@pulumi/cloudflare 6.11.0-alpha.1761588517 → 6.11.0

package/types/input.d.ts

@@ -48,6 +48,10 @@ export interface AccessApplicationDestination {
      * Available values: "tcp", "udp".
      */
     l4Protocol?: pulumi.Input<string>;
+    /**
+     * A MCP server id configured in ai-controls. Access will secure the MCP server if accessed through a MCP portal.
+     */
+    mcpServerId?: pulumi.Input<string>;
     /**
      * The port range of the destination. Can be a single port or a range of ports. When omitted, all ports will match.
      */
@@ -2664,6 +2668,16 @@ export interface AccountDnsSettingsZoneDefaultsSoa {
      */
     ttl?: pulumi.Input<number>;
 }
+export interface AccountManagedBy {
+    /**
+     * ID of the parent Organization, if one exists
+     */
+    parentOrgId?: pulumi.Input<string>;
+    /**
+     * Name of the parent Organization, if one exists
+     */
+    parentOrgName?: pulumi.Input<string>;
+}
 export interface AccountMemberPolicy {
     /**
      * Allow or deny operations against the resources.
@@ -2842,24 +2856,6 @@ export interface ApiShieldAuthIdCharacteristic {
      */
     type: pulumi.Input<string>;
 }
-export interface ApiShieldError {
-    code?: pulumi.Input<number>;
-    documentationUrl?: pulumi.Input<string>;
-    message?: pulumi.Input<string>;
-    source?: pulumi.Input<inputs.ApiShieldErrorSource>;
-}
-export interface ApiShieldErrorSource {
-    pointer?: pulumi.Input<string>;
-}
-export interface ApiShieldMessage {
-    code?: pulumi.Input<number>;
-    documentationUrl?: pulumi.Input<string>;
-    message?: pulumi.Input<string>;
-    source?: pulumi.Input<inputs.ApiShieldMessageSource>;
-}
-export interface ApiShieldMessageSource {
-    pointer?: pulumi.Input<string>;
-}
 export interface ApiShieldOperationFeatures {
     /**
      * API Routing settings on endpoint.
@@ -3538,7 +3534,7 @@ export interface DevicePostureRuleInput {
      */
     osDistroRevision?: pulumi.Input<string>;
     /**
-     * Additional version data. For Mac or iOS, the Product Version Extra. For Linux, the kernel release version. (Mac, iOS, and Linux only).
+     * Additional version data. For Mac or iOS, the Product Version Extra. For Linux, the distribution name and version. (Mac, iOS, and Linux only).
      */
     osVersionExtra?: pulumi.Input<string>;
     /**
@@ -5301,6 +5297,208 @@ export interface GetMagicTransitSiteFilterArgs {
      */
     connectorid?: pulumi.Input<string>;
 }
+export interface GetOrganizationFilter {
+    containing?: inputs.GetOrganizationFilterContaining;
+    /**
+     * Only return organizations with the specified IDs (ex. id=foo&id=bar). Send multiple elements
+     * by repeating the query value.
+     */
+    ids?: string[];
+    name?: inputs.GetOrganizationFilterName;
+    /**
+     * The amount of items to return. Defaults to 10.
+     */
+    pageSize?: number;
+    /**
+     * An opaque token returned from the last list response that when
+     * provided will retrieve the next page.
+     */
+    pageToken?: string;
+    parent?: inputs.GetOrganizationFilterParent;
+}
+export interface GetOrganizationFilterArgs {
+    containing?: pulumi.Input<inputs.GetOrganizationFilterContainingArgs>;
+    /**
+     * Only return organizations with the specified IDs (ex. id=foo&id=bar). Send multiple elements
+     * by repeating the query value.
+     */
+    ids?: pulumi.Input<pulumi.Input<string>[]>;
+    name?: pulumi.Input<inputs.GetOrganizationFilterNameArgs>;
+    /**
+     * The amount of items to return. Defaults to 10.
+     */
+    pageSize?: pulumi.Input<number>;
+    /**
+     * An opaque token returned from the last list response that when
+     * provided will retrieve the next page.
+     */
+    pageToken?: pulumi.Input<string>;
+    parent?: pulumi.Input<inputs.GetOrganizationFilterParentArgs>;
+}
+export interface GetOrganizationFilterContaining {
+    /**
+     * Filter the list of organizations to the ones that contain this particular
+     * account.
+     */
+    account?: string;
+    /**
+     * Filter the list of organizations to the ones that contain this particular
+     * organization.
+     */
+    organization?: string;
+    /**
+     * Filter the list of organizations to the ones that contain this particular
+     * user.
