cloudflare 3.5.0 → 4.1.0

package/src/resources/zones/settings.ts

@@ -66,6 +66,64 @@ export interface AdvancedDDoS {
   modified_on?: string | null;
 }
 
+/**
+ * Advanced protection from Distributed Denial of Service (DDoS) attacks on your
+ * website. This is an uneditable value that is 'on' in the case of Business and
+ * Enterprise zones.
+ */
+export interface AdvancedDDoSParam {
+  /**
+   * ID of the zone setting.
+   */
+  id: 'advanced_ddos';
+
+  /**
+   * Current value of the zone setting.
+   */
+  value: 'on' | 'off';
+}
+
+/**
+ * Aegis provides dedicated egress IPs (from Cloudflare to your origin) for your
+ * layer 7 WAF and CDN services. The egress IPs are reserved exclusively for your
+ * account so that you can increase your origin security by only allowing traffic
+ * from a small list of IP addresses.
+ */
+export interface Aegis {
+  /**
+   * ID of the zone setting.
+   */
+  id: 'aegis';
+
+  /**
+   * Last time this setting was modified.
+   */
+  modified_on?: string | null;
+
+  /**
+   * Value of the zone setting.
+   */
+  value?: Aegis.Value;
+}
+
+export namespace Aegis {
+  /**
+   * Value of the zone setting.
+   */
+  export interface Value {
+    /**
+     * Whether the feature is enabled or not.
+     */
+    enabled?: boolean;
+
+    /**
+     * Egress pool id which refers to a grouping of dedicated egress IPs through which
+     * Cloudflare will connect to origin.
+     */
+    pool_id?: string;
+  }
+}
+
 /**
  * When enabled, Cloudflare serves limited copies of web pages available from the
  * [Internet Archive's Wayback Machine](https://archive.org/web/) if your server is
@@ -97,57 +155,62 @@ export interface AlwaysOnline {
 }
 
 /**
- * Reply to all requests for URLs that use "http" with a 301 redirect to the
- * equivalent "https" URL. If you only want to redirect for a subset of requests,
- * consider creating an "Always use HTTPS" page rule.
+ * When enabled, Cloudflare serves limited copies of web pages available from the
+ * [Internet Archive's Wayback Machine](https://archive.org/web/) if your server is
+ * offline. Refer to
+ * [Always Online](https://developers.cloudflare.com/cache/about/always-online) for
+ * more information.
  */
-export interface AlwaysUseHTTPS {
+export interface AlwaysOnlineParam {
   /**
    * ID of the zone setting.
    */
-  id: 'always_use_https';
+  id: 'always_online';
 
   /**
    * Current value of the zone setting.
    */
   value: 'on' | 'off';
+}
 
+export interface AlwaysUseHTTPS {
   /**
-   * Whether or not this setting can be modified for this zone (based on your
-   * Cloudflare plan level).
+   * If enabled, any ` http://`` URL is converted to  `https://` through a 301
+   * redirect.
    */
-  editable?: true | false;
+  id?: 'always_use_https';
+}
 
+export interface AlwaysUseHTTPSParam {
   /**
-   * last time this setting was modified.
+   * If enabled, any ` http://`` URL is converted to  `https://` through a 301
+   * redirect.
    */
-  modified_on?: string | null;
+  id?: 'always_use_https';
 }
 
-/**
- * Enable the Automatic HTTPS Rewrites feature for this zone.
- */
 export interface AutomaticHTTPSRewrites {
   /**
-   * ID of the zone setting.
+   * Turn on or off Automatic HTTPS Rewrites.
    */
-  id: 'automatic_https_rewrites';
+  id?: 'automatic_https_rewrites';
 
   /**
-   * Current value of the zone setting.
+   * The status of Automatic HTTPS Rewrites.
    */
-  value: 'on' | 'off';
+  value?: 'on' | 'off';
+}
 
+export interface AutomaticHTTPSRewritesParam {
   /**
-   * Whether or not this setting can be modified for this zone (based on your
-   * Cloudflare plan level).
+   * Turn on or off Automatic HTTPS Rewrites.
    */
-  editable?: true | false;
+  id?: 'automatic_https_rewrites';
 
   /**
-   * last time this setting was modified.
+   * The status of Automatic HTTPS Rewrites.
    */
-  modified_on?: string | null;
+  value?: 'on' | 'off';
 }
 
 export interface AutomaticPlatformOptimization {
@@ -252,120 +315,109 @@ export interface Brotli {
 }
 
 /**
- * Browser Cache TTL (in seconds) specifies how long Cloudflare-cached resources
- * will remain on your visitors' computers. Cloudflare will honor any larger times
- * specified by your server.
- * (https://support.cloudflare.com/hc/en-us/articles/200168276).
+ * When the client requesting an asset supports the Brotli compression algorithm,
+ * Cloudflare will serve a Brotli compressed version of the asset.
  */
-export interface BrowserCacheTTL {
+export interface BrotliParam {
   /**
    * ID of the zone setting.
    */
-  id: 'browser_cache_ttl';
+  id: 'brotli';
 
   /**
    * Current value of the zone setting.
    */
-  value:
-    | 0
-    | 30
-    | 60
-    | 120
-    | 300
-    | 1200
-    | 1800
-    | 3600
-    | 7200
-    | 10800
-    | 14400
-    | 18000
-    | 28800
-    | 43200
-    | 57600
-    | 72000
-    | 86400
-    | 172800
-    | 259200
-    | 345600
-    | 432000
-    | 691200
-    | 1382400
-    | 2073600
-    | 2678400
-    | 5356800
-    | 16070400
-    | 31536000;
+  value: 'off' | 'on';
+}
 
+export interface BrowserCacheTTL {
   /**
-   * Whether or not this setting can be modified for this zone (based on your
-   * Cloudflare plan level).
+   * Control how long resources cached by client browsers remain valid.
    */
-  editable?: true | false;
+  id?: 'browser_cache_ttl';
 
   /**
-   * last time this setting was modified.
+   * The number of seconds to cache resources for. The API prohibits setting this to
+   * 0 for non-Enterprise domains.
    */
-  modified_on?: string | null;
+  value?: number;
+}
+
+export interface BrowserCacheTTLParam {
+  /**
+   * Control how long resources cached by client browsers remain valid.
+   */
+  id?: 'browser_cache_ttl';
+
+  /**
+   * The number of seconds to cache resources for. The API prohibits setting this to
+   * 0 for non-Enterprise domains.
+   */
+  value?: number;
 }
 
-/**
- * Browser Integrity Check is similar to Bad Behavior and looks for common HTTP
- * headers abused most commonly by spammers and denies access to your page. It will
- * also challenge visitors that do not have a user agent or a non standard user
- * agent (also commonly used by abuse bots, crawlers or visitors).
- * (https://support.cloudflare.com/hc/en-us/articles/200170086).
- */
 export interface BrowserCheck {
   /**
-   * ID of the zone setting.
+   * Inspect the visitor's browser for headers commonly associated with spammers and
+   * certain bots.
    */
-  id: 'browser_check';
+  id?: 'browser_check';
 
