Repository: cloudflare/cloudflare-go
Pull request #1995 (2024-05-10 18:57:24)

feat(api): update via SDK Studio


Patch:
diff --git a/.stats.yml b/.stats.yml
index 46bc4446e..180c43d61 100644
--- a/.stats.yml
+++ b/.stats.yml
@@ -1,2 +1,2 @@
 configured_endpoints: 1281
-openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/cloudflare%2Fcloudflare-c29a8e5a4a9b932030192272e03404b274e9119c670d493d19150b93d01c2b51.yml
+openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/cloudflare%2Fcloudflare-60b75a573109cad5aa0149c739c7e355f3e2571b3a71fced4c8848e44b8c334f.yml
diff --git a/api.md b/api.md
index f04a9a8ad..1408b6b78 100644
--- a/api.md
+++ b/api.md
@@ -4728,6 +4728,7 @@ Params Types:
 - <a href="https://pkg.go.dev/github.com/cloudflare/cloudflare-go/v2/zero_trust">zero_trust</a>.<a href="https://pkg.go.dev/github.com/cloudflare/cloudflare-go/v2/zero_trust#AppIDUnionParam">AppIDUnionParam</a>
 - <a href="https://pkg.go.dev/github.com/cloudflare/cloudflare-go/v2/zero_trust">zero_trust</a>.<a href="https://pkg.go.dev/github.com/cloudflare/cloudflare-go/v2/zero_trust#ApplicationType">ApplicationType</a>
 - <a href="https://pkg.go.dev/github.com/cloudflare/cloudflare-go/v2/zero_trust">zero_trust</a>.<a href="https://pkg.go.dev/github.com/cloudflare/cloudflare-go/v2/zero_trust#CORSHeadersParam">CORSHeadersParam</a>
+- <a href="https://pkg.go.dev/github.com/cloudflare/cloudflare-go/v2/zero_trust">zero_trust</a>.<a href="https://pkg.go.dev/github.com/cloudflare/cloudflare-go/v2/zero_trust#Decision">Decision</a>
 - <a href="https://pkg.go.dev/github.com/cloudflare/cloudflare-go/v2/zero_trust">zero_trust</a>.<a href="https://pkg.go.dev/github.com/cloudflare/cloudflare-go/v2/zero_trust#SaaSAppNameFormat">SaaSAppNameFormat</a>
 - <a href="https://pkg.go.dev/github.com/cloudflare/cloudflare-go/v2/zero_trust">zero_trust</a>.<a href="https://pkg.go.dev/github.com/cloudflare/cloudflare-go/v2/zero_trust#SaaSAppNameIDFormat">SaaSAppNameIDFormat</a>
 - <a href="https://pkg.go.dev/github.com/cloudflare/cloudflare-go/v2/zero_trust">zero_trust</a>.<a href="https://pkg.go.dev/github.com/cloudflare/cloudflare-go/v2/zero_trust#SaaSAppSourceParam">SaaSAppSourceParam</a>
@@ -4742,6 +4743,7 @@ Response Types:
 - <a href="https://pkg.go.dev/github.com/cloudflare/cloudflare-go/v2/zero_trust">zero_trust</a>.<a href="https://pkg.go.dev/github.com/cloudflare/cloudflare-go/v2/zero_trust#AllowedOrigins">AllowedOrigins</a>
 - <a href="https://pkg.go.dev/github.com/cloudflare/cloudflare-go/v2/zero_trust">zero_trust</a>.<a href="https://pkg.go.dev/github.com/cloudflare/cloudflare-go/v2/zero_trust#ApplicationType">ApplicationType</a>
 - <a href="https://pkg.go.dev/github.com/cloudflare/cloudflare-go/v2/zero_trust">zero_trust</a>.<a href="https://pkg.go.dev/github.com/cloudflare/cloudflare-go/v2/zero_trust#CORSHeaders">CORSHeaders</a>
+- <a href="https://pkg.go.dev/github.com/cloudflare/cloudflare-go/v2/zero_trust">zero_trust</a>.<a href="https://pkg.go.dev/github.com/cloudflare/cloudflare-go/v2/zero_trust#Decision">Decision</a>
 - <a href="https://pkg.go.dev/github.com/cloudflare/cloudflare-go/v2/zero_trust">zero_trust</a>.<a href="https://pkg.go.dev/github.com/cloudflare/cloudflare-go/v2/zero_trust#SaaSAppNameFormat">SaaSAppNameFormat</a>
 - <a href="https://pkg.go.dev/github.com/cloudflare/cloudflare-go/v2/zero_trust">zero_trust</a>.<a href="https://pkg.go.dev/github.com/cloudflare/cloudflare-go/v2/zero_trust#SaaSAppNameIDFormat">SaaSAppNameIDFormat</a>
 - <a href="https://pkg.go.dev/github.com/cloudflare/cloudflare-go/v2/zero_trust">zero_trust</a>.<a href="https://pkg.go.dev/github.com/cloudflare/cloudflare-go/v2/zero_trust#SaaSAppSource">SaaSAppSource</a>
diff --git a/zero_trust/accessapplication.go b/zero_trust/accessapplication.go
index 2e781c190..a76da7027 100644
--- a/zero_trust/accessapplication.go
+++ b/zero_trust/accessapplication.go
@@ -316,6 +316,24 @@ func (r CORSHeadersParam) MarshalJSON() (data []byte, err error) {
 	return apijson.MarshalRoot(r)
 }
 
+// The action Access will take if a user matches this policy.
+type Decision string
+
+const (
+	DecisionAllow       Decision = "allow"
+	DecisionDeny        Decision = "deny"
+	DecisionNonIdentity Decision = "non_identity"
+	DecisionBypass      Decision = "bypass"
+)
+
+func (r Decision) IsKnown() bool {
+	switch r {
+	case DecisionAllow, DecisionDeny, DecisionNonIdentity, DecisionBypass:
+		return true
+	}
+	return false
+}
+
 // A globally unique name for an identity or service provider.
 type SaaSAppNameFormat string
 
@@ -878,7 +896,7 @@ type AccessApplicationNewResponseSelfHostedApplicationPolicy struct {
 	ApprovalRequired bool      `json:"approval_required"`
 	CreatedAt        time.Time `json:"created_at" format:"date-time"`
 	// The action Access will take if a user matches this policy.
-	Decision AccessApplicationNewResponseSelfHostedApplicationPoliciesDecision `json:"decision"`
+	Decision Decision `json:"decision"`
 	// Rules evaluated with a NOT logical operator. To match the policy, a user cannot
 	// meet any of the Exclude rules.
 	Exclude []AccessRule `json:"exclude"`
@@ -936,24 +954,6 @@ func (r accessApplicationNewResponseSelfHostedApplicationPolicyJSON) RawJSON() s
 	return r.raw
 }
 
-// The action Access will take if a user matches this policy.
-type AccessApplicationNewResponseSelfHostedApplicationPoliciesDecision string
-
-const (
-	AccessApplicationNewResponseSelfHostedApplicationPoliciesDecisionAllow       AccessApplicationNewResponseSelfHostedApplicationPoliciesDecision = "allow"
-	AccessApplicationNewResponseSelfHostedApplicationPoliciesDecisionDeny        AccessApplicationNewResponseSelfHostedApplicationPoliciesDecision = "deny"
-	AccessApplicationNewResponseSelfHostedApplicationPoliciesDecisionNonIdentity AccessApplicationNewResponseSelfHostedApplicationPoliciesDecision = "non_identity"
-	AccessApplicationNewResponseSelfHostedApplicationPoliciesDecisionBypass      AccessApplicationNewResponseSelfHostedApplicationPoliciesDecision = "bypass"
-)
-
-func (r AccessApplicationNewResponseSelfHostedApplicationPoliciesDecision) IsKnown() bool {
-	switch r {
-	case AccessApplicationNewResponseSelfHostedApplicationPoliciesDecisionAllow, AccessApplicationNewResponseSelfHostedApplicationPoliciesDecisionDeny, AccessApplicationNewResponseSelfHostedApplicationPoliciesDecisionNonIdentity, AccessApplicationNewResponseSelfHostedApplicationPoliciesDecisionBypass:
-		return true
-	}
-	return false
-}
-
 // Configuration for provisioning to this application via SCIM. This is currently
 // in closed beta.
 type AccessApplicationNewResponseSelfHostedApplicationScimConfig struct {
@@ -1411,7 +1411,7 @@ type AccessApplicationNewResponseSaaSApplicationPolicy struct {
 	ApprovalRequired bool      `json:"approval_required"`
 	CreatedAt        time.Time `json:"created_at" format:"date-time"`
 	// The action Access will take if a user matches this policy.
-	Decision AccessApplicationNewResponseSaaSApplicationPoliciesDecision `json:"decision"`
+	Decision Decision `json:"decision"`
 	// Rules evaluated with a NOT logical operator. To match the policy, a user cannot
 	// meet any of the Exclude rules.
 	Exclude []AccessRule `json:"exclude"`
@@ -1468,24 +1468,6 @@ func (r accessApplicationNewResponseSaaSApplicationPolicyJSON) RawJSON() string
 	return r.raw
 }
 
-// The action Access will take if a user matches this policy.
-type AccessApplicationNewResponseSaaSApplicationPoliciesDecision string
-
-const (
-	AccessApplicationNewResponseSaaSApplicationPoliciesDecisionAllow       AccessApplicationNewResponseSaaSApplicationPoliciesDecision = "allow"
-	AccessApplicationNewResponseSaaSApplicationPoliciesDecisionDeny        AccessApplicationNewResponseSaaSApplicationPoliciesDecision = "deny"
-	AccessApplicationNewResponseSaaSApplicationPoliciesDecisionNonIdentity AccessApplicationNewResponseSaaSApplicationPoliciesDecision = "non_identity"
-	AccessApplicationNewResponseSaaSApplicationPoliciesDecisionBypass      AccessApplicationNewResponseSaaSApplicationPoliciesDecision = "bypass"
-)
-
-func (r AccessApplicationNewResponseSaaSApplicationPoliciesDecision) IsKnown() bool {
-	switch r {
-	case AccessApplicationNewResponseSaaSApplicationPoliciesDecisionAllow, AccessApplicationNewResponseSaaSApplicationPoliciesDecisionDeny, AccessApplicationNewResponseSaaSApplicationPoliciesDecisionNonIdentity, AccessApplicationNewResponseSaaSApplicationPoliciesDecisionBypass:
-		return true
-	}
-	return false
-}
-
 type AccessApplicationNewResponseSaaSApplicationSaaSApp struct {
 	// Optional identifier indicating the authentication protocol used for the saas
 	// app. Required for OIDC. Default if unset is "saml"
@@ -2350,7 +2332,7 @@ type AccessApplicationNewResponseBrowserSSHApplicationPolicy struct {
 	ApprovalRequired bool      `json:"approval_required"`
 	CreatedAt        time.Time `json:"created_at" format:"date-time"`
 	// The action Access will take if a user matches this policy.
-	Decision AccessApplicationNewResponseBrowserSSHApplicationPoliciesDecision `json:"decision"`
+	Decision Decision `json:"decision"`
 	// Rules evaluated with a NOT logical operator. To match the policy, a user cannot
 	// meet any of the Exclude rules.
 	Exclude []AccessRule `json:"exclude"`
@@ -2408,24 +2390,6 @@ func (r accessApplicationNewResponseBrowserSSHApplicationPolicyJSON) RawJSON() s
 	return r.raw
 }
 
-// The action Access will take if a user matches this policy.
-type AccessApplicationNewResponseBrowserSSHApplicationPoliciesDecision string
-
-const (
-	AccessApplicationNewResponseBrowserSSHApplicationPoliciesDecisionAllow       AccessApplicationNewResponseBrowserSSHApplicationPoliciesDecision = "allow"
-	AccessApplicationNewResponseBrowserSSHApplicationPoliciesDecisionDeny        AccessApplicationNewResponseBrowserSSHApplicationPoliciesDecision = "deny"
-	AccessApplicationNewResponseBrowserSSHApplicationPoliciesDecisionNonIdentity AccessApplicationNewResponseBrowserSSHApplicationPoliciesDecision = "non_identity"
-	AccessApplicationNewResponseBrowserSSHApplicationPoliciesDecisionBypass      AccessApplicationNewResponseBrowserSSHApplicationPoliciesDecision = "bypass"
-)
-
-func (r AccessApplicationNewResponseBrowserSSHApplicationPoliciesDecision) IsKnown() bool {
-	switch r {
-	case AccessApplicationNewResponseBrowserSSHApplicationPoliciesDecisionAllow, AccessApplicationNewResponseBrowserSSHApplicationPoliciesDecisionDeny, AccessApplicationNewResponseBrowserSSHApplicationPoliciesDecisionNonIdentity, AccessApplicationNewResponseBrowserSSHApplicationPoliciesDecisionBypass:
-		return true
-	}
-	return false
-}
-
 // Configuration for provisioning to this application via SCIM. This is currently
 // in closed beta.
 type AccessApplicationNewResponseBrowserSSHApplicationScimConfig struct {
@@ -2939,7 +2903,7 @@ type AccessApplicationNewResponseBrowserVncApplicationPolicy struct {
 	ApprovalRequired bool      `json:"approval_required"`
 	CreatedAt        time.Time `json:"created_at" format:"date-time"`
 	// The action Access will take if a user matches this policy.
-	Decision AccessApplicationNewResponseBrowserVncApplicationPoliciesDecision `json:"decision"`
+	Decision Decision `json:"decision"`
 	// Rules evaluated with a NOT logical operator. To match the policy, a user cannot
 	// meet any of the Exclude rules.
 	Exclude []AccessRule `json:"exclude"`
@@ -2997,24 +2961,6 @@ func (r accessApplicationNewResponseBrowserVncApplicationPolicyJSON) RawJSON() s
 	return r.raw
 }
 
-// The action Access will take if a user matches this policy.
-type AccessApplicationNewResponseBrowserVncApplicationPoliciesDecision string
-
-const (
-	AccessApplicationNewResponseBrowserVncApplicationPoliciesDecisionAllow       AccessApplicationNewResponseBrowserVncApplicationPoliciesDecision = "allow"
-	AccessApplicationNewResponseBrowserVncApplicationPoliciesDecisionDeny        AccessApplicationNewResponseBrowserVncApplicationPoliciesDecision = "deny"
-	AccessApplicationNewResponseBrowserVncApplicationPoliciesDecisionNonIdentity AccessApplicationNewResponseBrowserVncApplicationPoliciesDecision = "non_identity"
-	AccessApplicationNewResponseBrowserVncApplicationPoliciesDecisionBypass      AccessApplicationNewResponseBrowserVncApplicationPoliciesDecision = "bypass"
-)
-
-func (r AccessApplicationNewResponseBrowserVncApplicationPoliciesDecision) IsKnown() bool {
-	switch r {
-	case AccessApplicationNewResponseBrowserVncApplicationPoliciesDecisionAllow, AccessApplicationNewResponseBrowserVncApplicationPoliciesDecisionDeny, AccessApplicationNewResponseBrowserVncApplicationPoliciesDecisionNonIdentity, AccessApplicationNewResponseBrowserVncApplicationPoliciesDecisionBypass:
-		return true
-	}
-	return false
-}
-
 // Configuration for provisioning to this application via SCIM. This is currently
 // in closed beta.
 type AccessApplicationNewResponseBrowserVncApplicationScimConfig struct {
@@ -3466,7 +3412,7 @@ type AccessApplicationNewResponseAppLauncherApplicationPolicy struct {
 	ApprovalRequired bool      `json:"approval_required"`
 	CreatedAt        time.Time `json:"created_at" format:"date-time"`
 	// The action Access will take if a user matches this policy.
-	Decision AccessApplicationNewResponseAppLauncherApplicationPoliciesDecision `json:"decision"`
+	Decision Decision `json:"decision"`
 	// Rules evaluated with a NOT logical operator. To match the policy, a user cannot
 	// meet any of the Exclude rules.
 	Exclude []AccessRule `json:"exclude"`
@@ -3524,24 +3470,6 @@ func (r accessApplicationNewResponseAppLauncherApplicationPolicyJSON) RawJSON()
 	return r.raw
 }
 
-// The action Access will take if a user matches this policy.
-type AccessApplicationNewResponseAppLauncherApplicationPoliciesDecision string
-
-const (
-	AccessApplicationNewResponseAppLauncherApplicationPoliciesDecisionAllow       AccessApplicationNewResponseAppLauncherApplicationPoliciesDecision = "allow"
-	AccessApplicationNewResponseAppLauncherApplicationPoliciesDecisionDeny        AccessApplicationNewResponseAppLauncherApplicationPoliciesDecision = "deny"
-	AccessApplicationNewResponseAppLauncherApplicationPoliciesDecisionNonIdentity AccessApplicationNewResponseAppLauncherApplicationPoliciesDecision = "non_identity"
-	AccessApplicationNewResponseAppLauncherApplicationPoliciesDecisionBypass      AccessApplicationNewResponseAppLauncherApplicationPoliciesDecision = "bypass"
-)
-
-func (r AccessApplicationNewResponseAppLauncherApplicationPoliciesDecision) IsKnown() bool {
-	switch r {
-	case AccessApplicationNewResponseAppLauncherApplicationPoliciesDecisionAllow, AccessApplicationNewResponseAppLauncherApplicationPoliciesDecisionDeny, AccessApplicationNewResponseAppLauncherApplicationPoliciesDecisionNonIdentity, AccessApplicationNewResponseAppLauncherApplicationPoliciesDecisionBypass:
-		return true
-	}
-	return false
-}
-
 // Configuration for provisioning to this application via SCIM. This is currently
 // in closed beta.
 type AccessApplicationNewResponseAppLauncherApplicationScimConfig struct {
@@ -3994,7 +3922,7 @@ type AccessApplicationNewResponseDeviceEnrollmentPermissionsApplicationPolicy st
 	ApprovalRequired bool      `json:"approval_required"`
 	CreatedAt        time.Time `json:"created_at" format:"date-time"`
 	// The action Access will take if a user matches this policy.
-	Decision AccessApplicationNewResponseDeviceEnrollmentPermissionsApplicationPoliciesDecision `json:"decision"`
+	Decision Decision `json:"decision"`
 	// Rules evaluated with a NOT logical operator. To match the policy, a user cannot
 	// meet any of the Exclude rules.
 	Exclude []AccessRule `json:"exclude"`
@@ -4052,24 +3980,6 @@ func (r accessApplicationNewResponseDeviceEnrollmentPermissionsApplicationPolicy
 	return r.raw
 }
 
