>;
4952
2504
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
4953
- mtls: z.ZodOptional<z.ZodBoolean>;
4954
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2505
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
4955
2506
  http_version: z.ZodOptional<z.ZodEnum<{
4956
2507
  "http/1.1": "http/1.1";
4957
2508
  h2: "h2";
@@ -5028,8 +2579,8 @@ declare const webhookEventsSchema: z.ZodUnion<readonly [z.ZodObject<{
5028
2579
  }, z.core.$strip>, z.ZodObject<{
5029
2580
  kind: z.ZodLiteral<"token">;
5030
2581
  source: z.ZodOptional<z.ZodEnum<{
5031
- unknown: "unknown";
5032
2582
  query: "query";
2583
+ unknown: "unknown";
5033
2584
  authorization: "authorization";
5034
2585
  client: "client";
5035
2586
  }>>;
@@ -5052,8 +2603,8 @@ declare const webhookEventsSchema: z.ZodUnion<readonly [z.ZodObject<{
5052
2603
  }, z.core.$strip>, z.ZodObject<{
5053
2604
  kind: z.ZodLiteral<"token">;
5054
2605
  source: z.ZodOptional<z.ZodEnum<{
5055
- unknown: "unknown";
5056
2606
  query: "query";
2607
+ unknown: "unknown";
5057
2608
  authorization: "authorization";
5058
2609
  client: "client";
5059
2610
  }>>;
@@ -5073,64 +2624,64 @@ declare const webhookEventsSchema: z.ZodUnion<readonly [z.ZodObject<{
5073
2624
  why: z.ZodDiscriminatedUnion<[z.ZodObject<{
5074
2625
  reason: z.ZodLiteral<"missing_token">;
5075
2626
  source: z.ZodEnum<{
5076
- unknown: "unknown";
5077
2627
  query: "query";
2628
+ unknown: "unknown";
5078
2629
  authorization: "authorization";
5079
2630
  client: "client";
5080
2631
  }>;
5081
2632
  }, z.core.$strip>, z.ZodObject<{
5082
2633
  reason: z.ZodLiteral<"invalid_token">;
5083
2634
  source: z.ZodEnum<{
5084
- unknown: "unknown";
5085
2635
  query: "query";
2636
+ unknown: "unknown";
5086
2637
  authorization: "authorization";
5087
2638
  client: "client";
5088
2639
  }>;
5089
2640
  }, z.core.$strip>, z.ZodObject<{
5090
2641
  reason: z.ZodLiteral<"expired_token">;
5091
2642
  source: z.ZodEnum<{
5092
- unknown: "unknown";
5093
2643
  query: "query";
2644
+ unknown: "unknown";
5094
2645
  authorization: "authorization";
5095
2646
  client: "client";
5096
2647
  }>;
5097
2648
  }, z.core.$strip>, z.ZodObject<{
5098
2649
  reason: z.ZodLiteral<"invalid_secret">;
5099
2650
  source: z.ZodEnum<{
5100
- unknown: "unknown";
5101
2651
  query: "query";
2652
+ unknown: "unknown";
5102
2653
  authorization: "authorization";
5103
2654
  client: "client";
5104
2655
  }>;
5105
2656
  }, z.core.$strip>, z.ZodObject<{
5106
2657
  reason: z.ZodLiteral<"user_mismatch">;
5107
2658
  source: z.ZodEnum<{
5108
- unknown: "unknown";
5109
2659
  query: "query";
2660
+ unknown: "unknown";
5110
2661
  authorization: "authorization";
5111
2662
  client: "client";
5112
2663
  }>;
5113
2664
  }, z.core.$strip>, z.ZodObject<{
5114
2665
  reason: z.ZodLiteral<"insufficient_scope">;
5115
2666
  source: z.ZodEnum<{
5116
- unknown: "unknown";
5117
2667
  query: "query";
2668
+ unknown: "unknown";
5118
2669
  authorization: "authorization";
5119
2670
  client: "client";
5120
2671
  }>;
5121
2672
  }, z.core.$strip>, z.ZodObject<{
5122
2673
  reason: z.ZodLiteral<"policy_denied">;
5123
2674
  policy: z.ZodEnum<{
5124
- mtls: "mtls";
5125
2675
  ip: "ip";
2676
+ mtls: "mtls";
5126
2677
  geo: "geo";
5127
2678
  challenge: "challenge";
5128
2679
  other: "other";
5129
2680
  }>;
5130
2681
  value: z.ZodOptional<z.ZodString>;
5131
2682
  source: z.ZodEnum<{
5132
- unknown: "unknown";
5133
2683
  query: "query";
2684
+ unknown: "unknown";
5134
2685
  authorization: "authorization";
5135
2686
  client: "client";
5136
2687
  }>;
@@ -5175,7 +2726,7 @@ declare const webhookEventsSchema: z.ZodUnion<readonly [z.ZodObject<{
5175
2726
  httpUseTls: z.ZodOptional<z.ZodBoolean>;
5176
2727
  upstreamTls: z.ZodOptional<z.ZodBoolean>;
5177
2728
  tokenAuth: z.ZodOptional<z.ZodBoolean>;
5178
- mtls: z.ZodOptional<z.ZodBoolean>;
2729
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
5179
2730
  }, z.core.$strip>;
5180
2731
  }, z.core.$strip>, z.ZodObject<{
5181
2732
  decision: z.ZodLiteral<"not_routed">;
@@ -5188,64 +2739,64 @@ declare const webhookEventsSchema: z.ZodUnion<readonly [z.ZodObject<{
5188
2739
  why: z.ZodDiscriminatedUnion<[z.ZodObject<{
5189
2740
  reason: z.ZodLiteral<"missing_token">;
5190
2741
  source: z.ZodEnum<{
5191
- unknown: "unknown";
5192
2742
  query: "query";
2743
+ unknown: "unknown";
5193
2744
  authorization: "authorization";
5194
2745
  client: "client";
5195
2746
  }>;
5196
2747
  }, z.core.$strip>, z.ZodObject<{
5197
2748
  reason: z.ZodLiteral<"invalid_token">;
5198
2749
  source: z.ZodEnum<{
5199
- unknown: "unknown";
5200
2750
  query: "query";
2751
+ unknown: "unknown";
5201
2752
  authorization: "authorization";
5202
2753
  client: "client";
5203
2754
  }>;
5204
2755
  }, z.core.$strip>, z.ZodObject<{
5205
2756
