@rstreamlabs/tunnels 1.0.8 → 1.0.9

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (9) hide show
  1. package/README.md +15 -16
  2. package/dist/{chunk-7RZ743EF.mjs → chunk-TVDZNVSF.mjs} +3 -4
  3. package/dist/index.d.mts +177 -2631
  4. package/dist/index.d.ts +177 -2631
  5. package/dist/index.js +139 -28
  6. package/dist/index.mjs +137 -25
  7. package/dist/openapi.js +3 -4
  8. package/dist/openapi.mjs +1 -1
  9. package/package.json +3 -3
package/dist/index.d.mts CHANGED
@@ -28,6 +28,7 @@ declare const authTokenPermissionsSchema: z.ZodArray<z.ZodString>;
28
28
  declare const authTokenTunnelsScopesSchema: z.ZodObject<{
29
29
  create: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
30
30
  filters: z.ZodOptional<z.ZodType<FilterNode<{
31
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
31
32
  type: z.ZodOptional<z.ZodEnum<{
32
33
  bytestream: "bytestream";
33
34
  datagram: "datagram";
@@ -40,7 +41,6 @@ declare const authTokenTunnelsScopesSchema: z.ZodObject<{
40
41
  quic: "quic";
41
42
  http: "http";
42
43
  }>>;
43
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
44
44
  geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
45
45
  trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
46
46
  host: z.ZodOptional<z.ZodString>;
@@ -53,8 +53,7 @@ declare const authTokenTunnelsScopesSchema: z.ZodObject<{
53
53
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
54
54
  tls_min_version: z.ZodOptional<z.ZodString>;
55
55
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
56
- mtls: z.ZodOptional<z.ZodBoolean>;
57
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
56
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
58
57
  http_version: z.ZodOptional<z.ZodEnum<{
59
58
  "http/1.1": "http/1.1";
60
59
  h2: "h2";
@@ -67,6 +66,7 @@ declare const authTokenTunnelsScopesSchema: z.ZodObject<{
67
66
  rstream_auth: z.ZodOptional<z.ZodBoolean>;
68
67
  challenge_mode: z.ZodOptional<z.ZodBoolean>;
69
68
  }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
69
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
70
70
  type: z.ZodOptional<z.ZodEnum<{
71
71
  bytestream: "bytestream";
72
72
  datagram: "datagram";
@@ -79,7 +79,6 @@ declare const authTokenTunnelsScopesSchema: z.ZodObject<{
79
79
  quic: "quic";
80
80
  http: "http";
81
81
  }>>;
82
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
83
82
  geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
84
83
  trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
85
84
  host: z.ZodOptional<z.ZodString>;
@@ -92,8 +91,7 @@ declare const authTokenTunnelsScopesSchema: z.ZodObject<{
92
91
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
93
92
  tls_min_version: z.ZodOptional<z.ZodString>;
94
93
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
95
- mtls: z.ZodOptional<z.ZodBoolean>;
96
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
94
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
97
95
  http_version: z.ZodOptional<z.ZodEnum<{
98
96
  "http/1.1": "http/1.1";
99
97
  h2: "h2";
@@ -148,8 +146,7 @@ declare const authTokenTunnelsScopesSchema: z.ZodObject<{
148
146
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
149
147
  tls_min_version: z.ZodOptional<z.ZodString>;
150
148
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
151
- mtls: z.ZodOptional<z.ZodBoolean>;
152
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
149
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
153
150
  http_version: z.ZodOptional<z.ZodEnum<{
154
151
  "http/1.1": "http/1.1";
155
152
  h2: "h2";
@@ -201,8 +198,7 @@ declare const authTokenTunnelsScopesSchema: z.ZodObject<{
201
198
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
202
199
  tls_min_version: z.ZodOptional<z.ZodString>;
203
200
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
204
- mtls: z.ZodOptional<z.ZodBoolean>;
205
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
201
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
206
202
  http_version: z.ZodOptional<z.ZodEnum<{
207
203
  "http/1.1": "http/1.1";
208
204
  h2: "h2";
@@ -262,8 +258,7 @@ declare const authTokenTunnelsScopesSchema: z.ZodObject<{
262
258
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
263
259
  tls_min_version: z.ZodOptional<z.ZodString>;
264
260
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
265
- mtls: z.ZodOptional<z.ZodBoolean>;
266
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
261
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
267
262
  http_version: z.ZodOptional<z.ZodEnum<{
268
263
  "http/1.1": "http/1.1";
269
264
  h2: "h2";
@@ -315,8 +310,7 @@ declare const authTokenTunnelsScopesSchema: z.ZodObject<{
315
310
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
316
311
  tls_min_version: z.ZodOptional<z.ZodString>;
317
312
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
318
- mtls: z.ZodOptional<z.ZodBoolean>;
319
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
313
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
320
314
  http_version: z.ZodOptional<z.ZodEnum<{
321
315
  "http/1.1": "http/1.1";
322
316
  h2: "h2";
@@ -355,8 +349,7 @@ declare const authTokenTunnelsScopesSchema: z.ZodObject<{
355
349
  tls_alpns: z.ZodOptional<z.ZodBoolean>;
356
350
  tls_min_version: z.ZodOptional<z.ZodBoolean>;
357
351
  tls_ciphers: z.ZodOptional<z.ZodBoolean>;
358
- mtls: z.ZodOptional<z.ZodBoolean>;
359
- mtls_ca_cert_pem: z.ZodOptional<z.ZodBoolean>;
352
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
360
353
  http_version: z.ZodOptional<z.ZodBoolean>;
361
354
  http_use_tls: z.ZodOptional<z.ZodBoolean>;
362
355
  upstream_tls: z.ZodOptional<z.ZodBoolean>;
@@ -370,6 +363,7 @@ declare const authTokenScopesSchema: z.ZodObject<{
370
363
  tunnels: z.ZodOptional<z.ZodObject<{
371
364
  create: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
372
365
  filters: z.ZodOptional<z.ZodType<FilterNode<{
366
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
373
367
  type: z.ZodOptional<z.ZodEnum<{
374
368
  bytestream: "bytestream";
375
369
  datagram: "datagram";
@@ -382,7 +376,6 @@ declare const authTokenScopesSchema: z.ZodObject<{
382
376
  quic: "quic";
383
377
  http: "http";
384
378
  }>>;
385
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
386
379
  geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
387
380
  trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
388
381
  host: z.ZodOptional<z.ZodString>;
@@ -395,8 +388,7 @@ declare const authTokenScopesSchema: z.ZodObject<{
395
388
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
396
389
  tls_min_version: z.ZodOptional<z.ZodString>;
397
390
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
398
- mtls: z.ZodOptional<z.ZodBoolean>;
399
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
391
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
400
392
  http_version: z.ZodOptional<z.ZodEnum<{
401
393
  "http/1.1": "http/1.1";
402
394
  h2: "h2";
@@ -409,6 +401,7 @@ declare const authTokenScopesSchema: z.ZodObject<{
409
401
  rstream_auth: z.ZodOptional<z.ZodBoolean>;
410
402
  challenge_mode: z.ZodOptional<z.ZodBoolean>;
411
403
  }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
404
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
412
405
  type: z.ZodOptional<z.ZodEnum<{
413
406
  bytestream: "bytestream";
414
407
  datagram: "datagram";
@@ -421,7 +414,6 @@ declare const authTokenScopesSchema: z.ZodObject<{
421
414
  quic: "quic";
422
415
  http: "http";
423
416
  }>>;
424
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
425
417
  geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
426
418
  trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
427
419
  host: z.ZodOptional<z.ZodString>;
@@ -434,8 +426,7 @@ declare const authTokenScopesSchema: z.ZodObject<{
434
426
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
435
427
  tls_min_version: z.ZodOptional<z.ZodString>;
436
428
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
437
- mtls: z.ZodOptional<z.ZodBoolean>;
438
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
429
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
439
430
  http_version: z.ZodOptional<z.ZodEnum<{
440
431
  "http/1.1": "http/1.1";
441
432
  h2: "h2";
@@ -490,8 +481,7 @@ declare const authTokenScopesSchema: z.ZodObject<{
490
481
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
491
482
  tls_min_version: z.ZodOptional<z.ZodString>;
492
483
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
493
- mtls: z.ZodOptional<z.ZodBoolean>;
494
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
484
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
495
485
  http_version: z.ZodOptional<z.ZodEnum<{
496
486
  "http/1.1": "http/1.1";
497
487
  h2: "h2";
@@ -543,8 +533,7 @@ declare const authTokenScopesSchema: z.ZodObject<{
543
533
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
544
534
  tls_min_version: z.ZodOptional<z.ZodString>;
545
535
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
546
- mtls: z.ZodOptional<z.ZodBoolean>;
547
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
536
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
548
537
  http_version: z.ZodOptional<z.ZodEnum<{
549
538
  "http/1.1": "http/1.1";
550
539
  h2: "h2";
@@ -604,8 +593,7 @@ declare const authTokenScopesSchema: z.ZodObject<{
604
593
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
605
594
  tls_min_version: z.ZodOptional<z.ZodString>;
606
595
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
607
- mtls: z.ZodOptional<z.ZodBoolean>;
608
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
596
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
609
597
  http_version: z.ZodOptional<z.ZodEnum<{
610
598
  "http/1.1": "http/1.1";
611
599
  h2: "h2";
@@ -657,8 +645,7 @@ declare const authTokenScopesSchema: z.ZodObject<{
657
645
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
658
646
  tls_min_version: z.ZodOptional<z.ZodString>;
659
647
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
660
- mtls: z.ZodOptional<z.ZodBoolean>;
661
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
648
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
662
649
  http_version: z.ZodOptional<z.ZodEnum<{
663
650
  "http/1.1": "http/1.1";
664
651
  h2: "h2";
@@ -697,8 +684,7 @@ declare const authTokenScopesSchema: z.ZodObject<{
697
684
  tls_alpns: z.ZodOptional<z.ZodBoolean>;
698
685
  tls_min_version: z.ZodOptional<z.ZodBoolean>;
699
686
  tls_ciphers: z.ZodOptional<z.ZodBoolean>;
700
- mtls: z.ZodOptional<z.ZodBoolean>;
701
- mtls_ca_cert_pem: z.ZodOptional<z.ZodBoolean>;
687
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
702
688
  http_version: z.ZodOptional<z.ZodBoolean>;
703
689
  http_use_tls: z.ZodOptional<z.ZodBoolean>;
704
690
  upstream_tls: z.ZodOptional<z.ZodBoolean>;
@@ -709,13 +695,14 @@ declare const authTokenScopesSchema: z.ZodObject<{
709
695
  }, z.core.$strict>]>>;
710
696
  }, z.core.$strict>>;
711
697
  }, z.core.$strict>;
712
- declare const authTokenTunnelGrantSchema: z.ZodObject<{
698
+ declare const authTokenTunnelGrantLeafSchema: z.ZodObject<{
713
699
  workspaces: z.ZodOptional<z.ZodArray<z.ZodString>>;
714
700
  projects: z.ZodOptional<z.ZodArray<z.ZodString>>;
715
- scopes: z.ZodObject<{
701
+ scopes: z.ZodOptional<z.ZodObject<{
716
702
  tunnels: z.ZodOptional<z.ZodObject<{
717
703
  create: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
718
704
  filters: z.ZodOptional<z.ZodType<FilterNode<{
705
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
719
706
  type: z.ZodOptional<z.ZodEnum<{
720
707
  bytestream: "bytestream";
721
708
  datagram: "datagram";
@@ -728,7 +715,6 @@ declare const authTokenTunnelGrantSchema: z.ZodObject<{
728
715
  quic: "quic";
729
716
  http: "http";
730
717
  }>>;
731
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
732
718
  geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
733
719
  trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
734
720
  host: z.ZodOptional<z.ZodString>;
@@ -741,8 +727,7 @@ declare const authTokenTunnelGrantSchema: z.ZodObject<{
741
727
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
742
728
  tls_min_version: z.ZodOptional<z.ZodString>;
743
729
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
744
- mtls: z.ZodOptional<z.ZodBoolean>;
745
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
730
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
746
731
  http_version: z.ZodOptional<z.ZodEnum<{
747
732
  "http/1.1": "http/1.1";
748
733
  h2: "h2";
@@ -755,6 +740,7 @@ declare const authTokenTunnelGrantSchema: z.ZodObject<{
755
740
  rstream_auth: z.ZodOptional<z.ZodBoolean>;
756
741
  challenge_mode: z.ZodOptional<z.ZodBoolean>;
757
742
  }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
743
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
758
744
  type: z.ZodOptional<z.ZodEnum<{
759
745
  bytestream: "bytestream";
760
746
  datagram: "datagram";
@@ -767,7 +753,6 @@ declare const authTokenTunnelGrantSchema: z.ZodObject<{
767
753
  quic: "quic";
768
754
  http: "http";
769
755
  }>>;
770
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
771
756
  geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
772
757
  trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
773
758
  host: z.ZodOptional<z.ZodString>;
@@ -780,8 +765,7 @@ declare const authTokenTunnelGrantSchema: z.ZodObject<{
780
765
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
781
766
  tls_min_version: z.ZodOptional<z.ZodString>;
782
767
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
783
- mtls: z.ZodOptional<z.ZodBoolean>;
784
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
768
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
785
769
  http_version: z.ZodOptional<z.ZodEnum<{
786
770
  "http/1.1": "http/1.1";
787
771
  h2: "h2";
@@ -836,8 +820,7 @@ declare const authTokenTunnelGrantSchema: z.ZodObject<{
836
820
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
837
821
  tls_min_version: z.ZodOptional<z.ZodString>;
838
822
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
839
- mtls: z.ZodOptional<z.ZodBoolean>;
840
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
823
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
841
824
  http_version: z.ZodOptional<z.ZodEnum<{
842
825
  "http/1.1": "http/1.1";
843
826
  h2: "h2";
@@ -889,8 +872,7 @@ declare const authTokenTunnelGrantSchema: z.ZodObject<{
889
872
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
890
873
  tls_min_version: z.ZodOptional<z.ZodString>;
891
874
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
892
- mtls: z.ZodOptional<z.ZodBoolean>;
893
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
875
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
894
876
  http_version: z.ZodOptional<z.ZodEnum<{
895
877
  "http/1.1": "http/1.1";
896
878
  h2: "h2";
@@ -950,8 +932,7 @@ declare const authTokenTunnelGrantSchema: z.ZodObject<{
950
932
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
951
933
  tls_min_version: z.ZodOptional<z.ZodString>;
952
934
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
953
- mtls: z.ZodOptional<z.ZodBoolean>;
954
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
935
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
955
936
  http_version: z.ZodOptional<z.ZodEnum<{
956
937
  "http/1.1": "http/1.1";
957
938
  h2: "h2";
@@ -1003,8 +984,7 @@ declare const authTokenTunnelGrantSchema: z.ZodObject<{
1003
984
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
1004
985
  tls_min_version: z.ZodOptional<z.ZodString>;
1005
986
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
1006
- mtls: z.ZodOptional<z.ZodBoolean>;
1007
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
987
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
1008
988
  http_version: z.ZodOptional<z.ZodEnum<{
1009
989
  "http/1.1": "http/1.1";
1010
990
  h2: "h2";
@@ -1043,8 +1023,7 @@ declare const authTokenTunnelGrantSchema: z.ZodObject<{
1043
1023
  tls_alpns: z.ZodOptional<z.ZodBoolean>;
1044
1024
  tls_min_version: z.ZodOptional<z.ZodBoolean>;
1045
1025
  tls_ciphers: z.ZodOptional<z.ZodBoolean>;
1046
- mtls: z.ZodOptional<z.ZodBoolean>;
1047
- mtls_ca_cert_pem: z.ZodOptional<z.ZodBoolean>;
1026
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
1048
1027
  http_version: z.ZodOptional<z.ZodBoolean>;
1049
1028
  http_use_tls: z.ZodOptional<z.ZodBoolean>;
1050
1029
  upstream_tls: z.ZodOptional<z.ZodBoolean>;
@@ -1054,358 +1033,19 @@ declare const authTokenTunnelGrantSchema: z.ZodObject<{
1054
1033
  }, z.core.$strip>>;
1055
1034
  }, z.core.$strict>]>>;
1056
1035
  }, z.core.$strict>>;
1057
- }, z.core.$strict>;
1036
+ }, z.core.$strict>>;
1058
1037
  }, z.core.$strict>;
1038
+ type AuthTokenTunnelGrantLeaf = z.infer<typeof authTokenTunnelGrantLeafSchema>;
1039
+ type RstreamAuthTokenTunnelGrant = AuthTokenTunnelGrantLeaf | {
1040
+ AND: RstreamAuthTokenTunnelGrant[];
1041
+ } | {
1042
+ OR: RstreamAuthTokenTunnelGrant[];
1043
+ };
1044
+ declare const authTokenTunnelGrantSchema: z.ZodType<RstreamAuthTokenTunnelGrant>;
1059
1045
  declare const authTokenSchema: z.ZodUnion<readonly [z.ZodObject<{
1060
1046
  aud: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
1061
1047
  exp: z.ZodOptional<z.ZodNumber>;
1062
- tunnelsGrants: z.ZodOptional<z.ZodArray<z.ZodObject<{
1063
- workspaces: z.ZodOptional<z.ZodArray<z.ZodString>>;
1064
- projects: z.ZodOptional<z.ZodArray<z.ZodString>>;
1065
- scopes: z.ZodObject<{
1066
- tunnels: z.ZodOptional<z.ZodObject<{
1067
- create: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
1068
- filters: z.ZodOptional<z.ZodType<FilterNode<{
1069
- type: z.ZodOptional<z.ZodEnum<{
1070
- bytestream: "bytestream";
1071
- datagram: "datagram";
1072
- }>>;
1073
- name: z.ZodOptional<z.ZodString>;
1074
- publish: z.ZodOptional<z.ZodBoolean>;
1075
- protocol: z.ZodOptional<z.ZodEnum<{
1076
- tls: "tls";
1077
- dtls: "dtls";
1078
- quic: "quic";
1079
- http: "http";
1080
- }>>;
1081
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1082
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
1083
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
1084
- host: z.ZodOptional<z.ZodString>;
1085
- hostname: z.ZodOptional<z.ZodString>;
1086
- port: z.ZodOptional<z.ZodNumber>;
1087
- tls_mode: z.ZodOptional<z.ZodEnum<{
1088
- passthrough: "passthrough";
1089
- terminated: "terminated";
1090
- }>>;
1091
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
1092
- tls_min_version: z.ZodOptional<z.ZodString>;
1093
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
1094
- mtls: z.ZodOptional<z.ZodBoolean>;
1095
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1096
- http_version: z.ZodOptional<z.ZodEnum<{
1097
- "http/1.1": "http/1.1";
1098
- h2: "h2";
1099
- h2c: "h2c";
1100
- h3: "h3";
1101
- }>>;
1102
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
1103
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
1104
- token_auth: z.ZodOptional<z.ZodBoolean>;
1105
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
1106
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
1107
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
1108
- type: z.ZodOptional<z.ZodEnum<{
1109
- bytestream: "bytestream";
1110
- datagram: "datagram";
1111
- }>>;
1112
- name: z.ZodOptional<z.ZodString>;
1113
- publish: z.ZodOptional<z.ZodBoolean>;
1114
- protocol: z.ZodOptional<z.ZodEnum<{
1115
- tls: "tls";
1116
- dtls: "dtls";
1117
- quic: "quic";
1118
- http: "http";
1119
- }>>;
1120
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1121
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
1122
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
1123
- host: z.ZodOptional<z.ZodString>;
1124
- hostname: z.ZodOptional<z.ZodString>;
1125
- port: z.ZodOptional<z.ZodNumber>;
1126
- tls_mode: z.ZodOptional<z.ZodEnum<{
1127
- passthrough: "passthrough";
1128
- terminated: "terminated";
1129
- }>>;
1130
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
1131
- tls_min_version: z.ZodOptional<z.ZodString>;
1132
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
1133
- mtls: z.ZodOptional<z.ZodBoolean>;
1134
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1135
- http_version: z.ZodOptional<z.ZodEnum<{
1136
- "http/1.1": "http/1.1";
1137
- h2: "h2";
1138
- h2c: "h2c";
1139
- h3: "h3";
1140
- }>>;
1141
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
1142
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
1143
- token_auth: z.ZodOptional<z.ZodBoolean>;
1144
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
1145
