@sst-provider/cloudflare5 5.0.0-alpha1

package/bin/zeroTrustGatewayCertificate.d.ts

@@ -0,0 +1,144 @@
+import * as pulumi from "@pulumi/pulumi";
+export declare class ZeroTrustGatewayCertificate extends pulumi.CustomResource {
+    /**
+     * Get an existing ZeroTrustGatewayCertificate resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: ZeroTrustGatewayCertificateState, opts?: pulumi.CustomResourceOptions): ZeroTrustGatewayCertificate;
+    /**
+     * Returns true if the given object is an instance of ZeroTrustGatewayCertificate.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is ZeroTrustGatewayCertificate;
+    /**
+     * The account identifier to target for the resource.
+     */
+    readonly accountId: pulumi.Output<string>;
+    /**
+     * Whether or not to activate a certificate. A certificate must be activated to use in Gateway certificate settings.
+     * Defaults to `false`.
+     */
+    readonly activate: pulumi.Output<boolean | undefined>;
+    /**
+     * The deployment status of the certificate on the edge Available values: `IP`, `SERIAL`, `URL`, `DOMAIN`, `EMAIL`.
+     */
+    readonly bindingStatus: pulumi.Output<string>;
+    readonly createdAt: pulumi.Output<string>;
+    /**
+     * The type of certificate (custom or Gateway-managed). Must provide only one of `custom`, `gateway_managed`.
+     */
+    readonly custom: pulumi.Output<boolean | undefined>;
+    readonly expiresOn: pulumi.Output<string>;
+    /**
+     * The type of certificate (custom or Gateway-managed). Must provide only one of `custom`, `gateway_managed`.
+     */
+    readonly gatewayManaged: pulumi.Output<boolean | undefined>;
+    /**
+     * Whether the certificate is in use by Gateway for TLS interception and the block page.
+     */
+    readonly inUse: pulumi.Output<boolean>;
+    readonly qsPackId: pulumi.Output<string>;
+    readonly uploadedOn: pulumi.Output<string>;
+    /**
+     * Number of days the generated certificate will be valid, minimum 1 day and maximum 30 years. Defaults to 5 years.
+     * Defaults to `1826`. Required when using `gateway_managed`. Conflicts with `custom`. **Modifying this attribute will
+     * force creation of a new resource.**
+     */
+    readonly validityPeriodDays: pulumi.Output<number | undefined>;
+    /**
+     * Certificate UUID. Computed for Gateway-managed certificates. Required when using `custom`. Conflicts with
+     * `gateway_managed`.
+     */
+    readonly zeroTrustGatewayCertificateId: pulumi.Output<string>;
+    /**
+     * Create a ZeroTrustGatewayCertificate resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: ZeroTrustGatewayCertificateArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering ZeroTrustGatewayCertificate resources.
+ */
+export interface ZeroTrustGatewayCertificateState {
+    /**
+     * The account identifier to target for the resource.
+     */
+    accountId?: pulumi.Input<string>;
+    /**
+     * Whether or not to activate a certificate. A certificate must be activated to use in Gateway certificate settings.
+     * Defaults to `false`.
+     */
+    activate?: pulumi.Input<boolean>;
+    /**
+     * The deployment status of the certificate on the edge Available values: `IP`, `SERIAL`, `URL`, `DOMAIN`, `EMAIL`.
+     */
+    bindingStatus?: pulumi.Input<string>;
+    createdAt?: pulumi.Input<string>;
+    /**
+     * The type of certificate (custom or Gateway-managed). Must provide only one of `custom`, `gateway_managed`.
+     */
+    custom?: pulumi.Input<boolean>;
+    expiresOn?: pulumi.Input<string>;
+    /**
+     * The type of certificate (custom or Gateway-managed). Must provide only one of `custom`, `gateway_managed`.
+     */
+    gatewayManaged?: pulumi.Input<boolean>;
+    /**
+     * Whether the certificate is in use by Gateway for TLS interception and the block page.
+     */
+    inUse?: pulumi.Input<boolean>;
+    qsPackId?: pulumi.Input<string>;
+    uploadedOn?: pulumi.Input<string>;
+    /**
+     * Number of days the generated certificate will be valid, minimum 1 day and maximum 30 years. Defaults to 5 years.
+     * Defaults to `1826`. Required when using `gateway_managed`. Conflicts with `custom`. **Modifying this attribute will
+     * force creation of a new resource.**
+     */
+    validityPeriodDays?: pulumi.Input<number>;
+    /**
+     * Certificate UUID. Computed for Gateway-managed certificates. Required when using `custom`. Conflicts with
+     * `gateway_managed`.
+     */
+    zeroTrustGatewayCertificateId?: pulumi.Input<string>;
+}
+/**
+ * The set of arguments for constructing a ZeroTrustGatewayCertificate resource.
+ */
+export interface ZeroTrustGatewayCertificateArgs {
+    /**
+     * The account identifier to target for the resource.
+     */
+    accountId: pulumi.Input<string>;
+    /**
+     * Whether or not to activate a certificate. A certificate must be activated to use in Gateway certificate settings.
+     * Defaults to `false`.
+     */
+    activate?: pulumi.Input<boolean>;
+    /**
+     * The type of certificate (custom or Gateway-managed). Must provide only one of `custom`, `gateway_managed`.
+     */
+    custom?: pulumi.Input<boolean>;
+    /**
+     * The type of certificate (custom or Gateway-managed). Must provide only one of `custom`, `gateway_managed`.
+     */
+    gatewayManaged?: pulumi.Input<boolean>;
+    /**
+     * Number of days the generated certificate will be valid, minimum 1 day and maximum 30 years. Defaults to 5 years.
+     * Defaults to `1826`. Required when using `gateway_managed`. Conflicts with `custom`. **Modifying this attribute will
+     * force creation of a new resource.**
+     */
+    validityPeriodDays?: pulumi.Input<number>;
+    /**
+     * Certificate UUID. Computed for Gateway-managed certificates. Required when using `custom`. Conflicts with
+     * `gateway_managed`.
+     */
+    zeroTrustGatewayCertificateId?: pulumi.Input<string>;
+}