   /**
-   * Current value of the zone setting.
+   * The status of Browser Integrity Check.
    */
-  value: 'on' | 'off';
+  value?: 'on' | 'off';
+}
 
+export interface BrowserCheckParam {
   /**
-   * Whether or not this setting can be modified for this zone (based on your
-   * Cloudflare plan level).
+   * Inspect the visitor's browser for headers commonly associated with spammers and
+   * certain bots.
    */
-  editable?: true | false;
+  id?: 'browser_check';
 
   /**
-   * last time this setting was modified.
+   * The status of Browser Integrity Check.
    */
-  modified_on?: string | null;
+  value?: 'on' | 'off';
 }
 
-/**
- * Cache Level functions based off the setting level. The basic setting will cache
- * most static resources (i.e., css, images, and JavaScript). The simplified
- * setting will ignore the query string when delivering a cached resource. The
- * aggressive setting will cache all static resources, including ones with a query
- * string. (https://support.cloudflare.com/hc/en-us/articles/200168256).
- */
 export interface CacheLevel {
   /**
-   * ID of the zone setting.
+   * Apply custom caching based on the option selected.
    */
-  id: 'cache_level';
+  id?: 'cache_level';
 
   /**
-   * Current value of the zone setting.
+   * - `bypass`: Cloudflare does not cache.
+   * - `basic`: Delivers resources from cache when there is no query string.
+   * - `simplified`: Delivers the same resource to everyone independent of the query
+   *   string.
+   * - `aggressive`: Caches all static content that has a query string.
+   * - `cache_everything`: Treats all content as static and caches all file types
+   *   beyond the
+   *   [Cloudflare default cached content](https://developers.cloudflare.com/cache/concepts/default-cache-behavior/#default-cached-file-extensions).
    */
-  value: 'aggressive' | 'basic' | 'simplified';
+  value?: 'bypass' | 'basic' | 'simplified' | 'aggressive' | 'cache_everything';
+}
 
+export interface CacheLevelParam {
   /**
-   * Whether or not this setting can be modified for this zone (based on your
-   * Cloudflare plan level).
+   * Apply custom caching based on the option selected.
    */
-  editable?: true | false;
+  id?: 'cache_level';
 
   /**
-   * last time this setting was modified.
+   * - `bypass`: Cloudflare does not cache.
+   * - `basic`: Delivers resources from cache when there is no query string.
+   * - `simplified`: Delivers the same resource to everyone independent of the query
+   *   string.
+   * - `aggressive`: Caches all static content that has a query string.
+   * - `cache_everything`: Treats all content as static and caches all file types
+   *   beyond the
+   *   [Cloudflare default cached content](https://developers.cloudflare.com/cache/concepts/default-cache-behavior/#default-cached-file-extensions).
    */
-  modified_on?: string | null;
+  value?: 'bypass' | 'basic' | 'simplified' | 'aggressive' | 'cache_everything';
 }
 
 /**
@@ -412,6 +464,39 @@ export interface ChallengeTTL {
   modified_on?: string | null;
 }
 
+/**
+ * Specify how long a visitor is allowed access to your site after successfully
+ * completing a challenge (such as a CAPTCHA). After the TTL has expired the
+ * visitor will have to complete a new challenge. We recommend a 15 - 45 minute
+ * setting and will attempt to honor any setting above 45 minutes.
+ * (https://support.cloudflare.com/hc/en-us/articles/200170136).
+ */
+export interface ChallengeTTLParam {
+  /**
+   * ID of the zone setting.
+   */
+  id: 'challenge_ttl';
+
+  /**
+   * Current value of the zone setting.
+   */
+  value:
+    | 300
+    | 900
+    | 1800
+    | 2700
+    | 3600
+    | 7200
+    | 10800
+    | 14400
+    | 28800
+    | 57600
+    | 86400
+    | 604800
+    | 2592000
+    | 31536000;
+}
+
 /**
  * An allowlist of ciphers for TLS termination. These ciphers must be in the
  * BoringSSL format.
@@ -439,6 +524,22 @@ export interface Ciphers {
   modified_on?: string | null;
 }
 
+/**
+ * An allowlist of ciphers for TLS termination. These ciphers must be in the
+ * BoringSSL format.
+ */
+export interface CiphersParam {
+  /**
+   * ID of the zone setting.
+   */
+  id: 'ciphers';
+
+  /**
+   * Current value of the zone setting.
+   */
+  value: Array<string>;
+}
+
 /**
  * Development Mode temporarily allows you to enter development mode for your
  * websites if you need to make changes to your site. This will bypass Cloudflare's
@@ -477,6 +578,26 @@ export interface DevelopmentMode {
   time_remaining?: number;
 }
 
+/**
+ * Development Mode temporarily allows you to enter development mode for your
+ * websites if you need to make changes to your site. This will bypass Cloudflare's
+ * accelerated cache and slow down your site, but is useful if you are making
+ * changes to cacheable content (like images, css, or JavaScript) and would like to
+ * see those changes right away. Once entered, development mode will last for 3
+ * hours and then automatically toggle off.
+ */
+export interface DevelopmentModeParam {
+  /**
+   * ID of the zone setting.
+   */
+  id: 'development_mode';
+
+  /**
+   * Current value of the zone setting.
+   */
+  value: 'on' | 'off';
+}
+
 /**
  * When enabled, Cloudflare will attempt to speed up overall page loads by serving
  * `103` responses with `Link` headers from the final response. Refer to
@@ -507,30 +628,45 @@ export interface EarlyHints {
 }
 
 /**
- * Encrypt email adresses on your web page from bots, while keeping them visible to
- * humans. (https://support.cloudflare.com/hc/en-us/articles/200170016).
+ * When enabled, Cloudflare will attempt to speed up overall page loads by serving
+ * `103` responses with `Link` headers from the final response. Refer to
+ * [Early Hints](https://developers.cloudflare.com/cache/about/early-hints) for
+ * more information.
  */
-export interface EmailObfuscation {
+export interface EarlyHintsParam {
   /**
    * ID of the zone setting.
    */
-  id: 'email_obfuscation';
+  id: 'early_hints';
 
   /**
    * Current value of the zone setting.
    */
   value: 'on' | 'off';
+}
 
+export interface EmailObfuscation {
   /**
-   * Whether or not this setting can be modified for this zone (based on your
-   * Cloudflare plan level).
+   * Turn on or off **Email Obfuscation**.
    */
-  editable?: true | false;
+  id?: 'email_obfuscation';
 