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
1146
- }>, unknown>>>;
1147
- }, z.core.$strict>]>>;
1148
- connect: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
1149
- filters: z.ZodOptional<z.ZodType<FilterNode<{
1150
- client_id: z.ZodString;
1151
- user_id: z.ZodOptional<z.ZodString>;
1152
- workspace_id: z.ZodOptional<z.ZodString>;
1153
- project_id: z.ZodOptional<z.ZodString>;
1154
- cluster_id: z.ZodOptional<z.ZodString>;
1155
- plan: z.ZodOptional<z.ZodString>;
1156
- provider: z.ZodOptional<z.ZodString>;
1157
- region: z.ZodOptional<z.ZodString>;
1158
- status: z.ZodEnum<{
1159
- online: "online";
1160
- offline: "offline";
1161
- }>;
1162
- id: z.ZodString;
1163
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
1164
- name: z.ZodOptional<z.ZodString>;
1165
- type: z.ZodOptional<z.ZodEnum<{
1166
- bytestream: "bytestream";
1167
- datagram: "datagram";
1168
- }>>;
1169
- publish: z.ZodOptional<z.ZodBoolean>;
1170
- protocol: z.ZodOptional<z.ZodEnum<{
1171
- tls: "tls";
1172
- dtls: "dtls";
1173
- quic: "quic";
1174
- http: "http";
1175
- }>>;
1176
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1177
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
1178
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
1179
- host: z.ZodOptional<z.ZodString>;
1180
- hostname: z.ZodOptional<z.ZodString>;
1181
- port: z.ZodOptional<z.ZodNumber>;
1182
- tls_mode: z.ZodOptional<z.ZodEnum<{
1183
- passthrough: "passthrough";
1184
- terminated: "terminated";
1185
- }>>;
1186
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
1187
- tls_min_version: z.ZodOptional<z.ZodString>;
1188
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
1189
- mtls: z.ZodOptional<z.ZodBoolean>;
1190
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1191
- http_version: z.ZodOptional<z.ZodEnum<{
1192
- "http/1.1": "http/1.1";
1193
- h2: "h2";
1194
- h2c: "h2c";
1195
- h3: "h3";
1196
- }>>;
1197
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
1198
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
1199
- token_auth: z.ZodOptional<z.ZodBoolean>;
1200
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
1201
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
1202
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
1203
- client_id: z.ZodString;
1204
- user_id: z.ZodOptional<z.ZodString>;
1205
- workspace_id: z.ZodOptional<z.ZodString>;
1206
- project_id: z.ZodOptional<z.ZodString>;
1207
- cluster_id: z.ZodOptional<z.ZodString>;
1208
- plan: z.ZodOptional<z.ZodString>;
1209
- provider: z.ZodOptional<z.ZodString>;
1210
- region: z.ZodOptional<z.ZodString>;
1211
- status: z.ZodEnum<{
1212
- online: "online";
1213
- offline: "offline";
1214
- }>;
1215
- id: z.ZodString;
1216
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
1217
- name: z.ZodOptional<z.ZodString>;
1218
- type: z.ZodOptional<z.ZodEnum<{
1219
- bytestream: "bytestream";
1220
- datagram: "datagram";
1221
- }>>;
1222
- publish: z.ZodOptional<z.ZodBoolean>;
1223
- protocol: z.ZodOptional<z.ZodEnum<{
1224
- tls: "tls";
1225
- dtls: "dtls";
1226
- quic: "quic";
1227
- http: "http";
1228
- }>>;
1229
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1230
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
1231
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
1232
- host: z.ZodOptional<z.ZodString>;
1233
- hostname: z.ZodOptional<z.ZodString>;
1234
- port: z.ZodOptional<z.ZodNumber>;
1235
- tls_mode: z.ZodOptional<z.ZodEnum<{
1236
- passthrough: "passthrough";
1237
- terminated: "terminated";
1238
- }>>;
1239
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
1240
- tls_min_version: z.ZodOptional<z.ZodString>;
1241
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
1242
- mtls: z.ZodOptional<z.ZodBoolean>;
1243
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1244
- http_version: z.ZodOptional<z.ZodEnum<{
1245
- "http/1.1": "http/1.1";
1246
- h2: "h2";
1247
- h2c: "h2c";
1248
- h3: "h3";
1249
- }>>;
1250
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
1251
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
1252
- token_auth: z.ZodOptional<z.ZodBoolean>;
1253
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
1254
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
1255
- }>, unknown>>>;
1256
- params: z.ZodOptional<z.ZodType<FilterNode<{
1257
- path: z.ZodOptional<z.ZodString>;
1258
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
1259
- path: z.ZodOptional<z.ZodString>;
1260
- }>, unknown>>>;
1261
- }, z.core.$strict>]>>;
1262
- list: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
1263
- filters: z.ZodOptional<z.ZodType<FilterNode<{
1264
- client_id: z.ZodString;
1265
- user_id: z.ZodOptional<z.ZodString>;
1266
- workspace_id: z.ZodOptional<z.ZodString>;
1267
- project_id: z.ZodOptional<z.ZodString>;
1268
- cluster_id: z.ZodOptional<z.ZodString>;
1269
- plan: z.ZodOptional<z.ZodString>;
1270
- provider: z.ZodOptional<z.ZodString>;
1271
- region: z.ZodOptional<z.ZodString>;
1272
- status: z.ZodEnum<{
1273
- online: "online";
1274
- offline: "offline";
1275
- }>;
1276
- id: z.ZodString;
1277
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
1278
- name: z.ZodOptional<z.ZodString>;
1279
- type: z.ZodOptional<z.ZodEnum<{
1280
- bytestream: "bytestream";
1281
- datagram: "datagram";
1282
- }>>;
1283
- publish: z.ZodOptional<z.ZodBoolean>;
1284
- protocol: z.ZodOptional<z.ZodEnum<{
1285
- tls: "tls";
1286
- dtls: "dtls";
1287
- quic: "quic";
1288
- http: "http";
1289
- }>>;
1290
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1291
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
1292
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
1293
- host: z.ZodOptional<z.ZodString>;
1294
- hostname: z.ZodOptional<z.ZodString>;
1295
- port: z.ZodOptional<z.ZodNumber>;
1296
- tls_mode: z.ZodOptional<z.ZodEnum<{
1297
- passthrough: "passthrough";
1298
- terminated: "terminated";
1299
- }>>;
1300
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
1301
- tls_min_version: z.ZodOptional<z.ZodString>;
1302
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
1303
- mtls: z.ZodOptional<z.ZodBoolean>;
1304
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1305
- http_version: z.ZodOptional<z.ZodEnum<{
1306
- "http/1.1": "http/1.1";
1307
- h2: "h2";
1308
- h2c: "h2c";
1309
- h3: "h3";
1310
- }>>;
1311
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
1312
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
1313
- token_auth: z.ZodOptional<z.ZodBoolean>;
1314
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
1315
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
1316
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
1317
- client_id: z.ZodString;
1318
- user_id: z.ZodOptional<z.ZodString>;
1319
- workspace_id: z.ZodOptional<z.ZodString>;
1320
- project_id: z.ZodOptional<z.ZodString>;
1321
- cluster_id: z.ZodOptional<z.ZodString>;
1322
- plan: z.ZodOptional<z.ZodString>;
1323
- provider: z.ZodOptional<z.ZodString>;
1324
- region: z.ZodOptional<z.ZodString>;
1325
- status: z.ZodEnum<{
1326
- online: "online";
1327
- offline: "offline";
1328
- }>;
1329
- id: z.ZodString;
1330
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
1331
- name: z.ZodOptional<z.ZodString>;
1332
- type: z.ZodOptional<z.ZodEnum<{
1333
- bytestream: "bytestream";
1334
- datagram: "datagram";
1335
- }>>;
1336
- publish: z.ZodOptional<z.ZodBoolean>;
1337
- protocol: z.ZodOptional<z.ZodEnum<{
1338
- tls: "tls";
1339
- dtls: "dtls";
1340
- quic: "quic";
1341
- http: "http";
1342
- }>>;
1343
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1344
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
1345
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
1346
- host: z.ZodOptional<z.ZodString>;
1347
- hostname: z.ZodOptional<z.ZodString>;
1348
- port: z.ZodOptional<z.ZodNumber>;
1349
- tls_mode: z.ZodOptional<z.ZodEnum<{
1350
- passthrough: "passthrough";
1351
- terminated: "terminated";
1352
- }>>;
1353
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
1354
- tls_min_version: z.ZodOptional<z.ZodString>;
1355
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
1356
- mtls: z.ZodOptional<z.ZodBoolean>;
1357
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1358
- http_version: z.ZodOptional<z.ZodEnum<{
1359
- "http/1.1": "http/1.1";
1360
- h2: "h2";
1361
- h2c: "h2c";
1362
- h3: "h3";
1363
- }>>;
1364
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
1365
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
1366
- token_auth: z.ZodOptional<z.ZodBoolean>;
1367
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
1368
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
1369
- }>, unknown>>>;
1370
- select: z.ZodOptional<z.ZodObject<{
1371
- client_id: z.ZodOptional<z.ZodBoolean>;
1372
- user_id: z.ZodOptional<z.ZodBoolean>;
1373
- workspace_id: z.ZodOptional<z.ZodBoolean>;
1374
- project_id: z.ZodOptional<z.ZodBoolean>;
1375
- cluster_id: z.ZodOptional<z.ZodBoolean>;
1376
- plan: z.ZodOptional<z.ZodBoolean>;
1377
- provider: z.ZodOptional<z.ZodBoolean>;
1378
- region: z.ZodOptional<z.ZodBoolean>;
1379
- status: z.ZodOptional<z.ZodBoolean>;
1380
- id: z.ZodOptional<z.ZodBoolean>;
1381
- creation_date: z.ZodOptional<z.ZodBoolean>;
1382
- name: z.ZodOptional<z.ZodBoolean>;
1383
- type: z.ZodOptional<z.ZodBoolean>;
1384
- publish: z.ZodOptional<z.ZodBoolean>;
1385
- protocol: z.ZodOptional<z.ZodBoolean>;
1386
- labels: z.ZodOptional<z.ZodBoolean>;
1387
- geo_ip: z.ZodOptional<z.ZodBoolean>;
1388
- trusted_ips: z.ZodOptional<z.ZodBoolean>;
1389
- host: z.ZodOptional<z.ZodBoolean>;
1390
- hostname: z.ZodOptional<z.ZodBoolean>;
1391
- port: z.ZodOptional<z.ZodBoolean>;
1392
- tls_mode: z.ZodOptional<z.ZodBoolean>;
1393
- tls_alpns: z.ZodOptional<z.ZodBoolean>;
1394
- tls_min_version: z.ZodOptional<z.ZodBoolean>;
1395
- tls_ciphers: z.ZodOptional<z.ZodBoolean>;
1396
- mtls: z.ZodOptional<z.ZodBoolean>;
1397
- mtls_ca_cert_pem: z.ZodOptional<z.ZodBoolean>;
1398
- http_version: z.ZodOptional<z.ZodBoolean>;
1399
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
1400
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
1401
- token_auth: z.ZodOptional<z.ZodBoolean>;
1402
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
1403
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
1404
- }, z.core.$strip>>;
1405
- }, z.core.$strict>]>>;
1406
- }, z.core.$strict>>;
1407
- }, z.core.$strict>;
1408
- }, z.core.$strict>>>;
1048
+ tunnelsGrants: z.ZodOptional<z.ZodType<RstreamAuthTokenTunnelGrant, unknown, z.core.$ZodTypeInternals<RstreamAuthTokenTunnelGrant, unknown>>>;
1409
1049
  iat: z.ZodOptional<z.ZodNumber>;
1410
1050
  iss: z.ZodOptional<z.ZodString>;
1411
1051
  jti: z.ZodOptional<z.ZodString>;
@@ -1420,353 +1060,7 @@ declare const authTokenSchema: z.ZodUnion<readonly [z.ZodObject<{
1420
1060
  }, z.core.$strict>, z.ZodObject<{
1421
1061
  aud: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
1422
1062
  exp: z.ZodOptional<z.ZodNumber>;
1423
- tunnelsGrants: z.ZodOptional<z.ZodArray<z.ZodObject<{
1424
- workspaces: z.ZodOptional<z.ZodArray<z.ZodString>>;
1425
- projects: z.ZodOptional<z.ZodArray<z.ZodString>>;
1426
- scopes: z.ZodObject<{
1427
- tunnels: z.ZodOptional<z.ZodObject<{
1428
- create: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
1429
- filters: z.ZodOptional<z.ZodType<FilterNode<{
1430
- type: z.ZodOptional<z.ZodEnum<{
1431
- bytestream: "bytestream";
1432
- datagram: "datagram";
1433
- }>>;
1434
- name: z.ZodOptional<z.ZodString>;
1435
- publish: z.ZodOptional<z.ZodBoolean>;
1436
- protocol: z.ZodOptional<z.ZodEnum<{
1437
- tls: "tls";
1438
- dtls: "dtls";
1439
- quic: "quic";
1440
- http: "http";
1441
- }>>;
1442
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1443
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
1444
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
1445
- host: z.ZodOptional<z.ZodString>;
1446
- hostname: z.ZodOptional<z.ZodString>;
1447
- port: z.ZodOptional<z.ZodNumber>;
1448
- tls_mode: z.ZodOptional<z.ZodEnum<{
1449
- passthrough: "passthrough";
1450
- terminated: "terminated";
1451
- }>>;
1452
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
1453
- tls_min_version: z.ZodOptional<z.ZodString>;
1454
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
1455
- mtls: z.ZodOptional<z.ZodBoolean>;
1456
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1457
- http_version: z.ZodOptional<z.ZodEnum<{
1458
- "http/1.1": "http/1.1";
1459
- h2: "h2";
1460
- h2c: "h2c";
1461
- h3: "h3";
1462
- }>>;
1463
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
1464
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
1465
- token_auth: z.ZodOptional<z.ZodBoolean>;
1466
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
1467
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
1468
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
1469
- type: z.ZodOptional<z.ZodEnum<{
1470
- bytestream: "bytestream";
1471
- datagram: "datagram";
1472
- }>>;
1473
- name: z.ZodOptional<z.ZodString>;
1474
- publish: z.ZodOptional<z.ZodBoolean>;
1475
- protocol: z.ZodOptional<z.ZodEnum<{
1476
- tls: "tls";
1477
- dtls: "dtls";
1478
- quic: "quic";
1479
- http: "http";
1480
- }>>;
1481
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1482
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
1483
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
1484
- host: z.ZodOptional<z.ZodString>;
1485
- hostname: z.ZodOptional<z.ZodString>;
1486
- port: z.ZodOptional<z.ZodNumber>;
1487
- tls_mode: z.ZodOptional<z.ZodEnum<{
1488
- passthrough: "passthrough";
1489
- terminated: "terminated";
1490
- }>>;
1491
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
1492
- tls_min_version: z.ZodOptional<z.ZodString>;
1493
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
1494
- mtls: z.ZodOptional<z.ZodBoolean>;
1495
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1496
- http_version: z.ZodOptional<z.ZodEnum<{
1497
- "http/1.1": "http/1.1";
1498
- h2: "h2";
1499
- h2c: "h2c";
1500
- h3: "h3";
1501
- }>>;
1502
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
1503
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
1504
- token_auth: z.ZodOptional<z.ZodBoolean>;
1505
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
1506
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
1507
- }>, unknown>>>;
1508
- }, z.core.$strict>]>>;
1509
- connect: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
1510
- filters: z.ZodOptional<z.ZodType<FilterNode<{
1511
- client_id: z.ZodString;
1512
- user_id: z.ZodOptional<z.ZodString>;
1513
- workspace_id: z.ZodOptional<z.ZodString>;
1514
- project_id: z.ZodOptional<z.ZodString>;
1515
- cluster_id: z.ZodOptional<z.ZodString>;
1516
- plan: z.ZodOptional<z.ZodString>;
1517
- provider: z.ZodOptional<z.ZodString>;
1518
- region: z.ZodOptional<z.ZodString>;
1519
- status: z.ZodEnum<{
1520
- online: "online";
1521
- offline: "offline";
1522
- }>;
1523
- id: z.ZodString;
1524
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
1525
- name: z.ZodOptional<z.ZodString>;
1526
- type: z.ZodOptional<z.ZodEnum<{
1527
- bytestream: "bytestream";
1528
- datagram: "datagram";
1529
- }>>;
1530
- publish: z.ZodOptional<z.ZodBoolean>;
1531
- protocol: z.ZodOptional<z.ZodEnum<{
1532
- tls: "tls";
1533
- dtls: "dtls";
1534
- quic: "quic";
1535
- http: "http";
1536
- }>>;
1537
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1538
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
1539
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
1540
- host: z.ZodOptional<z.ZodString>;
1541
- hostname: z.ZodOptional<z.ZodString>;
1542
- port: z.ZodOptional<z.ZodNumber>;
1543
- tls_mode: z.ZodOptional<z.ZodEnum<{
1544
- passthrough: "passthrough";
1545
- terminated: "terminated";
1546
- }>>;
1547
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
1548
- tls_min_version: z.ZodOptional<z.ZodString>;
1549
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
1550
- mtls: z.ZodOptional<z.ZodBoolean>;
1551
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1552
- http_version: z.ZodOptional<z.ZodEnum<{
1553
- "http/1.1": "http/1.1";
1554
- h2: "h2";
1555
- h2c: "h2c";
1556
- h3: "h3";
1557
- }>>;
1558
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
1559
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
1560
- token_auth: z.ZodOptional<z.ZodBoolean>;
1561
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
1562
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
1563
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
1564
- client_id: z.ZodString;
1565
- user_id: z.ZodOptional<z.ZodString>;
1566
- workspace_id: z.ZodOptional<z.ZodString>;
1567
- project_id: z.ZodOptional<z.ZodString>;
1568
- cluster_id: z.ZodOptional<z.ZodString>;
1569
- plan: z.ZodOptional<z.ZodString>;
1570
- provider: z.ZodOptional<z.ZodString>;
1571
- region: z.ZodOptional<z.ZodString>;
1572
- status: z.ZodEnum<{
1573
- online: "online";
1574
- offline: "offline";
1575
- }>;
1576
- id: z.ZodString;
1577
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
1578
- name: z.ZodOptional<z.ZodString>;
1579
- type: z.ZodOptional<z.ZodEnum<{
1580
- bytestream: "bytestream";
1581
- datagram: "datagram";
1582
- }>>;
1583
- publish: z.ZodOptional<z.ZodBoolean>;
1584
- protocol: z.ZodOptional<z.ZodEnum<{
1585
- tls: "tls";
1586
- dtls: "dtls";
1587
- quic: "quic";
1588
- http: "http";
1589
- }>>;
1590
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1591
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
1592
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
1593
- host: z.ZodOptional<z.ZodString>;
1594
- hostname: z.ZodOptional<z.ZodString>;
1595
- port: z.ZodOptional<z.ZodNumber>;
1596
- tls_mode: z.ZodOptional<z.ZodEnum<{
1597
- passthrough: "passthrough";
1598
- terminated: "terminated";
1599
- }>>;
1600
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
1601
- tls_min_version: z.ZodOptional<z.ZodString>;
1602
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
1603
- mtls: z.ZodOptional<z.ZodBoolean>;
1604
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1605
- http_version: z.ZodOptional<z.ZodEnum<{
1606
- "http/1.1": "http/1.1";
1607
- h2: "h2";
1608
- h2c: "h2c";
1609
- h3: "h3";
1610
- }>>;
1611
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
1612
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
1613
- token_auth: z.ZodOptional<z.ZodBoolean>;
1614
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
1615
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
1616
- }>, unknown>>>;
1617
- params: z.ZodOptional<z.ZodType<FilterNode<{
1618
- path: z.ZodOptional<z.ZodString>;
1619
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
1620
- path: z.ZodOptional<z.ZodString>;
1621
- }>, unknown>>>;
1622
- }, z.core.$strict>]>>;
1623
- list: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
1624
- filters: z.ZodOptional<z.ZodType<FilterNode<{
1625
- client_id: z.ZodString;
1626
- user_id: z.ZodOptional<z.ZodString>;
1627
- workspace_id: z.ZodOptional<z.ZodString>;
1628
- project_id: z.ZodOptional<z.ZodString>;
1629
- cluster_id: z.ZodOptional<z.ZodString>;
1630
- plan: z.ZodOptional<z.ZodString>;
1631
- provider: z.ZodOptional<z.ZodString>;
1632
- region: z.ZodOptional<z.ZodString>;
1633
- status: z.ZodEnum<{
1634
- online: "online";
1635
- offline: "offline";
1636
- }>;
1637
- id: z.ZodString;
1638
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
1639
- name: z.ZodOptional<z.ZodString>;
1640
- type: z.ZodOptional<z.ZodEnum<{
1641
- bytestream: "bytestream";
1642
- datagram: "datagram";
1643
- }>>;
1644
- publish: z.ZodOptional<z.ZodBoolean>;
1645
- protocol: z.ZodOptional<z.ZodEnum<{
1646
- tls: "tls";
1647
- dtls: "dtls";
1648
- quic: "quic";
1649
- http: "http";
1650
- }>>;
1651
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1652
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
1653
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
1654
- host: z.ZodOptional<z.ZodString>;
1655
- hostname: z.ZodOptional<z.ZodString>;
1656
- port: z.ZodOptional<z.ZodNumber>;
1657
- tls_mode: z.ZodOptional<z.ZodEnum<{
1658
- passthrough: "passthrough";
1659
- terminated: "terminated";
1660
- }>>;
1661
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
1662
- tls_min_version: z.ZodOptional<z.ZodString>;
1663
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
1664
- mtls: z.ZodOptional<z.ZodBoolean>;
1665
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1666
- http_version: z.ZodOptional<z.ZodEnum<{
1667
- "http/1.1": "http/1.1";
1668
- h2: "h2";
1669
- h2c: "h2c";
1670
- h3: "h3";
1671
- }>>;
1672