+     */
+    user?: string;
+}
+export interface GetOrganizationFilterContainingArgs {
+    /**
+     * Filter the list of organizations to the ones that contain this particular
+     * account.
+     */
+    account?: pulumi.Input<string>;
+    /**
+     * Filter the list of organizations to the ones that contain this particular
+     * organization.
+     */
+    organization?: pulumi.Input<string>;
+    /**
+     * Filter the list of organizations to the ones that contain this particular
+     * user.
+     */
+    user?: pulumi.Input<string>;
+}
+export interface GetOrganizationFilterName {
+    /**
+     * (case-insensitive) Filter the list of organizations to where the name contains a particular
+     * string.
+     */
+    contains?: string;
+    /**
+     * (case-insensitive) Filter the list of organizations to where the name ends with a particular
+     * string.
+     */
+    endsWith?: string;
+    /**
+     * (case-insensitive) Filter the list of organizations to where the name starts with a
+     * particular string.
+     */
+    startsWith?: string;
+}
+export interface GetOrganizationFilterNameArgs {
+    /**
+     * (case-insensitive) Filter the list of organizations to where the name contains a particular
+     * string.
+     */
+    contains?: pulumi.Input<string>;
+    /**
+     * (case-insensitive) Filter the list of organizations to where the name ends with a particular
+     * string.
+     */
+    endsWith?: pulumi.Input<string>;
+    /**
+     * (case-insensitive) Filter the list of organizations to where the name starts with a
+     * particular string.
+     */
+    startsWith?: pulumi.Input<string>;
+}
+export interface GetOrganizationFilterParent {
+    /**
+     * Filter the list of organizations to the ones that are a sub-organization
+     * of the specified organization.
+     */
+    id?: string;
+}
+export interface GetOrganizationFilterParentArgs {
+    /**
+     * Filter the list of organizations to the ones that are a sub-organization
+     * of the specified organization.
+     */
+    id?: pulumi.Input<string>;
+}
+export interface GetOrganizationsContaining {
+    /**
+     * Filter the list of organizations to the ones that contain this particular
+     * account.
+     */
+    account?: string;
+    /**
+     * Filter the list of organizations to the ones that contain this particular
+     * organization.
+     */
+    organization?: string;
+    /**
+     * Filter the list of organizations to the ones that contain this particular
+     * user.
+     */
+    user?: string;
+}
+export interface GetOrganizationsContainingArgs {
+    /**
+     * Filter the list of organizations to the ones that contain this particular
+     * account.
+     */
+    account?: pulumi.Input<string>;
+    /**
+     * Filter the list of organizations to the ones that contain this particular
+     * organization.
+     */
+    organization?: pulumi.Input<string>;
+    /**
+     * Filter the list of organizations to the ones that contain this particular
+     * user.
+     */
+    user?: pulumi.Input<string>;
+}
+export interface GetOrganizationsName {
+    /**
+     * (case-insensitive) Filter the list of organizations to where the name contains a particular
+     * string.
+     */
+    contains?: string;
+    /**
+     * (case-insensitive) Filter the list of organizations to where the name ends with a particular
+     * string.
+     */
+    endsWith?: string;
+    /**
+     * (case-insensitive) Filter the list of organizations to where the name starts with a
+     * particular string.
+     */
+    startsWith?: string;
+}
+export interface GetOrganizationsNameArgs {
+    /**
+     * (case-insensitive) Filter the list of organizations to where the name contains a particular
+     * string.
+     */
+    contains?: pulumi.Input<string>;
+    /**
+     * (case-insensitive) Filter the list of organizations to where the name ends with a particular
+     * string.
+     */
+    endsWith?: pulumi.Input<string>;
+    /**
+     * (case-insensitive) Filter the list of organizations to where the name starts with a
+     * particular string.
+     */
+    startsWith?: pulumi.Input<string>;
+}
+export interface GetOrganizationsParent {
+    /**
+     * Filter the list of organizations to the ones that are a sub-organization
+     * of the specified organization.
+     */
+    id?: string;
+}
+export interface GetOrganizationsParentArgs {
+    /**
+     * Filter the list of organizations to the ones that are a sub-organization
+     * of the specified organization.
+     */
+    id?: pulumi.Input<string>;
+}
 export interface GetOriginCaCertificateFilter {
     /**
      * Limit to the number of records returned.
