cloudflare 7.0.0 → 7.1.0

package/resources/zero-trust/access/applications/applications.d.mts

@@ -1896,7 +1896,7 @@ export interface ApplicationPolicy {
      * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
      * m, h.
      */
-    session_duration?: string;
+    session_duration?: string | null;
     updated_at?: string;
 }
 export declare namespace ApplicationPolicy {
@@ -1918,11 +1918,11 @@ export declare namespace ApplicationPolicy {
             /**
              * Clipboard formats allowed when copying from local machine to remote RDP session.
              */
-            allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+            allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
             /**
              * Clipboard formats allowed when copying from remote RDP session to local machine.
              */
-            allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+            allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
     }
     /**
@@ -3017,7 +3017,8 @@ export declare namespace ApplicationCreateResponse {
                 allow_any_on_loopback?: boolean;
                 /**
                  * The URIs that are allowed as redirect URIs for dynamically registered clients.
-                 * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+                 * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+                 * must be explicitly configured and match exactly.
                  */
                 allowed_uris?: Array<string>;
                 /**
@@ -3046,6 +3047,10 @@ export declare namespace ApplicationCreateResponse {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * Administrators who can approve a temporary authentication request.
              */
@@ -3113,7 +3118,7 @@ export declare namespace ApplicationCreateResponse {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
             updated_at?: string;
         }
         namespace Policy {
@@ -3135,11 +3140,11 @@ export declare namespace ApplicationCreateResponse {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -3298,6 +3303,10 @@ export declare namespace ApplicationCreateResponse {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * Administrators who can approve a temporary authentication request.
              */
@@ -3365,7 +3374,7 @@ export declare namespace ApplicationCreateResponse {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
             updated_at?: string;
         }
         namespace Policy {
@@ -3387,11 +3396,11 @@ export declare namespace ApplicationCreateResponse {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -3818,7 +3827,8 @@ export declare namespace ApplicationCreateResponse {
                 allow_any_on_loopback?: boolean;
                 /**
                  * The URIs that are allowed as redirect URIs for dynamically registered clients.
-                 * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+                 * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+                 * must be explicitly configured and match exactly.
                  */
                 allowed_uris?: Array<string>;
                 /**
@@ -3847,6 +3857,10 @@ export declare namespace ApplicationCreateResponse {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * Administrators who can approve a temporary authentication request.
              */
@@ -3914,7 +3928,7 @@ export declare namespace ApplicationCreateResponse {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
             updated_at?: string;
         }
         namespace Policy {
@@ -3936,11 +3950,11 @@ export declare namespace ApplicationCreateResponse {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -4367,7 +4381,8 @@ export declare namespace ApplicationCreateResponse {
                 allow_any_on_loopback?: boolean;
                 /**
                  * The URIs that are allowed as redirect URIs for dynamically registered clients.
-                 * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+                 * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+                 * must be explicitly configured and match exactly.
                  */
                 allowed_uris?: Array<string>;
                 /**
@@ -4396,6 +4411,10 @@ export declare namespace ApplicationCreateResponse {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * Administrators who can approve a temporary authentication request.
              */
@@ -4463,7 +4482,7 @@ export declare namespace ApplicationCreateResponse {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
             updated_at?: string;
         }
         namespace Policy {
@@ -4485,11 +4504,11 @@ export declare namespace ApplicationCreateResponse {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -4709,6 +4728,10 @@ export declare namespace ApplicationCreateResponse {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * Administrators who can approve a temporary authentication request.
              */
@@ -4776,7 +4799,7 @@ export declare namespace ApplicationCreateResponse {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
             updated_at?: string;
         }
         namespace Policy {
@@ -4798,11 +4821,11 @@ export declare namespace ApplicationCreateResponse {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -4886,6 +4909,10 @@ export declare namespace ApplicationCreateResponse {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * Administrators who can approve a temporary authentication request.
              */
@@ -4953,7 +4980,7 @@ export declare namespace ApplicationCreateResponse {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
             updated_at?: string;
         }
         namespace Policy {
@@ -4975,11 +5002,11 @@ export declare namespace ApplicationCreateResponse {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -5063,6 +5090,10 @@ export declare namespace ApplicationCreateResponse {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * Administrators who can approve a temporary authentication request.
              */
@@ -5130,7 +5161,7 @@ export declare namespace ApplicationCreateResponse {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
             updated_at?: string;
         }
         namespace Policy {
@@ -5152,11 +5183,11 @@ export declare namespace ApplicationCreateResponse {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -5240,6 +5271,10 @@ export declare namespace ApplicationCreateResponse {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * Administrators who can approve a temporary authentication request.
              */
@@ -5307,7 +5342,7 @@ export declare namespace ApplicationCreateResponse {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
             updated_at?: string;
         }
         namespace Policy {
@@ -5329,11 +5364,11 @@ export declare namespace ApplicationCreateResponse {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -5399,6 +5434,10 @@ export declare namespace ApplicationCreateResponse {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * Administrators who can approve a temporary authentication request.
              */
@@ -5466,7 +5505,7 @@ export declare namespace ApplicationCreateResponse {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
             updated_at?: string;
         }
         namespace Policy {
@@ -5488,11 +5527,11 @@ export declare namespace ApplicationCreateResponse {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -5530,6 +5569,11 @@ export declare namespace ApplicationCreateResponse {
          * Audience tag.
          */
         aud?: string;
+        /**
+         * Configures multi-factor authentication (MFA) settings for infrastructure
+         * applications.
+         */
+        mfa_config?: InfrastructureApplication.MfaConfig;
         /**
          * The name of the application.
          */
@@ -5554,6 +5598,27 @@ export declare namespace ApplicationCreateResponse {
                 [key: string]: Array<string>;
             };
         }
+        /**
+         * Configures multi-factor authentication (MFA) settings for infrastructure
+         * applications.
+         */
+        interface MfaConfig {
+            /**
+             * Lists the MFA methods that users can authenticate with. For infrastructure
+             * applications, supported values are `piv_key` and `ssh_fido2_key`.
+             */
+            allowed_authenticators?: Array<'piv_key' | 'ssh_fido2_key'>;
+            /**
+             * Indicates whether to disable MFA for this resource. This option is available at
+             * the application and policy level.
+             */
+            mfa_disabled?: boolean;
+            /**
+             * Defines the duration of an MFA session. Must be in minutes (m) or hours (h).
+             * Minimum: 0m. Maximum: 720h (30 days). Examples: `5m` or `24h`.
+             */
+            session_duration?: string;
+        }
         interface Policy {
             /**
              * The UUID of the policy
@@ -5631,9 +5696,9 @@ export declare namespace ApplicationCreateResponse {
             interface MfaConfig {
                 /**
                  * Lists the MFA methods that users can authenticate with. For infrastructure
-                 * applications, only `piv_key` is supported.
