alchemy 0.80.1 → 0.81.0

package/lib/cloudflare/tunnel-route.d.ts

@@ -0,0 +1,172 @@
+import type { Context } from "../context.ts";
+import { type CloudflareApi, type CloudflareApiOptions } from "./api.ts";
+import type { Tunnel } from "./tunnel.ts";
+/**
+ * Route data as returned by Cloudflare API
+ * @internal
+ */
+interface CloudflareRoute {
+    id: string;
+    network: string;
+    tunnel_id: string;
+    comment?: string;
+    virtual_network_id?: string;
+    created_at: string;
+    deleted_at: string | null;
+}
+/**
+ * Properties for creating or updating a Cloudflare Tunnel Route
+ */
+export interface TunnelRouteProps extends CloudflareApiOptions {
+    /**
+     * The private IPv4 or IPv6 range connected by the route, in CIDR notation
+     * (e.g., "172.16.0.0/16" or "2001:db8::/32")
+     *
+     * Note: The network CIDR is immutable and cannot be changed after creation.
+     * When updating a route, any network change will trigger a replacement.
+     */
+    network: string;
+    /**
+     * The tunnel to route traffic through
+     * Can be a Tunnel resource or a tunnel ID (UUID)
+     */
+    tunnel: string | Tunnel;
+    /**
+     * Optional remark describing the route
+     * @maxLength 100
+     */
+    comment?: string;
+    /**
+     * UUID of the virtual network
+     * If not provided, the route will be added to the default virtual network
+     */
+    virtualNetworkId?: string;
+    /**
+     * Whether to adopt an existing route with the same network and tunnel if it exists
+     * If true and a route with the same network and tunnel exists, it will be adopted rather than creating a new one
+     *
+     * @default false
+     */
+    adopt?: boolean;
+    /**
+     * Whether to delete the route when removed from Alchemy
+     * If set to false, the route will remain but the resource will be removed from state
+     *
+     * @default true
+     */
+    delete?: boolean;
+    /**
+     * Internal route ID for lifecycle management
+     * @internal
+     */
+    routeId?: string;
+}
+export declare function isTunnelRoute(resource: any): resource is TunnelRoute;
+/**
+ * Output returned after TunnelRoute creation/update
+ */
+export interface TunnelRoute extends Omit<TunnelRouteProps, "delete" | "tunnel" | "routeId"> {
+    /**
+     * The ID of the route
+     */
+    id: string;
+    /**
+     * The private IPv4 or IPv6 range connected by the route, in CIDR notation
+     */
+    network: string;
+    /**
+     * The UUID of the tunnel this route uses
+     */
+    tunnelId: string;
+    /**
+     * Optional remark describing the route
+     */
+    comment?: string;
+    /**
+     * UUID of the virtual network
+     */
+    virtualNetworkId?: string;
+    /**
+     * Time at which the route was created
+     */
+    createdAt: string;
+    /**
+     * Time at which the route was deleted (null if active)
+     */
+    deletedAt: string | null;
+    /**
+     * Resource type identifier for binding
+     * @internal
+     */
+    type: "cloudflare::TunnelRoute";
+}
+/**
+ * Creates and manages a Cloudflare Tunnel Route, which routes private network traffic
+ * through a Cloudflare Tunnel. This resource handles the route lifecycle (create, update, delete).
+ *
+ * @remarks
+ * Tunnel Routes enable private network access by routing CIDR ranges through Cloudflare Tunnels.
+ * This is commonly used for Zero Trust network access scenarios where you need to connect
+ * private networks to Cloudflare's edge.
