async (
      directory: string,
      existingHandle?: FileSystemDirectoryHandle
    ): Promise<string> => {
      let handle: FileSystemDirectoryHandle;

      try {
        handle = existingHandle ?? (await window.showDirectoryPicker());
      } catch {
        // Ignore cancelling the dialog
      }

      return new Promise((resolve, reject) => {
        if (handle instanceof FileSystemDirectoryHandle) {
          FileSystemAccess?.Create({ handle }, (error, newFs) => {
            if (error || !newFs) reject();
            else {
              rootFs?.mount?.(join(directory, handle.name), newFs);
              resolve(handle.name);
              addFileSystemHandle(directory, handle);
            }
          });
        }
      });
    }


(resolve, reject) => {
        if (handle instanceof FileSystemDirectoryHandle) {
          FileSystemAccess?.Create({ handle }, (error, newFs) => {
            if (error || !newFs) reject();
            else {
              rootFs?.mount?.(join(directory, handle.name), newFs);
              resolve(handle.name);
              addFileSystemHandle(directory, handle);
            }
          });
        }
      }


(error, newFs) => {
            if (error || !newFs) reject();
            else {
              rootFs?.mount?.(join(directory, handle.name), newFs);
              resolve(handle.name);
              addFileSystemHandle(directory, handle);
            }
          }


async (url: string): Promise<void> => {
    const fileData = await readFile(url);

    return new Promise((resolve, reject) => {
      const createFs: BFSCallback<IIsoFS | IZipFS> = (createError, newFs) => {
        if (createError) reject();
        else if (newFs) {
          rootFs?.mount?.(url, newFs);
          resolve();
        }
      };

      if (extname(url).toLowerCase() === ".iso") {
        IsoFS?.Create({ data: fileData }, createFs);
      } else {
        ZipFS?.Create({ zipData: fileData }, createFs);
      }
    });
  }


(resolve, reject) => {
      const createFs: BFSCallback<IIsoFS | IZipFS> = (createError, newFs) => {
        if (createError) reject();
        else if (newFs) {
          rootFs?.mount?.(url, newFs);
          resolve();
        }
      };

      if (extname(url).toLowerCase() === ".iso") {
        IsoFS?.Create({ data: fileData }, createFs);
      } else {
        ZipFS?.Create({ zipData: fileData }, createFs);
      }
    }


(createError, newFs) => {
        if (createError) reject();
        else if (newFs) {
          rootFs?.mount?.(url, newFs);
          resolve();
        }
      }


(url: string): void => rootFs?.umount?.(url)


(directory: string): void => {
      updateFolder(dirname(directory), undefined, directory);
      removeFileSystemHandle(directory);
      unMountFs(directory);
    }


(
    directory: string,
    callback: (name: string, buffer?: Buffer) => void
  ): void => {
    const fileInput = document.createElement("input");

    fileInput.type = "file";
    fileInput.multiple = true;
    fileInput.setAttribute("style", "display: none");
    fileInput.addEventListener(
      "change",
      (event) =>
        handleFileInputEvent(
          event,
          callback,
          directory,
          openTransferDialog
        ).then(() => fileInput.remove()),
      { once: true }
    );
    document.body.appendChild(fileInput);
    fileInput.click();
  }


(event) =>
        handleFileInputEvent(
          event,
          callback,
          directory,
          openTransferDialog
        ).then(() => fileInput.remove())


() => fileInput.remove()


(): Promise<void> =>
    new Promise((resolve, reject) => {
      localStorage.clear();
      sessionStorage.clear();

      const clearFs = (): void => {
        const overlayFs = rootFs?._getFs("/")?.fs as OverlayFS;
        const overlayedFileSystems = overlayFs?.getOverlayedFileSystems();
        const readable = overlayedFileSystems?.readable as HTTPRequest;
        const writable = overlayedFileSystems?.writable as IndexedDBFileSystem;

        readable?.empty();

        if (writable?.getName() === "InMemory") {
          resolve();
        } else {
          writable?.empty((apiError) =>
            apiError ? reject(apiError) : resolve()
          );
        }
      };

      if (!window.indexedDB.databases) clearFs();
      else {
        window.indexedDB.databases().then((databases) => {
          databases
            .filter(({ name }) => name !== "browserfs")
            .forEach(
              ({ name }) => name && window.indexedDB.deleteDatabase(name)
            );
          clearFs();
        });
      }
    })


(resolve, reject) => {
      localStorage.clear();
      sessionStorage.clear();

      const clearFs = (): void => {
        const overlayFs = rootFs?._getFs("/")?.fs as OverlayFS;
        const overlayedFileSystems = overlayFs?.getOverlayedFileSystems();
        const readable = overlayedFileSystems?.readable as HTTPRequest;
        const writable = overlayedFileSystems?.writable as IndexedDBFileSystem;

        readable?.empty();

        if (writable?.getName() === "InMemory") {
          resolve();
        } else {
          writable?.empty((apiError) =>
            apiError ? reject(apiError) : resolve()
          );
        }
      };

      if (!window.indexedDB.databases) clearFs();
      else {
        window.indexedDB.databases().then((databases) => {
          databases
            .filter(({ name }) => name !== "browserfs")
            .forEach(
              ({ name }) => name && window.indexedDB.deleteDatabase(name)
            );
          clearFs();
        });
      }
    }


(): void => {
        const overlayFs = rootFs?._getFs("/")?.fs as OverlayFS;
        const overlayedFileSystems = overlayFs?.getOverlayedFileSystems();
        const readable = overlayedFileSystems?.readable as HTTPRequest;
        const writable = overlayedFileSystems?.writable as IndexedDBFileSystem;

        readable?.empty();

        if (writable?.getName() === "InMemory") {
          resolve();
        } else {
          writable?.empty((apiError) =>
            apiError ? reject(apiError) : resolve()
          );
        }
      }


(apiError) =>
            apiError ? reject(apiError) : resolve()


(databases) => {
          databases
            .filter(({ name }) => name !== "browserfs")
            .forEach(
              ({ name }) => name && window.indexedDB.deleteDatabase(name)
            );
          clearFs();
        }


({ name }) => name !== "browserfs"


({ name }) => name && window.indexedDB.deleteDatabase(name)


async (path: string): Promise<void> => {
    const pathParts = path.split("/").filter(Boolean);
    const recursePath = async (position = 1): Promise<void> => {
      const makePath = join("/", pathParts.slice(0, position).join("/"));
      let created: boolean;

      try {
        created = (await exists(makePath)) || (await mkdir(makePath));
      } catch {
        created = false;
      }

      if (created && position !== pathParts.length) {
        await recursePath(position + 1);
      }
    };

    await recursePath();
  }


async (position = 1): Promise<void> => {
      const makePath = join("/", pathParts.slice(0, position).join("/"));
      let created: boolean;

      try {
        created = (await exists(makePath)) || (await mkdir(makePath));
      } catch {
        created = false;
      }

      if (created && position !== pathParts.length) {
        await recursePath(position + 1);
      }
    }


async (path: string): Promise<void> => {
    try {
      await unlink(path);
    } catch (error) {
      if ((error as ApiError).code === "EISDIR") {
        const dirContents = await readdir(path);

        await Promise.all(
          dirContents.map((entry) => deletePath(join(path, entry)))
        );
        await rmdir(path);
      }
    }
  }


(entry) => deletePath(join(path, entry))


async (
    name: string,
    directory: string,
    buffer?: Buffer,
    iteration = 0
  ): Promise<string> => {
    const isInternal = !buffer && isAbsolute(name);
    const baseName = isInternal ? basename(name) : name;
    const uniqueName = !iteration
      ? baseName
      : iterateFileName(baseName, iteration);
    const fullNewPath = join(directory, uniqueName);

    if (isInternal) {
      if (
        name !== fullNewPath &&
        !directory.startsWith(name) &&
        !rootFs?.mntMap[name]
      ) {
        if (await exists(fullNewPath)) {
          return createPath(name, directory, buffer, iteration + 1);
        }

        if (await rename(name, fullNewPath)) {
          updateFolder(dirname(name), "", name);
        }

        return uniqueName;
      }
    } else {
      try {
        const baseDir = dirname(fullNewPath);

        if (!(await exists(baseDir))) {
          await mkdir(baseDir);
          updateFolder(dirname(baseDir), basename(baseDir));
        }

        if (
          buffer
            ? await writeFile(fullNewPath, buffer)
            : await mkdir(fullNewPath)
        ) {
          return uniqueName;
        }
      } catch (error) {
        if ((error as ApiError)?.code === "EEXIST") {
          return createPath(name, directory, buffer, iteration + 1);
        }
      }
    }

    return "";
  }


async (): Promise<void> =>
      Object.entries(await getFileSystemHandles()).forEach(
        async ([handleDirectory, handle]) => {
          if (!(await exists(handleDirectory))) {
            mapFs(dirname(handleDirectory), handle);
          }
        }
      )


async ([handleDirectory, handle]) => {
          if (!(await exists(handleDirectory))) {
            mapFs(dirname(handleDirectory), handle);
          }
        }


() => {
    restoreFsHandles();
  }


() => {
    const watchedPaths = Object.keys(fsWatchers).filter(
      (watchedPath) => fsWatchers[watchedPath].length > 0
    );
    const mountedPaths = Object.keys(rootFs?.mntMap || {}).filter(
      (mountedPath) => mountedPath !== "/"
    );

    mountedPaths.forEach((mountedPath) => {
      if (
        !watchedPaths.some((watchedPath) =>
          watchedPath.startsWith(mountedPath)
        ) &&
        rootFs?.mntMap[mountedPath]?.getName() !== "FileSystemAccess"
      ) {
        rootFs?.umount?.(mountedPath);
      }
    });
  }


(watchedPath) => fsWatchers[watchedPath].length > 0


(mountedPath) => mountedPath !== "/"


(mountedPath) => {
      if (
        !watchedPaths.some((watchedPath) =>
          watchedPath.startsWith(mountedPath)
        ) &&
        rootFs?.mntMap[mountedPath]?.getName() !== "FileSystemAccess"
      ) {
        rootFs?.umount?.(mountedPath);
      }
    }