@@ -5759,6 +5957,34 @@ export interface GetZeroTrustAccessServiceTokenFilterArgs {
      */
     search?: pulumi.Input<string>;
 }
+export interface GetZeroTrustDexTestTargetPolicy {
+    /**
+     * Whether the DEX rule is the account default
+     */
+    default?: boolean;
+    /**
+     * The id of the DEX rule
+     */
+    id?: string;
+    /**
+     * The name of the DEX rule
+     */
+    name?: string;
+}
+export interface GetZeroTrustDexTestTargetPolicyArgs {
+    /**
+     * Whether the DEX rule is the account default
+     */
+    default?: pulumi.Input<boolean>;
+    /**
+     * The id of the DEX rule
+     */
+    id?: pulumi.Input<string>;
+    /**
+     * The name of the DEX rule
+     */
+    name?: pulumi.Input<string>;
+}
 export interface GetZeroTrustListFilter {
     /**
      * Specify the list type.
@@ -7294,6 +7520,10 @@ export interface NotificationPolicyFilters {
      * Usage depends on specific alert type
      */
     tunnelNames?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Usage depends on specific alert type
+     */
+    types?: pulumi.Input<pulumi.Input<string>[]>;
     /**
      * Usage depends on specific alert type
      */
@@ -7506,6 +7736,31 @@ export interface ObservatoryScheduledTestTestRegion {
      */
     value?: pulumi.Input<string>;
 }
+export interface OrganizationMeta {
+    /**
+     * Enable features for Organizations.
+     */
+    flags?: pulumi.Input<inputs.OrganizationMetaFlags>;
+    managedBy?: pulumi.Input<string>;
+}
+export interface OrganizationMetaFlags {
+    accountCreation?: pulumi.Input<string>;
+    accountDeletion?: pulumi.Input<string>;
+    accountMigration?: pulumi.Input<string>;
+    accountMobility?: pulumi.Input<string>;
+    subOrgCreation?: pulumi.Input<string>;
+}
+export interface OrganizationParent {
+    id: pulumi.Input<string>;
+    name?: pulumi.Input<string>;
+}
+export interface OrganizationProfile {
+    businessAddress: pulumi.Input<string>;
+    businessEmail: pulumi.Input<string>;
+    businessName: pulumi.Input<string>;
+    businessPhone: pulumi.Input<string>;
+    externalMetadata: pulumi.Input<string>;
+}
 export interface PageRuleActions {
     alwaysUseHttps?: pulumi.Input<boolean>;
     automaticHttpsRewrites?: pulumi.Input<string>;
@@ -7771,22 +8026,60 @@ export interface PagesProjectCanonicalDeploymentLatestStage {
 }
 export interface PagesProjectCanonicalDeploymentSource {
     config?: pulumi.Input<inputs.PagesProjectCanonicalDeploymentSourceConfig>;
+    /**
+     * The source control management provider.
+     * Available values: "github", "gitlab".
+     */
     type?: pulumi.Input<string>;
 }
 export interface PagesProjectCanonicalDeploymentSourceConfig {
+    /**
+     * Whether to enable automatic deployments when pushing to the source repository.
+     * When disabled, no deployments (production or preview) will be triggered automatically.
+     *
+     * @deprecated Use `productionDeploymentsEnabled` and `previewDeploymentSetting` for more granular control.
+     */
     deploymentsEnabled?: pulumi.Input<boolean>;
+    /**
+     * The owner of the repository.
+     */
     owner?: pulumi.Input<string>;
+    /**
+     * A list of paths that should be excluded from triggering a preview deployment. Wildcard syntax (`*`) is supported.
+     */
     pathExcludes?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * A list of paths that should be watched to trigger a preview deployment. Wildcard syntax (`*`) is supported.
+     */
     pathIncludes?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Whether to enable PR comments.
+     */
     prCommentsEnabled?: pulumi.Input<boolean>;
+    /**
+     * A list of branches that should not trigger a preview deployment. Wildcard syntax (`*`) is supported. Must be used with `previewDeploymentSetting` set to `custom`.
+     */
     previewBranchExcludes?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * A list of branches that should trigger a preview deployment. Wildcard syntax (`*`) is supported. Must be used with `previewDeploymentSetting` set to `custom`.
+     */
     previewBranchIncludes?: pulumi.Input<pulumi.Input<string>[]>;
     /**
+     * Controls whether commits to preview branches trigger a preview deployment.
      * Available values: "all", "none", "custom".
      */
     previewDeploymentSetting?: pulumi.Input<string>;
+    /**
+     * The production branch of the repository.
+     */
     productionBranch?: pulumi.Input<string>;
+    /**
+     * Whether to trigger a production deployment on commits to the production branch.
+     */
     productionDeploymentsEnabled?: pulumi.Input<boolean>;
+    /**
+     * The name of the repository.
