alchemy 0.80.1 → 0.81.1

package/lib/cloudflare/tunnel-route.js

@@ -0,0 +1,251 @@
+import { Resource, ResourceKind } from "../resource.js";
+import { logger } from "../util/logger.js";
+import { handleApiError } from "./api-error.js";
+import { createCloudflareApi, } from "./api.js";
+export function isTunnelRoute(resource) {
+    return resource?.[ResourceKind] === "cloudflare::TunnelRoute";
+}
+/**
+ * Creates and manages a Cloudflare Tunnel Route, which routes private network traffic
+ * through a Cloudflare Tunnel. This resource handles the route lifecycle (create, update, delete).
+ *
+ * @remarks
+ * Tunnel Routes enable private network access by routing CIDR ranges through Cloudflare Tunnels.
+ * This is commonly used for Zero Trust network access scenarios where you need to connect
+ * private networks to Cloudflare's edge.
+ *
+ * @see https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/private-net/
+ * @see https://developers.cloudflare.com/api/operations/zero-trust-networks-routes-create-a-tunnel-route
+ *
+ * @example
+ * // Create a basic tunnel route for a private network
+ * const tunnel = await Tunnel("my-tunnel", {
+ *   name: "my-tunnel"
+ * });
+ *
+ * const route = await TunnelRoute("private-network", {
+ *   network: "172.16.0.0/16",
+ *   tunnel: tunnel
+ * });
+ *
+ * @example
+ * // Create a route with a comment and virtual network
+ * const route = await TunnelRoute("vpc-route", {
+ *   network: "10.0.0.0/8",
+ *   tunnel: "f70ff985-a4ef-4643-bbbc-4a0ed4fc8415",
+ *   comment: "Main VPC network route",
+ *   virtualNetworkId: "f70ff985-a4ef-4643-bbbc-4a0ed4fc8415"
+ * });
+ *
+ * @example
+ * // Adopt an existing route if it already exists
+ * const route = await TunnelRoute("existing-route", {
+ *   network: "192.168.1.0/24",
+ *   tunnel: tunnel,
+ *   adopt: true,
+ *   comment: "Updated comment"
+ * });
+ *
+ * @example
+ * // Create a route without deleting it when removed from Alchemy
+ * const route = await TunnelRoute("persistent-route", {
+ *   network: "10.1.0.0/16",
+ *   tunnel: tunnel,
+ *   delete: false
+ * });
+ */
+export const TunnelRoute = Resource("cloudflare::TunnelRoute", async function (id, props) {
+    // Create Cloudflare API client with automatic account discovery
+    const api = await createCloudflareApi(props);
+    // Resolve tunnel ID from either string or Tunnel resource
+    const tunnelId = typeof props.tunnel === "string" ? props.tunnel : props.tunnel.tunnelId;
+    const routeId = props.routeId || this.output?.id;
+    const adopt = props.adopt ?? this.scope.adopt;
+    if (this.phase === "delete") {
+        // For delete operations, check if the route ID exists in the output
+        if (routeId && props.delete !== false) {
+            await deleteRoute(api, routeId);
+        }
+        // Return destroyed state
+        return this.destroy();
+    }
+    // Check if network is being changed - network is immutable
+    if (this.phase === "update" &&
+        this.output?.network &&
+        this.output.network !== props.network) {
+        logger.log(`Network changed from '${this.output.network}' to '${props.network}', replacing route`);
+        this.replace(true);
+    }
+    // Check if tunnel is being changed - tunnel is immutable
+    if (this.phase === "update" &&
+        this.output?.tunnelId &&
+        this.output.tunnelId !== tunnelId) {
+        logger.log(`Tunnel changed from '${this.output.tunnelId}' to '${tunnelId}', replacing route`);
+        this.replace(true);
+    }
+    let routeData;
+    if (this.phase === "update" && routeId) {
+        // Update existing route (only comment and virtualNetworkId can be updated)
+        routeData = await updateRoute(api, routeId, {
+            comment: props.comment,
+            virtualNetworkId: props.virtualNetworkId,