+                 * applications, supported values are `piv_key` and `ssh_fido2_key`.
                  */
-                allowed_authenticators?: Array<'piv_key'>;
+                allowed_authenticators?: Array<'piv_key' | 'ssh_fido2_key'>;
                 /**
                  * Indicates whether to disable MFA for this resource. This option is available at
                  * the application and policy level.
@@ -5991,7 +6056,8 @@ export declare namespace ApplicationCreateResponse {
                 allow_any_on_loopback?: boolean;
                 /**
                  * The URIs that are allowed as redirect URIs for dynamically registered clients.
-                 * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+                 * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+                 * must be explicitly configured and match exactly.
                  */
                 allowed_uris?: Array<string>;
                 /**
@@ -6020,6 +6086,10 @@ export declare namespace ApplicationCreateResponse {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * Administrators who can approve a temporary authentication request.
              */
@@ -6087,7 +6157,7 @@ export declare namespace ApplicationCreateResponse {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
             updated_at?: string;
         }
         namespace Policy {
@@ -6109,11 +6179,11 @@ export declare namespace ApplicationCreateResponse {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -6454,7 +6524,8 @@ export declare namespace ApplicationCreateResponse {
                 allow_any_on_loopback?: boolean;
                 /**
                  * The URIs that are allowed as redirect URIs for dynamically registered clients.
-                 * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+                 * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+                 * must be explicitly configured and match exactly.
                  */
                 allowed_uris?: Array<string>;
                 /**
@@ -6483,6 +6554,10 @@ export declare namespace ApplicationCreateResponse {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * Administrators who can approve a temporary authentication request.
              */
@@ -6550,7 +6625,7 @@ export declare namespace ApplicationCreateResponse {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
             updated_at?: string;
         }
         namespace Policy {
@@ -6572,11 +6647,11 @@ export declare namespace ApplicationCreateResponse {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -6922,7 +6997,8 @@ export declare namespace ApplicationCreateResponse {
                 allow_any_on_loopback?: boolean;
                 /**
                  * The URIs that are allowed as redirect URIs for dynamically registered clients.
-                 * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+                 * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+                 * must be explicitly configured and match exactly.
                  */
                 allowed_uris?: Array<string>;
                 /**
@@ -6951,6 +7027,10 @@ export declare namespace ApplicationCreateResponse {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * Administrators who can approve a temporary authentication request.
              */
@@ -7018,7 +7098,7 @@ export declare namespace ApplicationCreateResponse {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
             updated_at?: string;
         }
         namespace Policy {
@@ -7040,11 +7120,11 @@ export declare namespace ApplicationCreateResponse {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -7474,7 +7554,8 @@ export declare namespace ApplicationUpdateResponse {
                 allow_any_on_loopback?: boolean;
                 /**
                  * The URIs that are allowed as redirect URIs for dynamically registered clients.
-                 * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+                 * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+                 * must be explicitly configured and match exactly.
                  */
                 allowed_uris?: Array<string>;
                 /**
@@ -7503,6 +7584,10 @@ export declare namespace ApplicationUpdateResponse {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * Administrators who can approve a temporary authentication request.
              */
@@ -7570,7 +7655,7 @@ export declare namespace ApplicationUpdateResponse {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
             updated_at?: string;
         }
         namespace Policy {
@@ -7592,11 +7677,11 @@ export declare namespace ApplicationUpdateResponse {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -7755,6 +7840,10 @@ export declare namespace ApplicationUpdateResponse {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * Administrators who can approve a temporary authentication request.
              */
@@ -7822,7 +7911,7 @@ export declare namespace ApplicationUpdateResponse {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
             updated_at?: string;
         }
         namespace Policy {
@@ -7844,11 +7933,11 @@ export declare namespace ApplicationUpdateResponse {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -8275,7 +8364,8 @@ export declare namespace ApplicationUpdateResponse {
                 allow_any_on_loopback?: boolean;
                 /**
                  * The URIs that are allowed as redirect URIs for dynamically registered clients.
-                 * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+                 * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+                 * must be explicitly configured and match exactly.
                  */
                 allowed_uris?: Array<string>;
                 /**
@@ -8304,6 +8394,10 @@ export declare namespace ApplicationUpdateResponse {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * Administrators who can approve a temporary authentication request.
              */
@@ -8371,7 +8465,7 @@ export declare namespace ApplicationUpdateResponse {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
             updated_at?: string;
         }
         namespace Policy {
@@ -8393,11 +8487,11 @@ export declare namespace ApplicationUpdateResponse {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -8824,7 +8918,8 @@ export declare namespace ApplicationUpdateResponse {
                 allow_any_on_loopback?: boolean;
                 /**
                  * The URIs that are allowed as redirect URIs for dynamically registered clients.
-                 * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+                 * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+                 * must be explicitly configured and match exactly.
                  */
                 allowed_uris?: Array<string>;
                 /**
@@ -8853,6 +8948,10 @@ export declare namespace ApplicationUpdateResponse {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * Administrators who can approve a temporary authentication request.
              */
@@ -8920,7 +9019,7 @@ export declare namespace ApplicationUpdateResponse {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
             updated_at?: string;
         }
         namespace Policy {
@@ -8942,11 +9041,11 @@ export declare namespace ApplicationUpdateResponse {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -9166,6 +9265,10 @@ export declare namespace ApplicationUpdateResponse {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * Administrators who can approve a temporary authentication request.
              */
@@ -9233,7 +9336,7 @@ export declare namespace ApplicationUpdateResponse {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
             updated_at?: string;
         }
         namespace Policy {
@@ -9255,11 +9358,11 @@ export declare namespace ApplicationUpdateResponse {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -9343,6 +9446,10 @@ export declare namespace ApplicationUpdateResponse {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * Administrators who can approve a temporary authentication request.
              */
@@ -9410,7 +9517,7 @@ export declare namespace ApplicationUpdateResponse {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
             updated_at?: string;
         }
         namespace Policy {
@@ -9432,11 +9539,11 @@ export declare namespace ApplicationUpdateResponse {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -9520,6 +9627,10 @@ export declare namespace ApplicationUpdateResponse {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * Administrators who can approve a temporary authentication request.
              */
@@ -9587,7 +9698,7 @@ export declare namespace ApplicationUpdateResponse {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
             updated_at?: string;
         }
         namespace Policy {
@@ -9609,11 +9720,11 @@ export declare namespace ApplicationUpdateResponse {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -9697,6 +9808,10 @@ export declare namespace ApplicationUpdateResponse {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * Administrators who can approve a temporary authentication request.