+ *
+ * @see https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/private-net/
+ * @see https://developers.cloudflare.com/api/operations/zero-trust-networks-routes-create-a-tunnel-route
+ *
+ * @example
+ * // Create a basic tunnel route for a private network
+ * const tunnel = await Tunnel("my-tunnel", {
+ *   name: "my-tunnel"
+ * });
+ *
+ * const route = await TunnelRoute("private-network", {
+ *   network: "172.16.0.0/16",
+ *   tunnel: tunnel
+ * });
+ *
+ * @example
+ * // Create a route with a comment and virtual network
+ * const route = await TunnelRoute("vpc-route", {
+ *   network: "10.0.0.0/8",
+ *   tunnel: "f70ff985-a4ef-4643-bbbc-4a0ed4fc8415",
+ *   comment: "Main VPC network route",
+ *   virtualNetworkId: "f70ff985-a4ef-4643-bbbc-4a0ed4fc8415"
+ * });
+ *
+ * @example
+ * // Adopt an existing route if it already exists
+ * const route = await TunnelRoute("existing-route", {
+ *   network: "192.168.1.0/24",
+ *   tunnel: tunnel,
+ *   adopt: true,
+ *   comment: "Updated comment"
+ * });
+ *
+ * @example
+ * // Create a route without deleting it when removed from Alchemy
+ * const route = await TunnelRoute("persistent-route", {
+ *   network: "10.1.0.0/16",
+ *   tunnel: tunnel,
+ *   delete: false
+ * });
+ */
+export declare const TunnelRoute: (((this: any, id: string, props?: {}) => never) & (new (_: never) => never)) | ((this: Context<TunnelRoute>, id: string, props: TunnelRouteProps) => Promise<TunnelRoute>);
+/**
+ * Get tunnel route details
+ * @internal
+ */
+export declare function getTunnelRoute(api: CloudflareApi, routeId: string): Promise<CloudflareRoute>;
+/**
+ * List all tunnel routes with pagination support
+ * @internal
+ */
+export declare function listTunnelRoutes(api: CloudflareApi, options?: {
+    /** Maximum number of routes to return */
+    limit?: number;
+}): Promise<CloudflareRoute[]>;
+/**
+ * Find a route by network and tunnel ID
+ * @internal
+ */
+export declare function findRouteByNetworkAndTunnel(api: CloudflareApi, network: string, tunnelId: string): Promise<CloudflareRoute | null>;
+export {};
+//# sourceMappingURL=tunnel-route.d.ts.map

package/lib/cloudflare/tunnel-route.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tunnel-route.d.ts","sourceRoot":"","sources":["../../src/cloudflare/tunnel-route.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAQ7C,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,oBAAoB,EAC1B,MAAM,UAAU,CAAC;AAClB,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C;;;GAGG;AACH,UAAU,eAAe;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,gBAAiB,SAAQ,oBAAoB;IAC5D;;;;;;OAMG;IACH,OAAO,EAAE,MAAM,CAAC;IAEhB;;;OAGG;IACH,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IAExB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B;;;;;OAKG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;IAEhB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IAEjB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,wBAAgB,aAAa,CAAC,QAAQ,EAAE,GAAG,GAAG,QAAQ,IAAI,WAAW,CAEpE;AAED;;GAEG;AACH,MAAM,WAAW,WACf,SAAQ,IAAI,CAAC,gBAAgB,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;IAC/D;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IAEX;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAEhB;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IAEjB;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;OAEG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAEzB;;;OAGG;IACH,IAAI,EAAE,yBAAyB,CAAC;CACjC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AACH,eAAO,MAAM,WAAW,yFAGd,OAAO,CAAC,WAAW,CAAC,MACtB,MAAM,SACH,gBAAgB,KACtB,OAAO,CAAC,WAAW,CAAC,CAuHxB,CAAC;AAEF;;;GAGG;AACH,wBAAsB,cAAc,CAClC,GAAG,EAAE,aAAa,EAClB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,eAAe,CAAC,CAY1B;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,aAAa,EAClB,OAAO,CAAC,EAAE;IACR,yCAAyC;IACzC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GACA,OAAO,CAAC,eAAe,EAAE,CAAC,CAuC5B;AAED;;;GAGG;AACH,wBAAsB,2BAA2B,CAC/C,GAAG,EAAE,aAAa,EAClB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CASjC"}

package/lib/cloudflare/tunnel-route.js

@@ -0,0 +1,251 @@
+import { Resource, ResourceKind } from "../resource.js";
+import { logger } from "../util/logger.js";
+import { handleApiError } from "./api-error.js";
+import { createCloudflareApi, } from "./api.js";
+export function isTunnelRoute(resource) {
+    return resource?.[ResourceKind] === "cloudflare::TunnelRoute";
+}
+/**
+ * Creates and manages a Cloudflare Tunnel Route, which routes private network traffic
+ * through a Cloudflare Tunnel. This resource handles the route lifecycle (create, update, delete).