   /**
-   * last time this setting was modified.
+   * The status of Email Obfuscation.
    */
-  modified_on?: string | null;
+  value?: 'on' | 'off';
+}
+
+export interface EmailObfuscationParam {
+  /**
+   * Turn on or off **Email Obfuscation**.
+   */
+  id?: 'email_obfuscation';
+
+  /**
+   * The status of Email Obfuscation.
+   */
+  value?: 'on' | 'off';
 }
 
 /**
@@ -542,12 +678,7 @@ export interface FontSettings {
   /**
    * ID of the zone setting.
    */
-  id: 'fonts';
-
-  /**
-   * Current value of the zone setting.
-   */
-  value: 'on' | 'off';
+  id?: 'fonts';
 
   /**
    * Whether or not this setting can be modified for this zone (based on your
@@ -559,6 +690,11 @@ export interface FontSettings {
    * last time this setting was modified.
    */
   modified_on?: string | null;
+
+  /**
+   * Current value of the zone setting.
+   */
+  value?: 'on' | 'off';
 }
 
 /**
@@ -589,6 +725,23 @@ export interface H2Prioritization {
   modified_on?: string | null;
 }
 
+/**
+ * HTTP/2 Edge Prioritization optimises the delivery of resources served through
+ * HTTP/2 to improve page load performance. It also supports fine control of
+ * content delivery when used in conjunction with Workers.
+ */
+export interface H2PrioritizationParam {
+  /**
+   * ID of the zone setting.
+   */
+  id: 'h2_prioritization';
+
+  /**
+   * Current value of the zone setting.
+   */
+  value: 'on' | 'off' | 'custom';
+}
+
 /**
  * When enabled, the Hotlink Protection option ensures that other sites cannot suck
  * up your bandwidth by building pages that use images hosted on your site. Anytime
@@ -621,6 +774,27 @@ export interface HotlinkProtection {
   modified_on?: string | null;
 }
 
+/**
+ * When enabled, the Hotlink Protection option ensures that other sites cannot suck
+ * up your bandwidth by building pages that use images hosted on your site. Anytime
+ * a request for an image on your site hits Cloudflare, we check to ensure that
+ * it's not another site requesting them. People will still be able to download and
+ * view images from your page, but other sites won't be able to steal them for use
+ * on their own pages.
+ * (https://support.cloudflare.com/hc/en-us/articles/200170026).
+ */
+export interface HotlinkProtectionParam {
+  /**
+   * ID of the zone setting.
+   */
+  id: 'hotlink_protection';
+
+  /**
+   * Current value of the zone setting.
+   */
+  value: 'on' | 'off';
+}
+
 /**
  * HTTP2 enabled for this zone.
  */
@@ -648,13 +822,28 @@ export interface HTTP2 {
 }
 
 /**
- * HTTP3 enabled for this zone.
+ * HTTP2 enabled for this zone.
  */
-export interface HTTP3 {
+export interface HTTP2Param {
   /**
    * ID of the zone setting.
    */
-  id: 'http3';
+  id: 'http2';
+
+  /**
+   * Current value of the zone setting.
+   */
+  value: 'on' | 'off';
+}
+
+/**
+ * HTTP3 enabled for this zone.
+ */
+export interface HTTP3 {
+  /**
+   * ID of the zone setting.
+   */
+  id: 'http3';
 
   /**
    * Current value of the zone setting.
@@ -673,6 +862,21 @@ export interface HTTP3 {
   modified_on?: string | null;
 }
 
+/**
+ * HTTP3 enabled for this zone.
+ */
+export interface HTTP3Param {
+  /**
+   * ID of the zone setting.
+   */
+  id: 'http3';
+
+  /**
+   * Current value of the zone setting.
+   */
+  value: 'on' | 'off';
+}
+
 /**
  * Image Resizing provides on-demand resizing, conversion and optimisation for
  * images served through Cloudflare's network. Refer to the
@@ -703,31 +907,47 @@ export interface ImageResizing {
 }
 
 /**
- * Enable IP Geolocation to have Cloudflare geolocate visitors to your website and
- * pass the country code to you.
- * (https://support.cloudflare.com/hc/en-us/articles/200168236).
+ * Image Resizing provides on-demand resizing, conversion and optimisation for
+ * images served through Cloudflare's network. Refer to the
+ * [Image Resizing documentation](https://developers.cloudflare.com/images/) for
+ * more information.
  */
-export interface IPGeolocation {
+export interface ImageResizingParam {
   /**
    * ID of the zone setting.
    */
-  id: 'ip_geolocation';
+  id: 'image_resizing';
 
   /**
    * Current value of the zone setting.
    */
-  value: 'on' | 'off';
+  value: 'on' | 'off' | 'open';
+}
 
+export interface IPGeolocation {
   /**
-   * Whether or not this setting can be modified for this zone (based on your
-   * Cloudflare plan level).
+   * Cloudflare adds a CF-IPCountry HTTP header containing the country code that
+   * corresponds to the visitor.
    */
-  editable?: true | false;
+  id?: 'ip_geolocation';
 
   /**
-   * last time this setting was modified.
+   * The status of adding the IP Geolocation Header.
    */
-  modified_on?: string | null;
+  value?: 'on' | 'off';
+}
+
+export interface IPGeolocationParam {
+  /**
+   * Cloudflare adds a CF-IPCountry HTTP header containing the country code that
+   * corresponds to the visitor.
+   */
+  id?: 'ip_geolocation';
+
+  /**
+   * The status of adding the IP Geolocation Header.
+   */
+  value?: 'on' | 'off';
 }
 
 /**
@@ -757,6 +977,22 @@ export interface IPV6 {
   modified_on?: string | null;
 }
 
+/**
+ * Enable IPv6 on all subdomains that are Cloudflare enabled.
+ * (https://support.cloudflare.com/hc/en-us/articles/200168586).
+ */
+export interface IPV6Param {
+  /**
+   * ID of the zone setting.
+   */
+  id: 'ipv6';
+
+  /**
+   * Current value of the zone setting.
+   */
+  value: 'off' | 'on';
+}
+
 /**
  * Only accepts HTTPS requests that use at least the TLS protocol version
  * specified. For example, if TLS 1.1 is selected, TLS 1.0 connections will be
@@ -786,100 +1022,63 @@ export interface MinTLSVersion {
 }
 
 /**
- * Automatically minify certain assets for your website. Refer to
- * [Using Cloudflare Auto Minify](https://support.cloudflare.com/hc/en-us/articles/200168196)
- * for more information.
+ * Only accepts HTTPS requests that use at least the TLS protocol version
+ * specified. For example, if TLS 1.1 is selected, TLS 1.0 connections will be
+ * rejected, while 1.1, 1.2, and 1.3 (if enabled) will be permitted.
  */
-export interface Minify {
-  /**
-   * Zone setting identifier.
-   */
-  id: 'minify';
-
-  /**
-   * Current value of the zone setting.
-   */
-  value: Minify.Value;
-
-  /**
-   * Whether or not this setting can be modified for this zone (based on your
-   * Cloudflare plan level).
-   */
-  editable?: true | false;
-
+export interface MinTLSVersionParam {
   /**
-   * last time this setting was modified.
+   * ID of the zone setting.
    */
-  modified_on?: string | null;
-}
+  id: 'min_tls_version';
 
