cloudflare 7.0.0 → 7.1.0

package/src/resources/zero-trust/access/applications/applications.ts

@@ -2605,7 +2605,7 @@ export interface ApplicationPolicy {
    * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
    * m, h.
    */
-  session_duration?: string;
+  session_duration?: string | null;
 
   updated_at?: string;
 }
@@ -2630,12 +2630,12 @@ export namespace ApplicationPolicy {
       /**
        * Clipboard formats allowed when copying from local machine to remote RDP session.
        */
-      allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+      allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
       /**
        * Clipboard formats allowed when copying from remote RDP session to local machine.
        */
-      allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+      allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
     }
   }
 
@@ -3998,7 +3998,8 @@ export namespace ApplicationCreateResponse {
 
         /**
          * The URIs that are allowed as redirect URIs for dynamically registered clients.
-         * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+         * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+         * must be explicitly configured and match exactly.
          */
         allowed_uris?: Array<string>;
 
@@ -4032,6 +4033,11 @@ export namespace ApplicationCreateResponse {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * Administrators who can approve a temporary authentication request.
        */
@@ -4113,7 +4119,7 @@ export namespace ApplicationCreateResponse {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
 
       updated_at?: string;
     }
@@ -4138,12 +4144,12 @@ export namespace ApplicationCreateResponse {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -4342,6 +4348,11 @@ export namespace ApplicationCreateResponse {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * Administrators who can approve a temporary authentication request.
        */
@@ -4423,7 +4434,7 @@ export namespace ApplicationCreateResponse {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
 
       updated_at?: string;
     }
@@ -4448,12 +4459,12 @@ export namespace ApplicationCreateResponse {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -4986,7 +4997,8 @@ export namespace ApplicationCreateResponse {
 
         /**
          * The URIs that are allowed as redirect URIs for dynamically registered clients.
-         * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+         * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+         * must be explicitly configured and match exactly.
          */
         allowed_uris?: Array<string>;
 
@@ -5020,6 +5032,11 @@ export namespace ApplicationCreateResponse {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * Administrators who can approve a temporary authentication request.
        */
@@ -5101,7 +5118,7 @@ export namespace ApplicationCreateResponse {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
 
       updated_at?: string;
     }
@@ -5126,12 +5143,12 @@ export namespace ApplicationCreateResponse {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -5664,7 +5681,8 @@ export namespace ApplicationCreateResponse {
 
         /**
          * The URIs that are allowed as redirect URIs for dynamically registered clients.
-         * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+         * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+         * must be explicitly configured and match exactly.
          */
         allowed_uris?: Array<string>;
 
@@ -5698,6 +5716,11 @@ export namespace ApplicationCreateResponse {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * Administrators who can approve a temporary authentication request.
        */
@@ -5779,7 +5802,7 @@ export namespace ApplicationCreateResponse {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
 
       updated_at?: string;
     }
@@ -5804,12 +5827,12 @@ export namespace ApplicationCreateResponse {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -6095,6 +6118,11 @@ export namespace ApplicationCreateResponse {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * Administrators who can approve a temporary authentication request.
        */
@@ -6176,7 +6204,7 @@ export namespace ApplicationCreateResponse {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
 
       updated_at?: string;
     }
@@ -6201,12 +6229,12 @@ export namespace ApplicationCreateResponse {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -6307,6 +6335,11 @@ export namespace ApplicationCreateResponse {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * Administrators who can approve a temporary authentication request.
        */
@@ -6388,7 +6421,7 @@ export namespace ApplicationCreateResponse {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
 
       updated_at?: string;
     }
@@ -6413,12 +6446,12 @@ export namespace ApplicationCreateResponse {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -6519,6 +6552,11 @@ export namespace ApplicationCreateResponse {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * Administrators who can approve a temporary authentication request.
        */
@@ -6600,7 +6638,7 @@ export namespace ApplicationCreateResponse {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
 
       updated_at?: string;
     }
@@ -6625,12 +6663,12 @@ export namespace ApplicationCreateResponse {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -6731,6 +6769,11 @@ export namespace ApplicationCreateResponse {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * Administrators who can approve a temporary authentication request.
        */
@@ -6812,7 +6855,7 @@ export namespace ApplicationCreateResponse {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
 
       updated_at?: string;
     }
@@ -6837,12 +6880,12 @@ export namespace ApplicationCreateResponse {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -6922,6 +6965,11 @@ export namespace ApplicationCreateResponse {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * Administrators who can approve a temporary authentication request.
        */
@@ -7003,7 +7051,7 @@ export namespace ApplicationCreateResponse {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
 
       updated_at?: string;
     }
@@ -7028,12 +7076,12 @@ export namespace ApplicationCreateResponse {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -7079,6 +7127,12 @@ export namespace ApplicationCreateResponse {
      */
     aud?: string;
 
+    /**
+     * Configures multi-factor authentication (MFA) settings for infrastructure
+     * applications.
+     */
+    mfa_config?: InfrastructureApplication.MfaConfig;
+
     /**
      * The name of the application.
      */
@@ -7106,6 +7160,30 @@ export namespace ApplicationCreateResponse {
       target_attributes: { [key: string]: Array<string> };
     }
 
+    /**
+     * Configures multi-factor authentication (MFA) settings for infrastructure
+     * applications.
+     */
+    export interface MfaConfig {
+      /**
+       * Lists the MFA methods that users can authenticate with. For infrastructure
+       * applications, supported values are `piv_key` and `ssh_fido2_key`.
+       */
+      allowed_authenticators?: Array<'piv_key' | 'ssh_fido2_key'>;
+
+      /**
+       * Indicates whether to disable MFA for this resource. This option is available at
+       * the application and policy level.
+       */
+      mfa_disabled?: boolean;
+
+      /**
+       * Defines the duration of an MFA session. Must be in minutes (m) or hours (h).
+       * Minimum: 0m. Maximum: 720h (30 days). Examples: `5m` or `24h`.
+       */
+      session_duration?: string;
+    }
+
     export interface Policy {
       /**
        * The UUID of the policy
@@ -7196,9 +7274,9 @@ export namespace ApplicationCreateResponse {
       export interface MfaConfig {
         /**
          * Lists the MFA methods that users can authenticate with. For infrastructure
-         * applications, only `piv_key` is supported.
+         * applications, supported values are `piv_key` and `ssh_fido2_key`.
          */
-        allowed_authenticators?: Array<'piv_key'>;
+        allowed_authenticators?: Array<'piv_key' | 'ssh_fido2_key'>;
 