(watchedPath) =>
          watchedPath.startsWith(mountedPath)


type FilePasteOperations = Record<string, "copy" | "move">;


export type FileSystemContextState = AsyncFS & {
  addFile: (
    directory: string,
    callback: (name: string, buffer?: Buffer) => void
  ) => void;
  addFsWatcher: (folder: string, updateFiles: UpdateFiles) => void;
  copyEntries: (entries: string[]) => void;
  createPath: (
    name: string,
    directory: string,
    buffer?: Buffer
  ) => Promise<string>;
  deletePath: (path: string) => Promise<void>;
  fs?: FSModule;
  mapFs: (directory: string) => Promise<string>;
  mkdirRecursive: (path: string) => Promise<void>;
  mountFs: (url: string) => Promise<void>;
  moveEntries: (entries: string[]) => void;
  pasteList: FilePasteOperations;
  removeFsWatcher: (folder: string, updateFiles: UpdateFiles) => void;
  resetStorage: () => Promise<void>;
  rootFs?: RootFileSystem;
  unMapFs: (directory: string) => void;
  unMountFs: (url: string) => void;
  updateFolder: (folder: string, newFile?: string, oldFile?: string) => void;
};


class Department
  extends Model<DepartmentAttributes, DepartmentCreationAttributes>
  implements DepartmentAttributes
{
  id!: number;
  name!: string;
  creationDate!: Date;

  members?: AdminMember[];

  director?: AdminMember;
  directorId?: number;

  viceDirector?: AdminMember;
  viceDirectorId?: number;

  public static associations: {
    members: Association<Department, AdminMember>;
    director: Association<Department, AdminMember>;
    viceDirector: Association<Department, AdminMember>;
  };

  public static initialize(sequelize: Sequelize) {
    this.init(
      {
        id: {
          type: DataTypes.INTEGER,
          autoIncrement: true,
          primaryKey: true,
        },
        name: {
          type: DataTypes.STRING,
          unique: true,
          allowNull: false,
        },
        creationDate: {
          type: DataTypes.DATEONLY,
          defaultValue: DataTypes.NOW,
          allowNull: false,
        },
        directorId: {
          type: DataTypes.NUMBER,
          allowNull: true,
          references: {
            // If we use AdminMember model directly, a cyclic reference will occur
            model: 'AdminMembers',
            key: 'memberId',
          },
          onDelete: 'SET NULL',
        },
        viceDirectorId: {
          type: DataTypes.NUMBER,
          allowNull: true,
          references: {
            // If we use AdminMember model directly, a cyclic reference will occur
            model: 'AdminMembers',
            key: 'memberId',
          },
          onDelete: 'SET NULL',
        }
      },
      {
        sequelize,
        timestamps: false,
      }
    );
  }
}


interface DepartmentAttributes {
    id: number;
    name: string;
    creationDate: Date;

    directorId?: number;
    viceDirectorId?: number;

    members?: AdminMember[];

    director?: AdminMember;
    viceDirector?: AdminMember;
}


interface DepartmentCreationAttributes
  extends Optional<DepartmentAttributes, 'id'> {}


public static initialize(sequelize: Sequelize) {
    this.init(
      {
        id: {
          type: DataTypes.INTEGER,
          autoIncrement: true,
          primaryKey: true,
        },
        name: {
          type: DataTypes.STRING,
          unique: true,
          allowNull: false,
        },
        creationDate: {
          type: DataTypes.DATEONLY,
          defaultValue: DataTypes.NOW,
          allowNull: false,
        },
        directorId: {
          type: DataTypes.NUMBER,
          allowNull: true,
          references: {
            // If we use AdminMember model directly, a cyclic reference will occur
            model: 'AdminMembers',
            key: 'memberId',
          },
          onDelete: 'SET NULL',
        },
        viceDirectorId: {
          type: DataTypes.NUMBER,
          allowNull: true,
          references: {
            // If we use AdminMember model directly, a cyclic reference will occur
            model: 'AdminMembers',
            key: 'memberId',
          },
          onDelete: 'SET NULL',
        }
      },
      {
        sequelize,
        timestamps: false,
      }
    );
  }


() => {
  it('works', () => {
    expect(searchUsageBoundary('', 0).content)
      .toMatchInlineSnapshot('""')

    expect(searchUsageBoundary('<div class="p-1 p-2', 14).content)
      .toMatchInlineSnapshot('"p-1"')

    expect(searchUsageBoundary('<div :class="`p-1 p-2', 16).content)
      .toMatchInlineSnapshot('"p-1"')

    expect(searchUsageBoundary('<div p-1 p-2>', 10).content)
      .toMatchInlineSnapshot('"p-2"')

    expect(searchUsageBoundary('.a{ @apply p-2; }', 14).content)
      .toMatchInlineSnapshot('"p-2"')
  })
}


() => {
    expect(searchUsageBoundary('', 0).content)
      .toMatchInlineSnapshot('""')

    expect(searchUsageBoundary('<div class="p-1 p-2', 14).content)
      .toMatchInlineSnapshot('"p-1"')

    expect(searchUsageBoundary('<div :class="`p-1 p-2', 16).content)
      .toMatchInlineSnapshot('"p-1"')

    expect(searchUsageBoundary('<div p-1 p-2>', 10).content)
      .toMatchInlineSnapshot('"p-2"')

    expect(searchUsageBoundary('.a{ @apply p-2; }', 14).content)
      .toMatchInlineSnapshot('"p-2"')
  }


element => {
            let scenario: Scenario = new Scenario(element);
            if (scenario.isBackground()) {
                this.background = scenario
            } else {
                this.scenarios.push(scenario);
            }
            if (scenario.isScenarioOutline()) {
                this.hasScenarioOutline = true;
            }
        }


(value, index, array): boolean => {
            return !value.isBackground() && value.isAuto();
        }


(value, index, array): boolean => {
            return value.isSmoke();
        }


(value, index, array): boolean => {
            return value.isBasic();
        }


(value, index, array): boolean => {
            return value.isAcceptance();
        }


(scenario) => {
            return scenario.getSummary().toLowerCase().indexOf(criteria.toLowerCase()) > -1
        }


(value, index, array) => {
            let valueAny: any = value;
            this.tags.push(<string>valueAny.name)
        }


export interface GherkinAST {
 ast:any
}


export enum FeatureType {
    API,
    UI
}


public hasBackground(): boolean {
        return this.background != null
    }


public getId(): string {
        return this._id;
    }


public getName(): string {
        return this.name;
    }


public getDescription(): string {
        return this.description;
    }


public getProcessId(): string {
        return this.processId;
    }


public getTCMId(): string {
        return this.tcmId;
    }


public getType(): FeatureType {
        return this.type;
    }


public getFileInfo(): FileInfo {
        return this.fileInfo;
    }


public getScenarios(): Array<Scenario> {
        return this.scenarios;
    }


public isUI(): boolean {
        return this.type == FeatureType.UI;
    }


public isAPI(): boolean {
        return this.type == FeatureType.API;
    }


public getTestSuiteName(): string {
        return this.testSuiteName;
    }


public setTestSuiteName(value: string) {
        this.testSuiteName = value;
    }


public getRevision(): string {
        return this._rev;
    }


/*
        TODO need to limit such method to be used by internal repository class only.
    */
public setRevision(revision: string) {
        return this._rev = revision;
    }


public getBackground(): Scenario {
        return this.background;
    }


public getTags(): Array<string> {
        return this.tags;
    }


public isTCMSynched() {
        return this.tcmId != undefined
    }


public getScenariosTotal(): number {
        return this.scenarios.length
    }


public getAutoScenariosTotal(): number {
        let autoScenarios: Array<Scenario> = this.scenarios.filter((value, index, array): boolean => {
            return !value.isBackground() && value.isAuto();
        })
        return autoScenarios.length;
    }


public getSmokeScenarios(): Array<Scenario> {
        let smokeScenarios: Array<Scenario> = this.scenarios.filter((value, index, array): boolean => {
            return value.isSmoke();
        })
        return smokeScenarios;
    }


public getBasicScenarios(): Array<Scenario> {
        let basicScenarios: Array<Scenario> = this.scenarios.filter((value, index, array): boolean => {
            return value.isBasic();
        })
        return basicScenarios;
    }


public getAcceptanceScenarios(): Array<Scenario> {
        let acceptanceScenarios: Array<Scenario> = this.scenarios.filter((value, index, array): boolean => {
            return value.isAcceptance();
        })
        return acceptanceScenarios;
    }


public getJson() {
        return JSON.stringify(this.rawData);
    }


public searchScenariosBySummary(criteria: string): Array<Scenario> {

        return this.scenarios.filter((scenario) => {
            return scenario.getSummary().toLowerCase().indexOf(criteria.toLowerCase()) > -1
        })

    }


private hasUITag(featuresTags: Object[]): boolean {
        return <boolean>featuresTags.find(function (value, index, array) {
            let valueAny: any = value;
            return valueAny.name === '@ui'
        })
    }


private hasAPITag(featuresTags: Object[]): boolean {
        return <boolean>featuresTags.find(function (value, index, array) {
            let valueAny: any = value;
            return valueAny.name === '@api'
        })

    }


private buildTags(featuresTags: Object[]): void {
        if (featuresTags === undefined)
            return;
        featuresTags.forEach((value, index, array) => {
            let valueAny: any = value;
            this.tags.push(<string>valueAny.name)
        })
    }


private buildTCMId(featuresTags: Object[]) {
        let tcmid = featuresTags.find(function (value, index, array) {
            let valueAny: any = value;
            let tagSplit = valueAny.name.split('=');
            return tagSplit[0] === '@jiraid'

        })
        if (tcmid === undefined)
            return undefined;
        let tcmidAny: any = tcmid;
        this.tcmId = tcmidAny.name.split('=')[1];
    }


private buildProcessId(featuresTags: Object[]) {
        let process = featuresTags.find(function (value, index, array) {
            let valueAny: any = value;
            let tagSplit = valueAny.name.split('=');
            return tagSplit[0] === '@process'

        })
        if (process === undefined)
            return undefined;
        let processAny: any = process;
        this.processId = processAny.name.split('=')[1];
    }


private buildFeatureId(featuresTags: Object[]) {
        let featureId = featuresTags.find(function (value, index, array) {
            let valueAny: any = value;
            let tagSplit = valueAny.name.split('=');
            return tagSplit[0] === '@featureid'

        })
        if (featureId === undefined) {
            //throw new Error('Feature id not found');
            let errorDetail = new ErrorDetail("Feature is not well formed",
                "Feature has no id",
                Severity.blocker);
            errorDetail.setResolutionHint("Use @featureid=xyz tag on top of your feature file ")
            let featureError = new FeatureCreationError("Feature [" + this.name + "] has no id", new Error(), errorDetail)
            featureError.Row = 0
            featureError.Column = 0
            throw featureError

        }
        let featureIdAny: any = featureId;
        this._id = featureIdAny.name.split('=')[1] + ":"+ this.testSuiteName
    }


/**
   * Android Management API
   *
   * The Android Management API provides remote enterprise management of Android devices and apps.
   *
   * @example
   * ```js
   * const {google} = require('googleapis');
   * const androidmanagement = google.androidmanagement('v1');
   * ```
   */
export class Androidmanagement {
    context: APIRequestContext;
    enterprises: Resource$Enterprises;
    signupUrls: Resource$Signupurls;

    constructor(options: GlobalOptions, google?: GoogleConfigurable) {
      this.context = {
        _options: options || {},
        google,
      };

      this.enterprises = new Resource$Enterprises(this.context);
      this.signupUrls = new Resource$Signupurls(this.context);
    }
  }


export class Resource$Enterprises$Applications {
    context: APIRequestContext;
    constructor(context: APIRequestContext) {
      this.context = context;
    }