-// The action Access will take if a user matches this policy.
-type AccessApplicationNewResponseDeviceEnrollmentPermissionsApplicationPoliciesDecision string
-
-const (
-	AccessApplicationNewResponseDeviceEnrollmentPermissionsApplicationPoliciesDecisionAllow       AccessApplicationNewResponseDeviceEnrollmentPermissionsApplicationPoliciesDecision = "allow"
-	AccessApplicationNewResponseDeviceEnrollmentPermissionsApplicationPoliciesDecisionDeny        AccessApplicationNewResponseDeviceEnrollmentPermissionsApplicationPoliciesDecision = "deny"
-	AccessApplicationNewResponseDeviceEnrollmentPermissionsApplicationPoliciesDecisionNonIdentity AccessApplicationNewResponseDeviceEnrollmentPermissionsApplicationPoliciesDecision = "non_identity"
-	AccessApplicationNewResponseDeviceEnrollmentPermissionsApplicationPoliciesDecisionBypass      AccessApplicationNewResponseDeviceEnrollmentPermissionsApplicationPoliciesDecision = "bypass"
-)
-
-func (r AccessApplicationNewResponseDeviceEnrollmentPermissionsApplicationPoliciesDecision) IsKnown() bool {
-	switch r {
-	case AccessApplicationNewResponseDeviceEnrollmentPermissionsApplicationPoliciesDecisionAllow, AccessApplicationNewResponseDeviceEnrollmentPermissionsApplicationPoliciesDecisionDeny, AccessApplicationNewResponseDeviceEnrollmentPermissionsApplicationPoliciesDecisionNonIdentity, AccessApplicationNewResponseDeviceEnrollmentPermissionsApplicationPoliciesDecisionBypass:
-		return true
-	}
-	return false
-}
-
 // Configuration for provisioning to this application via SCIM. This is currently
 // in closed beta.
 type AccessApplicationNewResponseDeviceEnrollmentPermissionsApplicationScimConfig struct {
@@ -4522,7 +4432,7 @@ type AccessApplicationNewResponseBrowserIsolationPermissionsApplicationPolicy st
 	ApprovalRequired bool      `json:"approval_required"`
 	CreatedAt        time.Time `json:"created_at" format:"date-time"`
 	// The action Access will take if a user matches this policy.
-	Decision AccessApplicationNewResponseBrowserIsolationPermissionsApplicationPoliciesDecision `json:"decision"`
+	Decision Decision `json:"decision"`
 	// Rules evaluated with a NOT logical operator. To match the policy, a user cannot
 	// meet any of the Exclude rules.
 	Exclude []AccessRule `json:"exclude"`
@@ -4580,24 +4490,6 @@ func (r accessApplicationNewResponseBrowserIsolationPermissionsApplicationPolicy
 	return r.raw
 }
 
-// The action Access will take if a user matches this policy.
-type AccessApplicationNewResponseBrowserIsolationPermissionsApplicationPoliciesDecision string
-
-const (
-	AccessApplicationNewResponseBrowserIsolationPermissionsApplicationPoliciesDecisionAllow       AccessApplicationNewResponseBrowserIsolationPermissionsApplicationPoliciesDecision = "allow"
-	AccessApplicationNewResponseBrowserIsolationPermissionsApplicationPoliciesDecisionDeny        AccessApplicationNewResponseBrowserIsolationPermissionsApplicationPoliciesDecision = "deny"
-	AccessApplicationNewResponseBrowserIsolationPermissionsApplicationPoliciesDecisionNonIdentity AccessApplicationNewResponseBrowserIsolationPermissionsApplicationPoliciesDecision = "non_identity"
-	AccessApplicationNewResponseBrowserIsolationPermissionsApplicationPoliciesDecisionBypass      AccessApplicationNewResponseBrowserIsolationPermissionsApplicationPoliciesDecision = "bypass"
-)
-
-func (r AccessApplicationNewResponseBrowserIsolationPermissionsApplicationPoliciesDecision) IsKnown() bool {
-	switch r {
-	case AccessApplicationNewResponseBrowserIsolationPermissionsApplicationPoliciesDecisionAllow, AccessApplicationNewResponseBrowserIsolationPermissionsApplicationPoliciesDecisionDeny, AccessApplicationNewResponseBrowserIsolationPermissionsApplicationPoliciesDecisionNonIdentity, AccessApplicationNewResponseBrowserIsolationPermissionsApplicationPoliciesDecisionBypass:
-		return true
-	}
-	return false
-}
-
 // Configuration for provisioning to this application via SCIM. This is currently
 // in closed beta.
 type AccessApplicationNewResponseBrowserIsolationPermissionsApplicationScimConfig struct {
@@ -5721,7 +5613,7 @@ type AccessApplicationUpdateResponseSelfHostedApplicationPolicy struct {
 	ApprovalRequired bool      `json:"approval_required"`
 	CreatedAt        time.Time `json:"created_at" format:"date-time"`
 	// The action Access will take if a user matches this policy.
-	Decision AccessApplicationUpdateResponseSelfHostedApplicationPoliciesDecision `json:"decision"`
+	Decision Decision `json:"decision"`
 	// Rules evaluated with a NOT logical operator. To match the policy, a user cannot
 	// meet any of the Exclude rules.
 	Exclude []AccessRule `json:"exclude"`
@@ -5779,24 +5671,6 @@ func (r accessApplicationUpdateResponseSelfHostedApplicationPolicyJSON) RawJSON(
 	return r.raw
 }
 
-// The action Access will take if a user matches this policy.
-type AccessApplicationUpdateResponseSelfHostedApplicationPoliciesDecision string
-
-const (
-	AccessApplicationUpdateResponseSelfHostedApplicationPoliciesDecisionAllow       AccessApplicationUpdateResponseSelfHostedApplicationPoliciesDecision = "allow"
-	AccessApplicationUpdateResponseSelfHostedApplicationPoliciesDecisionDeny        AccessApplicationUpdateResponseSelfHostedApplicationPoliciesDecision = "deny"
-	AccessApplicationUpdateResponseSelfHostedApplicationPoliciesDecisionNonIdentity AccessApplicationUpdateResponseSelfHostedApplicationPoliciesDecision = "non_identity"
-	AccessApplicationUpdateResponseSelfHostedApplicationPoliciesDecisionBypass      AccessApplicationUpdateResponseSelfHostedApplicationPoliciesDecision = "bypass"
-)
-
-func (r AccessApplicationUpdateResponseSelfHostedApplicationPoliciesDecision) IsKnown() bool {
-	switch r {
-	case AccessApplicationUpdateResponseSelfHostedApplicationPoliciesDecisionAllow, AccessApplicationUpdateResponseSelfHostedApplicationPoliciesDecisionDeny, AccessApplicationUpdateResponseSelfHostedApplicationPoliciesDecisionNonIdentity, AccessApplicationUpdateResponseSelfHostedApplicationPoliciesDecisionBypass:
-		return true
-	}
-	return false
-}
-
 // Configuration for provisioning to this application via SCIM. This is currently
 // in closed beta.
 type AccessApplicationUpdateResponseSelfHostedApplicationScimConfig struct {
@@ -6254,7 +6128,7 @@ type AccessApplicationUpdateResponseSaaSApplicationPolicy struct {
 	ApprovalRequired bool      `json:"approval_required"`
 	CreatedAt        time.Time `json:"created_at" format:"date-time"`
 	// The action Access will take if a user matches this policy.
-	Decision AccessApplicationUpdateResponseSaaSApplicationPoliciesDecision `json:"decision"`
+	Decision Decision `json:"decision"`
 	// Rules evaluated with a NOT logical operator. To match the policy, a user cannot
 	// meet any of the Exclude rules.
 	Exclude []AccessRule `json:"exclude"`
@@ -6311,24 +6185,6 @@ func (r accessApplicationUpdateResponseSaaSApplicationPolicyJSON) RawJSON() stri
 	return r.raw
 }
 
-// The action Access will take if a user matches this policy.
-type AccessApplicationUpdateResponseSaaSApplicationPoliciesDecision string
-
-const (
-	AccessApplicationUpdateResponseSaaSApplicationPoliciesDecisionAllow       AccessApplicationUpdateResponseSaaSApplicationPoliciesDecision = "allow"
-	AccessApplicationUpdateResponseSaaSApplicationPoliciesDecisionDeny        AccessApplicationUpdateResponseSaaSApplicationPoliciesDecision = "deny"
-	AccessApplicationUpdateResponseSaaSApplicationPoliciesDecisionNonIdentity AccessApplicationUpdateResponseSaaSApplicationPoliciesDecision = "non_identity"
-	AccessApplicationUpdateResponseSaaSApplicationPoliciesDecisionBypass      AccessApplicationUpdateResponseSaaSApplicationPoliciesDecision = "bypass"
-)
-
-func (r AccessApplicationUpdateResponseSaaSApplicationPoliciesDecision) IsKnown() bool {
-	switch r {
-	case AccessApplicationUpdateResponseSaaSApplicationPoliciesDecisionAllow, AccessApplicationUpdateResponseSaaSApplicationPoliciesDecisionDeny, AccessApplicationUpdateResponseSaaSApplicationPoliciesDecisionNonIdentity, AccessApplicationUpdateResponseSaaSApplicationPoliciesDecisionBypass:
-		return true
-	}
-	return false
-}
-
 type AccessApplicationUpdateResponseSaaSApplicationSaaSApp struct {
 	// Optional identifier indicating the authentication protocol used for the saas
 	// app. Required for OIDC. Default if unset is "saml"
@@ -7194,7 +7050,7 @@ type AccessApplicationUpdateResponseBrowserSSHApplicationPolicy struct {
 	ApprovalRequired bool      `json:"approval_required"`
 	CreatedAt        time.Time `json:"created_at" format:"date-time"`
 	// The action Access will take if a user matches this policy.
-	Decision AccessApplicationUpdateResponseBrowserSSHApplicationPoliciesDecision `json:"decision"`
+	Decision Decision `json:"decision"`
 	// Rules evaluated with a NOT logical operator. To match the policy, a user cannot
 	// meet any of the Exclude rules.
 	Exclude []AccessRule `json:"exclude"`
@@ -7252,24 +7108,6 @@ func (r accessApplicationUpdateResponseBrowserSSHApplicationPolicyJSON) RawJSON(
 	return r.raw
 }
 
-// The action Access will take if a user matches this policy.
-type AccessApplicationUpdateResponseBrowserSSHApplicationPoliciesDecision string
-
-const (
-	AccessApplicationUpdateResponseBrowserSSHApplicationPoliciesDecisionAllow       AccessApplicationUpdateResponseBrowserSSHApplicationPoliciesDecision = "allow"
-	AccessApplicationUpdateResponseBrowserSSHApplicationPoliciesDecisionDeny        AccessApplicationUpdateResponseBrowserSSHApplicationPoliciesDecision = "deny"
-	AccessApplicationUpdateResponseBrowserSSHApplicationPoliciesDecisionNonIdentity AccessApplicationUpdateResponseBrowserSSHApplicationPoliciesDecision = "non_identity"
-	AccessApplicationUpdateResponseBrowserSSHApplicationPoliciesDecisionBypass      AccessApplicationUpdateResponseBrowserSSHApplicationPoliciesDecision = "bypass"
-)
-
-func (r AccessApplicationUpdateResponseBrowserSSHApplicationPoliciesDecision) IsKnown() bool {
-	switch r {
-	case AccessApplicationUpdateResponseBrowserSSHApplicationPoliciesDecisionAllow, AccessApplicationUpdateResponseBrowserSSHApplicationPoliciesDecisionDeny, AccessApplicationUpdateResponseBrowserSSHApplicationPoliciesDecisionNonIdentity, AccessApplicationUpdateResponseBrowserSSHApplicationPoliciesDecisionBypass:
-		return true
-	}
-	return false
-}
-
 // Configuration for provisioning to this application via SCIM. This is currently
 // in closed beta.
 type AccessApplicationUpdateResponseBrowserSSHApplicationScimConfig struct {
@@ -7783,7 +7621,7 @@ type AccessApplicationUpdateResponseBrowserVncApplicationPolicy struct {
 	ApprovalRequired bool      `json:"approval_required"`
 	CreatedAt        time.Time `json:"created_at" format:"date-time"`
 	// The action Access will take if a user matches this policy.
-	Decision AccessApplicationUpdateResponseBrowserVncApplicationPoliciesDecision `json:"decision"`
+	Decision Decision `json:"decision"`
 	// Rules evaluated with a NOT logical operator. To match the policy, a user cannot
 	// meet any of the Exclude rules.
 	Exclude []AccessRule `json:"exclude"`
@@ -7841,24 +7679,6 @@ func (r accessApplicationUpdateResponseBrowserVncApplicationPolicyJSON) RawJSON(
 	return r.raw
 }
 
-// The action Access will take if a user matches this policy.
-type AccessApplicationUpdateResponseBrowserVncApplicationPoliciesDecision string
-
-const (
-	AccessApplicationUpdateResponseBrowserVncApplicationPoliciesDecisionAllow       AccessApplicationUpdateResponseBrowserVncApplicationPoliciesDecision = "allow"
-	AccessApplicationUpdateResponseBrowserVncApplicationPoliciesDecisionDeny        AccessApplicationUpdateResponseBrowserVncApplicationPoliciesDecision = "deny"
-	AccessApplicationUpdateResponseBrowserVncApplicationPoliciesDecisionNonIdentity AccessApplicationUpdateResponseBrowserVncApplicationPoliciesDecision = "non_identity"
-	AccessApplicationUpdateResponseBrowserVncApplicationPoliciesDecisionBypass      AccessApplicationUpdateResponseBrowserVncApplicationPoliciesDecision = "bypass"
-)
-
-func (r AccessApplicationUpdateResponseBrowserVncApplicationPoliciesDecision) IsKnown() bool {
-	switch r {
-	case AccessApplicationUpdateResponseBrowserVncApplicationPoliciesDecisionAllow, AccessApplicationUpdateResponseBrowserVncApplicationPoliciesDecisionDeny, AccessApplicationUpdateResponseBrowserVncApplicationPoliciesDecisionNonIdentity, AccessApplicationUpdateResponseBrowserVncApplicationPoliciesDecisionBypass:
-		return true
-	}
-	return false
-}
-
 // Configuration for provisioning to this application via SCIM. This is currently
 // in closed beta.
 type AccessApplicationUpdateResponseBrowserVncApplicationScimConfig struct {
@@ -8310,7 +8130,7 @@ type AccessApplicationUpdateResponseAppLauncherApplicationPolicy struct {
 	ApprovalRequired bool      `json:"approval_required"`
 	CreatedAt        time.Time `json:"created_at" format:"date-time"`
 	// The action Access will take if a user matches this policy.
-	Decision AccessApplicationUpdateResponseAppLauncherApplicationPoliciesDecision `json:"decision"`
+	Decision Decision `json:"decision"`
 	// Rules evaluated with a NOT logical operator. To match the policy, a user cannot
 	// meet any of the Exclude rules.
 	Exclude []AccessRule `json:"exclude"`
@@ -8368,24 +8188,6 @@ func (r accessApplicationUpdateResponseAppLauncherApplicationPolicyJSON) RawJSON
 	return r.raw
 }
 
-// The action Access will take if a user matches this policy.
-type AccessApplicationUpdateResponseAppLauncherApplicationPoliciesDecision string
-
-const (
-	AccessApplicationUpdateResponseAppLauncherApplicationPoliciesDecisionAllow       AccessApplicationUpdateResponseAppLauncherApplicationPoliciesDecision = "allow"
-	AccessApplicationUpdateResponseAppLauncherApplicationPoliciesDecisionDeny        AccessApplicationUpdateResponseAppLauncherApplicationPoliciesDecision = "deny"
-	AccessApplicationUpdateResponseAppLauncherApplicationPoliciesDecisionNonIdentity AccessApplicationUpdateResponseAppLauncherApplicationPoliciesDecision = "non_identity"
-	AccessApplicationUpdateResponseAppLauncherApplicationPoliciesDecisionBypass      AccessApplicationUpdateResponseAppLauncherApplicationPoliciesDecision = "bypass"
-)
-
-func (r AccessApplicationUpdateResponseAppLauncherApplicationPoliciesDecision) IsKnown() bool {
-	switch r {
-	case AccessApplicationUpdateResponseAppLauncherApplicationPoliciesDecisionAllow, AccessApplicationUpdateResponseAppLauncherApplicationPoliciesDecisionDeny, AccessApplicationUpdateResponseAppLauncherApplicationPoliciesDecisionNonIdentity, AccessApplicationUpdateResponseAppLauncherApplicationPoliciesDecisionBypass:
-		return true
-	}
-	return false
-}
-
 // Configuration for provisioning to this application via SCIM. This is currently
 // in closed beta.
 type AccessApplicationUpdateResponseAppLauncherApplicationScimConfig struct {
@@ -8838,7 +8640,7 @@ type AccessApplicationUpdateResponseDeviceEnrollmentPermissionsApplicationPolicy
 	ApprovalRequired bool      `json:"approval_required"`
 	CreatedAt        time.Time `json:"created_at" format:"date-time"`
 	// The action Access will take if a user matches this policy.
-	Decision AccessApplicationUpdateResponseDeviceEnrollmentPermissionsApplicationPoliciesDecision `json:"decision"`
+	Decision Decision `json:"decision"`
 	// Rules evaluated with a NOT logical operator. To match the policy, a user cannot
 	// meet any of the Exclude rules.
 	Exclude []AccessRule `json:"exclude"`
@@ -8896,24 +8698,6 @@ func (r accessApplicationUpdateResponseDeviceEnrollmentPermissionsApplicationPol
 	return r.raw
 }
 