+        });
+    }
+    else {
+        // Create new route
+        try {
+            routeData = await createRoute(api, {
+                network: props.network,
+                tunnelId,
+                comment: props.comment,
+                virtualNetworkId: props.virtualNetworkId,
+            });
+        }
+        catch (error) {
+            // Check if this is a "route already exists" error and adopt is enabled
+            if (adopt &&
+                error instanceof Error &&
+                (error.message.includes("already exists") ||
+                    error.message.includes("duplicate") ||
+                    error.status === 409)) {
+                logger.log(`Route for network '${props.network}' and tunnel '${tunnelId}' already exists, adopting it`);
+                // Find the existing route by network and tunnel
+                const existingRoute = await findRouteByNetworkAndTunnel(api, props.network, tunnelId);
+                if (!existingRoute) {
+                    throw new Error(`Failed to find existing route for network '${props.network}' and tunnel '${tunnelId}' for adoption`);
+                }
+                routeData = existingRoute;
+                // Update comment/virtualNetworkId if provided
+                if (props.comment !== undefined ||
+                    props.virtualNetworkId !== undefined) {
+                    routeData = await updateRoute(api, existingRoute.id, {
+                        comment: props.comment,
+                        virtualNetworkId: props.virtualNetworkId,
+                    });
+                }
+            }
+            else {
+                // Re-throw the error if adopt is false or it's not an "already exists" error
+                throw error;
+            }
+        }
+    }
+    // Transform API response to our interface
+    return {
+        id: routeData.id,
+        network: routeData.network,
+        tunnelId: routeData.tunnel_id,
+        comment: routeData.comment,
+        virtualNetworkId: routeData.virtual_network_id,
+        createdAt: routeData.created_at,
+        deletedAt: routeData.deleted_at,
+        type: "cloudflare::TunnelRoute",
+    };
+});
+/**
+ * Get tunnel route details
+ * @internal
+ */
+export async function getTunnelRoute(api, routeId) {
+    const response = await api.get(`/accounts/${api.accountId}/teamnet/routes/${routeId}`);
+    if (!response.ok) {
+        await handleApiError(response, "get", "route", routeId);
+    }
+    const data = (await response.json());
+    return data.result;
+}
+/**
+ * List all tunnel routes with pagination support
+ * @internal
+ */
+export async function listTunnelRoutes(api, options) {
+    const routes = [];
+    let page = 1;
+    const perPage = 100; // Maximum allowed by API
+    let hasMorePages = true;
+    const limit = options?.limit;
+    while (hasMorePages) {
+        const params = new URLSearchParams({
+            page: page.toString(),
+            per_page: perPage.toString(),
+        });
+        const response = await api.get(`/accounts/${api.accountId}/teamnet/routes?${params.toString()}`);
+        if (!response.ok) {
+            await handleApiError(response, "list", "route", "all");
+        }
+        const data = (await response.json());
+        routes.push(...data.result);
+        const resultInfo = data.result_info;
+        // Check if we've reached the limit
+        if (limit && routes.length >= limit) {
+            return routes.slice(0, limit);
+        }
+        // Check if we've seen all pages
+        hasMorePages =
+            resultInfo.page * resultInfo.per_page < resultInfo.total_count;
+        page++;
+    }
+    return routes;
+}
+/**
+ * Find a route by network and tunnel ID
+ * @internal
+ */
+export async function findRouteByNetworkAndTunnel(api, network, tunnelId) {