              */
@@ -9764,7 +9879,7 @@ export declare namespace ApplicationUpdateResponse {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
             updated_at?: string;
         }
         namespace Policy {
@@ -9786,11 +9901,11 @@ export declare namespace ApplicationUpdateResponse {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -9856,6 +9971,10 @@ export declare namespace ApplicationUpdateResponse {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * Administrators who can approve a temporary authentication request.
              */
@@ -9923,7 +10042,7 @@ export declare namespace ApplicationUpdateResponse {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
             updated_at?: string;
         }
         namespace Policy {
@@ -9945,11 +10064,11 @@ export declare namespace ApplicationUpdateResponse {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -9987,6 +10106,11 @@ export declare namespace ApplicationUpdateResponse {
          * Audience tag.
          */
         aud?: string;
+        /**
+         * Configures multi-factor authentication (MFA) settings for infrastructure
+         * applications.
+         */
+        mfa_config?: InfrastructureApplication.MfaConfig;
         /**
          * The name of the application.
          */
@@ -10011,6 +10135,27 @@ export declare namespace ApplicationUpdateResponse {
                 [key: string]: Array<string>;
             };
         }
+        /**
+         * Configures multi-factor authentication (MFA) settings for infrastructure
+         * applications.
+         */
+        interface MfaConfig {
+            /**
+             * Lists the MFA methods that users can authenticate with. For infrastructure
+             * applications, supported values are `piv_key` and `ssh_fido2_key`.
+             */
+            allowed_authenticators?: Array<'piv_key' | 'ssh_fido2_key'>;
+            /**
+             * Indicates whether to disable MFA for this resource. This option is available at
+             * the application and policy level.
+             */
+            mfa_disabled?: boolean;
+            /**
+             * Defines the duration of an MFA session. Must be in minutes (m) or hours (h).
+             * Minimum: 0m. Maximum: 720h (30 days). Examples: `5m` or `24h`.
+             */
+            session_duration?: string;
+        }
         interface Policy {
             /**
              * The UUID of the policy
@@ -10088,9 +10233,9 @@ export declare namespace ApplicationUpdateResponse {
             interface MfaConfig {
                 /**
                  * Lists the MFA methods that users can authenticate with. For infrastructure
-                 * applications, only `piv_key` is supported.
+                 * applications, supported values are `piv_key` and `ssh_fido2_key`.
                  */
-                allowed_authenticators?: Array<'piv_key'>;
+                allowed_authenticators?: Array<'piv_key' | 'ssh_fido2_key'>;
                 /**
                  * Indicates whether to disable MFA for this resource. This option is available at
                  * the application and policy level.
@@ -10448,7 +10593,8 @@ export declare namespace ApplicationUpdateResponse {
                 allow_any_on_loopback?: boolean;
                 /**
                  * The URIs that are allowed as redirect URIs for dynamically registered clients.
-                 * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+                 * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+                 * must be explicitly configured and match exactly.
                  */
                 allowed_uris?: Array<string>;
                 /**
@@ -10477,6 +10623,10 @@ export declare namespace ApplicationUpdateResponse {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * Administrators who can approve a temporary authentication request.
              */
@@ -10544,7 +10694,7 @@ export declare namespace ApplicationUpdateResponse {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
             updated_at?: string;
         }
         namespace Policy {
@@ -10566,11 +10716,11 @@ export declare namespace ApplicationUpdateResponse {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -10911,7 +11061,8 @@ export declare namespace ApplicationUpdateResponse {
                 allow_any_on_loopback?: boolean;
                 /**
                  * The URIs that are allowed as redirect URIs for dynamically registered clients.
-                 * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+                 * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+                 * must be explicitly configured and match exactly.
                  */
                 allowed_uris?: Array<string>;
                 /**
@@ -10940,6 +11091,10 @@ export declare namespace ApplicationUpdateResponse {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * Administrators who can approve a temporary authentication request.
              */
@@ -11007,7 +11162,7 @@ export declare namespace ApplicationUpdateResponse {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
             updated_at?: string;
         }
         namespace Policy {
@@ -11029,11 +11184,11 @@ export declare namespace ApplicationUpdateResponse {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -11379,7 +11534,8 @@ export declare namespace ApplicationUpdateResponse {
                 allow_any_on_loopback?: boolean;
                 /**
                  * The URIs that are allowed as redirect URIs for dynamically registered clients.
-                 * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+                 * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+                 * must be explicitly configured and match exactly.
                  */
                 allowed_uris?: Array<string>;
                 /**
@@ -11408,6 +11564,10 @@ export declare namespace ApplicationUpdateResponse {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * Administrators who can approve a temporary authentication request.
              */
@@ -11475,7 +11635,7 @@ export declare namespace ApplicationUpdateResponse {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
             updated_at?: string;
         }
         namespace Policy {
@@ -11497,11 +11657,11 @@ export declare namespace ApplicationUpdateResponse {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -11931,7 +12091,8 @@ export declare namespace ApplicationListResponse {
                 allow_any_on_loopback?: boolean;
                 /**
                  * The URIs that are allowed as redirect URIs for dynamically registered clients.
-                 * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+                 * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+                 * must be explicitly configured and match exactly.
                  */
                 allowed_uris?: Array<string>;
                 /**
@@ -11960,6 +12121,10 @@ export declare namespace ApplicationListResponse {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * Administrators who can approve a temporary authentication request.
              */
@@ -12027,7 +12192,7 @@ export declare namespace ApplicationListResponse {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
             updated_at?: string;
         }
         namespace Policy {
@@ -12049,11 +12214,11 @@ export declare namespace ApplicationListResponse {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -12212,6 +12377,10 @@ export declare namespace ApplicationListResponse {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * Administrators who can approve a temporary authentication request.
              */
@@ -12279,7 +12448,7 @@ export declare namespace ApplicationListResponse {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
             updated_at?: string;
         }
         namespace Policy {
@@ -12301,11 +12470,11 @@ export declare namespace ApplicationListResponse {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -12732,7 +12901,8 @@ export declare namespace ApplicationListResponse {
                 allow_any_on_loopback?: boolean;
                 /**
                  * The URIs that are allowed as redirect URIs for dynamically registered clients.
-                 * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+                 * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+                 * must be explicitly configured and match exactly.
                  */
                 allowed_uris?: Array<string>;
                 /**
@@ -12761,6 +12931,10 @@ export declare namespace ApplicationListResponse {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * Administrators who can approve a temporary authentication request.
              */
@@ -12828,7 +13002,7 @@ export declare namespace ApplicationListResponse {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
             updated_at?: string;
         }
         namespace Policy {
@@ -12850,11 +13024,11 @@ export declare namespace ApplicationListResponse {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -13281,7 +13455,8 @@ export declare namespace ApplicationListResponse {
                 allow_any_on_loopback?: boolean;
                 /**
                  * The URIs that are allowed as redirect URIs for dynamically registered clients.