-// The action Access will take if a user matches this policy.
-type AccessApplicationUpdateResponseDeviceEnrollmentPermissionsApplicationPoliciesDecision string
-
-const (
-	AccessApplicationUpdateResponseDeviceEnrollmentPermissionsApplicationPoliciesDecisionAllow       AccessApplicationUpdateResponseDeviceEnrollmentPermissionsApplicationPoliciesDecision = "allow"
-	AccessApplicationUpdateResponseDeviceEnrollmentPermissionsApplicationPoliciesDecisionDeny        AccessApplicationUpdateResponseDeviceEnrollmentPermissionsApplicationPoliciesDecision = "deny"
-	AccessApplicationUpdateResponseDeviceEnrollmentPermissionsApplicationPoliciesDecisionNonIdentity AccessApplicationUpdateResponseDeviceEnrollmentPermissionsApplicationPoliciesDecision = "non_identity"
-	AccessApplicationUpdateResponseDeviceEnrollmentPermissionsApplicationPoliciesDecisionBypass      AccessApplicationUpdateResponseDeviceEnrollmentPermissionsApplicationPoliciesDecision = "bypass"
-)
-
-func (r AccessApplicationUpdateResponseDeviceEnrollmentPermissionsApplicationPoliciesDecision) IsKnown() bool {
-	switch r {
-	case AccessApplicationUpdateResponseDeviceEnrollmentPermissionsApplicationPoliciesDecisionAllow, AccessApplicationUpdateResponseDeviceEnrollmentPermissionsApplicationPoliciesDecisionDeny, AccessApplicationUpdateResponseDeviceEnrollmentPermissionsApplicationPoliciesDecisionNonIdentity, AccessApplicationUpdateResponseDeviceEnrollmentPermissionsApplicationPoliciesDecisionBypass:
-		return true
-	}
-	return false
-}
-
 // Configuration for provisioning to this application via SCIM. This is currently
 // in closed beta.
 type AccessApplicationUpdateResponseDeviceEnrollmentPermissionsApplicationScimConfig struct {
@@ -9366,7 +9150,7 @@ type AccessApplicationUpdateResponseBrowserIsolationPermissionsApplicationPolicy
 	ApprovalRequired bool      `json:"approval_required"`
 	CreatedAt        time.Time `json:"created_at" format:"date-time"`
 	// The action Access will take if a user matches this policy.
-	Decision AccessApplicationUpdateResponseBrowserIsolationPermissionsApplicationPoliciesDecision `json:"decision"`
+	Decision Decision `json:"decision"`
 	// Rules evaluated with a NOT logical operator. To match the policy, a user cannot
 	// meet any of the Exclude rules.
 	Exclude []AccessRule `json:"exclude"`
@@ -9424,24 +9208,6 @@ func (r accessApplicationUpdateResponseBrowserIsolationPermissionsApplicationPol
 	return r.raw
 }
 
-// The action Access will take if a user matches this policy.
-type AccessApplicationUpdateResponseBrowserIsolationPermissionsApplicationPoliciesDecision string
-
-const (
-	AccessApplicationUpdateResponseBrowserIsolationPermissionsApplicationPoliciesDecisionAllow       AccessApplicationUpdateResponseBrowserIsolationPermissionsApplicationPoliciesDecision = "allow"
-	AccessApplicationUpdateResponseBrowserIsolationPermissionsApplicationPoliciesDecisionDeny        AccessApplicationUpdateResponseBrowserIsolationPermissionsApplicationPoliciesDecision = "deny"
-	AccessApplicationUpdateResponseBrowserIsolationPermissionsApplicationPoliciesDecisionNonIdentity AccessApplicationUpdateResponseBrowserIsolationPermissionsApplicationPoliciesDecision = "non_identity"
-	AccessApplicationUpdateResponseBrowserIsolationPermissionsApplicationPoliciesDecisionBypass      AccessApplicationUpdateResponseBrowserIsolationPermissionsApplicationPoliciesDecision = "bypass"
-)
-
-func (r AccessApplicationUpdateResponseBrowserIsolationPermissionsApplicationPoliciesDecision) IsKnown() bool {
-	switch r {
-	case AccessApplicationUpdateResponseBrowserIsolationPermissionsApplicationPoliciesDecisionAllow, AccessApplicationUpdateResponseBrowserIsolationPermissionsApplicationPoliciesDecisionDeny, AccessApplicationUpdateResponseBrowserIsolationPermissionsApplicationPoliciesDecisionNonIdentity, AccessApplicationUpdateResponseBrowserIsolationPermissionsApplicationPoliciesDecisionBypass:
-		return true
-	}
-	return false
-}
-
 // Configuration for provisioning to this application via SCIM. This is currently
 // in closed beta.
 type AccessApplicationUpdateResponseBrowserIsolationPermissionsApplicationScimConfig struct {
@@ -10565,7 +10331,7 @@ type AccessApplicationListResponseSelfHostedApplicationPolicy struct {
 	ApprovalRequired bool      `json:"approval_required"`
 	CreatedAt        time.Time `json:"created_at" format:"date-time"`
 	// The action Access will take if a user matches this policy.
-	Decision AccessApplicationListResponseSelfHostedApplicationPoliciesDecision `json:"decision"`
+	Decision Decision `json:"decision"`
 	// Rules evaluated with a NOT logical operator. To match the policy, a user cannot
 	// meet any of the Exclude rules.
 	Exclude []AccessRule `json:"exclude"`
@@ -10623,24 +10389,6 @@ func (r accessApplicationListResponseSelfHostedApplicationPolicyJSON) RawJSON()
 	return r.raw
 }
 
-// The action Access will take if a user matches this policy.
-type AccessApplicationListResponseSelfHostedApplicationPoliciesDecision string
-
-const (
-	AccessApplicationListResponseSelfHostedApplicationPoliciesDecisionAllow       AccessApplicationListResponseSelfHostedApplicationPoliciesDecision = "allow"
-	AccessApplicationListResponseSelfHostedApplicationPoliciesDecisionDeny        AccessApplicationListResponseSelfHostedApplicationPoliciesDecision = "deny"
-	AccessApplicationListResponseSelfHostedApplicationPoliciesDecisionNonIdentity AccessApplicationListResponseSelfHostedApplicationPoliciesDecision = "non_identity"
-	AccessApplicationListResponseSelfHostedApplicationPoliciesDecisionBypass      AccessApplicationListResponseSelfHostedApplicationPoliciesDecision = "bypass"
-)
-
-func (r AccessApplicationListResponseSelfHostedApplicationPoliciesDecision) IsKnown() bool {
-	switch r {
-	case AccessApplicationListResponseSelfHostedApplicationPoliciesDecisionAllow, AccessApplicationListResponseSelfHostedApplicationPoliciesDecisionDeny, AccessApplicationListResponseSelfHostedApplicationPoliciesDecisionNonIdentity, AccessApplicationListResponseSelfHostedApplicationPoliciesDecisionBypass:
-		return true
-	}
-	return false
-}
-
 // Configuration for provisioning to this application via SCIM. This is currently
 // in closed beta.
 type AccessApplicationListResponseSelfHostedApplicationScimConfig struct {
@@ -11098,7 +10846,7 @@ type AccessApplicationListResponseSaaSApplicationPolicy struct {
 	ApprovalRequired bool      `json:"approval_required"`
 	CreatedAt        time.Time `json:"created_at" format:"date-time"`
 	// The action Access will take if a user matches this policy.
-	Decision AccessApplicationListResponseSaaSApplicationPoliciesDecision `json:"decision"`
+	Decision Decision `json:"decision"`
 	// Rules evaluated with a NOT logical operator. To match the policy, a user cannot
 	// meet any of the Exclude rules.
 	Exclude []AccessRule `json:"exclude"`
@@ -11155,24 +10903,6 @@ func (r accessApplicationListResponseSaaSApplicationPolicyJSON) RawJSON() string
 	return r.raw
 }
 
-// The action Access will take if a user matches this policy.
-type AccessApplicationListResponseSaaSApplicationPoliciesDecision string
-
-const (
-	AccessApplicationListResponseSaaSApplicationPoliciesDecisionAllow       AccessApplicationListResponseSaaSApplicationPoliciesDecision = "allow"
-	AccessApplicationListResponseSaaSApplicationPoliciesDecisionDeny        AccessApplicationListResponseSaaSApplicationPoliciesDecision = "deny"
-	AccessApplicationListResponseSaaSApplicationPoliciesDecisionNonIdentity AccessApplicationListResponseSaaSApplicationPoliciesDecision = "non_identity"
-	AccessApplicationListResponseSaaSApplicationPoliciesDecisionBypass      AccessApplicationListResponseSaaSApplicationPoliciesDecision = "bypass"
-)
-
-func (r AccessApplicationListResponseSaaSApplicationPoliciesDecision) IsKnown() bool {
-	switch r {
-	case AccessApplicationListResponseSaaSApplicationPoliciesDecisionAllow, AccessApplicationListResponseSaaSApplicationPoliciesDecisionDeny, AccessApplicationListResponseSaaSApplicationPoliciesDecisionNonIdentity, AccessApplicationListResponseSaaSApplicationPoliciesDecisionBypass:
-		return true
-	}
-	return false
-}
-
 type AccessApplicationListResponseSaaSApplicationSaaSApp struct {
 	// Optional identifier indicating the authentication protocol used for the saas
 	// app. Required for OIDC. Default if unset is "saml"
@@ -12037,7 +11767,7 @@ type AccessApplicationListResponseBrowserSSHApplicationPolicy struct {
 	ApprovalRequired bool      `json:"approval_required"`
 	CreatedAt        time.Time `json:"created_at" format:"date-time"`
 	// The action Access will take if a user matches this policy.
-	Decision AccessApplicationListResponseBrowserSSHApplicationPoliciesDecision `json:"decision"`
+	Decision Decision `json:"decision"`
 	// Rules evaluated with a NOT logical operator. To match the policy, a user cannot
 	// meet any of the Exclude rules.
 	Exclude []AccessRule `json:"exclude"`
@@ -12095,24 +11825,6 @@ func (r accessApplicationListResponseBrowserSSHApplicationPolicyJSON) RawJSON()
 	return r.raw
 }
 
-// The action Access will take if a user matches this policy.
-type AccessApplicationListResponseBrowserSSHApplicationPoliciesDecision string
-
-const (
-	AccessApplicationListResponseBrowserSSHApplicationPoliciesDecisionAllow       AccessApplicationListResponseBrowserSSHApplicationPoliciesDecision = "allow"
-	AccessApplicationListResponseBrowserSSHApplicationPoliciesDecisionDeny        AccessApplicationListResponseBrowserSSHApplicationPoliciesDecision = "deny"
-	AccessApplicationListResponseBrowserSSHApplicationPoliciesDecisionNonIdentity AccessApplicationListResponseBrowserSSHApplicationPoliciesDecision = "non_identity"
-	AccessApplicationListResponseBrowserSSHApplicationPoliciesDecisionBypass      AccessApplicationListResponseBrowserSSHApplicationPoliciesDecision = "bypass"
-)
-
-func (r AccessApplicationListResponseBrowserSSHApplicationPoliciesDecision) IsKnown() bool {
-	switch r {
-	case AccessApplicationListResponseBrowserSSHApplicationPoliciesDecisionAllow, AccessApplicationListResponseBrowserSSHApplicationPoliciesDecisionDeny, AccessApplicationListResponseBrowserSSHApplicationPoliciesDecisionNonIdentity, AccessApplicationListResponseBrowserSSHApplicationPoliciesDecisionBypass:
-		return true
-	}
-	return false
-}
-
 // Configuration for provisioning to this application via SCIM. This is currently
 // in closed beta.
 type AccessApplicationListResponseBrowserSSHApplicationScimConfig struct {
@@ -12626,7 +12338,7 @@ type AccessApplicationListResponseBrowserVncApplicationPolicy struct {
 	ApprovalRequired bool      `json:"approval_required"`
 	CreatedAt        time.Time `json:"created_at" format:"date-time"`
 	// The action Access will take if a user matches this policy.
-	Decision AccessApplicationListResponseBrowserVncApplicationPoliciesDecision `json:"decision"`
+	Decision Decision `json:"decision"`
 	// Rules evaluated with a NOT logical operator. To match the policy, a user cannot
 	// meet any of the Exclude rules.
 	Exclude []AccessRule `json:"exclude"`
@@ -12684,24 +12396,6 @@ func (r accessApplicationListResponseBrowserVncApplicationPolicyJSON) RawJSON()
 	return r.raw
 }
 
-// The action Access will take if a user matches this policy.
-type AccessApplicationListResponseBrowserVncApplicationPoliciesDecision string
-
-const (
-	AccessApplicationListResponseBrowserVncApplicationPoliciesDecisionAllow       AccessApplicationListResponseBrowserVncApplicationPoliciesDecision = "allow"
-	AccessApplicationListResponseBrowserVncApplicationPoliciesDecisionDeny        AccessApplicationListResponseBrowserVncApplicationPoliciesDecision = "deny"
-	AccessApplicationListResponseBrowserVncApplicationPoliciesDecisionNonIdentity AccessApplicationListResponseBrowserVncApplicationPoliciesDecision = "non_identity"
-	AccessApplicationListResponseBrowserVncApplicationPoliciesDecisionBypass      AccessApplicationListResponseBrowserVncApplicationPoliciesDecision = "bypass"
-)
-
-func (r AccessApplicationListResponseBrowserVncApplicationPoliciesDecision) IsKnown() bool {
-	switch r {
-	case AccessApplicationListResponseBrowserVncApplicationPoliciesDecisionAllow, AccessApplicationListResponseBrowserVncApplicationPoliciesDecisionDeny, AccessApplicationListResponseBrowserVncApplicationPoliciesDecisionNonIdentity, AccessApplicationListResponseBrowserVncApplicationPoliciesDecisionBypass:
-		return true
-	}
-	return false
-}
-
 // Configuration for provisioning to this application via SCIM. This is currently
 // in closed beta.
 type AccessApplicationListResponseBrowserVncApplicationScimConfig struct {
@@ -13153,7 +12847,7 @@ type AccessApplicationListResponseAppLauncherApplicationPolicy struct {
 	ApprovalRequired bool      `json:"approval_required"`
 	CreatedAt        time.Time `json:"created_at" format:"date-time"`
 	// The action Access will take if a user matches this policy.
-	Decision AccessApplicationListResponseAppLauncherApplicationPoliciesDecision `json:"decision"`
+	Decision Decision `json:"decision"`
 	// Rules evaluated with a NOT logical operator. To match the policy, a user cannot
 	// meet any of the Exclude rules.
 	Exclude []AccessRule `json:"exclude"`
@@ -13211,24 +12905,6 @@ func (r accessApplicationListResponseAppLauncherApplicationPolicyJSON) RawJSON()
 	return r.raw
 }
 
-// The action Access will take if a user matches this policy.
-type AccessApplicationListResponseAppLauncherApplicationPoliciesDecision string
-
-const (
-	AccessApplicationListResponseAppLauncherApplicationPoliciesDecisionAllow       AccessApplicationListResponseAppLauncherApplicationPoliciesDecision = "allow"
-	AccessApplicationListResponseAppLauncherApplicationPoliciesDecisionDeny        AccessApplicationListResponseAppLauncherApplicationPoliciesDecision = "deny"
-	AccessApplicationListResponseAppLauncherApplicationPoliciesDecisionNonIdentity AccessApplicationListResponseAppLauncherApplicationPoliciesDecision = "non_identity"
-	AccessApplicationListResponseAppLauncherApplicationPoliciesDecisionBypass      AccessApplicationListResponseAppLauncherApplicationPoliciesDecision = "bypass"
-)
-
-func (r AccessApplicationListResponseAppLauncherApplicationPoliciesDecision) IsKnown() bool {
-	switch r {
-	case AccessApplicationListResponseAppLauncherApplicationPoliciesDecisionAllow, AccessApplicationListResponseAppLauncherApplicationPoliciesDecisionDeny, AccessApplicationListResponseAppLauncherApplicationPoliciesDecisionNonIdentity, AccessApplicationListResponseAppLauncherApplicationPoliciesDecisionBypass:
-		return true
-	}
-	return false
-}
-
 // Configuration for provisioning to this application via SCIM. This is currently
 // in closed beta.
 type AccessApplicationListResponseAppLauncherApplicationScimConfig struct {
@@ -13681,7 +13357,7 @@ type AccessApplicationListResponseDeviceEnrollmentPermissionsApplicationPolicy s
 	ApprovalRequired bool      `json:"approval_required"`
 	CreatedAt        time.Time `json:"created_at" format:"date-time"`
 	// The action Access will take if a user matches this policy.
-	Decision AccessApplicationListResponseDeviceEnrollmentPermissionsApplicationPoliciesDecision `json:"decision"`
+	Decision Decision `json:"decision"`
 	// Rules evaluated with a NOT logical operator. To match the policy, a user cannot
 	// meet any of the Exclude rules.
 	Exclude []AccessRule `json:"exclude"`
@@ -13739,24 +13415,6 @@ func (r accessApplicationListResponseDeviceEnrollmentPermissionsApplicationPolic
 	return r.raw
 }
 