+     */
     repoName?: pulumi.Input<string>;
 }
 export interface PagesProjectCanonicalDeploymentStage {
@@ -7826,6 +8119,10 @@ export interface PagesProjectDeploymentConfigsPreview {
     aiBindings?: pulumi.Input<{
         [key: string]: pulumi.Input<inputs.PagesProjectDeploymentConfigsPreviewAiBindings>;
     }>;
+    /**
+     * Whether to always use the latest compatibility date for Pages Functions.
+     */
+    alwaysUseLatestCompatibilityDate?: pulumi.Input<boolean>;
     /**
      * Analytics Engine bindings used for Pages Functions.
      */
@@ -7838,6 +8135,10 @@ export interface PagesProjectDeploymentConfigsPreview {
     browsers?: pulumi.Input<{
         [key: string]: pulumi.Input<inputs.PagesProjectDeploymentConfigsPreviewBrowsers>;
     }>;
+    /**
+     * The major version of the build image to use for Pages Functions.
+     */
+    buildImageMajorVersion?: pulumi.Input<number>;
     /**
      * Compatibility date used for Pages Functions.
      */
@@ -7864,6 +8165,10 @@ export interface PagesProjectDeploymentConfigsPreview {
     envVars?: pulumi.Input<{
         [key: string]: pulumi.Input<inputs.PagesProjectDeploymentConfigsPreviewEnvVars>;
     }>;
+    /**
+     * Whether to fail open when the deployment config cannot be applied.
+     */
+    failOpen?: pulumi.Input<boolean>;
     /**
      * Hyperdrive bindings used for Pages Functions.
      */
@@ -7876,6 +8181,10 @@ export interface PagesProjectDeploymentConfigsPreview {
     kvNamespaces?: pulumi.Input<{
         [key: string]: pulumi.Input<inputs.PagesProjectDeploymentConfigsPreviewKvNamespaces>;
     }>;
+    /**
+     * Limits for Pages Functions.
+     */
+    limits?: pulumi.Input<inputs.PagesProjectDeploymentConfigsPreviewLimits>;
     /**
      * mTLS bindings used for Pages Functions.
      */
@@ -7904,12 +8213,23 @@ export interface PagesProjectDeploymentConfigsPreview {
     services?: pulumi.Input<{
         [key: string]: pulumi.Input<inputs.PagesProjectDeploymentConfigsPreviewServices>;
     }>;
+    /**
+     * The usage model for Pages Functions.
+     * Available values: "standard", "bundled", "unbound".
+     *
+     * @deprecated All new projects now use the Standard usage model.
+     */
+    usageModel?: pulumi.Input<string>;
     /**
      * Vectorize bindings used for Pages Functions.
      */
     vectorizeBindings?: pulumi.Input<{
         [key: string]: pulumi.Input<inputs.PagesProjectDeploymentConfigsPreviewVectorizeBindings>;
     }>;
+    /**
+     * Hash of the Wrangler configuration used for the deployment.
+     */
+    wranglerConfigHash?: pulumi.Input<string>;
 }
 export interface PagesProjectDeploymentConfigsPreviewAiBindings {
     projectId?: pulumi.Input<string>;
@@ -7953,6 +8273,12 @@ export interface PagesProjectDeploymentConfigsPreviewKvNamespaces {
      */
     namespaceId?: pulumi.Input<string>;
 }
+export interface PagesProjectDeploymentConfigsPreviewLimits {
+    /**
+     * CPU time limit in milliseconds.
+     */
+    cpuMs?: pulumi.Input<number>;
+}
 export interface PagesProjectDeploymentConfigsPreviewMtlsCertificates {
     certificateId?: pulumi.Input<string>;
 }
@@ -8002,6 +8328,10 @@ export interface PagesProjectDeploymentConfigsProduction {
     aiBindings?: pulumi.Input<{
         [key: string]: pulumi.Input<inputs.PagesProjectDeploymentConfigsProductionAiBindings>;
     }>;
+    /**
+     * Whether to always use the latest compatibility date for Pages Functions.
+     */
+    alwaysUseLatestCompatibilityDate?: pulumi.Input<boolean>;
     /**
      * Analytics Engine bindings used for Pages Functions.
      */
@@ -8014,6 +8344,10 @@ export interface PagesProjectDeploymentConfigsProduction {
     browsers?: pulumi.Input<{
         [key: string]: pulumi.Input<inputs.PagesProjectDeploymentConfigsProductionBrowsers>;
     }>;
+    /**
+     * The major version of the build image to use for Pages Functions.
+     */
+    buildImageMajorVersion?: pulumi.Input<number>;
     /**
      * Compatibility date used for Pages Functions.