  reason: z.ZodLiteral<"expired_token">;
5206
2757
  source: z.ZodEnum<{
5207
- unknown: "unknown";
5208
2758
  query: "query";
2759
+ unknown: "unknown";
5209
2760
  authorization: "authorization";
5210
2761
  client: "client";
5211
2762
  }>;
5212
2763
  }, z.core.$strip>, z.ZodObject<{
5213
2764
  reason: z.ZodLiteral<"invalid_secret">;
5214
2765
  source: z.ZodEnum<{
5215
- unknown: "unknown";
5216
2766
  query: "query";
2767
+ unknown: "unknown";
5217
2768
  authorization: "authorization";
5218
2769
  client: "client";
5219
2770
  }>;
5220
2771
  }, z.core.$strip>, z.ZodObject<{
5221
2772
  reason: z.ZodLiteral<"user_mismatch">;
5222
2773
  source: z.ZodEnum<{
5223
- unknown: "unknown";
5224
2774
  query: "query";
2775
+ unknown: "unknown";
5225
2776
  authorization: "authorization";
5226
2777
  client: "client";
5227
2778
  }>;
5228
2779
  }, z.core.$strip>, z.ZodObject<{
5229
2780
  reason: z.ZodLiteral<"insufficient_scope">;
5230
2781
  source: z.ZodEnum<{
5231
- unknown: "unknown";
5232
2782
  query: "query";
2783
+ unknown: "unknown";
5233
2784
  authorization: "authorization";
5234
2785
  client: "client";
5235
2786
  }>;
5236
2787
  }, z.core.$strip>, z.ZodObject<{
5237
2788
  reason: z.ZodLiteral<"policy_denied">;
5238
2789
  policy: z.ZodEnum<{
5239
- mtls: "mtls";
5240
2790
  ip: "ip";
2791
+ mtls: "mtls";
5241
2792
  geo: "geo";
5242
2793
  challenge: "challenge";
5243
2794
  other: "other";
5244
2795
  }>;
5245
2796
  value: z.ZodOptional<z.ZodString>;
5246
2797
  source: z.ZodEnum<{
5247
- unknown: "unknown";
5248
2798
  query: "query";
2799
+ unknown: "unknown";
5249
2800
  authorization: "authorization";
5250
2801
  client: "client";
5251
2802
  }>;
@@ -5338,64 +2889,64 @@ declare const webhookEventsSchema: z.ZodUnion<readonly [z.ZodObject<{
5338
2889
  why: z.ZodDiscriminatedUnion<[z.ZodObject<{
5339
2890
  reason: z.ZodLiteral<"missing_token">;
5340
2891
  source: z.ZodEnum<{
5341
- unknown: "unknown";
5342
2892
  query: "query";
2893
+ unknown: "unknown";
5343
2894
  authorization: "authorization";
5344
2895
  client: "client";
5345
2896
  }>;
5346
2897
  }, z.core.$strip>, z.ZodObject<{
5347
2898
  reason: z.ZodLiteral<"invalid_token">;
5348
2899
  source: z.ZodEnum<{
5349
- unknown: "unknown";
5350
2900
  query: "query";
2901
+ unknown: "unknown";
5351
2902
  authorization: "authorization";
5352
2903
  client: "client";
5353
2904
  }>;
5354
2905
  }, z.core.$strip>, z.ZodObject<{
5355
2906
  reason: z.ZodLiteral<"expired_token">;
5356
2907
  source: z.ZodEnum<{
5357
- unknown: "unknown";
5358
2908
  query: "query";
2909
+ unknown: "unknown";
5359
2910
  authorization: "authorization";
5360
2911
  client: "client";
5361
2912
  }>;
5362
2913
  }, z.core.$strip>, z.ZodObject<{
5363
2914
  reason: z.ZodLiteral<"invalid_secret">;
5364
2915
  source: z.ZodEnum<{
5365
- unknown: "unknown";
5366
2916
  query: "query";
2917
+ unknown: "unknown";
5367
2918
  authorization: "authorization";
5368
2919
  client: "client";
5369
2920
  }>;
5370
2921
  }, z.core.$strip>, z.ZodObject<{
5371
2922
  reason: z.ZodLiteral<"user_mismatch">;
5372
2923
  source: z.ZodEnum<{
5373
- unknown: "unknown";
5374
2924
  query: "query";
2925
+ unknown: "unknown";
5375
2926
  authorization: "authorization";
5376
2927
  client: "client";
5377
2928
  }>;
5378
2929
  }, z.core.$strip>, z.ZodObject<{
5379
2930
  reason: z.ZodLiteral<"insufficient_scope">;
5380
2931
  source: z.ZodEnum<{
5381
- unknown: "unknown";
5382
2932
  query: "query";
2933
+ unknown: "unknown";
5383
2934
  authorization: "authorization";
5384
2935
  client: "client";
5385
2936
  }>;
5386
2937
  }, z.core.$strip>, z.ZodObject<{
5387
2938
  reason: z.ZodLiteral<"policy_denied">;
5388
2939
  policy: z.ZodEnum<{
5389
- mtls: "mtls";
5390
2940
  ip: "ip";
2941
+ mtls: "mtls";
5391
2942
  geo: "geo";
5392
2943
  challenge: "challenge";
5393
2944
  other: "other";
5394
2945
  }>;
5395
2946
  value: z.ZodOptional<z.ZodString>;
5396
2947
  source: z.ZodEnum<{
5397
- unknown: "unknown";
5398
2948
  query: "query";
2949
+ unknown: "unknown";
5399
2950
  authorization: "authorization";
5400
2951
  client: "client";
5401
2952
  }>;
@@ -5545,8 +3096,7 @@ declare const eventSchema: z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodObject
5545
3096
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
5546
3097
  tls_min_version: z.ZodOptional<z.ZodString>;
5547
3098
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
5548
- mtls: z.ZodOptional<z.ZodBoolean>;
5549
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
3099
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
5550
3100
  http_version: z.ZodOptional<z.ZodEnum<{
5551
3101
  "http/1.1": "http/1.1";
5552
3102
  h2: "h2";
@@ -5695,8 +3245,7 @@ declare const eventSchema: z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodObject
5695
3245