-// The action Access will take if a user matches this policy.
-type AccessApplicationListResponseDeviceEnrollmentPermissionsApplicationPoliciesDecision string
-
-const (
-	AccessApplicationListResponseDeviceEnrollmentPermissionsApplicationPoliciesDecisionAllow       AccessApplicationListResponseDeviceEnrollmentPermissionsApplicationPoliciesDecision = "allow"
-	AccessApplicationListResponseDeviceEnrollmentPermissionsApplicationPoliciesDecisionDeny        AccessApplicationListResponseDeviceEnrollmentPermissionsApplicationPoliciesDecision = "deny"
-	AccessApplicationListResponseDeviceEnrollmentPermissionsApplicationPoliciesDecisionNonIdentity AccessApplicationListResponseDeviceEnrollmentPermissionsApplicationPoliciesDecision = "non_identity"
-	AccessApplicationListResponseDeviceEnrollmentPermissionsApplicationPoliciesDecisionBypass      AccessApplicationListResponseDeviceEnrollmentPermissionsApplicationPoliciesDecision = "bypass"
-)
-
-func (r AccessApplicationListResponseDeviceEnrollmentPermissionsApplicationPoliciesDecision) IsKnown() bool {
-	switch r {
-	case AccessApplicationListResponseDeviceEnrollmentPermissionsApplicationPoliciesDecisionAllow, AccessApplicationListResponseDeviceEnrollmentPermissionsApplicationPoliciesDecisionDeny, AccessApplicationListResponseDeviceEnrollmentPermissionsApplicationPoliciesDecisionNonIdentity, AccessApplicationListResponseDeviceEnrollmentPermissionsApplicationPoliciesDecisionBypass:
-		return true
-	}
-	return false
-}
-
 // Configuration for provisioning to this application via SCIM. This is currently
 // in closed beta.
 type AccessApplicationListResponseDeviceEnrollmentPermissionsApplicationScimConfig struct {
@@ -14209,7 +13867,7 @@ type AccessApplicationListResponseBrowserIsolationPermissionsApplicationPolicy s
 	ApprovalRequired bool      `json:"approval_required"`
 	CreatedAt        time.Time `json:"created_at" format:"date-time"`
 	// The action Access will take if a user matches this policy.
-	Decision AccessApplicationListResponseBrowserIsolationPermissionsApplicationPoliciesDecision `json:"decision"`
+	Decision Decision `json:"decision"`
 	// Rules evaluated with a NOT logical operator. To match the policy, a user cannot
 	// meet any of the Exclude rules.
 	Exclude []AccessRule `json:"exclude"`
@@ -14267,24 +13925,6 @@ func (r accessApplicationListResponseBrowserIsolationPermissionsApplicationPolic
 	return r.raw
 }
 
-// The action Access will take if a user matches this policy.
-type AccessApplicationListResponseBrowserIsolationPermissionsApplicationPoliciesDecision string
-
-const (
-	AccessApplicationListResponseBrowserIsolationPermissionsApplicationPoliciesDecisionAllow       AccessApplicationListResponseBrowserIsolationPermissionsApplicationPoliciesDecision = "allow"
-	AccessApplicationListResponseBrowserIsolationPermissionsApplicationPoliciesDecisionDeny        AccessApplicationListResponseBrowserIsolationPermissionsApplicationPoliciesDecision = "deny"
-	AccessApplicationListResponseBrowserIsolationPermissionsApplicationPoliciesDecisionNonIdentity AccessApplicationListResponseBrowserIsolationPermissionsApplicationPoliciesDecision = "non_identity"
-	AccessApplicationListResponseBrowserIsolationPermissionsApplicationPoliciesDecisionBypass      AccessApplicationListResponseBrowserIsolationPermissionsApplicationPoliciesDecision = "bypass"
-)
-
-func (r AccessApplicationListResponseBrowserIsolationPermissionsApplicationPoliciesDecision) IsKnown() bool {
-	switch r {
-	case AccessApplicationListResponseBrowserIsolationPermissionsApplicationPoliciesDecisionAllow, AccessApplicationListResponseBrowserIsolationPermissionsApplicationPoliciesDecisionDeny, AccessApplicationListResponseBrowserIsolationPermissionsApplicationPoliciesDecisionNonIdentity, AccessApplicationListResponseBrowserIsolationPermissionsApplicationPoliciesDecisionBypass:
-		return true
-	}
-	return false
-}
-
 // Configuration for provisioning to this application via SCIM. This is currently
 // in closed beta.
 type AccessApplicationListResponseBrowserIsolationPermissionsApplicationScimConfig struct {
@@ -15430,7 +15070,7 @@ type AccessApplicationGetResponseSelfHostedApplicationPolicy struct {
 	ApprovalRequired bool      `json:"approval_required"`
 	CreatedAt        time.Time `json:"created_at" format:"date-time"`
 	// The action Access will take if a user matches this policy.
-	Decision AccessApplicationGetResponseSelfHostedApplicationPoliciesDecision `json:"decision"`
+	Decision Decision `json:"decision"`
 	// Rules evaluated with a NOT logical operator. To match the policy, a user cannot
 	// meet any of the Exclude rules.
 	Exclude []AccessRule `json:"exclude"`
@@ -15488,24 +15128,6 @@ func (r accessApplicationGetResponseSelfHostedApplicationPolicyJSON) RawJSON() s
 	return r.raw
 }
 
-// The action Access will take if a user matches this policy.
-type AccessApplicationGetResponseSelfHostedApplicationPoliciesDecision string
-
-const (
-	AccessApplicationGetResponseSelfHostedApplicationPoliciesDecisionAllow       AccessApplicationGetResponseSelfHostedApplicationPoliciesDecision = "allow"
-	AccessApplicationGetResponseSelfHostedApplicationPoliciesDecisionDeny        AccessApplicationGetResponseSelfHostedApplicationPoliciesDecision = "deny"
-	AccessApplicationGetResponseSelfHostedApplicationPoliciesDecisionNonIdentity AccessApplicationGetResponseSelfHostedApplicationPoliciesDecision = "non_identity"
-	AccessApplicationGetResponseSelfHostedApplicationPoliciesDecisionBypass      AccessApplicationGetResponseSelfHostedApplicationPoliciesDecision = "bypass"
-)
-
-func (r AccessApplicationGetResponseSelfHostedApplicationPoliciesDecision) IsKnown() bool {
-	switch r {
-	case AccessApplicationGetResponseSelfHostedApplicationPoliciesDecisionAllow, AccessApplicationGetResponseSelfHostedApplicationPoliciesDecisionDeny, AccessApplicationGetResponseSelfHostedApplicationPoliciesDecisionNonIdentity, AccessApplicationGetResponseSelfHostedApplicationPoliciesDecisionBypass:
-		return true
-	}
-	return false
-}
-
 // Configuration for provisioning to this application via SCIM. This is currently
 // in closed beta.
 type AccessApplicationGetResponseSelfHostedApplicationScimConfig struct {
@@ -15963,7 +15585,7 @@ type AccessApplicationGetResponseSaaSApplicationPolicy struct {
 	ApprovalRequired bool      `json:"approval_required"`
 	CreatedAt        time.Time `json:"created_at" format:"date-time"`
 	// The action Access will take if a user matches this policy.
-	Decision AccessApplicationGetResponseSaaSApplicationPoliciesDecision `json:"decision"`
+	Decision Decision `json:"decision"`
 	// Rules evaluated with a NOT logical operator. To match the policy, a user cannot
 	// meet any of the Exclude rules.
 	Exclude []AccessRule `json:"exclude"`
@@ -16020,24 +15642,6 @@ func (r accessApplicationGetResponseSaaSApplicationPolicyJSON) RawJSON() string
 	return r.raw
 }
 
-// The action Access will take if a user matches this policy.
-type AccessApplicationGetResponseSaaSApplicationPoliciesDecision string
-
-const (
-	AccessApplicationGetResponseSaaSApplicationPoliciesDecisionAllow       AccessApplicationGetResponseSaaSApplicationPoliciesDecision = "allow"
-	AccessApplicationGetResponseSaaSApplicationPoliciesDecisionDeny        AccessApplicationGetResponseSaaSApplicationPoliciesDecision = "deny"
-	AccessApplicationGetResponseSaaSApplicationPoliciesDecisionNonIdentity AccessApplicationGetResponseSaaSApplicationPoliciesDecision = "non_identity"
-	AccessApplicationGetResponseSaaSApplicationPoliciesDecisionBypass      AccessApplicationGetResponseSaaSApplicationPoliciesDecision = "bypass"
-)
-
-func (r AccessApplicationGetResponseSaaSApplicationPoliciesDecision) IsKnown() bool {
-	switch r {
-	case AccessApplicationGetResponseSaaSApplicationPoliciesDecisionAllow, AccessApplicationGetResponseSaaSApplicationPoliciesDecisionDeny, AccessApplicationGetResponseSaaSApplicationPoliciesDecisionNonIdentity, AccessApplicationGetResponseSaaSApplicationPoliciesDecisionBypass:
-		return true
-	}
-	return false
-}
-
 type AccessApplicationGetResponseSaaSApplicationSaaSApp struct {
 	// Optional identifier indicating the authentication protocol used for the saas
 	// app. Required for OIDC. Default if unset is "saml"
@@ -16902,7 +16506,7 @@ type AccessApplicationGetResponseBrowserSSHApplicationPolicy struct {
 	ApprovalRequired bool      `json:"approval_required"`
 	CreatedAt        time.Time `json:"created_at" format:"date-time"`
 	// The action Access will take if a user matches this policy.
-	Decision AccessApplicationGetResponseBrowserSSHApplicationPoliciesDecision `json:"decision"`
+	Decision Decision `json:"decision"`
 	// Rules evaluated with a NOT logical operator. To match the policy, a user cannot
 	// meet any of the Exclude rules.
 	Exclude []AccessRule `json:"exclude"`
@@ -16960,24 +16564,6 @@ func (r accessApplicationGetResponseBrowserSSHApplicationPolicyJSON) RawJSON() s
 	return r.raw
 }
 
-// The action Access will take if a user matches this policy.
-type AccessApplicationGetResponseBrowserSSHApplicationPoliciesDecision string
-
-const (
-	AccessApplicationGetResponseBrowserSSHApplicationPoliciesDecisionAllow       AccessApplicationGetResponseBrowserSSHApplicationPoliciesDecision = "allow"
-	AccessApplicationGetResponseBrowserSSHApplicationPoliciesDecisionDeny        AccessApplicationGetResponseBrowserSSHApplicationPoliciesDecision = "deny"
-	AccessApplicationGetResponseBrowserSSHApplicationPoliciesDecisionNonIdentity AccessApplicationGetResponseBrowserSSHApplicationPoliciesDecision = "non_identity"
-	AccessApplicationGetResponseBrowserSSHApplicationPoliciesDecisionBypass      AccessApplicationGetResponseBrowserSSHApplicationPoliciesDecision = "bypass"
-)
-
-func (r AccessApplicationGetResponseBrowserSSHApplicationPoliciesDecision) IsKnown() bool {
-	switch r {
-	case AccessApplicationGetResponseBrowserSSHApplicationPoliciesDecisionAllow, AccessApplicationGetResponseBrowserSSHApplicationPoliciesDecisionDeny, AccessApplicationGetResponseBrowserSSHApplicationPoliciesDecisionNonIdentity, AccessApplicationGetResponseBrowserSSHApplicationPoliciesDecisionBypass:
-		return true
-	}
-	return false
-}
-
 // Configuration for provisioning to this application via SCIM. This is currently
 // in closed beta.
 type AccessApplicationGetResponseBrowserSSHApplicationScimConfig struct {
@@ -17491,7 +17077,7 @@ type AccessApplicationGetResponseBrowserVncApplicationPolicy struct {
 	ApprovalRequired bool      `json:"approval_required"`
 	CreatedAt        time.Time `json:"created_at" format:"date-time"`
 	// The action Access will take if a user matches this policy.
-	Decision AccessApplicationGetResponseBrowserVncApplicationPoliciesDecision `json:"decision"`
+	Decision Decision `json:"decision"`
 	// Rules evaluated with a NOT logical operator. To match the policy, a user cannot
 	// meet any of the Exclude rules.
 	Exclude []AccessRule `json:"exclude"`
@@ -17549,24 +17135,6 @@ func (r accessApplicationGetResponseBrowserVncApplicationPolicyJSON) RawJSON() s
 	return r.raw
 }
 
-// The action Access will take if a user matches this policy.
-type AccessApplicationGetResponseBrowserVncApplicationPoliciesDecision string
-
-const (
-	AccessApplicationGetResponseBrowserVncApplicationPoliciesDecisionAllow       AccessApplicationGetResponseBrowserVncApplicationPoliciesDecision = "allow"
-	AccessApplicationGetResponseBrowserVncApplicationPoliciesDecisionDeny        AccessApplicationGetResponseBrowserVncApplicationPoliciesDecision = "deny"
-	AccessApplicationGetResponseBrowserVncApplicationPoliciesDecisionNonIdentity AccessApplicationGetResponseBrowserVncApplicationPoliciesDecision = "non_identity"
-	AccessApplicationGetResponseBrowserVncApplicationPoliciesDecisionBypass      AccessApplicationGetResponseBrowserVncApplicationPoliciesDecision = "bypass"
-)
-
-func (r AccessApplicationGetResponseBrowserVncApplicationPoliciesDecision) IsKnown() bool {
-	switch r {
-	case AccessApplicationGetResponseBrowserVncApplicationPoliciesDecisionAllow, AccessApplicationGetResponseBrowserVncApplicationPoliciesDecisionDeny, AccessApplicationGetResponseBrowserVncApplicationPoliciesDecisionNonIdentity, AccessApplicationGetResponseBrowserVncApplicationPoliciesDecisionBypass:
-		return true
-	}
-	return false
-}
-
 // Configuration for provisioning to this application via SCIM. This is currently
 // in closed beta.
 type AccessApplicationGetResponseBrowserVncApplicationScimConfig struct {
@@ -18018,7 +17586,7 @@ type AccessApplicationGetResponseAppLauncherApplicationPolicy struct {
 	ApprovalRequired bool      `json:"approval_required"`
 	CreatedAt        time.Time `json:"created_at" format:"date-time"`
 	// The action Access will take if a user matches this policy.
-	Decision AccessApplicationGetResponseAppLauncherApplicationPoliciesDecision `json:"decision"`
+	Decision Decision `json:"decision"`
 	// Rules evaluated with a NOT logical operator. To match the policy, a user cannot
 	// meet any of the Exclude rules.
 	Exclude []AccessRule `json:"exclude"`
@@ -18076,24 +17644,6 @@ func (r accessApplicationGetResponseAppLauncherApplicationPolicyJSON) RawJSON()
 	return r.raw
 }
 
-// The action Access will take if a user matches this policy.
-type AccessApplicationGetResponseAppLauncherApplicationPoliciesDecision string
-
-const (
-	AccessApplicationGetResponseAppLauncherApplicationPoliciesDecisionAllow       AccessApplicationGetResponseAppLauncherApplicationPoliciesDecision = "allow"
-	AccessApplicationGetResponseAppLauncherApplicationPoliciesDecisionDeny        AccessApplicationGetResponseAppLauncherApplicationPoliciesDecision = "deny"
-	AccessApplicationGetResponseAppLauncherApplicationPoliciesDecisionNonIdentity AccessApplicationGetResponseAppLauncherApplicationPoliciesDecision = "non_identity"
-	AccessApplicationGetResponseAppLauncherApplicationPoliciesDecisionBypass      AccessApplicationGetResponseAppLauncherApplicationPoliciesDecision = "bypass"
-)
-
-func (r AccessApplicationGetResponseAppLauncherApplicationPoliciesDecision) IsKnown() bool {
-	switch r {
-	case AccessApplicationGetResponseAppLauncherApplicationPoliciesDecisionAllow, AccessApplicationGetResponseAppLauncherApplicationPoliciesDecisionDeny, AccessApplicationGetResponseAppLauncherApplicationPoliciesDecisionNonIdentity, AccessApplicationGetResponseAppLauncherApplicationPoliciesDecisionBypass:
-		return true
-	}
-	return false
-}
-
 // Configuration for provisioning to this application via SCIM. This is currently
 // in closed beta.
 type AccessApplicationGetResponseAppLauncherApplicationScimConfig struct {
@@ -18546,7 +18096,7 @@ type AccessApplicationGetResponseDeviceEnrollmentPermissionsApplicationPolicy st
 	ApprovalRequired bool      `json:"approval_required"`
 	CreatedAt        time.Time `json:"created_at" format:"date-time"`
 	// The action Access will take if a user matches this policy.
-	Decision AccessApplicationGetResponseDeviceEnrollmentPermissionsApplicationPoliciesDecision `json:"decision"`
+	Decision Decision `json:"decision"`
 	// Rules evaluated with a NOT logical operator. To match the policy, a user cannot
 	// meet any of the Exclude rules.
 	Exclude []AccessRule `json:"exclude"`
@@ -18604,24 +18154,6 @@ func (r accessApplicationGetResponseDeviceEnrollmentPermissionsApplicationPolicy
 	return r.raw
 }
 