         /**
          * Indicates whether to disable MFA for this resource. This option is available at
@@ -7627,7 +7705,8 @@ export namespace ApplicationCreateResponse {
 
         /**
          * The URIs that are allowed as redirect URIs for dynamically registered clients.
-         * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+         * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+         * must be explicitly configured and match exactly.
          */
         allowed_uris?: Array<string>;
 
@@ -7661,6 +7740,11 @@ export namespace ApplicationCreateResponse {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * Administrators who can approve a temporary authentication request.
        */
@@ -7742,7 +7826,7 @@ export namespace ApplicationCreateResponse {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
 
       updated_at?: string;
     }
@@ -7767,12 +7851,12 @@ export namespace ApplicationCreateResponse {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -8189,7 +8273,8 @@ export namespace ApplicationCreateResponse {
 
         /**
          * The URIs that are allowed as redirect URIs for dynamically registered clients.
-         * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+         * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+         * must be explicitly configured and match exactly.
          */
         allowed_uris?: Array<string>;
 
@@ -8223,6 +8308,11 @@ export namespace ApplicationCreateResponse {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * Administrators who can approve a temporary authentication request.
        */
@@ -8304,7 +8394,7 @@ export namespace ApplicationCreateResponse {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
 
       updated_at?: string;
     }
@@ -8329,12 +8419,12 @@ export namespace ApplicationCreateResponse {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -8757,7 +8847,8 @@ export namespace ApplicationCreateResponse {
 
         /**
          * The URIs that are allowed as redirect URIs for dynamically registered clients.
-         * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+         * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+         * must be explicitly configured and match exactly.
          */
         allowed_uris?: Array<string>;
 
@@ -8791,6 +8882,11 @@ export namespace ApplicationCreateResponse {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * Administrators who can approve a temporary authentication request.
        */
@@ -8872,7 +8968,7 @@ export namespace ApplicationCreateResponse {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
 
       updated_at?: string;
     }
@@ -8897,12 +8993,12 @@ export namespace ApplicationCreateResponse {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -9438,7 +9534,8 @@ export namespace ApplicationUpdateResponse {
 
         /**
          * The URIs that are allowed as redirect URIs for dynamically registered clients.
-         * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+         * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+         * must be explicitly configured and match exactly.
          */
         allowed_uris?: Array<string>;
 
@@ -9472,6 +9569,11 @@ export namespace ApplicationUpdateResponse {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * Administrators who can approve a temporary authentication request.
        */
@@ -9553,7 +9655,7 @@ export namespace ApplicationUpdateResponse {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
 
       updated_at?: string;
     }
@@ -9578,12 +9680,12 @@ export namespace ApplicationUpdateResponse {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -9782,6 +9884,11 @@ export namespace ApplicationUpdateResponse {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * Administrators who can approve a temporary authentication request.
        */
@@ -9863,7 +9970,7 @@ export namespace ApplicationUpdateResponse {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
 
       updated_at?: string;
     }
@@ -9888,12 +9995,12 @@ export namespace ApplicationUpdateResponse {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -10426,7 +10533,8 @@ export namespace ApplicationUpdateResponse {
 
         /**
          * The URIs that are allowed as redirect URIs for dynamically registered clients.
-         * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+         * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+         * must be explicitly configured and match exactly.
          */
         allowed_uris?: Array<string>;
 
@@ -10460,6 +10568,11 @@ export namespace ApplicationUpdateResponse {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * Administrators who can approve a temporary authentication request.
        */
@@ -10541,7 +10654,7 @@ export namespace ApplicationUpdateResponse {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
 
       updated_at?: string;
     }
@@ -10566,12 +10679,12 @@ export namespace ApplicationUpdateResponse {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -11104,7 +11217,8 @@ export namespace ApplicationUpdateResponse {
 
         /**
          * The URIs that are allowed as redirect URIs for dynamically registered clients.
-         * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+         * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+         * must be explicitly configured and match exactly.
          */
         allowed_uris?: Array<string>;
 
@@ -11138,6 +11252,11 @@ export namespace ApplicationUpdateResponse {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * Administrators who can approve a temporary authentication request.
        */
@@ -11219,7 +11338,7 @@ export namespace ApplicationUpdateResponse {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
 
       updated_at?: string;
     }
@@ -11244,12 +11363,12 @@ export namespace ApplicationUpdateResponse {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -11535,6 +11654,11 @@ export namespace ApplicationUpdateResponse {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * Administrators who can approve a temporary authentication request.
        */
@@ -11616,7 +11740,7 @@ export namespace ApplicationUpdateResponse {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
 
       updated_at?: string;
     }
@@ -11641,12 +11765,12 @@ export namespace ApplicationUpdateResponse {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -11747,6 +11871,11 @@ export namespace ApplicationUpdateResponse {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * Administrators who can approve a temporary authentication request.
        */
@@ -11828,7 +11957,7 @@ export namespace ApplicationUpdateResponse {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
 
       updated_at?: string;
     }
@@ -11853,12 +11982,12 @@ export namespace ApplicationUpdateResponse {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -11959,6 +12088,11 @@ export namespace ApplicationUpdateResponse {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * Administrators who can approve a temporary authentication request.
        */
@@ -12040,7 +12174,7 @@ export namespace ApplicationUpdateResponse {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
 
       updated_at?: string;
     }
@@ -12065,12 +12199,12 @@ export namespace ApplicationUpdateResponse {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -12171,6 +12305,11 @@ export namespace ApplicationUpdateResponse {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * Administrators who can approve a temporary authentication request.
        */
@@ -12252,7 +12391,7 @@ export namespace ApplicationUpdateResponse {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
 
       updated_at?: string;
     }
@@ -12277,12 +12416,12 @@ export namespace ApplicationUpdateResponse {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -12362,6 +12501,11 @@ export namespace ApplicationUpdateResponse {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * Administrators who can approve a temporary authentication request.
        */
@@ -12443,7 +12587,7 @@ export namespace ApplicationUpdateResponse {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
 
       updated_at?: string;
     }
@@ -12468,12 +12612,12 @@ export namespace ApplicationUpdateResponse {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -12519,6 +12663,12 @@ export namespace ApplicationUpdateResponse {
      */
     aud?: string;
 