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
5696
3246
  tls_min_version: z.ZodOptional<z.ZodString>;
5697
3247
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
5698
- mtls: z.ZodOptional<z.ZodBoolean>;
5699
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
3248
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
5700
3249
  http_version: z.ZodOptional<z.ZodEnum<{
5701
3250
  "http/1.1": "http/1.1";
5702
3251
  h2: "h2";
@@ -5757,8 +3306,7 @@ declare const eventSchema: z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodObject
5757
3306
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
5758
3307
  tls_min_version: z.ZodOptional<z.ZodString>;
5759
3308
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
5760
- mtls: z.ZodOptional<z.ZodBoolean>;
5761
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
3309
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
5762
3310
  http_version: z.ZodOptional<z.ZodEnum<{
5763
3311
  "http/1.1": "http/1.1";
5764
3312
  h2: "h2";
@@ -5819,8 +3367,7 @@ declare const eventSchema: z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodObject
5819
3367
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
5820
3368
  tls_min_version: z.ZodOptional<z.ZodString>;
5821
3369
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
5822
- mtls: z.ZodOptional<z.ZodBoolean>;
5823
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
3370
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
5824
3371
  http_version: z.ZodOptional<z.ZodEnum<{
5825
3372
  "http/1.1": "http/1.1";
5826
3373
  h2: "h2";
@@ -5968,8 +3515,7 @@ declare const eventSchema: z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodObject
5968
3515
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
5969
3516
  tls_min_version: z.ZodOptional<z.ZodString>;
5970
3517
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
5971
- mtls: z.ZodOptional<z.ZodBoolean>;
5972
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
3518
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
5973
3519
  http_version: z.ZodOptional<z.ZodEnum<{
5974
3520
  "http/1.1": "http/1.1";
5975
3521
  h2: "h2";
@@ -6030,8 +3576,7 @@ declare const eventSchema: z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodObject
6030
3576
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
6031
3577
  tls_min_version: z.ZodOptional<z.ZodString>;
6032
3578
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
6033
- mtls: z.ZodOptional<z.ZodBoolean>;
6034
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
3579
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
6035
3580
  http_version: z.ZodOptional<z.ZodEnum<{
6036
3581
  "http/1.1": "http/1.1";
6037
3582
  h2: "h2";
@@ -6092,8 +3637,7 @@ declare const eventSchema: z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodObject
6092
3637
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
6093
3638
  tls_min_version: z.ZodOptional<z.ZodString>;
6094
3639
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
6095
- mtls: z.ZodOptional<z.ZodBoolean>;
6096
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
3640
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
6097
3641
  http_version: z.ZodOptional<z.ZodEnum<{
6098
3642
  "http/1.1": "http/1.1";
6099
3643
  h2: "h2";
@@ -6170,8 +3714,8 @@ declare const eventSchema: z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodObject
6170
3714
  }, z.core.$strip>, z.ZodObject<{
6171
3715
  kind: z.ZodLiteral<"token">;
6172
3716
  source: z.ZodOptional<z.ZodEnum<{
6173
- unknown: "unknown";
6174
3717
  query: "query";
3718
+ unknown: "unknown";
6175
3719
  authorization: "authorization";
6176
3720
  client: "client";
6177
3721
  }>>;
@@ -6194,8 +3738,8 @@ declare const eventSchema: z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodObject
6194
3738
  }, z.core.$strip>, z.ZodObject<{
6195
3739
  kind: z.ZodLiteral<"token">;
6196
3740
  source: z.ZodOptional<z.ZodEnum<{
6197
- unknown: "unknown";
6198
3741
  query: "query";
3742
+ unknown: "unknown";
6199
3743
  authorization: "authorization";
6200
3744
  client: "client";
6201
3745
  }>>;
@@ -6215,64 +3759,64 @@ declare const eventSchema: z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodObject
6215
3759
  why: z.ZodDiscriminatedUnion<[z.ZodObject<{
6216
3760
  reason: z.ZodLiteral<"missing_token">;
6217
3761
  source: z.ZodEnum<{
6218
- unknown: "unknown";
6219
3762
  query: "query";
3763
+ unknown: "unknown";
6220
3764
  authorization: "authorization";
6221
3765
  client: "client";
6222
3766
  }>;
6223
3767
  }, z.core.$strip>, z.ZodObject<{
6224
3768
  reason: z.ZodLiteral<"invalid_token">;
6225
3769
  source: z.ZodEnum<{
6226
- unknown: "unknown";
6227
3770
  query: "query";
3771
+ unknown: "unknown";
6228
3772
  authorization: "authorization";
6229
3773
  client: "client";
6230
3774
  }>;
6231