      */
@@ -8040,6 +8374,10 @@ export interface PagesProjectDeploymentConfigsProduction {
     envVars?: pulumi.Input<{
         [key: string]: pulumi.Input<inputs.PagesProjectDeploymentConfigsProductionEnvVars>;
     }>;
+    /**
+     * Whether to fail open when the deployment config cannot be applied.
+     */
+    failOpen?: pulumi.Input<boolean>;
     /**
      * Hyperdrive bindings used for Pages Functions.
      */
@@ -8052,6 +8390,10 @@ export interface PagesProjectDeploymentConfigsProduction {
     kvNamespaces?: pulumi.Input<{
         [key: string]: pulumi.Input<inputs.PagesProjectDeploymentConfigsProductionKvNamespaces>;
     }>;
+    /**
+     * Limits for Pages Functions.
+     */
+    limits?: pulumi.Input<inputs.PagesProjectDeploymentConfigsProductionLimits>;
     /**
      * mTLS bindings used for Pages Functions.
      */
@@ -8080,12 +8422,23 @@ export interface PagesProjectDeploymentConfigsProduction {
     services?: pulumi.Input<{
         [key: string]: pulumi.Input<inputs.PagesProjectDeploymentConfigsProductionServices>;
     }>;
+    /**
+     * The usage model for Pages Functions.
+     * Available values: "standard", "bundled", "unbound".
+     *
+     * @deprecated All new projects now use the Standard usage model.
+     */
+    usageModel?: pulumi.Input<string>;
     /**
      * Vectorize bindings used for Pages Functions.
      */
     vectorizeBindings?: pulumi.Input<{
         [key: string]: pulumi.Input<inputs.PagesProjectDeploymentConfigsProductionVectorizeBindings>;
     }>;
+    /**
+     * Hash of the Wrangler configuration used for the deployment.
+     */
+    wranglerConfigHash?: pulumi.Input<string>;
 }
 export interface PagesProjectDeploymentConfigsProductionAiBindings {
     projectId?: pulumi.Input<string>;
@@ -8129,6 +8482,12 @@ export interface PagesProjectDeploymentConfigsProductionKvNamespaces {
      */
     namespaceId?: pulumi.Input<string>;
 }
+export interface PagesProjectDeploymentConfigsProductionLimits {
+    /**
+     * CPU time limit in milliseconds.
+     */
+    cpuMs?: pulumi.Input<number>;
+}
 export interface PagesProjectDeploymentConfigsProductionMtlsCertificates {
     certificateId?: pulumi.Input<string>;
 }
@@ -8320,22 +8679,60 @@ export interface PagesProjectLatestDeploymentLatestStage {
 }
 export interface PagesProjectLatestDeploymentSource {
     config?: pulumi.Input<inputs.PagesProjectLatestDeploymentSourceConfig>;
+    /**
+     * The source control management provider.
+     * Available values: "github", "gitlab".
+     */
     type?: pulumi.Input<string>;
 }
 export interface PagesProjectLatestDeploymentSourceConfig {
+    /**
+     * Whether to enable automatic deployments when pushing to the source repository.
+     * When disabled, no deployments (production or preview) will be triggered automatically.
+     *
+     * @deprecated Use `productionDeploymentsEnabled` and `previewDeploymentSetting` for more granular control.
+     */
     deploymentsEnabled?: pulumi.Input<boolean>;
+    /**
+     * The owner of the repository.
+     */
     owner?: pulumi.Input<string>;
+    /**
+     * A list of paths that should be excluded from triggering a preview deployment. Wildcard syntax (`*`) is supported.
+     */
     pathExcludes?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * A list of paths that should be watched to trigger a preview deployment. Wildcard syntax (`*`) is supported.
+     */
     pathIncludes?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Whether to enable PR comments.
+     */
     prCommentsEnabled?: pulumi.Input<boolean>;
+    /**
+     * A list of branches that should not trigger a preview deployment. Wildcard syntax (`*`) is supported. Must be used with `previewDeploymentSetting` set to `custom`.
+     */
     previewBranchExcludes?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * A list of branches that should trigger a preview deployment. Wildcard syntax (`*`) is supported. Must be used with `previewDeploymentSetting` set to `custom`.
+     */
     previewBranchIncludes?: pulumi.Input<pulumi.Input<string>[]>;
     /**
+     * Controls whether commits to preview branches trigger a preview deployment.
      * Available values: "all", "none", "custom".
      */
     previewDeploymentSetting?: pulumi.Input<string>;
+    /**
+     * The production branch of the repository.