-export namespace Minify {
   /**
    * Current value of the zone setting.
    */
-  export interface Value {
-    /**
-     * Automatically minify all CSS files for your website.
-     */
-    css?: 'on' | 'off';
-
-    /**
-     * Automatically minify all HTML files for your website.
-     */
-    html?: 'on' | 'off';
-
-    /**
-     * Automatically minify all JavaScript files for your website.
-     */
-    js?: 'on' | 'off';
-  }
+  value: '1.0' | '1.1' | '1.2' | '1.3';
 }
 
-/**
- * Automatically optimize image loading for website visitors on mobile devices.
- * Refer to
- * [our blog post](http://blog.cloudflare.com/mirage2-solving-mobile-speed) for
- * more information.
- */
 export interface Mirage {
   /**
-   * ID of the zone setting.
+   * Cloudflare Mirage reduces bandwidth used by images in mobile browsers. It can
+   * accelerate loading of image-heavy websites on very slow mobile connections and
+   * HTTP/1.
    */
-  id: 'mirage';
+  id?: 'mirage';
 
   /**
-   * Current value of the zone setting.
+   * The status of Mirage.
    */
-  value: 'on' | 'off';
+  value?: 'on' | 'off';
+}
 
+export interface MirageParam {
   /**
-   * Whether or not this setting can be modified for this zone (based on your
-   * Cloudflare plan level).
+   * Cloudflare Mirage reduces bandwidth used by images in mobile browsers. It can
+   * accelerate loading of image-heavy websites on very slow mobile connections and
+   * HTTP/1.
    */
-  editable?: true | false;
+  id?: 'mirage';
 
   /**
-   * last time this setting was modified.
+   * The status of Mirage.
    */
-  modified_on?: string | null;
+  value?: 'on' | 'off';
 }
 
 /**
- * @deprecated: Deprecated: Use Single Redirects instead
- * https://developers.cloudflare.com/rules/url-forwarding/single-redirects/examples/#perform-mobile-redirects.
- * Automatically redirect visitors on mobile devices to a mobile-optimized
- * subdomain.
+ * Enable Network Error Logging reporting on your zone. (Beta)
  */
-export interface MobileRedirect {
+export interface NEL {
   /**
-   * Identifier of the zone setting.
+   * Zone setting identifier.
    */
-  id: 'mobile_redirect';
+  id: 'nel';
 
   /**
-   * @deprecated: Current value of the zone setting.
+   * Current value of the zone setting.
    */
-  value: MobileRedirect.Value;
+  value: NEL.Value;
 
   /**
    * Whether or not this setting can be modified for this zone (based on your
@@ -893,36 +1092,19 @@ export interface MobileRedirect {
   modified_on?: string | null;
 }
 
-export namespace MobileRedirect {
+export namespace NEL {
   /**
-   * @deprecated: Current value of the zone setting.
+   * Current value of the zone setting.
    */
   export interface Value {
-    /**
-     * Which subdomain prefix you wish to redirect visitors on mobile devices to
-     * (subdomain must already exist).
-     */
-    mobile_subdomain?: string | null;
-
-    /**
-     * Deprecated: Use Single Redirects instead
-     * https://developers.cloudflare.com/rules/url-forwarding/single-redirects/examples/#perform-mobile-redirects.
-     * Whether or not mobile redirect is enabled.
-     */
-    status?: 'on' | 'off';
-
-    /**
-     * Whether to drop the current page path and redirect to the mobile subdomain URL
-     * root, or keep the path and redirect to the same page on the mobile subdomain.
-     */
-    strip_uri?: boolean;
+    enabled?: boolean;
   }
 }
 
 /**
  * Enable Network Error Logging reporting on your zone. (Beta)
  */
-export interface NEL {
+export interface NELParam {
   /**
    * Zone setting identifier.
    */
@@ -931,21 +1113,10 @@ export interface NEL {
   /**
    * Current value of the zone setting.
    */
-  value: NEL.Value;
-
-  /**
-   * Whether or not this setting can be modified for this zone (based on your
-   * Cloudflare plan level).
-   */
-  editable?: true | false;
-
-  /**
-   * last time this setting was modified.
-   */
-  modified_on?: string | null;
+  value: NELParam.Value;
 }
 
-export namespace NEL {
+export namespace NELParam {
   /**
    * Current value of the zone setting.
    */
@@ -954,30 +1125,32 @@ export namespace NEL {
   }
 }
 
-/**
- * Enables the Opportunistic Encryption feature for a zone.
- */
 export interface OpportunisticEncryption {
   /**
-   * ID of the zone setting.
+   * Opportunistic Encryption allows browsers to access HTTP URIs over an encrypted
+   * TLS channel. It's not a substitute for HTTPS, but provides additional security
+   * for otherwise vulnerable requests.
    */
-  id: 'opportunistic_encryption';
+  id?: 'opportunistic_encryption';
 
   /**
-   * Current value of the zone setting.
+   * The status of Opportunistic Encryption.
    */
-  value: 'on' | 'off';
+  value?: 'on' | 'off';
+}
 
+export interface OpportunisticEncryptionParam {
   /**
-   * Whether or not this setting can be modified for this zone (based on your
-   * Cloudflare plan level).
+   * Opportunistic Encryption allows browsers to access HTTP URIs over an encrypted
+   * TLS channel. It's not a substitute for HTTPS, but provides additional security
+   * for otherwise vulnerable requests.
    */
-  editable?: true | false;
+  id?: 'opportunistic_encryption';
 
   /**
-   * last time this setting was modified.
+   * The status of Opportunistic Encryption.
    */
-  modified_on?: string | null;
+  value?: 'on' | 'off';
 }
 
 /**
@@ -1007,6 +1180,22 @@ export interface OpportunisticOnion {
   modified_on?: string | null;
 }
 
+/**
+ * Add an Alt-Svc header to all legitimate requests from Tor, allowing the
+ * connection to use our onion services instead of exit nodes.
+ */
+export interface OpportunisticOnionParam {
+  /**
+   * ID of the zone setting.
+   */
+  id: 'opportunistic_onion';
+
+  /**
+   * Current value of the zone setting.
+   */
+  value: 'on' | 'off';
+}
+
 /**
  * Orange to Orange (O2O) allows zones on Cloudflare to CNAME to other zones also
  * on Cloudflare.
@@ -1035,69 +1224,93 @@ export interface OrangeToOrange {
 }
 