+ *
+ * @remarks
+ * Tunnel Routes enable private network access by routing CIDR ranges through Cloudflare Tunnels.
+ * This is commonly used for Zero Trust network access scenarios where you need to connect
+ * private networks to Cloudflare's edge.
+ *
+ * @see https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/private-net/
+ * @see https://developers.cloudflare.com/api/operations/zero-trust-networks-routes-create-a-tunnel-route
+ *
+ * @example
+ * // Create a basic tunnel route for a private network
+ * const tunnel = await Tunnel("my-tunnel", {
+ *   name: "my-tunnel"
+ * });
+ *
+ * const route = await TunnelRoute("private-network", {
+ *   network: "172.16.0.0/16",
+ *   tunnel: tunnel
+ * });
+ *
+ * @example
+ * // Create a route with a comment and virtual network
+ * const route = await TunnelRoute("vpc-route", {
+ *   network: "10.0.0.0/8",
+ *   tunnel: "f70ff985-a4ef-4643-bbbc-4a0ed4fc8415",
+ *   comment: "Main VPC network route",
+ *   virtualNetworkId: "f70ff985-a4ef-4643-bbbc-4a0ed4fc8415"
+ * });
+ *
+ * @example
+ * // Adopt an existing route if it already exists
+ * const route = await TunnelRoute("existing-route", {
+ *   network: "192.168.1.0/24",
+ *   tunnel: tunnel,
+ *   adopt: true,
+ *   comment: "Updated comment"
+ * });
+ *
+ * @example
+ * // Create a route without deleting it when removed from Alchemy
+ * const route = await TunnelRoute("persistent-route", {
+ *   network: "10.1.0.0/16",
+ *   tunnel: tunnel,
+ *   delete: false
+ * });
+ */
+export const TunnelRoute = Resource("cloudflare::TunnelRoute", async function (id, props) {
+    // Create Cloudflare API client with automatic account discovery
+    const api = await createCloudflareApi(props);
+    // Resolve tunnel ID from either string or Tunnel resource
+    const tunnelId = typeof props.tunnel === "string" ? props.tunnel : props.tunnel.tunnelId;
+    const routeId = props.routeId || this.output?.id;
+    const adopt = props.adopt ?? this.scope.adopt;
+    if (this.phase === "delete") {
+        // For delete operations, check if the route ID exists in the output
+        if (routeId && props.delete !== false) {
+            await deleteRoute(api, routeId);
+        }
+        // Return destroyed state
+        return this.destroy();
+    }
+    // Check if network is being changed - network is immutable
+    if (this.phase === "update" &&
+        this.output?.network &&
+        this.output.network !== props.network) {
+        logger.log(`Network changed from '${this.output.network}' to '${props.network}', replacing route`);
+        this.replace(true);
+    }
+    // Check if tunnel is being changed - tunnel is immutable
+    if (this.phase === "update" &&
+        this.output?.tunnelId &&
+        this.output.tunnelId !== tunnelId) {
+        logger.log(`Tunnel changed from '${this.output.tunnelId}' to '${tunnelId}', replacing route`);
+        this.replace(true);
+    }
+    let routeData;
+    if (this.phase === "update" && routeId) {
+        // Update existing route (only comment and virtualNetworkId can be updated)
+        routeData = await updateRoute(api, routeId, {
+            comment: props.comment,
+            virtualNetworkId: props.virtualNetworkId,
+        });
+    }
+    else {
+        // Create new route
+        try {
+            routeData = await createRoute(api, {
+                network: props.network,
+                tunnelId,
+                comment: props.comment,
+                virtualNetworkId: props.virtualNetworkId,
+            });
+        }
+        catch (error) {
+            // Check if this is a "route already exists" error and adopt is enabled
+            if (adopt &&