+    /**
+     * Configures multi-factor authentication (MFA) settings for infrastructure
+     * applications.
+     */
+    mfa_config?: InfrastructureApplication.MfaConfig;
+
     /**
      * The name of the application.
      */
@@ -12546,6 +12696,30 @@ export namespace ApplicationUpdateResponse {
       target_attributes: { [key: string]: Array<string> };
     }
 
+    /**
+     * Configures multi-factor authentication (MFA) settings for infrastructure
+     * applications.
+     */
+    export interface MfaConfig {
+      /**
+       * Lists the MFA methods that users can authenticate with. For infrastructure
+       * applications, supported values are `piv_key` and `ssh_fido2_key`.
+       */
+      allowed_authenticators?: Array<'piv_key' | 'ssh_fido2_key'>;
+
+      /**
+       * Indicates whether to disable MFA for this resource. This option is available at
+       * the application and policy level.
+       */
+      mfa_disabled?: boolean;
+
+      /**
+       * Defines the duration of an MFA session. Must be in minutes (m) or hours (h).
+       * Minimum: 0m. Maximum: 720h (30 days). Examples: `5m` or `24h`.
+       */
+      session_duration?: string;
+    }
+
     export interface Policy {
       /**
        * The UUID of the policy
@@ -12636,9 +12810,9 @@ export namespace ApplicationUpdateResponse {
       export interface MfaConfig {
         /**
          * Lists the MFA methods that users can authenticate with. For infrastructure
-         * applications, only `piv_key` is supported.
+         * applications, supported values are `piv_key` and `ssh_fido2_key`.
          */
-        allowed_authenticators?: Array<'piv_key'>;
+        allowed_authenticators?: Array<'piv_key' | 'ssh_fido2_key'>;
 
         /**
          * Indicates whether to disable MFA for this resource. This option is available at
@@ -13067,7 +13241,8 @@ export namespace ApplicationUpdateResponse {
 
         /**
          * The URIs that are allowed as redirect URIs for dynamically registered clients.
-         * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+         * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+         * must be explicitly configured and match exactly.
          */
         allowed_uris?: Array<string>;
 
@@ -13101,6 +13276,11 @@ export namespace ApplicationUpdateResponse {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * Administrators who can approve a temporary authentication request.
        */
@@ -13182,7 +13362,7 @@ export namespace ApplicationUpdateResponse {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
 
       updated_at?: string;
     }
@@ -13207,12 +13387,12 @@ export namespace ApplicationUpdateResponse {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -13629,7 +13809,8 @@ export namespace ApplicationUpdateResponse {
 
         /**
          * The URIs that are allowed as redirect URIs for dynamically registered clients.
-         * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+         * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+         * must be explicitly configured and match exactly.
          */
         allowed_uris?: Array<string>;
 
@@ -13663,6 +13844,11 @@ export namespace ApplicationUpdateResponse {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * Administrators who can approve a temporary authentication request.
        */
@@ -13744,7 +13930,7 @@ export namespace ApplicationUpdateResponse {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
 
       updated_at?: string;
     }
@@ -13769,12 +13955,12 @@ export namespace ApplicationUpdateResponse {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -14197,7 +14383,8 @@ export namespace ApplicationUpdateResponse {
 
         /**
          * The URIs that are allowed as redirect URIs for dynamically registered clients.
-         * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+         * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+         * must be explicitly configured and match exactly.
          */
         allowed_uris?: Array<string>;
 
@@ -14231,6 +14418,11 @@ export namespace ApplicationUpdateResponse {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * Administrators who can approve a temporary authentication request.
        */
@@ -14312,7 +14504,7 @@ export namespace ApplicationUpdateResponse {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
 
       updated_at?: string;
     }
@@ -14337,12 +14529,12 @@ export namespace ApplicationUpdateResponse {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -14878,7 +15070,8 @@ export namespace ApplicationListResponse {
 
         /**
          * The URIs that are allowed as redirect URIs for dynamically registered clients.
-         * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+         * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+         * must be explicitly configured and match exactly.
          */
         allowed_uris?: Array<string>;
 
@@ -14912,6 +15105,11 @@ export namespace ApplicationListResponse {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * Administrators who can approve a temporary authentication request.
        */
@@ -14993,7 +15191,7 @@ export namespace ApplicationListResponse {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
 
       updated_at?: string;
     }
@@ -15018,12 +15216,12 @@ export namespace ApplicationListResponse {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -15222,6 +15420,11 @@ export namespace ApplicationListResponse {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * Administrators who can approve a temporary authentication request.
        */
@@ -15303,7 +15506,7 @@ export namespace ApplicationListResponse {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
 
       updated_at?: string;
     }
@@ -15328,12 +15531,12 @@ export namespace ApplicationListResponse {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -15866,7 +16069,8 @@ export namespace ApplicationListResponse {
 
         /**
          * The URIs that are allowed as redirect URIs for dynamically registered clients.
-         * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+         * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+         * must be explicitly configured and match exactly.
          */
         allowed_uris?: Array<string>;
 
@@ -15900,6 +16104,11 @@ export namespace ApplicationListResponse {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * Administrators who can approve a temporary authentication request.
        */
@@ -15981,7 +16190,7 @@ export namespace ApplicationListResponse {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
 
       updated_at?: string;
     }
@@ -16006,12 +16215,12 @@ export namespace ApplicationListResponse {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -16544,7 +16753,8 @@ export namespace ApplicationListResponse {
 
         /**
          * The URIs that are allowed as redirect URIs for dynamically registered clients.
-         * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+         * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+         * must be explicitly configured and match exactly.
          */
         allowed_uris?: Array<string>;
 