 /**
- * Cloudflare will proxy customer error pages on any 502,504 errors on origin
- * server instead of showing a default Cloudflare error page. This does not apply
- * to 522 errors and is limited to Enterprise Zones.
+ * Orange to Orange (O2O) allows zones on Cloudflare to CNAME to other zones also
+ * on Cloudflare.
  */
-export interface OriginErrorPagePassThru {
+export interface OrangeToOrangeParam {
   /**
    * ID of the zone setting.
    */
-  id: 'origin_error_page_pass_thru';
+  id: 'orange_to_orange';
 
   /**
    * Current value of the zone setting.
    */
   value: 'on' | 'off';
+}
 
+export interface OriginErrorPagePassThru {
   /**
-   * Whether or not this setting can be modified for this zone (based on your
-   * Cloudflare plan level).
+   * Turn on or off Cloudflare error pages generated from issues sent from the origin
+   * server. If enabled, this setting triggers error pages issued by the origin.
    */
-  editable?: true | false;
+  id?: 'origin_error_page_pass_thru';
 
   /**
-   * last time this setting was modified.
+   * The status of Origin Error Page Passthru.
    */
-  modified_on?: string | null;
+  value?: 'on' | 'off';
 }
 
-/**
- * Value of the zone setting.
- */
-export type OriginMaxHTTPVersion = 'origin_max_http_version';
+export interface OriginErrorPagePassThruParam {
+  /**
+   * Turn on or off Cloudflare error pages generated from issues sent from the origin
+   * server. If enabled, this setting triggers error pages issued by the origin.
+   */
+  id?: 'origin_error_page_pass_thru';
 
-/**
- * Removes metadata and compresses your images for faster page load times. Basic
- * (Lossless): Reduce the size of PNG, JPEG, and GIF files - no impact on visual
- * quality. Basic + JPEG (Lossy): Further reduce the size of JPEG files for faster
- * image loading. Larger JPEGs are converted to progressive images, loading a
- * lower-resolution image first and ending in a higher-resolution version. Not
- * recommended for hi-res photography sites.
- */
-export interface Polish {
   /**
-   * ID of the zone setting.
+   * The status of Origin Error Page Passthru.
    */
-  id: 'polish';
+  value?: 'on' | 'off';
+}
 
+export interface OriginMaxHTTPVersion {
   /**
-   * Current value of the zone setting.
+   * Value of the zone setting.
    */
-  value: 'off' | 'lossless' | 'lossy';
+  id: 'origin_max_http_version';
 
   /**
-   * Whether or not this setting can be modified for this zone (based on your
-   * Cloudflare plan level).
+   * Whether the setting is editable
    */
-  editable?: true | false;
+  editable: boolean;
 
   /**
-   * last time this setting was modified.
+   * The value of the feature
+   */
+  value: '2' | '1';
+
+  /**
+   * Last time this setting was modified.
    */
   modified_on?: string | null;
 }
 
+export interface Polish {
+  /**
+   * Apply options from the Polish feature of the Cloudflare Speed app.
+   */
+  id?: 'polish';
+
+  /**
+   * The level of Polish you want applied to your origin.
+   */
+  value?: 'off' | 'lossless' | 'lossy';
+}
+
+export interface PolishParam {
+  /**
+   * Apply options from the Polish feature of the Cloudflare Speed app.
+   */
+  id?: 'polish';
+
+  /**
+   * The level of Polish you want applied to your origin.
+   */
+  value?: 'off' | 'lossless' | 'lossy';
+}
+
 /**
  * Cloudflare will prefetch any URLs that are included in the response headers.
  * This is limited to Enterprise Zones.
@@ -1125,6 +1338,22 @@ export interface PrefetchPreload {
   modified_on?: string | null;
 }
 
+/**
+ * Cloudflare will prefetch any URLs that are included in the response headers.
+ * This is limited to Enterprise Zones.
+ */
+export interface PrefetchPreloadParam {
+  /**
+   * ID of the zone setting.
+   */
+  id: 'prefetch_preload';
+
+  /**
+   * Current value of the zone setting.
+   */
+  value: 'on' | 'off';
+}
+
 /**
  * Maximum time between two read operations from origin.
  */
@@ -1151,6 +1380,21 @@ export interface ProxyReadTimeout {
   modified_on?: string | null;
 }
 
+/**
+ * Maximum time between two read operations from origin.
+ */
+export interface ProxyReadTimeoutParam {
+  /**
+   * ID of the zone setting.
+   */
+  id: 'proxy_read_timeout';
+
+  /**
+   * Current value of the zone setting.
+   */
+  value: number;
+}
+
 /**
  * The value set for the Pseudo IPv4 setting.
  */
@@ -1178,67 +1422,70 @@ export interface PseudoIPV4 {
 }
 
 /**
- * Enables or disables buffering of responses from the proxied server. Cloudflare
- * may buffer the whole payload to deliver it at once to the client versus allowing
- * it to be delivered in chunks. By default, the proxied server streams directly
- * and is not buffered by Cloudflare. This is limited to Enterprise Zones.
+ * The value set for the Pseudo IPv4 setting.
  */
-export interface ResponseBuffering {
+export interface PseudoIPV4Param {
   /**
-   * ID of the zone setting.
+   * Value of the Pseudo IPv4 setting.
    */
-  id: 'response_buffering';
+  id: 'pseudo_ipv4';
 
   /**
    * Current value of the zone setting.
    */
-  value: 'on' | 'off';
+  value: 'off' | 'add_header' | 'overwrite_header';
+}
 
+export interface ResponseBuffering {
   /**
-   * Whether or not this setting can be modified for this zone (based on your
-   * Cloudflare plan level).
+   * Turn on or off whether Cloudflare should wait for an entire file from the origin
+   * server before forwarding it to the site visitor. By default, Cloudflare sends
+   * packets to the client as they arrive from the origin server.
    */
-  editable?: true | false;
+  id?: 'response_buffering';
 
   /**
-   * last time this setting was modified.
+   * The status of Response Buffering
    */
-  modified_on?: string | null;
+  value?: 'on' | 'off';
 }
 
-/**
- * Rocket Loader is a general-purpose asynchronous JavaScript optimisation that
- * prioritises rendering your content while loading your site's Javascript
- * asynchronously. Turning on Rocket Loader will immediately improve a web page's
- * rendering time sometimes measured as Time to First Paint (TTFP), and also the
- * `window.onload` time (assuming there is JavaScript on the page). This can have a
- * positive impact on your Google search ranking. When turned on, Rocket Loader
- * will automatically defer the loading of all Javascript referenced in your HTML,
- * with no configuration required. Refer to
- * [Understanding Rocket Loader](https://support.cloudflare.com/hc/articles/200168056)
- * for more information.
- */
-export interface RocketLoader {
+export interface ResponseBufferingParam {
   /**
-   * ID of the zone setting.
+   * Turn on or off whether Cloudflare should wait for an entire file from the origin
+   * server before forwarding it to the site visitor. By default, Cloudflare sends
+   * packets to the client as they arrive from the origin server.
    */
-  id: 'rocket_loader';
+  id?: 'response_buffering';
 