    /**
     * Gets info about an application.
     * @example
     * ```js
     * // Before running the sample:
     * // - Enable the API at:
     * //   https://console.developers.google.com/apis/api/androidmanagement.googleapis.com
     * // - Login into gcloud by running:
     * //   `$ gcloud auth application-default login`
     * // - Install the npm module by running:
     * //   `$ npm install googleapis`
     *
     * const {google} = require('googleapis');
     * const androidmanagement = google.androidmanagement('v1');
     *
     * async function main() {
     *   const auth = new google.auth.GoogleAuth({
     *     // Scopes can be specified either as an array or as a single, space-delimited string.
     *     scopes: ['https://www.googleapis.com/auth/androidmanagement'],
     *   });
     *
     *   // Acquire an auth client, and bind it to all future calls
     *   const authClient = await auth.getClient();
     *   google.options({auth: authClient});
     *
     *   // Do the magic
     *   const res = await androidmanagement.enterprises.applications.get({
     *     // The preferred language for localized application info, as a BCP47 tag (e.g. "en-US", "de"). If not specified the default language of the application will be used.
     *     languageCode: 'placeholder-value',
     *     // The name of the application in the form enterprises/{enterpriseId\}/applications/{package_name\}.
     *     name: 'enterprises/my-enterprise/applications/my-application',
     *   });
     *   console.log(res.data);
     *
     *   // Example response
     *   // {
     *   //   "appTracks": [],
     *   //   "managedProperties": [],
     *   //   "name": "my_name",
     *   //   "permissions": [],
     *   //   "title": "my_title"
     *   // }
     * }
     *
     * main().catch(e => {
     *   console.error(e);
     *   throw e;
     * });
     *
     * ```
     *
     * @param params - Parameters for request
     * @param options - Optionally override request options, such as `url`, `method`, and `encoding`.
     * @param callback - Optional callback that handles the response.
     * @returns A promise if used with async/await, or void if used with a callback.
     */
    get(
      params: Params$Resource$Enterprises$Applications$Get,
      options: StreamMethodOptions
    ): GaxiosPromise<Readable>;
    get(
      params?: Params$Resource$Enterprises$Applications$Get,
      options?: MethodOptions
    ): GaxiosPromise<Schema$Application>;
    get(
      params: Params$Resource$Enterprises$Applications$Get,
      options: StreamMethodOptions | BodyResponseCallback<Readable>,
      callback: BodyResponseCallback<Readable>
    ): void;
    get(
      params: Params$Resource$Enterprises$Applications$Get,
      options: MethodOptions | BodyResponseCallback<Schema$Application>,
      callback: BodyResponseCallback<Schema$Application>
    ): void;
    get(
      params: Params$Resource$Enterprises$Applications$Get,
      callback: BodyResponseCallback<Schema$Application>
    ): void;
    get(callback: BodyResponseCallback<Schema$Application>): void;
    get(
      paramsOrCallback?:
        | Params$Resource$Enterprises$Applications$Get
        | BodyResponseCallback<Schema$Application>
        | BodyResponseCallback<Readable>,
      optionsOrCallback?:
        | MethodOptions
        | StreamMethodOptions
        | BodyResponseCallback<Schema$Application>
        | BodyResponseCallback<Readable>,
      callback?:
        | BodyResponseCallback<Schema$Application>
        | BodyResponseCallback<Readable>
    ): void | GaxiosPromise<Schema$Application> | GaxiosPromise<Readable> {
      let params = (paramsOrCallback ||
        {}) as Params$Resource$Enterprises$Applications$Get;
      let options = (optionsOrCallback || {}) as MethodOptions;

      if (typeof paramsOrCallback === 'function') {
        callback = paramsOrCallback;
        params = {} as Params$Resource$Enterprises$Applications$Get;
        options = {};
      }

      if (typeof optionsOrCallback === 'function') {
        callback = optionsOrCallback;
        options = {};
      }

      const rootUrl =
        options.rootUrl || 'https://androidmanagement.googleapis.com/';
      const parameters = {
        options: Object.assign(
          {
            url: (rootUrl + '/v1/{+name}').replace(/([^:]\/)\/+/g, '$1'),
            method: 'GET',
          },
          options
        ),
        params,
        requiredParams: ['name'],
        pathParams: ['name'],
        context: this.context,
      };
      if (callback) {
        createAPIRequest<Schema$Application>(
          parameters,
          callback as BodyResponseCallback<unknown>
        );
      } else {
        return createAPIRequest<Schema$Application>(parameters);
      }
    }
  }


export class Resource$Enterprises$Webtokens {
    context: APIRequestContext;
    constructor(context: APIRequestContext) {
      this.context = context;
    }

    /**
     * Creates a web token to access an embeddable managed Google Play web UI for a given enterprise.
     * @example
     * ```js
     * // Before running the sample:
     * // - Enable the API at:
     * //   https://console.developers.google.com/apis/api/androidmanagement.googleapis.com
     * // - Login into gcloud by running:
     * //   `$ gcloud auth application-default login`
     * // - Install the npm module by running:
     * //   `$ npm install googleapis`
     *
     * const {google} = require('googleapis');
     * const androidmanagement = google.androidmanagement('v1');
     *
     * async function main() {
     *   const auth = new google.auth.GoogleAuth({
     *     // Scopes can be specified either as an array or as a single, space-delimited string.
     *     scopes: ['https://www.googleapis.com/auth/androidmanagement'],
     *   });
     *
     *   // Acquire an auth client, and bind it to all future calls
     *   const authClient = await auth.getClient();
     *   google.options({auth: authClient});
     *
     *   // Do the magic
     *   const res = await androidmanagement.enterprises.webTokens.create({
     *     // The name of the enterprise in the form enterprises/{enterpriseId\}.
     *     parent: 'enterprises/my-enterprise',
     *
     *     // Request body metadata
     *     requestBody: {
     *       // request body parameters
     *       // {
     *       //   "enabledFeatures": [],
     *       //   "name": "my_name",
     *       //   "parentFrameUrl": "my_parentFrameUrl",
     *       //   "permissions": [],
     *       //   "value": "my_value"
     *       // }
     *     },
     *   });
     *   console.log(res.data);
     *
     *   // Example response
     *   // {
     *   //   "enabledFeatures": [],
     *   //   "name": "my_name",
     *   //   "parentFrameUrl": "my_parentFrameUrl",
     *   //   "permissions": [],
     *   //   "value": "my_value"
     *   // }
     * }
     *
     * main().catch(e => {
     *   console.error(e);
     *   throw e;
     * });
     *
     * ```
     *
     * @param params - Parameters for request
     * @param options - Optionally override request options, such as `url`, `method`, and `encoding`.
     * @param callback - Optional callback that handles the response.
     * @returns A promise if used with async/await, or void if used with a callback.
     */
    create(
      params: Params$Resource$Enterprises$Webtokens$Create,
      options: StreamMethodOptions
    ): GaxiosPromise<Readable>;
    create(
      params?: Params$Resource$Enterprises$Webtokens$Create,
      options?: MethodOptions
    ): GaxiosPromise<Schema$WebToken>;
    create(
      params: Params$Resource$Enterprises$Webtokens$Create,
      options: StreamMethodOptions | BodyResponseCallback<Readable>,
      callback: BodyResponseCallback<Readable>
    ): void;
    create(
      params: Params$Resource$Enterprises$Webtokens$Create,
      options: MethodOptions | BodyResponseCallback<Schema$WebToken>,
      callback: BodyResponseCallback<Schema$WebToken>
    ): void;
    create(
      params: Params$Resource$Enterprises$Webtokens$Create,
      callback: BodyResponseCallback<Schema$WebToken>
    ): void;
    create(callback: BodyResponseCallback<Schema$WebToken>): void;
    create(
      paramsOrCallback?:
        | Params$Resource$Enterprises$Webtokens$Create
        | BodyResponseCallback<Schema$WebToken>
        | BodyResponseCallback<Readable>,
      optionsOrCallback?:
        | MethodOptions
        | StreamMethodOptions
        | BodyResponseCallback<Schema$WebToken>
        | BodyResponseCallback<Readable>,
      callback?:
        | BodyResponseCallback<Schema$WebToken>
        | BodyResponseCallback<Readable>
    ): void | GaxiosPromise<Schema$WebToken> | GaxiosPromise<Readable> {
      let params = (paramsOrCallback ||
        {}) as Params$Resource$Enterprises$Webtokens$Create;
      let options = (optionsOrCallback || {}) as MethodOptions;

      if (typeof paramsOrCallback === 'function') {
        callback = paramsOrCallback;
        params = {} as Params$Resource$Enterprises$Webtokens$Create;
        options = {};
      }

      if (typeof optionsOrCallback === 'function') {
        callback = optionsOrCallback;
        options = {};
      }

      const rootUrl =
        options.rootUrl || 'https://androidmanagement.googleapis.com/';
      const parameters = {
        options: Object.assign(
          {
            url: (rootUrl + '/v1/{+parent}/webTokens').replace(
              /([^:]\/)\/+/g,
              '$1'
            ),
            method: 'POST',
          },
          options
        ),
        params,
        requiredParams: ['parent'],
        pathParams: ['parent'],
        context: this.context,
      };
      if (callback) {
        createAPIRequest<Schema$WebToken>(
          parameters,
          callback as BodyResponseCallback<unknown>
        );
      } else {
        return createAPIRequest<Schema$WebToken>(parameters);
      }
    }
  }


export class Resource$Signupurls {
    context: APIRequestContext;
    constructor(context: APIRequestContext) {
      this.context = context;
    }