-                 * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+                 * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+                 * must be explicitly configured and match exactly.
                  */
                 allowed_uris?: Array<string>;
                 /**
@@ -13310,6 +13485,10 @@ export declare namespace ApplicationListResponse {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * Administrators who can approve a temporary authentication request.
              */
@@ -13377,7 +13556,7 @@ export declare namespace ApplicationListResponse {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
             updated_at?: string;
         }
         namespace Policy {
@@ -13399,11 +13578,11 @@ export declare namespace ApplicationListResponse {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -13623,6 +13802,10 @@ export declare namespace ApplicationListResponse {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * Administrators who can approve a temporary authentication request.
              */
@@ -13690,7 +13873,7 @@ export declare namespace ApplicationListResponse {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
             updated_at?: string;
         }
         namespace Policy {
@@ -13712,11 +13895,11 @@ export declare namespace ApplicationListResponse {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -13800,6 +13983,10 @@ export declare namespace ApplicationListResponse {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * Administrators who can approve a temporary authentication request.
              */
@@ -13867,7 +14054,7 @@ export declare namespace ApplicationListResponse {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
             updated_at?: string;
         }
         namespace Policy {
@@ -13889,11 +14076,11 @@ export declare namespace ApplicationListResponse {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -13977,6 +14164,10 @@ export declare namespace ApplicationListResponse {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * Administrators who can approve a temporary authentication request.
              */
@@ -14044,7 +14235,7 @@ export declare namespace ApplicationListResponse {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
             updated_at?: string;
         }
         namespace Policy {
@@ -14066,11 +14257,11 @@ export declare namespace ApplicationListResponse {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -14154,6 +14345,10 @@ export declare namespace ApplicationListResponse {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * Administrators who can approve a temporary authentication request.
              */
@@ -14221,7 +14416,7 @@ export declare namespace ApplicationListResponse {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
             updated_at?: string;
         }
         namespace Policy {
@@ -14243,11 +14438,11 @@ export declare namespace ApplicationListResponse {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -14313,6 +14508,10 @@ export declare namespace ApplicationListResponse {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * Administrators who can approve a temporary authentication request.
              */
@@ -14380,7 +14579,7 @@ export declare namespace ApplicationListResponse {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
             updated_at?: string;
         }
         namespace Policy {
@@ -14402,11 +14601,11 @@ export declare namespace ApplicationListResponse {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -14444,6 +14643,11 @@ export declare namespace ApplicationListResponse {
          * Audience tag.
          */
         aud?: string;
+        /**
+         * Configures multi-factor authentication (MFA) settings for infrastructure
+         * applications.
+         */
+        mfa_config?: InfrastructureApplication.MfaConfig;
         /**
          * The name of the application.
          */
@@ -14468,6 +14672,27 @@ export declare namespace ApplicationListResponse {
                 [key: string]: Array<string>;
             };
         }
+        /**
+         * Configures multi-factor authentication (MFA) settings for infrastructure
+         * applications.
+         */
+        interface MfaConfig {
+            /**
+             * Lists the MFA methods that users can authenticate with. For infrastructure
+             * applications, supported values are `piv_key` and `ssh_fido2_key`.
+             */
+            allowed_authenticators?: Array<'piv_key' | 'ssh_fido2_key'>;
+            /**
+             * Indicates whether to disable MFA for this resource. This option is available at
+             * the application and policy level.
+             */
+            mfa_disabled?: boolean;
+            /**
+             * Defines the duration of an MFA session. Must be in minutes (m) or hours (h).
+             * Minimum: 0m. Maximum: 720h (30 days). Examples: `5m` or `24h`.
+             */
+            session_duration?: string;
+        }
         interface Policy {
             /**
              * The UUID of the policy
@@ -14545,9 +14770,9 @@ export declare namespace ApplicationListResponse {
             interface MfaConfig {
                 /**
                  * Lists the MFA methods that users can authenticate with. For infrastructure
-                 * applications, only `piv_key` is supported.
+                 * applications, supported values are `piv_key` and `ssh_fido2_key`.
                  */
-                allowed_authenticators?: Array<'piv_key'>;
+                allowed_authenticators?: Array<'piv_key' | 'ssh_fido2_key'>;
                 /**
                  * Indicates whether to disable MFA for this resource. This option is available at
                  * the application and policy level.
@@ -14905,7 +15130,8 @@ export declare namespace ApplicationListResponse {
                 allow_any_on_loopback?: boolean;
                 /**
                  * The URIs that are allowed as redirect URIs for dynamically registered clients.
-                 * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+                 * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+                 * must be explicitly configured and match exactly.
                  */
                 allowed_uris?: Array<string>;
                 /**
@@ -14934,6 +15160,10 @@ export declare namespace ApplicationListResponse {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * Administrators who can approve a temporary authentication request.
              */
@@ -15001,7 +15231,7 @@ export declare namespace ApplicationListResponse {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
             updated_at?: string;
         }
         namespace Policy {
@@ -15023,11 +15253,11 @@ export declare namespace ApplicationListResponse {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -15368,7 +15598,8 @@ export declare namespace ApplicationListResponse {
                 allow_any_on_loopback?: boolean;
                 /**
                  * The URIs that are allowed as redirect URIs for dynamically registered clients.
-                 * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+                 * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+                 * must be explicitly configured and match exactly.
                  */
                 allowed_uris?: Array<string>;
                 /**
@@ -15397,6 +15628,10 @@ export declare namespace ApplicationListResponse {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * Administrators who can approve a temporary authentication request.
              */
@@ -15464,7 +15699,7 @@ export declare namespace ApplicationListResponse {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
             updated_at?: string;
         }
         namespace Policy {
@@ -15486,11 +15721,11 @@ export declare namespace ApplicationListResponse {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -15836,7 +16071,8 @@ export declare namespace ApplicationListResponse {
                 allow_any_on_loopback?: boolean;
                 /**
                  * The URIs that are allowed as redirect URIs for dynamically registered clients.
-                 * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+                 * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+                 * must be explicitly configured and match exactly.
                  */
                 allowed_uris?: Array<string>;
                 /**
@@ -15865,6 +16101,10 @@ export declare namespace ApplicationListResponse {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * Administrators who can approve a temporary authentication request.
              */
@@ -15932,7 +16172,7 @@ export declare namespace ApplicationListResponse {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
             updated_at?: string;
         }
         namespace Policy {
@@ -15954,11 +16194,11 @@ export declare namespace ApplicationListResponse {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -16394,7 +16634,8 @@ export declare namespace ApplicationGetResponse {
                 allow_any_on_loopback?: boolean;
                 /**
                  * The URIs that are allowed as redirect URIs for dynamically registered clients.