@@ -16578,6 +16788,11 @@ export namespace ApplicationListResponse {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * Administrators who can approve a temporary authentication request.
        */
@@ -16659,7 +16874,7 @@ export namespace ApplicationListResponse {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
 
       updated_at?: string;
     }
@@ -16684,12 +16899,12 @@ export namespace ApplicationListResponse {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -16975,6 +17190,11 @@ export namespace ApplicationListResponse {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * Administrators who can approve a temporary authentication request.
        */
@@ -17056,7 +17276,7 @@ export namespace ApplicationListResponse {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
 
       updated_at?: string;
     }
@@ -17081,12 +17301,12 @@ export namespace ApplicationListResponse {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -17187,6 +17407,11 @@ export namespace ApplicationListResponse {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * Administrators who can approve a temporary authentication request.
        */
@@ -17268,7 +17493,7 @@ export namespace ApplicationListResponse {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
 
       updated_at?: string;
     }
@@ -17293,12 +17518,12 @@ export namespace ApplicationListResponse {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -17399,6 +17624,11 @@ export namespace ApplicationListResponse {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * Administrators who can approve a temporary authentication request.
        */
@@ -17480,7 +17710,7 @@ export namespace ApplicationListResponse {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
 
       updated_at?: string;
     }
@@ -17505,12 +17735,12 @@ export namespace ApplicationListResponse {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -17611,6 +17841,11 @@ export namespace ApplicationListResponse {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * Administrators who can approve a temporary authentication request.
        */
@@ -17692,7 +17927,7 @@ export namespace ApplicationListResponse {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
 
       updated_at?: string;
     }
@@ -17717,12 +17952,12 @@ export namespace ApplicationListResponse {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -17802,6 +18037,11 @@ export namespace ApplicationListResponse {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * Administrators who can approve a temporary authentication request.
        */
@@ -17883,7 +18123,7 @@ export namespace ApplicationListResponse {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
 
       updated_at?: string;
     }
@@ -17908,12 +18148,12 @@ export namespace ApplicationListResponse {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -17959,6 +18199,12 @@ export namespace ApplicationListResponse {
      */
     aud?: string;
 
+    /**
+     * Configures multi-factor authentication (MFA) settings for infrastructure
+     * applications.
+     */
+    mfa_config?: InfrastructureApplication.MfaConfig;
+
     /**
      * The name of the application.
      */
@@ -17986,6 +18232,30 @@ export namespace ApplicationListResponse {
       target_attributes: { [key: string]: Array<string> };
     }
 
+    /**
+     * Configures multi-factor authentication (MFA) settings for infrastructure
+     * applications.
+     */
+    export interface MfaConfig {
+      /**
+       * Lists the MFA methods that users can authenticate with. For infrastructure
+       * applications, supported values are `piv_key` and `ssh_fido2_key`.
+       */
+      allowed_authenticators?: Array<'piv_key' | 'ssh_fido2_key'>;
+
+      /**
+       * Indicates whether to disable MFA for this resource. This option is available at
+       * the application and policy level.
+       */
+      mfa_disabled?: boolean;
+
+      /**
+       * Defines the duration of an MFA session. Must be in minutes (m) or hours (h).
+       * Minimum: 0m. Maximum: 720h (30 days). Examples: `5m` or `24h`.
+       */
+      session_duration?: string;
+    }
+
     export interface Policy {
       /**
        * The UUID of the policy
@@ -18076,9 +18346,9 @@ export namespace ApplicationListResponse {
       export interface MfaConfig {
         /**
          * Lists the MFA methods that users can authenticate with. For infrastructure
-         * applications, only `piv_key` is supported.
+         * applications, supported values are `piv_key` and `ssh_fido2_key`.
          */
-        allowed_authenticators?: Array<'piv_key'>;
+        allowed_authenticators?: Array<'piv_key' | 'ssh_fido2_key'>;
 
         /**
          * Indicates whether to disable MFA for this resource. This option is available at
@@ -18507,7 +18777,8 @@ export namespace ApplicationListResponse {
 
         /**
          * The URIs that are allowed as redirect URIs for dynamically registered clients.
-         * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+         * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+         * must be explicitly configured and match exactly.
          */
         allowed_uris?: Array<string>;
 
@@ -18541,6 +18812,11 @@ export namespace ApplicationListResponse {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * Administrators who can approve a temporary authentication request.
        */
@@ -18622,7 +18898,7 @@ export namespace ApplicationListResponse {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
 
       updated_at?: string;
     }
@@ -18647,12 +18923,12 @@ export namespace ApplicationListResponse {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -19069,7 +19345,8 @@ export namespace ApplicationListResponse {
 
         /**
          * The URIs that are allowed as redirect URIs for dynamically registered clients.
-         * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+         * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+         * must be explicitly configured and match exactly.
          */
         allowed_uris?: Array<string>;
 
@@ -19103,6 +19380,11 @@ export namespace ApplicationListResponse {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * Administrators who can approve a temporary authentication request.
        */
@@ -19184,7 +19466,7 @@ export namespace ApplicationListResponse {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
 
       updated_at?: string;
     }
@@ -19209,12 +19491,12 @@ export namespace ApplicationListResponse {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -19637,7 +19919,8 @@ export namespace ApplicationListResponse {
 
         /**
          * The URIs that are allowed as redirect URIs for dynamically registered clients.
-         * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+         * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+         * must be explicitly configured and match exactly.
          */
         allowed_uris?: Array<string>;
 
@@ -19671,6 +19954,11 @@ export namespace ApplicationListResponse {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * Administrators who can approve a temporary authentication request.
        */
@@ -19752,7 +20040,7 @@ export namespace ApplicationListResponse {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
 
       updated_at?: string;
     }
@@ -19777,12 +20065,12 @@ export namespace ApplicationListResponse {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -20325,7 +20613,8 @@ export namespace ApplicationGetResponse {
 
         /**
          * The URIs that are allowed as redirect URIs for dynamically registered clients.
-         * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+         * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+         * must be explicitly configured and match exactly.
          */
         allowed_uris?: Array<string>;
 