+    const routes = await listTunnelRoutes(api);
+    // Look for a route with matching network and tunnel_id
+    const match = routes.find((route) => route.network === network && route.tunnel_id === tunnelId);
+    return match || null;
+}
+/**
+ * Delete a route
+ * @internal
+ */
+async function deleteRoute(api, routeId) {
+    const response = await api.delete(`/accounts/${api.accountId}/teamnet/routes/${routeId}`);
+    if (!response.ok && response.status !== 404) {
+        await handleApiError(response, "delete", "route", routeId);
+    }
+}
+/**
+ * Create a new route
+ * @internal
+ */
+async function createRoute(api, props) {
+    const payload = {
+        network: props.network,
+        tunnel_id: props.tunnelId,
+    };
+    if (props.comment !== undefined) {
+        payload.comment = props.comment;
+    }
+    if (props.virtualNetworkId !== undefined) {
+        payload.virtual_network_id = props.virtualNetworkId;
+    }
+    const response = await api.post(`/accounts/${api.accountId}/teamnet/routes`, payload);
+    if (!response.ok) {
+        await handleApiError(response, "create", "route", `${props.network} -> ${props.tunnelId}`);
+    }
+    const data = (await response.json());
+    return data.result;
+}
+/**
+ * Update route configuration
+ * @internal
+ */
+async function updateRoute(api, routeId, props) {
+    const payload = {};
+    if (props.comment !== undefined) {
+        payload.comment = props.comment;
+    }
+    if (props.virtualNetworkId !== undefined) {
+        payload.virtual_network_id = props.virtualNetworkId;
+    }
+    const response = await api.patch(`/accounts/${api.accountId}/teamnet/routes/${routeId}`, payload);
+    if (!response.ok) {
+        await handleApiError(response, "update", "route", routeId);
+    }
+    const data = (await response.json());
+    return data.result;
+}
+//# sourceMappingURL=tunnel-route.js.map

package/lib/cloudflare/tunnel-route.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tunnel-route.js","sourceRoot":"","sources":["../../src/cloudflare/tunnel-route.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAKhD,OAAO,EACL,mBAAmB,GAGpB,MAAM,UAAU,CAAC;AAuElB,MAAM,UAAU,aAAa,CAAC,QAAa;IACzC,OAAO,QAAQ,EAAE,CAAC,YAAY,CAAC,KAAK,yBAAyB,CAAC;AAChE,CAAC;AAiDD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,QAAQ,CACjC,yBAAyB,EACzB,KAAK,WAEH,EAAU,EACV,KAAuB;IAEvB,gEAAgE;IAChE,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAE7C,0DAA0D;IAC1D,MAAM,QAAQ,GACZ,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC;IAE1E,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;IACjD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;IAE9C,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5B,oEAAoE;QACpE,IAAI,OAAO,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YACtC,MAAM,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAClC,CAAC;QAED,yBAAyB;QACzB,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;IACxB,CAAC;IAED,2DAA2D;IAC3D,IACE,IAAI,CAAC,KAAK,KAAK,QAAQ;QACvB,IAAI,CAAC,MAAM,EAAE,OAAO;QACpB,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EACrC,CAAC;QACD,MAAM,CAAC,GAAG,CACR,yBAAyB,IAAI,CAAC,MAAM,CAAC,OAAO,SAAS,KAAK,CAAC,OAAO,oBAAoB,CACvF,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IAED,yDAAyD;IACzD,IACE,IAAI,CAAC,KAAK,KAAK,QAAQ;QACvB,IAAI,CAAC,MAAM,EAAE,QAAQ;QACrB,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,EACjC,CAAC;QACD,MAAM,CAAC,GAAG,CACR,wBAAwB,IAAI,CAAC,MAAM,CAAC,QAAQ,SAAS,QAAQ,oBAAoB,CAClF,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IAED,IAAI,SAA0B,CAAC;IAE/B,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,EAAE,CAAC;QACvC,2EAA2E;QAC3E,SAAS,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,OAAO,EAAE;YAC1C,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;SACzC