    /**
     * Creates an enterprise signup URL.
     * @example
     * ```js
     * // Before running the sample:
     * // - Enable the API at:
     * //   https://console.developers.google.com/apis/api/androidmanagement.googleapis.com
     * // - Login into gcloud by running:
     * //   `$ gcloud auth application-default login`
     * // - Install the npm module by running:
     * //   `$ npm install googleapis`
     *
     * const {google} = require('googleapis');
     * const androidmanagement = google.androidmanagement('v1');
     *
     * async function main() {
     *   const auth = new google.auth.GoogleAuth({
     *     // Scopes can be specified either as an array or as a single, space-delimited string.
     *     scopes: ['https://www.googleapis.com/auth/androidmanagement'],
     *   });
     *
     *   // Acquire an auth client, and bind it to all future calls
     *   const authClient = await auth.getClient();
     *   google.options({auth: authClient});
     *
     *   // Do the magic
     *   const res = await androidmanagement.signupUrls.create({
     *     // The callback URL that the admin will be redirected to after successfully creating an enterprise. Before redirecting there the system will add a query parameter to this URL named enterpriseToken which will contain an opaque token to be used for the create enterprise request. The URL will be parsed then reformatted in order to add the enterpriseToken parameter, so there may be some minor formatting changes.
     *     callbackUrl: 'placeholder-value',
     *     // The ID of the Google Cloud Platform project which will own the enterprise.
     *     projectId: 'placeholder-value',
     *   });
     *   console.log(res.data);
     *
     *   // Example response
     *   // {
     *   //   "name": "my_name",
     *   //   "url": "my_url"
     *   // }
     * }
     *
     * main().catch(e => {
     *   console.error(e);
     *   throw e;
     * });
     *
     * ```
     *
     * @param params - Parameters for request
     * @param options - Optionally override request options, such as `url`, `method`, and `encoding`.
     * @param callback - Optional callback that handles the response.
     * @returns A promise if used with async/await, or void if used with a callback.
     */
    create(
      params: Params$Resource$Signupurls$Create,
      options: StreamMethodOptions
    ): GaxiosPromise<Readable>;
    create(
      params?: Params$Resource$Signupurls$Create,
      options?: MethodOptions
    ): GaxiosPromise<Schema$SignupUrl>;
    create(
      params: Params$Resource$Signupurls$Create,
      options: StreamMethodOptions | BodyResponseCallback<Readable>,
      callback: BodyResponseCallback<Readable>
    ): void;
    create(
      params: Params$Resource$Signupurls$Create,
      options: MethodOptions | BodyResponseCallback<Schema$SignupUrl>,
      callback: BodyResponseCallback<Schema$SignupUrl>
    ): void;
    create(
      params: Params$Resource$Signupurls$Create,
      callback: BodyResponseCallback<Schema$SignupUrl>
    ): void;
    create(callback: BodyResponseCallback<Schema$SignupUrl>): void;
    create(
      paramsOrCallback?:
        | Params$Resource$Signupurls$Create
        | BodyResponseCallback<Schema$SignupUrl>
        | BodyResponseCallback<Readable>,
      optionsOrCallback?:
        | MethodOptions
        | StreamMethodOptions
        | BodyResponseCallback<Schema$SignupUrl>
        | BodyResponseCallback<Readable>,
      callback?:
        | BodyResponseCallback<Schema$SignupUrl>
        | BodyResponseCallback<Readable>
    ): void | GaxiosPromise<Schema$SignupUrl> | GaxiosPromise<Readable> {
      let params = (paramsOrCallback ||
        {}) as Params$Resource$Signupurls$Create;
      let options = (optionsOrCallback || {}) as MethodOptions;

      if (typeof paramsOrCallback === 'function') {
        callback = paramsOrCallback;
        params = {} as Params$Resource$Signupurls$Create;
        options = {};
      }

      if (typeof optionsOrCallback === 'function') {
        callback = optionsOrCallback;
        options = {};
      }

      const rootUrl =
        options.rootUrl || 'https://androidmanagement.googleapis.com/';
      const parameters = {
        options: Object.assign(
          {
            url: (rootUrl + '/v1/signupUrls').replace(/([^:]\/)\/+/g, '$1'),
            method: 'POST',
          },
          options
        ),
        params,
        requiredParams: [],
        pathParams: [],
        context: this.context,
      };
      if (callback) {
        createAPIRequest<Schema$SignupUrl>(
          parameters,
          callback as BodyResponseCallback<unknown>
        );
      } else {
        return createAPIRequest<Schema$SignupUrl>(parameters);
      }
    }
  }


/**
   * Security policies set to the most secure values by default. To maintain the security posture of a device, we don't recommend overriding any of the default values.
   */
export interface Schema$AdvancedSecurityOverrides {
    /**
     * Controls Common Criteria Mode—security standards defined in the Common Criteria for Information Technology Security Evaluation (https://www.commoncriteriaportal.org/) (CC). Enabling Common Criteria Mode increases certain security components on a device, including AES-GCM encryption of Bluetooth Long Term Keys, and Wi-Fi configuration stores.Warning: Common Criteria Mode enforces a strict security model typically only required for IT products used in national security systems and other highly sensitive organizations. Standard device use may be affected. Only enabled if required.
     */
    commonCriteriaMode?: string | null;
    /**
     * Controls access to developer settings: developer options and safe boot. Replaces safeBootDisabled (deprecated) and debuggingFeaturesAllowed (deprecated).
     */
    developerSettings?: string | null;
    /**
     * Whether Google Play Protect verification (https://support.google.com/accounts/answer/2812853) is enforced. Replaces ensureVerifyAppsEnabled (deprecated).
     */
    googlePlayProtectVerifyApps?: string | null;
    /**
     * Personal apps that can read work profile notifications using a NotificationListenerService (https://developer.android.com/reference/android/service/notification/NotificationListenerService). By default, no personal apps (aside from system apps) can read work notifications. Each value in the list must be a package name.
     */
    personalAppsThatCanReadWorkNotifications?: string[] | null;
    /**
     * The policy for untrusted apps (apps from unknown sources) enforced on the device. Replaces install_unknown_sources_allowed (deprecated).
     */
    untrustedAppsPolicy?: string | null;
  }


/**
   * Configuration for an always-on VPN connection.
   */
export interface Schema$AlwaysOnVpnPackage {
    /**
     * Disallows networking when the VPN is not connected.
     */
    lockdownEnabled?: boolean | null;
    /**
     * The package name of the VPN app.
     */
    packageName?: string | null;
  }


/**
   * A compliance rule condition which is satisfied if the Android Framework API level on the device doesn't meet a minimum requirement. There can only be one rule with this type of condition per policy.
   */
export interface Schema$ApiLevelCondition {
    /**
     * The minimum desired Android Framework API level. If the device doesn't meet the minimum requirement, this condition is satisfied. Must be greater than zero.
     */
    minApiLevel?: number | null;
  }


/**
   * Information about an app.
   */
export interface Schema$Application {
    /**
     * Application tracks visible to the enterprise.
     */
    appTracks?: Schema$AppTrackInfo[];
    /**
     * The set of managed properties available to be pre-configured for the app.
     */
    managedProperties?: Schema$ManagedProperty[];
    /**
     * The name of the app in the form enterprises/{enterpriseId\}/applications/{package_name\}.
     */
    name?: string | null;
    /**
     * The permissions required by the app.
     */
    permissions?: Schema$ApplicationPermission[];
    /**
     * The title of the app. Localized.
     */
    title?: string | null;
  }


/**
   * An app-related event.
   */
export interface Schema$ApplicationEvent {
    /**
     * The creation time of the event.
     */
    createTime?: string | null;
    /**
     * App event type.
     */
    eventType?: string | null;
  }


/**
   * A permission required by the app.
   */
export interface Schema$ApplicationPermission {
    /**
     * A longer description of the permission, providing more detail on what it affects. Localized.
     */
    description?: string | null;
    /**
     * The name of the permission. Localized.
     */
    name?: string | null;
    /**
     * An opaque string uniquely identifying the permission. Not localized.
     */
    permissionId?: string | null;
  }


/**
   * Policy for an individual app.
   */
export interface Schema$ApplicationPolicy {
    /**
     * List of the app’s track IDs that a device belonging to the enterprise can access. If the list contains multiple track IDs, devices receive the latest version among all accessible tracks. If the list contains no track IDs, devices only have access to the app’s production track. More details about each track are available in AppTrackInfo.
     */
    accessibleTrackIds?: string[] | null;
    /**
     * Controls the auto-update mode for the app.
     */
    autoUpdateMode?: string | null;
    /**
     * Controls whether the app can communicate with itself across a device’s work and personal profiles, subject to user consent.
     */
    connectedWorkAndPersonalApp?: string | null;
    /**
     * The default policy for all permissions requested by the app. If specified, this overrides the policy-level default_permission_policy which applies to all apps. It does not override the permission_grants which applies to all apps.
     */
    defaultPermissionPolicy?: string | null;
    /**
     * The scopes delegated to the app from Android Device Policy.
     */
    delegatedScopes?: string[] | null;
    /**
     * Whether the app is disabled. When disabled, the app data is still preserved.
     */
    disabled?: boolean | null;
    /**
     * The type of installation to perform.
     */
    installType?: string | null;
    /**
     * Whether the app is allowed to lock itself in full-screen mode. DEPRECATED. Use InstallType KIOSK or kioskCustomLauncherEnabled to to configure a dedicated device.
     */
    lockTaskAllowed?: boolean | null;
    /**
     * Managed configuration applied to the app. The format for the configuration is dictated by the ManagedProperty values supported by the app. Each field name in the managed configuration must match the key field of the ManagedProperty. The field value must be compatible with the type of the ManagedProperty: *type* *JSON value* BOOL true or false STRING string INTEGER number CHOICE string MULTISELECT array of strings HIDDEN string BUNDLE_ARRAY array of objects
     */
    managedConfiguration?: {[key: string]: any} | null;
    /**
     * The managed configurations template for the app, saved from the managed configurations iframe. This field is ignored if managed_configuration is set.
     */
    managedConfigurationTemplate?: Schema$ManagedConfigurationTemplate;
    /**
     * The minimum version of the app that runs on the device. If set, the device attempts to update the app to at least this version code. If the app is not up-to-date, the device will contain a NonComplianceDetail with non_compliance_reason set to APP_NOT_UPDATED. The app must already be published to Google Play with a version code greater than or equal to this value. At most 20 apps may specify a minimum version code per policy.
     */
    minimumVersionCode?: number | null;
    /**
     * The package name of the app. For example, com.google.android.youtube for the YouTube app.
     */
    packageName?: string | null;
    /**
     * Explicit permission grants or denials for the app. These values override the default_permission_policy and permission_grants which apply to all apps.
     */
    permissionGrants?: Schema$PermissionGrant[];
  }


/**
   * Information reported about an installed app.
   */
export interface Schema$ApplicationReport {
    /**
     * The source of the package.
     */
    applicationSource?: string | null;
    /**
     * The display name of the app.
     */
    displayName?: string | null;
    /**
     * List of app events. The most recent 20 events are stored in the list.
     */
    events?: Schema$ApplicationEvent[];
    /**
     * The package name of the app that installed this app.
     */
    installerPackageName?: string | null;
    /**
     * List of keyed app states reported by the app.
     */
    keyedAppStates?: Schema$KeyedAppState[];
    /**
     * Package name of the app.
     */
    packageName?: string | null;
    /**
     * The SHA-256 hash of the app's APK file, which can be used to verify the app hasn't been modified. Each byte of the hash value is represented as a two-digit hexadecimal number.
     */
    packageSha256Hash?: string | null;
    /**
     * The SHA-1 hash of each android.content.pm.Signature (https://developer.android.com/reference/android/content/pm/Signature.html) associated with the app package. Each byte of each hash value is represented as a two-digit hexadecimal number.
     */
    signingKeyCertFingerprints?: string[] | null;
    /**
     * Application state.
     */
    state?: string | null;
    /**
     * The app version code, which can be used to determine whether one version is more recent than another.
     */
    versionCode?: number | null;
    /**
     * The app version as displayed to the user.
     */
    versionName?: string | null;
  }