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
1673
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
1674
- token_auth: z.ZodOptional<z.ZodBoolean>;
1675
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
1676
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
1677
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
1678
- client_id: z.ZodString;
1679
- user_id: z.ZodOptional<z.ZodString>;
1680
- workspace_id: z.ZodOptional<z.ZodString>;
1681
- project_id: z.ZodOptional<z.ZodString>;
1682
- cluster_id: z.ZodOptional<z.ZodString>;
1683
- plan: z.ZodOptional<z.ZodString>;
1684
- provider: z.ZodOptional<z.ZodString>;
1685
- region: z.ZodOptional<z.ZodString>;
1686
- status: z.ZodEnum<{
1687
- online: "online";
1688
- offline: "offline";
1689
- }>;
1690
- id: z.ZodString;
1691
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
1692
- name: z.ZodOptional<z.ZodString>;
1693
- type: z.ZodOptional<z.ZodEnum<{
1694
- bytestream: "bytestream";
1695
- datagram: "datagram";
1696
- }>>;
1697
- publish: z.ZodOptional<z.ZodBoolean>;
1698
- protocol: z.ZodOptional<z.ZodEnum<{
1699
- tls: "tls";
1700
- dtls: "dtls";
1701
- quic: "quic";
1702
- http: "http";
1703
- }>>;
1704
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1705
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
1706
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
1707
- host: z.ZodOptional<z.ZodString>;
1708
- hostname: z.ZodOptional<z.ZodString>;
1709
- port: z.ZodOptional<z.ZodNumber>;
1710
- tls_mode: z.ZodOptional<z.ZodEnum<{
1711
- passthrough: "passthrough";
1712
- terminated: "terminated";
1713
- }>>;
1714
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
1715
- tls_min_version: z.ZodOptional<z.ZodString>;
1716
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
1717
- mtls: z.ZodOptional<z.ZodBoolean>;
1718
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1719
- http_version: z.ZodOptional<z.ZodEnum<{
1720
- "http/1.1": "http/1.1";
1721
- h2: "h2";
1722
- h2c: "h2c";
1723
- h3: "h3";
1724
- }>>;
1725
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
1726
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
1727
- token_auth: z.ZodOptional<z.ZodBoolean>;
1728
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
1729
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
1730
- }>, unknown>>>;
1731
- select: z.ZodOptional<z.ZodObject<{
1732
- client_id: z.ZodOptional<z.ZodBoolean>;
1733
- user_id: z.ZodOptional<z.ZodBoolean>;
1734
- workspace_id: z.ZodOptional<z.ZodBoolean>;
1735
- project_id: z.ZodOptional<z.ZodBoolean>;
1736
- cluster_id: z.ZodOptional<z.ZodBoolean>;
1737
- plan: z.ZodOptional<z.ZodBoolean>;
1738
- provider: z.ZodOptional<z.ZodBoolean>;
1739
- region: z.ZodOptional<z.ZodBoolean>;
1740
- status: z.ZodOptional<z.ZodBoolean>;
1741
- id: z.ZodOptional<z.ZodBoolean>;
1742
- creation_date: z.ZodOptional<z.ZodBoolean>;
1743
- name: z.ZodOptional<z.ZodBoolean>;
1744
- type: z.ZodOptional<z.ZodBoolean>;
1745
- publish: z.ZodOptional<z.ZodBoolean>;
1746
- protocol: z.ZodOptional<z.ZodBoolean>;
1747
- labels: z.ZodOptional<z.ZodBoolean>;
1748
- geo_ip: z.ZodOptional<z.ZodBoolean>;
1749
- trusted_ips: z.ZodOptional<z.ZodBoolean>;
1750
- host: z.ZodOptional<z.ZodBoolean>;
1751
- hostname: z.ZodOptional<z.ZodBoolean>;
1752
- port: z.ZodOptional<z.ZodBoolean>;
1753
- tls_mode: z.ZodOptional<z.ZodBoolean>;
1754
- tls_alpns: z.ZodOptional<z.ZodBoolean>;
1755
- tls_min_version: z.ZodOptional<z.ZodBoolean>;
1756
- tls_ciphers: z.ZodOptional<z.ZodBoolean>;
1757
- mtls: z.ZodOptional<z.ZodBoolean>;
1758
- mtls_ca_cert_pem: z.ZodOptional<z.ZodBoolean>;
1759
- http_version: z.ZodOptional<z.ZodBoolean>;
1760
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
1761
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
1762
- token_auth: z.ZodOptional<z.ZodBoolean>;
1763
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
1764
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
1765
- }, z.core.$strip>>;
1766
- }, z.core.$strict>]>>;
1767
- }, z.core.$strict>>;
1768
- }, z.core.$strict>;
1769
- }, z.core.$strict>>>;
1063
+ tunnelsGrants: z.ZodOptional<z.ZodType<RstreamAuthTokenTunnelGrant, unknown, z.core.$ZodTypeInternals<RstreamAuthTokenTunnelGrant, unknown>>>;
1770
1064
  iat: z.ZodOptional<z.ZodNumber>;
1771
1065
  iss: z.ZodOptional<z.ZodString>;
1772
1066
  jti: z.ZodOptional<z.ZodString>;
@@ -1776,357 +1070,12 @@ declare const authTokenSchema: z.ZodUnion<readonly [z.ZodObject<{
1776
1070
  nbf: z.ZodOptional<z.ZodNumber>;
1777
1071
  sub: z.ZodOptional<z.ZodString>;
1778
1072
  type: z.ZodLiteral<"pat">;
1073
+ tokendpoint: z.ZodOptional<z.ZodString>;
1779
1074
  token_endpoint: z.ZodOptional<z.ZodString>;
1780
1075
  }, z.core.$strict>, z.ZodObject<{
1781
1076
  aud: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
1782
1077
  exp: z.ZodOptional<z.ZodNumber>;
1783
- tunnelsGrants: z.ZodOptional<z.ZodArray<z.ZodObject<{
1784
- workspaces: z.ZodOptional<z.ZodArray<z.ZodString>>;
1785
- projects: z.ZodOptional<z.ZodArray<z.ZodString>>;
1786
- scopes: z.ZodObject<{
1787
- tunnels: z.ZodOptional<z.ZodObject<{
1788
- create: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
1789
- filters: z.ZodOptional<z.ZodType<FilterNode<{
1790
- type: z.ZodOptional<z.ZodEnum<{
1791
- bytestream: "bytestream";
1792
- datagram: "datagram";
1793
- }>>;
1794
- name: z.ZodOptional<z.ZodString>;
1795
- publish: z.ZodOptional<z.ZodBoolean>;
1796
- protocol: z.ZodOptional<z.ZodEnum<{
1797
- tls: "tls";
1798
- dtls: "dtls";
1799
- quic: "quic";
1800
- http: "http";
1801
- }>>;
1802
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1803
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
1804
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
1805
- host: z.ZodOptional<z.ZodString>;
1806
- hostname: z.ZodOptional<z.ZodString>;
1807
- port: z.ZodOptional<z.ZodNumber>;
1808
- tls_mode: z.ZodOptional<z.ZodEnum<{
1809
- passthrough: "passthrough";
1810
- terminated: "terminated";
1811
- }>>;
1812
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
1813
- tls_min_version: z.ZodOptional<z.ZodString>;
1814
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
1815
- mtls: z.ZodOptional<z.ZodBoolean>;
1816
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1817
- http_version: z.ZodOptional<z.ZodEnum<{
1818
- "http/1.1": "http/1.1";
1819
- h2: "h2";
1820
- h2c: "h2c";
1821
- h3: "h3";
1822
- }>>;
1823
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
1824
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
1825
- token_auth: z.ZodOptional<z.ZodBoolean>;
1826
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
1827
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
1828
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
1829
- type: z.ZodOptional<z.ZodEnum<{
1830
- bytestream: "bytestream";
1831
- datagram: "datagram";
1832
- }>>;
1833
- name: z.ZodOptional<z.ZodString>;
1834
- publish: z.ZodOptional<z.ZodBoolean>;
1835
- protocol: z.ZodOptional<z.ZodEnum<{
1836
- tls: "tls";
1837
- dtls: "dtls";
1838
- quic: "quic";
1839
- http: "http";
1840
- }>>;
1841
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1842
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
1843
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
1844
- host: z.ZodOptional<z.ZodString>;
1845
- hostname: z.ZodOptional<z.ZodString>;
1846
- port: z.ZodOptional<z.ZodNumber>;
1847
- tls_mode: z.ZodOptional<z.ZodEnum<{
1848
- passthrough: "passthrough";
1849
- terminated: "terminated";
1850
- }>>;
1851
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
1852
- tls_min_version: z.ZodOptional<z.ZodString>;
1853
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
1854
- mtls: z.ZodOptional<z.ZodBoolean>;
1855
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1856
- http_version: z.ZodOptional<z.ZodEnum<{
1857
- "http/1.1": "http/1.1";
1858
- h2: "h2";
1859
- h2c: "h2c";
1860
- h3: "h3";
1861
- }>>;
1862
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
1863
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
1864
- token_auth: z.ZodOptional<z.ZodBoolean>;
1865
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
1866
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
1867
- }>, unknown>>>;
1868
- }, z.core.$strict>]>>;
1869
- connect: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
1870
- filters: z.ZodOptional<z.ZodType<FilterNode<{
1871
- client_id: z.ZodString;
1872
- user_id: z.ZodOptional<z.ZodString>;
1873
- workspace_id: z.ZodOptional<z.ZodString>;
1874
- project_id: z.ZodOptional<z.ZodString>;
1875
- cluster_id: z.ZodOptional<z.ZodString>;
1876
- plan: z.ZodOptional<z.ZodString>;
1877
- provider: z.ZodOptional<z.ZodString>;
1878
- region: z.ZodOptional<z.ZodString>;
1879
- status: z.ZodEnum<{
1880
- online: "online";
1881
- offline: "offline";
1882
- }>;
1883
- id: z.ZodString;
1884
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
1885
- name: z.ZodOptional<z.ZodString>;
1886
- type: z.ZodOptional<z.ZodEnum<{
1887
- bytestream: "bytestream";
1888
- datagram: "datagram";
1889
- }>>;
1890
- publish: z.ZodOptional<z.ZodBoolean>;
1891
- protocol: z.ZodOptional<z.ZodEnum<{
1892
- tls: "tls";
1893
- dtls: "dtls";
1894
- quic: "quic";
1895
- http: "http";
1896
- }>>;
1897
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1898
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
1899
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
1900
- host: z.ZodOptional<z.ZodString>;
1901
- hostname: z.ZodOptional<z.ZodString>;
1902
- port: z.ZodOptional<z.ZodNumber>;
1903
- tls_mode: z.ZodOptional<z.ZodEnum<{
1904
- passthrough: "passthrough";
1905
- terminated: "terminated";
1906
- }>>;
1907
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
1908
- tls_min_version: z.ZodOptional<z.ZodString>;
1909
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
1910
- mtls: z.ZodOptional<z.ZodBoolean>;
1911
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1912
- http_version: z.ZodOptional<z.ZodEnum<{
1913
- "http/1.1": "http/1.1";
1914
- h2: "h2";
1915
- h2c: "h2c";
1916
- h3: "h3";
1917
- }>>;
1918
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
1919
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
1920
- token_auth: z.ZodOptional<z.ZodBoolean>;
1921
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
1922
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
1923
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
1924
- client_id: z.ZodString;
1925
- user_id: z.ZodOptional<z.ZodString>;
1926
- workspace_id: z.ZodOptional<z.ZodString>;
1927
- project_id: z.ZodOptional<z.ZodString>;
1928
- cluster_id: z.ZodOptional<z.ZodString>;
1929
- plan: z.ZodOptional<z.ZodString>;
1930
- provider: z.ZodOptional<z.ZodString>;
1931
- region: z.ZodOptional<z.ZodString>;
1932
- status: z.ZodEnum<{
1933
- online: "online";
1934
- offline: "offline";
1935
- }>;
1936
- id: z.ZodString;
1937
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
1938
- name: z.ZodOptional<z.ZodString>;
1939
- type: z.ZodOptional<z.ZodEnum<{
1940
- bytestream: "bytestream";
1941
- datagram: "datagram";
1942
- }>>;
1943
- publish: z.ZodOptional<z.ZodBoolean>;
1944
- protocol: z.ZodOptional<z.ZodEnum<{
1945
- tls: "tls";
1946
- dtls: "dtls";
1947
- quic: "quic";
1948
- http: "http";
1949
- }>>;
1950
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1951
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
1952
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
1953
- host: z.ZodOptional<z.ZodString>;
1954
- hostname: z.ZodOptional<z.ZodString>;
1955
- port: z.ZodOptional<z.ZodNumber>;
1956
- tls_mode: z.ZodOptional<z.ZodEnum<{
1957
- passthrough: "passthrough";
1958
- terminated: "terminated";
1959
- }>>;
1960
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
1961
- tls_min_version: z.ZodOptional<z.ZodString>;
1962
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
1963
- mtls: z.ZodOptional<z.ZodBoolean>;
1964
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1965
- http_version: z.ZodOptional<z.ZodEnum<{
1966
- "http/1.1": "http/1.1";
1967
- h2: "h2";
1968
- h2c: "h2c";
1969
- h3: "h3";
1970
- }>>;
1971
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
1972
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
1973
- token_auth: z.ZodOptional<z.ZodBoolean>;
1974
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
1975
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
1976
- }>, unknown>>>;
1977
- params: z.ZodOptional<z.ZodType<FilterNode<{
1978
- path: z.ZodOptional<z.ZodString>;
1979
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
1980
- path: z.ZodOptional<z.ZodString>;
1981
- }>, unknown>>>;
1982
- }, z.core.$strict>]>>;
1983
- list: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
1984
- filters: z.ZodOptional<z.ZodType<FilterNode<{
1985
- client_id: z.ZodString;
1986
- user_id: z.ZodOptional<z.ZodString>;
1987
- workspace_id: z.ZodOptional<z.ZodString>;
1988
- project_id: z.ZodOptional<z.ZodString>;
1989
- cluster_id: z.ZodOptional<z.ZodString>;
1990
- plan: z.ZodOptional<z.ZodString>;
1991
- provider: z.ZodOptional<z.ZodString>;
1992
- region: z.ZodOptional<z.ZodString>;
1993
- status: z.ZodEnum<{
1994
- online: "online";
1995
- offline: "offline";
1996
- }>;
1997
- id: z.ZodString;
1998
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
1999
- name: z.ZodOptional<z.ZodString>;
2000
- type: z.ZodOptional<z.ZodEnum<{
2001
- bytestream: "bytestream";
2002
- datagram: "datagram";
2003
- }>>;
2004
- publish: z.ZodOptional<z.ZodBoolean>;
2005
- protocol: z.ZodOptional<z.ZodEnum<{
2006
- tls: "tls";
2007
- dtls: "dtls";
2008
- quic: "quic";
2009
- http: "http";
2010
- }>>;
2011
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
2012
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
2013
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
2014
- host: z.ZodOptional<z.ZodString>;
2015
- hostname: z.ZodOptional<z.ZodString>;
2016
- port: z.ZodOptional<z.ZodNumber>;
2017
- tls_mode: z.ZodOptional<z.ZodEnum<{
2018
- passthrough: "passthrough";
2019
- terminated: "terminated";
2020
- }>>;
2021
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
2022
- tls_min_version: z.ZodOptional<z.ZodString>;
2023
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
2024
- mtls: z.ZodOptional<z.ZodBoolean>;
2025
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2026
- http_version: z.ZodOptional<z.ZodEnum<{
2027
- "http/1.1": "http/1.1";
2028
- h2: "h2";
2029
- h2c: "h2c";
2030
- h3: "h3";
2031
- }>>;
2032
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
2033
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
2034
- token_auth: z.ZodOptional<z.ZodBoolean>;
2035
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
2036
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
2037
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
2038
- client_id: z.ZodString;
2039
- user_id: z.ZodOptional<z.ZodString>;
2040
- workspace_id: z.ZodOptional<z.ZodString>;
2041
- project_id: z.ZodOptional<z.ZodString>;
2042
- cluster_id: z.ZodOptional<z.ZodString>;
2043
- plan: z.ZodOptional<z.ZodString>;
2044
- provider: z.ZodOptional<z.ZodString>;
2045
- region: z.ZodOptional<z.ZodString>;
2046
- status: z.ZodEnum<{
2047
- online: "online";
2048
- offline: "offline";
2049
- }>;
2050
- id: z.ZodString;
2051
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
2052
- name: z.ZodOptional<z.ZodString>;
2053
- type: z.ZodOptional<z.ZodEnum<{
2054
- bytestream: "bytestream";
2055
- datagram: "datagram";
2056
- }>>;
2057
- publish: z.ZodOptional<z.ZodBoolean>;
2058
- protocol: z.ZodOptional<z.ZodEnum<{
2059
- tls: "tls";
2060
- dtls: "dtls";
2061
- quic: "quic";
2062
- http: "http";
2063
- }>>;
2064
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
2065
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
2066
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
2067
- host: z.ZodOptional<z.ZodString>;
2068
- hostname: z.ZodOptional<z.ZodString>;
2069
- port: z.ZodOptional<z.ZodNumber>;
2070
- tls_mode: z.ZodOptional<z.ZodEnum<{
2071
- passthrough: "passthrough";
2072
- terminated: "terminated";
2073
- }>>;
2074
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
2075
- tls_min_version: z.ZodOptional<z.ZodString>;
2076
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
2077
- mtls: z.ZodOptional<z.ZodBoolean>;
2078
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2079
- http_version: z.ZodOptional<z.ZodEnum<{
2080
- "http/1.1": "http/1.1";
2081
- h2: "h2";
2082
- h2c: "h2c";
2083
- h3: "h3";
2084
- }>>;
2085
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
2086
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
2087
- token_auth: z.ZodOptional<z.ZodBoolean>;
2088
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
2089
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
2090
- }>, unknown>>>;
2091
- select: z.ZodOptional<z.ZodObject<{
2092
- client_id: z.ZodOptional<z.ZodBoolean>;
2093
- user_id: z.ZodOptional<z.ZodBoolean>;
2094
- workspace_id: z.ZodOptional<z.ZodBoolean>;
2095
- project_id: z.ZodOptional<z.ZodBoolean>;
2096
- cluster_id: z.ZodOptional<z.ZodBoolean>;
2097
- plan: z.ZodOptional<z.ZodBoolean>;
2098
- provider: z.ZodOptional<z.ZodBoolean>;
2099
- region: z.ZodOptional<z.ZodBoolean>;
2100
- status: z.ZodOptional<z.ZodBoolean>;
2101
- id: z.ZodOptional<z.ZodBoolean>;
2102
- creation_date: z.ZodOptional<z.ZodBoolean>;
2103
- name: z.ZodOptional<z.ZodBoolean>;
2104
- type: z.ZodOptional<z.ZodBoolean>;
2105
- publish: z.ZodOptional<z.ZodBoolean>;
2106
- protocol: z.ZodOptional<z.ZodBoolean>;
2107
- labels: z.ZodOptional<z.ZodBoolean>;
2108
- geo_ip: z.ZodOptional<z.ZodBoolean>;
2109
- trusted_ips: z.ZodOptional<z.ZodBoolean>;
2110
- host: z.ZodOptional<z.ZodBoolean>;
2111
- hostname: z.ZodOptional<z.ZodBoolean>;
2112
- port: z.ZodOptional<z.ZodBoolean>;
2113
- tls_mode: z.ZodOptional<z.ZodBoolean>;
2114
- tls_alpns: z.ZodOptional<z.ZodBoolean>;
2115
- tls_min_version: z.ZodOptional<z.ZodBoolean>;
2116
- tls_ciphers: z.ZodOptional<z.ZodBoolean>;
2117
- mtls: z.ZodOptional<z.ZodBoolean>;
2118
- mtls_ca_cert_pem: z.ZodOptional<z.ZodBoolean>;
2119
- http_version: z.ZodOptional<z.ZodBoolean>;
2120
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
2121
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
2122
- token_auth: z.ZodOptional<z.ZodBoolean>;
2123
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
2124
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
2125
- }, z.core.$strip>>;
2126
- }, z.core.$strict>]>>;
2127
- }, z.core.$strict>>;
2128
- }, z.core.$strict>;
2129
- }, z.core.$strict>>>;
1078
+ tunnelsGrants: z.ZodOptional<z.ZodType<RstreamAuthTokenTunnelGrant, unknown, z.core.$ZodTypeInternals<RstreamAuthTokenTunnelGrant, unknown>>>;
2130
1079
  iat: z.ZodOptional<z.ZodNumber>;
2131
1080
  iss: z.ZodOptional<z.ZodString>;
2132
1081
  jti: z.ZodOptional<z.ZodString>;
@@ -2142,353 +1091,7 @@ declare const authTokenSchema: z.ZodUnion<readonly [z.ZodObject<{
2142
1091
  declare const tokenSchema: z.ZodUnion<readonly [z.ZodObject<{
2143
1092
  aud: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
2144
1093
  exp: z.ZodOptional<z.ZodNumber>;
2145
- tunnelsGrants: z.ZodOptional<z.ZodArray<z.ZodObject<{
2146
- workspaces: z.ZodOptional<z.ZodArray<z.ZodString>>;
2147
- projects: z.ZodOptional<z.ZodArray<z.ZodString>>;
2148
- scopes: z.ZodObject<{
2149
- tunnels: z.ZodOptional<z.ZodObject<{
2150
- create: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
2151
- filters: z.ZodOptional<z.ZodType<FilterNode<{
2152
- type: z.ZodOptional<z.ZodEnum<{
2153
- bytestream: "bytestream";
2154
- datagram: "datagram";
2155
- }>>;
2156
- name: z.ZodOptional<z.ZodString>;
2157
- publish: z.ZodOptional<z.ZodBoolean>;
2158
- protocol: z.ZodOptional<z.ZodEnum<{
2159
- tls: "tls";
2160
- dtls: "dtls";
2161
- quic: "quic";
2162
- http: "http";
2163
- }>>;
2164
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
2165
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
2166
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
2167
- host: z.ZodOptional<z.ZodString>;
2168
- hostname: z.ZodOptional<z.ZodString>;
2169
- port: z.ZodOptional<z.ZodNumber>;
2170
- tls_mode: z.ZodOptional<z.ZodEnum<{
2171
- passthrough: "passthrough";
2172
- terminated: "terminated";
2173
- }>>;
2174
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
2175
- tls_min_version: z.ZodOptional<z.ZodString>;
2176
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
2177
- mtls: z.ZodOptional<z.ZodBoolean>;
2178
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2179
- http_version: z.ZodOptional<z.ZodEnum<{
2180
- "http/1.1": "http/1.1";