-// The action Access will take if a user matches this policy.
-type AccessApplicationGetResponseDeviceEnrollmentPermissionsApplicationPoliciesDecision string
-
-const (
-	AccessApplicationGetResponseDeviceEnrollmentPermissionsApplicationPoliciesDecisionAllow       AccessApplicationGetResponseDeviceEnrollmentPermissionsApplicationPoliciesDecision = "allow"
-	AccessApplicationGetResponseDeviceEnrollmentPermissionsApplicationPoliciesDecisionDeny        AccessApplicationGetResponseDeviceEnrollmentPermissionsApplicationPoliciesDecision = "deny"
-	AccessApplicationGetResponseDeviceEnrollmentPermissionsApplicationPoliciesDecisionNonIdentity AccessApplicationGetResponseDeviceEnrollmentPermissionsApplicationPoliciesDecision = "non_identity"
-	AccessApplicationGetResponseDeviceEnrollmentPermissionsApplicationPoliciesDecisionBypass      AccessApplicationGetResponseDeviceEnrollmentPermissionsApplicationPoliciesDecision = "bypass"
-)
-
-func (r AccessApplicationGetResponseDeviceEnrollmentPermissionsApplicationPoliciesDecision) IsKnown() bool {
-	switch r {
-	case AccessApplicationGetResponseDeviceEnrollmentPermissionsApplicationPoliciesDecisionAllow, AccessApplicationGetResponseDeviceEnrollmentPermissionsApplicationPoliciesDecisionDeny, AccessApplicationGetResponseDeviceEnrollmentPermissionsApplicationPoliciesDecisionNonIdentity, AccessApplicationGetResponseDeviceEnrollmentPermissionsApplicationPoliciesDecisionBypass:
-		return true
-	}
-	return false
-}
-
 // Configuration for provisioning to this application via SCIM. This is currently
 // in closed beta.
 type AccessApplicationGetResponseDeviceEnrollmentPermissionsApplicationScimConfig struct {
@@ -19074,7 +18606,7 @@ type AccessApplicationGetResponseBrowserIsolationPermissionsApplicationPolicy st
 	ApprovalRequired bool      `json:"approval_required"`
 	CreatedAt        time.Time `json:"created_at" format:"date-time"`
 	// The action Access will take if a user matches this policy.
-	Decision AccessApplicationGetResponseBrowserIsolationPermissionsApplicationPoliciesDecision `json:"decision"`
+	Decision Decision `json:"decision"`
 	// Rules evaluated with a NOT logical operator. To match the policy, a user cannot
 	// meet any of the Exclude rules.
 	Exclude []AccessRule `json:"exclude"`
@@ -19132,24 +18664,6 @@ func (r accessApplicationGetResponseBrowserIsolationPermissionsApplicationPolicy
 	return r.raw
 }
 
-// The action Access will take if a user matches this policy.
-type AccessApplicationGetResponseBrowserIsolationPermissionsApplicationPoliciesDecision string
-
-const (
-	AccessApplicationGetResponseBrowserIsolationPermissionsApplicationPoliciesDecisionAllow       AccessApplicationGetResponseBrowserIsolationPermissionsApplicationPoliciesDecision = "allow"
-	AccessApplicationGetResponseBrowserIsolationPermissionsApplicationPoliciesDecisionDeny        AccessApplicationGetResponseBrowserIsolationPermissionsApplicationPoliciesDecision = "deny"
-	AccessApplicationGetResponseBrowserIsolationPermissionsApplicationPoliciesDecisionNonIdentity AccessApplicationGetResponseBrowserIsolationPermissionsApplicationPoliciesDecision = "non_identity"
-	AccessApplicationGetResponseBrowserIsolationPermissionsApplicationPoliciesDecisionBypass      AccessApplicationGetResponseBrowserIsolationPermissionsApplicationPoliciesDecision = "bypass"
-)
-
-func (r AccessApplicationGetResponseBrowserIsolationPermissionsApplicationPoliciesDecision) IsKnown() bool {
-	switch r {
-	case AccessApplicationGetResponseBrowserIsolationPermissionsApplicationPoliciesDecisionAllow, AccessApplicationGetResponseBrowserIsolationPermissionsApplicationPoliciesDecisionDeny, AccessApplicationGetResponseBrowserIsolationPermissionsApplicationPoliciesDecisionNonIdentity, AccessApplicationGetResponseBrowserIsolationPermissionsApplicationPoliciesDecisionBypass:
-		return true
-	}
-	return false
-}
-
 // Configuration for provisioning to this application via SCIM. This is currently
 // in closed beta.
 type AccessApplicationGetResponseBrowserIsolationPermissionsApplicationScimConfig struct {
@@ -20149,9 +19663,9 @@ type AccessApplicationNewParamsBodySelfHostedApplicationPolicy struct {
 	// session.
 	ApprovalRequired param.Field[bool] `json:"approval_required"`
 	// The action Access will take if a user matches this policy.
-	Decision param.Field[AccessApplicationNewParamsBodySelfHostedApplicationPoliciesDecision] `json:"decision"`
-	Exclude  param.Field[interface{}]                                                         `json:"exclude,required"`
-	Include  param.Field[interface{}]                                                         `json:"include,required"`
+	Decision param.Field[Decision]    `json:"decision"`
+	Exclude  param.Field[interface{}] `json:"exclude,required"`
+	Include  param.Field[interface{}] `json:"include,required"`
 	// Require this application to be served in an isolated browser for users matching
 	// this policy. 'Client Web Isolation' must be on for the account in order to use
 	// this feature.
@@ -20203,7 +19717,7 @@ func (r AccessApplicationNewParamsBodySelfHostedApplicationPoliciesAccessAppPoli
 
 type AccessApplicationNewParamsBodySelfHostedApplicationPoliciesObject struct {
 	// The action Access will take if a user matches this policy.
-	Decision param.Field[AccessApplicationNewParamsBodySelfHostedApplicationPoliciesObjectDecision] `json:"decision,required"`
+	Decision param.Field[Decision] `json:"decision,required"`
 	// Rules evaluated with an OR logical operator. A user needs to meet only one of
 	// the Include rules.
 	Include param.Field[[]AccessRuleUnionParam] `json:"include,required"`
@@ -20244,24 +19758,6 @@ func (r AccessApplicationNewParamsBodySelfHostedApplicationPoliciesObject) Marsh
 func (r AccessApplicationNewParamsBodySelfHostedApplicationPoliciesObject) ImplementsZeroTrustAccessApplicationNewParamsBodySelfHostedApplicationPolicyUnion() {
 }
 
-// The action Access will take if a user matches this policy.
-type AccessApplicationNewParamsBodySelfHostedApplicationPoliciesObjectDecision string
-
-const (
-	AccessApplicationNewParamsBodySelfHostedApplicationPoliciesObjectDecisionAllow       AccessApplicationNewParamsBodySelfHostedApplicationPoliciesObjectDecision = "allow"
-	AccessApplicationNewParamsBodySelfHostedApplicationPoliciesObjectDecisionDeny        AccessApplicationNewParamsBodySelfHostedApplicationPoliciesObjectDecision = "deny"
-	AccessApplicationNewParamsBodySelfHostedApplicationPoliciesObjectDecisionNonIdentity AccessApplicationNewParamsBodySelfHostedApplicationPoliciesObjectDecision = "non_identity"
-	AccessApplicationNewParamsBodySelfHostedApplicationPoliciesObjectDecisionBypass      AccessApplicationNewParamsBodySelfHostedApplicationPoliciesObjectDecision = "bypass"
-)
-
-func (r AccessApplicationNewParamsBodySelfHostedApplicationPoliciesObjectDecision) IsKnown() bool {
-	switch r {
-	case AccessApplicationNewParamsBodySelfHostedApplicationPoliciesObjectDecisionAllow, AccessApplicationNewParamsBodySelfHostedApplicationPoliciesObjectDecisionDeny, AccessApplicationNewParamsBodySelfHostedApplicationPoliciesObjectDecisionNonIdentity, AccessApplicationNewParamsBodySelfHostedApplicationPoliciesObjectDecisionBypass:
-		return true
-	}
-	return false
-}
-
 // Configuration for provisioning to this application via SCIM. This is currently
 // in closed beta.
 type AccessApplicationNewParamsBodySelfHostedApplicationScimConfig struct {
@@ -20539,9 +20035,9 @@ type AccessApplicationNewParamsBodySaaSApplicationPolicy struct {
 	// session.
 	ApprovalRequired param.Field[bool] `json:"approval_required"`
 	// The action Access will take if a user matches this policy.
-	Decision param.Field[AccessApplicationNewParamsBodySaaSApplicationPoliciesDecision] `json:"decision"`
-	Exclude  param.Field[interface{}]                                                   `json:"exclude,required"`
-	Include  param.Field[interface{}]                                                   `json:"include,required"`
+	Decision param.Field[Decision]    `json:"decision"`
+	Exclude  param.Field[interface{}] `json:"exclude,required"`
+	Include  param.Field[interface{}] `json:"include,required"`
 	// Require this application to be served in an isolated browser for users matching
 	// this policy. 'Client Web Isolation' must be on for the account in order to use
 	// this feature.
@@ -20593,7 +20089,7 @@ func (r AccessApplicationNewParamsBodySaaSApplicationPoliciesAccessAppPolicyLink
 
 type AccessApplicationNewParamsBodySaaSApplicationPoliciesObject struct {
 	// The action Access will take if a user matches this policy.
-	Decision param.Field[AccessApplicationNewParamsBodySaaSApplicationPoliciesObjectDecision] `json:"decision,required"`
+	Decision param.Field[Decision] `json:"decision,required"`
 	// Rules evaluated with an OR logical operator. A user needs to meet only one of
 	// the Include rules.
 	Include param.Field[[]AccessRuleUnionParam] `json:"include,required"`
@@ -20634,24 +20130,6 @@ func (r AccessApplicationNewParamsBodySaaSApplicationPoliciesObject) MarshalJSON
 func (r AccessApplicationNewParamsBodySaaSApplicationPoliciesObject) ImplementsZeroTrustAccessApplicationNewParamsBodySaaSApplicationPolicyUnion() {
 }
 
-// The action Access will take if a user matches this policy.
-type AccessApplicationNewParamsBodySaaSApplicationPoliciesObjectDecision string
-
-const (
-	AccessApplicationNewParamsBodySaaSApplicationPoliciesObjectDecisionAllow       AccessApplicationNewParamsBodySaaSApplicationPoliciesObjectDecision = "allow"
-	AccessApplicationNewParamsBodySaaSApplicationPoliciesObjectDecisionDeny        AccessApplicationNewParamsBodySaaSApplicationPoliciesObjectDecision = "deny"
-	AccessApplicationNewParamsBodySaaSApplicationPoliciesObjectDecisionNonIdentity AccessApplicationNewParamsBodySaaSApplicationPoliciesObjectDecision = "non_identity"
-	AccessApplicationNewParamsBodySaaSApplicationPoliciesObjectDecisionBypass      AccessApplicationNewParamsBodySaaSApplicationPoliciesObjectDecision = "bypass"
-)
-
-func (r AccessApplicationNewParamsBodySaaSApplicationPoliciesObjectDecision) IsKnown() bool {
-	switch r {
-	case AccessApplicationNewParamsBodySaaSApplicationPoliciesObjectDecisionAllow, AccessApplicationNewParamsBodySaaSApplicationPoliciesObjectDecisionDeny, AccessApplicationNewParamsBodySaaSApplicationPoliciesObjectDecisionNonIdentity, AccessApplicationNewParamsBodySaaSApplicationPoliciesObjectDecisionBypass:
-		return true
-	}
-	return false
-}
-
 type AccessApplicationNewParamsBodySaaSApplicationSaaSApp struct {
 	// Optional identifier indicating the authentication protocol used for the saas
 	// app. Required for OIDC. Default if unset is "saml"
@@ -21191,9 +20669,9 @@ type AccessApplicationNewParamsBodyBrowserSSHApplicationPolicy struct {
 	// session.
 	ApprovalRequired param.Field[bool] `json:"approval_required"`
 	// The action Access will take if a user matches this policy.
-	Decision param.Field[AccessApplicationNewParamsBodyBrowserSSHApplicationPoliciesDecision] `json:"decision"`
-	Exclude  param.Field[interface{}]                                                         `json:"exclude,required"`
-	Include  param.Field[interface{}]                                                         `json:"include,required"`
+	Decision param.Field[Decision]    `json:"decision"`
+	Exclude  param.Field[interface{}] `json:"exclude,required"`
+	Include  param.Field[interface{}] `json:"include,required"`
 	// Require this application to be served in an isolated browser for users matching
 	// this policy. 'Client Web Isolation' must be on for the account in order to use
 	// this feature.
@@ -21245,7 +20723,7 @@ func (r AccessApplicationNewParamsBodyBrowserSSHApplicationPoliciesAccessAppPoli
 
 type AccessApplicationNewParamsBodyBrowserSSHApplicationPoliciesObject struct {
 	// The action Access will take if a user matches this policy.
-	Decision param.Field[AccessApplicationNewParamsBodyBrowserSSHApplicationPoliciesObjectDecision] `json:"decision,required"`
+	Decision param.Field[Decision] `json:"decision,required"`
 	// Rules evaluated with an OR logical operator. A user needs to meet only one of
 	// the Include rules.
 	Include param.Field[[]AccessRuleUnionParam] `json:"include,required"`
@@ -21286,24 +20764,6 @@ func (r AccessApplicationNewParamsBodyBrowserSSHApplicationPoliciesObject) Marsh
 func (r AccessApplicationNewParamsBodyBrowserSSHApplicationPoliciesObject) ImplementsZeroTrustAccessApplicationNewParamsBodyBrowserSSHApplicationPolicyUnion() {
 }
 
-// The action Access will take if a user matches this policy.
-type AccessApplicationNewParamsBodyBrowserSSHApplicationPoliciesObjectDecision string
-
-const (
-	AccessApplicationNewParamsBodyBrowserSSHApplicationPoliciesObjectDecisionAllow       AccessApplicationNewParamsBodyBrowserSSHApplicationPoliciesObjectDecision = "allow"
-	AccessApplicationNewParamsBodyBrowserSSHApplicationPoliciesObjectDecisionDeny        AccessApplicationNewParamsBodyBrowserSSHApplicationPoliciesObjectDecision = "deny"
-	AccessApplicationNewParamsBodyBrowserSSHApplicationPoliciesObjectDecisionNonIdentity AccessApplicationNewParamsBodyBrowserSSHApplicationPoliciesObjectDecision = "non_identity"
-	AccessApplicationNewParamsBodyBrowserSSHApplicationPoliciesObjectDecisionBypass      AccessApplicationNewParamsBodyBrowserSSHApplicationPoliciesObjectDecision = "bypass"
-)
-
-func (r AccessApplicationNewParamsBodyBrowserSSHApplicationPoliciesObjectDecision) IsKnown() bool {
-	switch r {
-	case AccessApplicationNewParamsBodyBrowserSSHApplicationPoliciesObjectDecisionAllow, AccessApplicationNewParamsBodyBrowserSSHApplicationPoliciesObjectDecisionDeny, AccessApplicationNewParamsBodyBrowserSSHApplicationPoliciesObjectDecisionNonIdentity, AccessApplicationNewParamsBodyBrowserSSHApplicationPoliciesObjectDecisionBypass:
-		return true
-	}
-	return false
-}
-
 // Configuration for provisioning to this application via SCIM. This is currently
 // in closed beta.
 type AccessApplicationNewParamsBodyBrowserSSHApplicationScimConfig struct {
@@ -21623,9 +21083,9 @@ type AccessApplicationNewParamsBodyBrowserVncApplicationPolicy struct {
 	// session.
 	ApprovalRequired param.Field[bool] `json:"approval_required"`
 	// The action Access will take if a user matches this policy.
-	Decision param.Field[AccessApplicationNewParamsBodyBrowserVncApplicationPoliciesDecision] `json:"decision"`
-	Exclude  param.Field[interface{}]                                                         `json:"exclude,required"`
-	Include  param.Field[interface{}]                                                         `json:"include,required"`
+	Decision param.Field[Decision]    `json:"decision"`
+	Exclude  param.Field[interface{}] `json:"exclude,required"`
+	Include  param.Field[interface{}] `json:"include,required"`
 	// Require this application to be served in an isolated browser for users matching
 	// this policy. 'Client Web Isolation' must be on for the account in order to use
 	// this feature.
@@ -21677,7 +21137,7 @@ func (r AccessApplicationNewParamsBodyBrowserVncApplicationPoliciesAccessAppPoli
 
 type AccessApplicationNewParamsBodyBrowserVncApplicationPoliciesObject struct {
 	// The action Access will take if a user matches this policy.
-	Decision param.Field[AccessApplicationNewParamsBodyBrowserVncApplicationPoliciesObjectDecision] `json:"decision,required"`
+	Decision param.Field[Decision] `json:"decision,required"`
 	// Rules evaluated with an OR logical operator. A user needs to meet only one of
 	// the Include rules.
 	Include param.Field[[]AccessRuleUnionParam] `json:"include,required"`
@@ -21718,24 +21178,6 @@ func (r AccessApplicationNewParamsBodyBrowserVncApplicationPoliciesObject) Marsh
 func (r AccessApplicationNewParamsBodyBrowserVncApplicationPoliciesObject) ImplementsZeroTrustAccessApplicationNewParamsBodyBrowserVncApplicationPolicyUnion() {
 }
 
