import { APIResource } from "../../../resource.js";
import * as Core from "../../../core.js";
import * as DOHAPI from "./doh.js";
import { DOH, DOHGetParams, DOHGetResponse, DOHUpdateParams, DOHUpdateResponse } from "./doh.js";
export declare class Organizations extends APIResource {
    doh: DOHAPI.DOH;
    /**
     * Sets up a Zero Trust organization for your account or zone.
     */
    create(params: OrganizationCreateParams, options?: Core.RequestOptions): Core.APIPromise<Organization>;
    /**
     * Updates the configuration for your Zero Trust organization.
     */
    update(params: OrganizationUpdateParams, options?: Core.RequestOptions): Core.APIPromise<Organization>;
    /**
     * Returns the configuration for your Zero Trust organization.
     */
    list(params?: OrganizationListParams, options?: Core.RequestOptions): Core.APIPromise<Organization>;
    list(options?: Core.RequestOptions): Core.APIPromise<Organization>;
    /**
     * Revokes a user's access across all applications.
     */
    revokeUsers(params: OrganizationRevokeUsersParams, options?: Core.RequestOptions): Core.APIPromise<OrganizationRevokeUsersResponse>;
}
export interface LoginDesign {
    /**
     * The background color on your login page.
     */
    background_color?: string;
    /**
     * The text at the bottom of your login page.
     */
    footer_text?: string;
    /**
     * The text at the top of your login page.
     */
    header_text?: string;
    /**
     * The URL of the logo on your login page.
     */
    logo_path?: string;
    /**
     * The text color on your login page.
     */
    text_color?: string;
}
export interface LoginDesignParam {
    /**
     * The background color on your login page.
     */
    background_color?: string;
    /**
     * The text at the bottom of your login page.
     */
    footer_text?: string;
    /**
     * The text at the top of your login page.
     */
    header_text?: string;
    /**
     * The URL of the logo on your login page.
     */
    logo_path?: string;
    /**
     * The text color on your login page.
     */
    text_color?: string;
}
export interface Organization {
    /**
     * When set to true, users can authenticate via WARP for any application in your
     * organization. Application settings will take precedence over this value.
     */
    allow_authenticate_via_warp?: boolean;
    /**
     * The unique subdomain assigned to your Zero Trust organization.
     */
    auth_domain?: string;
    /**
     * When set to `true`, users skip the identity provider selection step during
     * login.
     */
    auto_redirect_to_identity?: boolean;
    created_at?: string;
    custom_pages?: Organization.CustomPages;
    /**
     * Lock all settings as Read-Only in the Dashboard, regardless of user permission.
     * Updates may only be made via the API or Terraform for this account when enabled.
     */
    is_ui_read_only?: boolean;
    login_design?: LoginDesign;
    /**
     * The name of your Zero Trust organization.
     */
    name?: string;
    /**
     * The amount of time that tokens issued for applications will be valid. Must be in
     * the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m,
     * h.
     */
    session_duration?: string;
    /**
     * A description of the reason why the UI read only field is being toggled.
     */
    ui_read_only_toggle_reason?: string;
    updated_at?: string;
    /**
     * The amount of time a user seat is inactive before it expires. When the user seat
     * exceeds the set time of inactivity, the user is removed as an active seat and no
     * longer counts against your Teams seat count. Minimum value for this setting is 1
     * month (730h). Must be in the format `300ms` or `2h45m`. Valid time units are:
     * `ns`, `us` (or `µs`), `ms`, `s`, `m`, `h`.
     */
    user_seat_expiration_inactive_time?: string;
    /**
     * The amount of time that tokens issued for applications will be valid. Must be in
     * the format `30m` or `2h45m`. Valid time units are: m, h.
     */
    warp_auth_session_duration?: string;
}
export declare namespace Organization {
    interface CustomPages {
        /**
         * The uid of the custom page to use when a user is denied access after failing a
         * non-identity rule.
         */
        forbidden?: string;
        /**
         * The uid of the custom page to use when a user is denied access.
         */
        identity_denied?: string;
    }
}
export type OrganizationRevokeUsersResponse = true | false;
export interface OrganizationCreateParams {
    /**
     * Body param: The unique subdomain assigned to your Zero Trust organization.
     */
    auth_domain: string;
    /**
     * Body param: The name of your Zero Trust organization.
     */
    name: string;
    /**
     * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
     * Zone ID.
     */
    account_id?: string;
    /**
     * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
     * Account ID.
     */
    zone_id?: string;
    /**
     * Body param: When set to true, users can authenticate via WARP for any
     * application in your organization. Application settings will take precedence over
     * this value.
     */
    allow_authenticate_via_warp?: boolean;
    /**
     * Body param: When set to `true`, users skip the identity provider selection step
     * during login.
     */
    auto_redirect_to_identity?: boolean;
    /**
     * Body param: Lock all settings as Read-Only in the Dashboard, regardless of user
     * permission. Updates may only be made via the API or Terraform for this account
     * when enabled.