2181
- h2: "h2";
2182
- h2c: "h2c";
2183
- h3: "h3";
2184
- }>>;
2185
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
2186
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
2187
- token_auth: z.ZodOptional<z.ZodBoolean>;
2188
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
2189
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
2190
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
2191
- type: z.ZodOptional<z.ZodEnum<{
2192
- bytestream: "bytestream";
2193
- datagram: "datagram";
2194
- }>>;
2195
- name: z.ZodOptional<z.ZodString>;
2196
- publish: z.ZodOptional<z.ZodBoolean>;
2197
- protocol: z.ZodOptional<z.ZodEnum<{
2198
- tls: "tls";
2199
- dtls: "dtls";
2200
- quic: "quic";
2201
- http: "http";
2202
- }>>;
2203
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
2204
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
2205
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
2206
- host: z.ZodOptional<z.ZodString>;
2207
- hostname: z.ZodOptional<z.ZodString>;
2208
- port: z.ZodOptional<z.ZodNumber>;
2209
- tls_mode: z.ZodOptional<z.ZodEnum<{
2210
- passthrough: "passthrough";
2211
- terminated: "terminated";
2212
- }>>;
2213
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
2214
- tls_min_version: z.ZodOptional<z.ZodString>;
2215
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
2216
- mtls: z.ZodOptional<z.ZodBoolean>;
2217
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2218
- http_version: z.ZodOptional<z.ZodEnum<{
2219
- "http/1.1": "http/1.1";
2220
- h2: "h2";
2221
- h2c: "h2c";
2222
- h3: "h3";
2223
- }>>;
2224
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
2225
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
2226
- token_auth: z.ZodOptional<z.ZodBoolean>;
2227
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
2228
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
2229
- }>, unknown>>>;
2230
- }, z.core.$strict>]>>;
2231
- connect: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
2232
- filters: z.ZodOptional<z.ZodType<FilterNode<{
2233
- client_id: z.ZodString;
2234
- user_id: z.ZodOptional<z.ZodString>;
2235
- workspace_id: z.ZodOptional<z.ZodString>;
2236
- project_id: z.ZodOptional<z.ZodString>;
2237
- cluster_id: z.ZodOptional<z.ZodString>;
2238
- plan: z.ZodOptional<z.ZodString>;
2239
- provider: z.ZodOptional<z.ZodString>;
2240
- region: z.ZodOptional<z.ZodString>;
2241
- status: z.ZodEnum<{
2242
- online: "online";
2243
- offline: "offline";
2244
- }>;
2245
- id: z.ZodString;
2246
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
2247
- name: z.ZodOptional<z.ZodString>;
2248
- type: z.ZodOptional<z.ZodEnum<{
2249
- bytestream: "bytestream";
2250
- datagram: "datagram";
2251
- }>>;
2252
- publish: z.ZodOptional<z.ZodBoolean>;
2253
- protocol: z.ZodOptional<z.ZodEnum<{
2254
- tls: "tls";
2255
- dtls: "dtls";
2256
- quic: "quic";
2257
- http: "http";
2258
- }>>;
2259
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
2260
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
2261
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
2262
- host: z.ZodOptional<z.ZodString>;
2263
- hostname: z.ZodOptional<z.ZodString>;
2264
- port: z.ZodOptional<z.ZodNumber>;
2265
- tls_mode: z.ZodOptional<z.ZodEnum<{
2266
- passthrough: "passthrough";
2267
- terminated: "terminated";
2268
- }>>;
2269
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
2270
- tls_min_version: z.ZodOptional<z.ZodString>;
2271
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
2272
- mtls: z.ZodOptional<z.ZodBoolean>;
2273
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2274
- http_version: z.ZodOptional<z.ZodEnum<{
2275
- "http/1.1": "http/1.1";
2276
- h2: "h2";
2277
- h2c: "h2c";
2278
- h3: "h3";
2279
- }>>;
2280
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
2281
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
2282
- token_auth: z.ZodOptional<z.ZodBoolean>;
2283
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
2284
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
2285
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
2286
- client_id: z.ZodString;
2287
- user_id: z.ZodOptional<z.ZodString>;
2288
- workspace_id: z.ZodOptional<z.ZodString>;
2289
- project_id: z.ZodOptional<z.ZodString>;
2290
- cluster_id: z.ZodOptional<z.ZodString>;
2291
- plan: z.ZodOptional<z.ZodString>;
2292
- provider: z.ZodOptional<z.ZodString>;
2293
- region: z.ZodOptional<z.ZodString>;
2294
- status: z.ZodEnum<{
2295
- online: "online";
2296
- offline: "offline";
2297
- }>;
2298
- id: z.ZodString;
2299
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
2300
- name: z.ZodOptional<z.ZodString>;
2301
- type: z.ZodOptional<z.ZodEnum<{
2302
- bytestream: "bytestream";
2303
- datagram: "datagram";
2304
- }>>;
2305
- publish: z.ZodOptional<z.ZodBoolean>;
2306
- protocol: z.ZodOptional<z.ZodEnum<{
2307
- tls: "tls";
2308
- dtls: "dtls";
2309
- quic: "quic";
2310
- http: "http";
2311
- }>>;
2312
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
2313
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
2314
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
2315
- host: z.ZodOptional<z.ZodString>;
2316
- hostname: z.ZodOptional<z.ZodString>;
2317
- port: z.ZodOptional<z.ZodNumber>;
2318
- tls_mode: z.ZodOptional<z.ZodEnum<{
2319
- passthrough: "passthrough";
2320
- terminated: "terminated";
2321
- }>>;
2322
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
2323
- tls_min_version: z.ZodOptional<z.ZodString>;
2324
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
2325
- mtls: z.ZodOptional<z.ZodBoolean>;
2326
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2327
- http_version: z.ZodOptional<z.ZodEnum<{
2328
- "http/1.1": "http/1.1";
2329
- h2: "h2";
2330
- h2c: "h2c";
2331
- h3: "h3";
2332
- }>>;
2333
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
2334
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
2335
- token_auth: z.ZodOptional<z.ZodBoolean>;
2336
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
2337
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
2338
- }>, unknown>>>;
2339
- params: z.ZodOptional<z.ZodType<FilterNode<{
2340
- path: z.ZodOptional<z.ZodString>;
2341
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
2342
- path: z.ZodOptional<z.ZodString>;
2343
- }>, unknown>>>;
2344
- }, z.core.$strict>]>>;
2345
- list: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
2346
- filters: z.ZodOptional<z.ZodType<FilterNode<{
2347
- client_id: z.ZodString;
2348
- user_id: z.ZodOptional<z.ZodString>;
2349
- workspace_id: z.ZodOptional<z.ZodString>;
2350
- project_id: z.ZodOptional<z.ZodString>;
2351
- cluster_id: z.ZodOptional<z.ZodString>;
2352
- plan: z.ZodOptional<z.ZodString>;
2353
- provider: z.ZodOptional<z.ZodString>;
2354
- region: z.ZodOptional<z.ZodString>;
2355
- status: z.ZodEnum<{
2356
- online: "online";
2357
- offline: "offline";
2358
- }>;
2359
- id: z.ZodString;
2360
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
2361
- name: z.ZodOptional<z.ZodString>;
2362
- type: z.ZodOptional<z.ZodEnum<{
2363
- bytestream: "bytestream";
2364
- datagram: "datagram";
2365
- }>>;
2366
- publish: z.ZodOptional<z.ZodBoolean>;
2367
- protocol: z.ZodOptional<z.ZodEnum<{
2368
- tls: "tls";
2369
- dtls: "dtls";
2370
- quic: "quic";
2371
- http: "http";
2372
- }>>;
2373
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
2374
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
2375
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
2376
- host: z.ZodOptional<z.ZodString>;
2377
- hostname: z.ZodOptional<z.ZodString>;
2378
- port: z.ZodOptional<z.ZodNumber>;
2379
- tls_mode: z.ZodOptional<z.ZodEnum<{
2380
- passthrough: "passthrough";
2381
- terminated: "terminated";
2382
- }>>;
2383
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
2384
- tls_min_version: z.ZodOptional<z.ZodString>;
2385
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
2386
- mtls: z.ZodOptional<z.ZodBoolean>;
2387
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2388
- http_version: z.ZodOptional<z.ZodEnum<{
2389
- "http/1.1": "http/1.1";
2390
- h2: "h2";
2391
- h2c: "h2c";
2392
- h3: "h3";
2393
- }>>;
2394
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
2395
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
2396
- token_auth: z.ZodOptional<z.ZodBoolean>;
2397
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
2398
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
2399
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
2400
- client_id: z.ZodString;
2401
- user_id: z.ZodOptional<z.ZodString>;
2402
- workspace_id: z.ZodOptional<z.ZodString>;
2403
- project_id: z.ZodOptional<z.ZodString>;
2404
- cluster_id: z.ZodOptional<z.ZodString>;
2405
- plan: z.ZodOptional<z.ZodString>;
2406
- provider: z.ZodOptional<z.ZodString>;
2407
- region: z.ZodOptional<z.ZodString>;
2408
- status: z.ZodEnum<{
2409
- online: "online";
2410
- offline: "offline";
2411
- }>;
2412
- id: z.ZodString;
2413
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
2414
- name: z.ZodOptional<z.ZodString>;
2415
- type: z.ZodOptional<z.ZodEnum<{
2416
- bytestream: "bytestream";
2417
- datagram: "datagram";
2418
- }>>;
2419
- publish: z.ZodOptional<z.ZodBoolean>;
2420
- protocol: z.ZodOptional<z.ZodEnum<{
2421
- tls: "tls";
2422
- dtls: "dtls";
2423
- quic: "quic";
2424
- http: "http";
2425
- }>>;
2426
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
2427
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
2428
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
2429
- host: z.ZodOptional<z.ZodString>;
2430
- hostname: z.ZodOptional<z.ZodString>;
2431
- port: z.ZodOptional<z.ZodNumber>;
2432
- tls_mode: z.ZodOptional<z.ZodEnum<{
2433
- passthrough: "passthrough";
2434
- terminated: "terminated";
2435
- }>>;
2436
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
2437
- tls_min_version: z.ZodOptional<z.ZodString>;
2438
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
2439
- mtls: z.ZodOptional<z.ZodBoolean>;
2440
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2441
- http_version: z.ZodOptional<z.ZodEnum<{
2442
- "http/1.1": "http/1.1";
2443
- h2: "h2";
2444
- h2c: "h2c";
2445
- h3: "h3";
2446
- }>>;
2447
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
2448
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
2449
- token_auth: z.ZodOptional<z.ZodBoolean>;
2450
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
2451
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
2452
- }>, unknown>>>;
2453
- select: z.ZodOptional<z.ZodObject<{
2454
- client_id: z.ZodOptional<z.ZodBoolean>;
2455
- user_id: z.ZodOptional<z.ZodBoolean>;
2456
- workspace_id: z.ZodOptional<z.ZodBoolean>;
2457
- project_id: z.ZodOptional<z.ZodBoolean>;
2458
- cluster_id: z.ZodOptional<z.ZodBoolean>;
2459
- plan: z.ZodOptional<z.ZodBoolean>;
2460
- provider: z.ZodOptional<z.ZodBoolean>;
2461
- region: z.ZodOptional<z.ZodBoolean>;
2462
- status: z.ZodOptional<z.ZodBoolean>;
2463
- id: z.ZodOptional<z.ZodBoolean>;
2464
- creation_date: z.ZodOptional<z.ZodBoolean>;
2465
- name: z.ZodOptional<z.ZodBoolean>;
2466
- type: z.ZodOptional<z.ZodBoolean>;
2467
- publish: z.ZodOptional<z.ZodBoolean>;
2468
- protocol: z.ZodOptional<z.ZodBoolean>;
2469
- labels: z.ZodOptional<z.ZodBoolean>;
2470
- geo_ip: z.ZodOptional<z.ZodBoolean>;
2471
- trusted_ips: z.ZodOptional<z.ZodBoolean>;
2472
- host: z.ZodOptional<z.ZodBoolean>;
2473
- hostname: z.ZodOptional<z.ZodBoolean>;
2474
- port: z.ZodOptional<z.ZodBoolean>;
2475
- tls_mode: z.ZodOptional<z.ZodBoolean>;
2476
- tls_alpns: z.ZodOptional<z.ZodBoolean>;
2477
- tls_min_version: z.ZodOptional<z.ZodBoolean>;
2478
- tls_ciphers: z.ZodOptional<z.ZodBoolean>;
2479
- mtls: z.ZodOptional<z.ZodBoolean>;
2480
- mtls_ca_cert_pem: z.ZodOptional<z.ZodBoolean>;
2481
- http_version: z.ZodOptional<z.ZodBoolean>;
2482
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
2483
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
2484
- token_auth: z.ZodOptional<z.ZodBoolean>;
2485
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
2486
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
2487
- }, z.core.$strip>>;
2488
- }, z.core.$strict>]>>;
2489
- }, z.core.$strict>>;
2490
- }, z.core.$strict>;
2491
- }, z.core.$strict>>>;
1094
+ tunnelsGrants: z.ZodOptional<z.ZodType<RstreamAuthTokenTunnelGrant, unknown, z.core.$ZodTypeInternals<RstreamAuthTokenTunnelGrant, unknown>>>;
2492
1095
  iat: z.ZodOptional<z.ZodNumber>;
2493
1096
  iss: z.ZodOptional<z.ZodString>;
2494
1097
  jti: z.ZodOptional<z.ZodString>;
@@ -2503,353 +1106,7 @@ declare const tokenSchema: z.ZodUnion<readonly [z.ZodObject<{
2503
1106
  }, z.core.$strict>, z.ZodObject<{
2504
1107
  aud: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
2505
1108
  exp: z.ZodOptional<z.ZodNumber>;
2506
- tunnelsGrants: z.ZodOptional<z.ZodArray<z.ZodObject<{
2507
- workspaces: z.ZodOptional<z.ZodArray<z.ZodString>>;
2508
- projects: z.ZodOptional<z.ZodArray<z.ZodString>>;
2509
- scopes: z.ZodObject<{
2510
- tunnels: z.ZodOptional<z.ZodObject<{
2511
- create: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
2512
- filters: z.ZodOptional<z.ZodType<FilterNode<{
2513
- type: z.ZodOptional<z.ZodEnum<{
2514
- bytestream: "bytestream";
2515
- datagram: "datagram";
2516
- }>>;
2517
- name: z.ZodOptional<z.ZodString>;
2518
- publish: z.ZodOptional<z.ZodBoolean>;
2519
- protocol: z.ZodOptional<z.ZodEnum<{
2520
- tls: "tls";
2521
- dtls: "dtls";
2522
- quic: "quic";
2523
- http: "http";
2524
- }>>;
2525
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
2526
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
2527
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
2528
- host: z.ZodOptional<z.ZodString>;
2529
- hostname: z.ZodOptional<z.ZodString>;
2530
- port: z.ZodOptional<z.ZodNumber>;
2531
- tls_mode: z.ZodOptional<z.ZodEnum<{
2532
- passthrough: "passthrough";
2533
- terminated: "terminated";
2534
- }>>;
2535
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
2536
- tls_min_version: z.ZodOptional<z.ZodString>;
2537
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
2538
- mtls: z.ZodOptional<z.ZodBoolean>;
2539
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2540
- http_version: z.ZodOptional<z.ZodEnum<{
2541
- "http/1.1": "http/1.1";
2542
- h2: "h2";
2543
- h2c: "h2c";
2544
- h3: "h3";
2545
- }>>;
2546
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
2547
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
2548
- token_auth: z.ZodOptional<z.ZodBoolean>;
2549
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
2550
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
2551
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
2552
- type: z.ZodOptional<z.ZodEnum<{
2553
- bytestream: "bytestream";
2554
- datagram: "datagram";
2555
- }>>;
2556
- name: z.ZodOptional<z.ZodString>;
2557
- publish: z.ZodOptional<z.ZodBoolean>;
2558
- protocol: z.ZodOptional<z.ZodEnum<{
2559
- tls: "tls";
2560
- dtls: "dtls";
2561
- quic: "quic";
2562
- http: "http";
2563
- }>>;
2564
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
2565
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
2566
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
2567
- host: z.ZodOptional<z.ZodString>;
2568
- hostname: z.ZodOptional<z.ZodString>;
2569
- port: z.ZodOptional<z.ZodNumber>;
2570
- tls_mode: z.ZodOptional<z.ZodEnum<{
2571
- passthrough: "passthrough";
2572
- terminated: "terminated";
2573
- }>>;
2574
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
2575
- tls_min_version: z.ZodOptional<z.ZodString>;
2576
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
2577
- mtls: z.ZodOptional<z.ZodBoolean>;
2578
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2579
- http_version: z.ZodOptional<z.ZodEnum<{
2580
- "http/1.1": "http/1.1";
2581
- h2: "h2";
2582
- h2c: "h2c";
2583
- h3: "h3";
2584
- }>>;
2585
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
2586
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
2587
- token_auth: z.ZodOptional<z.ZodBoolean>;
2588
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
2589
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
2590
- }>, unknown>>>;
2591
- }, z.core.$strict>]>>;
2592
- connect: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
2593
- filters: z.ZodOptional<z.ZodType<FilterNode<{
2594
- client_id: z.ZodString;
2595
- user_id: z.ZodOptional<z.ZodString>;
2596
- workspace_id: z.ZodOptional<z.ZodString>;
2597
- project_id: z.ZodOptional<z.ZodString>;
2598
- cluster_id: z.ZodOptional<z.ZodString>;
2599
- plan: z.ZodOptional<z.ZodString>;
2600
- provider: z.ZodOptional<z.ZodString>;
2601
- region: z.ZodOptional<z.ZodString>;
2602
- status: z.ZodEnum<{
2603
- online: "online";
2604
- offline: "offline";
2605
- }>;
2606
- id: z.ZodString;
2607
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
2608
- name: z.ZodOptional<z.ZodString>;
2609
- type: z.ZodOptional<z.ZodEnum<{
2610
- bytestream: "bytestream";
2611
- datagram: "datagram";
2612
- }>>;
2613
- publish: z.ZodOptional<z.ZodBoolean>;
2614
- protocol: z.ZodOptional<z.ZodEnum<{
2615
- tls: "tls";
2616
- dtls: "dtls";
2617
- quic: "quic";
2618
- http: "http";
2619
- }>>;
2620
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
2621
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
2622
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
2623
- host: z.ZodOptional<z.ZodString>;
2624
- hostname: z.ZodOptional<z.ZodString>;
2625
- port: z.ZodOptional<z.ZodNumber>;
2626
- tls_mode: z.ZodOptional<z.ZodEnum<{
2627
- passthrough: "passthrough";
2628
- terminated: "terminated";
2629
- }>>;
2630
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
2631
- tls_min_version: z.ZodOptional<z.ZodString>;
2632
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
2633
- mtls: z.ZodOptional<z.ZodBoolean>;
2634
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2635
- http_version: z.ZodOptional<z.ZodEnum<{
2636
- "http/1.1": "http/1.1";
2637
- h2: "h2";
2638
- h2c: "h2c";
2639
- h3: "h3";
2640
- }>>;
2641
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
2642
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
2643
- token_auth: z.ZodOptional<z.ZodBoolean>;
2644
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
2645
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
2646
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
2647
- client_id: z.ZodString;
2648
- user_id: z.ZodOptional<z.ZodString>;
2649
- workspace_id: z.ZodOptional<z.ZodString>;
2650
- project_id: z.ZodOptional<z.ZodString>;
2651
- cluster_id: z.ZodOptional<z.ZodString>;
2652
- plan: z.ZodOptional<z.ZodString>;
2653
- provider: z.ZodOptional<z.ZodString>;
2654
- region: z.ZodOptional<z.ZodString>;
2655
- status: z.ZodEnum<{
2656
- online: "online";
2657
- offline: "offline";
2658
- }>;
2659
- id: z.ZodString;
2660
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
2661
- name: z.ZodOptional<z.ZodString>;
2662
- type: z.ZodOptional<z.ZodEnum<{
2663
- bytestream: "bytestream";
2664
- datagram: "datagram";
2665
- }>>;
2666
- publish: z.ZodOptional<z.ZodBoolean>;
2667
- protocol: z.ZodOptional<z.ZodEnum<{
2668
- tls: "tls";
2669
- dtls: "dtls";
2670
- quic: "quic";
2671
- http: "http";
2672
- }>>;
2673
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
2674
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
2675
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
2676
- host: z.ZodOptional<z.ZodString>;
2677
- hostname: z.ZodOptional<z.ZodString>;
2678
- port: z.ZodOptional<z.ZodNumber>;
2679
- tls_mode: z.ZodOptional<z.ZodEnum<{
2680
- passthrough: "passthrough";
2681
- terminated: "terminated";
2682
- }>>;
2683
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
2684
- tls_min_version: z.ZodOptional<z.ZodString>;
2685
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
2686
- mtls: z.ZodOptional<z.ZodBoolean>;
2687
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2688
- http_version: z.ZodOptional<z.ZodEnum<{
2689
- "http/1.1": "http/1.1";
2690
- h2: "h2";
2691
- h2c: "h2c";
2692
- h3: "h3";
2693
- }>>;
2694
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
2695
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
2696
- token_auth: z.ZodOptional<z.ZodBoolean>;
2697
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
2698
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
2699
- }>, unknown>>>;
2700
- params: z.ZodOptional<z.ZodType<FilterNode<{
2701
- path: z.ZodOptional<z.ZodString>;
2702
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
2703
- path: z.ZodOptional<z.ZodString>;
2704
- }>, unknown>>>;
2705
- }, z.core.$strict>]>>;
2706