+                error instanceof Error &&
+                (error.message.includes("already exists") ||
+                    error.message.includes("duplicate") ||
+                    error.status === 409)) {
+                logger.log(`Route for network '${props.network}' and tunnel '${tunnelId}' already exists, adopting it`);
+                // Find the existing route by network and tunnel
+                const existingRoute = await findRouteByNetworkAndTunnel(api, props.network, tunnelId);
+                if (!existingRoute) {
+                    throw new Error(`Failed to find existing route for network '${props.network}' and tunnel '${tunnelId}' for adoption`);
+                }
+                routeData = existingRoute;
+                // Update comment/virtualNetworkId if provided
+                if (props.comment !== undefined ||
+                    props.virtualNetworkId !== undefined) {
+                    routeData = await updateRoute(api, existingRoute.id, {
+                        comment: props.comment,
+                        virtualNetworkId: props.virtualNetworkId,
+                    });
+                }
+            }
+            else {
+                // Re-throw the error if adopt is false or it's not an "already exists" error
+                throw error;
+            }
+        }
+    }
+    // Transform API response to our interface
+    return {
+        id: routeData.id,
+        network: routeData.network,
+        tunnelId: routeData.tunnel_id,
+        comment: routeData.comment,
+        virtualNetworkId: routeData.virtual_network_id,
+        createdAt: routeData.created_at,
+        deletedAt: routeData.deleted_at,
+        type: "cloudflare::TunnelRoute",
+    };
+});
+/**
+ * Get tunnel route details
+ * @internal
+ */
+export async function getTunnelRoute(api, routeId) {
+    const response = await api.get(`/accounts/${api.accountId}/teamnet/routes/${routeId}`);
+    if (!response.ok) {
+        await handleApiError(response, "get", "route", routeId);
+    }
+    const data = (await response.json());
+    return data.result;
+}
+/**
+ * List all tunnel routes with pagination support
+ * @internal
+ */
+export async function listTunnelRoutes(api, options) {
+    const routes = [];
+    let page = 1;
+    const perPage = 100; // Maximum allowed by API
+    let hasMorePages = true;
+    const limit = options?.limit;
+    while (hasMorePages) {
+        const params = new URLSearchParams({
+            page: page.toString(),
+            per_page: perPage.toString(),
+        });
+        const response = await api.get(`/accounts/${api.accountId}/teamnet/routes?${params.toString()}`);
+        if (!response.ok) {
+            await handleApiError(response, "list", "route", "all");
+        }
+        const data = (await response.json());
+        routes.push(...data.result);
+        const resultInfo = data.result_info;
+        // Check if we've reached the limit
+        if (limit && routes.length >= limit) {
+            return routes.slice(0, limit);
+        }
+        // Check if we've seen all pages
+        hasMorePages =
+            resultInfo.page * resultInfo.per_page < resultInfo.total_count;
+        page++;
+    }
+    return routes;
+}
+/**
+ * Find a route by network and tunnel ID
+ * @internal
+ */
+export async function findRouteByNetworkAndTunnel(api, network, tunnelId) {
+    const routes = await listTunnelRoutes(api);
+    // Look for a route with matching network and tunnel_id
+    const match = routes.find((route) => route.network === network && route.tunnel_id === tunnelId);
+    return match || null;
+}
+/**
+ * Delete a route