@@ -20359,6 +20648,11 @@ export namespace ApplicationGetResponse {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * Administrators who can approve a temporary authentication request.
        */
@@ -20440,7 +20734,7 @@ export namespace ApplicationGetResponse {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
 
       updated_at?: string;
     }
@@ -20465,12 +20759,12 @@ export namespace ApplicationGetResponse {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -20669,6 +20963,11 @@ export namespace ApplicationGetResponse {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * Administrators who can approve a temporary authentication request.
        */
@@ -20750,7 +21049,7 @@ export namespace ApplicationGetResponse {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
 
       updated_at?: string;
     }
@@ -20775,12 +21074,12 @@ export namespace ApplicationGetResponse {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -21313,7 +21612,8 @@ export namespace ApplicationGetResponse {
 
         /**
          * The URIs that are allowed as redirect URIs for dynamically registered clients.
-         * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+         * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+         * must be explicitly configured and match exactly.
          */
         allowed_uris?: Array<string>;
 
@@ -21347,6 +21647,11 @@ export namespace ApplicationGetResponse {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * Administrators who can approve a temporary authentication request.
        */
@@ -21428,7 +21733,7 @@ export namespace ApplicationGetResponse {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
 
       updated_at?: string;
     }
@@ -21453,12 +21758,12 @@ export namespace ApplicationGetResponse {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -21991,7 +22296,8 @@ export namespace ApplicationGetResponse {
 
         /**
          * The URIs that are allowed as redirect URIs for dynamically registered clients.
-         * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+         * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+         * must be explicitly configured and match exactly.
          */
         allowed_uris?: Array<string>;
 
@@ -22025,6 +22331,11 @@ export namespace ApplicationGetResponse {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * Administrators who can approve a temporary authentication request.
        */
@@ -22106,7 +22417,7 @@ export namespace ApplicationGetResponse {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
 
       updated_at?: string;
     }
@@ -22131,12 +22442,12 @@ export namespace ApplicationGetResponse {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -22422,6 +22733,11 @@ export namespace ApplicationGetResponse {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * Administrators who can approve a temporary authentication request.
        */
@@ -22503,7 +22819,7 @@ export namespace ApplicationGetResponse {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
 
       updated_at?: string;
     }
@@ -22528,12 +22844,12 @@ export namespace ApplicationGetResponse {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -22634,6 +22950,11 @@ export namespace ApplicationGetResponse {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * Administrators who can approve a temporary authentication request.
        */
@@ -22715,7 +23036,7 @@ export namespace ApplicationGetResponse {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
 
       updated_at?: string;
     }
@@ -22740,12 +23061,12 @@ export namespace ApplicationGetResponse {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -22846,6 +23167,11 @@ export namespace ApplicationGetResponse {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * Administrators who can approve a temporary authentication request.
        */
@@ -22927,7 +23253,7 @@ export namespace ApplicationGetResponse {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
 
       updated_at?: string;
     }
@@ -22952,12 +23278,12 @@ export namespace ApplicationGetResponse {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -23058,6 +23384,11 @@ export namespace ApplicationGetResponse {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * Administrators who can approve a temporary authentication request.
        */
@@ -23139,7 +23470,7 @@ export namespace ApplicationGetResponse {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
 
       updated_at?: string;
     }
@@ -23164,12 +23495,12 @@ export namespace ApplicationGetResponse {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -23249,6 +23580,11 @@ export namespace ApplicationGetResponse {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * Administrators who can approve a temporary authentication request.
        */
@@ -23330,7 +23666,7 @@ export namespace ApplicationGetResponse {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
 
       updated_at?: string;
     }
@@ -23355,12 +23691,12 @@ export namespace ApplicationGetResponse {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -23406,6 +23742,12 @@ export namespace ApplicationGetResponse {
      */
     aud?: string;
 
+    /**
+     * Configures multi-factor authentication (MFA) settings for infrastructure
+     * applications.
+     */
+    mfa_config?: InfrastructureApplication.MfaConfig;
+
     /**
      * The name of the application.
      */
@@ -23433,6 +23775,30 @@ export namespace ApplicationGetResponse {
       target_attributes: { [key: string]: Array<string> };
     }
 
+    /**
+     * Configures multi-factor authentication (MFA) settings for infrastructure
+     * applications.
+     */
+    export interface MfaConfig {
+      /**
+       * Lists the MFA methods that users can authenticate with. For infrastructure
+       * applications, supported values are `piv_key` and `ssh_fido2_key`.
+       */
+      allowed_authenticators?: Array<'piv_key' | 'ssh_fido2_key'>;
+
+      /**
+       * Indicates whether to disable MFA for this resource. This option is available at
+       * the application and policy level.
+       */
+      mfa_disabled?: boolean;
+
+      /**
+       * Defines the duration of an MFA session. Must be in minutes (m) or hours (h).
+       * Minimum: 0m. Maximum: 720h (30 days). Examples: `5m` or `24h`.
+       */
+      session_duration?: string;
+    }
+
     export interface Policy {
       /**
        * The UUID of the policy
@@ -23523,9 +23889,9 @@ export namespace ApplicationGetResponse {
       export interface MfaConfig {
         /**
          * Lists the MFA methods that users can authenticate with. For infrastructure
-         * applications, only `piv_key` is supported.
+         * applications, supported values are `piv_key` and `ssh_fido2_key`.
          */
-        allowed_authenticators?: Array<'piv_key'>;
+        allowed_authenticators?: Array<'piv_key' | 'ssh_fido2_key'>;
 
         /**
          * Indicates whether to disable MFA for this resource. This option is available at
@@ -23954,7 +24320,8 @@ export namespace ApplicationGetResponse {
 
         /**
          * The URIs that are allowed as redirect URIs for dynamically registered clients.
-         * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+         * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+         * must be explicitly configured and match exactly.
          */
         allowed_uris?: Array<string>;
 
@@ -23988,6 +24355,11 @@ export namespace ApplicationGetResponse {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * Administrators who can approve a temporary authentication request.
        */
@@ -24069,7 +24441,7 @@ export namespace ApplicationGetResponse {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
 
       updated_at?: string;
     }
@@ -24094,12 +24466,12 @@ export namespace ApplicationGetResponse {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -24516,7 +24888,8 @@ export namespace ApplicationGetResponse {
 
         /**
          * The URIs that are allowed as redirect URIs for dynamically registered clients.
-         * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+         * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+         * must be explicitly configured and match exactly.
          */
         allowed_uris?: Array<string>;
 