package/bin/zeroTrustGatewayCertificate.js

@@ -0,0 +1,74 @@
+"use strict";
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ZeroTrustGatewayCertificate = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("./utilities");
+class ZeroTrustGatewayCertificate extends pulumi.CustomResource {
+    /**
+     * Get an existing ZeroTrustGatewayCertificate resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new ZeroTrustGatewayCertificate(name, state, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of ZeroTrustGatewayCertificate.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === ZeroTrustGatewayCertificate.__pulumiType;
+    }
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["accountId"] = state ? state.accountId : undefined;
+            resourceInputs["activate"] = state ? state.activate : undefined;
+            resourceInputs["bindingStatus"] = state ? state.bindingStatus : undefined;
+            resourceInputs["createdAt"] = state ? state.createdAt : undefined;
+            resourceInputs["custom"] = state ? state.custom : undefined;
+            resourceInputs["expiresOn"] = state ? state.expiresOn : undefined;
+            resourceInputs["gatewayManaged"] = state ? state.gatewayManaged : undefined;
+            resourceInputs["inUse"] = state ? state.inUse : undefined;
+            resourceInputs["qsPackId"] = state ? state.qsPackId : undefined;
+            resourceInputs["uploadedOn"] = state ? state.uploadedOn : undefined;
+            resourceInputs["validityPeriodDays"] = state ? state.validityPeriodDays : undefined;
+            resourceInputs["zeroTrustGatewayCertificateId"] = state ? state.zeroTrustGatewayCertificateId : undefined;
+        }
+        else {
+            const args = argsOrState;
+            if ((!args || args.accountId === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'accountId'");
+            }
+            resourceInputs["accountId"] = args ? args.accountId : undefined;
+            resourceInputs["activate"] = args ? args.activate : undefined;
+            resourceInputs["custom"] = args ? args.custom : undefined;
+            resourceInputs["gatewayManaged"] = args ? args.gatewayManaged : undefined;
+            resourceInputs["validityPeriodDays"] = args ? args.validityPeriodDays : undefined;
+            resourceInputs["zeroTrustGatewayCertificateId"] = args ? args.zeroTrustGatewayCertificateId : undefined;
+            resourceInputs["bindingStatus"] = undefined /*out*/;
+            resourceInputs["createdAt"] = undefined /*out*/;
+            resourceInputs["expiresOn"] = undefined /*out*/;
+            resourceInputs["inUse"] = undefined /*out*/;
+            resourceInputs["qsPackId"] = undefined /*out*/;
+            resourceInputs["uploadedOn"] = undefined /*out*/;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(ZeroTrustGatewayCertificate.__pulumiType, name, resourceInputs, opts, false /*dependency*/, utilities.getPackage());
+    }
+}
+exports.ZeroTrustGatewayCertificate = ZeroTrustGatewayCertificate;
+/** @internal */
+ZeroTrustGatewayCertificate.__pulumiType = 'cloudflare:index/zeroTrustGatewayCertificate:ZeroTrustGatewayCertificate';
+//# sourceMappingURL=zeroTrustGatewayCertificate.js.map