     */
    is_ui_read_only?: boolean;
    /**
     * Body param:
     */
    login_design?: LoginDesignParam;
    /**
     * Body param: The amount of time that tokens issued for applications will be
     * valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us
     * (or µs), ms, s, m, h.
     */
    session_duration?: string;
    /**
     * Body param: A description of the reason why the UI read only field is being
     * toggled.
     */
    ui_read_only_toggle_reason?: string;
    /**
     * Body param: The amount of time a user seat is inactive before it expires. When
     * the user seat exceeds the set time of inactivity, the user is removed as an
     * active seat and no longer counts against your Teams seat count. Minimum value
     * for this setting is 1 month (730h). Must be in the format `300ms` or `2h45m`.
     * Valid time units are: `ns`, `us` (or `µs`), `ms`, `s`, `m`, `h`.
     */
    user_seat_expiration_inactive_time?: string;
    /**
     * Body param: The amount of time that tokens issued for applications will be
     * valid. Must be in the format `30m` or `2h45m`. Valid time units are: m, h.
     */
    warp_auth_session_duration?: string;
}
export interface OrganizationUpdateParams {
    /**
     * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
     * Zone ID.
     */
    account_id?: string;
    /**
     * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
     * Account ID.
     */
    zone_id?: string;
    /**
     * Body param: When set to true, users can authenticate via WARP for any
     * application in your organization. Application settings will take precedence over
     * this value.
     */
    allow_authenticate_via_warp?: boolean;
    /**
     * Body param: The unique subdomain assigned to your Zero Trust organization.
     */
    auth_domain?: string;
    /**
     * Body param: When set to `true`, users skip the identity provider selection step
     * during login.
     */
    auto_redirect_to_identity?: boolean;
    /**
     * Body param:
     */
    custom_pages?: OrganizationUpdateParams.CustomPages;
    /**
     * Body param: Lock all settings as Read-Only in the Dashboard, regardless of user
     * permission. Updates may only be made via the API or Terraform for this account
     * when enabled.
     */
    is_ui_read_only?: boolean;
    /**
     * Body param:
     */
    login_design?: LoginDesignParam;
    /**
     * Body param: The name of your Zero Trust organization.
     */
    name?: string;
    /**
     * Body param: The amount of time that tokens issued for applications will be
     * valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us
     * (or µs), ms, s, m, h.
     */
    session_duration?: string;
    /**
     * Body param: A description of the reason why the UI read only field is being
     * toggled.
     */
    ui_read_only_toggle_reason?: string;
    /**
     * Body param: The amount of time a user seat is inactive before it expires. When
     * the user seat exceeds the set time of inactivity, the user is removed as an
     * active seat and no longer counts against your Teams seat count. Minimum value
     * for this setting is 1 month (730h). Must be in the format `300ms` or `2h45m`.
     * Valid time units are: `ns`, `us` (or `µs`), `ms`, `s`, `m`, `h`.
     */
    user_seat_expiration_inactive_time?: string;
    /**
     * Body param: The amount of time that tokens issued for applications will be
     * valid. Must be in the format `30m` or `2h45m`. Valid time units are: m, h.
     */
    warp_auth_session_duration?: string;
}
export declare namespace OrganizationUpdateParams {
    interface CustomPages {
        /**
         * The uid of the custom page to use when a user is denied access after failing a
         * non-identity rule.
         */
        forbidden?: string;
        /**
         * The uid of the custom page to use when a user is denied access.
         */
        identity_denied?: string;
    }
}
export interface OrganizationListParams {
    /**
     * The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
     */
    account_id?: string;
    /**
     * The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
     */
    zone_id?: string;
}
export interface OrganizationRevokeUsersParams {
    /**
     * Body param: The email of the user to revoke.
     */
    email: string;
    /**
     * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
     * Zone ID.
     */
    account_id?: string;
    /**
     * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
     * Account ID.
     */
    zone_id?: string;
    /**
     * Query param: When set to `true`, all devices associated with the user will be
     * revoked.
     */
    query_devices?: boolean;
    /**
     * Body param: When set to `true`, all devices associated with the user will be
     * revoked.
     */
    body_devices?: boolean;
    /**
     * Body param: The uuid of the user to revoke.
     */
    user_uid?: string;
    /**
     * Body param: When set to `true`, the user will be required to re-authenticate to
     * WARP for all Gateway policies that enforce a WARP client session duration. When
     * `false`, the user’s WARP session will remain active
     */
    warp_session_reauth?: boolean;
}
export declare namespace Organizations {
    export { type LoginDesign as LoginDesign, type Organization as Organization, type OrganizationRevokeUsersResponse as OrganizationRevokeUsersResponse, type OrganizationCreateParams as OrganizationCreateParams, type OrganizationUpdateParams as OrganizationUpdateParams, type OrganizationListParams as OrganizationListParams, type OrganizationRevokeUsersParams as OrganizationRevokeUsersParams, };
    export { DOH as DOH, type DOHUpdateResponse as DOHUpdateResponse, type DOHGetResponse as DOHGetResponse, type DOHUpdateParams as DOHUpdateParams, type DOHGetParams as DOHGetParams, };
}
//# sourceMappingURL=organizations.d.ts.map