@@ -24550,6 +24923,11 @@ export namespace ApplicationGetResponse {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * Administrators who can approve a temporary authentication request.
        */
@@ -24631,7 +25009,7 @@ export namespace ApplicationGetResponse {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
 
       updated_at?: string;
     }
@@ -24656,12 +25034,12 @@ export namespace ApplicationGetResponse {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -25084,7 +25462,8 @@ export namespace ApplicationGetResponse {
 
         /**
          * The URIs that are allowed as redirect URIs for dynamically registered clients.
-         * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+         * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+         * must be explicitly configured and match exactly.
          */
         allowed_uris?: Array<string>;
 
@@ -25118,6 +25497,11 @@ export namespace ApplicationGetResponse {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * Administrators who can approve a temporary authentication request.
        */
@@ -25199,7 +25583,7 @@ export namespace ApplicationGetResponse {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
 
       updated_at?: string;
     }
@@ -25224,12 +25608,12 @@ export namespace ApplicationGetResponse {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -25781,7 +26165,8 @@ export declare namespace ApplicationCreateParams {
 
         /**
          * The URIs that are allowed as redirect URIs for dynamically registered clients.
-         * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+         * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+         * must be explicitly configured and match exactly.
          */
         allowed_uris?: Array<string>;
 
@@ -25818,6 +26203,11 @@ export declare namespace ApplicationCreateParams {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * The order of execution for this policy. Must be unique for each policy within an
        * app.
@@ -25881,7 +26271,7 @@ export declare namespace ApplicationCreateParams {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
     }
 
     export namespace UnionMember2 {
@@ -25904,12 +26294,12 @@ export declare namespace ApplicationCreateParams {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -26123,6 +26513,11 @@ export declare namespace ApplicationCreateParams {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * The order of execution for this policy. Must be unique for each policy within an
        * app.
@@ -26186,7 +26581,7 @@ export declare namespace ApplicationCreateParams {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
     }
 
     export namespace UnionMember2 {
@@ -26209,12 +26604,12 @@ export declare namespace ApplicationCreateParams {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -26761,7 +27156,8 @@ export declare namespace ApplicationCreateParams {
 
         /**
          * The URIs that are allowed as redirect URIs for dynamically registered clients.
-         * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+         * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+         * must be explicitly configured and match exactly.
          */
         allowed_uris?: Array<string>;
 
@@ -26798,6 +27194,11 @@ export declare namespace ApplicationCreateParams {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * The order of execution for this policy. Must be unique for each policy within an
        * app.
@@ -26861,7 +27262,7 @@ export declare namespace ApplicationCreateParams {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
     }
 
     export namespace UnionMember2 {
@@ -26884,12 +27285,12 @@ export declare namespace ApplicationCreateParams {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -27436,7 +27837,8 @@ export declare namespace ApplicationCreateParams {
 
         /**
          * The URIs that are allowed as redirect URIs for dynamically registered clients.
-         * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+         * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+         * must be explicitly configured and match exactly.
          */
         allowed_uris?: Array<string>;
 
@@ -27473,6 +27875,11 @@ export declare namespace ApplicationCreateParams {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * The order of execution for this policy. Must be unique for each policy within an
        * app.
@@ -27536,7 +27943,7 @@ export declare namespace ApplicationCreateParams {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
     }
 
     export namespace UnionMember2 {
@@ -27559,12 +27966,12 @@ export declare namespace ApplicationCreateParams {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -27854,6 +28261,11 @@ export declare namespace ApplicationCreateParams {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * The order of execution for this policy. Must be unique for each policy within an
        * app.
@@ -27917,7 +28329,7 @@ export declare namespace ApplicationCreateParams {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
     }
 
     export namespace UnionMember2 {
@@ -27940,12 +28352,12 @@ export declare namespace ApplicationCreateParams {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -28051,6 +28463,11 @@ export declare namespace ApplicationCreateParams {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * The order of execution for this policy. Must be unique for each policy within an
        * app.
@@ -28114,7 +28531,7 @@ export declare namespace ApplicationCreateParams {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
     }
 
     export namespace UnionMember2 {
@@ -28137,12 +28554,12 @@ export declare namespace ApplicationCreateParams {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -28248,6 +28665,11 @@ export declare namespace ApplicationCreateParams {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * The order of execution for this policy. Must be unique for each policy within an
        * app.
@@ -28311,7 +28733,7 @@ export declare namespace ApplicationCreateParams {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
     }
 
     export namespace UnionMember2 {
@@ -28334,12 +28756,12 @@ export declare namespace ApplicationCreateParams {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -28456,6 +28878,11 @@ export declare namespace ApplicationCreateParams {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * The order of execution for this policy. Must be unique for each policy within an
        * app.
@@ -28519,7 +28946,7 @@ export declare namespace ApplicationCreateParams {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
     }
 
     export namespace UnionMember2 {
@@ -28542,12 +28969,12 @@ export declare namespace ApplicationCreateParams {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -28638,6 +29065,11 @@ export declare namespace ApplicationCreateParams {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * The order of execution for this policy. Must be unique for each policy within an
        * app.
@@ -28701,7 +29133,7 @@ export declare namespace ApplicationCreateParams {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
     }
 
     export namespace UnionMember2 {
@@ -28724,12 +29156,12 @@ export declare namespace ApplicationCreateParams {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -28780,6 +29212,12 @@ export declare namespace ApplicationCreateParams {
      */
     zone_id?: string;
 
+    /**
+     * Body param: Configures multi-factor authentication (MFA) settings for
+     * infrastructure applications.
+     */
+    mfa_config?: InfrastructureApplication.MfaConfig;
+
     /**
      * Body param: The name of the application.
      */
@@ -28810,6 +29248,30 @@ export declare namespace ApplicationCreateParams {
       target_attributes: { [key: string]: Array<string> };
     }
 