+ * @internal
+ */
+async function deleteRoute(api, routeId) {
+    const response = await api.delete(`/accounts/${api.accountId}/teamnet/routes/${routeId}`);
+    if (!response.ok && response.status !== 404) {
+        await handleApiError(response, "delete", "route", routeId);
+    }
+}
+/**
+ * Create a new route
+ * @internal
+ */
+async function createRoute(api, props) {
+    const payload = {
+        network: props.network,
+        tunnel_id: props.tunnelId,
+    };
+    if (props.comment !== undefined) {
+        payload.comment = props.comment;
+    }
+    if (props.virtualNetworkId !== undefined) {
+        payload.virtual_network_id = props.virtualNetworkId;
+    }
+    const response = await api.post(`/accounts/${api.accountId}/teamnet/routes`, payload);
+    if (!response.ok) {
+        await handleApiError(response, "create", "route", `${props.network} -> ${props.tunnelId}`);
+    }
+    const data = (await response.json());
+    return data.result;
+}
+/**
+ * Update route configuration
+ * @internal
+ */
+async function updateRoute(api, routeId, props) {
+    const payload = {};
+    if (props.comment !== undefined) {
+        payload.comment = props.comment;
+    }
+    if (props.virtualNetworkId !== undefined) {
+        payload.virtual_network_id = props.virtualNetworkId;
+    }
+    const response = await api.patch(`/accounts/${api.accountId}/teamnet/routes/${routeId}`, payload);
+    if (!response.ok) {
+        await handleApiError(response, "update", "route", routeId);
+    }
+    const data = (await response.json());
+    return data.result;
+}
+//# sourceMappingURL=tunnel-route.js.map

package/lib/cloudflare/tunnel-route.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tunnel-route.js","sourceRoot":"","sources":["../../src/cloudflare/tunnel-route.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAKhD,OAAO,EACL,mBAAmB,GAGpB,MAAM,UAAU,CAAC;AAuElB,MAAM,UAAU,aAAa,CAAC,QAAa;IACzC,OAAO,QAAQ,EAAE,CAAC,YAAY,CAAC,KAAK,yBAAyB,CAAC;AAChE,CAAC;AAiDD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,QAAQ,CACjC,yBAAyB,EACzB,KAAK,WAEH,EAAU,EACV,KAAuB;IAEvB,gEAAgE;IAChE,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAE7C,0DAA0D;IAC1D,MAAM,QAAQ,GACZ,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC;IAE1E,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;IACjD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;IAE9C,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5B,oEAAoE;QACpE,IAAI,OAAO,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YACtC,MAAM,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAClC,CAAC;QAED,yBAAyB;QACzB,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;IACxB,CAAC;IAED,2DAA2D;IAC3D,IACE,IAAI,CAAC,KAAK,KAAK,QAAQ;QACvB,IAAI,CAAC,MAAM,EAAE,OAAO;QACpB,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EACrC,CAAC;QACD,MAAM,CAAC,GAAG,CACR,yBAAyB,IAAI,CAAC,MAAM,CAAC,OAAO,SAAS,KAAK,CAAC,OAAO,oBAAoB,CACvF,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IAED,yDAAyD;IACzD,IACE,IAAI,CAAC,KAAK,KAAK,QAAQ;QACvB,IAAI,CAAC,MAAM,EAAE,QAAQ;QACrB,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,EACjC,CAAC;QACD,MAAM,CAAC,GAAG,CACR,wBAAwB,IAAI,CAAC,MAAM,CAAC,QAAQ,SAAS,QAAQ,oBAAoB,CAClF,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IAED,IAAI,SAA0B,CAAC;IAE/B,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,EAAE,CAAC;QACvC,2EAA2E;QAC3E,SAAS,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,OAAO,EAAE;YAC1C,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;SACzC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,mBAAmB;QACnB,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE;gBACjC,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