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,mBAAmB;QACnB,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE;gBACjC,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,QAAQ;gBACR,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;aACzC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,uEAAuE;YACvE,IACE,KAAK;gBACL,KAAK,YAAY,KAAK;gBACtB,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;oBACvC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;oBAClC,KAAa,CAAC,MAAM,KAAK,GAAG,CAAC,EAChC,CAAC;gBACD,MAAM,CAAC,GAAG,CACR,sBAAsB,KAAK,CAAC,OAAO,iBAAiB,QAAQ,+BAA+B,CAC5F,CAAC;gBAEF,gDAAgD;gBAChD,MAAM,aAAa,GAAG,MAAM,2BAA2B,CACrD,GAAG,EACH,KAAK,CAAC,OAAO,EACb,QAAQ,CACT,CAAC;gBAEF,IAAI,CAAC,aAAa,EAAE,CAAC;oBACnB,MAAM,IAAI,KAAK,CACb,8CAA8C,KAAK,CAAC,OAAO,iBAAiB,QAAQ,gBAAgB,CACrG,CAAC;gBACJ,CAAC;gBAED,SAAS,GAAG,aAAa,CAAC;gBAE1B,8CAA8C;gBAC9C,IACE,KAAK,CAAC,OAAO,KAAK,SAAS;oBAC3B,KAAK,CAAC,gBAAgB,KAAK,SAAS,EACpC,CAAC;oBACD,SAAS,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,aAAa,CAAC,EAAE,EAAE;wBACnD,OAAO,EAAE,KAAK,CAAC,OAAO;wBACtB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;qBACzC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,6EAA6E;gBAC7E,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;IAED,0CAA0C;IAC1C,OAAO;QACL,EAAE,EAAE,SAAS,CAAC,EAAE;QAChB,OAAO,EAAE,SAAS,CAAC,OAAO;QAC1B,QAAQ,EAAE,SAAS,CAAC,SAAS;QAC7B,OAAO,EAAE,SAAS,CAAC,OAAO;QAC1B,gBAAgB,EAAE,SAAS,CAAC,kBAAkB;QAC9C,SAAS,EAAE,SAAS,CAAC,UAAU;QAC/B,SAAS,EAAE,SAAS,CAAC,UAAU;QAC/B,IAAI,EAAE,yBAAyB;KAChC,CAAC;AACJ,CAAC,CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAkB,EAClB,OAAe;IAEf,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,GAAG,CAC5B,aAAa,GAAG,CAAC,SAAS,mBAAmB,OAAO,EAAE,CACvD,CAAC;IAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,cAAc,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,IAAI,GACR,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA2C,CAAC;IACpE,OAAO,IAAI,CAAC,MAAM,CAAC;AACrB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAkB,EAClB,OAGC;IAED,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,yBAAyB;IAC9C,IAAI,YAAY,GAAG,IAAI,CAAC;IACxB,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,CAAC;IAE7B,OAAO,YAAY,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;YACrB,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE;SAC7B,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,GAAG,CAC5B,aAAa,GAAG,CAAC,SAAS,mBAAmB,MAAM,CAAC,QAAQ,EAAE,EAAE,CACjE,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,IAAI,GACR,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA+C,CAAC;QAExE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC;QAEpC,mCAAmC;QACnC,IAAI,KAAK,IAAI,MAAM,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC;YACpC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAChC,CAAC;QAED,gCAAgC;QAChC,YAAY;YACV,UAAU,CAAC,IAAI,GAAG,UAAU,CAAC,QAAQ,GAAG,UAAU,CAAC,WAAW,CAAC;QACjE,IAAI,EAAE,CAAC;IACT,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,GAAkB,EAClB,OAAe,EACf,QAAgB;IAEhB,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAE3C,uDAAuD;IACvD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CACvB,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO,IAAI,KAAK,CAAC,SAAS,KAAK,QAAQ,CACrE,CAAC;IAEF,OAAO,KAAK,IAAI,IAAI,CAAC;AACvB,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,WAAW,CAAC,GAAkB,EAAE,OAAe;IAC5D,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAC/B,aAAa,GAAG,CAAC,SAAS,mBAAmB,OAAO,EAAE,CACvD,CAAC;IAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5C,MAAM,cAAc,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,WAAW,CACxB,GAAkB,EAClB,KAKC;IAED,MAAM,OAAO,GAAwB;QACnC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,KAAK,CAAC,QAAQ;KAC1B,CAAC;IAEF,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAClC,CAAC;IAED,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACzC,OAAO,CAAC,kBAAkB,GAAG,KAAK,CAAC,gBAAgB,CAAC;IACtD,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,IAAI,CAC7B,aAAa,GAAG,CAAC,SAAS,iBAAiB,EAC3C,OAAO,CACR,CAAC;IAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,cAAc,CAClB,QAAQ,EACR,QAAQ,EACR,OAAO,EACP,GAAG,KAAK,CAAC,OAAO,OAAO,KAAK,CAAC,QAAQ,EAAE,CACxC,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GACR,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA2C,CAAC;IACpE,OAAO,IAAI,CAAC,MAAM,CAAC;AACrB,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,WAAW,CACxB,GAAkB,EAClB,OAAe,EACf,KAGC;IAED,MAAM,OAAO,GAAwB,EAAE,CAAC;IAExC,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAClC,CAAC;IAED,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACzC,OAAO,CAAC,kBAAkB,GAAG,KAAK,CAAC,gBAAgB,CAAC;IACtD,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,KAAK,CAC9B,aAAa,GAAG,CAAC,SAAS,mBAAmB,OAAO,EAAE,EACtD,OAAO,CACR,CAAC;IAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,cAAc,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,IAAI,GACR,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA2C,CAAC;IACpE,OAAO,IAAI,CAAC,MAAM,CAAC;AACrB,CAAC"}

package/lib/cloudflare/warp-default-profile.d.ts

@@ -0,0 +1,133 @@
+import type { Context } from "../context.ts";
+import { type CloudflareApiOptions } from "./api.ts";
+import type { ServiceModeV2, SplitTunnelConfig } from "./warp-device-profile.ts";
+/**
+ * Properties for updating the WARP Default Profile
+ */
+export interface WarpDefaultProfileProps extends CloudflareApiOptions {
+    /**
+     * Service mode configuration for WARP client
+     */
+    serviceModeV2?: ServiceModeV2;
+    /**
+     * Disable automatic fallback to direct connection if tunnel fails
+     */
+    disableAutoFallback?: boolean;
+    /**
+     * Allow users to manually switch WARP modes
+     */
+    allowModeSwitch?: boolean;
+    /**
+     * Lock the WARP toggle switch (users cannot change it)
+     */
+    switchLocked?: boolean;
+    /**
+     * Tunnel protocol to use
+     */
+    tunnelProtocol?: "wireguard" | "masque";
+    /**
+     * Auto-connect timeout in seconds
+     * Set to 0 to disable auto-connect
+     */
+    autoConnect?: number;
+    /**
+     * Allow users to disconnect from WARP
+     */
+    allowedToLeave?: boolean;
+    /**
+     * Captive portal timeout in seconds
+     * Time before showing captive portal
+     */
+    captivePortal?: number;
+    /**
+     * Support URL for feedback button in WARP client
+     */
+    supportUrl?: string;
+    /**
+     * Exclude office IPs from WARP tunnel
+     */
+    excludeOfficeIps?: boolean;
+    /**
+     * LAN allow duration in minutes
+     */
+    lanAllowMinutes?: number;
+    /**
+     * LAN subnet size for local network access
+     */
+    lanAllowSubnetSize?: number;
+    /**
+     * Split tunnel configuration
+     * Controls which routes bypass or use the WARP tunnel
+     */
+    splitTunnel?: SplitTunnelConfig;
+    /**
+     * Whether to delete the default profile settings when removed from Alchemy
+     * Note: This does not actually delete the default profile (which always exists),
+     * but removes it from Alchemy state management
+     *
+     * @default false
+     */
+    delete?: boolean;
+}
+export declare function isWarpDefaultProfile(resource: any): resource is WarpDefaultProfile;
+/**
+ * Output returned after WARP Default Profile update
+ */
+export type WarpDefaultProfile = WarpDefaultProfileProps & {
+    /**
+     * Time at which the profile was last modified
+     */
+    modifiedAt: number;
+};
+/**
+ * Manages the Cloudflare WARP Default Device Profile, which defines the
+ * account-wide default WARP client settings that apply when no custom profile matches.
+ *
+ * The default profile always exists and cannot be deleted. This resource allows you
+ * to update its settings programmatically.