+     */
     productionBranch?: pulumi.Input<string>;
+    /**
+     * Whether to trigger a production deployment on commits to the production branch.
+     */
     productionDeploymentsEnabled?: pulumi.Input<boolean>;
+    /**
+     * The name of the repository.
+     */
     repoName?: pulumi.Input<string>;
 }
 export interface PagesProjectLatestDeploymentStage {
@@ -8360,22 +8757,60 @@ export interface PagesProjectLatestDeploymentStage {
 }
 export interface PagesProjectSource {
     config?: pulumi.Input<inputs.PagesProjectSourceConfig>;
+    /**
+     * The source control management provider.
+     * Available values: "github", "gitlab".
+     */
     type?: pulumi.Input<string>;
 }
 export interface PagesProjectSourceConfig {
+    /**
+     * Whether to enable automatic deployments when pushing to the source repository.
+     * When disabled, no deployments (production or preview) will be triggered automatically.
+     *
+     * @deprecated Use `productionDeploymentsEnabled` and `previewDeploymentSetting` for more granular control.
+     */
     deploymentsEnabled?: pulumi.Input<boolean>;
+    /**
+     * The owner of the repository.
+     */
     owner?: pulumi.Input<string>;
+    /**
+     * A list of paths that should be excluded from triggering a preview deployment. Wildcard syntax (`*`) is supported.
+     */
     pathExcludes?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * A list of paths that should be watched to trigger a preview deployment. Wildcard syntax (`*`) is supported.
+     */
     pathIncludes?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Whether to enable PR comments.
+     */
     prCommentsEnabled?: pulumi.Input<boolean>;
+    /**
+     * A list of branches that should not trigger a preview deployment. Wildcard syntax (`*`) is supported. Must be used with `previewDeploymentSetting` set to `custom`.
+     */
     previewBranchExcludes?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * A list of branches that should trigger a preview deployment. Wildcard syntax (`*`) is supported. Must be used with `previewDeploymentSetting` set to `custom`.
+     */
     previewBranchIncludes?: pulumi.Input<pulumi.Input<string>[]>;
     /**
+     * Controls whether commits to preview branches trigger a preview deployment.
      * Available values: "all", "none", "custom".
      */
     previewDeploymentSetting?: pulumi.Input<string>;
+    /**
+     * The production branch of the repository.
+     */
     productionBranch?: pulumi.Input<string>;
+    /**
+     * Whether to trigger a production deployment on commits to the production branch.
+     */
     productionDeploymentsEnabled?: pulumi.Input<boolean>;
+    /**
+     * The name of the repository.
+     */
     repoName?: pulumi.Input<string>;
 }
 export interface QueueConsumer {
@@ -9958,7 +10393,7 @@ export interface TeamsAccountSettings {
      */
     customCertificate?: pulumi.Input<inputs.TeamsAccountSettingsCustomCertificate>;
     /**
-     * Specify user email settings for the firewall policies. When this is enabled, we standardize the email addresses in the identity part of the rule, so that they match the extended email variants in the firewall policies. When this setting is turned off, the email addresses in the identity part of the rule will be matched exactly as provided. If your email has `.` or `+` modifiers, you should enable this setting.
+     * Configures user email settings for firewall policies. When you enable this, the system standardizes email addresses in the identity portion of the rule to match extended email variants in firewall policies. When you disable this setting, the system matches email addresses exactly as you provide them. Enable this setting if your email uses `.` or `+` modifiers.
      */
     extendedEmailMatching?: pulumi.Input<inputs.TeamsAccountSettingsExtendedEmailMatching>;
     /**
@@ -10618,10 +11053,6 @@ export interface TunnelConfigConfig {
      * Configuration parameters for the public hostname specific connection settings between cloudflared and origin server.
      */
     originRequest?: pulumi.Input<inputs.TunnelConfigConfigOriginRequest>;
-    /**
-     * Enable private network access from WARP users to private network routes. This is enabled if the tunnel has an assigned route.
-     */
-    warpRouting?: pulumi.Input<inputs.TunnelConfigConfigWarpRouting>;
 }
 export interface TunnelConfigConfigIngress {
     /**
@@ -10779,9 +11210,6 @@ export interface TunnelConfigConfigOriginRequestAccess {
     required?: pulumi.Input<boolean>;
     teamName: pulumi.Input<string>;
 }
-export interface TunnelConfigConfigWarpRouting {
-    enabled?: pulumi.Input<boolean>;
-}
 export interface TunnelConnection {
     /**
      * UUID of the Cloudflare Tunnel connector.