package/bin/zeroTrustGatewayCertificate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zeroTrustGatewayCertificate.js","sourceRoot":"","sources":["../zeroTrustGatewayCertificate.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC,MAAa,2BAA4B,SAAQ,MAAM,CAAC,cAAc;IAClE;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAwC,EAAE,IAAmC;QACtI,OAAO,IAAI,2BAA2B,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAClF,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,2BAA2B,CAAC,YAAY,CAAC;IAC5E,CAAC;IAmDD,YAAY,IAAY,EAAE,WAAgF,EAAE,IAAmC;QAC3I,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA2D,CAAC;YAC1E,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,+BAA+B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAC,SAAS,CAAC;SAC7G;aAAM;YACH,MAAM,IAAI,GAAG,WAA0D,CAAC;YACxE,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACtD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;aAC5D;YACD,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,+BAA+B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC,CAAC,SAAS,CAAC;YACxG,cAAc,CAAC,eAAe,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACpD,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChD,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChD,cAAc,CAAC,OAAO,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC5C,cAAc,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC/C,cAAc,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACpD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,2BAA2B,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,KAAK,CAAC,cAAc,EAAE,SAAS,CAAC,UAAU,EAAE,CAAC,CAAC;IAC9H,CAAC;;AAlHL,kEAmHC;AArGG,gBAAgB;AACO,wCAAY,GAAG,0EAA0E,CAAC"}