-                 * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+                 * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+                 * must be explicitly configured and match exactly.
                  */
                 allowed_uris?: Array<string>;
                 /**
@@ -16423,6 +16664,10 @@ export declare namespace ApplicationGetResponse {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * Administrators who can approve a temporary authentication request.
              */
@@ -16490,7 +16735,7 @@ export declare namespace ApplicationGetResponse {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
             updated_at?: string;
         }
         namespace Policy {
@@ -16512,11 +16757,11 @@ export declare namespace ApplicationGetResponse {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -16675,6 +16920,10 @@ export declare namespace ApplicationGetResponse {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * Administrators who can approve a temporary authentication request.
              */
@@ -16742,7 +16991,7 @@ export declare namespace ApplicationGetResponse {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
             updated_at?: string;
         }
         namespace Policy {
@@ -16764,11 +17013,11 @@ export declare namespace ApplicationGetResponse {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -17195,7 +17444,8 @@ export declare namespace ApplicationGetResponse {
                 allow_any_on_loopback?: boolean;
                 /**
                  * The URIs that are allowed as redirect URIs for dynamically registered clients.
-                 * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+                 * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+                 * must be explicitly configured and match exactly.
                  */
                 allowed_uris?: Array<string>;
                 /**
@@ -17224,6 +17474,10 @@ export declare namespace ApplicationGetResponse {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * Administrators who can approve a temporary authentication request.
              */
@@ -17291,7 +17545,7 @@ export declare namespace ApplicationGetResponse {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
             updated_at?: string;
         }
         namespace Policy {
@@ -17313,11 +17567,11 @@ export declare namespace ApplicationGetResponse {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -17744,7 +17998,8 @@ export declare namespace ApplicationGetResponse {
                 allow_any_on_loopback?: boolean;
                 /**
                  * The URIs that are allowed as redirect URIs for dynamically registered clients.
-                 * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+                 * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+                 * must be explicitly configured and match exactly.
                  */
                 allowed_uris?: Array<string>;
                 /**
@@ -17773,6 +18028,10 @@ export declare namespace ApplicationGetResponse {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * Administrators who can approve a temporary authentication request.
              */
@@ -17840,7 +18099,7 @@ export declare namespace ApplicationGetResponse {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
             updated_at?: string;
         }
         namespace Policy {
@@ -17862,11 +18121,11 @@ export declare namespace ApplicationGetResponse {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -18086,6 +18345,10 @@ export declare namespace ApplicationGetResponse {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * Administrators who can approve a temporary authentication request.
              */
@@ -18153,7 +18416,7 @@ export declare namespace ApplicationGetResponse {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
             updated_at?: string;
         }
         namespace Policy {
@@ -18175,11 +18438,11 @@ export declare namespace ApplicationGetResponse {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -18263,6 +18526,10 @@ export declare namespace ApplicationGetResponse {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * Administrators who can approve a temporary authentication request.
              */
@@ -18330,7 +18597,7 @@ export declare namespace ApplicationGetResponse {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
             updated_at?: string;
         }
         namespace Policy {
@@ -18352,11 +18619,11 @@ export declare namespace ApplicationGetResponse {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -18440,6 +18707,10 @@ export declare namespace ApplicationGetResponse {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * Administrators who can approve a temporary authentication request.
              */
@@ -18507,7 +18778,7 @@ export declare namespace ApplicationGetResponse {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
             updated_at?: string;
         }
         namespace Policy {
@@ -18529,11 +18800,11 @@ export declare namespace ApplicationGetResponse {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -18617,6 +18888,10 @@ export declare namespace ApplicationGetResponse {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * Administrators who can approve a temporary authentication request.
              */
@@ -18684,7 +18959,7 @@ export declare namespace ApplicationGetResponse {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
             updated_at?: string;
         }
         namespace Policy {
@@ -18706,11 +18981,11 @@ export declare namespace ApplicationGetResponse {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -18776,6 +19051,10 @@ export declare namespace ApplicationGetResponse {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * Administrators who can approve a temporary authentication request.
              */
@@ -18843,7 +19122,7 @@ export declare namespace ApplicationGetResponse {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
             updated_at?: string;
         }
         namespace Policy {
@@ -18865,11 +19144,11 @@ export declare namespace ApplicationGetResponse {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -18907,6 +19186,11 @@ export declare namespace ApplicationGetResponse {
          * Audience tag.
          */
         aud?: string;
+        /**
+         * Configures multi-factor authentication (MFA) settings for infrastructure
+         * applications.
+         */
+        mfa_config?: InfrastructureApplication.MfaConfig;
         /**
          * The name of the application.
          */
@@ -18931,6 +19215,27 @@ export declare namespace ApplicationGetResponse {
                 [key: string]: Array<string>;
             };
         }
+        /**
+         * Configures multi-factor authentication (MFA) settings for infrastructure
+         * applications.
+         */
+        interface MfaConfig {
+            /**
+             * Lists the MFA methods that users can authenticate with. For infrastructure
+             * applications, supported values are `piv_key` and `ssh_fido2_key`.
+             */
+            allowed_authenticators?: Array<'piv_key' | 'ssh_fido2_key'>;
+            /**
+             * Indicates whether to disable MFA for this resource. This option is available at
+             * the application and policy level.
+             */
+            mfa_disabled?: boolean;
+            /**
+             * Defines the duration of an MFA session. Must be in minutes (m) or hours (h).
+             * Minimum: 0m. Maximum: 720h (30 days). Examples: `5m` or `24h`.
+             */
+            session_duration?: string;
+        }
         interface Policy {
             /**
              * The UUID of the policy
@@ -19008,9 +19313,9 @@ export declare namespace ApplicationGetResponse {
             interface MfaConfig {
                 /**
                  * Lists the MFA methods that users can authenticate with. For infrastructure
-                 * applications, only `piv_key` is supported.
+                 * applications, supported values are `piv_key` and `ssh_fido2_key`.
                  */
-                allowed_authenticators?: Array<'piv_key'>;
+                allowed_authenticators?: Array<'piv_key' | 'ssh_fido2_key'>;
                 /**
                  * Indicates whether to disable MFA for this resource. This option is available at
                  * the application and policy level.
@@ -19368,7 +19673,8 @@ export declare namespace ApplicationGetResponse {
                 allow_any_on_loopback?: boolean;
                 /**
                  * The URIs that are allowed as redirect URIs for dynamically registered clients.
-                 * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+                 * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+                 * must be explicitly configured and match exactly.