   /**
-   * Current value of the zone setting.
+   * The status of Response Buffering
    */
-  value: 'on' | 'off';
+  value?: 'on' | 'off';
+}
 
+export interface RocketLoader {
   /**
-   * Whether or not this setting can be modified for this zone (based on your
-   * Cloudflare plan level).
+   * Turn on or off Rocket Loader in the Cloudflare Speed app.
    */
-  editable?: true | false;
+  id?: 'rocket_loader';
 
   /**
-   * last time this setting was modified.
+   * The status of Rocket Loader
    */
-  modified_on?: string | null;
+  value?: 'on' | 'off';
+}
+
+export interface RocketLoaderParam {
+  /**
+   * Turn on or off Rocket Loader in the Cloudflare Speed app.
+   */
+  id?: 'rocket_loader';
+
+  /**
+   * The status of Rocket Loader
+   */
+  value?: 'on' | 'off';
 }
 
 /**
@@ -1312,32 +1559,80 @@ export namespace SecurityHeaders {
 }
 
 /**
- * Choose the appropriate security profile for your website, which will
- * automatically adjust each of the security settings. If you choose to customize
- * an individual security setting, the profile will become Custom.
- * (https://support.cloudflare.com/hc/en-us/articles/200170056).
+ * Cloudflare security header for a zone.
  */
-export interface SecurityLevel {
+export interface SecurityHeadersParam {
   /**
-   * ID of the zone setting.
+   * ID of the zone's security header.
    */
-  id: 'security_level';
+  id: 'security_header';
 
   /**
    * Current value of the zone setting.
    */
-  value: 'off' | 'essentially_off' | 'low' | 'medium' | 'high' | 'under_attack';
+  value: SecurityHeadersParam.Value;
+}
 
+export namespace SecurityHeadersParam {
   /**
-   * Whether or not this setting can be modified for this zone (based on your
-   * Cloudflare plan level).
+   * Current value of the zone setting.
    */
-  editable?: true | false;
+  export interface Value {
+    /**
+     * Strict Transport Security.
+     */
+    strict_transport_security?: Value.StrictTransportSecurity;
+  }
+
+  export namespace Value {
+    /**
+     * Strict Transport Security.
+     */
+    export interface StrictTransportSecurity {
+      /**
+       * Whether or not strict transport security is enabled.
+       */
+      enabled?: boolean;
+
+      /**
+       * Include all subdomains for strict transport security.
+       */
+      include_subdomains?: boolean;
+
+      /**
+       * Max age in seconds of the strict transport security.
+       */
+      max_age?: number;
+
+      /**
+       * Whether or not to include 'X-Content-Type-Options: nosniff' header.
+       */
+      nosniff?: boolean;
+
+      /**
+       * Enable automatic preload of the HSTS configuration.
+       */
+      preload?: boolean;
+    }
+  }
+}
 
+export interface SecurityLevel {
   /**
-   * last time this setting was modified.
+   * Control options for the **Security Level** feature from the **Security** app.
    */
-  modified_on?: string | null;
+  id?: 'security_level';
+
+  value?: 'off' | 'essentially_off' | 'low' | 'medium' | 'high' | 'under_attack';
+}
+
+export interface SecurityLevelParam {
+  /**
+   * Control options for the **Security Level** feature from the **Security** app.
+   */
+  id?: 'security_level';
+
+  value?: 'off' | 'essentially_off' | 'low' | 'medium' | 'high' | 'under_attack';
 }
 
 /**
@@ -1377,72 +1672,80 @@ export interface ServerSideExcludes {
 }
 
 /**
- * Cloudflare will treat files with the same query strings as the same file in
- * cache, regardless of the order of the query strings. This is limited to
- * Enterprise Zones.
+ * If there is sensitive content on your website that you want visible to real
+ * visitors, but that you want to hide from suspicious visitors, all you have to do
+ * is wrap the content with Cloudflare SSE tags. Wrap any content that you want to
+ * be excluded from suspicious visitors in the following SSE tags:
+ * <!--sse--><!--/sse-->. For example: <!--sse--> Bad visitors won't see my phone
+ * number, 555-555-5555 <!--/sse-->. Note: SSE only will work with HTML. If you
+ * have HTML minification enabled, you won't see the SSE tags in your HTML source
+ * when it's served through Cloudflare. SSE will still function in this case, as
+ * Cloudflare's HTML minification and SSE functionality occur on-the-fly as the
+ * resource moves through our network to the visitor's computer.
+ * (https://support.cloudflare.com/hc/en-us/articles/200170036).
  */
-export interface SortQueryStringForCache {
+export interface ServerSideExcludesParam {
   /**
    * ID of the zone setting.
    */
-  id: 'sort_query_string_for_cache';
+  id: 'server_side_exclude';
 
   /**
    * Current value of the zone setting.
    */
   value: 'on' | 'off';
+}
 
+export interface SortQueryStringForCache {
   /**
-   * Whether or not this setting can be modified for this zone (based on your
-   * Cloudflare plan level).
+   * Turn on or off the reordering of query strings. When query strings have the same
+   * structure, caching improves.
    */
-  editable?: true | false;
+  id?: 'sort_query_string_for_cache';
 
   /**
-   * last time this setting was modified.
+   * The status of Query String Sort
    */
-  modified_on?: string | null;
+  value?: 'on' | 'off';
+}
+
+export interface SortQueryStringForCacheParam {
+  /**
+   * Turn on or off the reordering of query strings. When query strings have the same
+   * structure, caching improves.
+   */
+  id?: 'sort_query_string_for_cache';
+
+  /**
+   * The status of Query String Sort
+   */
+  value?: 'on' | 'off';
 }
 
-/**
- * SSL encrypts your visitor's connection and safeguards credit card numbers and
- * other personal data to and from your website. SSL can take up to 5 minutes to
- * fully activate. Requires Cloudflare active on your root domain or www domain.
- * Off: no SSL between the visitor and Cloudflare, and no SSL between Cloudflare
- * and your web server (all HTTP traffic). Flexible: SSL between the visitor and
- * Cloudflare -- visitor sees HTTPS on your site, but no SSL between Cloudflare and
- * your web server. You don't need to have an SSL cert on your web server, but your
- * vistors will still see the site as being HTTPS enabled. Full: SSL between the
- * visitor and Cloudflare -- visitor sees HTTPS on your site, and SSL between
- * Cloudflare and your web server. You'll need to have your own SSL cert or
- * self-signed cert at the very least. Full (Strict): SSL between the visitor and
- * Cloudflare -- visitor sees HTTPS on your site, and SSL between Cloudflare and
- * your web server. You'll need to have a valid SSL certificate installed on your
- * web server. This certificate must be signed by a certificate authority, have an
- * expiration date in the future, and respond for the request domain name
- * (hostname). (https://support.cloudflare.com/hc/en-us/articles/200170416).
- */
 export interface SSL {
   /**
-   * ID of the zone setting.
+   * Control options for the SSL feature of the Edge Certificates tab in the
+   * Cloudflare SSL/TLS app.
    */
-  id: 'ssl';
+  id?: 'ssl';
 