@@ -10963,6 +11391,110 @@ export interface WorkerObservabilityLogs {
      */
     invocationLogs?: pulumi.Input<boolean>;
 }
+export interface WorkerReferences {
+    /**
+     * Other Workers that reference the Worker as an outbound for a dispatch namespace.
+     */
+    dispatchNamespaceOutbounds?: pulumi.Input<pulumi.Input<inputs.WorkerReferencesDispatchNamespaceOutbound>[]>;
+    /**
+     * Custom domains connected to the Worker.
+     */
+    domains?: pulumi.Input<pulumi.Input<inputs.WorkerReferencesDomain>[]>;
+    /**
+     * Other Workers that reference Durable Object classes implemented by the Worker.
+     */
+    durableObjects?: pulumi.Input<pulumi.Input<inputs.WorkerReferencesDurableObject>[]>;
+    /**
+     * Queues that send messages to the Worker.
+     */
+    queues?: pulumi.Input<pulumi.Input<inputs.WorkerReferencesQueue>[]>;
+    /**
+     * Other Workers that reference the Worker using [service bindings](https://developers.cloudflare.com/workers/runtime-apis/bindings/service-bindings/).
+     */
+    workers?: pulumi.Input<pulumi.Input<inputs.WorkerReferencesWorker>[]>;
+}
+export interface WorkerReferencesDispatchNamespaceOutbound {
+    /**
+     * ID of the dispatch namespace.
+     */
+    namespaceId?: pulumi.Input<string>;
+    /**
+     * Name of the dispatch namespace.
+     */
+    namespaceName?: pulumi.Input<string>;
+    /**
+     * ID of the Worker using the dispatch namespace.
+     */
+    workerId?: pulumi.Input<string>;
+    /**
+     * Name of the Worker using the dispatch namespace.
+     */
+    workerName?: pulumi.Input<string>;
+}
+export interface WorkerReferencesDomain {
+    /**
+     * ID of the TLS certificate issued for the custom domain.
+     */
+    certificateId?: pulumi.Input<string>;
+    /**
+     * Full hostname of the custom domain, including the zone name.
+     */
+    hostname?: pulumi.Input<string>;
+    /**
+     * ID of the custom domain.
+     */
+    id?: pulumi.Input<string>;
+    /**
+     * ID of the zone.
+     */
+    zoneId?: pulumi.Input<string>;
+    /**
+     * Name of the zone.
+     */
+    zoneName?: pulumi.Input<string>;
+}
+export interface WorkerReferencesDurableObject {
+    /**
+     * ID of the Durable Object namespace being used.
+     */
+    namespaceId?: pulumi.Input<string>;
+    /**
+     * Name of the Durable Object namespace being used.
+     */
+    namespaceName?: pulumi.Input<string>;
+    /**
+     * ID of the Worker using the Durable Object implementation.
+     */
+    workerId?: pulumi.Input<string>;
+    /**
+     * Name of the Worker using the Durable Object implementation.
+     */
+    workerName?: pulumi.Input<string>;
+}
+export interface WorkerReferencesQueue {
+    /**
+     * ID of the queue consumer configuration.
+     */
+    queueConsumerId?: pulumi.Input<string>;
+    /**
+     * ID of the queue.
+     */
+    queueId?: pulumi.Input<string>;
+    /**
+     * Name of the queue.
+     */
+    queueName?: pulumi.Input<string>;
+}
+export interface WorkerReferencesWorker {
+    /**
+     * ID of the referencing Worker.
+     */
+    id?: pulumi.Input<string>;
+    /**
+     * Name of the referencing Worker.
+     */
+    name?: pulumi.Input<string>;
+}
 export interface WorkerScriptAssets {
     /**
      * The SHA-256 hash of the asset manifest of files to upload.
@@ -11083,7 +11615,7 @@ export interface WorkerScriptBinding {
      */
     name: pulumi.Input<string>;
     /**
-     * Namespace to bind to.
+     * The name of the dispatch namespace.
      */
     namespace?: pulumi.Input<string>;
     /**
@@ -11503,7 +12035,7 @@ export interface WorkerVersionBinding {
      */
     name: pulumi.Input<string>;
     /**
-     * Namespace to bind to.
+     * The name of the dispatch namespace.
      */
     namespace?: pulumi.Input<string>;
     /**
@@ -11552,7 +12084,7 @@ export interface WorkerVersionBinding {
     text?: pulumi.Input<string>;
     /**
      * The kind of resource that the binding provides.