package/bin/zeroTrustGatewayPolicy.d.ts

@@ -0,0 +1,178 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as inputs from "./types/input";
+import * as outputs from "./types/output";
+export declare class ZeroTrustGatewayPolicy extends pulumi.CustomResource {
+    /**
+     * Get an existing ZeroTrustGatewayPolicy resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: ZeroTrustGatewayPolicyState, opts?: pulumi.CustomResourceOptions): ZeroTrustGatewayPolicy;
+    /**
+     * Returns true if the given object is an instance of ZeroTrustGatewayPolicy.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is ZeroTrustGatewayPolicy;
+    /**
+     * The account identifier to target for the resource.
+     */
+    readonly accountId: pulumi.Output<string>;
+    /**
+     * The action executed by matched teams rule. Available values: `allow`, `block`, `safesearch`, `ytrestricted`, `on`,
+     * `off`, `scan`, `noscan`, `isolate`, `noisolate`, `override`, `l4_override`, `egress`, `audit_ssh`, `resolve`.
+     */
+    readonly action: pulumi.Output<string>;
+    /**
+     * The description of the teams rule.
+     */
+    readonly description: pulumi.Output<string>;
+    /**
+     * The wirefilter expression to be used for device_posture check matching.
+     */
+    readonly devicePosture: pulumi.Output<string | undefined>;
+    /**
+     * Indicator of rule enablement.
+     */
+    readonly enabled: pulumi.Output<boolean | undefined>;
+    /**
+     * The protocol or layer to evaluate the traffic and identity expressions.
+     */
+    readonly filters: pulumi.Output<string[] | undefined>;
+    /**
+     * The wirefilter expression to be used for identity matching.
+     */
+    readonly identity: pulumi.Output<string | undefined>;
+    /**
+     * The name of the teams rule.
+     */
+    readonly name: pulumi.Output<string>;
+    /**
+     * The evaluation precedence of the teams rule.
+     */
+    readonly precedence: pulumi.Output<number>;
+    /**
+     * Additional rule settings.
+     */
+    readonly ruleSettings: pulumi.Output<outputs.ZeroTrustGatewayPolicyRuleSettings | undefined>;
+    /**
+     * The wirefilter expression to be used for traffic matching.
+     */
+    readonly traffic: pulumi.Output<string | undefined>;
+    readonly version: pulumi.Output<number>;
+    readonly zeroTrustGatewayPolicyId: pulumi.Output<string>;
+    /**
+     * Create a ZeroTrustGatewayPolicy resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: ZeroTrustGatewayPolicyArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering ZeroTrustGatewayPolicy resources.
+ */
+export interface ZeroTrustGatewayPolicyState {
+    /**
+     * The account identifier to target for the resource.
+     */
+    accountId?: pulumi.Input<string>;
+    /**
+     * The action executed by matched teams rule. Available values: `allow`, `block`, `safesearch`, `ytrestricted`, `on`,
+     * `off`, `scan`, `noscan`, `isolate`, `noisolate`, `override`, `l4_override`, `egress`, `audit_ssh`, `resolve`.
+     */
+    action?: pulumi.Input<string>;
+    /**
+     * The description of the teams rule.
+     */
+    description?: pulumi.Input<string>;
+    /**
+     * The wirefilter expression to be used for device_posture check matching.
+     */
+    devicePosture?: pulumi.Input<string>;
+    /**
+     * Indicator of rule enablement.
+     */
+    enabled?: pulumi.Input<boolean>;
+    /**
+     * The protocol or layer to evaluate the traffic and identity expressions.
+     */
+    filters?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * The wirefilter expression to be used for identity matching.
+     */
+    identity?: pulumi.Input<string>;
+    /**
+     * The name of the teams rule.
+     */
+    name?: pulumi.Input<string>;
+    /**
+     * The evaluation precedence of the teams rule.
+     */
+    precedence?: pulumi.Input<number>;
+    /**
+     * Additional rule settings.
+     */
+    ruleSettings?: pulumi.Input<inputs.ZeroTrustGatewayPolicyRuleSettings>;
+    /**
+     * The wirefilter expression to be used for traffic matching.
+     */
+    traffic?: pulumi.Input<string>;
+    version?: pulumi.Input<number>;
+    zeroTrustGatewayPolicyId?: pulumi.Input<string>;
+}
+/**
+ * The set of arguments for constructing a ZeroTrustGatewayPolicy resource.
+ */
+export interface ZeroTrustGatewayPolicyArgs {
+    /**
+     * The account identifier to target for the resource.
+     */
+    accountId: pulumi.Input<string>;
+    /**
+     * The action executed by matched teams rule. Available values: `allow`, `block`, `safesearch`, `ytrestricted`, `on`,
+     * `off`, `scan`, `noscan`, `isolate`, `noisolate`, `override`, `l4_override`, `egress`, `audit_ssh`, `resolve`.
+     */
+    action: pulumi.Input<string>;
+    /**
+     * The description of the teams rule.
+     */
+    description: pulumi.Input<string>;
+    /**
+     * The wirefilter expression to be used for device_posture check matching.
+     */
+    devicePosture?: pulumi.Input<string>;
+    /**
+     * Indicator of rule enablement.
+     */
+    enabled?: pulumi.Input<boolean>;
+    /**
+     * The protocol or layer to evaluate the traffic and identity expressions.
+     */
+    filters?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * The wirefilter expression to be used for identity matching.
+     */
+    identity?: pulumi.Input<string>;
+    /**
+     * The name of the teams rule.
+     */
+    name?: pulumi.Input<string>;
+    /**
+     * The evaluation precedence of the teams rule.
+     */
+    precedence: pulumi.Input<number>;
+    /**
+     * Additional rule settings.
+     */
+    ruleSettings?: pulumi.Input<inputs.ZeroTrustGatewayPolicyRuleSettings>;
+    /**
+     * The wirefilter expression to be used for traffic matching.
+     */
+    traffic?: pulumi.Input<string>;
+    zeroTrustGatewayPolicyId?: pulumi.Input<string>;
+}