- list: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
2707
- filters: z.ZodOptional<z.ZodType<FilterNode<{
2708
- client_id: z.ZodString;
2709
- user_id: z.ZodOptional<z.ZodString>;
2710
- workspace_id: z.ZodOptional<z.ZodString>;
2711
- project_id: z.ZodOptional<z.ZodString>;
2712
- cluster_id: z.ZodOptional<z.ZodString>;
2713
- plan: z.ZodOptional<z.ZodString>;
2714
- provider: z.ZodOptional<z.ZodString>;
2715
- region: z.ZodOptional<z.ZodString>;
2716
- status: z.ZodEnum<{
2717
- online: "online";
2718
- offline: "offline";
2719
- }>;
2720
- id: z.ZodString;
2721
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
2722
- name: z.ZodOptional<z.ZodString>;
2723
- type: z.ZodOptional<z.ZodEnum<{
2724
- bytestream: "bytestream";
2725
- datagram: "datagram";
2726
- }>>;
2727
- publish: z.ZodOptional<z.ZodBoolean>;
2728
- protocol: z.ZodOptional<z.ZodEnum<{
2729
- tls: "tls";
2730
- dtls: "dtls";
2731
- quic: "quic";
2732
- http: "http";
2733
- }>>;
2734
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
2735
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
2736
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
2737
- host: z.ZodOptional<z.ZodString>;
2738
- hostname: z.ZodOptional<z.ZodString>;
2739
- port: z.ZodOptional<z.ZodNumber>;
2740
- tls_mode: z.ZodOptional<z.ZodEnum<{
2741
- passthrough: "passthrough";
2742
- terminated: "terminated";
2743
- }>>;
2744
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
2745
- tls_min_version: z.ZodOptional<z.ZodString>;
2746
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
2747
- mtls: z.ZodOptional<z.ZodBoolean>;
2748
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2749
- http_version: z.ZodOptional<z.ZodEnum<{
2750
- "http/1.1": "http/1.1";
2751
- h2: "h2";
2752
- h2c: "h2c";
2753
- h3: "h3";
2754
- }>>;
2755
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
2756
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
2757
- token_auth: z.ZodOptional<z.ZodBoolean>;
2758
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
2759
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
2760
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
2761
- client_id: z.ZodString;
2762
- user_id: z.ZodOptional<z.ZodString>;
2763
- workspace_id: z.ZodOptional<z.ZodString>;
2764
- project_id: z.ZodOptional<z.ZodString>;
2765
- cluster_id: z.ZodOptional<z.ZodString>;
2766
- plan: z.ZodOptional<z.ZodString>;
2767
- provider: z.ZodOptional<z.ZodString>;
2768
- region: z.ZodOptional<z.ZodString>;
2769
- status: z.ZodEnum<{
2770
- online: "online";
2771
- offline: "offline";
2772
- }>;
2773
- id: z.ZodString;
2774
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
2775
- name: z.ZodOptional<z.ZodString>;
2776
- type: z.ZodOptional<z.ZodEnum<{
2777
- bytestream: "bytestream";
2778
- datagram: "datagram";
2779
- }>>;
2780
- publish: z.ZodOptional<z.ZodBoolean>;
2781
- protocol: z.ZodOptional<z.ZodEnum<{
2782
- tls: "tls";
2783
- dtls: "dtls";
2784
- quic: "quic";
2785
- http: "http";
2786
- }>>;
2787
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
2788
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
2789
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
2790
- host: z.ZodOptional<z.ZodString>;
2791
- hostname: z.ZodOptional<z.ZodString>;
2792
- port: z.ZodOptional<z.ZodNumber>;
2793
- tls_mode: z.ZodOptional<z.ZodEnum<{
2794
- passthrough: "passthrough";
2795
- terminated: "terminated";
2796
- }>>;
2797
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
2798
- tls_min_version: z.ZodOptional<z.ZodString>;
2799
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
2800
- mtls: z.ZodOptional<z.ZodBoolean>;
2801
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2802
- http_version: z.ZodOptional<z.ZodEnum<{
2803
- "http/1.1": "http/1.1";
2804
- h2: "h2";
2805
- h2c: "h2c";
2806
- h3: "h3";
2807
- }>>;
2808
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
2809
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
2810
- token_auth: z.ZodOptional<z.ZodBoolean>;
2811
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
2812
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
2813
- }>, unknown>>>;
2814
- select: z.ZodOptional<z.ZodObject<{
2815
- client_id: z.ZodOptional<z.ZodBoolean>;
2816
- user_id: z.ZodOptional<z.ZodBoolean>;
2817
- workspace_id: z.ZodOptional<z.ZodBoolean>;
2818
- project_id: z.ZodOptional<z.ZodBoolean>;
2819
- cluster_id: z.ZodOptional<z.ZodBoolean>;
2820
- plan: z.ZodOptional<z.ZodBoolean>;
2821
- provider: z.ZodOptional<z.ZodBoolean>;
2822
- region: z.ZodOptional<z.ZodBoolean>;
2823
- status: z.ZodOptional<z.ZodBoolean>;
2824
- id: z.ZodOptional<z.ZodBoolean>;
2825
- creation_date: z.ZodOptional<z.ZodBoolean>;
2826
- name: z.ZodOptional<z.ZodBoolean>;
2827
- type: z.ZodOptional<z.ZodBoolean>;
2828
- publish: z.ZodOptional<z.ZodBoolean>;
2829
- protocol: z.ZodOptional<z.ZodBoolean>;
2830
- labels: z.ZodOptional<z.ZodBoolean>;
2831
- geo_ip: z.ZodOptional<z.ZodBoolean>;
2832
- trusted_ips: z.ZodOptional<z.ZodBoolean>;
2833
- host: z.ZodOptional<z.ZodBoolean>;
2834
- hostname: z.ZodOptional<z.ZodBoolean>;
2835
- port: z.ZodOptional<z.ZodBoolean>;
2836
- tls_mode: z.ZodOptional<z.ZodBoolean>;
2837
- tls_alpns: z.ZodOptional<z.ZodBoolean>;
2838
- tls_min_version: z.ZodOptional<z.ZodBoolean>;
2839
- tls_ciphers: z.ZodOptional<z.ZodBoolean>;
2840
- mtls: z.ZodOptional<z.ZodBoolean>;
2841
- mtls_ca_cert_pem: z.ZodOptional<z.ZodBoolean>;
2842
- http_version: z.ZodOptional<z.ZodBoolean>;
2843
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
2844
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
2845
- token_auth: z.ZodOptional<z.ZodBoolean>;
2846
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
2847
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
2848
- }, z.core.$strip>>;
2849
- }, z.core.$strict>]>>;
2850
- }, z.core.$strict>>;
2851
- }, z.core.$strict>;
2852
- }, z.core.$strict>>>;
1109
+ tunnelsGrants: z.ZodOptional<z.ZodType<RstreamAuthTokenTunnelGrant, unknown, z.core.$ZodTypeInternals<RstreamAuthTokenTunnelGrant, unknown>>>;
2853
1110
  iat: z.ZodOptional<z.ZodNumber>;
2854
1111
  iss: z.ZodOptional<z.ZodString>;
2855
1112
  jti: z.ZodOptional<z.ZodString>;
@@ -2859,357 +1116,12 @@ declare const tokenSchema: z.ZodUnion<readonly [z.ZodObject<{
2859
1116
  nbf: z.ZodOptional<z.ZodNumber>;
2860
1117
  sub: z.ZodOptional<z.ZodString>;
2861
1118
  type: z.ZodLiteral<"pat">;
1119
+ tokendpoint: z.ZodOptional<z.ZodString>;
2862
1120
  token_endpoint: z.ZodOptional<z.ZodString>;
2863
1121
  }, z.core.$strict>, z.ZodObject<{
2864
1122
  aud: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
2865
1123
  exp: z.ZodOptional<z.ZodNumber>;
2866
- tunnelsGrants: z.ZodOptional<z.ZodArray<z.ZodObject<{
2867
- workspaces: z.ZodOptional<z.ZodArray<z.ZodString>>;
2868
- projects: z.ZodOptional<z.ZodArray<z.ZodString>>;
2869
- scopes: z.ZodObject<{
2870
- tunnels: z.ZodOptional<z.ZodObject<{
2871
- create: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
2872
- filters: z.ZodOptional<z.ZodType<FilterNode<{
2873
- type: z.ZodOptional<z.ZodEnum<{
2874
- bytestream: "bytestream";
2875
- datagram: "datagram";
2876
- }>>;
2877
- name: z.ZodOptional<z.ZodString>;
2878
- publish: z.ZodOptional<z.ZodBoolean>;
2879
- protocol: z.ZodOptional<z.ZodEnum<{
2880
- tls: "tls";
2881
- dtls: "dtls";
2882
- quic: "quic";
2883
- http: "http";
2884
- }>>;
2885
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
2886
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
2887
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
2888
- host: z.ZodOptional<z.ZodString>;
2889
- hostname: z.ZodOptional<z.ZodString>;
2890
- port: z.ZodOptional<z.ZodNumber>;
2891
- tls_mode: z.ZodOptional<z.ZodEnum<{
2892
- passthrough: "passthrough";
2893
- terminated: "terminated";
2894
- }>>;
2895
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
2896
- tls_min_version: z.ZodOptional<z.ZodString>;
2897
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
2898
- mtls: z.ZodOptional<z.ZodBoolean>;
2899
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2900
- http_version: z.ZodOptional<z.ZodEnum<{
2901
- "http/1.1": "http/1.1";
2902
- h2: "h2";
2903
- h2c: "h2c";
2904
- h3: "h3";
2905
- }>>;
2906
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
2907
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
2908
- token_auth: z.ZodOptional<z.ZodBoolean>;
2909
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
2910
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
2911
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
2912
- type: z.ZodOptional<z.ZodEnum<{
2913
- bytestream: "bytestream";
2914
- datagram: "datagram";
2915
- }>>;
2916
- name: z.ZodOptional<z.ZodString>;
2917
- publish: z.ZodOptional<z.ZodBoolean>;
2918
- protocol: z.ZodOptional<z.ZodEnum<{
2919
- tls: "tls";
2920
- dtls: "dtls";
2921
- quic: "quic";
2922
- http: "http";
2923
- }>>;
2924
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
2925
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
2926
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
2927
- host: z.ZodOptional<z.ZodString>;
2928
- hostname: z.ZodOptional<z.ZodString>;
2929
- port: z.ZodOptional<z.ZodNumber>;
2930
- tls_mode: z.ZodOptional<z.ZodEnum<{
2931
- passthrough: "passthrough";
2932
- terminated: "terminated";
2933
- }>>;
2934
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
2935
- tls_min_version: z.ZodOptional<z.ZodString>;
2936
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
2937
- mtls: z.ZodOptional<z.ZodBoolean>;
2938
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2939
- http_version: z.ZodOptional<z.ZodEnum<{
2940
- "http/1.1": "http/1.1";
2941
- h2: "h2";
2942
- h2c: "h2c";
2943
- h3: "h3";
2944
- }>>;
2945
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
2946
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
2947
- token_auth: z.ZodOptional<z.ZodBoolean>;
2948
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
2949
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
2950
- }>, unknown>>>;
2951
- }, z.core.$strict>]>>;
2952
- connect: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
2953
- filters: z.ZodOptional<z.ZodType<FilterNode<{
2954
- client_id: z.ZodString;
2955
- user_id: z.ZodOptional<z.ZodString>;
2956
- workspace_id: z.ZodOptional<z.ZodString>;
2957
- project_id: z.ZodOptional<z.ZodString>;
2958
- cluster_id: z.ZodOptional<z.ZodString>;
2959
- plan: z.ZodOptional<z.ZodString>;
2960
- provider: z.ZodOptional<z.ZodString>;
2961
- region: z.ZodOptional<z.ZodString>;
2962
- status: z.ZodEnum<{
2963
- online: "online";
2964
- offline: "offline";
2965
- }>;
2966
- id: z.ZodString;
2967
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
2968
- name: z.ZodOptional<z.ZodString>;
2969
- type: z.ZodOptional<z.ZodEnum<{
2970
- bytestream: "bytestream";
2971
- datagram: "datagram";
2972
- }>>;
2973
- publish: z.ZodOptional<z.ZodBoolean>;
2974
- protocol: z.ZodOptional<z.ZodEnum<{
2975
- tls: "tls";
2976
- dtls: "dtls";
2977
- quic: "quic";
2978
- http: "http";
2979
- }>>;
2980
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
2981
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
2982
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
2983
- host: z.ZodOptional<z.ZodString>;
2984
- hostname: z.ZodOptional<z.ZodString>;
2985
- port: z.ZodOptional<z.ZodNumber>;
2986
- tls_mode: z.ZodOptional<z.ZodEnum<{
2987
- passthrough: "passthrough";
2988
- terminated: "terminated";
2989
- }>>;
2990
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
2991
- tls_min_version: z.ZodOptional<z.ZodString>;
2992
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
2993
- mtls: z.ZodOptional<z.ZodBoolean>;
2994
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2995
- http_version: z.ZodOptional<z.ZodEnum<{
2996
- "http/1.1": "http/1.1";
2997
- h2: "h2";
2998
- h2c: "h2c";
2999
- h3: "h3";
3000
- }>>;
3001
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
3002
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
3003
- token_auth: z.ZodOptional<z.ZodBoolean>;
3004
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
3005
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
3006
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
3007
- client_id: z.ZodString;
3008
- user_id: z.ZodOptional<z.ZodString>;
3009
- workspace_id: z.ZodOptional<z.ZodString>;
3010
- project_id: z.ZodOptional<z.ZodString>;
3011
- cluster_id: z.ZodOptional<z.ZodString>;
3012
- plan: z.ZodOptional<z.ZodString>;
3013
- provider: z.ZodOptional<z.ZodString>;
3014
- region: z.ZodOptional<z.ZodString>;
3015
- status: z.ZodEnum<{
3016
- online: "online";
3017
- offline: "offline";
3018
- }>;
3019
- id: z.ZodString;
3020
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
3021
- name: z.ZodOptional<z.ZodString>;
3022
- type: z.ZodOptional<z.ZodEnum<{
3023
- bytestream: "bytestream";
3024
- datagram: "datagram";
3025
- }>>;
3026
- publish: z.ZodOptional<z.ZodBoolean>;
3027
- protocol: z.ZodOptional<z.ZodEnum<{
3028
- tls: "tls";
3029
- dtls: "dtls";
3030
- quic: "quic";
3031
- http: "http";
3032
- }>>;
3033
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
3034
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
3035
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
3036
- host: z.ZodOptional<z.ZodString>;
3037
- hostname: z.ZodOptional<z.ZodString>;
3038
- port: z.ZodOptional<z.ZodNumber>;
3039
- tls_mode: z.ZodOptional<z.ZodEnum<{
3040
- passthrough: "passthrough";
3041
- terminated: "terminated";
3042
- }>>;
3043
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
3044
- tls_min_version: z.ZodOptional<z.ZodString>;
3045
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
3046
- mtls: z.ZodOptional<z.ZodBoolean>;
3047
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
3048
- http_version: z.ZodOptional<z.ZodEnum<{
3049
- "http/1.1": "http/1.1";
3050
- h2: "h2";
3051
- h2c: "h2c";
3052
- h3: "h3";
3053
- }>>;
3054
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
3055
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
3056
- token_auth: z.ZodOptional<z.ZodBoolean>;
3057
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
3058
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
3059
- }>, unknown>>>;
3060
- params: z.ZodOptional<z.ZodType<FilterNode<{
3061
- path: z.ZodOptional<z.ZodString>;
3062
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
3063
- path: z.ZodOptional<z.ZodString>;
3064
- }>, unknown>>>;
3065
- }, z.core.$strict>]>>;
3066
- list: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
3067
- filters: z.ZodOptional<z.ZodType<FilterNode<{
3068
- client_id: z.ZodString;
3069
- user_id: z.ZodOptional<z.ZodString>;
3070
- workspace_id: z.ZodOptional<z.ZodString>;
3071
- project_id: z.ZodOptional<z.ZodString>;
3072
- cluster_id: z.ZodOptional<z.ZodString>;
3073
- plan: z.ZodOptional<z.ZodString>;
3074
- provider: z.ZodOptional<z.ZodString>;
3075
- region: z.ZodOptional<z.ZodString>;
3076
- status: z.ZodEnum<{
3077
- online: "online";
3078
- offline: "offline";
3079
- }>;
3080
- id: z.ZodString;
3081
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
3082
- name: z.ZodOptional<z.ZodString>;
3083
- type: z.ZodOptional<z.ZodEnum<{
3084
- bytestream: "bytestream";
3085
- datagram: "datagram";
3086
- }>>;
3087
- publish: z.ZodOptional<z.ZodBoolean>;
3088
- protocol: z.ZodOptional<z.ZodEnum<{
3089
- tls: "tls";
3090
- dtls: "dtls";
3091
- quic: "quic";
3092
- http: "http";
3093
- }>>;
3094
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
3095
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
3096
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
3097
- host: z.ZodOptional<z.ZodString>;
3098
- hostname: z.ZodOptional<z.ZodString>;
3099
- port: z.ZodOptional<z.ZodNumber>;
3100
- tls_mode: z.ZodOptional<z.ZodEnum<{
3101
- passthrough: "passthrough";
3102
- terminated: "terminated";
3103
- }>>;
3104
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
3105
- tls_min_version: z.ZodOptional<z.ZodString>;
3106
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
3107
- mtls: z.ZodOptional<z.ZodBoolean>;
3108
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
3109
- http_version: z.ZodOptional<z.ZodEnum<{
3110
- "http/1.1": "http/1.1";
3111
- h2: "h2";
3112
- h2c: "h2c";
3113
- h3: "h3";
3114
- }>>;
3115
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
3116
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
3117
- token_auth: z.ZodOptional<z.ZodBoolean>;
3118
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
3119
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
3120
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
3121
- client_id: z.ZodString;
3122
- user_id: z.ZodOptional<z.ZodString>;
3123
- workspace_id: z.ZodOptional<z.ZodString>;
3124
- project_id: z.ZodOptional<z.ZodString>;
3125
- cluster_id: z.ZodOptional<z.ZodString>;
3126
- plan: z.ZodOptional<z.ZodString>;
3127
- provider: z.ZodOptional<z.ZodString>;
3128
- region: z.ZodOptional<z.ZodString>;
3129
- status: z.ZodEnum<{
3130
- online: "online";
3131
- offline: "offline";
3132
- }>;
3133
- id: z.ZodString;
3134
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
3135
- name: z.ZodOptional<z.ZodString>;
3136
- type: z.ZodOptional<z.ZodEnum<{
3137
- bytestream: "bytestream";
3138
- datagram: "datagram";
3139
- }>>;
3140
- publish: z.ZodOptional<z.ZodBoolean>;
3141
- protocol: z.ZodOptional<z.ZodEnum<{
3142
- tls: "tls";
3143
- dtls: "dtls";
3144
- quic: "quic";
3145
- http: "http";
3146
- }>>;
3147
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
3148
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
3149
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
3150
- host: z.ZodOptional<z.ZodString>;
3151
- hostname: z.ZodOptional<z.ZodString>;
3152
- port: z.ZodOptional<z.ZodNumber>;
3153
- tls_mode: z.ZodOptional<z.ZodEnum<{
3154
- passthrough: "passthrough";
3155
- terminated: "terminated";
3156
- }>>;
3157
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
3158
- tls_min_version: z.ZodOptional<z.ZodString>;
3159
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
3160
- mtls: z.ZodOptional<z.ZodBoolean>;
3161
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
3162
- http_version: z.ZodOptional<z.ZodEnum<{
3163
- "http/1.1": "http/1.1";
3164
- h2: "h2";
3165
- h2c: "h2c";
3166
- h3: "h3";
3167
- }>>;
3168
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
3169
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
3170
- token_auth: z.ZodOptional<z.ZodBoolean>;
3171
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
3172
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
3173
- }>, unknown>>>;
3174
- select: z.ZodOptional<z.ZodObject<{
3175
- client_id: z.ZodOptional<z.ZodBoolean>;
3176
- user_id: z.ZodOptional<z.ZodBoolean>;
3177
- workspace_id: z.ZodOptional<z.ZodBoolean>;
3178
- project_id: z.ZodOptional<z.ZodBoolean>;
3179
- cluster_id: z.ZodOptional<z.ZodBoolean>;
3180
- plan: z.ZodOptional<z.ZodBoolean>;
3181
- provider: z.ZodOptional<z.ZodBoolean>;
3182
- region: z.ZodOptional<z.ZodBoolean>;
3183
- status: z.ZodOptional<z.ZodBoolean>;
3184
- id: z.ZodOptional<z.ZodBoolean>;
3185
- creation_date: z.ZodOptional<z.ZodBoolean>;
3186
- name: z.ZodOptional<z.ZodBoolean>;
3187
- type: z.ZodOptional<z.ZodBoolean>;
3188
- publish: z.ZodOptional<z.ZodBoolean>;
3189
- protocol: z.ZodOptional<z.ZodBoolean>;
3190
- labels: z.ZodOptional<z.ZodBoolean>;
3191
- geo_ip: z.ZodOptional<z.ZodBoolean>;
3192
- trusted_ips: z.ZodOptional<z.ZodBoolean>;
3193
- host: z.ZodOptional<z.ZodBoolean>;
3194
- hostname: z.ZodOptional<z.ZodBoolean>;
3195
- port: z.ZodOptional<z.ZodBoolean>;
3196
- tls_mode: z.ZodOptional<z.ZodBoolean>;
3197
- tls_alpns: z.ZodOptional<z.ZodBoolean>;
3198
- tls_min_version: z.ZodOptional<z.ZodBoolean>;
3199
- tls_ciphers: z.ZodOptional<z.ZodBoolean>;
3200
- mtls: z.ZodOptional<z.ZodBoolean>;
3201
- mtls_ca_cert_pem: z.ZodOptional<z.ZodBoolean>;
3202
- http_version: z.ZodOptional<z.ZodBoolean>;
3203
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
3204
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
3205
- token_auth: z.ZodOptional<z.ZodBoolean>;
3206
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
3207
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
3208
- }, z.core.$strip>>;
3209
- }, z.core.$strict>]>>;
3210
- }, z.core.$strict>>;
3211
- }, z.core.$strict>;
3212
- }, z.core.$strict>>>;
1124
+ tunnelsGrants: z.ZodOptional<z.ZodType<RstreamAuthTokenTunnelGrant, unknown, z.core.$ZodTypeInternals<RstreamAuthTokenTunnelGrant, unknown>>>;
3213
1125
  iat: z.ZodOptional<z.ZodNumber>;
3214
1126