,QAAQ;gBACR,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;aACzC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,uEAAuE;YACvE,IACE,KAAK;gBACL,KAAK,YAAY,KAAK;gBACtB,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;oBACvC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;oBAClC,KAAa,CAAC,MAAM,KAAK,GAAG,CAAC,EAChC,CAAC;gBACD,MAAM,CAAC,GAAG,CACR,sBAAsB,KAAK,CAAC,OAAO,iBAAiB,QAAQ,+BAA+B,CAC5F,CAAC;gBAEF,gDAAgD;gBAChD,MAAM,aAAa,GAAG,MAAM,2BAA2B,CACrD,GAAG,EACH,KAAK,CAAC,OAAO,EACb,QAAQ,CACT,CAAC;gBAEF,IAAI,CAAC,aAAa,EAAE,CAAC;oBACnB,MAAM,IAAI,KAAK,CACb,8CAA8C,KAAK,CAAC,OAAO,iBAAiB,QAAQ,gBAAgB,CACrG,CAAC;gBACJ,CAAC;gBAED,SAAS,GAAG,aAAa,CAAC;gBAE1B,8CAA8C;gBAC9C,IACE,KAAK,CAAC,OAAO,KAAK,SAAS;oBAC3B,KAAK,CAAC,gBAAgB,KAAK,SAAS,EACpC,CAAC;oBACD,SAAS,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,aAAa,CAAC,EAAE,EAAE;wBACnD,OAAO,EAAE,KAAK,CAAC,OAAO;wBACtB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;qBACzC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,6EAA6E;gBAC7E,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;IAED,0CAA0C;IAC1C,OAAO;QACL,EAAE,EAAE,SAAS,CAAC,EAAE;QAChB,OAAO,EAAE,SAAS,CAAC,OAAO;QAC1B,QAAQ,EAAE,SAAS,CAAC,SAAS;QAC7B,OAAO,EAAE,SAAS,CAAC,OAAO;QAC1B,gBAAgB,EAAE,SAAS,CAAC,kBAAkB;QAC9C,SAAS,EAAE,SAAS,CAAC,UAAU;QAC/B,SAAS,EAAE,SAAS,CAAC,UAAU;QAC/B,IAAI,EAAE,yBAAyB;KAChC,CAAC;AACJ,CAAC,CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAkB,EAClB,OAAe;IAEf,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,GAAG,CAC5B,aAAa,GAAG,CAAC,SAAS,mBAAmB,OAAO,EAAE,CACvD,CAAC;IAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,cAAc,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,IAAI,GACR,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA2C,CAAC;IACpE,OAAO,IAAI,CAAC,MAAM,CAAC;AACrB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAkB,EAClB,OAGC;IAED,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,yBAAyB;IAC9C,IAAI,YAAY,GAAG,IAAI,CAAC;IACxB,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,CAAC;IAE7B,OAAO,YAAY,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;YACrB,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE;SAC7B,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,GAAG,CAC5B,aAAa,GAAG,CAAC,SAAS,mBAAmB,MAAM,CAAC,QAAQ,EAAE,EAAE,CACjE,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,IAAI,GACR,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA+C,CAAC;QAExE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC;QAEpC,mCAAmC;QACnC,IAAI,KAAK,IAAI,MAAM,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC;YACpC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAChC,CAAC;QAED,gCAAgC;QAChC,YAAY;YACV,UAAU,CAAC,IAAI,GAAG,UAAU,CAAC,QAAQ,GAAG,UAAU,CAAC,WAAW,CAAC;QACjE,IAAI,EAAE,CAAC;IACT,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,GAAkB,EAClB,OAAe,EACf,QAAgB;IAEhB,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAE3C,uDAAuD;IACvD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CACvB,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO,IAAI,KAAK,CAAC,SAAS,KAAK,QAAQ,CACrE,CAAC;IAEF,OAAO,KAAK,IAAI,IAAI,CAAC;AACvB,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,WAAW,CAAC,GAAkB,EAAE,OAAe;IAC5D,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAC/B,aAAa,GAAG,CAAC,SAAS,mBAAmB,OAAO,EAAE,CACvD,CAAC;IAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5C,MAAM,cAAc,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,WAAW,CACxB,GAAkB,EAClB,KAKC;IAED,MAAM,OAAO,GAAwB;QACnC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,KAAK,CAAC,QAAQ;KAC1B,CAAC;IAEF,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAClC,CAAC;IAED,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACzC,OAAO,CAAC,kBAAkB,GAAG,KAAK,CAAC,gBAAgB,