+ *
+ * @see https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/configure-warp/device-profiles/
+ *
+ * @example
+ * ## Update default WARP settings
+ *
+ * Configure the default behavior for all devices
+ *
+ * const defaultProfile = await WarpDefaultProfile("default", {
+ *   serviceModeV2: { mode: "warp" },
+ *   autoConnect: 0,
+ *   captivePortal: 180,
+ *   supportUrl: "https://support.example.com"
+ * });
+ *
+ * @example
+ * ## Default profile with split tunnel
+ *
+ * Configure default split tunnel behavior for all devices
+ *
+ * const defaultWithSplitTunnel = await WarpDefaultProfile("default", {
+ *   serviceModeV2: { mode: "warp" },
+ *   splitTunnel: {
+ *     mode: "exclude",
+ *     entries: [
+ *       { address: "10.0.0.0/8", description: "Internal network" },
+ *       { address: "192.168.0.0/16", description: "Local network" }
+ *     ]
+ *   }
+ * });
+ *
+ * @example
+ * ## Locked default profile
+ *
+ * Create a locked-down default configuration
+ *
+ * const lockedDefault = await WarpDefaultProfile("default", {
+ *   serviceModeV2: { mode: "warp" },
+ *   switchLocked: true,
+ *   allowedToLeave: false,
+ *   disableAutoFallback: true,
+ *   tunnelProtocol: "wireguard"
+ * });
+ */
+export declare const WarpDefaultProfile: (((this: any, id: string, props?: {}) => never) & (new (_: never) => never)) | ((this: Context<WarpDefaultProfile>, id: string, props?: WarpDefaultProfileProps) => Promise<WarpDefaultProfile>);
+//# sourceMappingURL=warp-default-profile.d.ts.map

package/lib/cloudflare/warp-default-profile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"warp-default-profile.d.ts","sourceRoot":"","sources":["../../src/cloudflare/warp-default-profile.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAG7C,OAAO,EAGL,KAAK,oBAAoB,EAC1B,MAAM,UAAU,CAAC;AAClB,OAAO,KAAK,EACV,aAAa,EACb,iBAAiB,EAClB,MAAM,0BAA0B,CAAC;AAElC;;GAEG;AACH,MAAM,WAAW,uBAAwB,SAAQ,oBAAoB;IACnE;;OAEG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAE9B;;OAEG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAE9B;;OAEG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAE1B;;OAEG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IAEvB;;OAEG;IACH,cAAc,CAAC,EAAE,WAAW,GAAG,QAAQ,CAAC;IAExC;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;OAEG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IAEzB;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;OAEG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAE3B;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB;;OAEG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAE5B;;;OAGG;IACH,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAEhC;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,GAAG,GACZ,QAAQ,IAAI,kBAAkB,CAEhC;AAED;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG,uBAAuB,GAAG;IACzD;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AACH,eAAO,MAAM,kBAAkB,yFAGrB,OAAO,CAAC,kBAAkB,CAAC,MAC7B,MAAM,UACH,uBAAuB,KAC7B,OAAO,CAAC,kBAAkB,CAAC,CAgB/B,CAAC"}

package/lib/cloudflare/warp-default-profile.js

@@ -0,0 +1,138 @@
+import { Resource, ResourceKind } from "../resource.js";
+import { handleApiError } from "./api-error.js";
+import { createCloudflareApi, } from "./api.js";
+export function isWarpDefaultProfile(resource) {
+    return resource?.[ResourceKind] === "cloudflare::WarpDefaultProfile";
+}
+/**
+ * Manages the Cloudflare WARP Default Device Profile, which defines the
+ * account-wide default WARP client settings that apply when no custom profile matches.
+ *
+ * The default profile always exists and cannot be deleted. This resource allows you
+ * to update its settings programmatically.