-// The action Access will take if a user matches this policy.
-type AccessApplicationNewParamsBodyBrowserVncApplicationPoliciesObjectDecision string
-
-const (
-	AccessApplicationNewParamsBodyBrowserVncApplicationPoliciesObjectDecisionAllow       AccessApplicationNewParamsBodyBrowserVncApplicationPoliciesObjectDecision = "allow"
-	AccessApplicationNewParamsBodyBrowserVncApplicationPoliciesObjectDecisionDeny        AccessApplicationNewParamsBodyBrowserVncApplicationPoliciesObjectDecision = "deny"
-	AccessApplicationNewParamsBodyBrowserVncApplicationPoliciesObjectDecisionNonIdentity AccessApplicationNewParamsBodyBrowserVncApplicationPoliciesObjectDecision = "non_identity"
-	AccessApplicationNewParamsBodyBrowserVncApplicationPoliciesObjectDecisionBypass      AccessApplicationNewParamsBodyBrowserVncApplicationPoliciesObjectDecision = "bypass"
-)
-
-func (r AccessApplicationNewParamsBodyBrowserVncApplicationPoliciesObjectDecision) IsKnown() bool {
-	switch r {
-	case AccessApplicationNewParamsBodyBrowserVncApplicationPoliciesObjectDecisionAllow, AccessApplicationNewParamsBodyBrowserVncApplicationPoliciesObjectDecisionDeny, AccessApplicationNewParamsBodyBrowserVncApplicationPoliciesObjectDecisionNonIdentity, AccessApplicationNewParamsBodyBrowserVncApplicationPoliciesObjectDecisionBypass:
-		return true
-	}
-	return false
-}
-
 // Configuration for provisioning to this application via SCIM. This is currently
 // in closed beta.
 type AccessApplicationNewParamsBodyBrowserVncApplicationScimConfig struct {
@@ -22005,9 +21447,9 @@ type AccessApplicationNewParamsBodyAppLauncherApplicationPolicy struct {
 	// session.
 	ApprovalRequired param.Field[bool] `json:"approval_required"`
 	// The action Access will take if a user matches this policy.
-	Decision param.Field[AccessApplicationNewParamsBodyAppLauncherApplicationPoliciesDecision] `json:"decision"`
-	Exclude  param.Field[interface{}]                                                          `json:"exclude,required"`
-	Include  param.Field[interface{}]                                                          `json:"include,required"`
+	Decision param.Field[Decision]    `json:"decision"`
+	Exclude  param.Field[interface{}] `json:"exclude,required"`
+	Include  param.Field[interface{}] `json:"include,required"`
 	// Require this application to be served in an isolated browser for users matching
 	// this policy. 'Client Web Isolation' must be on for the account in order to use
 	// this feature.
@@ -22059,7 +21501,7 @@ func (r AccessApplicationNewParamsBodyAppLauncherApplicationPoliciesAccessAppPol
 
 type AccessApplicationNewParamsBodyAppLauncherApplicationPoliciesObject struct {
 	// The action Access will take if a user matches this policy.
-	Decision param.Field[AccessApplicationNewParamsBodyAppLauncherApplicationPoliciesObjectDecision] `json:"decision,required"`
+	Decision param.Field[Decision] `json:"decision,required"`
 	// Rules evaluated with an OR logical operator. A user needs to meet only one of
 	// the Include rules.
 	Include param.Field[[]AccessRuleUnionParam] `json:"include,required"`
@@ -22100,24 +21542,6 @@ func (r AccessApplicationNewParamsBodyAppLauncherApplicationPoliciesObject) Mars
 func (r AccessApplicationNewParamsBodyAppLauncherApplicationPoliciesObject) ImplementsZeroTrustAccessApplicationNewParamsBodyAppLauncherApplicationPolicyUnion() {
 }
 
-// The action Access will take if a user matches this policy.
-type AccessApplicationNewParamsBodyAppLauncherApplicationPoliciesObjectDecision string
-
-const (
-	AccessApplicationNewParamsBodyAppLauncherApplicationPoliciesObjectDecisionAllow       AccessApplicationNewParamsBodyAppLauncherApplicationPoliciesObjectDecision = "allow"
-	AccessApplicationNewParamsBodyAppLauncherApplicationPoliciesObjectDecisionDeny        AccessApplicationNewParamsBodyAppLauncherApplicationPoliciesObjectDecision = "deny"
-	AccessApplicationNewParamsBodyAppLauncherApplicationPoliciesObjectDecisionNonIdentity AccessApplicationNewParamsBodyAppLauncherApplicationPoliciesObjectDecision = "non_identity"
-	AccessApplicationNewParamsBodyAppLauncherApplicationPoliciesObjectDecisionBypass      AccessApplicationNewParamsBodyAppLauncherApplicationPoliciesObjectDecision = "bypass"
-)
-
-func (r AccessApplicationNewParamsBodyAppLauncherApplicationPoliciesObjectDecision) IsKnown() bool {
-	switch r {
-	case AccessApplicationNewParamsBodyAppLauncherApplicationPoliciesObjectDecisionAllow, AccessApplicationNewParamsBodyAppLauncherApplicationPoliciesObjectDecisionDeny, AccessApplicationNewParamsBodyAppLauncherApplicationPoliciesObjectDecisionNonIdentity, AccessApplicationNewParamsBodyAppLauncherApplicationPoliciesObjectDecisionBypass:
-		return true
-	}
-	return false
-}
-
 // Configuration for provisioning to this application via SCIM. This is currently
 // in closed beta.
 type AccessApplicationNewParamsBodyAppLauncherApplicationScimConfig struct {
@@ -22387,9 +21811,9 @@ type AccessApplicationNewParamsBodyDeviceEnrollmentPermissionsApplicationPolicy
 	// session.
 	ApprovalRequired param.Field[bool] `json:"approval_required"`
 	// The action Access will take if a user matches this policy.
-	Decision param.Field[AccessApplicationNewParamsBodyDeviceEnrollmentPermissionsApplicationPoliciesDecision] `json:"decision"`
-	Exclude  param.Field[interface{}]                                                                          `json:"exclude,required"`
-	Include  param.Field[interface{}]                                                                          `json:"include,required"`
+	Decision param.Field[Decision]    `json:"decision"`
+	Exclude  param.Field[interface{}] `json:"exclude,required"`
+	Include  param.Field[interface{}] `json:"include,required"`
 	// Require this application to be served in an isolated browser for users matching
 	// this policy. 'Client Web Isolation' must be on for the account in order to use
 	// this feature.
@@ -22441,7 +21865,7 @@ func (r AccessApplicationNewParamsBodyDeviceEnrollmentPermissionsApplicationPoli
 
 type AccessApplicationNewParamsBodyDeviceEnrollmentPermissionsApplicationPoliciesObject struct {
 	// The action Access will take if a user matches this policy.
-	Decision param.Field[AccessApplicationNewParamsBodyDeviceEnrollmentPermissionsApplicationPoliciesObjectDecision] `json:"decision,required"`
+	Decision param.Field[Decision] `json:"decision,required"`
 	// Rules evaluated with an OR logical operator. A user needs to meet only one of
 	// the Include rules.
 	Include param.Field[[]AccessRuleUnionParam] `json:"include,required"`
@@ -22482,24 +21906,6 @@ func (r AccessApplicationNewParamsBodyDeviceEnrollmentPermissionsApplicationPoli
 func (r AccessApplicationNewParamsBodyDeviceEnrollmentPermissionsApplicationPoliciesObject) ImplementsZeroTrustAccessApplicationNewParamsBodyDeviceEnrollmentPermissionsApplicationPolicyUnion() {
 }
 
-// The action Access will take if a user matches this policy.
-type AccessApplicationNewParamsBodyDeviceEnrollmentPermissionsApplicationPoliciesObjectDecision string
-
-const (
-	AccessApplicationNewParamsBodyDeviceEnrollmentPermissionsApplicationPoliciesObjectDecisionAllow       AccessApplicationNewParamsBodyDeviceEnrollmentPermissionsApplicationPoliciesObjectDecision = "allow"
-	AccessApplicationNewParamsBodyDeviceEnrollmentPermissionsApplicationPoliciesObjectDecisionDeny        AccessApplicationNewParamsBodyDeviceEnrollmentPermissionsApplicationPoliciesObjectDecision = "deny"
-	AccessApplicationNewParamsBodyDeviceEnrollmentPermissionsApplicationPoliciesObjectDecisionNonIdentity AccessApplicationNewParamsBodyDeviceEnrollmentPermissionsApplicationPoliciesObjectDecision = "non_identity"
-	AccessApplicationNewParamsBodyDeviceEnrollmentPermissionsApplicationPoliciesObjectDecisionBypass      AccessApplicationNewParamsBodyDeviceEnrollmentPermissionsApplicationPoliciesObjectDecision = "bypass"
-)
-
-func (r AccessApplicationNewParamsBodyDeviceEnrollmentPermissionsApplicationPoliciesObjectDecision) IsKnown() bool {
-	switch r {
-	case AccessApplicationNewParamsBodyDeviceEnrollmentPermissionsApplicationPoliciesObjectDecisionAllow, AccessApplicationNewParamsBodyDeviceEnrollmentPermissionsApplicationPoliciesObjectDecisionDeny, AccessApplicationNewParamsBodyDeviceEnrollmentPermissionsApplicationPoliciesObjectDecisionNonIdentity, AccessApplicationNewParamsBodyDeviceEnrollmentPermissionsApplicationPoliciesObjectDecisionBypass:
-		return true
-	}
-	return false
-}
-
 // Configuration for provisioning to this application via SCIM. This is currently
 // in closed beta.
 type AccessApplicationNewParamsBodyDeviceEnrollmentPermissionsApplicationScimConfig struct {
@@ -22769,9 +22175,9 @@ type AccessApplicationNewParamsBodyBrowserIsolationPermissionsApplicationPolicy
 	// session.
 	ApprovalRequired param.Field[bool] `json:"approval_required"`
 	// The action Access will take if a user matches this policy.
-	Decision param.Field[AccessApplicationNewParamsBodyBrowserIsolationPermissionsApplicationPoliciesDecision] `json:"decision"`
-	Exclude  param.Field[interface{}]                                                                          `json:"exclude,required"`
-	Include  param.Field[interface{}]                                                                          `json:"include,required"`
+	Decision param.Field[Decision]    `json:"decision"`
+	Exclude  param.Field[interface{}] `json:"exclude,required"`
+	Include  param.Field[interface{}] `json:"include,required"`
 	// Require this application to be served in an isolated browser for users matching
 	// this policy. 'Client Web Isolation' must be on for the account in order to use
 	// this feature.
@@ -22823,7 +22229,7 @@ func (r AccessApplicationNewParamsBodyBrowserIsolationPermissionsApplicationPoli
 
 type AccessApplicationNewParamsBodyBrowserIsolationPermissionsApplicationPoliciesObject struct {
 	// The action Access will take if a user matches this policy.
-	Decision param.Field[AccessApplicationNewParamsBodyBrowserIsolationPermissionsApplicationPoliciesObjectDecision] `json:"decision,required"`
+	Decision param.Field[Decision] `json:"decision,required"`
 	// Rules evaluated with an OR logical operator. A user needs to meet only one of
 	// the Include rules.
 	Include param.Field[[]AccessRuleUnionParam] `json:"include,required"`
@@ -22864,24 +22270,6 @@ func (r AccessApplicationNewParamsBodyBrowserIsolationPermissionsApplicationPoli
 func (r AccessApplicationNewParamsBodyBrowserIsolationPermissionsApplicationPoliciesObject) ImplementsZeroTrustAccessApplicationNewParamsBodyBrowserIsolationPermissionsApplicationPolicyUnion() {
 }
 
-// The action Access will take if a user matches this policy.
-type AccessApplicationNewParamsBodyBrowserIsolationPermissionsApplicationPoliciesObjectDecision string
-
-const (
-	AccessApplicationNewParamsBodyBrowserIsolationPermissionsApplicationPoliciesObjectDecisionAllow       AccessApplicationNewParamsBodyBrowserIsolationPermissionsApplicationPoliciesObjectDecision = "allow"
-	AccessApplicationNewParamsBodyBrowserIsolationPermissionsApplicationPoliciesObjectDecisionDeny        AccessApplicationNewParamsBodyBrowserIsolationPermissionsApplicationPoliciesObjectDecision = "deny"
-	AccessApplicationNewParamsBodyBrowserIsolationPermissionsApplicationPoliciesObjectDecisionNonIdentity AccessApplicationNewParamsBodyBrowserIsolationPermissionsApplicationPoliciesObjectDecision = "non_identity"
-	AccessApplicationNewParamsBodyBrowserIsolationPermissionsApplicationPoliciesObjectDecisionBypass      AccessApplicationNewParamsBodyBrowserIsolationPermissionsApplicationPoliciesObjectDecision = "bypass"
-)
-
-func (r AccessApplicationNewParamsBodyBrowserIsolationPermissionsApplicationPoliciesObjectDecision) IsKnown() bool {
-	switch r {
-	case AccessApplicationNewParamsBodyBrowserIsolationPermissionsApplicationPoliciesObjectDecisionAllow, AccessApplicationNewParamsBodyBrowserIsolationPermissionsApplicationPoliciesObjectDecisionDeny, AccessApplicationNewParamsBodyBrowserIsolationPermissionsApplicationPoliciesObjectDecisionNonIdentity, AccessApplicationNewParamsBodyBrowserIsolationPermissionsApplicationPoliciesObjectDecisionBypass:
-		return true
-	}
-	return false
-}
-
 // Configuration for provisioning to this application via SCIM. This is currently
 // in closed beta.
 type AccessApplicationNewParamsBodyBrowserIsolationPermissionsApplicationScimConfig struct {
@@ -23595,9 +22983,9 @@ type AccessApplicationUpdateParamsBodySelfHostedApplicationPolicy struct {
 	// session.
 	ApprovalRequired param.Field[bool] `json:"approval_required"`
 	// The action Access will take if a user matches this policy.
-	Decision param.Field[AccessApplicationUpdateParamsBodySelfHostedApplicationPoliciesDecision] `json:"decision"`
-	Exclude  param.Field[interface{}]                                                            `json:"exclude,required"`
-	Include  param.Field[interface{}]                                                            `json:"include,required"`
+	Decision param.Field[Decision]    `json:"decision"`
+	Exclude  param.Field[interface{}] `json:"exclude,required"`
+	Include  param.Field[interface{}] `json:"include,required"`
 	// Require this application to be served in an isolated browser for users matching
 	// this policy. 'Client Web Isolation' must be on for the account in order to use
 	// this feature.
@@ -23649,7 +23037,7 @@ func (r AccessApplicationUpdateParamsBodySelfHostedApplicationPoliciesAccessAppP
 
 type AccessApplicationUpdateParamsBodySelfHostedApplicationPoliciesObject struct {
 	// The action Access will take if a user matches this policy.
-	Decision param.Field[AccessApplicationUpdateParamsBodySelfHostedApplicationPoliciesObjectDecision] `json:"decision,required"`
+	Decision param.Field[Decision] `json:"decision,required"`
 	// Rules evaluated with an OR logical operator. A user needs to meet only one of
 	// the Include rules.
 	Include param.Field[[]AccessRuleUnionParam] `json:"include,required"`
@@ -23690,24 +23078,6 @@ func (r AccessApplicationUpdateParamsBodySelfHostedApplicationPoliciesObject) Ma
 func (r AccessApplicationUpdateParamsBodySelfHostedApplicationPoliciesObject) ImplementsZeroTrustAccessApplicationUpdateParamsBodySelfHostedApplicationPolicyUnion() {
 }
 
-// The action Access will take if a user matches this policy.
-type AccessApplicationUpdateParamsBodySelfHostedApplicationPoliciesObjectDecision string
-
-const (
-	AccessApplicationUpdateParamsBodySelfHostedApplicationPoliciesObjectDecisionAllow       AccessApplicationUpdateParamsBodySelfHostedApplicationPoliciesObjectDecision = "allow"
-	AccessApplicationUpdateParamsBodySelfHostedApplicationPoliciesObjectDecisionDeny        AccessApplicationUpdateParamsBodySelfHostedApplicationPoliciesObjectDecision = "deny"
-	AccessApplicationUpdateParamsBodySelfHostedApplicationPoliciesObjectDecisionNonIdentity AccessApplicationUpdateParamsBodySelfHostedApplicationPoliciesObjectDecision = "non_identity"
-	AccessApplicationUpdateParamsBodySelfHostedApplicationPoliciesObjectDecisionBypass      AccessApplicationUpdateParamsBodySelfHostedApplicationPoliciesObjectDecision = "bypass"
-)
-
-func (r AccessApplicationUpdateParamsBodySelfHostedApplicationPoliciesObjectDecision) IsKnown() bool {
-	switch r {
-	case AccessApplicationUpdateParamsBodySelfHostedApplicationPoliciesObjectDecisionAllow, AccessApplicationUpdateParamsBodySelfHostedApplicationPoliciesObjectDecisionDeny, AccessApplicationUpdateParamsBodySelfHostedApplicationPoliciesObjectDecisionNonIdentity, AccessApplicationUpdateParamsBodySelfHostedApplicationPoliciesObjectDecisionBypass:
-		return true
-	}
-	return false
-}
-
 // Configuration for provisioning to this application via SCIM. This is currently
 // in closed beta.
 type AccessApplicationUpdateParamsBodySelfHostedApplicationScimConfig struct {
@@ -23985,9 +23355,9 @@ type AccessApplicationUpdateParamsBodySaaSApplicationPolicy struct {
 	// session.
 	ApprovalRequired param.Field[bool] `json:"approval_required"`
 	// The action Access will take if a user matches this policy.
-	Decision param.Field[AccessApplicationUpdateParamsBodySaaSApplicationPoliciesDecision] `json:"decision"`
-	Exclude  param.Field[interface{}]                                                      `json:"exclude,required"`
-	Include  param.Field[interface{}]                                                      `json:"include,required"`
+	Decision param.Field[Decision]    `json:"decision"`
+	Exclude  param.Field[interface{}] `json:"exclude,required"`
+	Include  param.Field[interface{}] `json:"include,required"`
 	// Require this application to be served in an isolated browser for users matching
 	// this policy. 'Client Web Isolation' must be on for the account in order to use
 	// this feature.
@@ -24039,7 +23409,7 @@ func (r AccessApplicationUpdateParamsBodySaaSApplicationPoliciesAccessAppPolicyL
 
 type AccessApplicationUpdateParamsBodySaaSApplicationPoliciesObject struct {
 	// The action Access will take if a user matches this policy.
-	Decision param.Field[AccessApplicationUpdateParamsBodySaaSApplicationPoliciesObjectDecision] `json:"decision,required"`
+	Decision param.Field[Decision] `json:"decision,required"`
 	// Rules evaluated with an OR logical operator. A user needs to meet only one of
 	// the Include rules.
 	Include param.Field[[]AccessRuleUnionParam] `json:"include,required"`
@@ -24080,24 +23450,6 @@ func (r AccessApplicationUpdateParamsBodySaaSApplicationPoliciesObject) MarshalJ
 func (r AccessApplicationUpdateParamsBodySaaSApplicationPoliciesObject) ImplementsZeroTrustAccessApplicationUpdateParamsBodySaaSApplicationPolicyUnion() {
 }
 