CAAC;IACtD,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,IAAI,CAC7B,aAAa,GAAG,CAAC,SAAS,iBAAiB,EAC3C,OAAO,CACR,CAAC;IAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,cAAc,CAClB,QAAQ,EACR,QAAQ,EACR,OAAO,EACP,GAAG,KAAK,CAAC,OAAO,OAAO,KAAK,CAAC,QAAQ,EAAE,CACxC,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GACR,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA2C,CAAC;IACpE,OAAO,IAAI,CAAC,MAAM,CAAC;AACrB,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,WAAW,CACxB,GAAkB,EAClB,OAAe,EACf,KAGC;IAED,MAAM,OAAO,GAAwB,EAAE,CAAC;IAExC,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAClC,CAAC;IAED,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACzC,OAAO,CAAC,kBAAkB,GAAG,KAAK,CAAC,gBAAgB,CAAC;IACtD,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,KAAK,CAC9B,aAAa,GAAG,CAAC,SAAS,mBAAmB,OAAO,EAAE,EACtD,OAAO,CACR,CAAC;IAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,cAAc,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,IAAI,GACR,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA2C,CAAC;IACpE,OAAO,IAAI,CAAC,MAAM,CAAC;AACrB,CAAC"}

package/lib/cloudflare/warp-default-profile.d.ts

@@ -0,0 +1,133 @@
+import type { Context } from "../context.ts";
+import { type CloudflareApiOptions } from "./api.ts";
+import type { ServiceModeV2, SplitTunnelConfig } from "./warp-device-profile.ts";
+/**
+ * Properties for updating the WARP Default Profile
+ */
+export interface WarpDefaultProfileProps extends CloudflareApiOptions {
+    /**
+     * Service mode configuration for WARP client
+     */
+    serviceModeV2?: ServiceModeV2;
+    /**
+     * Disable automatic fallback to direct connection if tunnel fails
+     */
+    disableAutoFallback?: boolean;
+    /**
+     * Allow users to manually switch WARP modes
+     */
+    allowModeSwitch?: boolean;
+    /**
+     * Lock the WARP toggle switch (users cannot change it)
+     */
+    switchLocked?: boolean;
+    /**
+     * Tunnel protocol to use
+     */
+    tunnelProtocol?: "wireguard" | "masque";
+    /**
+     * Auto-connect timeout in seconds
+     * Set to 0 to disable auto-connect
+     */
+    autoConnect?: number;
+    /**
+     * Allow users to disconnect from WARP
+     */
+    allowedToLeave?: boolean;
+    /**
+     * Captive portal timeout in seconds
+     * Time before showing captive portal
+     */
+    captivePortal?: number;
+    /**
+     * Support URL for feedback button in WARP client
+     */
+    supportUrl?: string;
+    /**
+     * Exclude office IPs from WARP tunnel
+     */
+    excludeOfficeIps?: boolean;
+    /**
+     * LAN allow duration in minutes
+     */
+    lanAllowMinutes?: number;
+    /**
+     * LAN subnet size for local network access
+     */
+    lanAllowSubnetSize?: number;
+    /**
+     * Split tunnel configuration
+     * Controls which routes bypass or use the WARP tunnel
+     */
+    splitTunnel?: SplitTunnelConfig;
+    /**
+     * Whether to delete the default profile settings when removed from Alchemy
+     * Note: This does not actually delete the default profile (which always exists),
+     * but removes it from Alchemy state management
+     *
+     * @default false
+     */
+    delete?: boolean;
+}
+export declare function isWarpDefaultProfile(resource: any): resource is WarpDefaultProfile;
+/**
+ * Output returned after WARP Default Profile update
+ */
+export type WarpDefaultProfile = WarpDefaultProfileProps & {
+    /**
+     * Time at which the profile was last modified
+     */
+    modifiedAt: number;
+};
+/**
+ * Manages the Cloudflare WARP Default Device Profile, which defines the
+ * account-wide default WARP client settings that apply when no custom profile matches.