/**
   * Settings controlling the behavior of application reports.
   */
export interface Schema$ApplicationReportingSettings {
    /**
     * Whether removed apps are included in application reports.
     */
    includeRemovedApps?: boolean | null;
  }


/**
   * Id to name association of a app track.
   */
export interface Schema$AppTrackInfo {
    /**
     * The track name associated with the trackId, set in the Play Console. The name is modifiable from Play Console.
     */
    trackAlias?: string | null;
    /**
     * The unmodifiable unique track identifier, taken from the releaseTrackId in the URL of the Play Console page that displays the app’s track information.
     */
    trackId?: string | null;
  }


/**
   * An action to block access to apps and data on a fully managed device or in a work profile. This action also triggers a device or work profile to displays a user-facing notification with information (where possible) on how to correct the compliance issue. Note: wipeAction must also be specified.
   */
export interface Schema$BlockAction {
    /**
     * Number of days the policy is non-compliant before the device or work profile is blocked. To block access immediately, set to 0. blockAfterDays must be less than wipeAfterDays.
     */
    blockAfterDays?: number | null;
    /**
     * Specifies the scope of this BlockAction. Only applicable to devices that are company-owned.
     */
    blockScope?: string | null;
  }


/**
   * Controls apps' access to private keys. The rule determines which private key, if any, Android Device Policy grants to the specified app. Access is granted either when the app calls KeyChain.choosePrivateKeyAlias (https://developer.android.com/reference/android/security/KeyChain#choosePrivateKeyAlias%28android.app.Activity,%20android.security.KeyChainAliasCallback,%20java.lang.String[],%20java.security.Principal[],%20java.lang.String,%20int,%20java.lang.String%29) (or any overloads) to request a private key alias for a given URL, or for rules that are not URL-specific (that is, if urlPattern is not set, or set to the empty string or .*) on Android 11 and above, directly so that the app can call KeyChain.getPrivateKey (https://developer.android.com/reference/android/security/KeyChain#getPrivateKey%28android.content.Context,%20java.lang.String%29), without first having to call KeyChain.choosePrivateKeyAlias.When an app calls KeyChain.choosePrivateKeyAlias if more than one choosePrivateKeyRules matches, the last matching rule defines which key alias to return.
   */
export interface Schema$ChoosePrivateKeyRule {
    /**
     * The package names to which this rule applies. The hash of the signing certificate for each app is verified against the hash provided by Play. If no package names are specified, then the alias is provided to all apps that call KeyChain.choosePrivateKeyAlias (https://developer.android.com/reference/android/security/KeyChain#choosePrivateKeyAlias%28android.app.Activity,%20android.security.KeyChainAliasCallback,%20java.lang.String[],%20java.security.Principal[],%20java.lang.String,%20int,%20java.lang.String%29) or any overloads (but not without calling KeyChain.choosePrivateKeyAlias, even on Android 11 and above). Any app with the same Android UID as a package specified here will have access when they call KeyChain.choosePrivateKeyAlias.
     */
    packageNames?: string[] | null;
    /**
     * The alias of the private key to be used.
     */
    privateKeyAlias?: string | null;
    /**
     * The URL pattern to match against the URL of the request. If not set or empty, it matches all URLs. This uses the regular expression syntax of java.util.regex.Pattern.
     */
    urlPattern?: string | null;
  }


/**
   * A command.
   */
export interface Schema$Command {
    /**
     * The timestamp at which the command was created. The timestamp is automatically generated by the server.
     */
    createTime?: string | null;
    /**
     * The duration for which the command is valid. The command will expire if not executed by the device during this time. The default duration if unspecified is ten minutes. There is no maximum duration.
     */
    duration?: string | null;
    /**
     * If the command failed, an error code explaining the failure. This is not set when the command is cancelled by the caller.
     */
    errorCode?: string | null;
    /**
     * For commands of type RESET_PASSWORD, optionally specifies the new password.
     */
    newPassword?: string | null;
    /**
     * For commands of type RESET_PASSWORD, optionally specifies flags.
     */
    resetPasswordFlags?: string[] | null;
    /**
     * The type of the command.
     */
    type?: string | null;
    /**
     * The resource name of the user that owns the device in the form enterprises/{enterpriseId\}/users/{userId\}. This is automatically generated by the server based on the device the command is sent to.
     */
    userName?: string | null;
  }


/**
   * Information about Common Criteria Mode—security standards defined in the Common Criteria for Information Technology Security Evaluation (https://www.commoncriteriaportal.org/) (CC).This information is only available if statusReportingSettings.commonCriteriaModeEnabled is true in the device's policy.
   */
export interface Schema$CommonCriteriaModeInfo {
    /**
     * Whether Common Criteria Mode is enabled.
     */
    commonCriteriaModeStatus?: string | null;
  }


/**
   * A rule declaring which mitigating actions to take when a device is not compliant with its policy. For every rule, there is always an implicit mitigating action to set policy_compliant to false for the Device resource, and display a message on the device indicating that the device is not compliant with its policy. Other mitigating actions may optionally be taken as well, depending on the field values in the rule.
   */
export interface Schema$ComplianceRule {
    /**
     * A condition which is satisfied if the Android Framework API level on the device doesn't meet a minimum requirement.
     */
    apiLevelCondition?: Schema$ApiLevelCondition;
    /**
     * If set to true, the rule includes a mitigating action to disable apps so that the device is effectively disabled, but app data is preserved. If the device is running an app in locked task mode, the app will be closed and a UI showing the reason for non-compliance will be displayed.
     */
    disableApps?: boolean | null;
    /**
     * A condition which is satisfied if there exists any matching NonComplianceDetail for the device.
     */
    nonComplianceDetailCondition?: Schema$NonComplianceDetailCondition;
    /**
     * If set, the rule includes a mitigating action to disable apps specified in the list, but app data is preserved.
     */
    packageNamesToDisable?: string[] | null;
  }


/**
   * Contact details for managed Google Play enterprises.
   */
export interface Schema$ContactInfo {
    /**
     * Email address for a point of contact, which will be used to send important announcements related to managed Google Play.
     */
    contactEmail?: string | null;
    /**
     * The email of the data protection officer. The email is validated but not verified.
     */
    dataProtectionOfficerEmail?: string | null;
    /**
     * The name of the data protection officer.
     */
    dataProtectionOfficerName?: string | null;
    /**
     * The phone number of the data protection officer The phone number is validated but not verified.
     */
    dataProtectionOfficerPhone?: string | null;
    /**
     * The email of the EU representative. The email is validated but not verified.
     */
    euRepresentativeEmail?: string | null;
    /**
     * The name of the EU representative.
     */
    euRepresentativeName?: string | null;
    /**
     * The phone number of the EU representative. The phone number is validated but not verified.
     */
    euRepresentativePhone?: string | null;
  }


/**
   * This feature is not generally available.
   */
export interface Schema$ContentProviderEndpoint {
    /**
     * This feature is not generally available.
     */
    packageName?: string | null;
    /**
     * Required. This feature is not generally available.
     */
    signingCertsSha256?: string[] | null;
    /**
     * This feature is not generally available.
     */
    uri?: string | null;
  }


/**
   * Cross-profile policies applied on the device.
   */
export interface Schema$CrossProfilePolicies {
    /**
     * Whether text copied from one profile (personal or work) can be pasted in the other profile.
     */
    crossProfileCopyPaste?: string | null;
    /**
     * Whether data from one profile (personal or work) can be shared with apps in the other profile. Specifically controls simple data sharing via intents. Management of other cross-profile communication channels, such as contact search, copy/paste, or connected work & personal apps, are configured separately.
     */
    crossProfileDataSharing?: string | null;
    /**
     * Whether contacts stored in the work profile can be shown in personal profile contact searches and incoming calls.
     */
    showWorkContactsInPersonalProfile?: string | null;
  }


/**
   * Represents a whole or partial calendar date, such as a birthday. The time of day and time zone are either specified elsewhere or are insignificant. The date is relative to the Gregorian Calendar. This can represent one of the following: A full date, with non-zero year, month, and day values A month and day value, with a zero year, such as an anniversary A year on its own, with zero month and day values A year and month value, with a zero day, such as a credit card expiration dateRelated types are google.type.TimeOfDay and google.protobuf.Timestamp.
   */
export interface Schema$Date {
    /**
     * Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn't significant.
     */
    day?: number | null;
    /**
     * Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day.
     */
    month?: number | null;
    /**
     * Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year.
     */
    year?: number | null;
  }