3775
  }, z.core.$strip>, z.ZodObject<{
6232
3776
  reason: z.ZodLiteral<"expired_token">;
6233
3777
  source: z.ZodEnum<{
6234
- unknown: "unknown";
6235
3778
  query: "query";
3779
+ unknown: "unknown";
6236
3780
  authorization: "authorization";
6237
3781
  client: "client";
6238
3782
  }>;
6239
3783
  }, z.core.$strip>, z.ZodObject<{
6240
3784
  reason: z.ZodLiteral<"invalid_secret">;
6241
3785
  source: z.ZodEnum<{
6242
- unknown: "unknown";
6243
3786
  query: "query";
3787
+ unknown: "unknown";
6244
3788
  authorization: "authorization";
6245
3789
  client: "client";
6246
3790
  }>;
6247
3791
  }, z.core.$strip>, z.ZodObject<{
6248
3792
  reason: z.ZodLiteral<"user_mismatch">;
6249
3793
  source: z.ZodEnum<{
6250
- unknown: "unknown";
6251
3794
  query: "query";
3795
+ unknown: "unknown";
6252
3796
  authorization: "authorization";
6253
3797
  client: "client";
6254
3798
  }>;
6255
3799
  }, z.core.$strip>, z.ZodObject<{
6256
3800
  reason: z.ZodLiteral<"insufficient_scope">;
6257
3801
  source: z.ZodEnum<{
6258
- unknown: "unknown";
6259
3802
  query: "query";
3803
+ unknown: "unknown";
6260
3804
  authorization: "authorization";
6261
3805
  client: "client";
6262
3806
  }>;
6263
3807
  }, z.core.$strip>, z.ZodObject<{
6264
3808
  reason: z.ZodLiteral<"policy_denied">;
6265
3809
  policy: z.ZodEnum<{
6266
- mtls: "mtls";
6267
3810
  ip: "ip";
3811
+ mtls: "mtls";
6268
3812
  geo: "geo";
6269
3813
  challenge: "challenge";
6270
3814
  other: "other";
6271
3815
  }>;
6272
3816
  value: z.ZodOptional<z.ZodString>;
6273
3817
  source: z.ZodEnum<{
6274
- unknown: "unknown";
6275
3818
  query: "query";
3819
+ unknown: "unknown";
6276
3820
  authorization: "authorization";
6277
3821
  client: "client";
6278
3822
  }>;
@@ -6317,7 +3861,7 @@ declare const eventSchema: z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodObject
6317
3861
  httpUseTls: z.ZodOptional<z.ZodBoolean>;
6318
3862
  upstreamTls: z.ZodOptional<z.ZodBoolean>;
6319
3863
  tokenAuth: z.ZodOptional<z.ZodBoolean>;
6320
- mtls: z.ZodOptional<z.ZodBoolean>;
3864
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
6321
3865
  }, z.core.$strip>;
6322
3866
  }, z.core.$strip>, z.ZodObject<{
6323
3867
  decision: z.ZodLiteral<"not_routed">;
@@ -6330,64 +3874,64 @@ declare const eventSchema: z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodObject
6330
3874
  why: z.ZodDiscriminatedUnion<[z.ZodObject<{
6331
3875
  reason: z.ZodLiteral<"missing_token">;
6332
3876
  source: z.ZodEnum<{
6333
- unknown: "unknown";
6334
3877
  query: "query";
3878
+ unknown: "unknown";
6335
3879
  authorization: "authorization";
6336
3880
  client: "client";
6337
3881
  }>;
6338
3882
  }, z.core.$strip>, z.ZodObject<{
6339
3883
  reason: z.ZodLiteral<"invalid_token">;
6340
3884
  source: z.ZodEnum<{
6341
- unknown: "unknown";
6342
3885
  query: "query";
3886
+ unknown: "unknown";
6343
3887
  authorization: "authorization";
6344
3888
  client: "client";
6345
3889
  }>;
6346
3890
  }, z.core.$strip>, z.ZodObject<{
6347
3891
  reason: z.ZodLiteral<"expired_token">;
6348
3892
  source: z.ZodEnum<{
6349
- unknown: "unknown";
6350
3893
  query: "query";
3894
+ unknown: "unknown";
6351
3895
  authorization: "authorization";
6352
3896
  client: "client";
6353
3897
  }>;
6354
3898
  }, z.core.$strip>, z.ZodObject<{
6355
3899
  reason: z.ZodLiteral<"invalid_secret">;
6356
3900
  source: z.ZodEnum<{
6357
- unknown: "unknown";
6358
3901
  query: "query";
3902
+ unknown: "unknown";
6359
3903
  authorization: "authorization";
6360
3904
  client: "client";
6361
3905
  }>;
6362
3906
  }, z.core.$strip>, z.ZodObject<{
6363
3907
  reason: z.ZodLiteral<"user_mismatch">;
6364
3908
  source: z.ZodEnum<{
6365
- unknown: "unknown";
6366
3909
  query: "query";
3910
+ unknown: "unknown";
6367
3911
  authorization: "authorization";
6368
3912
  client: "client";
6369
3913
  }>;
6370
3914
  }, z.core.$strip>, z.ZodObject<{
6371
3915
  reason: z.ZodLiteral<"insufficient_scope">;
6372
3916
  source: z.ZodEnum<{
6373
- unknown: "unknown";
6374
3917
  query: "query";
3918
+ unknown: "unknown";
6375
3919
  authorization: "authorization";
6376
3920
  client: "client";
6377
3921
  }>;
6378
3922
  }, z.core.$strip>, z.ZodObject<{
6379
3923
  reason: z.ZodLiteral<"policy_denied">;
6380
3924
  policy: z.ZodEnum<{
6381
- mtls: "mtls";
6382
3925
  ip: "ip";
3926
+ mtls: "mtls";
6383
3927
  geo: "geo";
6384
3928
  challenge: "challenge";
6385
3929
  other: "other";
6386
3930
  }>;
6387
3931
  value: z.ZodOptional<z.ZodString>;
6388
3932
  source: z.ZodEnum<{
6389
- unknown: "unknown";
6390
3933
  query: "query";
3934
+ unknown: "unknown";
6391
3935
  authorization: "authorization";
6392
3936
  client: "client";
6393
3937
  }>;
@@ -6480,64 +4024,64 @@ declare const eventSchema: z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodObject
6480
4024
  why: z.ZodDiscriminatedUnion<[z.ZodObject<{
6481
4025
  reason: z.ZodLiteral<"missing_token">;
6482
4026
  source: z.ZodEnum<{
6483
- unknown: "unknown";
6484
4027
  query: "query";
4028
+ unknown: "unknown";
6485
4029
  authorization: "authorization";
6486
4030
  client: "client";
6487
4031
  }>;
6488
4032
  }, z.core.$strip>, z.ZodObject<{
6489
4033
  reason: z.ZodLiteral<"invalid_token">;
6490
4034
  source: z.ZodEnum<{
6491
- unknown: "unknown";
6492
4035
  query: "query";
4036
+ unknown: "unknown";
6493
4037
  authorization: "authorization";
6494
4038
  client: "client";
6495
4039
  }>;
6496
4040
  }, z.core.$strip>, z.ZodObject<{
6497
4041
  reason: z.ZodLiteral<"expired_token">;
6498
4042
  source: z.ZodEnum<{
6499
- unknown: "unknown";
6500
4043
  query: "query";
4044
+ unknown: "unknown";
6501
4045
  authorization: "authorization";
6502
4046
  client: "client";
6503
4047
  }>;
6504
4048
  }, z.core.$strip>, z.ZodObject<{
6505
4049
  reason: z.ZodLiteral<"invalid_secret">;
6506
4050
  source: z.ZodEnum<{
6507
- unknown: "unknown";
6508
4051
  query: "query";
4052
+ unknown: "unknown";
6509
4053
  authorization: "authorization";
6510
4054
  client: "client";
6511
4055
  }>;
6512
4056
  }, z.core.$strip>, z.ZodObject<{
6513
4057
  reason: z.ZodLiteral<"user_mismatch">;
6514
4058
  source: z.ZodEnum<{
6515
- unknown: "unknown";
6516
4059
  query: "query";
4060
+ unknown: "unknown";
6517
4061
  authorization: "authorization";
6518
4062
  client: "client";
6519
4063
  }>;
6520
4064
  }, z.core.$strip>, z.ZodObject<{
6521
4065
  reason: z.ZodLiteral<"insufficient_scope">;
6522
4066
  source: z.ZodEnum<{
6523
- unknown: "unknown";
6524
4067
  query: "query";
4068
+ unknown: "unknown";
6525
4069
  authorization: "authorization";
6526
4070
  client: "client";
6527
4071
  }>;
6528
4072
  }, z.core.$strip>, z.ZodObject<{
6529
4073
  reason: z.ZodLiteral<"policy_denied">;
6530
4074
  policy: z.ZodEnum<{
6531
- mtls: "mtls";
6532
4075
  ip: "ip";
4076
+ mtls: "mtls";
6533
4077
  geo: "geo";
6534
4078
  challenge: "challenge";
6535
4079
  other: "other";
6536
4080
  }>;
6537
4081
  value: z.ZodOptional<z.ZodString>;
6538
4082
  source: z.ZodEnum<{
6539
- unknown: "unknown";
6540
4083
  query: "query";
4084
+ unknown: "unknown";
6541
4085
  authorization: "authorization";
6542
4086
  client: "client";
6543
4087
  }>;
@@ -6650,6 +4194,14 @@ interface RstreamTunnelsConfig {
6650
4194
  * Used when the engine is not set explicitly.
6651
4195
  */
6652
4196
  projectEndpoint?: string;
4197
+ /**
4198
+ * Project ID used to scope locally signed engine auth tokens.
4199
+ */
4200
+ projectId?: string;
4201
+ /**
4202
+ * Workspace ID used to scope locally signed engine auth tokens.
4203
+ */
4204
+ workspaceId?: string;
6653
4205
  /**
6654
4206
  * Control-plane credentials used when resolving a managed project endpoint.
6655
4207
  * Defaults to the same credentials used against the engine when available.
@@ -6658,12 +4210,19 @@ interface RstreamTunnelsConfig {
6658
4210
  }
6659
4211
  declare class RstreamTunnelsClient {
6660
4212
  private readonly config?;
4213
+ private managedProject?;
6661
4214
  constructor(config?: RstreamTunnelsConfig);
6662
4215
  get apiUrl(): string;
6663
4216
  get credentials(): RstreamCredentials | undefined;
6664
4217
  get controlPlaneCredentials(): RstreamCredentials | undefined;
6665
4218
  get projectEndpoint(): string | undefined;
6666
4219
  getEngine(): Promise<string>;
4220
+ private getManagedProject;
4221
+ private getEngineAuthTokenParams;
4222
+ getEngineAuthTokenTarget(): Promise<{
4223
+ projects?: string[];
4224
+ workspaces?: string[];
4225
+ }>;
6667
4226
  get auth(): RstreamAuthResource;
6668
4227
  get clients(): RstreamClientsResource;
6669
4228
  get tunnels(): RstreamTunnelsResource;
@@ -6673,17 +4232,21 @@ declare class RstreamTunnelsClient {
6673
4232
  request<T>(path: string, options?: RequestInit): Promise<T>;
6674
4233
  }
6675
4234
 
4235
+ interface CreateAuthTokenFromClientCredentialsOptions {
4236
+ engine?: string;
4237
+ projectScoped?: boolean;
4238
+ projectId?: string;
4239
+ workspaceId?: string;
4240
+ }
6676
4241
  declare class RstreamAuthResource {
6677
4242
  private readonly client;
6678
4243
  constructor(client: RstreamTunnelsClient);
6679
- createAuthToken(params?: CreateAuthTokenParams, options?: {
4244
+ createAuthToken(params: CreateAuthTokenParams, options?: CreateAuthTokenFromClientCredentialsOptions & {
6680
4245
  credentials?: ClientCredentials;
6681
- engine?: string;
6682
4246
  }): Promise<CreateAuthTokenResponse>;
4247
+ private resolveScopeOptions;
6683
4248
  }
6684
- declare function createAuthTokenFromClientCredentials(credentials: ClientCredentials, params?: CreateAuthTokenParams, options?: {
6685
- engine?: string;
6686
- }): CreateAuthTokenResponse;