                  */
                 allowed_uris?: Array<string>;
                 /**
@@ -19397,6 +19703,10 @@ export declare namespace ApplicationGetResponse {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * Administrators who can approve a temporary authentication request.
              */
@@ -19464,7 +19774,7 @@ export declare namespace ApplicationGetResponse {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
             updated_at?: string;
         }
         namespace Policy {
@@ -19486,11 +19796,11 @@ export declare namespace ApplicationGetResponse {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -19831,7 +20141,8 @@ export declare namespace ApplicationGetResponse {
                 allow_any_on_loopback?: boolean;
                 /**
                  * The URIs that are allowed as redirect URIs for dynamically registered clients.
-                 * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+                 * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+                 * must be explicitly configured and match exactly.
                  */
                 allowed_uris?: Array<string>;
                 /**
@@ -19860,6 +20171,10 @@ export declare namespace ApplicationGetResponse {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * Administrators who can approve a temporary authentication request.
              */
@@ -19927,7 +20242,7 @@ export declare namespace ApplicationGetResponse {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
             updated_at?: string;
         }
         namespace Policy {
@@ -19949,11 +20264,11 @@ export declare namespace ApplicationGetResponse {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -20299,7 +20614,8 @@ export declare namespace ApplicationGetResponse {
                 allow_any_on_loopback?: boolean;
                 /**
                  * The URIs that are allowed as redirect URIs for dynamically registered clients.
-                 * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+                 * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+                 * must be explicitly configured and match exactly.
                  */
                 allowed_uris?: Array<string>;
                 /**
@@ -20328,6 +20644,10 @@ export declare namespace ApplicationGetResponse {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * Administrators who can approve a temporary authentication request.
              */
@@ -20395,7 +20715,7 @@ export declare namespace ApplicationGetResponse {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
             updated_at?: string;
         }
         namespace Policy {
@@ -20417,11 +20737,11 @@ export declare namespace ApplicationGetResponse {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -20866,7 +21186,8 @@ export declare namespace ApplicationCreateParams {
                 allow_any_on_loopback?: boolean;
                 /**
                  * The URIs that are allowed as redirect URIs for dynamically registered clients.
-                 * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+                 * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+                 * must be explicitly configured and match exactly.
                  */
                 allowed_uris?: Array<string>;
                 /**
@@ -20898,6 +21219,10 @@ export declare namespace ApplicationCreateParams {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * The order of execution for this policy. Must be unique for each policy within an
              * app.
@@ -20951,7 +21276,7 @@ export declare namespace ApplicationCreateParams {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
         }
         namespace UnionMember2 {
             /**
@@ -20972,11 +21297,11 @@ export declare namespace ApplicationCreateParams {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -21150,6 +21475,10 @@ export declare namespace ApplicationCreateParams {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * The order of execution for this policy. Must be unique for each policy within an
              * app.
@@ -21203,7 +21532,7 @@ export declare namespace ApplicationCreateParams {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
         }
         namespace UnionMember2 {
             /**
@@ -21224,11 +21553,11 @@ export declare namespace ApplicationCreateParams {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -21669,7 +21998,8 @@ export declare namespace ApplicationCreateParams {
                 allow_any_on_loopback?: boolean;
                 /**
                  * The URIs that are allowed as redirect URIs for dynamically registered clients.
-                 * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+                 * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+                 * must be explicitly configured and match exactly.
                  */
                 allowed_uris?: Array<string>;
                 /**
@@ -21701,6 +22031,10 @@ export declare namespace ApplicationCreateParams {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * The order of execution for this policy. Must be unique for each policy within an
              * app.
@@ -21754,7 +22088,7 @@ export declare namespace ApplicationCreateParams {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
         }
         namespace UnionMember2 {
             /**
@@ -21775,11 +22109,11 @@ export declare namespace ApplicationCreateParams {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -22220,7 +22554,8 @@ export declare namespace ApplicationCreateParams {
                 allow_any_on_loopback?: boolean;
                 /**
                  * The URIs that are allowed as redirect URIs for dynamically registered clients.
-                 * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+                 * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+                 * must be explicitly configured and match exactly.
                  */
                 allowed_uris?: Array<string>;
                 /**
@@ -22252,6 +22587,10 @@ export declare namespace ApplicationCreateParams {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * The order of execution for this policy. Must be unique for each policy within an
              * app.
@@ -22305,7 +22644,7 @@ export declare namespace ApplicationCreateParams {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
         }
         namespace UnionMember2 {
             /**
@@ -22326,11 +22665,11 @@ export declare namespace ApplicationCreateParams {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -22554,6 +22893,10 @@ export declare namespace ApplicationCreateParams {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * The order of execution for this policy. Must be unique for each policy within an
              * app.
@@ -22607,7 +22950,7 @@ export declare namespace ApplicationCreateParams {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
         }
         namespace UnionMember2 {
             /**
@@ -22628,11 +22971,11 @@ export declare namespace ApplicationCreateParams {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -22719,6 +23062,10 @@ export declare namespace ApplicationCreateParams {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * The order of execution for this policy. Must be unique for each policy within an
              * app.
@@ -22772,7 +23119,7 @@ export declare namespace ApplicationCreateParams {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
         }
         namespace UnionMember2 {
             /**
@@ -22793,11 +23140,11 @@ export declare namespace ApplicationCreateParams {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -22884,6 +23231,10 @@ export declare namespace ApplicationCreateParams {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * The order of execution for this policy. Must be unique for each policy within an
              * app.
@@ -22937,7 +23288,7 @@ export declare namespace ApplicationCreateParams {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
         }
         namespace UnionMember2 {
             /**
@@ -22958,11 +23309,11 @@ export declare namespace ApplicationCreateParams {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -23058,6 +23409,10 @@ export declare namespace ApplicationCreateParams {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * The order of execution for this policy. Must be unique for each policy within an
              * app.
@@ -23111,7 +23466,7 @@ export declare namespace ApplicationCreateParams {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
         }
         namespace UnionMember2 {
             /**
@@ -23132,11 +23487,11 @@ export declare namespace ApplicationCreateParams {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -23213,6 +23568,10 @@ export declare namespace ApplicationCreateParams {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * The order of execution for this policy. Must be unique for each policy within an
              * app.
@@ -23266,7 +23625,7 @@ export declare namespace ApplicationCreateParams {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
         }
         namespace UnionMember2 {
             /**
@@ -23287,11 +23646,11 @@ export declare namespace ApplicationCreateParams {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -23334,6 +23693,11 @@ export declare namespace ApplicationCreateParams {
          * Account ID.
          */
         zone_id?: string;
+        /**
+         * Body param: Configures multi-factor authentication (MFA) settings for
+         * infrastructure applications.