  iss: z.ZodOptional<z.ZodString>;
3215
1127
  jti: z.ZodOptional<z.ZodString>;
@@ -3228,6 +1140,7 @@ declare const createAuthTokenParamsSchema: z.ZodObject<{
3228
1140
  tunnels: z.ZodOptional<z.ZodObject<{
3229
1141
  create: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
3230
1142
  filters: z.ZodOptional<z.ZodType<FilterNode<{
1143
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
3231
1144
  type: z.ZodOptional<z.ZodEnum<{
3232
1145
  bytestream: "bytestream";
3233
1146
  datagram: "datagram";
@@ -3240,7 +1153,6 @@ declare const createAuthTokenParamsSchema: z.ZodObject<{
3240
1153
  quic: "quic";
3241
1154
  http: "http";
3242
1155
  }>>;
3243
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
3244
1156
  geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
3245
1157
  trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
3246
1158
  host: z.ZodOptional<z.ZodString>;
@@ -3253,8 +1165,7 @@ declare const createAuthTokenParamsSchema: z.ZodObject<{
3253
1165
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
3254
1166
  tls_min_version: z.ZodOptional<z.ZodString>;
3255
1167
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
3256
- mtls: z.ZodOptional<z.ZodBoolean>;
3257
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1168
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
3258
1169
  http_version: z.ZodOptional<z.ZodEnum<{
3259
1170
  "http/1.1": "http/1.1";
3260
1171
  h2: "h2";
@@ -3267,6 +1178,7 @@ declare const createAuthTokenParamsSchema: z.ZodObject<{
3267
1178
  rstream_auth: z.ZodOptional<z.ZodBoolean>;
3268
1179
  challenge_mode: z.ZodOptional<z.ZodBoolean>;
3269
1180
  }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
1181
+ labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
3270
1182
  type: z.ZodOptional<z.ZodEnum<{
3271
1183
  bytestream: "bytestream";
3272
1184
  datagram: "datagram";
@@ -3279,7 +1191,6 @@ declare const createAuthTokenParamsSchema: z.ZodObject<{
3279
1191
  quic: "quic";
3280
1192
  http: "http";
3281
1193
  }>>;
3282
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
3283
1194
  geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
3284
1195
  trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
3285
1196
  host: z.ZodOptional<z.ZodString>;
@@ -3292,8 +1203,7 @@ declare const createAuthTokenParamsSchema: z.ZodObject<{
3292
1203
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
3293
1204
  tls_min_version: z.ZodOptional<z.ZodString>;
3294
1205
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
3295
- mtls: z.ZodOptional<z.ZodBoolean>;
3296
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1206
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
3297
1207
  http_version: z.ZodOptional<z.ZodEnum<{
3298
1208
  "http/1.1": "http/1.1";
3299
1209
  h2: "h2";
@@ -3348,8 +1258,7 @@ declare const createAuthTokenParamsSchema: z.ZodObject<{
3348
1258
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
3349
1259
  tls_min_version: z.ZodOptional<z.ZodString>;
3350
1260
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
3351
- mtls: z.ZodOptional<z.ZodBoolean>;
3352
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1261
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
3353
1262
  http_version: z.ZodOptional<z.ZodEnum<{
3354
1263
  "http/1.1": "http/1.1";
3355
1264
  h2: "h2";
@@ -3401,8 +1310,7 @@ declare const createAuthTokenParamsSchema: z.ZodObject<{
3401
1310
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
3402
1311
  tls_min_version: z.ZodOptional<z.ZodString>;
3403
1312
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
3404
- mtls: z.ZodOptional<z.ZodBoolean>;
3405
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1313
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
3406
1314
  http_version: z.ZodOptional<z.ZodEnum<{
3407
1315
  "http/1.1": "http/1.1";
3408
1316
  h2: "h2";
@@ -3462,8 +1370,7 @@ declare const createAuthTokenParamsSchema: z.ZodObject<{
3462
1370
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
3463
1371
  tls_min_version: z.ZodOptional<z.ZodString>;
3464
1372
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
3465
- mtls: z.ZodOptional<z.ZodBoolean>;
3466
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1373
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
3467
1374
  http_version: z.ZodOptional<z.ZodEnum<{
3468
1375
  "http/1.1": "http/1.1";
3469
1376
  h2: "h2";
@@ -3515,8 +1422,7 @@ declare const createAuthTokenParamsSchema: z.ZodObject<{
3515
1422
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
3516
1423
  tls_min_version: z.ZodOptional<z.ZodString>;
3517
1424
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
3518
- mtls: z.ZodOptional<z.ZodBoolean>;
3519
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1425
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
3520
1426
  http_version: z.ZodOptional<z.ZodEnum<{
3521
1427
  "http/1.1": "http/1.1";
3522
1428
  h2: "h2";
@@ -3555,8 +1461,7 @@ declare const createAuthTokenParamsSchema: z.ZodObject<{
3555
1461
  tls_alpns: z.ZodOptional<z.ZodBoolean>;
3556
1462
  tls_min_version: z.ZodOptional<z.ZodBoolean>;
3557
1463
  tls_ciphers: z.ZodOptional<z.ZodBoolean>;
3558
- mtls: z.ZodOptional<z.ZodBoolean>;
3559
- mtls_ca_cert_pem: z.ZodOptional<z.ZodBoolean>;
1464
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
3560
1465
  http_version: z.ZodOptional<z.ZodBoolean>;
3561
1466
  http_use_tls: z.ZodOptional<z.ZodBoolean>;
3562
1467
  upstream_tls: z.ZodOptional<z.ZodBoolean>;
@@ -3567,360 +1472,13 @@ declare const createAuthTokenParamsSchema: z.ZodObject<{
3567
1472
  }, z.core.$strict>]>>;
3568
1473
  }, z.core.$strict>>;
3569
1474
  }, z.core.$strict>>;
3570
- tunnelsGrants: z.ZodOptional<z.ZodArray<z.ZodObject<{
3571
- workspaces: z.ZodOptional<z.ZodArray<z.ZodString>>;
3572
- projects: z.ZodOptional<z.ZodArray<z.ZodString>>;
3573
- scopes: z.ZodObject<{
3574
- tunnels: z.ZodOptional<z.ZodObject<{
3575
- create: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
3576
- filters: z.ZodOptional<z.ZodType<FilterNode<{
3577
- type: z.ZodOptional<z.ZodEnum<{
3578
- bytestream: "bytestream";
3579
- datagram: "datagram";
3580
- }>>;
3581
- name: z.ZodOptional<z.ZodString>;
3582
- publish: z.ZodOptional<z.ZodBoolean>;
3583
- protocol: z.ZodOptional<z.ZodEnum<{
3584
- tls: "tls";
3585
- dtls: "dtls";
3586
- quic: "quic";
3587
- http: "http";
3588
- }>>;
3589
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
3590
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
3591
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
3592
- host: z.ZodOptional<z.ZodString>;
3593
- hostname: z.ZodOptional<z.ZodString>;
3594
- port: z.ZodOptional<z.ZodNumber>;
3595
- tls_mode: z.ZodOptional<z.ZodEnum<{
3596
- passthrough: "passthrough";
3597
- terminated: "terminated";
3598
- }>>;
3599
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
3600
- tls_min_version: z.ZodOptional<z.ZodString>;
3601
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
3602
- mtls: z.ZodOptional<z.ZodBoolean>;
3603
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
3604
- http_version: z.ZodOptional<z.ZodEnum<{
3605
- "http/1.1": "http/1.1";
3606
- h2: "h2";
3607
- h2c: "h2c";
3608
- h3: "h3";
3609
- }>>;
3610
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
3611
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
3612
- token_auth: z.ZodOptional<z.ZodBoolean>;
3613
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
3614
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
3615
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
3616
- type: z.ZodOptional<z.ZodEnum<{
3617
- bytestream: "bytestream";
3618
- datagram: "datagram";
3619
- }>>;
3620
- name: z.ZodOptional<z.ZodString>;
3621
- publish: z.ZodOptional<z.ZodBoolean>;
3622
- protocol: z.ZodOptional<z.ZodEnum<{
3623
- tls: "tls";
3624
- dtls: "dtls";
3625
- quic: "quic";
3626
- http: "http";
3627
- }>>;
3628
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
3629
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
3630
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
3631
- host: z.ZodOptional<z.ZodString>;
3632
- hostname: z.ZodOptional<z.ZodString>;
3633
- port: z.ZodOptional<z.ZodNumber>;
3634
- tls_mode: z.ZodOptional<z.ZodEnum<{
3635
- passthrough: "passthrough";
3636
- terminated: "terminated";
3637
- }>>;
3638
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
3639
- tls_min_version: z.ZodOptional<z.ZodString>;
3640
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
3641
- mtls: z.ZodOptional<z.ZodBoolean>;
3642
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
3643
- http_version: z.ZodOptional<z.ZodEnum<{
3644
- "http/1.1": "http/1.1";
3645
- h2: "h2";
3646
- h2c: "h2c";
3647
- h3: "h3";
3648
- }>>;
3649
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
3650
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
3651
- token_auth: z.ZodOptional<z.ZodBoolean>;
3652
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
3653
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
3654
- }>, unknown>>>;
3655
- }, z.core.$strict>]>>;
3656
- connect: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
3657
- filters: z.ZodOptional<z.ZodType<FilterNode<{
3658
- client_id: z.ZodString;
3659
- user_id: z.ZodOptional<z.ZodString>;
3660
- workspace_id: z.ZodOptional<z.ZodString>;
3661
- project_id: z.ZodOptional<z.ZodString>;
3662
- cluster_id: z.ZodOptional<z.ZodString>;
3663
- plan: z.ZodOptional<z.ZodString>;
3664
- provider: z.ZodOptional<z.ZodString>;
3665
- region: z.ZodOptional<z.ZodString>;
3666
- status: z.ZodEnum<{
3667
- online: "online";
3668
- offline: "offline";
3669
- }>;
3670
- id: z.ZodString;
3671
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
3672
- name: z.ZodOptional<z.ZodString>;
3673
- type: z.ZodOptional<z.ZodEnum<{
3674
- bytestream: "bytestream";
3675
- datagram: "datagram";
3676
- }>>;
3677
- publish: z.ZodOptional<z.ZodBoolean>;
3678
- protocol: z.ZodOptional<z.ZodEnum<{
3679
- tls: "tls";
3680
- dtls: "dtls";
3681
- quic: "quic";
3682
- http: "http";
3683
- }>>;
3684
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
3685
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
3686
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
3687
- host: z.ZodOptional<z.ZodString>;
3688
- hostname: z.ZodOptional<z.ZodString>;
3689
- port: z.ZodOptional<z.ZodNumber>;
3690
- tls_mode: z.ZodOptional<z.ZodEnum<{
3691
- passthrough: "passthrough";
3692
- terminated: "terminated";
3693
- }>>;
3694
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
3695
- tls_min_version: z.ZodOptional<z.ZodString>;
3696
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
3697
- mtls: z.ZodOptional<z.ZodBoolean>;
3698
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
3699
- http_version: z.ZodOptional<z.ZodEnum<{
3700
- "http/1.1": "http/1.1";
3701
- h2: "h2";
3702
- h2c: "h2c";
3703
- h3: "h3";
3704
- }>>;
3705
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
3706
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
3707
- token_auth: z.ZodOptional<z.ZodBoolean>;
3708
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
3709
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
3710
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
3711
- client_id: z.ZodString;
3712
- user_id: z.ZodOptional<z.ZodString>;
3713
- workspace_id: z.ZodOptional<z.ZodString>;
3714
- project_id: z.ZodOptional<z.ZodString>;
3715
- cluster_id: z.ZodOptional<z.ZodString>;
3716
- plan: z.ZodOptional<z.ZodString>;
3717
- provider: z.ZodOptional<z.ZodString>;
3718
- region: z.ZodOptional<z.ZodString>;
3719
- status: z.ZodEnum<{
3720
- online: "online";
3721
- offline: "offline";
3722
- }>;
3723
- id: z.ZodString;
3724
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
3725
- name: z.ZodOptional<z.ZodString>;
3726
- type: z.ZodOptional<z.ZodEnum<{
3727
- bytestream: "bytestream";
3728
- datagram: "datagram";
3729
- }>>;
3730
- publish: z.ZodOptional<z.ZodBoolean>;
3731
- protocol: z.ZodOptional<z.ZodEnum<{
3732
- tls: "tls";
3733
- dtls: "dtls";
3734
- quic: "quic";
3735
- http: "http";
3736
- }>>;
3737
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
3738
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
3739
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
3740
- host: z.ZodOptional<z.ZodString>;
3741
- hostname: z.ZodOptional<z.ZodString>;
3742
- port: z.ZodOptional<z.ZodNumber>;
3743
- tls_mode: z.ZodOptional<z.ZodEnum<{
3744
- passthrough: "passthrough";
3745
- terminated: "terminated";
3746
- }>>;
3747
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
3748
- tls_min_version: z.ZodOptional<z.ZodString>;
3749
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
3750
- mtls: z.ZodOptional<z.ZodBoolean>;
3751
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
3752
- http_version: z.ZodOptional<z.ZodEnum<{
3753
- "http/1.1": "http/1.1";
3754
- h2: "h2";
3755
- h2c: "h2c";
3756
- h3: "h3";
3757
- }>>;
3758
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
3759
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
3760
- token_auth: z.ZodOptional<z.ZodBoolean>;
3761
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
3762
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
3763
- }>, unknown>>>;
3764
- params: z.ZodOptional<z.ZodType<FilterNode<{
3765
- path: z.ZodOptional<z.ZodString>;
3766
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
3767
- path: z.ZodOptional<z.ZodString>;
3768
- }>, unknown>>>;
3769
- }, z.core.$strict>]>>;
3770
- list: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
3771
- filters: z.ZodOptional<z.ZodType<FilterNode<{
3772
- client_id: z.ZodString;
3773
- user_id: z.ZodOptional<z.ZodString>;
3774
- workspace_id: z.ZodOptional<z.ZodString>;
3775
- project_id: z.ZodOptional<z.ZodString>;
3776
- cluster_id: z.ZodOptional<z.ZodString>;
3777
- plan: z.ZodOptional<z.ZodString>;
3778
- provider: z.ZodOptional<z.ZodString>;
3779
- region: z.ZodOptional<z.ZodString>;
3780
- status: z.ZodEnum<{
3781
- online: "online";
3782
- offline: "offline";
3783
- }>;
3784
- id: z.ZodString;
3785
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
3786
- name: z.ZodOptional<z.ZodString>;
3787
- type: z.ZodOptional<z.ZodEnum<{
3788
- bytestream: "bytestream";
3789
- datagram: "datagram";
3790
- }>>;
3791
- publish: z.ZodOptional<z.ZodBoolean>;
3792
- protocol: z.ZodOptional<z.ZodEnum<{
3793
- tls: "tls";
3794
- dtls: "dtls";
3795
- quic: "quic";
3796
- http: "http";
3797
- }>>;
3798
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
3799
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
3800
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
3801
- host: z.ZodOptional<z.ZodString>;
3802
- hostname: z.ZodOptional<z.ZodString>;
3803
- port: z.ZodOptional<z.ZodNumber>;
3804
- tls_mode: z.ZodOptional<z.ZodEnum<{
3805
- passthrough: "passthrough";
3806
- terminated: "terminated";
3807
- }>>;
3808
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
3809
- tls_min_version: z.ZodOptional<z.ZodString>;
3810
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
3811
- mtls: z.ZodOptional<z.ZodBoolean>;
3812
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
3813
- http_version: z.ZodOptional<z.ZodEnum<{
3814
- "http/1.1": "http/1.1";
3815
- h2: "h2";
3816
- h2c: "h2c";
3817
- h3: "h3";
3818
- }>>;
3819
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
3820
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
3821
- token_auth: z.ZodOptional<z.ZodBoolean>;
3822
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
3823
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
3824
- }>, unknown, z.core.$ZodTypeInternals<FilterNode<{
3825
- client_id: z.ZodString;
3826
- user_id: z.ZodOptional<z.ZodString>;
3827
- workspace_id: z.ZodOptional<z.ZodString>;
3828
- project_id: z.ZodOptional<z.ZodString>;
3829
- cluster_id: z.ZodOptional<z.ZodString>;
3830
- plan: z.ZodOptional<z.ZodString>;
3831
- provider: z.ZodOptional<z.ZodString>;
3832
- region: z.ZodOptional<z.ZodString>;
3833
- status: z.ZodEnum<{
3834
- online: "online";
3835
- offline: "offline";
3836
- }>;
3837
- id: z.ZodString;
3838
- creation_date: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodDate]>>;
3839
- name: z.ZodOptional<z.ZodString>;
3840
- type: z.ZodOptional<z.ZodEnum<{
3841
- bytestream: "bytestream";
3842
- datagram: "datagram";
3843
- }>>;
3844
- publish: z.ZodOptional<z.ZodBoolean>;
3845
- protocol: z.ZodOptional<z.ZodEnum<{
3846
- tls: "tls";
3847
- dtls: "dtls";
3848
- quic: "quic";
3849
- http: "http";
3850
- }>>;
3851
- labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
3852
- geo_ip: z.ZodOptional<z.ZodArray<z.ZodString>>;
3853
- trusted_ips: z.ZodOptional<z.ZodArray<z.ZodString>>;
3854
- host: z.ZodOptional<z.ZodString>;
3855
- hostname: z.ZodOptional<z.ZodString>;
3856
- port: z.ZodOptional<z.ZodNumber>;
3857
- tls_mode: z.ZodOptional<z.ZodEnum<{
3858
- passthrough: "passthrough";
3859
- terminated: "terminated";
3860
- }>>;
3861
- tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
3862
- tls_min_version: z.ZodOptional<z.ZodString>;
3863
- tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
3864
- mtls: z.ZodOptional<z.ZodBoolean>;
3865
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
3866
- http_version: z.ZodOptional<z.ZodEnum<{
3867
- "http/1.1": "http/1.1";
3868
- h2: "h2";
3869
- h2c: "h2c";
3870
- h3: "h3";
3871
- }>>;
3872
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
3873
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
3874
- token_auth: z.ZodOptional<z.ZodBoolean>;
3875
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
3876
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
3877
- }>, unknown>>>;
3878
- select: z.ZodOptional<z.ZodObject<{
3879
- client_id: z.ZodOptional<z.ZodBoolean>;
3880
- user_id: z.ZodOptional<z.ZodBoolean>;
3881
- workspace_id: z.ZodOptional<z.ZodBoolean>;
3882
- project_id: z.ZodOptional<z.ZodBoolean>;
3883
- cluster_id: z.ZodOptional<z.ZodBoolean>;
3884
- plan: z.ZodOptional<z.ZodBoolean>;
3885
- provider: z.ZodOptional<z.ZodBoolean>;
3886
- region: z.ZodOptional<z.ZodBoolean>;
3887
- status: z.ZodOptional<z.ZodBoolean>;
3888
- id: z.ZodOptional<z.ZodBoolean>;
3889
- creation_date: z.ZodOptional<z.ZodBoolean>;
3890
- name: z.ZodOptional<z.ZodBoolean>;
3891
- type: z.ZodOptional<z.ZodBoolean>;
3892
- publish: z.ZodOptional<z.ZodBoolean>;
3893
- protocol: z.ZodOptional<z.ZodBoolean>;
3894
- labels: z.ZodOptional<z.ZodBoolean>;
3895
- geo_ip: z.ZodOptional<z.ZodBoolean>;
3896
- trusted_ips: z.ZodOptional<z.ZodBoolean>;
3897
- host: z.ZodOptional<z.ZodBoolean>;
3898
- hostname: z.ZodOptional<z.ZodBoolean>;
3899
- port: z.ZodOptional<z.ZodBoolean>;
3900
- tls_mode: z.ZodOptional<z.ZodBoolean>;
3901
- tls_alpns: z.ZodOptional<z.ZodBoolean>;
3902
- tls_min_version: z.ZodOptional<z.ZodBoolean>;
3903
- tls_ciphers: z.ZodOptional<z.ZodBoolean>;
3904
- mtls: z.ZodOptional<z.ZodBoolean>;
3905
- mtls_ca_cert_pem: z.ZodOptional<z.ZodBoolean>;
3906
- http_version: z.ZodOptional<z.ZodBoolean>;
3907
- http_use_tls: z.ZodOptional<z.ZodBoolean>;
3908
- upstream_tls: z.ZodOptional<z.ZodBoolean>;
3909
- token_auth: z.ZodOptional<z.ZodBoolean>;
3910
- rstream_auth: z.ZodOptional<z.ZodBoolean>;
3911
- challenge_mode: z.ZodOptional<z.ZodBoolean>;
3912
- }, z.core.$strip>>;
3913
- }, z.core.$strict>]>>;
3914
- }, z.core.$strict>>;
3915
- }, z.core.$strict>;
3916
- }, z.core.$strict>>>;
1475
+ tunnelsGrants: z.ZodOptional<z.ZodType<RstreamAuthTokenTunnelGrant, unknown, z.core.$ZodTypeInternals<RstreamAuthTokenTunnelGrant, unknown>>>;
3917
1476
  metadata: z.ZodOptional<z.ZodUnknown>;
3918
1477
  }, z.core.$strict>;
3919
1478
  declare const createAuthTokenResponseSchema: z.ZodObject<{
3920
1479
  token: z.ZodString;
3921
1480
  }, z.core.$strip>;
3922
1481
  type RstreamAuthTokenPermissions = z.infer<typeof authTokenPermissionsSchema>;
3923
- type RstreamAuthTokenTunnelGrant = z.infer<typeof authTokenTunnelGrantSchema>;
3924
1482
  type RstreamAuthTokenScopes = z.infer<typeof authTokenTunnelsScopesSchema>;
3925
1483
  type RstreamAuthToken = z.infer<typeof authTokenSchema>;
3926
1484
  type Token = z.infer<typeof tokenSchema>;
@@ -3953,35 +1511,35 @@ declare const clientSchema: z.ZodObject<{
3953
1511
  }, z.core.$strip>;
3954
1512
  declare const clientFilterSchema: z.ZodObject<{
3955
1513
  id: z.ZodOptional<z.ZodString>;
3956
- user_id: z.ZodOptional<z.ZodOptional<z.ZodString>>;
3957
1514
  status: z.ZodOptional<z.ZodEnum<{
3958
1515
  online: "online";
3959
1516
  offline: "offline";
3960
1517
  }>>;
3961
- labels: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