+ *
+ * The default profile always exists and cannot be deleted. This resource allows you
+ * to update its settings programmatically.
+ *
+ * @see https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/configure-warp/device-profiles/
+ *
+ * @example
+ * ## Update default WARP settings
+ *
+ * Configure the default behavior for all devices
+ *
+ * const defaultProfile = await WarpDefaultProfile("default", {
+ *   serviceModeV2: { mode: "warp" },
+ *   autoConnect: 0,
+ *   captivePortal: 180,
+ *   supportUrl: "https://support.example.com"
+ * });
+ *
+ * @example
+ * ## Default profile with split tunnel
+ *
+ * Configure default split tunnel behavior for all devices
+ *
+ * const defaultWithSplitTunnel = await WarpDefaultProfile("default", {
+ *   serviceModeV2: { mode: "warp" },
+ *   splitTunnel: {
+ *     mode: "exclude",
+ *     entries: [
+ *       { address: "10.0.0.0/8", description: "Internal network" },
+ *       { address: "192.168.0.0/16", description: "Local network" }
+ *     ]
+ *   }
+ * });
+ *
+ * @example
+ * ## Locked default profile
+ *
+ * Create a locked-down default configuration
+ *
+ * const lockedDefault = await WarpDefaultProfile("default", {
+ *   serviceModeV2: { mode: "warp" },
+ *   switchLocked: true,
+ *   allowedToLeave: false,
+ *   disableAutoFallback: true,
+ *   tunnelProtocol: "wireguard"
+ * });
+ */
+export declare const WarpDefaultProfile: (((this: any, id: string, props?: {}) => never) & (new (_: never) => never)) | ((this: Context<WarpDefaultProfile>, id: string, props?: WarpDefaultProfileProps) => Promise<WarpDefaultProfile>);
+//# sourceMappingURL=warp-default-profile.d.ts.map

package/lib/cloudflare/warp-default-profile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"warp-default-profile.d.ts","sourceRoot":"","sources":["../../src/cloudflare/warp-default-profile.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAG7C,OAAO,EAGL,KAAK,oBAAoB,EAC1B,MAAM,UAAU,CAAC;AAClB,OAAO,KAAK,EACV,aAAa,EACb,iBAAiB,EAClB,MAAM,0BAA0B,CAAC;AAElC;;GAEG;AACH,MAAM,WAAW,uBAAwB,SAAQ,oBAAoB;IACnE;;OAEG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAE9B;;OAEG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAE9B;;OAEG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAE1B;;OAEG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IAEvB;;OAEG;IACH,cAAc,CAAC,EAAE,WAAW,GAAG,QAAQ,CAAC;IAExC;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;OAEG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IAEzB;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;OAEG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAE3B;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB;;OAEG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAE5B;;;OAGG;IACH,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAEhC;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,GAAG,GACZ,QAAQ,IAAI,kBAAkB,CAEhC;AAED;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG,uBAAuB,GAAG;IACzD;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AACH,eAAO,MAAM,kBAAkB,yFAGrB,OAAO,CAAC,kBAAkB,CAAC,MAC7B,MAAM,UACH,uBAAuB,KAC7B,OAAO,CAAC,kBAAkB,CAAC,CAgB/B,CAAC"}