+         */
+        mfa_config?: InfrastructureApplication.MfaConfig;
         /**
          * Body param: The name of the application.
          */
@@ -23361,6 +23725,27 @@ export declare namespace ApplicationCreateParams {
                 [key: string]: Array<string>;
             };
         }
+        /**
+         * Configures multi-factor authentication (MFA) settings for infrastructure
+         * applications.
+         */
+        interface MfaConfig {
+            /**
+             * Lists the MFA methods that users can authenticate with. For infrastructure
+             * applications, supported values are `piv_key` and `ssh_fido2_key`.
+             */
+            allowed_authenticators?: Array<'piv_key' | 'ssh_fido2_key'>;
+            /**
+             * Indicates whether to disable MFA for this resource. This option is available at
+             * the application and policy level.
+             */
+            mfa_disabled?: boolean;
+            /**
+             * Defines the duration of an MFA session. Must be in minutes (m) or hours (h).
+             * Minimum: 0m. Maximum: 720h (30 days). Examples: `5m` or `24h`.
+             */
+            session_duration?: string;
+        }
         interface Policy {
             /**
              * The action Access will take if a user matches this policy. Infrastructure
@@ -23432,9 +23817,9 @@ export declare namespace ApplicationCreateParams {
             interface MfaConfig {
                 /**
                  * Lists the MFA methods that users can authenticate with. For infrastructure
-                 * applications, only `piv_key` is supported.
+                 * applications, supported values are `piv_key` and `ssh_fido2_key`.
                  */
-                allowed_authenticators?: Array<'piv_key'>;
+                allowed_authenticators?: Array<'piv_key' | 'ssh_fido2_key'>;
                 /**
                  * Indicates whether to disable MFA for this resource. This option is available at
                  * the application and policy level.
@@ -23809,7 +24194,8 @@ export declare namespace ApplicationCreateParams {
                 allow_any_on_loopback?: boolean;
                 /**
                  * The URIs that are allowed as redirect URIs for dynamically registered clients.
-                 * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+                 * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+                 * must be explicitly configured and match exactly.
                  */
                 allowed_uris?: Array<string>;
                 /**
@@ -23841,6 +24227,10 @@ export declare namespace ApplicationCreateParams {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * The order of execution for this policy. Must be unique for each policy within an
              * app.
@@ -23894,7 +24284,7 @@ export declare namespace ApplicationCreateParams {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
         }
         namespace UnionMember2 {
             /**
@@ -23915,11 +24305,11 @@ export declare namespace ApplicationCreateParams {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -24270,7 +24660,8 @@ export declare namespace ApplicationCreateParams {
                 allow_any_on_loopback?: boolean;
                 /**
                  * The URIs that are allowed as redirect URIs for dynamically registered clients.
-                 * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+                 * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+                 * must be explicitly configured and match exactly.
                  */
                 allowed_uris?: Array<string>;
                 /**
@@ -24302,6 +24693,10 @@ export declare namespace ApplicationCreateParams {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * The order of execution for this policy. Must be unique for each policy within an
              * app.
@@ -24355,7 +24750,7 @@ export declare namespace ApplicationCreateParams {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
         }
         namespace UnionMember2 {
             /**
@@ -24376,11 +24771,11 @@ export declare namespace ApplicationCreateParams {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -24736,7 +25131,8 @@ export declare namespace ApplicationCreateParams {
                 allow_any_on_loopback?: boolean;
                 /**
                  * The URIs that are allowed as redirect URIs for dynamically registered clients.
-                 * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+                 * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+                 * must be explicitly configured and match exactly.
                  */
                 allowed_uris?: Array<string>;
                 /**
@@ -24768,6 +25164,10 @@ export declare namespace ApplicationCreateParams {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * The order of execution for this policy. Must be unique for each policy within an
              * app.
@@ -24821,7 +25221,7 @@ export declare namespace ApplicationCreateParams {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
         }
         namespace UnionMember2 {
             /**
@@ -24842,11 +25242,11 @@ export declare namespace ApplicationCreateParams {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -25290,7 +25690,8 @@ export declare namespace ApplicationUpdateParams {
                 allow_any_on_loopback?: boolean;
                 /**
                  * The URIs that are allowed as redirect URIs for dynamically registered clients.
-                 * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+                 * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+                 * must be explicitly configured and match exactly.
                  */
                 allowed_uris?: Array<string>;
                 /**
@@ -25322,6 +25723,10 @@ export declare namespace ApplicationUpdateParams {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * The order of execution for this policy. Must be unique for each policy within an
              * app.
@@ -25375,7 +25780,7 @@ export declare namespace ApplicationUpdateParams {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
         }
         namespace UnionMember2 {
             /**
@@ -25396,11 +25801,11 @@ export declare namespace ApplicationUpdateParams {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -25574,6 +25979,10 @@ export declare namespace ApplicationUpdateParams {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * The order of execution for this policy. Must be unique for each policy within an
              * app.
@@ -25627,7 +26036,7 @@ export declare namespace ApplicationUpdateParams {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
         }
         namespace UnionMember2 {
             /**
@@ -25648,11 +26057,11 @@ export declare namespace ApplicationUpdateParams {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -26093,7 +26502,8 @@ export declare namespace ApplicationUpdateParams {
                 allow_any_on_loopback?: boolean;
                 /**
                  * The URIs that are allowed as redirect URIs for dynamically registered clients.
-                 * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+                 * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+                 * must be explicitly configured and match exactly.
                  */
                 allowed_uris?: Array<string>;
                 /**
@@ -26125,6 +26535,10 @@ export declare namespace ApplicationUpdateParams {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * The order of execution for this policy. Must be unique for each policy within an
              * app.
@@ -26178,7 +26592,7 @@ export declare namespace ApplicationUpdateParams {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
         }
         namespace UnionMember2 {
             /**
@@ -26199,11 +26613,11 @@ export declare namespace ApplicationUpdateParams {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -26644,7 +27058,8 @@ export declare namespace ApplicationUpdateParams {
                 allow_any_on_loopback?: boolean;
                 /**
                  * The URIs that are allowed as redirect URIs for dynamically registered clients.
-                 * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+                 * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+                 * must be explicitly configured and match exactly.
                  */
                 allowed_uris?: Array<string>;
                 /**
@@ -26676,6 +27091,10 @@ export declare namespace ApplicationUpdateParams {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * The order of execution for this policy. Must be unique for each policy within an
              * app.
@@ -26729,7 +27148,7 @@ export declare namespace ApplicationUpdateParams {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
         }
         namespace UnionMember2 {
             /**
@@ -26750,11 +27169,11 @@ export declare namespace ApplicationUpdateParams {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -26978,6 +27397,10 @@ export declare namespace ApplicationUpdateParams {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * The order of execution for this policy. Must be unique for each policy within an
              * app.