-     * Available values: "ai", "analytics*engine", "assets", "browser", "d1", "data*blob", "dispatch*namespace", "durable*object*namespace", "hyperdrive", "inherit", "images", "json", "kv*namespace", "mtls*certificate", "plain*text", "pipelines", "queue", "r2*bucket", "secret*text", "send*email", "service", "tail*consumer", "text*blob", "vectorize", "version*metadata", "secrets*store*secret", "secret*key", "workflow", "wasm*module".
+     * Available values: "ai", "analytics*engine", "assets", "browser", "d1", "data*blob", "dispatch*namespace", "durable*object*namespace", "hyperdrive", "inherit", "images", "json", "kv*namespace", "mtls*certificate", "plain*text", "pipelines", "queue", "r2*bucket", "secret*text", "send*email", "service", "text*blob", "vectorize", "version*metadata", "secrets*store*secret", "secret*key", "workflow", "wasmModule".
      */
     type: pulumi.Input<string>;
     /**
@@ -11832,7 +12364,7 @@ export interface WorkersScriptBinding {
      */
     name: pulumi.Input<string>;
     /**
-     * Namespace to bind to.
+     * The name of the dispatch namespace.
      */
     namespace?: pulumi.Input<string>;
     /**
@@ -12174,6 +12706,10 @@ export interface ZeroTrustAccessApplicationDestination {
      * Available values: "tcp", "udp".
      */
     l4Protocol?: pulumi.Input<string>;
+    /**
+     * A MCP server id configured in ai-controls. Access will secure the MCP server if accessed through a MCP portal.
+     */
+    mcpServerId?: pulumi.Input<string>;
     /**
      * The port range of the destination. Can be a single port or a range of ports. When omitted, all ports will match.
      */
@@ -14975,7 +15511,7 @@ export interface ZeroTrustDevicePostureRuleInput {
      */
     osDistroRevision?: pulumi.Input<string>;
     /**
-     * Additional version data. For Mac or iOS, the Product Version Extra. For Linux, the kernel release version. (Mac, iOS, and Linux only).
+     * Additional version data. For Mac or iOS, the Product Version Extra. For Linux, the distribution name and version. (Mac, iOS, and Linux only).
      */
     osVersionExtra?: pulumi.Input<string>;
     /**
@@ -15059,11 +15595,11 @@ export interface ZeroTrustDexTestData {
     /**
      * The desired endpoint to test.
      */
-    host: pulumi.Input<string>;
+    host?: pulumi.Input<string>;
     /**
      * The type of test.
      */
-    kind: pulumi.Input<string>;
+    kind?: pulumi.Input<string>;
     /**
      * The HTTP request method type.
      */
@@ -15805,7 +16341,7 @@ export interface ZeroTrustGatewaySettingsSettings {
      */
     customCertificate?: pulumi.Input<inputs.ZeroTrustGatewaySettingsSettingsCustomCertificate>;
     /**
-     * Specify user email settings for the firewall policies. When this is enabled, we standardize the email addresses in the identity part of the rule, so that they match the extended email variants in the firewall policies. When this setting is turned off, the email addresses in the identity part of the rule will be matched exactly as provided. If your email has `.` or `+` modifiers, you should enable this setting.
+     * Configures user email settings for firewall policies. When you enable this, the system standardizes email addresses in the identity portion of the rule to match extended email variants in firewall policies. When you disable this setting, the system matches email addresses exactly as you provide them. Enable this setting if your email uses `.` or `+` modifiers.
      */
     extendedEmailMatching?: pulumi.Input<inputs.ZeroTrustGatewaySettingsSettingsExtendedEmailMatching>;
     /**
@@ -16108,10 +16644,6 @@ export interface ZeroTrustTunnelCloudflaredConfigConfig {
      * Configuration parameters for the public hostname specific connection settings between cloudflared and origin server.
      */
     originRequest?: pulumi.Input<inputs.ZeroTrustTunnelCloudflaredConfigConfigOriginRequest>;
-    /**
-     * Enable private network access from WARP users to private network routes. This is enabled if the tunnel has an assigned route.
-     */
-    warpRouting?: pulumi.Input<inputs.ZeroTrustTunnelCloudflaredConfigConfigWarpRouting>;
 }
 export interface ZeroTrustTunnelCloudflaredConfigConfigIngress {
     /**
@@ -16269,9 +16801,6 @@ export interface ZeroTrustTunnelCloudflaredConfigConfigOriginRequestAccess {
     required?: pulumi.Input<boolean>;
     teamName: pulumi.Input<string>;
 }
-export interface ZeroTrustTunnelCloudflaredConfigConfigWarpRouting {
-    enabled?: pulumi.Input<boolean>;
-}
 export interface ZeroTrustTunnelCloudflaredConnection {
     /**
      * UUID of the Cloudflare Tunnel connector.