/**
   * A device owned by an enterprise. Unless otherwise noted, all fields are read-only and can't be modified by enterprises.devices.patch.
   */
export interface Schema$Device {
    /**
     * The API level of the Android platform version running on the device.
     */
    apiLevel?: number | null;
    /**
     * Reports for apps installed on the device. This information is only available when application_reports_enabled is true in the device's policy.
     */
    applicationReports?: Schema$ApplicationReport[];
    /**
     * The password requirements currently applied to the device. The applied requirements may be slightly different from those specified in passwordPolicies in some cases. fieldPath is set based on passwordPolicies.
     */
    appliedPasswordPolicies?: Schema$PasswordRequirements[];
    /**
     * The name of the policy currently applied to the device.
     */
    appliedPolicyName?: string | null;
    /**
     * The version of the policy currently applied to the device.
     */
    appliedPolicyVersion?: string | null;
    /**
     * The state currently applied to the device.
     */
    appliedState?: string | null;
    /**
     * Information about Common Criteria Mode—security standards defined in the Common Criteria for Information Technology Security Evaluation (https://www.commoncriteriaportal.org/) (CC).This information is only available if statusReportingSettings.commonCriteriaModeEnabled is true in the device's policy.
     */
    commonCriteriaModeInfo?: Schema$CommonCriteriaModeInfo;
    /**
     * Device settings information. This information is only available if deviceSettingsEnabled is true in the device's policy.
     */
    deviceSettings?: Schema$DeviceSettings;
    /**
     * If the device state is DISABLED, an optional message that is displayed on the device indicating the reason the device is disabled. This field can be modified by a patch request.
     */
    disabledReason?: Schema$UserFacingMessage;
    /**
     * Detailed information about displays on the device. This information is only available if displayInfoEnabled is true in the device's policy.
     */
    displays?: Schema$Display[];
    /**
     * The time of device enrollment.
     */
    enrollmentTime?: string | null;
    /**
     * If the device was enrolled with an enrollment token with additional data provided, this field contains that data.
     */
    enrollmentTokenData?: string | null;
    /**
     * If the device was enrolled with an enrollment token, this field contains the name of the token.
     */
    enrollmentTokenName?: string | null;
    /**
     * Detailed information about the device hardware.
     */
    hardwareInfo?: Schema$HardwareInfo;
    /**
     * Hardware status samples in chronological order. This information is only available if hardwareStatusEnabled is true in the device's policy.
     */
    hardwareStatusSamples?: Schema$HardwareStatus[];
    /**
     * Deprecated.
     */
    lastPolicyComplianceReportTime?: string | null;
    /**
     * The last time the device fetched its policy.
     */
    lastPolicySyncTime?: string | null;
    /**
     * The last time the device sent a status report.
     */
    lastStatusReportTime?: string | null;
    /**
     * The type of management mode Android Device Policy takes on the device. This influences which policy settings are supported.
     */
    managementMode?: string | null;
    /**
     * Events related to memory and storage measurements in chronological order. This information is only available if memoryInfoEnabled is true in the device's policy.
     */
    memoryEvents?: Schema$MemoryEvent[];
    /**
     * Memory information: contains information about device memory and storage.
     */
    memoryInfo?: Schema$MemoryInfo;
    /**
     * The name of the device in the form enterprises/{enterpriseId\}/devices/{deviceId\}.
     */
    name?: string | null;
    /**
     * Device network information. This information is only available if networkInfoEnabled is true in the device's policy.
     */
    networkInfo?: Schema$NetworkInfo;
    /**
     * Details about policy settings that the device is not compliant with.
     */
    nonComplianceDetails?: Schema$NonComplianceDetail[];
    /**
     * Ownership of the managed device.
     */
    ownership?: string | null;
    /**
     * Whether the device is compliant with its policy.
     */
    policyCompliant?: boolean | null;
    /**
     * The name of the policy applied to the device, in the form enterprises/{enterpriseId\}/policies/{policyId\}. If not specified, the policy_name for the device's user is applied. This field can be modified by a patch request. You can specify only the policyId when calling enterprises.devices.patch, as long as the policyId doesn’t contain any slashes. The rest of the policy name is inferred.
     */
    policyName?: string | null;
    /**
     * Power management events on the device in chronological order. This information is only available if powerManagementEventsEnabled is true in the device's policy.
     */
    powerManagementEvents?: Schema$PowerManagementEvent[];
    /**
     * If the same physical device has been enrolled multiple times, this field contains its previous device names. The serial number is used as the unique identifier to determine if the same physical device has enrolled previously. The names are in chronological order.
     */
    previousDeviceNames?: string[] | null;
    /**
     * Device's security posture value that reflects how secure the device is.
     */
    securityPosture?: Schema$SecurityPosture;
    /**
     * Detailed information about the device software. This information is only available if softwareInfoEnabled is true in the device's policy.
     */
    softwareInfo?: Schema$SoftwareInfo;
    /**
     * The state to be applied to the device. This field can be modified by a patch request. Note that when calling enterprises.devices.patch, ACTIVE and DISABLED are the only allowable values. To enter the device into a DELETED state, call enterprises.devices.delete.
     */
    state?: string | null;
    /**
     * Map of selected system properties name and value related to the device. This information is only available if systemPropertiesEnabled is true in the device's policy.
     */
    systemProperties?: {[key: string]: string} | null;
    /**
     * The user who owns the device.
     */
    user?: Schema$User;
    /**
     * The resource name of the user that owns this device in the form enterprises/{enterpriseId\}/users/{userId\}.
     */
    userName?: string | null;
  }


/**
   * Information about security related device settings on device.
   */
export interface Schema$DeviceSettings {
    /**
     * Whether ADB (https://developer.android.com/studio/command-line/adb.html) is enabled on the device.
     */
    adbEnabled?: boolean | null;
    /**
     * Whether developer mode is enabled on the device.
     */
    developmentSettingsEnabled?: boolean | null;
    /**
     * Encryption status from DevicePolicyManager.
     */
    encryptionStatus?: string | null;
    /**
     * Whether the device is secured with PIN/password.
     */
    isDeviceSecure?: boolean | null;
    /**
     * Whether the storage encryption is enabled.
     */
    isEncrypted?: boolean | null;
    /**
     * Whether installing apps from unknown sources is enabled.
     */
    unknownSourcesEnabled?: boolean | null;
    /**
     * Whether Google Play Protect verification (https://support.google.com/accounts/answer/2812853) is enforced on the device.
     */
    verifyAppsEnabled?: boolean | null;
  }


/**
   * Device display information.
   */
export interface Schema$Display {
    /**
     * Display density expressed as dots-per-inch.
     */
    density?: number | null;
    /**
     * Unique display id.
     */
    displayId?: number | null;
    /**
     * Display height in pixels.
     */
    height?: number | null;
    /**
     * Name of the display.
     */
    name?: string | null;
    /**
     * Refresh rate of the display in frames per second.
     */
    refreshRate?: number | null;
    /**
     * State of the display.
     */
    state?: string | null;
    /**
     * Display width in pixels.
     */
    width?: number | null;
  }


/**
   * A generic empty message that you can re-use to avoid defining duplicated empty messages in your APIs. A typical example is to use it as the request or the response type of an API method. For instance: service Foo { rpc Bar(google.protobuf.Empty) returns (google.protobuf.Empty); \} The JSON representation for Empty is empty JSON object {\}.
   */
export interface Schema$Empty {}


/**
   * An enrollment token.
   */
export interface Schema$EnrollmentToken {
    /**
     * Optional, arbitrary data associated with the enrollment token. This could contain, for example, the ID of an org unit the device is assigned to after enrollment. After a device enrolls with the token, this data will be exposed in the enrollment_token_data field of the Device resource. The data must be 1024 characters or less; otherwise, the creation request will fail.
     */
    additionalData?: string | null;
    /**
     * Controls whether personal usage is allowed on a device provisioned with this enrollment token.For company-owned devices: Enabling personal usage allows the user to set up a work profile on the device. Disabling personal usage requires the user provision the device as a fully managed device.For personally-owned devices: Enabling personal usage allows the user to set up a work profile on the device. Disabling personal usage will prevent the device from provisioning. Personal usage cannot be disabled on personally-owned device.
     */
    allowPersonalUsage?: string | null;
    /**
     * The length of time the enrollment token is valid, ranging from 1 minute to 90 days. If not specified, the default duration is 1 hour.
     */
    duration?: string | null;
    /**
     * The expiration time of the token. This is a read-only field generated by the server.
     */
    expirationTimestamp?: string | null;
    /**
     * The name of the enrollment token, which is generated by the server during creation, in the form enterprises/{enterpriseId\}/enrollmentTokens/{enrollmentTokenId\}.
     */
    name?: string | null;
    /**
     * Whether the enrollment token is for one time use only. If the flag is set to true, only one device can use it for registration.
     */
    oneTimeOnly?: boolean | null;
    /**
     * The name of the policy initially applied to the enrolled device, in the form enterprises/{enterpriseId\}/policies/{policyId\}. If not specified, the policy_name for the device’s user is applied. If user_name is also not specified, enterprises/{enterpriseId\}/policies/default is applied by default. When updating this field, you can specify only the policyId as long as the policyId doesn’t contain any slashes. The rest of the policy name will be inferred.
     */
    policyName?: string | null;
    /**
     * A JSON string whose UTF-8 representation can be used to generate a QR code to enroll a device with this enrollment token. To enroll a device using NFC, the NFC record must contain a serialized java.util.Properties representation of the properties in the JSON.
     */
    qrCode?: string | null;
    /**
     * The user associated with this enrollment token. If it's specified when the enrollment token is created and the user does not exist, the user will be created. This field must not contain personally identifiable information. Only the account_identifier field needs to be set.
     */
    user?: Schema$User;
    /**
     * The token value that's passed to the device and authorizes the device to enroll. This is a read-only field generated by the server.
     */
    value?: string | null;
  }


/**
   * The configuration applied to an enterprise.
   */
export interface Schema$Enterprise {
    /**
     * Deprecated and unused.
     */
    appAutoApprovalEnabled?: boolean | null;
    /**
     * The enterprise contact info of an EMM-managed enterprise.
     */
    contactInfo?: Schema$ContactInfo;
    /**
     * The types of Google Pub/Sub notifications enabled for the enterprise.
     */
    enabledNotificationTypes?: string[] | null;
    /**
     * The name of the enterprise displayed to users.
     */
    enterpriseDisplayName?: string | null;
    /**
     * An image displayed as a logo during device provisioning. Supported types are: image/bmp, image/gif, image/x-ico, image/jpeg, image/png, image/webp, image/vnd.wap.wbmp, image/x-adobe-dng.
     */
    logo?: Schema$ExternalData;
    /**
     * The name of the enterprise which is generated by the server during creation, in the form enterprises/{enterpriseId\}.
     */
    name?: string | null;
    /**
     * A color in RGB format that indicates the predominant color to display in the device management app UI. The color components are stored as follows: (red << 16) | (green << 8) | blue, where the value of each component is between 0 and 255, inclusive.
     */
    primaryColor?: number | null;
    /**
     * The topic that Cloud Pub/Sub notifications are published to, in the form projects/{project\}/topics/{topic\}. This field is only required if Pub/Sub notifications are enabled.
     */
    pubsubTopic?: string | null;
    /**
     * Sign-in details of the enterprise.
     */
    signinDetails?: Schema$SigninDetail[];
    /**
     * Terms and conditions that must be accepted when provisioning a device for this enterprise. A page of terms is generated for each value in this list.
     */
    termsAndConditions?: Schema$TermsAndConditions[];
  }


/**
   * Data hosted at an external location. The data is to be downloaded by Android Device Policy and verified against the hash.
   */
export interface Schema$ExternalData {
    /**
     * The base-64 encoded SHA-256 hash of the content hosted at url. If the content doesn't match this hash, Android Device Policy won't use the data.
     */
    sha256Hash?: string | null;
    /**
     * The absolute URL to the data, which must use either the http or https scheme. Android Device Policy doesn't provide any credentials in the GET request, so the URL must be publicly accessible. Including a long, random component in the URL may be used to prevent attackers from discovering the URL.
     */
    url?: string | null;
  }


/**
   * A system freeze period. When a device’s clock is within the freeze period, all incoming system updates (including security patches) are blocked and won’t be installed. When a device is outside the freeze period, normal update behavior applies. Leap years are ignored in freeze period calculations, in particular: * If Feb. 29th is set as the start or end date of a freeze period, the freeze period will start or end on Feb. 28th instead. * When a device’s system clock reads Feb. 29th, it’s treated as Feb. 28th. * When calculating the number of days in a freeze period or the time between two freeze periods, Feb. 29th is ignored and not counted as a day.
   */
export interface Schema$FreezePeriod {
    /**
     * The end date (inclusive) of the freeze period. Must be no later than 90 days from the start date. If the end date is earlier than the start date, the freeze period is considered wrapping year-end. Note: year must not be set. For example, {"month": 1,"date": 30\}.
     */
    endDate?: Schema$Date;
    /**
     * The start date (inclusive) of the freeze period. Note: year must not be set. For example, {"month": 1,"date": 30\}.
     */
    startDate?: Schema$Date;
  }