package/bin/zeroTrustGatewayPolicy.js

@@ -0,0 +1,85 @@
+"use strict";
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ZeroTrustGatewayPolicy = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("./utilities");
+class ZeroTrustGatewayPolicy extends pulumi.CustomResource {
+    /**
+     * Get an existing ZeroTrustGatewayPolicy resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new ZeroTrustGatewayPolicy(name, state, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of ZeroTrustGatewayPolicy.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === ZeroTrustGatewayPolicy.__pulumiType;
+    }
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["accountId"] = state ? state.accountId : undefined;
+            resourceInputs["action"] = state ? state.action : undefined;
+            resourceInputs["description"] = state ? state.description : undefined;
+            resourceInputs["devicePosture"] = state ? state.devicePosture : undefined;
+            resourceInputs["enabled"] = state ? state.enabled : undefined;
+            resourceInputs["filters"] = state ? state.filters : undefined;
+            resourceInputs["identity"] = state ? state.identity : undefined;
+            resourceInputs["name"] = state ? state.name : undefined;
+            resourceInputs["precedence"] = state ? state.precedence : undefined;
+            resourceInputs["ruleSettings"] = state ? state.ruleSettings : undefined;
+            resourceInputs["traffic"] = state ? state.traffic : undefined;
+            resourceInputs["version"] = state ? state.version : undefined;
+            resourceInputs["zeroTrustGatewayPolicyId"] = state ? state.zeroTrustGatewayPolicyId : undefined;
+        }
+        else {
+            const args = argsOrState;
+            if ((!args || args.accountId === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'accountId'");
+            }
+            if ((!args || args.action === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'action'");
+            }
+            if ((!args || args.description === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'description'");
+            }
+            if ((!args || args.precedence === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'precedence'");
+            }
+            resourceInputs["accountId"] = args ? args.accountId : undefined;
+            resourceInputs["action"] = args ? args.action : undefined;
+            resourceInputs["description"] = args ? args.description : undefined;
+            resourceInputs["devicePosture"] = args ? args.devicePosture : undefined;
+            resourceInputs["enabled"] = args ? args.enabled : undefined;
+            resourceInputs["filters"] = args ? args.filters : undefined;
+            resourceInputs["identity"] = args ? args.identity : undefined;
+            resourceInputs["name"] = args ? args.name : undefined;
+            resourceInputs["precedence"] = args ? args.precedence : undefined;
+            resourceInputs["ruleSettings"] = args ? args.ruleSettings : undefined;
+            resourceInputs["traffic"] = args ? args.traffic : undefined;
+            resourceInputs["zeroTrustGatewayPolicyId"] = args ? args.zeroTrustGatewayPolicyId : undefined;
+            resourceInputs["version"] = undefined /*out*/;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(ZeroTrustGatewayPolicy.__pulumiType, name, resourceInputs, opts, false /*dependency*/, utilities.getPackage());
+    }
+}
+exports.ZeroTrustGatewayPolicy = ZeroTrustGatewayPolicy;
+/** @internal */
+ZeroTrustGatewayPolicy.__pulumiType = 'cloudflare:index/zeroTrustGatewayPolicy:ZeroTrustGatewayPolicy';
+//# sourceMappingURL=zeroTrustGatewayPolicy.js.map