+    /**
+     * Configures multi-factor authentication (MFA) settings for infrastructure
+     * applications.
+     */
+    export interface MfaConfig {
+      /**
+       * Lists the MFA methods that users can authenticate with. For infrastructure
+       * applications, supported values are `piv_key` and `ssh_fido2_key`.
+       */
+      allowed_authenticators?: Array<'piv_key' | 'ssh_fido2_key'>;
+
+      /**
+       * Indicates whether to disable MFA for this resource. This option is available at
+       * the application and policy level.
+       */
+      mfa_disabled?: boolean;
+
+      /**
+       * Defines the duration of an MFA session. Must be in minutes (m) or hours (h).
+       * Minimum: 0m. Maximum: 720h (30 days). Examples: `5m` or `24h`.
+       */
+      session_duration?: string;
+    }
+
     export interface Policy {
       /**
        * The action Access will take if a user matches this policy. Infrastructure
@@ -28891,9 +29353,9 @@ export declare namespace ApplicationCreateParams {
       export interface MfaConfig {
         /**
          * Lists the MFA methods that users can authenticate with. For infrastructure
-         * applications, only `piv_key` is supported.
+         * applications, supported values are `piv_key` and `ssh_fido2_key`.
          */
-        allowed_authenticators?: Array<'piv_key'>;
+        allowed_authenticators?: Array<'piv_key' | 'ssh_fido2_key'>;
 
         /**
          * Indicates whether to disable MFA for this resource. This option is available at
@@ -29339,7 +29801,8 @@ export declare namespace ApplicationCreateParams {
 
         /**
          * The URIs that are allowed as redirect URIs for dynamically registered clients.
-         * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+         * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+         * must be explicitly configured and match exactly.
          */
         allowed_uris?: Array<string>;
 
@@ -29376,6 +29839,11 @@ export declare namespace ApplicationCreateParams {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * The order of execution for this policy. Must be unique for each policy within an
        * app.
@@ -29439,7 +29907,7 @@ export declare namespace ApplicationCreateParams {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
     }
 
     export namespace UnionMember2 {
@@ -29462,12 +29930,12 @@ export declare namespace ApplicationCreateParams {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -29894,7 +30362,8 @@ export declare namespace ApplicationCreateParams {
 
         /**
          * The URIs that are allowed as redirect URIs for dynamically registered clients.
-         * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+         * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+         * must be explicitly configured and match exactly.
          */
         allowed_uris?: Array<string>;
 
@@ -29931,6 +30400,11 @@ export declare namespace ApplicationCreateParams {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * The order of execution for this policy. Must be unique for each policy within an
        * app.
@@ -29994,7 +30468,7 @@ export declare namespace ApplicationCreateParams {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
     }
 
     export namespace UnionMember2 {
@@ -30017,12 +30491,12 @@ export declare namespace ApplicationCreateParams {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -30457,7 +30931,8 @@ export declare namespace ApplicationCreateParams {
 
         /**
          * The URIs that are allowed as redirect URIs for dynamically registered clients.
-         * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+         * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+         * must be explicitly configured and match exactly.
          */
         allowed_uris?: Array<string>;
 
@@ -30494,6 +30969,11 @@ export declare namespace ApplicationCreateParams {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * The order of execution for this policy. Must be unique for each policy within an
        * app.
@@ -30557,7 +31037,7 @@ export declare namespace ApplicationCreateParams {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
     }
 
     export namespace UnionMember2 {
@@ -30580,12 +31060,12 @@ export declare namespace ApplicationCreateParams {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -31135,7 +31615,8 @@ export declare namespace ApplicationUpdateParams {
 
         /**
          * The URIs that are allowed as redirect URIs for dynamically registered clients.
-         * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+         * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+         * must be explicitly configured and match exactly.
          */
         allowed_uris?: Array<string>;
 
@@ -31172,6 +31653,11 @@ export declare namespace ApplicationUpdateParams {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * The order of execution for this policy. Must be unique for each policy within an
        * app.
@@ -31235,7 +31721,7 @@ export declare namespace ApplicationUpdateParams {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
     }
 
     export namespace UnionMember2 {
@@ -31258,12 +31744,12 @@ export declare namespace ApplicationUpdateParams {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -31477,6 +31963,11 @@ export declare namespace ApplicationUpdateParams {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * The order of execution for this policy. Must be unique for each policy within an
        * app.
@@ -31540,7 +32031,7 @@ export declare namespace ApplicationUpdateParams {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
     }
 
     export namespace UnionMember2 {
@@ -31563,12 +32054,12 @@ export declare namespace ApplicationUpdateParams {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -32115,7 +32606,8 @@ export declare namespace ApplicationUpdateParams {
 
         /**
          * The URIs that are allowed as redirect URIs for dynamically registered clients.
-         * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+         * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+         * must be explicitly configured and match exactly.
          */
         allowed_uris?: Array<string>;
 
@@ -32152,6 +32644,11 @@ export declare namespace ApplicationUpdateParams {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * The order of execution for this policy. Must be unique for each policy within an
        * app.
@@ -32215,7 +32712,7 @@ export declare namespace ApplicationUpdateParams {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
     }
 
     export namespace UnionMember2 {
@@ -32238,12 +32735,12 @@ export declare namespace ApplicationUpdateParams {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -32790,7 +33287,8 @@ export declare namespace ApplicationUpdateParams {
 
         /**
          * The URIs that are allowed as redirect URIs for dynamically registered clients.
-         * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+         * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+         * must be explicitly configured and match exactly.
          */
         allowed_uris?: Array<string>;
 
@@ -32827,6 +33325,11 @@ export declare namespace ApplicationUpdateParams {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * The order of execution for this policy. Must be unique for each policy within an
        * app.
@@ -32890,7 +33393,7 @@ export declare namespace ApplicationUpdateParams {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
     }
 
     export namespace UnionMember2 {
@@ -32913,12 +33416,12 @@ export declare namespace ApplicationUpdateParams {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -33208,6 +33711,11 @@ export declare namespace ApplicationUpdateParams {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * The order of execution for this policy. Must be unique for each policy within an
        * app.
@@ -33271,7 +33779,7 @@ export declare namespace ApplicationUpdateParams {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
     }
 
     export namespace UnionMember2 {
@@ -33294,12 +33802,12 @@ export declare namespace ApplicationUpdateParams {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -33405,6 +33913,11 @@ export declare namespace ApplicationUpdateParams {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * The order of execution for this policy. Must be unique for each policy within an
        * app.
@@ -33468,7 +33981,7 @@ export declare namespace ApplicationUpdateParams {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
     }
 