/**
   * Information about device hardware. The fields related to temperature thresholds are only available if hardwareStatusEnabled is true in the device's policy.
   */
export interface Schema$HardwareInfo {
    /**
     * Battery shutdown temperature thresholds in Celsius for each battery on the device.
     */
    batteryShutdownTemperatures?: number[] | null;
    /**
     * Battery throttling temperature thresholds in Celsius for each battery on the device.
     */
    batteryThrottlingTemperatures?: number[] | null;
    /**
     * Brand of the device. For example, Google.
     */
    brand?: string | null;
    /**
     * CPU shutdown temperature thresholds in Celsius for each CPU on the device.
     */
    cpuShutdownTemperatures?: number[] | null;
    /**
     * CPU throttling temperature thresholds in Celsius for each CPU on the device.
     */
    cpuThrottlingTemperatures?: number[] | null;
    /**
     * Baseband version. For example, MDM9625_104662.22.05.34p.
     */
    deviceBasebandVersion?: string | null;
    /**
     * GPU shutdown temperature thresholds in Celsius for each GPU on the device.
     */
    gpuShutdownTemperatures?: number[] | null;
    /**
     * GPU throttling temperature thresholds in Celsius for each GPU on the device.
     */
    gpuThrottlingTemperatures?: number[] | null;
    /**
     * Name of the hardware. For example, Angler.
     */
    hardware?: string | null;
    /**
     * Manufacturer. For example, Motorola.
     */
    manufacturer?: string | null;
    /**
     * The model of the device. For example, Asus Nexus 7.
     */
    model?: string | null;
    /**
     * The device serial number.
     */
    serialNumber?: string | null;
    /**
     * Device skin shutdown temperature thresholds in Celsius.
     */
    skinShutdownTemperatures?: number[] | null;
    /**
     * Device skin throttling temperature thresholds in Celsius.
     */
    skinThrottlingTemperatures?: number[] | null;
  }


/**
   * Hardware status. Temperatures may be compared to the temperature thresholds available in hardwareInfo to determine hardware health.
   */
export interface Schema$HardwareStatus {
    /**
     * Current battery temperatures in Celsius for each battery on the device.
     */
    batteryTemperatures?: number[] | null;
    /**
     * Current CPU temperatures in Celsius for each CPU on the device.
     */
    cpuTemperatures?: number[] | null;
    /**
     * CPU usages in percentage for each core available on the device. Usage is 0 for each unplugged core. Empty array implies that CPU usage is not supported in the system.
     */
    cpuUsages?: number[] | null;
    /**
     * The time the measurements were taken.
     */
    createTime?: string | null;
    /**
     * Fan speeds in RPM for each fan on the device. Empty array means that there are no fans or fan speed is not supported on the system.
     */
    fanSpeeds?: number[] | null;
    /**
     * Current GPU temperatures in Celsius for each GPU on the device.
     */
    gpuTemperatures?: number[] | null;
    /**
     * Current device skin temperatures in Celsius.
     */
    skinTemperatures?: number[] | null;
  }


/**
   * Response on issuing a command. This is currently empty as a placeholder.
   */
export interface Schema$IssueCommandResponse {}


/**
   * Keyed app state reported by the app.
   */
export interface Schema$KeyedAppState {
    /**
     * The creation time of the app state on the device.
     */
    createTime?: string | null;
    /**
     * Optionally, a machine-readable value to be read by the EMM. For example, setting values that the admin can choose to query against in the EMM console (e.g. “notify me if the battery_warning data < 10”).
     */
    data?: string | null;
    /**
     * The key for the app state. Acts as a point of reference for what the app is providing state for. For example, when providing managed configuration feedback, this key could be the managed configuration key.
     */
    key?: string | null;
    /**
     * The time the app state was most recently updated.
     */
    lastUpdateTime?: string | null;
    /**
     * Optionally, a free-form message string to explain the app state. If the state was triggered by a particular value (e.g. a managed configuration value), it should be included in the message.
     */
    message?: string | null;
    /**
     * The severity of the app state.
     */
    severity?: string | null;
  }


/**
   * Settings controlling the behavior of a device in kiosk mode. To enable kiosk mode, set kioskCustomLauncherEnabled to true or specify an app in the policy with installType KIOSK.
   */
export interface Schema$KioskCustomization {
    /**
     * Specifies whether the Settings app is allowed in kiosk mode.
     */
    deviceSettings?: string | null;
    /**
     * Sets the behavior of a device in kiosk mode when a user presses and holds (long-presses) the Power button.
     */
    powerButtonActions?: string | null;
    /**
     * Specifies whether system info and notifications are disabled in kiosk mode.
     */
    statusBar?: string | null;
    /**
     * Specifies whether system error dialogs for crashed or unresponsive apps are blocked in kiosk mode. When blocked, the system will force-stop the app as if the user chooses the "close app" option on the UI.
     */
    systemErrorWarnings?: string | null;
    /**
     * Specifies which navigation features are enabled (e.g. Home, Overview buttons) in kiosk mode.
     */
    systemNavigation?: string | null;
  }


/**
   * An action to launch an app.
   */
export interface Schema$LaunchAppAction {
    /**
     * Package name of app to be launched
     */
    packageName?: string | null;
  }


/**
   * Response to a request to list devices for a given enterprise.
   */
export interface Schema$ListDevicesResponse {
    /**
     * The list of devices.
     */
    devices?: Schema$Device[];
    /**
     * If there are more results, a token to retrieve next page of results.
     */
    nextPageToken?: string | null;
  }


/**
   * Response to a request to list enterprises.
   */
export interface Schema$ListEnterprisesResponse {
    /**
     * The list of enterprises.
     */
    enterprises?: Schema$Enterprise[];
    /**
     * If there are more results, a token to retrieve next page of results.
     */
    nextPageToken?: string | null;
  }


/**
   * Response to a request to list policies for a given enterprise.
   */
export interface Schema$ListPoliciesResponse {
    /**
     * If there are more results, a token to retrieve next page of results.
     */
    nextPageToken?: string | null;
    /**
     * The list of policies.
     */
    policies?: Schema$Policy[];
  }


/**
   * Response to a request to list web apps for a given enterprise.
   */
export interface Schema$ListWebAppsResponse {
    /**
     * If there are more results, a token to retrieve next page of results.
     */
    nextPageToken?: string | null;
    /**
     * The list of web apps.
     */
    webApps?: Schema$WebApp[];
  }


/**
   * The managed configurations template for the app, saved from the managed configurations iframe.
   */
export interface Schema$ManagedConfigurationTemplate {
    /**
     * Optional, a map containing configuration variables defined for the configuration.
     */
    configurationVariables?: {[key: string]: string} | null;
    /**
     * The ID of the managed configurations template.
     */
    templateId?: string | null;
  }


/**
   * Managed property.
   */
export interface Schema$ManagedProperty {
    /**
     * The default value of the property. BUNDLE_ARRAY properties don't have a default value.
     */
    defaultValue?: any | null;
    /**
     * A longer description of the property, providing more detail of what it affects. Localized.
     */
    description?: string | null;
    /**
     * For CHOICE or MULTISELECT properties, the list of possible entries.
     */
    entries?: Schema$ManagedPropertyEntry[];
    /**
     * The unique key that the app uses to identify the property, e.g. "com.google.android.gm.fieldname".
     */
    key?: string | null;
    /**
     * For BUNDLE_ARRAY properties, the list of nested properties. A BUNDLE_ARRAY property is at most two levels deep.
     */
    nestedProperties?: Schema$ManagedProperty[];
    /**
     * The name of the property. Localized.
     */
    title?: string | null;
    /**
     * The type of the property.
     */
    type?: string | null;
  }


/**
   * An entry of a managed property.
   */
export interface Schema$ManagedPropertyEntry {
    /**
     * The human-readable name of the value. Localized.
     */
    name?: string | null;
    /**
     * The machine-readable value of the entry, which should be used in the configuration. Not localized.
     */
    value?: string | null;
  }


/**
   * An event related to memory and storage measurements.
   */
export interface Schema$MemoryEvent {
    /**
     * The number of free bytes in the medium, or for EXTERNAL_STORAGE_DETECTED, the total capacity in bytes of the storage medium.
     */
    byteCount?: string | null;
    /**
     * The creation time of the event.
     */
    createTime?: string | null;
    /**
     * Event type.
     */
    eventType?: string | null;
  }


/**
   * Information about device memory and storage.
   */
export interface Schema$MemoryInfo {
    /**
     * Total internal storage on device in bytes.
     */
    totalInternalStorage?: string | null;
    /**
     * Total RAM on device in bytes.
     */
    totalRam?: string | null;
  }


/**
   * Device network info.
   */
export interface Schema$NetworkInfo {
    /**
     * IMEI number of the GSM device. For example, A1000031212.
     */
    imei?: string | null;
    /**
     * MEID number of the CDMA device. For example, A00000292788E1.
     */
    meid?: string | null;
    /**
     * Alphabetic name of current registered operator. For example, Vodafone.
     */
    networkOperatorName?: string | null;
    /**
     * Provides telephony information associated with each SIM card on the device. Only supported on fully managed devices starting from Android API level 23.
     */
    telephonyInfos?: Schema$TelephonyInfo[];
    /**
     * Wi-Fi MAC address of the device. For example, 7c:11:11:11:11:11.
     */
    wifiMacAddress?: string | null;
  }


/**
   * Provides detail about non-compliance with a policy setting.
   */
export interface Schema$NonComplianceDetail {
    /**
     * If the policy setting could not be applied, the current value of the setting on the device.
     */
    currentValue?: any | null;
    /**
     * For settings with nested fields, if a particular nested field is out of compliance, this specifies the full path to the offending field. The path is formatted in the same way the policy JSON field would be referenced in JavaScript, that is: 1) For object-typed fields, the field name is followed by a dot then by a subfield name. 2) For array-typed fields, the field name is followed by the array index enclosed in brackets. For example, to indicate a problem with the url field in the externalData field in the 3rd application, the path would be applications[2].externalData.url
     */
    fieldPath?: string | null;
    /**
     * If package_name is set and the non-compliance reason is APP_NOT_INSTALLED or APP_NOT_UPDATED, the detailed reason the app can't be installed or updated.
     */
    installationFailureReason?: string | null;
    /**
     * The reason the device is not in compliance with the setting.
     */
    nonComplianceReason?: string | null;
    /**
     * The package name indicating which app is out of compliance, if applicable.
     */
    packageName?: string | null;
    /**
     * The name of the policy setting. This is the JSON field name of a top-level Policy field.
     */
    settingName?: string | null;
  }


/**
   * A compliance rule condition which is satisfied if there exists any matching NonComplianceDetail for the device. A NonComplianceDetail matches a NonComplianceDetailCondition if all the fields which are set within the NonComplianceDetailCondition match the corresponding NonComplianceDetail fields.
   */
export interface Schema$NonComplianceDetailCondition {
    /**
     * The reason the device is not in compliance with the setting. If not set, then this condition matches any reason.
     */
    nonComplianceReason?: string | null;
    /**
     * The package name of the app that's out of compliance. If not set, then this condition matches any package name.
     */
    packageName?: string | null;
    /**
     * The name of the policy setting. This is the JSON field name of a top-level Policy field. If not set, then this condition matches any setting name.
     */
    settingName?: string | null;
  }