1518
+ user_id: z.ZodOptional<z.ZodOptional<z.ZodString>>;
3962
1519
  agent: z.ZodOptional<z.ZodOptional<z.ZodString>>;
3963
1520
  channel: z.ZodOptional<z.ZodOptional<z.ZodString>>;
3964
1521
  version: z.ZodOptional<z.ZodOptional<z.ZodString>>;
3965
1522
  os: z.ZodOptional<z.ZodOptional<z.ZodString>>;
3966
1523
  arch: z.ZodOptional<z.ZodOptional<z.ZodString>>;
3967
1524
  protocol_version: z.ZodOptional<z.ZodOptional<z.ZodString>>;
1525
+ labels: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
3968
1526
  }, z.core.$strip>;
3969
1527
  declare const listClientsParamsSchema: z.ZodObject<{
3970
1528
  limit: z.ZodOptional<z.ZodNumber>;
3971
1529
  filters: z.ZodOptional<z.ZodObject<{
3972
1530
  id: z.ZodOptional<z.ZodString>;
3973
- user_id: z.ZodOptional<z.ZodOptional<z.ZodString>>;
3974
1531
  status: z.ZodOptional<z.ZodEnum<{
3975
1532
  online: "online";
3976
1533
  offline: "offline";
3977
1534
  }>>;
3978
- labels: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
1535
+ user_id: z.ZodOptional<z.ZodOptional<z.ZodString>>;
3979
1536
  agent: z.ZodOptional<z.ZodOptional<z.ZodString>>;
3980
1537
  channel: z.ZodOptional<z.ZodOptional<z.ZodString>>;
3981
1538
  version: z.ZodOptional<z.ZodOptional<z.ZodString>>;
3982
1539
  os: z.ZodOptional<z.ZodOptional<z.ZodString>>;
3983
1540
  arch: z.ZodOptional<z.ZodOptional<z.ZodString>>;
3984
1541
  protocol_version: z.ZodOptional<z.ZodOptional<z.ZodString>>;
1542
+ labels: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
3985
1543
  }, z.core.$strip>>;
3986
1544
  }, z.core.$strip>;
3987
1545
  declare const listClientsResponseSchema: z.ZodArray<z.ZodObject<{
@@ -4057,8 +1615,7 @@ declare const tunnelSchema: z.ZodObject<{
4057
1615
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
4058
1616
  tls_min_version: z.ZodOptional<z.ZodString>;
4059
1617
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
4060
- mtls: z.ZodOptional<z.ZodBoolean>;
4061
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1618
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
4062
1619
  http_version: z.ZodOptional<z.ZodEnum<{
4063
1620
  "http/1.1": "http/1.1";
4064
1621
  h2: "h2";
@@ -4072,17 +1629,18 @@ declare const tunnelSchema: z.ZodObject<{
4072
1629
  challenge_mode: z.ZodOptional<z.ZodBoolean>;
4073
1630
  }, z.core.$strip>;
4074
1631
  declare const tunnelFilterSchema: z.ZodObject<{
4075
- type: z.ZodOptional<z.ZodOptional<z.ZodEnum<{
4076
- bytestream: "bytestream";
4077
- datagram: "datagram";
4078
- }>>>;
4079
1632
  id: z.ZodOptional<z.ZodString>;
4080
- client_id: z.ZodOptional<z.ZodString>;
4081
- user_id: z.ZodOptional<z.ZodOptional<z.ZodString>>;
4082
1633
  status: z.ZodOptional<z.ZodEnum<{
4083
1634
  online: "online";
4084
1635
  offline: "offline";
4085
1636
  }>>;
1637
+ user_id: z.ZodOptional<z.ZodOptional<z.ZodString>>;
1638
+ labels: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
1639
+ client_id: z.ZodOptional<z.ZodString>;
1640
+ type: z.ZodOptional<z.ZodOptional<z.ZodEnum<{
1641
+ bytestream: "bytestream";
1642
+ datagram: "datagram";
1643
+ }>>>;
4086
1644
  name: z.ZodOptional<z.ZodOptional<z.ZodString>>;
4087
1645
  publish: z.ZodOptional<z.ZodOptional<z.ZodBoolean>>;
4088
1646
  protocol: z.ZodOptional<z.ZodOptional<z.ZodEnum<{
@@ -4091,7 +1649,6 @@ declare const tunnelFilterSchema: z.ZodObject<{
4091
1649
  quic: "quic";
4092
1650
  http: "http";
4093
1651
  }>>>;
4094
- labels: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
4095
1652
  hostname: z.ZodOptional<z.ZodOptional<z.ZodString>>;
4096
1653
  http_version: z.ZodOptional<z.ZodOptional<z.ZodEnum<{
4097
1654
  "http/1.1": "http/1.1";
@@ -4103,17 +1660,18 @@ declare const tunnelFilterSchema: z.ZodObject<{
4103
1660
  declare const listTunnelsParamsSchema: z.ZodObject<{
4104
1661
  limit: z.ZodOptional<z.ZodNumber>;
4105
1662
  filters: z.ZodOptional<z.ZodObject<{
4106
- type: z.ZodOptional<z.ZodOptional<z.ZodEnum<{
4107
- bytestream: "bytestream";
4108
- datagram: "datagram";
4109
- }>>>;
4110
1663
  id: z.ZodOptional<z.ZodString>;
4111
- client_id: z.ZodOptional<z.ZodString>;
4112
- user_id: z.ZodOptional<z.ZodOptional<z.ZodString>>;
4113
1664
  status: z.ZodOptional<z.ZodEnum<{
4114
1665
  online: "online";
4115
1666
  offline: "offline";
4116
1667
  }>>;
1668
+ user_id: z.ZodOptional<z.ZodOptional<z.ZodString>>;
1669
+ labels: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
1670
+ client_id: z.ZodOptional<z.ZodString>;
1671
+ type: z.ZodOptional<z.ZodOptional<z.ZodEnum<{
1672
+ bytestream: "bytestream";
1673
+ datagram: "datagram";
1674
+ }>>>;
4117
1675
  name: z.ZodOptional<z.ZodOptional<z.ZodString>>;
4118
1676
  publish: z.ZodOptional<z.ZodOptional<z.ZodBoolean>>;
4119
1677
  protocol: z.ZodOptional<z.ZodOptional<z.ZodEnum<{
@@ -4122,7 +1680,6 @@ declare const listTunnelsParamsSchema: z.ZodObject<{
4122
1680
  quic: "quic";
4123
1681
  http: "http";
4124
1682
  }>>>;
4125
- labels: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
4126
1683
  hostname: z.ZodOptional<z.ZodOptional<z.ZodString>>;
4127
1684
  http_version: z.ZodOptional<z.ZodOptional<z.ZodEnum<{
4128
1685
  "http/1.1": "http/1.1";
@@ -4172,8 +1729,7 @@ declare const listTunnelsResponseSchema: z.ZodArray<z.ZodObject<{
4172
1729
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
4173
1730
  tls_min_version: z.ZodOptional<z.ZodString>;
4174
1731
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
4175
- mtls: z.ZodOptional<z.ZodBoolean>;
4176
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1732
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
4177
1733
  http_version: z.ZodOptional<z.ZodEnum<{
4178
1734
  "http/1.1": "http/1.1";
4179
1735
  h2: "h2";
@@ -4325,8 +1881,7 @@ declare const initialStateSchema: z.ZodObject<{
4325
1881
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
4326
1882
  tls_min_version: z.ZodOptional<z.ZodString>;
4327
1883
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
4328
- mtls: z.ZodOptional<z.ZodBoolean>;
4329
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1884
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
4330
1885
  http_version: z.ZodOptional<z.ZodEnum<{
4331
1886
  "http/1.1": "http/1.1";
4332
1887
  h2: "h2";
@@ -4405,8 +1960,7 @@ declare const wsEventsSchema: z.ZodUnion<readonly [z.ZodObject<{
4405
1960
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
4406
1961
  tls_min_version: z.ZodOptional<z.ZodString>;
4407
1962
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
4408
- mtls: z.ZodOptional<z.ZodBoolean>;
4409
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
1963
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
4410
1964
  http_version: z.ZodOptional<z.ZodEnum<{
4411
1965
  "http/1.1": "http/1.1";
4412
1966
  h2: "h2";
@@ -4555,8 +2109,7 @@ declare const wsEventsSchema: z.ZodUnion<readonly [z.ZodObject<{
4555
2109
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
4556
2110
  tls_min_version: z.ZodOptional<z.ZodString>;
4557
2111
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
4558
- mtls: z.ZodOptional<z.ZodBoolean>;
4559
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2112
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
4560
2113
  http_version: z.ZodOptional<z.ZodEnum<{
4561
2114
  "http/1.1": "http/1.1";
4562
2115
  h2: "h2";
@@ -4617,8 +2170,7 @@ declare const wsEventsSchema: z.ZodUnion<readonly [z.ZodObject<{
4617
2170
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
4618
2171
  tls_min_version: z.ZodOptional<z.ZodString>;
4619
2172
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
4620
- mtls: z.ZodOptional<z.ZodBoolean>;
4621
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2173
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
4622
2174
  http_version: z.ZodOptional<z.ZodEnum<{
4623
2175
  "http/1.1": "http/1.1";
4624
2176
  h2: "h2";
@@ -4679,8 +2231,7 @@ declare const wsEventsSchema: z.ZodUnion<readonly [z.ZodObject<{
4679
2231
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
4680
2232
  tls_min_version: z.ZodOptional<z.ZodString>;
4681
2233
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
4682
- mtls: z.ZodOptional<z.ZodBoolean>;
4683
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2234
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
4684
2235
  http_version: z.ZodOptional<z.ZodEnum<{
4685
2236
  "http/1.1": "http/1.1";
4686
2237
  h2: "h2";
@@ -4829,8 +2380,7 @@ declare const webhookEventsSchema: z.ZodUnion<readonly [z.ZodObject<{
4829
2380
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
4830
2381
  tls_min_version: z.ZodOptional<z.ZodString>;
4831
2382
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
4832
- mtls: z.ZodOptional<z.ZodBoolean>;
4833
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2383
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
4834
2384
  http_version: z.ZodOptional<z.ZodEnum<{
4835
2385
  "http/1.1": "http/1.1";
4836
2386
  h2: "h2";
@@ -4891,8 +2441,7 @@ declare const webhookEventsSchema: z.ZodUnion<readonly [z.ZodObject<{
4891
2441
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
4892
2442
  tls_min_version: z.ZodOptional<z.ZodString>;
4893
2443
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
4894
- mtls: z.ZodOptional<z.ZodBoolean>;
4895
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2444
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
4896
2445
  http_version: z.ZodOptional<z.ZodEnum<{
4897
2446
  "http/1.1": "http/1.1";
4898
2447
  h2: "h2";
@@ -4953,8 +2502,7 @@ declare const webhookEventsSchema: z.ZodUnion<readonly [z.ZodObject<{
4953
2502
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
4954
2503
  tls_min_version: z.ZodOptional<z.ZodString>;
4955
2504
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
4956
- mtls: z.ZodOptional<z.ZodBoolean>;
4957
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
2505
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
4958
2506
  http_version: z.ZodOptional<z.ZodEnum<{
4959
2507
  "http/1.1": "http/1.1";
4960
2508
  h2: "h2";
@@ -5031,8 +2579,8 @@ declare const webhookEventsSchema: z.ZodUnion<readonly [z.ZodObject<{
5031
2579
  }, z.core.$strip>, z.ZodObject<{
5032
2580
  kind: z.ZodLiteral<"token">;
5033
2581
  source: z.ZodOptional<z.ZodEnum<{
5034
- unknown: "unknown";
5035
2582
  query: "query";
2583
+ unknown: "unknown";
5036
2584
  authorization: "authorization";
5037
2585
  client: "client";
5038
2586
  }>>;
@@ -5055,8 +2603,8 @@ declare const webhookEventsSchema: z.ZodUnion<readonly [z.ZodObject<{
5055
2603
  }, z.core.$strip>, z.ZodObject<{
5056
2604
  kind: z.ZodLiteral<"token">;
5057
2605
  source: z.ZodOptional<z.ZodEnum<{
5058
- unknown: "unknown";
5059
2606
  query: "query";
2607
+ unknown: "unknown";
5060
2608
  authorization: "authorization";
5061
2609
  client: "client";
5062
2610
  }>>;
@@ -5076,64 +2624,64 @@ declare const webhookEventsSchema: z.ZodUnion<readonly [z.ZodObject<{
5076
2624
  why: z.ZodDiscriminatedUnion<[z.ZodObject<{
5077
2625
  reason: z.ZodLiteral<"missing_token">;
5078
2626
  source: z.ZodEnum<{
5079
- unknown: "unknown";
5080
2627
  query: "query";
2628
+ unknown: "unknown";
5081
2629
  authorization: "authorization";
5082
2630
  client: "client";
5083
2631
  }>;
5084
2632
  }, z.core.$strip>, z.ZodObject<{
5085
2633
  reason: z.ZodLiteral<"invalid_token">;
5086
2634
  source: z.ZodEnum<{
5087
- unknown: "unknown";
5088
2635
  query: "query";
2636
+ unknown: "unknown";
5089
2637
  authorization: "authorization";
5090
2638
  client: "client";
5091
2639
  }>;
5092
2640
  }, z.core.$strip>, z.ZodObject<{
5093
2641
  reason: z.ZodLiteral<"expired_token">;
5094
2642
  source: z.ZodEnum<{
5095
- unknown: "unknown";
5096
2643
  query: "query";
2644
+ unknown: "unknown";
5097
2645
  authorization: "authorization";
5098
2646
  client: "client";
5099
2647
  }>;
5100
2648
  }, z.core.$strip>, z.ZodObject<{
5101
2649
  reason: z.ZodLiteral<"invalid_secret">;
5102
2650
  source: z.ZodEnum<{
5103
- unknown: "unknown";
5104
2651
  query: "query";
2652
+ unknown: "unknown";
5105
2653
  authorization: "authorization";
5106
2654
  client: "client";
5107
2655
  }>;
5108
2656
  }, z.core.$strip>, z.ZodObject<{
5109
2657
  reason: z.ZodLiteral<"user_mismatch">;
5110
2658
  source: z.ZodEnum<{
5111
- unknown: "unknown";
5112
2659
  query: "query";
2660
+ unknown: "unknown";
5113
2661
  authorization: "authorization";
5114
2662
  client: "client";
5115
2663
  }>;
5116
2664
  }, z.core.$strip>, z.ZodObject<{
5117
2665
  reason: z.ZodLiteral<"insufficient_scope">;
5118
2666
  source: z.ZodEnum<{
5119
- unknown: "unknown";
5120
2667
  query: "query";
2668
+ unknown: "unknown";
5121
2669
  authorization: "authorization";
5122
2670
  client: "client";
5123
2671
  }>;
5124
2672
  }, z.core.$strip>, z.ZodObject<{
5125
2673
  reason: z.ZodLiteral<"policy_denied">;
5126
2674
  policy: z.ZodEnum<{
5127
- mtls: "mtls";
5128
2675
  ip: "ip";
2676
+ mtls: "mtls";
5129
2677
  geo: "geo";
5130
2678
  challenge: "challenge";
5131
2679
  other: "other";
5132
2680
  }>;
5133
2681
  value: z.ZodOptional<z.ZodString>;
5134
2682
  source: z.ZodEnum<{
5135
- unknown: "unknown";
5136
2683
  query: "query";
2684
+ unknown: "unknown";
5137
2685
  authorization: "authorization";
5138
2686
  client: "client";
5139
2687
  }>;
@@ -5178,7 +2726,7 @@ declare const webhookEventsSchema: z.ZodUnion<readonly [z.ZodObject<{
5178
2726
  httpUseTls: z.ZodOptional<z.ZodBoolean>;
5179
2727
  upstreamTls: z.ZodOptional<z.ZodBoolean>;
5180
2728
  tokenAuth: z.ZodOptional<z.ZodBoolean>;
5181
- mtls: z.ZodOptional<z.ZodBoolean>;
2729
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
5182
2730
  }, z.core.$strip>;
5183
2731
  }, z.core.$strip>, z.ZodObject<{
5184
2732
  decision: z.ZodLiteral<"not_routed">;
@@ -5191,64 +2739,64 @@ declare const webhookEventsSchema: z.ZodUnion<readonly [z.ZodObject<{
5191
2739
  why: z.ZodDiscriminatedUnion<[z.ZodObject<{
5192
2740
  reason: z.ZodLiteral<"missing_token">;
5193
2741
  source: z.ZodEnum<{
5194
- unknown: "unknown";
5195
2742
  query: "query";
2743
+ unknown: "unknown";
5196
2744
  authorization: "authorization";
5197
2745
  client: "client";
5198
2746
  }>;
5199
2747
  }, z.core.$strip>, z.ZodObject<{
5200
2748
  reason: z.ZodLiteral<"invalid_token">;
5201
2749
  source: z.ZodEnum<{
5202
- unknown: "unknown";
5203
2750
  query: "query";
2751
+ unknown: "unknown";
5204
2752
  authorization: "authorization";
5205
2753
  client: "client";
5206
2754
  }>;
5207
2755
  }, z.core.$strip>, z.ZodObject<{
5208
2756
  reason: z.ZodLiteral<"expired_token">;
5209
2757
  source: z.ZodEnum<{
5210
- unknown: "unknown";
5211
2758
  query: "query";
2759
+ unknown: "unknown";
5212
2760
  authorization: "authorization";
5213
2761
  client: "client";
5214
2762
  }>;
5215
2763
  }, z.core.$strip>, z.ZodObject<{
5216
2764
  reason: z.ZodLiteral<"invalid_secret">;
5217
2765
  source: z.ZodEnum<{
5218
- unknown: "unknown";
5219
2766
  query: "query";
2767
+ unknown: "unknown";
5220
2768
  authorization: "authorization";
5221
2769
  client: "client";
5222
2770
  }>;
5223
2771
  }, z.core.$strip>, z.ZodObject<{
5224
2772
  reason: z.ZodLiteral<"user_mismatch">;
5225
2773
  source: z.ZodEnum<{
5226
- unknown: "unknown";
5227
2774
  query: "query";
2775
+ unknown: "unknown";
5228
2776
  authorization: "authorization";
5229
2777
  client: "client";
5230
2778
  }>;
5231
2779
  }, z.core.$strip>, z.ZodObject<{
5232
2780
  reason: z.ZodLiteral<"insufficient_scope">;
5233
2781
  source: z.ZodEnum<{
5234
- unknown: "unknown";
5235
2782
  query: "query";
2783
+ unknown: "unknown";
5236
2784
  authorization: "authorization";
5237
2785
  client: "client";
5238
2786
  }>;
5239
2787
  }, z.core.$strip>, z.ZodObject<{
5240
2788
  reason: z.ZodLiteral<"policy_denied">;
5241
2789
  policy: z.ZodEnum<{
5242
- mtls: "mtls";
5243
2790
  ip: "ip";
2791
+ mtls: "mtls";
5244
2792
  geo: "geo";
5245
2793
  challenge: "challenge";
5246
2794
  other: "other";
5247
2795
  }>;
5248
2796
  value: z.ZodOptional<z.ZodString>;
5249
2797
  source: z.ZodEnum<{
5250
- unknown: "unknown";
5251
2798
  query: "query";
2799
+ unknown: "unknown";
5252
2800
  authorization: "authorization";
5253
2801
  client: "client";
5254
2802
  }>;
@@ -5341,64 +2889,64 @@ declare const webhookEventsSchema: z.ZodUnion<readonly [z.ZodObject<{
5341
2889
  why: z.ZodDiscriminatedUnion<[z.ZodObject<{
5342
2890
  reason: z.ZodLiteral<"missing_token">;
5343
2891
  source: z.ZodEnum<{
5344
- unknown: "unknown";
5345
2892
  query: "query";
2893
+ unknown: "unknown";
5346
2894
  authorization: "authorization";
5347
2895
  client: "client";
5348
2896
  }>;
5349
2897
  }, z.core.$strip>, z.ZodObject<{
5350
2898
  reason: z.ZodLiteral<"invalid_token">;
5351
2899
  source: z.ZodEnum<{
5352
- unknown: "unknown";
5353
2900
  query: "query";
2901
+ unknown: "unknown";
5354
2902
  authorization: "authorization";
5355
2903
  client: "client";
5356
2904
  }>;
5357
2905
  }, z.core.$strip>, z.ZodObject<{
5358
2906
  reason: z.ZodLiteral<"expired_token">;
5359
2907
  source: z.ZodEnum<{
5360
- unknown: "unknown";
5361
2908
  query: "query";
2909
+ unknown: "unknown";
5362
2910
  authorization: "authorization";
5363
2911
  client: "client";
5364
2912
  }>;
5365
2913
  }, z.core.$strip>, z.ZodObject<{
5366
2914
  reason: z.ZodLiteral<"invalid_secret">;
5367
2915
  source: z.ZodEnum<{
5368
- unknown: "unknown";
5369
2916
  query: "query";
2917
+ unknown: "unknown";
5370
2918
  authorization: "authorization";
5371
2919
  client: "client";
5372
2920
  }>;
5373
2921
  }, z.core.$strip>, z.ZodObject<{
5374
2922
  reason: z.ZodLiteral<"user_mismatch">;
5375
2923
  source: z.ZodEnum<{
5376
- unknown: "unknown";
5377
2924
  query: "query";
2925
+ unknown: "unknown";
5378
2926
  authorization: "authorization";
5379
2927
  client: "client";
5380
2928
  }>;
5381
2929
  }, z.core.$strip>, z.ZodObject<{
5382
2930
  reason: z.ZodLiteral<"insufficient_scope">;
5383
2931
  source: z.ZodEnum<{
5384
- unknown: "unknown";
5385
2932
  query: "query";
2933
+ unknown: "unknown";
5386
2934
  authorization: "authorization";
5387
2935
  client: "client";
5388
2936
  }>;
5389
2937
  }, z.core.$strip>, z.ZodObject<{
5390
2938
  reason: z.ZodLiteral<"policy_denied">;
5391
2939
  policy: z.ZodEnum<{
5392
- mtls: "mtls";
5393
2940
  ip: "ip";
2941
+ mtls: "mtls";
5394
2942
  geo: "geo";
5395
2943
  challenge: "challenge";
5396
2944
  other: "other";
5397
2945
  }>;
5398
2946
  value: z.ZodOptional<z.ZodString>;
5399
2947
  source: z.ZodEnum<{
5400
- unknown: "unknown";
5401
2948
  query: "query";
2949
+ unknown: "unknown";
5402
2950
  authorization: "authorization";
5403
2951
  client: "client";
5404
2952
  }>;
@@ -5548,8 +3096,7 @@ declare const eventSchema: z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodObject
5548
3096
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
5549
3097
  tls_min_version: z.ZodOptional<z.ZodString>;
5550
3098
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
5551
- mtls: z.ZodOptional<z.ZodBoolean>;
5552
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
3099
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
5553
3100
  http_version: z.ZodOptional<z.ZodEnum<{
5554
3101
  "http/1.1": "http/1.1";
5555
3102
  h2: "h2";
@@ -5698,8 +3245,7 @@ declare const eventSchema: z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodObject
5698
3245
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
5699
3246
  tls_min_version: z.ZodOptional<z.ZodString>;
5700
3247
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
5701
- mtls: z.ZodOptional<z.ZodBoolean>;
5702
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
3248
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
5703
3249
  http_version: z.ZodOptional<z.ZodEnum<{
5704
3250
  "http/1.1": "http/1.1";
5705
3251
  h2: "h2";
@@ -5760,8 +3306,7 @@ declare const eventSchema: z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodObject
5760
3306
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
5761
3307
  tls_min_version: z.ZodOptional<z.ZodString>;
5762
3308
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
5763
- mtls: z.ZodOptional<z.ZodBoolean>;
5764
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
3309
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
5765
3310
  http_version: z.ZodOptional<z.ZodEnum<{
5766
3311
  "http/1.1": "http/1.1";
5767
3312
  h2: "h2";
@@ -5822,8 +3367,7 @@ declare const eventSchema: z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodObject
5822
3367
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
5823
3368
  tls_min_version: z.ZodOptional<z.ZodString>;
5824