+ *
+ * @see https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/configure-warp/device-profiles/
+ *
+ * @example
+ * ## Update default WARP settings
+ *
+ * Configure the default behavior for all devices
+ *
+ * const defaultProfile = await WarpDefaultProfile("default", {
+ *   serviceModeV2: { mode: "warp" },
+ *   autoConnect: 0,
+ *   captivePortal: 180,
+ *   supportUrl: "https://support.example.com"
+ * });
+ *
+ * @example
+ * ## Default profile with split tunnel
+ *
+ * Configure default split tunnel behavior for all devices
+ *
+ * const defaultWithSplitTunnel = await WarpDefaultProfile("default", {
+ *   serviceModeV2: { mode: "warp" },
+ *   splitTunnel: {
+ *     mode: "exclude",
+ *     entries: [
+ *       { address: "10.0.0.0/8", description: "Internal network" },
+ *       { address: "192.168.0.0/16", description: "Local network" }
+ *     ]
+ *   }
+ * });
+ *
+ * @example
+ * ## Locked default profile
+ *
+ * Create a locked-down default configuration
+ *
+ * const lockedDefault = await WarpDefaultProfile("default", {
+ *   serviceModeV2: { mode: "warp" },
+ *   switchLocked: true,
+ *   allowedToLeave: false,
+ *   disableAutoFallback: true,
+ *   tunnelProtocol: "wireguard"
+ * });
+ */
+export const WarpDefaultProfile = Resource("cloudflare::WarpDefaultProfile", async function (id, props = {}) {
+    const api = await createCloudflareApi(props);
+    if (this.phase === "delete") {
+        // Default profile cannot be deleted, just remove from state
+        return this.destroy();
+    }
+    // Update default profile (single PATCH endpoint)
+    await updateDefaultPolicy(api, props);
+    return {
+        ...props,
+        modifiedAt: Date.now(),
+    };
+});
+// Type-safe mapping - TypeScript errors if any SimpleDeviceSettingKey is missing
+const DEVICE_SETTINGS_MAP = {
+    disableAutoFallback: "disable_auto_fallback",
+    allowModeSwitch: "allow_mode_switch",
+    switchLocked: "switch_locked",
+    tunnelProtocol: "tunnel_protocol",
+    autoConnect: "auto_connect",
+    allowedToLeave: "allowed_to_leave",
+    captivePortal: "captive_portal",
+    supportUrl: "support_url",
+    excludeOfficeIps: "exclude_office_ips",
+    lanAllowMinutes: "lan_allow_minutes",
+    lanAllowSubnetSize: "lan_allow_subnet_size",
+};
+async function updateDefaultPolicy(api, props) {
+    // Build device settings object
+    const deviceSettings = {};
+    if (props.serviceModeV2) {
+        deviceSettings.service_mode_v2 = {
+            mode: props.serviceModeV2.mode,
+            ...(props.serviceModeV2.port && { port: props.serviceModeV2.port }),
+        };
+    }
+    // Apply all simple field mappings
+    for (const propKey of Object.keys(DEVICE_SETTINGS_MAP)) {
+        deviceSettings[DEVICE_SETTINGS_MAP[propKey]] = props[propKey];
+    }
+    // Split tunnel config is part of the body for default policy
+    if (props.splitTunnel) {
+        if (props.splitTunnel.mode === "include") {
+            deviceSettings.include = props.splitTunnel.entries.map((entry) => ({
+                address: entry.address,
+                ...(entry.description && { description: entry.description }),
+            }));
+        }
+        else {
+            deviceSettings.exclude = props.splitTunnel.entries.map((entry) => ({
+                address: entry.address,
+                ...(entry.description && { description: entry.description }),
+            }));
+        }
+    }
+    const requestBody = {
+        ...(Object.keys(deviceSettings).length > 0 && { ...deviceSettings }),
+    };
+    const response = await api.patch(`/accounts/${api.accountId}/devices/policy`, requestBody);
+    if (!response.ok) {
+        await handleApiError(response, "update", "warp_default_profile", "default");
+    }
+}
+async function updateDefaultSplitTunnel(api, config) {
+    const routes = config.entries.map((entry) => ({
+        address: entry.address,
+        ...(entry.description && { description: entry.description }),
+    }));
+    if (config.mode === "include") {