package/bin/zeroTrustGatewayPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zeroTrustGatewayPolicy.js","sourceRoot":"","sources":["../zeroTrustGatewayPolicy.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC,MAAa,sBAAuB,SAAQ,MAAM,CAAC,cAAc;IAC7D;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAmC,EAAE,IAAmC;QACjI,OAAO,IAAI,sBAAsB,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC7E,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,sBAAsB,CAAC,YAAY,CAAC;IACvE,CAAC;IA0DD,YAAY,IAAY,EAAE,WAAsE,EAAE,IAAmC;QACjI,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAsD,CAAC;YACrE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,0BAA0B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;SACnG;aAAM;YACH,MAAM,IAAI,GAAG,WAAqD,CAAC;YACnE,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACtD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;aAC5D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACnD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;aACzD;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACxD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;aAC9D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;aAC7D;YACD,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,0BAA0B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACjD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,sBAAsB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,KAAK,CAAC,cAAc,EAAE,SAAS,CAAC,UAAU,EAAE,CAAC,CAAC;IACzH,CAAC;;AApIL,wDAqIC;AAvHG,gBAAgB;AACO,mCAAY,GAAG,gEAAgE,CAAC"}

package/bin/zeroTrustGatewayProxyEndpoint.d.ts

@@ -0,0 +1,83 @@
+import * as pulumi from "@pulumi/pulumi";
+export declare class ZeroTrustGatewayProxyEndpoint extends pulumi.CustomResource {
+    /**
+     * Get an existing ZeroTrustGatewayProxyEndpoint resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: ZeroTrustGatewayProxyEndpointState, opts?: pulumi.CustomResourceOptions): ZeroTrustGatewayProxyEndpoint;
+    /**
+     * Returns true if the given object is an instance of ZeroTrustGatewayProxyEndpoint.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is ZeroTrustGatewayProxyEndpoint;
+    /**
+     * The account identifier to target for the resource.
+     */
+    readonly accountId: pulumi.Output<string>;
+    /**
+     * The networks CIDRs that will be allowed to initiate proxy connections.
+     */
+    readonly ips: pulumi.Output<string[]>;
+    /**
+     * Name of the teams proxy endpoint.
+     */
+    readonly name: pulumi.Output<string>;
+    /**
+     * The FQDN that proxy clients should be pointed at.
+     */
+    readonly subdomain: pulumi.Output<string>;
+    readonly zeroTrustGatewayProxyEndpointId: pulumi.Output<string>;
+    /**
+     * Create a ZeroTrustGatewayProxyEndpoint resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: ZeroTrustGatewayProxyEndpointArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering ZeroTrustGatewayProxyEndpoint resources.
+ */
+export interface ZeroTrustGatewayProxyEndpointState {
+    /**
+     * The account identifier to target for the resource.
+     */
+    accountId?: pulumi.Input<string>;
+    /**
+     * The networks CIDRs that will be allowed to initiate proxy connections.
+     */
+    ips?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Name of the teams proxy endpoint.
+     */
+    name?: pulumi.Input<string>;
+    /**
+     * The FQDN that proxy clients should be pointed at.
+     */
+    subdomain?: pulumi.Input<string>;
+    zeroTrustGatewayProxyEndpointId?: pulumi.Input<string>;
+}
+/**
+ * The set of arguments for constructing a ZeroTrustGatewayProxyEndpoint resource.
+ */
+export interface ZeroTrustGatewayProxyEndpointArgs {
+    /**
+     * The account identifier to target for the resource.
+     */
+    accountId: pulumi.Input<string>;
+    /**
+     * The networks CIDRs that will be allowed to initiate proxy connections.
+     */
+    ips: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Name of the teams proxy endpoint.
+     */
+    name?: pulumi.Input<string>;
+    zeroTrustGatewayProxyEndpointId?: pulumi.Input<string>;
+}