   /**
-   * Current value of the zone setting.
+   * The encryption mode that Cloudflare uses to connect to your origin server.
    */
-  value: 'off' | 'flexible' | 'full' | 'strict';
+  value?: 'off' | 'flexible' | 'full' | 'strict' | 'origin_pull';
+}
 
+export interface SSLParam {
   /**
-   * Whether or not this setting can be modified for this zone (based on your
-   * Cloudflare plan level).
+   * Control options for the SSL feature of the Edge Certificates tab in the
+   * Cloudflare SSL/TLS app.
    */
-  editable?: true | false;
+  id?: 'ssl';
 
   /**
-   * last time this setting was modified.
+   * The encryption mode that Cloudflare uses to connect to your origin server.
    */
-  modified_on?: string | null;
+  value?: 'off' | 'flexible' | 'full' | 'strict' | 'origin_pull';
 }
 
 /**
@@ -1462,6 +1765,23 @@ export interface SSLRecommender {
   enabled?: boolean;
 }
 
+/**
+ * Enrollment in the SSL/TLS Recommender service which tries to detect and
+ * recommend (by sending periodic emails) the most secure SSL/TLS setting your
+ * origin servers support.
+ */
+export interface SSLRecommenderParam {
+  /**
+   * Enrollment value for SSL/TLS Recommender.
+   */
+  id?: 'ssl_recommender';
+
+  /**
+   * ssl-recommender enrollment setting.
+   */
+  enabled?: boolean;
+}
+
 /**
  * Enables Crypto TLS 1.3 feature for a zone.
  */
@@ -1488,6 +1808,21 @@ export interface TLS1_3 {
   modified_on?: string | null;
 }
 
+/**
+ * Enables Crypto TLS 1.3 feature for a zone.
+ */
+export interface TLS1_3Param {
+  /**
+   * ID of the zone setting.
+   */
+  id: 'tls_1_3';
+
+  /**
+   * Current value of the zone setting.
+   */
+  value: 'on' | 'off' | 'zrt';
+}
+
 /**
  * TLS Client Auth requires Cloudflare to connect to your origin server using a
  * client certificate (Enterprise Only).
@@ -1516,65 +1851,71 @@ export interface TLSClientAuth {
 }
 
 /**
- * Allows customer to continue to use True Client IP (Akamai feature) in the
- * headers we send to the origin. This is limited to Enterprise Zones.
+ * TLS Client Auth requires Cloudflare to connect to your origin server using a
+ * client certificate (Enterprise Only).
  */
-export interface TrueClientIPHeader {
+export interface TLSClientAuthParam {
   /**
    * ID of the zone setting.
    */
-  id: 'true_client_ip_header';
+  id: 'tls_client_auth';
 
   /**
    * Current value of the zone setting.
    */
   value: 'on' | 'off';
+}
 
+export interface TrueClientIPHeader {
   /**
-   * Whether or not this setting can be modified for this zone (based on your
-   * Cloudflare plan level).
+   * Turn on or off the True-Client-IP Header feature of the Cloudflare Network app.
    */
-  editable?: true | false;
+  id?: 'true_client_ip_header';
 
   /**
-   * last time this setting was modified.
+   * The status of True Client IP Header.
    */
-  modified_on?: string | null;
+  value?: 'on' | 'off';
+}
+
+export interface TrueClientIPHeaderParam {
+  /**
+   * Turn on or off the True-Client-IP Header feature of the Cloudflare Network app.
+   */
+  id?: 'true_client_ip_header';
+
+  /**
+   * The status of True Client IP Header.
+   */
+  value?: 'on' | 'off';
 }
 
-/**
- * The WAF examines HTTP requests to your website. It inspects both GET and POST
- * requests and applies rules to help filter out illegitimate traffic from
- * legitimate website visitors. The Cloudflare WAF inspects website addresses or
- * URLs to detect anything out of the ordinary. If the Cloudflare WAF determines
- * suspicious user behavior, then the WAF will 'challenge' the web visitor with a
- * page that asks them to submit a CAPTCHA successfully to continue their action.
- * If the challenge is failed, the action will be stopped. What this means is that
- * Cloudflare's WAF will block any traffic identified as illegitimate before it
- * reaches your origin web server.
- * (https://support.cloudflare.com/hc/en-us/articles/200172016).
- */
 export interface WAF {
   /**
-   * ID of the zone setting.
+   * Turn on or off
+   * [WAF managed rules (previous version, deprecated)](https://developers.cloudflare.com/waf/reference/legacy/old-waf-managed-rules/).
+   * You cannot enable or disable individual WAF managed rules via Page Rules.
    */
-  id: 'waf';
+  id?: 'waf';
 
   /**
-   * Current value of the zone setting.
+   * The status of WAF managed rules (previous version).
    */
-  value: 'on' | 'off';
+  value?: 'on' | 'off';
+}
 
+export interface WAFParam {
   /**
-   * Whether or not this setting can be modified for this zone (based on your
-   * Cloudflare plan level).
+   * Turn on or off
+   * [WAF managed rules (previous version, deprecated)](https://developers.cloudflare.com/waf/reference/legacy/old-waf-managed-rules/).
+   * You cannot enable or disable individual WAF managed rules via Page Rules.
    */
-  editable?: true | false;
+  id?: 'waf';
 
   /**
-   * last time this setting was modified.
+   * The status of WAF managed rules (previous version).
    */
-  modified_on?: string | null;
+  value?: 'on' | 'off';
 }
 
 /**
@@ -1605,6 +1946,23 @@ export interface WebP {
   modified_on?: string | null;
 }
 
+/**
+ * When the client requesting the image supports the WebP image codec, and WebP
+ * offers a performance advantage over the original image format, Cloudflare will
+ * serve a WebP version of the original image.
+ */
+export interface WebPParam {
+  /**
+   * ID of the zone setting.
+   */
+  id: 'webp';
+
+  /**
+   * Current value of the zone setting.
+   */
+  value: 'off' | 'on';
+}
+
 /**
  * WebSockets are open connections sustained between the client and the origin
  * server. Inside a WebSockets connection, the client and the origin can pass data
@@ -1637,6 +1995,27 @@ export interface Websocket {
   modified_on?: string | null;
 }
 