@@ -27031,7 +27454,7 @@ export declare namespace ApplicationUpdateParams {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
         }
         namespace UnionMember2 {
             /**
@@ -27052,11 +27475,11 @@ export declare namespace ApplicationUpdateParams {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -27143,6 +27566,10 @@ export declare namespace ApplicationUpdateParams {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * The order of execution for this policy. Must be unique for each policy within an
              * app.
@@ -27196,7 +27623,7 @@ export declare namespace ApplicationUpdateParams {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
         }
         namespace UnionMember2 {
             /**
@@ -27217,11 +27644,11 @@ export declare namespace ApplicationUpdateParams {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -27308,6 +27735,10 @@ export declare namespace ApplicationUpdateParams {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * The order of execution for this policy. Must be unique for each policy within an
              * app.
@@ -27361,7 +27792,7 @@ export declare namespace ApplicationUpdateParams {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
         }
         namespace UnionMember2 {
             /**
@@ -27382,11 +27813,11 @@ export declare namespace ApplicationUpdateParams {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -27482,6 +27913,10 @@ export declare namespace ApplicationUpdateParams {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * The order of execution for this policy. Must be unique for each policy within an
              * app.
@@ -27535,7 +27970,7 @@ export declare namespace ApplicationUpdateParams {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
         }
         namespace UnionMember2 {
             /**
@@ -27556,11 +27991,11 @@ export declare namespace ApplicationUpdateParams {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -27637,6 +28072,10 @@ export declare namespace ApplicationUpdateParams {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * The order of execution for this policy. Must be unique for each policy within an
              * app.
@@ -27690,7 +28129,7 @@ export declare namespace ApplicationUpdateParams {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
         }
         namespace UnionMember2 {
             /**
@@ -27711,11 +28150,11 @@ export declare namespace ApplicationUpdateParams {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -27758,6 +28197,11 @@ export declare namespace ApplicationUpdateParams {
          * Account ID.
          */
         zone_id?: string;
+        /**
+         * Body param: Configures multi-factor authentication (MFA) settings for
+         * infrastructure applications.
+         */
+        mfa_config?: InfrastructureApplication.MfaConfig;
         /**
          * Body param: The name of the application.
          */
@@ -27785,6 +28229,27 @@ export declare namespace ApplicationUpdateParams {
                 [key: string]: Array<string>;
             };
         }
+        /**
+         * Configures multi-factor authentication (MFA) settings for infrastructure
+         * applications.
+         */
+        interface MfaConfig {
+            /**
+             * Lists the MFA methods that users can authenticate with. For infrastructure
+             * applications, supported values are `piv_key` and `ssh_fido2_key`.
+             */
+            allowed_authenticators?: Array<'piv_key' | 'ssh_fido2_key'>;
+            /**
+             * Indicates whether to disable MFA for this resource. This option is available at
+             * the application and policy level.
+             */
+            mfa_disabled?: boolean;
+            /**
+             * Defines the duration of an MFA session. Must be in minutes (m) or hours (h).
+             * Minimum: 0m. Maximum: 720h (30 days). Examples: `5m` or `24h`.
+             */
+            session_duration?: string;
+        }
         interface Policy {
             /**
              * The action Access will take if a user matches this policy. Infrastructure
@@ -27856,9 +28321,9 @@ export declare namespace ApplicationUpdateParams {
             interface MfaConfig {
                 /**
                  * Lists the MFA methods that users can authenticate with. For infrastructure
-                 * applications, only `piv_key` is supported.
+                 * applications, supported values are `piv_key` and `ssh_fido2_key`.
                  */
-                allowed_authenticators?: Array<'piv_key'>;
+                allowed_authenticators?: Array<'piv_key' | 'ssh_fido2_key'>;
                 /**
                  * Indicates whether to disable MFA for this resource. This option is available at
                  * the application and policy level.
@@ -28233,7 +28698,8 @@ export declare namespace ApplicationUpdateParams {
                 allow_any_on_loopback?: boolean;
                 /**
                  * The URIs that are allowed as redirect URIs for dynamically registered clients.
-                 * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+                 * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+                 * must be explicitly configured and match exactly.
                  */
                 allowed_uris?: Array<string>;
                 /**
@@ -28265,6 +28731,10 @@ export declare namespace ApplicationUpdateParams {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * The order of execution for this policy. Must be unique for each policy within an
              * app.
@@ -28318,7 +28788,7 @@ export declare namespace ApplicationUpdateParams {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
         }
         namespace UnionMember2 {
             /**
@@ -28339,11 +28809,11 @@ export declare namespace ApplicationUpdateParams {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -28694,7 +29164,8 @@ export declare namespace ApplicationUpdateParams {
                 allow_any_on_loopback?: boolean;
                 /**
                  * The URIs that are allowed as redirect URIs for dynamically registered clients.
-                 * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+                 * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+                 * must be explicitly configured and match exactly.
                  */
                 allowed_uris?: Array<string>;
                 /**
@@ -28726,6 +29197,10 @@ export declare namespace ApplicationUpdateParams {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * The order of execution for this policy. Must be unique for each policy within an
              * app.
@@ -28779,7 +29254,7 @@ export declare namespace ApplicationUpdateParams {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
         }
         namespace UnionMember2 {
             /**
@@ -28800,11 +29275,11 @@ export declare namespace ApplicationUpdateParams {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**
@@ -29160,7 +29635,8 @@ export declare namespace ApplicationUpdateParams {
                 allow_any_on_loopback?: boolean;
                 /**
                  * The URIs that are allowed as redirect URIs for dynamically registered clients.
-                 * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+                 * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+                 * must be explicitly configured and match exactly.
                  */
                 allowed_uris?: Array<string>;
                 /**
@@ -29192,6 +29668,10 @@ export declare namespace ApplicationUpdateParams {
              * The UUID of the policy
              */
             id?: string;
+            /**
+             * Identifier.
+             */
+            account_id?: string;
             /**
              * The order of execution for this policy. Must be unique for each policy within an
              * app.
@@ -29245,7 +29725,7 @@ export declare namespace ApplicationUpdateParams {
              * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
              * m, h.
              */
-            session_duration?: string;
+            session_duration?: string | null;
         }
         namespace UnionMember2 {
             /**
@@ -29266,11 +29746,11 @@ export declare namespace ApplicationUpdateParams {
                     /**
                      * Clipboard formats allowed when copying from local machine to remote RDP session.
                      */
-                    allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+                    allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
                     /**
                      * Clipboard formats allowed when copying from remote RDP session to local machine.
                      */
-                    allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+                    allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
                 }
             }
             /**