     export namespace UnionMember2 {
@@ -33491,12 +34004,12 @@ export declare namespace ApplicationUpdateParams {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -33602,6 +34115,11 @@ export declare namespace ApplicationUpdateParams {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * The order of execution for this policy. Must be unique for each policy within an
        * app.
@@ -33665,7 +34183,7 @@ export declare namespace ApplicationUpdateParams {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
     }
 
     export namespace UnionMember2 {
@@ -33688,12 +34206,12 @@ export declare namespace ApplicationUpdateParams {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -33810,6 +34328,11 @@ export declare namespace ApplicationUpdateParams {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * The order of execution for this policy. Must be unique for each policy within an
        * app.
@@ -33873,7 +34396,7 @@ export declare namespace ApplicationUpdateParams {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
     }
 
     export namespace UnionMember2 {
@@ -33896,12 +34419,12 @@ export declare namespace ApplicationUpdateParams {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -33992,6 +34515,11 @@ export declare namespace ApplicationUpdateParams {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * The order of execution for this policy. Must be unique for each policy within an
        * app.
@@ -34055,7 +34583,7 @@ export declare namespace ApplicationUpdateParams {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
     }
 
     export namespace UnionMember2 {
@@ -34078,12 +34606,12 @@ export declare namespace ApplicationUpdateParams {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -34134,6 +34662,12 @@ export declare namespace ApplicationUpdateParams {
      */
     zone_id?: string;
 
+    /**
+     * Body param: Configures multi-factor authentication (MFA) settings for
+     * infrastructure applications.
+     */
+    mfa_config?: InfrastructureApplication.MfaConfig;
+
     /**
      * Body param: The name of the application.
      */
@@ -34164,6 +34698,30 @@ export declare namespace ApplicationUpdateParams {
       target_attributes: { [key: string]: Array<string> };
     }
 
+    /**
+     * Configures multi-factor authentication (MFA) settings for infrastructure
+     * applications.
+     */
+    export interface MfaConfig {
+      /**
+       * Lists the MFA methods that users can authenticate with. For infrastructure
+       * applications, supported values are `piv_key` and `ssh_fido2_key`.
+       */
+      allowed_authenticators?: Array<'piv_key' | 'ssh_fido2_key'>;
+
+      /**
+       * Indicates whether to disable MFA for this resource. This option is available at
+       * the application and policy level.
+       */
+      mfa_disabled?: boolean;
+
+      /**
+       * Defines the duration of an MFA session. Must be in minutes (m) or hours (h).
+       * Minimum: 0m. Maximum: 720h (30 days). Examples: `5m` or `24h`.
+       */
+      session_duration?: string;
+    }
+
     export interface Policy {
       /**
        * The action Access will take if a user matches this policy. Infrastructure
@@ -34245,9 +34803,9 @@ export declare namespace ApplicationUpdateParams {
       export interface MfaConfig {
         /**
          * Lists the MFA methods that users can authenticate with. For infrastructure
-         * applications, only `piv_key` is supported.
+         * applications, supported values are `piv_key` and `ssh_fido2_key`.
          */
-        allowed_authenticators?: Array<'piv_key'>;
+        allowed_authenticators?: Array<'piv_key' | 'ssh_fido2_key'>;
 
         /**
          * Indicates whether to disable MFA for this resource. This option is available at
@@ -34693,7 +35251,8 @@ export declare namespace ApplicationUpdateParams {
 
         /**
          * The URIs that are allowed as redirect URIs for dynamically registered clients.
-         * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+         * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+         * must be explicitly configured and match exactly.
          */
         allowed_uris?: Array<string>;
 
@@ -34730,6 +35289,11 @@ export declare namespace ApplicationUpdateParams {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * The order of execution for this policy. Must be unique for each policy within an
        * app.
@@ -34793,7 +35357,7 @@ export declare namespace ApplicationUpdateParams {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
     }
 
     export namespace UnionMember2 {
@@ -34816,12 +35380,12 @@ export declare namespace ApplicationUpdateParams {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -35248,7 +35812,8 @@ export declare namespace ApplicationUpdateParams {
 
         /**
          * The URIs that are allowed as redirect URIs for dynamically registered clients.
-         * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+         * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+         * must be explicitly configured and match exactly.
          */
         allowed_uris?: Array<string>;
 
@@ -35285,6 +35850,11 @@ export declare namespace ApplicationUpdateParams {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * The order of execution for this policy. Must be unique for each policy within an
        * app.
@@ -35348,7 +35918,7 @@ export declare namespace ApplicationUpdateParams {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
     }
 
     export namespace UnionMember2 {
@@ -35371,12 +35941,12 @@ export declare namespace ApplicationUpdateParams {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }
 
@@ -35811,7 +36381,8 @@ export declare namespace ApplicationUpdateParams {
 
         /**
          * The URIs that are allowed as redirect URIs for dynamically registered clients.
-         * Must use the `https` protocol. Paths may end in `/*` to match all sub-paths.
+         * HTTP and HTTPS paths may end in `/*` to match all sub-paths. Custom-scheme URIs
+         * must be explicitly configured and match exactly.
          */
         allowed_uris?: Array<string>;
 
@@ -35848,6 +36419,11 @@ export declare namespace ApplicationUpdateParams {
        */
       id?: string;
 
+      /**
+       * Identifier.
+       */
+      account_id?: string;
+
       /**
        * The order of execution for this policy. Must be unique for each policy within an
        * app.
@@ -35911,7 +36487,7 @@ export declare namespace ApplicationUpdateParams {
        * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
        * m, h.
        */
-      session_duration?: string;
+      session_duration?: string | null;
     }
 
     export namespace UnionMember2 {
@@ -35934,12 +36510,12 @@ export declare namespace ApplicationUpdateParams {
           /**
            * Clipboard formats allowed when copying from local machine to remote RDP session.
            */
-          allowed_clipboard_local_to_remote_formats?: Array<'text'>;
+          allowed_clipboard_local_to_remote_formats?: Array<'text' | 'file'>;
 
           /**
            * Clipboard formats allowed when copying from remote RDP session to local machine.
            */
-          allowed_clipboard_remote_to_local_formats?: Array<'text'>;
+          allowed_clipboard_remote_to_local_formats?: Array<'text' | 'file'>;
         }
       }