package/bin/zeroTrustGatewayProxyEndpoint.js

@@ -0,0 +1,63 @@
+"use strict";
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ZeroTrustGatewayProxyEndpoint = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("./utilities");
+class ZeroTrustGatewayProxyEndpoint extends pulumi.CustomResource {
+    /**
+     * Get an existing ZeroTrustGatewayProxyEndpoint resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new ZeroTrustGatewayProxyEndpoint(name, state, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of ZeroTrustGatewayProxyEndpoint.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === ZeroTrustGatewayProxyEndpoint.__pulumiType;
+    }
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["accountId"] = state ? state.accountId : undefined;
+            resourceInputs["ips"] = state ? state.ips : undefined;
+            resourceInputs["name"] = state ? state.name : undefined;
+            resourceInputs["subdomain"] = state ? state.subdomain : undefined;
+            resourceInputs["zeroTrustGatewayProxyEndpointId"] = state ? state.zeroTrustGatewayProxyEndpointId : undefined;
+        }
+        else {
+            const args = argsOrState;
+            if ((!args || args.accountId === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'accountId'");
+            }
+            if ((!args || args.ips === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'ips'");
+            }
+            resourceInputs["accountId"] = args ? args.accountId : undefined;
+            resourceInputs["ips"] = args ? args.ips : undefined;
+            resourceInputs["name"] = args ? args.name : undefined;
+            resourceInputs["zeroTrustGatewayProxyEndpointId"] = args ? args.zeroTrustGatewayProxyEndpointId : undefined;
+            resourceInputs["subdomain"] = undefined /*out*/;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(ZeroTrustGatewayProxyEndpoint.__pulumiType, name, resourceInputs, opts, false /*dependency*/, utilities.getPackage());
+    }
+}
+exports.ZeroTrustGatewayProxyEndpoint = ZeroTrustGatewayProxyEndpoint;
+/** @internal */
+ZeroTrustGatewayProxyEndpoint.__pulumiType = 'cloudflare:index/zeroTrustGatewayProxyEndpoint:ZeroTrustGatewayProxyEndpoint';
+//# sourceMappingURL=zeroTrustGatewayProxyEndpoint.js.map

package/bin/zeroTrustGatewayProxyEndpoint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zeroTrustGatewayProxyEndpoint.js","sourceRoot":"","sources":["../zeroTrustGatewayProxyEndpoint.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC,MAAa,6BAA8B,SAAQ,MAAM,CAAC,cAAc;IACpE;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA0C,EAAE,IAAmC;QACxI,OAAO,IAAI,6BAA6B,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACpF,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,6BAA6B,CAAC,YAAY,CAAC;IAC9E,CAAC;IA4BD,YAAY,IAAY,EAAE,WAAoF,EAAE,IAAmC;QAC/I,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA6D,CAAC;YAC5E,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,iCAAiC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC,CAAC,SAAS,CAAC;SACjH;aAAM;YACH,MAAM,IAAI,GAAG,WAA4D,CAAC;YAC1E,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACtD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;aAC5D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAChD,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;aACtD;YACD,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACpD,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,iCAAiC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5G,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACnD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,6BAA6B,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,KAAK,CAAC,cAAc,EAAE,SAAS,CAAC,UAAU,EAAE,CAAC,CAAC;IAChI,CAAC;;AAhFL,sEAiFC;AAnEG,gBAAgB;AACO,0CAAY,GAAG,8EAA8E,CAAC"}