+        const response = await api.put(`/accounts/${api.accountId}/devices/policies/default/includes`, routes);
+        if (!response.ok) {
+            await handleApiError(response, "update split tunnel includes", "warp_default_profile", "default");
+        }
+    }
+    else {
+        const response = await api.put(`/accounts/${api.accountId}/devices/policies/default/excludes`, routes);
+        if (!response.ok) {
+            await handleApiError(response, "update split tunnel excludes", "warp_default_profile", "default");
+        }
+    }
+}
+//# sourceMappingURL=warp-default-profile.js.map

package/lib/cloudflare/warp-default-profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"warp-default-profile.js","sourceRoot":"","sources":["../../src/cloudflare/warp-default-profile.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EACL,mBAAmB,GAGpB,MAAM,UAAU,CAAC;AAwFlB,MAAM,UAAU,oBAAoB,CAClC,QAAa;IAEb,OAAO,QAAQ,EAAE,CAAC,YAAY,CAAC,KAAK,gCAAgC,CAAC;AACvE,CAAC;AAYD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,QAAQ,CACxC,gCAAgC,EAChC,KAAK,WAEH,EAAU,EACV,QAAiC,EAAE;IAEnC,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAE7C,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5B,4DAA4D;QAC5D,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;IACxB,CAAC;IAED,iDAAiD;IACjD,MAAM,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAEtC,OAAO;QACL,GAAG,KAAK;QACR,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;KACvB,CAAC;AACJ,CAAC,CACF,CAAC;AAmCF,iFAAiF;AACjF,MAAM,mBAAmB,GAA2C;IAClE,mBAAmB,EAAE,uBAAuB;IAC5C,eAAe,EAAE,mBAAmB;IACpC,YAAY,EAAE,eAAe;IAC7B,cAAc,EAAE,iBAAiB;IACjC,WAAW,EAAE,cAAc;IAC3B,cAAc,EAAE,kBAAkB;IAClC,aAAa,EAAE,gBAAgB;IAC/B,UAAU,EAAE,aAAa;IACzB,gBAAgB,EAAE,oBAAoB;IACtC,eAAe,EAAE,mBAAmB;IACpC,kBAAkB,EAAE,uBAAuB;CAC5C,CAAC;AAEF,KAAK,UAAU,mBAAmB,CAChC,GAAkB,EAClB,KAA8B;IAE9B,+BAA+B;IAC/B,MAAM,cAAc,GAA4B,EAAE,CAAC;IAEnD,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACxB,cAAc,CAAC,eAAe,GAAG;YAC/B,IAAI,EAAE,KAAK,CAAC,aAAa,CAAC,IAAI;YAC9B,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;SACpE,CAAC;IACJ,CAAC;IAED,kCAAkC;IAClC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,IAAI,CAC/B,mBAAmB,CACQ,EAAE,CAAC;QAC9B,cAAc,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;IAChE,CAAC;IAED,6DAA6D;IAC7D,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QACtB,IAAI,KAAK,CAAC,WAAW,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACzC,cAAc,CAAC,OAAO,GAAG,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBACjE,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,GAAG,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;aAC7D,CAAC,CAAC,CAAC;QACN,CAAC;aAAM,CAAC;YACN,cAAc,CAAC,OAAO,GAAG,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBACjE,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,GAAG,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;aAC7D,CAAC,CAAC,CAAC;QACN,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAQ;QACvB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,GAAG,cAAc,EAAE,CAAC;KACrE,CAAC;IAEF,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,KAAK,CAC9B,aAAa,GAAG,CAAC,SAAS,iBAAiB,EAC3C,WAAW,CACZ,CAAC;IAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,cAAc,CAAC,QAAQ,EAAE,QAAQ,EAAE,sBAAsB,EAAE,SAAS,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,GAAkB,EAClB,MAAyB;IAEzB,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC5C,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,GAAG,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;KAC7D,CAAC,CAAC,CAAC;IAEJ,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,GAAG,CAC5B,aAAa,GAAG,CAAC,SAAS,oCAAoC,EAC9D,MAAM,CACP,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,cAAc,CAClB,QAAQ,EACR,8BAA8B,EAC9B,sBAAsB,EACtB,SAAS,CACV,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,GAAG,CAC5B,aAAa,GAAG,CAAC,SAAS,oCAAoC,EAC9D,MAAM,CACP,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,cAAc,CAClB,QAAQ,EACR,8BAA8B,EAC9B,sBAAsB,EACtB,SAAS,CACV,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}