4249
+ declare function createAuthTokenFromClientCredentials(credentials: ClientCredentials, params: CreateAuthTokenParams, options?: CreateAuthTokenFromClientCredentialsOptions): CreateAuthTokenResponse;
6687
4250
 
6688
4251
  interface TunnelsResolutionConfig {
6689
4252
  apiUrl?: string;
@@ -6693,10 +4256,12 @@ interface TunnelsResolutionConfig {
6693
4256
  projectEndpoint?: string;
6694
4257
  token?: string;
6695
4258
  }
4259
+ declare function normalizeEngineAddress(engine: string): string;
6696
4260
  declare function resolveTunnelsAPIURL(apiUrl?: string): string;
6697
4261
  declare function resolveTunnelsCredentials(credentials?: RstreamCredentials): RstreamCredentials | undefined;
6698
4262
  declare function resolveControlPlaneCredentials(controlPlaneCredentials?: RstreamCredentials, credentials?: RstreamCredentials, authToken?: string): RstreamCredentials | undefined;
6699
4263
  declare function resolveTunnelsEngine(config: TunnelsResolutionConfig): Promise<string>;
4264
+ declare function resolveManagedTunnelsProject(config: TunnelsResolutionConfig): Promise<TunnelsProject>;
6700
4265
 
6701
4266
  declare const streamTLSInfoSchema: z.ZodObject<{
6702
4267
  version: z.ZodOptional<z.ZodString>;
@@ -6775,8 +4340,8 @@ declare const streamSummarySchema: z.ZodObject<{
6775
4340
  }, z.core.$strip>, z.ZodObject<{
6776
4341
  kind: z.ZodLiteral<"token">;
6777
4342
  source: z.ZodOptional<z.ZodEnum<{
6778
- unknown: "unknown";
6779
4343
  query: "query";
4344
+ unknown: "unknown";
6780
4345
  authorization: "authorization";
6781
4346
  client: "client";
6782
4347
  }>>;
@@ -6799,8 +4364,8 @@ declare const streamSummarySchema: z.ZodObject<{
6799
4364
  }, z.core.$strip>, z.ZodObject<{
6800
4365
  kind: z.ZodLiteral<"token">;
6801
4366
  source: z.ZodOptional<z.ZodEnum<{
6802
- unknown: "unknown";
6803
4367
  query: "query";
4368
+ unknown: "unknown";
6804
4369
  authorization: "authorization";
6805
4370
  client: "client";
6806
4371
  }>>;
@@ -6820,64 +4385,64 @@ declare const streamSummarySchema: z.ZodObject<{
6820
4385
  why: z.ZodDiscriminatedUnion<[z.ZodObject<{
6821
4386
  reason: z.ZodLiteral<"missing_token">;
6822
4387
  source: z.ZodEnum<{
6823
- unknown: "unknown";
6824
4388
  query: "query";
4389
+ unknown: "unknown";
6825
4390
  authorization: "authorization";
6826
4391
  client: "client";
6827
4392
  }>;
6828
4393
  }, z.core.$strip>, z.ZodObject<{
6829
4394
  reason: z.ZodLiteral<"invalid_token">;
6830
4395
  source: z.ZodEnum<{
6831
- unknown: "unknown";
6832
4396
  query: "query";
4397
+ unknown: "unknown";
6833
4398
  authorization: "authorization";
6834
4399
  client: "client";
6835
4400
  }>;
6836
4401
  }, z.core.$strip>, z.ZodObject<{
6837
4402
  reason: z.ZodLiteral<"expired_token">;
6838
4403
  source: z.ZodEnum<{
6839
- unknown: "unknown";
6840
4404
  query: "query";
4405
+ unknown: "unknown";
6841
4406
  authorization: "authorization";
6842
4407
  client: "client";
6843
4408
  }>;
6844
4409
  }, z.core.$strip>, z.ZodObject<{
6845
4410
  reason: z.ZodLiteral<"invalid_secret">;
6846
4411
  source: z.ZodEnum<{
6847
- unknown: "unknown";
6848
4412
  query: "query";
4413
+ unknown: "unknown";
6849
4414
  authorization: "authorization";
6850
4415
  client: "client";
6851
4416
  }>;
6852
4417
  }, z.core.$strip>, z.ZodObject<{
6853
4418
  reason: z.ZodLiteral<"user_mismatch">;
6854
4419
  source: z.ZodEnum<{
6855
- unknown: "unknown";
6856
4420
  query: "query";
4421
+ unknown: "unknown";
6857
4422
  authorization: "authorization";
6858
4423
  client: "client";
6859
4424
  }>;
6860
4425
  }, z.core.$strip>, z.ZodObject<{
6861
4426
  reason: z.ZodLiteral<"insufficient_scope">;
6862
4427
  source: z.ZodEnum<{
6863
- unknown: "unknown";
6864
4428
  query: "query";
4429
+ unknown: "unknown";
6865
4430
  authorization: "authorization";
6866
4431
  client: "client";
6867
4432
  }>;
6868
4433
  }, z.core.$strip>, z.ZodObject<{
6869
4434
  reason: z.ZodLiteral<"policy_denied">;
6870
4435
  policy: z.ZodEnum<{
6871
- mtls: "mtls";
6872
4436
  ip: "ip";
4437
+ mtls: "mtls";
6873
4438
  geo: "geo";
6874
4439
  challenge: "challenge";
6875
4440
  other: "other";
6876
4441
  }>;
6877
4442
  value: z.ZodOptional<z.ZodString>;
6878
4443
  source: z.ZodEnum<{
6879
- unknown: "unknown";
6880
4444
  query: "query";
4445
+ unknown: "unknown";
6881
4446
  authorization: "authorization";
6882
4447
  client: "client";
6883
4448
  }>;
@@ -6922,7 +4487,7 @@ declare const streamSummarySchema: z.ZodObject<{
6922
4487
  httpUseTls: z.ZodOptional<z.ZodBoolean>;
6923
4488
  upstreamTls: z.ZodOptional<z.ZodBoolean>;
6924
4489
  tokenAuth: z.ZodOptional<z.ZodBoolean>;
6925
- mtls: z.ZodOptional<z.ZodBoolean>;
4490
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
6926
4491
  }, z.core.$strip>;
6927
4492
  }, z.core.$strip>, z.ZodObject<{
6928