-// The action Access will take if a user matches this policy.
-type AccessApplicationUpdateParamsBodySaaSApplicationPoliciesObjectDecision string
-
-const (
-	AccessApplicationUpdateParamsBodySaaSApplicationPoliciesObjectDecisionAllow       AccessApplicationUpdateParamsBodySaaSApplicationPoliciesObjectDecision = "allow"
-	AccessApplicationUpdateParamsBodySaaSApplicationPoliciesObjectDecisionDeny        AccessApplicationUpdateParamsBodySaaSApplicationPoliciesObjectDecision = "deny"
-	AccessApplicationUpdateParamsBodySaaSApplicationPoliciesObjectDecisionNonIdentity AccessApplicationUpdateParamsBodySaaSApplicationPoliciesObjectDecision = "non_identity"
-	AccessApplicationUpdateParamsBodySaaSApplicationPoliciesObjectDecisionBypass      AccessApplicationUpdateParamsBodySaaSApplicationPoliciesObjectDecision = "bypass"
-)
-
-func (r AccessApplicationUpdateParamsBodySaaSApplicationPoliciesObjectDecision) IsKnown() bool {
-	switch r {
-	case AccessApplicationUpdateParamsBodySaaSApplicationPoliciesObjectDecisionAllow, AccessApplicationUpdateParamsBodySaaSApplicationPoliciesObjectDecisionDeny, AccessApplicationUpdateParamsBodySaaSApplicationPoliciesObjectDecisionNonIdentity, AccessApplicationUpdateParamsBodySaaSApplicationPoliciesObjectDecisionBypass:
-		return true
-	}
-	return false
-}
-
 type AccessApplicationUpdateParamsBodySaaSApplicationSaaSApp struct {
 	// Optional identifier indicating the authentication protocol used for the saas
 	// app. Required for OIDC. Default if unset is "saml"
@@ -24637,9 +23989,9 @@ type AccessApplicationUpdateParamsBodyBrowserSSHApplicationPolicy struct {
 	// session.
 	ApprovalRequired param.Field[bool] `json:"approval_required"`
 	// The action Access will take if a user matches this policy.
-	Decision param.Field[AccessApplicationUpdateParamsBodyBrowserSSHApplicationPoliciesDecision] `json:"decision"`
-	Exclude  param.Field[interface{}]                                                            `json:"exclude,required"`
-	Include  param.Field[interface{}]                                                            `json:"include,required"`
+	Decision param.Field[Decision]    `json:"decision"`
+	Exclude  param.Field[interface{}] `json:"exclude,required"`
+	Include  param.Field[interface{}] `json:"include,required"`
 	// Require this application to be served in an isolated browser for users matching
 	// this policy. 'Client Web Isolation' must be on for the account in order to use
 	// this feature.
@@ -24691,7 +24043,7 @@ func (r AccessApplicationUpdateParamsBodyBrowserSSHApplicationPoliciesAccessAppP
 
 type AccessApplicationUpdateParamsBodyBrowserSSHApplicationPoliciesObject struct {
 	// The action Access will take if a user matches this policy.
-	Decision param.Field[AccessApplicationUpdateParamsBodyBrowserSSHApplicationPoliciesObjectDecision] `json:"decision,required"`
+	Decision param.Field[Decision] `json:"decision,required"`
 	// Rules evaluated with an OR logical operator. A user needs to meet only one of
 	// the Include rules.
 	Include param.Field[[]AccessRuleUnionParam] `json:"include,required"`
@@ -24732,24 +24084,6 @@ func (r AccessApplicationUpdateParamsBodyBrowserSSHApplicationPoliciesObject) Ma
 func (r AccessApplicationUpdateParamsBodyBrowserSSHApplicationPoliciesObject) ImplementsZeroTrustAccessApplicationUpdateParamsBodyBrowserSSHApplicationPolicyUnion() {
 }
 
-// The action Access will take if a user matches this policy.
-type AccessApplicationUpdateParamsBodyBrowserSSHApplicationPoliciesObjectDecision string
-
-const (
-	AccessApplicationUpdateParamsBodyBrowserSSHApplicationPoliciesObjectDecisionAllow       AccessApplicationUpdateParamsBodyBrowserSSHApplicationPoliciesObjectDecision = "allow"
-	AccessApplicationUpdateParamsBodyBrowserSSHApplicationPoliciesObjectDecisionDeny        AccessApplicationUpdateParamsBodyBrowserSSHApplicationPoliciesObjectDecision = "deny"
-	AccessApplicationUpdateParamsBodyBrowserSSHApplicationPoliciesObjectDecisionNonIdentity AccessApplicationUpdateParamsBodyBrowserSSHApplicationPoliciesObjectDecision = "non_identity"
-	AccessApplicationUpdateParamsBodyBrowserSSHApplicationPoliciesObjectDecisionBypass      AccessApplicationUpdateParamsBodyBrowserSSHApplicationPoliciesObjectDecision = "bypass"
-)
-
-func (r AccessApplicationUpdateParamsBodyBrowserSSHApplicationPoliciesObjectDecision) IsKnown() bool {
-	switch r {
-	case AccessApplicationUpdateParamsBodyBrowserSSHApplicationPoliciesObjectDecisionAllow, AccessApplicationUpdateParamsBodyBrowserSSHApplicationPoliciesObjectDecisionDeny, AccessApplicationUpdateParamsBodyBrowserSSHApplicationPoliciesObjectDecisionNonIdentity, AccessApplicationUpdateParamsBodyBrowserSSHApplicationPoliciesObjectDecisionBypass:
-		return true
-	}
-	return false
-}
-
 // Configuration for provisioning to this application via SCIM. This is currently
 // in closed beta.
 type AccessApplicationUpdateParamsBodyBrowserSSHApplicationScimConfig struct {
@@ -25069,9 +24403,9 @@ type AccessApplicationUpdateParamsBodyBrowserVncApplicationPolicy struct {
 	// session.
 	ApprovalRequired param.Field[bool] `json:"approval_required"`
 	// The action Access will take if a user matches this policy.
-	Decision param.Field[AccessApplicationUpdateParamsBodyBrowserVncApplicationPoliciesDecision] `json:"decision"`
-	Exclude  param.Field[interface{}]                                                            `json:"exclude,required"`
-	Include  param.Field[interface{}]                                                            `json:"include,required"`
+	Decision param.Field[Decision]    `json:"decision"`
+	Exclude  param.Field[interface{}] `json:"exclude,required"`
+	Include  param.Field[interface{}] `json:"include,required"`
 	// Require this application to be served in an isolated browser for users matching
 	// this policy. 'Client Web Isolation' must be on for the account in order to use
 	// this feature.
@@ -25123,7 +24457,7 @@ func (r AccessApplicationUpdateParamsBodyBrowserVncApplicationPoliciesAccessAppP
 
 type AccessApplicationUpdateParamsBodyBrowserVncApplicationPoliciesObject struct {
 	// The action Access will take if a user matches this policy.
-	Decision param.Field[AccessApplicationUpdateParamsBodyBrowserVncApplicationPoliciesObjectDecision] `json:"decision,required"`
+	Decision param.Field[Decision] `json:"decision,required"`
 	// Rules evaluated with an OR logical operator. A user needs to meet only one of
 	// the Include rules.
 	Include param.Field[[]AccessRuleUnionParam] `json:"include,required"`
@@ -25164,24 +24498,6 @@ func (r AccessApplicationUpdateParamsBodyBrowserVncApplicationPoliciesObject) Ma
 func (r AccessApplicationUpdateParamsBodyBrowserVncApplicationPoliciesObject) ImplementsZeroTrustAccessApplicationUpdateParamsBodyBrowserVncApplicationPolicyUnion() {
 }
 
-// The action Access will take if a user matches this policy.
-type AccessApplicationUpdateParamsBodyBrowserVncApplicationPoliciesObjectDecision string
-
-const (
-	AccessApplicationUpdateParamsBodyBrowserVncApplicationPoliciesObjectDecisionAllow       AccessApplicationUpdateParamsBodyBrowserVncApplicationPoliciesObjectDecision = "allow"
-	AccessApplicationUpdateParamsBodyBrowserVncApplicationPoliciesObjectDecisionDeny        AccessApplicationUpdateParamsBodyBrowserVncApplicationPoliciesObjectDecision = "deny"
-	AccessApplicationUpdateParamsBodyBrowserVncApplicationPoliciesObjectDecisionNonIdentity AccessApplicationUpdateParamsBodyBrowserVncApplicationPoliciesObjectDecision = "non_identity"
-	AccessApplicationUpdateParamsBodyBrowserVncApplicationPoliciesObjectDecisionBypass      AccessApplicationUpdateParamsBodyBrowserVncApplicationPoliciesObjectDecision = "bypass"
-)
-
-func (r AccessApplicationUpdateParamsBodyBrowserVncApplicationPoliciesObjectDecision) IsKnown() bool {
-	switch r {
-	case AccessApplicationUpdateParamsBodyBrowserVncApplicationPoliciesObjectDecisionAllow, AccessApplicationUpdateParamsBodyBrowserVncApplicationPoliciesObjectDecisionDeny, AccessApplicationUpdateParamsBodyBrowserVncApplicationPoliciesObjectDecisionNonIdentity, AccessApplicationUpdateParamsBodyBrowserVncApplicationPoliciesObjectDecisionBypass:
-		return true
-	}
-	return false
-}
-
 // Configuration for provisioning to this application via SCIM. This is currently
 // in closed beta.
 type AccessApplicationUpdateParamsBodyBrowserVncApplicationScimConfig struct {
@@ -25451,9 +24767,9 @@ type AccessApplicationUpdateParamsBodyAppLauncherApplicationPolicy struct {
 	// session.
 	ApprovalRequired param.Field[bool] `json:"approval_required"`
 	// The action Access will take if a user matches this policy.
-	Decision param.Field[AccessApplicationUpdateParamsBodyAppLauncherApplicationPoliciesDecision] `json:"decision"`
-	Exclude  param.Field[interface{}]                                                             `json:"exclude,required"`
-	Include  param.Field[interface{}]                                                             `json:"include,required"`
+	Decision param.Field[Decision]    `json:"decision"`
+	Exclude  param.Field[interface{}] `json:"exclude,required"`
+	Include  param.Field[interface{}] `json:"include,required"`
 	// Require this application to be served in an isolated browser for users matching
 	// this policy. 'Client Web Isolation' must be on for the account in order to use
 	// this feature.
@@ -25505,7 +24821,7 @@ func (r AccessApplicationUpdateParamsBodyAppLauncherApplicationPoliciesAccessApp
 
 type AccessApplicationUpdateParamsBodyAppLauncherApplicationPoliciesObject struct {
 	// The action Access will take if a user matches this policy.
-	Decision param.Field[AccessApplicationUpdateParamsBodyAppLauncherApplicationPoliciesObjectDecision] `json:"decision,required"`
+	Decision param.Field[Decision] `json:"decision,required"`
 	// Rules evaluated with an OR logical operator. A user needs to meet only one of
 	// the Include rules.
 	Include param.Field[[]AccessRuleUnionParam] `json:"include,required"`
@@ -25546,24 +24862,6 @@ func (r AccessApplicationUpdateParamsBodyAppLauncherApplicationPoliciesObject) M
 func (r AccessApplicationUpdateParamsBodyAppLauncherApplicationPoliciesObject) ImplementsZeroTrustAccessApplicationUpdateParamsBodyAppLauncherApplicationPolicyUnion() {
 }
 
-// The action Access will take if a user matches this policy.
-type AccessApplicationUpdateParamsBodyAppLauncherApplicationPoliciesObjectDecision string
-
-const (
-	AccessApplicationUpdateParamsBodyAppLauncherApplicationPoliciesObjectDecisionAllow       AccessApplicationUpdateParamsBodyAppLauncherApplicationPoliciesObjectDecision = "allow"
-	AccessApplicationUpdateParamsBodyAppLauncherApplicationPoliciesObjectDecisionDeny        AccessApplicationUpdateParamsBodyAppLauncherApplicationPoliciesObjectDecision = "deny"
-	AccessApplicationUpdateParamsBodyAppLauncherApplicationPoliciesObjectDecisionNonIdentity AccessApplicationUpdateParamsBodyAppLauncherApplicationPoliciesObjectDecision = "non_identity"
-	AccessApplicationUpdateParamsBodyAppLauncherApplicationPoliciesObjectDecisionBypass      AccessApplicationUpdateParamsBodyAppLauncherApplicationPoliciesObjectDecision = "bypass"
-)
-
-func (r AccessApplicationUpdateParamsBodyAppLauncherApplicationPoliciesObjectDecision) IsKnown() bool {
-	switch r {
-	case AccessApplicationUpdateParamsBodyAppLauncherApplicationPoliciesObjectDecisionAllow, AccessApplicationUpdateParamsBodyAppLauncherApplicationPoliciesObjectDecisionDeny, AccessApplicationUpdateParamsBodyAppLauncherApplicationPoliciesObjectDecisionNonIdentity, AccessApplicationUpdateParamsBodyAppLauncherApplicationPoliciesObjectDecisionBypass:
-		return true
-	}
-	return false
-}
-
 // Configuration for provisioning to this application via SCIM. This is currently
 // in closed beta.
 type AccessApplicationUpdateParamsBodyAppLauncherApplicationScimConfig struct {
@@ -25833,9 +25131,9 @@ type AccessApplicationUpdateParamsBodyDeviceEnrollmentPermissionsApplicationPoli
 	// session.
 	ApprovalRequired param.Field[bool] `json:"approval_required"`
 	// The action Access will take if a user matches this policy.
-	Decision param.Field[AccessApplicationUpdateParamsBodyDeviceEnrollmentPermissionsApplicationPoliciesDecision] `json:"decision"`
-	Exclude  param.Field[interface{}]                                                                             `json:"exclude,required"`
-	Include  param.Field[interface{}]                                                                             `json:"include,required"`
+	Decision param.Field[Decision]    `json:"decision"`
+	Exclude  param.Field[interface{}] `json:"exclude,required"`
+	Include  param.Field[interface{}] `json:"include,required"`
 	// Require this application to be served in an isolated browser for users matching
 	// this policy. 'Client Web Isolation' must be on for the account in order to use
 	// this feature.
@@ -25887,7 +25185,7 @@ func (r AccessApplicationUpdateParamsBodyDeviceEnrollmentPermissionsApplicationP
 
 type AccessApplicationUpdateParamsBodyDeviceEnrollmentPermissionsApplicationPoliciesObject struct {
 	// The action Access will take if a user matches this policy.
-	Decision param.Field[AccessApplicationUpdateParamsBodyDeviceEnrollmentPermissionsApplicationPoliciesObjectDecision] `json:"decision,required"`
+	Decision param.Field[Decision] `json:"decision,required"`
 	// Rules evaluated with an OR logical operator. A user needs to meet only one of
 	// the Include rules.
 	Include param.Field[[]AccessRuleUnionParam] `json:"include,required"`
@@ -25928,24 +25226,6 @@ func (r AccessApplicationUpdateParamsBodyDeviceEnrollmentPermissionsApplicationP
 func (r AccessApplicationUpdateParamsBodyDeviceEnrollmentPermissionsApplicationPoliciesObject) ImplementsZeroTrustAccessApplicationUpdateParamsBodyDeviceEnrollmentPermissionsApplicationPolicyUnion() {
 }
 