/**
   * This feature is not generally available.
   */
export interface Schema$OncCertificateProvider {
    /**
     * This feature is not generally available.
     */
    certificateReferences?: string[] | null;
    /**
     * This feature is not generally available.
     */
    contentProviderEndpoint?: Schema$ContentProviderEndpoint;
  }


/**
   * This resource represents a long-running operation that is the result of a network API call.
   */
export interface Schema$Operation {
    /**
     * If the value is false, it means the operation is still in progress. If true, the operation is completed, and either error or response is available.
     */
    done?: boolean | null;
    /**
     * The error result of the operation in case of failure or cancellation.
     */
    error?: Schema$Status;
    /**
     * Service-specific metadata associated with the operation. It typically contains progress information and common metadata such as create time. Some services might not provide such metadata. Any method that returns a long-running operation should document the metadata type, if any.
     */
    metadata?: {[key: string]: any} | null;
    /**
     * The server-assigned name, which is only unique within the same service that originally returns it. If you use the default HTTP mapping, the name should be a resource name ending with operations/{unique_id\}.
     */
    name?: string | null;
    /**
     * The normal response of the operation in case of success. If the original method returns no data on success, such as Delete, the response is google.protobuf.Empty. If the original method is standard Get/Create/Update, the response should be the resource. For other methods, the response should have the type XxxResponse, where Xxx is the original method name. For example, if the original method name is TakeSnapshot(), the inferred response type is TakeSnapshotResponse.
     */
    response?: {[key: string]: any} | null;
  }


/**
   * A list of package names.
   */
export interface Schema$PackageNameList {
    /**
     * A list of package names.
     */
    packageNames?: string[] | null;
  }


/**
   * Requirements for the password used to unlock a device.
   */
export interface Schema$PasswordRequirements {
    /**
     * Number of incorrect device-unlock passwords that can be entered before a device is wiped. A value of 0 means there is no restriction.
     */
    maximumFailedPasswordsForWipe?: number | null;
    /**
     * Password expiration timeout.
     */
    passwordExpirationTimeout?: string | null;
    /**
     * The length of the password history. After setting this field, the user won't be able to enter a new password that is the same as any password in the history. A value of 0 means there is no restriction.
     */
    passwordHistoryLength?: number | null;
    /**
     * The minimum allowed password length. A value of 0 means there is no restriction. Only enforced when password_quality is NUMERIC, NUMERIC_COMPLEX, ALPHABETIC, ALPHANUMERIC, or COMPLEX.
     */
    passwordMinimumLength?: number | null;
    /**
     * Minimum number of letters required in the password. Only enforced when password_quality is COMPLEX.
     */
    passwordMinimumLetters?: number | null;
    /**
     * Minimum number of lower case letters required in the password. Only enforced when password_quality is COMPLEX.
     */
    passwordMinimumLowerCase?: number | null;
    /**
     * Minimum number of non-letter characters (numerical digits or symbols) required in the password. Only enforced when password_quality is COMPLEX.
     */
    passwordMinimumNonLetter?: number | null;
    /**
     * Minimum number of numerical digits required in the password. Only enforced when password_quality is COMPLEX.
     */
    passwordMinimumNumeric?: number | null;
    /**
     * Minimum number of symbols required in the password. Only enforced when password_quality is COMPLEX.
     */
    passwordMinimumSymbols?: number | null;
    /**
     * Minimum number of upper case letters required in the password. Only enforced when password_quality is COMPLEX.
     */
    passwordMinimumUpperCase?: number | null;
    /**
     * The required password quality.
     */
    passwordQuality?: string | null;
    /**
     * The scope that the password requirement applies to.
     */
    passwordScope?: string | null;
    /**
     * The length of time after a device or work profile is unlocked using a strong form of authentication (password, PIN, pattern) that it can be unlocked using any other authentication method (e.g. fingerprint, trust agents, face). After the specified time period elapses, only strong forms of authentication can be used to unlock the device or work profile.
     */
    requirePasswordUnlock?: string | null;
  }


/**
   * Configuration for an Android permission and its grant state.
   */
export interface Schema$PermissionGrant {
    /**
     * The Android permission or group, e.g. android.permission.READ_CALENDAR or android.permission_group.CALENDAR.
     */
    permission?: string | null;
    /**
     * The policy for granting the permission.
     */
    policy?: string | null;
  }


/**
   * A default activity for handling intents that match a particular intent filter. Note: To set up a kiosk, use InstallType to KIOSK rather than use persistent preferred activities.
   */
export interface Schema$PersistentPreferredActivity {
    /**
     * The intent actions to match in the filter. If any actions are included in the filter, then an intent's action must be one of those values for it to match. If no actions are included, the intent action is ignored.
     */
    actions?: string[] | null;
    /**
     * The intent categories to match in the filter. An intent includes the categories that it requires, all of which must be included in the filter in order to match. In other words, adding a category to the filter has no impact on matching unless that category is specified in the intent.
     */
    categories?: string[] | null;
    /**
     * The activity that should be the default intent handler. This should be an Android component name, e.g. com.android.enterprise.app/.MainActivity. Alternatively, the value may be the package name of an app, which causes Android Device Policy to choose an appropriate activity from the app to handle the intent.
     */
    receiverActivity?: string | null;
  }


/**
   * Policies for apps in the personal profile of a company-owned device with a work profile.
   */
export interface Schema$PersonalApplicationPolicy {
    /**
     * The type of installation to perform.
     */
    installType?: string | null;
    /**
     * The package name of the application.
     */
    packageName?: string | null;
  }


/**
   * Policies controlling personal usage on a company-owned device with a work profile.
   */
export interface Schema$PersonalUsagePolicies {
    /**
     * Account types that can't be managed by the user.
     */
    accountTypesWithManagementDisabled?: string[] | null;
    /**
     * Whether camera is disabled.
     */
    cameraDisabled?: boolean | null;
    /**
     * Controls how long the work profile can stay off. The duration must be at least 3 days.
     */
    maxDaysWithWorkOff?: number | null;
    /**
     * Policy applied to applications in the personal profile.
     */
    personalApplications?: Schema$PersonalApplicationPolicy[];
    /**
     * Used together with personalApplications to control how apps in the personal profile are allowed or blocked.
     */
    personalPlayStoreMode?: string | null;
    /**
     * Whether screen capture is disabled.
     */
    screenCaptureDisabled?: boolean | null;
  }


/**
   * A rule that defines the actions to take if a device or work profile is not compliant with the policy specified in settingName.
   */
export interface Schema$PolicyEnforcementRule {
    /**
     * An action to block access to apps and data on a fully managed device or in a work profile. This action also triggers a user-facing notification with information (where possible) on how to correct the compliance issue. Note: wipeAction must also be specified.
     */
    blockAction?: Schema$BlockAction;
    /**
     * The top-level policy to enforce. For example, applications or passwordPolicies.
     */
    settingName?: string | null;
    /**
     * An action to reset a fully managed device or delete a work profile. Note: blockAction must also be specified.
     */
    wipeAction?: Schema$WipeAction;
  }


/**
   * Additional details regarding the security posture of the device.
   */
export interface Schema$PostureDetail {
    /**
     * Corresponding admin-facing advice to mitigate this security risk and improve the security posture of the device.
     */
    advice?: Schema$UserFacingMessage[];
    /**
     * A specific security risk that negatively affects the security posture of the device.
     */
    securityRisk?: string | null;
  }


/**
   * A power management event.
   */
export interface Schema$PowerManagementEvent {
    /**
     * For BATTERY_LEVEL_COLLECTED events, the battery level as a percentage.
     */
    batteryLevel?: number | null;
    /**
     * The creation time of the event.
     */
    createTime?: string | null;
    /**
     * Event type.
     */
    eventType?: string | null;
  }


/**
   * Configuration info for an HTTP proxy. For a direct proxy, set the host, port, and excluded_hosts fields. For a PAC script proxy, set the pac_uri field.
   */
export interface Schema$ProxyInfo {
    /**
     * For a direct proxy, the hosts for which the proxy is bypassed. The host names may contain wildcards such as *.example.com.
     */
    excludedHosts?: string[] | null;
    /**
     * The host of the direct proxy.
     */
    host?: string | null;
    /**
     * The URI of the PAC script used to configure the proxy.
     */
    pacUri?: string | null;
    /**
     * The port of the direct proxy.
     */
    port?: number | null;
  }


/**
   * The security posture of the device, as determined by the current device state and the policies applied.
   */
export interface Schema$SecurityPosture {
    /**
     * Device's security posture value.
     */
    devicePosture?: string | null;
    /**
     * Additional details regarding the security posture of the device.
     */
    postureDetails?: Schema$PostureDetail[];
  }


/**
   * An action executed during setup.
   */
export interface Schema$SetupAction {
    /**
     * Description of this action.
     */
    description?: Schema$UserFacingMessage;
    /**
     * An action to launch an app.
     */
    launchApp?: Schema$LaunchAppAction;
    /**
     * Title of this action.
     */
    title?: Schema$UserFacingMessage;
  }


/**
   * A resource containing sign in details for an enterprise.
   */
export interface Schema$SigninDetail {
    /**
     * Controls whether personal usage is allowed on a device provisioned with this enrollment token.For company-owned devices: Enabling personal usage allows the user to set up a work profile on the device. Disabling personal usage requires the user provision the device as a fully managed device.For personally-owned devices: Enabling personal usage allows the user to set up a work profile on the device. Disabling personal usage will prevent the device from provisioning. Personal usage cannot be disabled on personally-owned device.
     */
    allowPersonalUsage?: string | null;
    /**
     * A JSON string whose UTF-8 representation can be used to generate a QR code to enroll a device with this enrollment token. To enroll a device using NFC, the NFC record must contain a serialized java.util.Properties representation of the properties in the JSON. This is a read-only field generated by the server.
     */
    qrCode?: string | null;
    /**
     * An enterprise wide enrollment token used to trigger custom sign-in flow. This is a read-only field generated by the server.
     */
    signinEnrollmentToken?: string | null;
    /**
     * Sign-in URL for authentication when device is provisioned with a sign-in enrollment token. The sign-in endpoint should finish authentication flow with a URL in the form of https://enterprise.google.com/android/enroll?et= for a successful login, or https://enterprise.google.com/android/enroll/invalid for a failed login.
     */
    signinUrl?: string | null;
  }


/**
   * An enterprise signup URL.
   */
export interface Schema$SignupUrl {
    /**
     * The name of the resource. Use this value in the signupUrl field when calling enterprises.create to complete the enterprise signup flow.
     */
    name?: string | null;
    /**
     * A URL where an enterprise admin can register their enterprise. The page can't be rendered in an iframe.
     */
    url?: string | null;
  }