4493
  decision: z.ZodLiteral<"not_routed">;
@@ -6935,64 +4500,64 @@ declare const streamSummarySchema: z.ZodObject<{
6935
4500
  why: z.ZodDiscriminatedUnion<[z.ZodObject<{
6936
4501
  reason: z.ZodLiteral<"missing_token">;
6937
4502
  source: z.ZodEnum<{
6938
- unknown: "unknown";
6939
4503
  query: "query";
4504
+ unknown: "unknown";
6940
4505
  authorization: "authorization";
6941
4506
  client: "client";
6942
4507
  }>;
6943
4508
  }, z.core.$strip>, z.ZodObject<{
6944
4509
  reason: z.ZodLiteral<"invalid_token">;
6945
4510
  source: z.ZodEnum<{
6946
- unknown: "unknown";
6947
4511
  query: "query";
4512
+ unknown: "unknown";
6948
4513
  authorization: "authorization";
6949
4514
  client: "client";
6950
4515
  }>;
6951
4516
  }, z.core.$strip>, z.ZodObject<{
6952
4517
  reason: z.ZodLiteral<"expired_token">;
6953
4518
  source: z.ZodEnum<{
6954
- unknown: "unknown";
6955
4519
  query: "query";
4520
+ unknown: "unknown";
6956
4521
  authorization: "authorization";
6957
4522
  client: "client";
6958
4523
  }>;
6959
4524
  }, z.core.$strip>, z.ZodObject<{
6960
4525
  reason: z.ZodLiteral<"invalid_secret">;
6961
4526
  source: z.ZodEnum<{
6962
- unknown: "unknown";
6963
4527
  query: "query";
4528
+ unknown: "unknown";
6964
4529
  authorization: "authorization";
6965
4530
  client: "client";
6966
4531
  }>;
6967
4532
  }, z.core.$strip>, z.ZodObject<{
6968
4533
  reason: z.ZodLiteral<"user_mismatch">;
6969
4534
  source: z.ZodEnum<{
6970
- unknown: "unknown";
6971
4535
  query: "query";
4536
+ unknown: "unknown";
6972
4537
  authorization: "authorization";
6973
4538
  client: "client";
6974
4539
  }>;
6975
4540
  }, z.core.$strip>, z.ZodObject<{
6976
4541
  reason: z.ZodLiteral<"insufficient_scope">;
6977
4542
  source: z.ZodEnum<{
6978
- unknown: "unknown";
6979
4543
  query: "query";
4544
+ unknown: "unknown";
6980
4545
  authorization: "authorization";
6981
4546
  client: "client";
6982
4547
  }>;
6983
4548
  }, z.core.$strip>, z.ZodObject<{
6984
4549
  reason: z.ZodLiteral<"policy_denied">;
6985
4550
  policy: z.ZodEnum<{
6986
- mtls: "mtls";
6987
4551
  ip: "ip";
4552
+ mtls: "mtls";
6988
4553
  geo: "geo";
6989
4554
  challenge: "challenge";
6990
4555
  other: "other";
6991
4556
  }>;
6992
4557
  value: z.ZodOptional<z.ZodString>;
6993
4558
  source: z.ZodEnum<{
6994
- unknown: "unknown";
6995
4559
  query: "query";
4560
+ unknown: "unknown";
6996
4561
  authorization: "authorization";
6997
4562
  client: "client";
6998
4563
  }>;
@@ -7085,64 +4650,64 @@ declare const streamSummarySchema: z.ZodObject<{
7085
4650
  why: z.ZodDiscriminatedUnion<[z.ZodObject<{
7086
4651
  reason: z.ZodLiteral<"missing_token">;
7087
4652
  source: z.ZodEnum<{
7088
- unknown: "unknown";
7089
4653
  query: "query";
4654
+ unknown: "unknown";
7090
4655
  authorization: "authorization";
7091
4656
  client: "client";
7092
4657
  }>;
7093
4658
  }, z.core.$strip>, z.ZodObject<{
7094
4659
  reason: z.ZodLiteral<"invalid_token">;
7095
4660
  source: z.ZodEnum<{
7096
- unknown: "unknown";
7097
4661
  query: "query";
4662
+ unknown: "unknown";
7098
4663
  authorization: "authorization";
7099
4664
  client: "client";
7100
4665
  }>;
7101
4666
  }, z.core.$strip>, z.ZodObject<{
7102
4667
  reason: z.ZodLiteral<"expired_token">;
7103
4668
  source: z.ZodEnum<{
7104
- unknown: "unknown";
7105
4669
  query: "query";
4670
+ unknown: "unknown";
7106
4671
  authorization: "authorization";
7107
4672
  client: "client";
7108
4673
  }>;
7109
4674
  }, z.core.$strip>, z.ZodObject<{
7110
4675
  reason: z.ZodLiteral<"invalid_secret">;
7111
4676
  source: z.ZodEnum<{
7112
- unknown: "unknown";
7113
4677
  query: "query";
4678
+ unknown: "unknown";
7114
4679
  authorization: "authorization";
7115
4680
  client: "client";
7116
4681
  }>;
7117
4682
  }, z.core.$strip>, z.ZodObject<{
7118
4683
  reason: z.ZodLiteral<"user_mismatch">;
7119
4684
  source: z.ZodEnum<{
7120
- unknown: "unknown";
7121
4685
  query: "query";
4686
+ unknown: "unknown";
7122
4687
  authorization: "authorization";
7123
4688
  client: "client";
7124
4689
  }>;
7125
4690
  }, z.core.$strip>, z.ZodObject<{
7126
4691
  reason: z.ZodLiteral<"insufficient_scope">;
7127
4692
  source: z.ZodEnum<{
7128
- unknown: "unknown";
7129
4693
  query: "query";
4694
+ unknown: "unknown";
7130
4695
  authorization: "authorization";
7131
4696
  client: "client";
7132
4697
  }>;
7133
4698
  }, z.core.$strip>, z.ZodObject<{
7134
4699
  reason: z.ZodLiteral<"policy_denied">;
7135
4700
  policy: z.ZodEnum<{
7136
- mtls: "mtls";
7137
4701
  ip: "ip";
4702
+ mtls: "mtls";
7138
4703
  geo: "geo";
7139
4704
  challenge: "challenge";
7140
4705
  other: "other";
7141
4706
  }>;
7142
4707
  value: z.ZodOptional<z.ZodString>;
7143
4708
  source: z.ZodEnum<{
7144
- unknown: "unknown";
7145
4709
  query: "query";
4710
+ unknown: "unknown";
7146
4711