-// The action Access will take if a user matches this policy.
-type AccessApplicationUpdateParamsBodyDeviceEnrollmentPermissionsApplicationPoliciesObjectDecision string
-
-const (
-	AccessApplicationUpdateParamsBodyDeviceEnrollmentPermissionsApplicationPoliciesObjectDecisionAllow       AccessApplicationUpdateParamsBodyDeviceEnrollmentPermissionsApplicationPoliciesObjectDecision = "allow"
-	AccessApplicationUpdateParamsBodyDeviceEnrollmentPermissionsApplicationPoliciesObjectDecisionDeny        AccessApplicationUpdateParamsBodyDeviceEnrollmentPermissionsApplicationPoliciesObjectDecision = "deny"
-	AccessApplicationUpdateParamsBodyDeviceEnrollmentPermissionsApplicationPoliciesObjectDecisionNonIdentity AccessApplicationUpdateParamsBodyDeviceEnrollmentPermissionsApplicationPoliciesObjectDecision = "non_identity"
-	AccessApplicationUpdateParamsBodyDeviceEnrollmentPermissionsApplicationPoliciesObjectDecisionBypass      AccessApplicationUpdateParamsBodyDeviceEnrollmentPermissionsApplicationPoliciesObjectDecision = "bypass"
-)
-
-func (r AccessApplicationUpdateParamsBodyDeviceEnrollmentPermissionsApplicationPoliciesObjectDecision) IsKnown() bool {
-	switch r {
-	case AccessApplicationUpdateParamsBodyDeviceEnrollmentPermissionsApplicationPoliciesObjectDecisionAllow, AccessApplicationUpdateParamsBodyDeviceEnrollmentPermissionsApplicationPoliciesObjectDecisionDeny, AccessApplicationUpdateParamsBodyDeviceEnrollmentPermissionsApplicationPoliciesObjectDecisionNonIdentity, AccessApplicationUpdateParamsBodyDeviceEnrollmentPermissionsApplicationPoliciesObjectDecisionBypass:
-		return true
-	}
-	return false
-}
-
 // Configuration for provisioning to this application via SCIM. This is currently
 // in closed beta.
 type AccessApplicationUpdateParamsBodyDeviceEnrollmentPermissionsApplicationScimConfig struct {
@@ -26215,9 +25495,9 @@ type AccessApplicationUpdateParamsBodyBrowserIsolationPermissionsApplicationPoli
 	// session.
 	ApprovalRequired param.Field[bool] `json:"approval_required"`
 	// The action Access will take if a user matches this policy.
-	Decision param.Field[AccessApplicationUpdateParamsBodyBrowserIsolationPermissionsApplicationPoliciesDecision] `json:"decision"`
-	Exclude  param.Field[interface{}]                                                                             `json:"exclude,required"`
-	Include  param.Field[interface{}]                                                                             `json:"include,required"`
+	Decision param.Field[Decision]    `json:"decision"`
+	Exclude  param.Field[interface{}] `json:"exclude,required"`
+	Include  param.Field[interface{}] `json:"include,required"`
 	// Require this application to be served in an isolated browser for users matching
 	// this policy. 'Client Web Isolation' must be on for the account in order to use
 	// this feature.
@@ -26269,7 +25549,7 @@ func (r AccessApplicationUpdateParamsBodyBrowserIsolationPermissionsApplicationP
 
 type AccessApplicationUpdateParamsBodyBrowserIsolationPermissionsApplicationPoliciesObject struct {
 	// The action Access will take if a user matches this policy.
-	Decision param.Field[AccessApplicationUpdateParamsBodyBrowserIsolationPermissionsApplicationPoliciesObjectDecision] `json:"decision,required"`
+	Decision param.Field[Decision] `json:"decision,required"`
 	// Rules evaluated with an OR logical operator. A user needs to meet only one of
 	// the Include rules.
 	Include param.Field[[]AccessRuleUnionParam] `json:"include,required"`
@@ -26310,24 +25590,6 @@ func (r AccessApplicationUpdateParamsBodyBrowserIsolationPermissionsApplicationP
 func (r AccessApplicationUpdateParamsBodyBrowserIsolationPermissionsApplicationPoliciesObject) ImplementsZeroTrustAccessApplicationUpdateParamsBodyBrowserIsolationPermissionsApplicationPolicyUnion() {
 }
 
-// The action Access will take if a user matches this policy.
-type AccessApplicationUpdateParamsBodyBrowserIsolationPermissionsApplicationPoliciesObjectDecision string
-
-const (
-	AccessApplicationUpdateParamsBodyBrowserIsolationPermissionsApplicationPoliciesObjectDecisionAllow       AccessApplicationUpdateParamsBodyBrowserIsolationPermissionsApplicationPoliciesObjectDecision = "allow"
-	AccessApplicationUpdateParamsBodyBrowserIsolationPermissionsApplicationPoliciesObjectDecisionDeny        AccessApplicationUpdateParamsBodyBrowserIsolationPermissionsApplicationPoliciesObjectDecision = "deny"
-	AccessApplicationUpdateParamsBodyBrowserIsolationPermissionsApplicationPoliciesObjectDecisionNonIdentity AccessApplicationUpdateParamsBodyBrowserIsolationPermissionsApplicationPoliciesObjectDecision = "non_identity"
-	AccessApplicationUpdateParamsBodyBrowserIsolationPermissionsApplicationPoliciesObjectDecisionBypass      AccessApplicationUpdateParamsBodyBrowserIsolationPermissionsApplicationPoliciesObjectDecision = "bypass"
-)
-
-func (r AccessApplicationUpdateParamsBodyBrowserIsolationPermissionsApplicationPoliciesObjectDecision) IsKnown() bool {
-	switch r {
-	case AccessApplicationUpdateParamsBodyBrowserIsolationPermissionsApplicationPoliciesObjectDecisionAllow, AccessApplicationUpdateParamsBodyBrowserIsolationPermissionsApplicationPoliciesObjectDecisionDeny, AccessApplicationUpdateParamsBodyBrowserIsolationPermissionsApplicationPoliciesObjectDecisionNonIdentity, AccessApplicationUpdateParamsBodyBrowserIsolationPermissionsApplicationPoliciesObjectDecisionBypass:
-		return true
-	}
-	return false
-}
-
 // Configuration for provisioning to this application via SCIM. This is currently
 // in closed beta.
 type AccessApplicationUpdateParamsBodyBrowserIsolationPermissionsApplicationScimConfig struct {
diff --git a/zero_trust/accessapplicationpolicy.go b/zero_trust/accessapplicationpolicy.go
index bfa9bbfcf..f1b0d518a 100644
--- a/zero_trust/accessapplicationpolicy.go
+++ b/zero_trust/accessapplicationpolicy.go
@@ -215,7 +215,7 @@ type AccessApplicationPolicyNewResponse struct {
 	ApprovalRequired bool      `json:"approval_required"`
 	CreatedAt        time.Time `json:"created_at" format:"date-time"`
 	// The action Access will take if a user matches this policy.
-	Decision AccessApplicationPolicyNewResponseDecision `json:"decision"`
+	Decision Decision `json:"decision"`
 	// Rules evaluated with a NOT logical operator. To match the policy, a user cannot
 	// meet any of the Exclude rules.
 	Exclude []AccessRule `json:"exclude"`
@@ -272,24 +272,6 @@ func (r accessApplicationPolicyNewResponseJSON) RawJSON() string {
 	return r.raw
 }
 
-// The action Access will take if a user matches this policy.
-type AccessApplicationPolicyNewResponseDecision string
-
-const (
-	AccessApplicationPolicyNewResponseDecisionAllow       AccessApplicationPolicyNewResponseDecision = "allow"
-	AccessApplicationPolicyNewResponseDecisionDeny        AccessApplicationPolicyNewResponseDecision = "deny"
-	AccessApplicationPolicyNewResponseDecisionNonIdentity AccessApplicationPolicyNewResponseDecision = "non_identity"
-	AccessApplicationPolicyNewResponseDecisionBypass      AccessApplicationPolicyNewResponseDecision = "bypass"
-)
-
-func (r AccessApplicationPolicyNewResponseDecision) IsKnown() bool {
-	switch r {
-	case AccessApplicationPolicyNewResponseDecisionAllow, AccessApplicationPolicyNewResponseDecisionDeny, AccessApplicationPolicyNewResponseDecisionNonIdentity, AccessApplicationPolicyNewResponseDecisionBypass:
-		return true
-	}
-	return false
-}
-
 type AccessApplicationPolicyUpdateResponse struct {
 	// UUID
 	ID string `json:"id"`
@@ -300,7 +282,7 @@ type AccessApplicationPolicyUpdateResponse struct {
 	ApprovalRequired bool      `json:"approval_required"`
 	CreatedAt        time.Time `json:"created_at" format:"date-time"`
 	// The action Access will take if a user matches this policy.
-	Decision AccessApplicationPolicyUpdateResponseDecision `json:"decision"`
+	Decision Decision `json:"decision"`
 	// Rules evaluated with a NOT logical operator. To match the policy, a user cannot
 	// meet any of the Exclude rules.
 	Exclude []AccessRule `json:"exclude"`
@@ -357,24 +339,6 @@ func (r accessApplicationPolicyUpdateResponseJSON) RawJSON() string {
 	return r.raw
 }
 
-// The action Access will take if a user matches this policy.
-type AccessApplicationPolicyUpdateResponseDecision string
-
-const (
-	AccessApplicationPolicyUpdateResponseDecisionAllow       AccessApplicationPolicyUpdateResponseDecision = "allow"
-	AccessApplicationPolicyUpdateResponseDecisionDeny        AccessApplicationPolicyUpdateResponseDecision = "deny"
-	AccessApplicationPolicyUpdateResponseDecisionNonIdentity AccessApplicationPolicyUpdateResponseDecision = "non_identity"
-	AccessApplicationPolicyUpdateResponseDecisionBypass      AccessApplicationPolicyUpdateResponseDecision = "bypass"
-)
-
-func (r AccessApplicationPolicyUpdateResponseDecision) IsKnown() bool {
-	switch r {
-	case AccessApplicationPolicyUpdateResponseDecisionAllow, AccessApplicationPolicyUpdateResponseDecisionDeny, AccessApplicationPolicyUpdateResponseDecisionNonIdentity, AccessApplicationPolicyUpdateResponseDecisionBypass:
-		return true
-	}
-	return false
-}
-
 type AccessApplicationPolicyListResponse struct {
 	// UUID
 	ID string `json:"id"`
@@ -385,7 +349,7 @@ type AccessApplicationPolicyListResponse struct {
 	ApprovalRequired bool      `json:"approval_required"`
 	CreatedAt        time.Time `json:"created_at" format:"date-time"`
 	// The action Access will take if a user matches this policy.
-	Decision AccessApplicationPolicyListResponseDecision `json:"decision"`
+	Decision Decision `json:"decision"`
 	// Rules evaluated with a NOT logical operator. To match the policy, a user cannot
 	// meet any of the Exclude rules.
 	Exclude []AccessRule `json:"exclude"`
@@ -442,24 +406,6 @@ func (r accessApplicationPolicyListResponseJSON) RawJSON() string {
 	return r.raw
 }
 
-// The action Access will take if a user matches this policy.
-type AccessApplicationPolicyListResponseDecision string
-
-const (
-	AccessApplicationPolicyListResponseDecisionAllow       AccessApplicationPolicyListResponseDecision = "allow"
-	AccessApplicationPolicyListResponseDecisionDeny        AccessApplicationPolicyListResponseDecision = "deny"
-	AccessApplicationPolicyListResponseDecisionNonIdentity AccessApplicationPolicyListResponseDecision = "non_identity"
-	AccessApplicationPolicyListResponseDecisionBypass      AccessApplicationPolicyListResponseDecision = "bypass"
-)
-
-func (r AccessApplicationPolicyListResponseDecision) IsKnown() bool {
-	switch r {
-	case AccessApplicationPolicyListResponseDecisionAllow, AccessApplicationPolicyListResponseDecisionDeny, AccessApplicationPolicyListResponseDecisionNonIdentity, AccessApplicationPolicyListResponseDecisionBypass:
-		return true
-	}
-	return false
-}
-
 type AccessApplicationPolicyDeleteResponse struct {
 	// UUID
 	ID   string                                    `json:"id"`
@@ -492,7 +438,7 @@ type AccessApplicationPolicyGetResponse struct {
 	ApprovalRequired bool      `json:"approval_required"`
 	CreatedAt        time.Time `json:"created_at" format:"date-time"`
 	// The action Access will take if a user matches this policy.
-	Decision AccessApplicationPolicyGetResponseDecision `json:"decision"`
+	Decision Decision `json:"decision"`
 	// Rules evaluated with a NOT logical operator. To match the policy, a user cannot
 	// meet any of the Exclude rules.
 	Exclude []AccessRule `json:"exclude"`
@@ -549,27 +495,9 @@ func (r accessApplicationPolicyGetResponseJSON) RawJSON() string {
 	return r.raw
 }
 
-// The action Access will take if a user matches this policy.
-type AccessApplicationPolicyGetResponseDecision string
-
-const (
-	AccessApplicationPolicyGetResponseDecisionAllow       AccessApplicationPolicyGetResponseDecision = "allow"
-	AccessApplicationPolicyGetResponseDecisionDeny        AccessApplicationPolicyGetResponseDecision = "deny"
-	AccessApplicationPolicyGetResponseDecisionNonIdentity AccessApplicationPolicyGetResponseDecision = "non_identity"
-	AccessApplicationPolicyGetResponseDecisionBypass      AccessApplicationPolicyGetResponseDecision = "bypass"
-)
-
-func (r AccessApplicationPolicyGetResponseDecision) IsKnown() bool {
-	switch r {
-	case AccessApplicationPolicyGetResponseDecisionAllow, AccessApplicationPolicyGetResponseDecisionDeny, AccessApplicationPolicyGetResponseDecisionNonIdentity, AccessApplicationPolicyGetResponseDecisionBypass:
-		return true
-	}
-	return false
-}
-
 type AccessApplicationPolicyNewParams struct {
 	// The action Access will take if a user matches this policy.
-	Decision param.Field[AccessApplicationPolicyNewParamsDecision] `json:"decision,required"`
+	Decision param.Field[Decision] `json:"decision,required"`
 	// Rules evaluated with an OR logical operator. A user needs to meet only one of
 	// the Include rules.
 	Include param.Field[[]AccessRuleUnionParam] `json:"include,required"`
@@ -611,24 +539,6 @@ func (r AccessApplicationPolicyNewParams) MarshalJSON() (data []byte, err error)
 	return apijson.MarshalRoot(r)
 }
 
-// The action Access will take if a user matches this policy.
-type AccessApplicationPolicyNewParamsDecision string
-
-const (
-	AccessApplicationPolicyNewParamsDecisionAllow       AccessApplicationPolicyNewParamsDecision = "allow"
-	AccessApplicationPolicyNewParamsDecisionDeny        AccessApplicationPolicyNewParamsDecision = "deny"
-	AccessApplicationPolicyNewParamsDecisionNonIdentity AccessApplicationPolicyNewParamsDecision = "non_identity"
-	AccessApplicationPolicyNewParamsDecisionBypass      AccessApplicationPolicyNewParamsDecision = "bypass"
-)
-
-func (r AccessApplicationPolicyNewParamsDecision) IsKnown() bool {
-	switch r {
-	case AccessApplicationPolicyNewParamsDecisionAllow, AccessApplicationPolicyNewParamsDecisionDeny, AccessApplicationPolicyNewParamsDecisionNonIdentity, AccessApplicationPolicyNewParamsDecisionBypass:
-		return true
-	}
-	return false
-}
-
 type AccessApplicationPolicyNewResponseEnvelope struct {
 	Errors   []shared.ResponseInfo `json:"errors,required"`
 	Messages []shared.ResponseInfo `json:"messages,required"`
@@ -674,7 +584,7 @@ func (r AccessApplicationPolicyNewResponseEnvelopeSuccess) IsKnown() bool {
 
 type AccessApplicationPolicyUpdateParams struct {
 	// The action Access will take if a user matches this policy.
-	Decision param.Field[AccessApplicationPolicyUpdateParamsDecision] `json:"decision,required"`
+	Decision param.Field[Decision] `json:"decision,required"`
 	// Rules evaluated with an OR logical operator. A user needs to meet only one of
 	// the Include rules.
 	Include param.Field[[]AccessRuleUnionParam] `json:"include,required"`
@@ -716,24 +626,6 @@ func (r AccessApplicationPolicyUpdateParams) MarshalJSON() (data []byte, err err
 	return apijson.MarshalRoot(r)
 }
 
-// The action Access will take if a user matches this policy.
-type AccessApplicationPolicyUpdateParamsDecision string
-
-const (
-	AccessApplicationPolicyUpdateParamsDecisionAllow       AccessApplicationPolicyUpdateParamsDecision = "allow"
-	AccessApplicationPolicyUpdateParamsDecisionDeny        AccessApplicationPolicyUpdateParamsDecision = "deny"
-	AccessApplicationPolicyUpdateParamsDecisionNonIdentity AccessApplicationPolicyUpdateParamsDecision = "non_identity"
-	AccessApplicationPolicyUpdateParamsDecisionBypass      AccessApplicationPolicyUpdateParamsDecision = "bypass"
-)
-
-func (r AccessApplicationPolicyUpdateParamsDecision) IsKnown() bool {
-	switch r {
-	case AccessApplicationPolicyUpdateParamsDecisionAllow, AccessApplicationPolicyUpdateParamsDecisionDeny, AccessApplicationPolicyUpdateParamsDecisionNonIdentity, AccessApplicationPolicyUpdateParamsDecisionBypass:
-		return true
-	}
-	return false
-}
-
 type AccessApplicationPolicyUpdateResponseEnvelope struct {
 	Errors   []shared.ResponseInfo `json:"errors,required"`
 	Messages []shared.ResponseInfo `json:"messages,required"`


Test patch:
diff --git a/zero_trust/accessapplicationpolicy_test.go b/zero_trust/accessapplicationpolicy_test.go
index e25693bf6..e8caeb3e6 100644
--- a/zero_trust/accessapplicationpolicy_test.go
+++ b/zero_trust/accessapplicationpolicy_test.go
@@ -32,7 +32,7 @@ func TestAccessApplicationPolicyNewWithOptionalParams(t *testing.T) {
 		context.TODO(),
 		"f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
 		zero_trust.AccessApplicationPolicyNewParams{
-			Decision: cloudflare.F(zero_trust.AccessApplicationPolicyNewParamsDecisionAllow),
+			Decision: cloudflare.F(zero_trust.DecisionAllow),
 			Include: cloudflare.F([]zero_trust.AccessRuleUnionParam{zero_trust.EmailRuleParam{
 				Email: cloudflare.F(zero_trust.EmailRuleEmailParam{
 					Email: cloudflare.F("test@example.com"),
@@ -120,7 +120,7 @@ func TestAccessApplicationPolicyUpdateWithOptionalParams(t *testing.T) {
 		"f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
 		"f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
 		zero_trust.AccessApplicationPolicyUpdateParams{
-			Decision: cloudflare.F(zero_trust.AccessApplicationPolicyUpdateParamsDecisionAllow),
+			Decision: cloudflare.F(zero_trust.DecisionAllow),
 			Include: cloudflare.F([]zero_trust.AccessRuleUnionParam{zero_trust.EmailRuleParam{
 				Email: cloudflare.F(zero_trust.EmailRuleEmailParam{
 					Email: cloudflare.F("test@example.com"),