3369
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
5825
- mtls: z.ZodOptional<z.ZodBoolean>;
5826
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
3370
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
5827
3371
  http_version: z.ZodOptional<z.ZodEnum<{
5828
3372
  "http/1.1": "http/1.1";
5829
3373
  h2: "h2";
@@ -5971,8 +3515,7 @@ declare const eventSchema: z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodObject
5971
3515
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
5972
3516
  tls_min_version: z.ZodOptional<z.ZodString>;
5973
3517
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
5974
- mtls: z.ZodOptional<z.ZodBoolean>;
5975
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
3518
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
5976
3519
  http_version: z.ZodOptional<z.ZodEnum<{
5977
3520
  "http/1.1": "http/1.1";
5978
3521
  h2: "h2";
@@ -6033,8 +3576,7 @@ declare const eventSchema: z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodObject
6033
3576
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
6034
3577
  tls_min_version: z.ZodOptional<z.ZodString>;
6035
3578
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
6036
- mtls: z.ZodOptional<z.ZodBoolean>;
6037
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
3579
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
6038
3580
  http_version: z.ZodOptional<z.ZodEnum<{
6039
3581
  "http/1.1": "http/1.1";
6040
3582
  h2: "h2";
@@ -6095,8 +3637,7 @@ declare const eventSchema: z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodObject
6095
3637
  tls_alpns: z.ZodOptional<z.ZodArray<z.ZodString>>;
6096
3638
  tls_min_version: z.ZodOptional<z.ZodString>;
6097
3639
  tls_ciphers: z.ZodOptional<z.ZodArray<z.ZodString>>;
6098
- mtls: z.ZodOptional<z.ZodBoolean>;
6099
- mtls_ca_cert_pem: z.ZodOptional<z.ZodString>;
3640
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
6100
3641
  http_version: z.ZodOptional<z.ZodEnum<{
6101
3642
  "http/1.1": "http/1.1";
6102
3643
  h2: "h2";
@@ -6173,8 +3714,8 @@ declare const eventSchema: z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodObject
6173
3714
  }, z.core.$strip>, z.ZodObject<{
6174
3715
  kind: z.ZodLiteral<"token">;
6175
3716
  source: z.ZodOptional<z.ZodEnum<{
6176
- unknown: "unknown";
6177
3717
  query: "query";
3718
+ unknown: "unknown";
6178
3719
  authorization: "authorization";
6179
3720
  client: "client";
6180
3721
  }>>;
@@ -6197,8 +3738,8 @@ declare const eventSchema: z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodObject
6197
3738
  }, z.core.$strip>, z.ZodObject<{
6198
3739
  kind: z.ZodLiteral<"token">;
6199
3740
  source: z.ZodOptional<z.ZodEnum<{
6200
- unknown: "unknown";
6201
3741
  query: "query";
3742
+ unknown: "unknown";
6202
3743
  authorization: "authorization";
6203
3744
  client: "client";
6204
3745
  }>>;
@@ -6218,64 +3759,64 @@ declare const eventSchema: z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodObject
6218
3759
  why: z.ZodDiscriminatedUnion<[z.ZodObject<{
6219
3760
  reason: z.ZodLiteral<"missing_token">;
6220
3761
  source: z.ZodEnum<{
6221
- unknown: "unknown";
6222
3762
  query: "query";
3763
+ unknown: "unknown";
6223
3764
  authorization: "authorization";
6224
3765
  client: "client";
6225
3766
  }>;
6226
3767
  }, z.core.$strip>, z.ZodObject<{
6227
3768
  reason: z.ZodLiteral<"invalid_token">;
6228
3769
  source: z.ZodEnum<{
6229
- unknown: "unknown";
6230
3770
  query: "query";
3771
+ unknown: "unknown";
6231
3772
  authorization: "authorization";
6232
3773
  client: "client";
6233
3774
  }>;
6234
3775
  }, z.core.$strip>, z.ZodObject<{
6235
3776
  reason: z.ZodLiteral<"expired_token">;
6236
3777
  source: z.ZodEnum<{
6237
- unknown: "unknown";
6238
3778
  query: "query";
3779
+ unknown: "unknown";
6239
3780
  authorization: "authorization";
6240
3781
  client: "client";
6241
3782
  }>;
6242
3783
  }, z.core.$strip>, z.ZodObject<{
6243
3784
  reason: z.ZodLiteral<"invalid_secret">;
6244
3785
  source: z.ZodEnum<{
6245
- unknown: "unknown";
6246
3786
  query: "query";
3787
+ unknown: "unknown";
6247
3788
  authorization: "authorization";
6248
3789
  client: "client";
6249
3790
  }>;
6250
3791
  }, z.core.$strip>, z.ZodObject<{
6251
3792
  reason: z.ZodLiteral<"user_mismatch">;
6252
3793
  source: z.ZodEnum<{
6253
- unknown: "unknown";
6254
3794
  query: "query";
3795
+ unknown: "unknown";
6255
3796
  authorization: "authorization";
6256
3797
  client: "client";
6257
3798
  }>;
6258
3799
  }, z.core.$strip>, z.ZodObject<{
6259
3800
  reason: z.ZodLiteral<"insufficient_scope">;
6260
3801
  source: z.ZodEnum<{
6261
- unknown: "unknown";
6262
3802
  query: "query";
3803
+ unknown: "unknown";
6263
3804
  authorization: "authorization";
6264
3805
  client: "client";
6265
3806
  }>;
6266
3807
  }, z.core.$strip>, z.ZodObject<{
6267
3808
  reason: z.ZodLiteral<"policy_denied">;
6268
3809
  policy: z.ZodEnum<{
6269
- mtls: "mtls";
6270
3810
  ip: "ip";
3811
+ mtls: "mtls";
6271
3812
  geo: "geo";
6272
3813
  challenge: "challenge";
6273
3814
  other: "other";
6274
3815
  }>;
6275
3816
  value: z.ZodOptional<z.ZodString>;
6276
3817
  source: z.ZodEnum<{
6277
- unknown: "unknown";
6278
3818
  query: "query";
3819
+ unknown: "unknown";
6279
3820
  authorization: "authorization";
6280
3821
  client: "client";
6281
3822
  }>;
@@ -6320,7 +3861,7 @@ declare const eventSchema: z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodObject
6320
3861
  httpUseTls: z.ZodOptional<z.ZodBoolean>;
6321
3862
  upstreamTls: z.ZodOptional<z.ZodBoolean>;
6322
3863
  tokenAuth: z.ZodOptional<z.ZodBoolean>;
6323
- mtls: z.ZodOptional<z.ZodBoolean>;
3864
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
6324
3865
  }, z.core.$strip>;
6325
3866
  }, z.core.$strip>, z.ZodObject<{
6326
3867
  decision: z.ZodLiteral<"not_routed">;
@@ -6333,64 +3874,64 @@ declare const eventSchema: z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodObject
6333
3874
  why: z.ZodDiscriminatedUnion<[z.ZodObject<{
6334
3875
  reason: z.ZodLiteral<"missing_token">;
6335
3876
  source: z.ZodEnum<{
6336
- unknown: "unknown";
6337
3877
  query: "query";
3878
+ unknown: "unknown";
6338
3879
  authorization: "authorization";
6339
3880
  client: "client";
6340
3881
  }>;
6341
3882
  }, z.core.$strip>, z.ZodObject<{
6342
3883
  reason: z.ZodLiteral<"invalid_token">;
6343
3884
  source: z.ZodEnum<{
6344
- unknown: "unknown";
6345
3885
  query: "query";
3886
+ unknown: "unknown";
6346
3887
  authorization: "authorization";
6347
3888
  client: "client";
6348
3889
  }>;
6349
3890
  }, z.core.$strip>, z.ZodObject<{
6350
3891
  reason: z.ZodLiteral<"expired_token">;
6351
3892
  source: z.ZodEnum<{
6352
- unknown: "unknown";
6353
3893
  query: "query";
3894
+ unknown: "unknown";
6354
3895
  authorization: "authorization";
6355
3896
  client: "client";
6356
3897
  }>;
6357
3898
  }, z.core.$strip>, z.ZodObject<{
6358
3899
  reason: z.ZodLiteral<"invalid_secret">;
6359
3900
  source: z.ZodEnum<{
6360
- unknown: "unknown";
6361
3901
  query: "query";
3902
+ unknown: "unknown";
6362
3903
  authorization: "authorization";
6363
3904
  client: "client";
6364
3905
  }>;
6365
3906
  }, z.core.$strip>, z.ZodObject<{
6366
3907
  reason: z.ZodLiteral<"user_mismatch">;
6367
3908
  source: z.ZodEnum<{
6368
- unknown: "unknown";
6369
3909
  query: "query";
3910
+ unknown: "unknown";
6370
3911
  authorization: "authorization";
6371
3912
  client: "client";
6372
3913
  }>;
6373
3914
  }, z.core.$strip>, z.ZodObject<{
6374
3915
  reason: z.ZodLiteral<"insufficient_scope">;
6375
3916
  source: z.ZodEnum<{
6376
- unknown: "unknown";
6377
3917
  query: "query";
3918
+ unknown: "unknown";
6378
3919
  authorization: "authorization";
6379
3920
  client: "client";
6380
3921
  }>;
6381
3922
  }, z.core.$strip>, z.ZodObject<{
6382
3923
  reason: z.ZodLiteral<"policy_denied">;
6383
3924
  policy: z.ZodEnum<{
6384
- mtls: "mtls";
6385
3925
  ip: "ip";
3926
+ mtls: "mtls";
6386
3927
  geo: "geo";
6387
3928
  challenge: "challenge";
6388
3929
  other: "other";
6389
3930
  }>;
6390
3931
  value: z.ZodOptional<z.ZodString>;
6391
3932
  source: z.ZodEnum<{
6392
- unknown: "unknown";
6393
3933
  query: "query";
3934
+ unknown: "unknown";
6394
3935
  authorization: "authorization";
6395
3936
  client: "client";
6396
3937
  }>;
@@ -6483,64 +4024,64 @@ declare const eventSchema: z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodObject
6483
4024
  why: z.ZodDiscriminatedUnion<[z.ZodObject<{
6484
4025
  reason: z.ZodLiteral<"missing_token">;
6485
4026
  source: z.ZodEnum<{
6486
- unknown: "unknown";
6487
4027
  query: "query";
4028
+ unknown: "unknown";
6488
4029
  authorization: "authorization";
6489
4030
  client: "client";
6490
4031
  }>;
6491
4032
  }, z.core.$strip>, z.ZodObject<{
6492
4033
  reason: z.ZodLiteral<"invalid_token">;
6493
4034
  source: z.ZodEnum<{
6494
- unknown: "unknown";
6495
4035
  query: "query";
4036
+ unknown: "unknown";
6496
4037
  authorization: "authorization";
6497
4038
  client: "client";
6498
4039
  }>;
6499
4040
  }, z.core.$strip>, z.ZodObject<{
6500
4041
  reason: z.ZodLiteral<"expired_token">;
6501
4042
  source: z.ZodEnum<{
6502
- unknown: "unknown";
6503
4043
  query: "query";
4044
+ unknown: "unknown";
6504
4045
  authorization: "authorization";
6505
4046
  client: "client";
6506
4047
  }>;
6507
4048
  }, z.core.$strip>, z.ZodObject<{
6508
4049
  reason: z.ZodLiteral<"invalid_secret">;
6509
4050
  source: z.ZodEnum<{
6510
- unknown: "unknown";
6511
4051
  query: "query";
4052
+ unknown: "unknown";
6512
4053
  authorization: "authorization";
6513
4054
  client: "client";
6514
4055
  }>;
6515
4056
  }, z.core.$strip>, z.ZodObject<{
6516
4057
  reason: z.ZodLiteral<"user_mismatch">;
6517
4058
  source: z.ZodEnum<{
6518
- unknown: "unknown";
6519
4059
  query: "query";
4060
+ unknown: "unknown";
6520
4061
  authorization: "authorization";
6521
4062
  client: "client";
6522
4063
  }>;
6523
4064
  }, z.core.$strip>, z.ZodObject<{
6524
4065
  reason: z.ZodLiteral<"insufficient_scope">;
6525
4066
  source: z.ZodEnum<{
6526
- unknown: "unknown";
6527
4067
  query: "query";
4068
+ unknown: "unknown";
6528
4069
  authorization: "authorization";
6529
4070
  client: "client";
6530
4071
  }>;
6531
4072
  }, z.core.$strip>, z.ZodObject<{
6532
4073
  reason: z.ZodLiteral<"policy_denied">;
6533
4074
  policy: z.ZodEnum<{
6534
- mtls: "mtls";
6535
4075
  ip: "ip";
4076
+ mtls: "mtls";
6536
4077
  geo: "geo";
6537
4078
  challenge: "challenge";
6538
4079
  other: "other";
6539
4080
  }>;
6540
4081
  value: z.ZodOptional<z.ZodString>;
6541
4082
  source: z.ZodEnum<{
6542
- unknown: "unknown";
6543
4083
  query: "query";
4084
+ unknown: "unknown";
6544
4085
  authorization: "authorization";
6545
4086
  client: "client";
6546
4087
  }>;
@@ -6678,7 +4219,10 @@ declare class RstreamTunnelsClient {
6678
4219
  getEngine(): Promise<string>;
6679
4220
  private getManagedProject;
6680
4221
  private getEngineAuthTokenParams;
6681
- private getEngineAuthTokenTarget;
4222
+ getEngineAuthTokenTarget(): Promise<{
4223
+ projects?: string[];
4224
+ workspaces?: string[];
4225
+ }>;
6682
4226
  get auth(): RstreamAuthResource;
6683
4227
  get clients(): RstreamClientsResource;
6684
4228
  get tunnels(): RstreamTunnelsResource;
@@ -6690,6 +4234,7 @@ declare class RstreamTunnelsClient {
6690
4234
 
6691
4235
  interface CreateAuthTokenFromClientCredentialsOptions {
6692
4236
  engine?: string;
4237
+ projectScoped?: boolean;
6693
4238
  projectId?: string;
6694
4239
  workspaceId?: string;
6695
4240
  }
@@ -6699,6 +4244,7 @@ declare class RstreamAuthResource {
6699
4244
  createAuthToken(params: CreateAuthTokenParams, options?: CreateAuthTokenFromClientCredentialsOptions & {
6700
4245
  credentials?: ClientCredentials;
6701
4246
  }): Promise<CreateAuthTokenResponse>;
4247
+ private resolveScopeOptions;
6702
4248
  }
6703
4249
  declare function createAuthTokenFromClientCredentials(credentials: ClientCredentials, params: CreateAuthTokenParams, options?: CreateAuthTokenFromClientCredentialsOptions): CreateAuthTokenResponse;
6704
4250
 
@@ -6794,8 +4340,8 @@ declare const streamSummarySchema: z.ZodObject<{
6794
4340
  }, z.core.$strip>, z.ZodObject<{
6795
4341
  kind: z.ZodLiteral<"token">;
6796
4342
  source: z.ZodOptional<z.ZodEnum<{
6797
- unknown: "unknown";
6798
4343
  query: "query";
4344
+ unknown: "unknown";
6799
4345
  authorization: "authorization";
6800
4346
  client: "client";
6801
4347
  }>>;
@@ -6818,8 +4364,8 @@ declare const streamSummarySchema: z.ZodObject<{
6818
4364
  }, z.core.$strip>, z.ZodObject<{
6819
4365
  kind: z.ZodLiteral<"token">;
6820
4366
  source: z.ZodOptional<z.ZodEnum<{
6821
- unknown: "unknown";
6822
4367
  query: "query";
4368
+ unknown: "unknown";
6823
4369
  authorization: "authorization";
6824
4370
  client: "client";
6825
4371
  }>>;
@@ -6839,64 +4385,64 @@ declare const streamSummarySchema: z.ZodObject<{
6839
4385
  why: z.ZodDiscriminatedUnion<[z.ZodObject<{
6840
4386
  reason: z.ZodLiteral<"missing_token">;
6841
4387
  source: z.ZodEnum<{
6842
- unknown: "unknown";
6843
4388
  query: "query";
4389
+ unknown: "unknown";
6844
4390
  authorization: "authorization";
6845
4391
  client: "client";
6846
4392
  }>;
6847
4393
  }, z.core.$strip>, z.ZodObject<{
6848
4394
  reason: z.ZodLiteral<"invalid_token">;
6849
4395
  source: z.ZodEnum<{
6850
- unknown: "unknown";
6851
4396
  query: "query";
4397
+ unknown: "unknown";
6852
4398
  authorization: "authorization";
6853
4399
  client: "client";
6854
4400
  }>;
6855
4401
  }, z.core.$strip>, z.ZodObject<{
6856
4402
  reason: z.ZodLiteral<"expired_token">;
6857
4403
  source: z.ZodEnum<{
6858
- unknown: "unknown";
6859
4404
  query: "query";
4405
+ unknown: "unknown";
6860
4406
  authorization: "authorization";
6861
4407
  client: "client";
6862
4408
  }>;
6863
4409
  }, z.core.$strip>, z.ZodObject<{
6864
4410
  reason: z.ZodLiteral<"invalid_secret">;
6865
4411
  source: z.ZodEnum<{
6866
- unknown: "unknown";
6867
4412
  query: "query";
4413
+ unknown: "unknown";
6868
4414
  authorization: "authorization";
6869
4415
  client: "client";
6870
4416
  }>;
6871
4417
  }, z.core.$strip>, z.ZodObject<{
6872
4418
  reason: z.ZodLiteral<"user_mismatch">;
6873
4419
  source: z.ZodEnum<{
6874
- unknown: "unknown";
6875
4420
  query: "query";
4421
+ unknown: "unknown";
6876
4422
  authorization: "authorization";
6877
4423
  client: "client";
6878
4424
  }>;
6879
4425
  }, z.core.$strip>, z.ZodObject<{
6880
4426
  reason: z.ZodLiteral<"insufficient_scope">;
6881
4427
  source: z.ZodEnum<{
6882
- unknown: "unknown";
6883
4428
  query: "query";
4429
+ unknown: "unknown";
6884
4430
  authorization: "authorization";
6885
4431
  client: "client";
6886
4432
  }>;
6887
4433
  }, z.core.$strip>, z.ZodObject<{
6888
4434
  reason: z.ZodLiteral<"policy_denied">;
6889
4435
  policy: z.ZodEnum<{
6890
- mtls: "mtls";
6891
4436
  ip: "ip";
4437
+ mtls: "mtls";
6892
4438
  geo: "geo";
6893
4439
  challenge: "challenge";
6894
4440
  other: "other";
6895
4441
  }>;
6896
4442
  value: z.ZodOptional<z.ZodString>;
6897
4443
  source: z.ZodEnum<{
6898
- unknown: "unknown";
6899
4444
  query: "query";
4445
+ unknown: "unknown";
6900
4446
  authorization: "authorization";
6901
4447
  client: "client";
6902
4448
  }>;
@@ -6941,7 +4487,7 @@ declare const streamSummarySchema: z.ZodObject<{
6941
4487
  httpUseTls: z.ZodOptional<z.ZodBoolean>;
6942
4488
  upstreamTls: z.ZodOptional<z.ZodBoolean>;
6943
4489
  tokenAuth: z.ZodOptional<z.ZodBoolean>;
6944
- mtls: z.ZodOptional<z.ZodBoolean>;
4490
+ mtls_auth: z.ZodOptional<z.ZodBoolean>;
6945
4491
  }, z.core.$strip>;
6946
4492
  }, z.core.$strip>, z.ZodObject<{
6947
4493
  decision: z.ZodLiteral<"not_routed">;
@@ -6954,64 +4500,64 @@ declare const streamSummarySchema: z.ZodObject<{
6954
4500
  why: z.ZodDiscriminatedUnion<[z.ZodObject<{
6955
4501
  reason: z.ZodLiteral<"missing_token">;
6956
4502
  source: z.ZodEnum<{
6957
- unknown: "unknown";
6958
4503
  query: "query";
4504
+ unknown: "unknown";
6959
4505
  authorization: "authorization";
6960
4506
  client: "client";
6961
4507
  }>;
6962
4508
  }, z.core.$strip>, z.ZodObject<{
6963
4509
  reason: z.ZodLiteral<"invalid_token">;
6964
4510
  source: z.ZodEnum<{
6965
- unknown: "unknown";
6966
4511
  query: "query";
4512
+ unknown: "unknown";
6967
4513
  authorization: "authorization";
6968
4514
  client: "client";
6969
4515
  }>;
6970
4516
  }, z.core.$strip>, z.ZodObject<{
6971
4517
  reason: z.ZodLiteral<"expired_token">;
6972
4518
  source: z.ZodEnum<{
6973
- unknown: "unknown";
6974
4519
  query: "query";
4520
+ unknown: "unknown";
6975
4521
  authorization: "authorization";
6976
4522
  client: "client";
6977
4523
  }>;
6978
4524
  }, z.core.$strip>, z.ZodObject<{
6979
4525
  reason: z.ZodLiteral<"invalid_secret">;
6980
4526
  source: z.ZodEnum<{
6981
- unknown: "unknown";
6982
4527
  query: "query";
4528
+ unknown: "unknown";
6983
4529
  authorization: "authorization";
6984
4530
  client: "client";
6985
4531
  }>;
6986
4532
  }, z.core.$strip>, z.ZodObject<{
6987
4533
  reason: z.ZodLiteral<"user_mismatch">;
6988
4534
  source: z.ZodEnum<{
6989
- unknown: "unknown";
6990
4535
  query: "query";
4536
+ unknown: "unknown";
6991
4537
  authorization: "authorization";
6992
4538
  client: "client";
6993
4539
  }>;
6994
4540
  }, z.core.$strip>, z.ZodObject<{
6995
4541
  reason: z.ZodLiteral<"insufficient_scope">;
6996
4542
  source: z.ZodEnum<{
6997
- unknown: "unknown";
6998
4543
  query: "query";
4544
+ unknown: "unknown";
6999
4545
  authorization: "authorization";
7000
4546
  client: "client";
7001
4547
  }>;
7002
4548
  }, z.core.$strip>, z.ZodObject<{
7003
4549
  reason: z.ZodLiteral<"policy_denied">;
7004
4550
  policy: z.ZodEnum<{
7005
- mtls: "mtls";
7006
4551
  ip: "ip";
4552
+ mtls: "mtls";
7007
4553
  geo: "geo";
7008
4554
  challenge: "challenge";
7009
4555
  other: "other";
7010
4556
  }>;
7011
4557
  value: z.ZodOptional<z.ZodString>;
7012
4558
  source: z.ZodEnum<{
7013
- unknown: "unknown";
7014
4559
  query: "query";
4560
+ unknown: "unknown";
7015
4561
  authorization: "authorization";
7016
4562
  client: "client";
7017
4563
  }>;
@@ -7104,64 +4650,64 @@ declare const streamSummarySchema: z.ZodObject<{
7104
4650
  why: z.ZodDiscriminatedUnion<[z.ZodObject<{
7105
4651
  reason: z.ZodLiteral<"missing_token">;
7106
4652
  source: z.ZodEnum<{
7107
- unknown: "unknown";
7108
4653
  query: "query";
4654
+ unknown: "unknown";
7109
4655
  authorization: "authorization";
7110
4656
  client: "client";
7111
4657
  }>;
7112
4658
  }, z.core.$strip>, z.ZodObject<{
7113
4659
  reason: z.ZodLiteral<"invalid_token">;
7114
4660
  source: z.ZodEnum<{
7115
- unknown: "unknown";
7116
4661
  query: "query";
4662
+ unknown: "unknown";
7117
4663
  authorization: "authorization";
7118
4664
  client: "client";
7119
4665
  }>;
7120
4666
  }, z.core.$strip>, z.ZodObject<{
7121
4667
  reason: z.ZodLiteral<"expired_token">;
7122
4668
  source: z.ZodEnum<{
7123
- unknown: "unknown";
7124
4669
  query: "query";
4670
+ unknown: "unknown";
7125
4671
  authorization: "authorization";
7126
4672
  client: "client";
7127
4673
  }>;
7128
4674
  }, z.core.$strip>, z.ZodObject<{
7129
4675
  reason: z.ZodLiteral<"invalid_secret">;
7130
4676
  source: z.ZodEnum<{
7131
- unknown: "unknown";
7132
4677
  query: "query";
4678
+ unknown: "unknown";
7133
4679
  authorization: "authorization";
7134
4680
  client: "client";
7135
4681
  }>;
7136
4682
  }, z.core.$strip>, z.ZodObject<{
7137
4683
  reason: z.ZodLiteral<"user_mismatch">;
7138
4684
  source: z.ZodEnum<{
7139
- unknown: "unknown";
7140
4685
  query: "query";
4686
+ unknown: "unknown";
7141
4687
  authorization: "authorization";
7142
4688
  client: "client";
7143
4689
  }>;
7144
4690
  }, z.core.$strip>, z.ZodObject<{
7145
4691
  reason: z.ZodLiteral<"insufficient_scope">;
7146
4692
  source: z.ZodEnum<{
7147
- unknown: "unknown";
7148
4693
  query: "query";
4694
+ unknown: "unknown";
7149
4695
  authorization: "authorization";
7150
4696
  client: "client";
7151
4697
  }>;
7152
4698
  }, z.core.$strip>, z.ZodObject<{
7153
4699
  reason: z.ZodLiteral<"policy_denied">;
7154
4700
  policy: z.ZodEnum<{
7155
- mtls: "mtls";
7156
4701
  ip: "ip";
4702
+ mtls: "mtls";
7157
4703
  geo: "geo";
7158
4704
  challenge: "challenge";
7159
4705
  other: "other";
7160
4706
  }>;
7161
4707
  value: z.ZodOptional<z.ZodString>;
7162
4708
  source: z.ZodEnum<{
7163
- unknown: "unknown";
7164
4709
  query: "query";
4710
+ unknown: "unknown";
7165
4711
  authorization: "authorization";
7166
4712
  client: "client";
7167
4713
  }>;