  authorization: "authorization";
7147
4712
  client: "client";
7148
4713
  }>;
@@ -7281,6 +4846,7 @@ declare class Watch {
7281
4846
  private readonly events;
7282
4847
  constructor(config: WatchConfig, events: WatchWsEvents);
7283
4848
  connect(): Promise<void>;
4849
+ private handleMessage;
7284
4850
  disconnect(): void;
7285
4851
  }
7286
4852
 
@@ -7308,4 +4874,4 @@ declare const webttyServerSchema: z.ZodObject<{
7308
4874
  type WebTTYServer = z.infer<typeof webttyServerSchema>;
7309
4875
  declare function parseWebTTYServers(tunnels: Tunnel[]): WebTTYServer[];
7310
4876
 
7311
- export { type Client, type ClientFilter, type CreateAPITURNCredentialsOptions, type CreateAPPTURNCredentialsOptions, type CreateAuthTokenParams, type CreateAuthTokenResponse, type CreatePATTURNCredentialsOptions, type CreateTURNCredentialsOptions, type Event, type InitialState, type ListClientsParams, type ListClientsResponse, type ListTunnelsParams, type ListTunnelsResponse, type RstreamAuth, type RstreamAuthJwtPayload, RstreamAuthResource, RstreamAuthResource as RstreamAuthRessource, type RstreamAuthToken, type RstreamAuthTokenPermissions, type RstreamAuthTokenScopes, type RstreamAuthTokenTunnelGrant, RstreamTunnelsClient as RstreamClient, RstreamClientsResource, RstreamClientsResource as RstreamClientsRessource, RstreamTURNResource, RstreamTunnelsClient, type RstreamTunnelsConfig, RstreamTunnelsResource, RstreamTunnelsResource as RstreamTunnelsRessource, RstreamWebhookResource, RstreamWebhookResource as RstreamWebhookRessource, type StreamEndpoint, type StreamSummary, type StreamTLSInfo, type TURNCredentialMode, type Token, type Tunnel, type TunnelFilter, RstreamTunnelsClient as Tunnels, type TunnelsResolutionConfig, Watch, type WatchConfig, type WatchWsEvents, type WebTTYServer, type WebhookEvent, type WsEvent, authTokenPermissionsSchema, authTokenSchema, authTokenScopesSchema, authTokenTunnelGrantSchema, authTokenTunnelsScopesSchema, clientFilterSchema, clientSchema, createAPITURNCredentials, createAPPTURNCredentials, createAuthTokenFromClientCredentials, createAuthTokenParamsSchema, createAuthTokenResponseSchema, createPATTURNCredentials, createTURNCredentials, eventSchema, formatTunnelHost, listClientsParamsSchema, listClientsResponseSchema, listTunnelsParamsSchema, listTunnelsResponseSchema, parseWebTTYServers, resolveControlPlaneCredentials, resolveTunnelsAPIURL, resolveTunnelsCredentials, resolveTunnelsEngine, streamEndpointSchema, streamSummarySchema, streamTLSInfoSchema, tokenSchema, tunnelFilterSchema, tunnelSchema, turnCredentialModeSchema, webhookEventsSchema, webttyServerSchema, wsEventsSchema };
4877
+ export { type Client, type ClientFilter, type CreateAPITURNCredentialsOptions, type CreateAPPTURNCredentialsOptions, type CreateAuthTokenFromClientCredentialsOptions, type CreateAuthTokenParams, type CreateAuthTokenResponse, type CreatePATTURNCredentialsOptions, type CreateTURNCredentialsOptions, type Event, type InitialState, type ListClientsParams, type ListClientsResponse, type ListTunnelsParams, type ListTunnelsResponse, type ParsedCreateAuthTokenParams, type RstreamAuth, type RstreamAuthJwtPayload, RstreamAuthResource, RstreamAuthResource as RstreamAuthRessource, type RstreamAuthToken, type RstreamAuthTokenPermissions, type RstreamAuthTokenScopes, type RstreamAuthTokenTunnelGrant, RstreamTunnelsClient as RstreamClient, RstreamClientsResource, RstreamClientsResource as RstreamClientsRessource, RstreamTURNResource, RstreamTunnelsClient, type RstreamTunnelsConfig, RstreamTunnelsResource, RstreamTunnelsResource as RstreamTunnelsRessource, RstreamWebhookResource, RstreamWebhookResource as RstreamWebhookRessource, type StreamEndpoint, type StreamSummary, type StreamTLSInfo, type TURNCredentialMode, type Token, type Tunnel, type TunnelFilter, RstreamTunnelsClient as Tunnels, type TunnelsResolutionConfig, Watch, type WatchConfig, type WatchWsEvents, type WebTTYServer, type WebhookEvent, type WsEvent, authTokenPermissionsSchema, authTokenSchema, authTokenScopesSchema, authTokenTunnelGrantSchema, authTokenTunnelsScopesSchema, clientFilterSchema, clientSchema, createAPITURNCredentials, createAPPTURNCredentials, createAuthTokenFromClientCredentials, createAuthTokenParamsSchema, createAuthTokenResponseSchema, createPATTURNCredentials, createTURNCredentials, eventSchema, formatTunnelHost, listClientsParamsSchema, listClientsResponseSchema, listTunnelsParamsSchema, listTunnelsResponseSchema, normalizeEngineAddress, parseWebTTYServers, resolveControlPlaneCredentials, resolveManagedTunnelsProject, resolveTunnelsAPIURL, resolveTunnelsCredentials, resolveTunnelsEngine, streamEndpointSchema, streamSummarySchema, streamTLSInfoSchema, tokenSchema, tunnelFilterSchema, tunnelSchema, turnCredentialModeSchema, webhookEventsSchema, webttyServerSchema, wsEventsSchema };