+/**
+ * WebSockets are open connections sustained between the client and the origin
+ * server. Inside a WebSockets connection, the client and the origin can pass data
+ * back and forth without having to reestablish sessions. This makes exchanging
+ * data within a WebSockets connection fast. WebSockets are often used for
+ * real-time applications such as live chat and gaming. For more information refer
+ * to
+ * [Can I use Cloudflare with Websockets](https://support.cloudflare.com/hc/en-us/articles/200169466-Can-I-use-Cloudflare-with-WebSockets-).
+ */
+export interface WebsocketParam {
+  /**
+   * ID of the zone setting.
+   */
+  id: 'websockets';
+
+  /**
+   * Current value of the zone setting.
+   */
+  value: 'off' | 'on';
+}
+
 /**
  * 0-RTT session resumption enabled for this zone.
  */
@@ -1663,115 +2042,1269 @@ export interface ZeroRTT {
   modified_on?: string | null;
 }
 
+/**
+ * 0-RTT session resumption enabled for this zone.
+ */
+export interface ZeroRTTParam {
+  /**
+   * ID of the zone setting.
+   */
+  id: '0rtt';
+
+  /**
+   * Current value of the zone setting.
+   */
+  value: 'on' | 'off';
+}
+
 /**
  * 0-RTT session resumption enabled for this zone.
  */
 export type SettingEditResponse =
   | ZeroRTT
   | AdvancedDDoS
+  | SettingEditResponse.ZonesCacheRulesAegis
   | AlwaysOnline
-  | AlwaysUseHTTPS
-  | AutomaticHTTPSRewrites
+  | SettingEditResponse.ZonesSchemasAlwaysUseHTTPS
+  | SettingEditResponse.ZonesSchemasAutomaticHTTPSRewrites
   | Brotli
-  | BrowserCacheTTL
-  | BrowserCheck
-  | CacheLevel
+  | SettingEditResponse.ZonesSchemasBrowserCacheTTL
+  | SettingEditResponse.ZonesSchemasBrowserCheck
+  | SettingEditResponse.ZonesSchemasCacheLevel
   | ChallengeTTL
   | Ciphers
   | SettingEditResponse.ZonesCNAMEFlattening
   | DevelopmentMode
   | EarlyHints
-  | SettingEditResponse.ZonesEdgeCacheTTL
-  | EmailObfuscation
+  | SettingEditResponse.ZonesSchemasEdgeCacheTTL
+  | SettingEditResponse.ZonesSchemasEmailObfuscation
   | H2Prioritization
   | HotlinkProtection
   | HTTP2
   | HTTP3
   | ImageResizing
-  | IPGeolocation
+  | SettingEditResponse.ZonesSchemasIPGeolocation
   | IPV6
   | SettingEditResponse.ZonesMaxUpload
   | MinTLSVersion
-  | Minify
-  | Mirage
-  | MobileRedirect
+  | SettingEditResponse.ZonesSchemasMirage
   | NEL
-  | OpportunisticEncryption
+  | SettingEditResponse.ZonesSchemasOpportunisticEncryption
   | OpportunisticOnion
   | OrangeToOrange
-  | OriginErrorPagePassThru
-  | Polish
+  | SettingEditResponse.ZonesSchemasOriginErrorPagePassThru
+  | SettingEditResponse.ZonesCacheRulesOriginH2MaxStreams
+  | SettingEditResponse.ZonesCacheRulesOriginMaxHTTPVersion
+  | SettingEditResponse.ZonesSchemasPolish
   | PrefetchPreload
   | ProxyReadTimeout
   | PseudoIPV4
   | SettingEditResponse.ZonesReplaceInsecureJS
-  | ResponseBuffering
-  | RocketLoader
+  | SettingEditResponse.ZonesSchemasResponseBuffering
+  | SettingEditResponse.ZonesSchemasRocketLoader
   | SettingEditResponse.ZonesSchemasAutomaticPlatformOptimization
   | SecurityHeaders
-  | SecurityLevel
+  | SettingEditResponse.ZonesSchemasSecurityLevel
   | ServerSideExcludes
   | SettingEditResponse.ZonesSha1Support
-  | SortQueryStringForCache
-  | SSL
+  | SettingEditResponse.ZonesSchemasSortQueryStringForCache
+  | SettingEditResponse.ZonesSchemasSSL
   | SSLRecommender
   | SettingEditResponse.ZonesTLS1_2Only
   | TLS1_3
   | TLSClientAuth
-  | TrueClientIPHeader
-  | WAF
+  | SettingEditResponse.ZonesSchemasTrueClientIPHeader
+  | SettingEditResponse.ZonesSchemasWAF
   | WebP
   | Websocket;
 
 export namespace SettingEditResponse {
   /**
-   * Whether or not cname flattening is on.
+   * Aegis provides dedicated egress IPs (from Cloudflare to your origin) for your
+   * layer 7 WAF and CDN services. The egress IPs are reserved exclusively for your
+   * account so that you can increase your origin security by only allowing traffic
+   * from a small list of IP addresses.
    */
-  export interface ZonesCNAMEFlattening {
+  export interface ZonesCacheRulesAegis {
     /**
-     * How to flatten the cname destination.
+     * ID of the zone setting.
      */
-    id: 'cname_flattening';
+    id: 'aegis';
 
     /**
-     * Current value of the zone setting.
+     * Last time this setting was modified.
      */
-    value: 'flatten_at_root' | 'flatten_all';
+    modified_on?: string | null;
 
     /**
-     * Whether or not this setting can be modified for this zone (based on your
-     * Cloudflare plan level).
+     * Value of the zone setting.
      */
-    editable?: true | false;
+    value?: ZonesCacheRulesAegis.Value;
+  }
 
+  export namespace ZonesCacheRulesAegis {
     /**
-     * last time this setting was modified.
+     * Value of the zone setting.
      */
-    modified_on?: string | null;
+    export interface Value {
+      /**
+       * Whether the feature is enabled or not.
+       */
+      enabled?: boolean;
+
+      /**
+       * Egress pool id which refers to a grouping of dedicated egress IPs through which
+       * Cloudflare will connect to origin.
+       */
+      pool_id?: string;
+    }
   }
 
   /**
-   * Time (in seconds) that a resource will be ensured to remain on Cloudflare's
-   * cache servers.
+   * Reply to all requests for URLs that use "http" with a 301 redirect to the
+   * equivalent "https" URL. If you only want to redirect for a subset of requests,
+   * consider creating an "Always use HTTPS" page rule.
    */
-  export interface ZonesEdgeCacheTTL {
+  export interface ZonesSchemasAlwaysUseHTTPS {
     /**
      * ID of the zone setting.
      */
-    id: 'edge_cache_ttl';
+    id: 'always_use_https';
 
     /**
      * Current value of the zone setting.
      */
-    value:
-      | 30
-      | 60
-      | 300
-      | 1200
-      | 1800
-      | 3600
-      | 7200
-      | 10800
+    value: 'on' | 'off';
+
+    /**
+     * Whether or not this setting can be modified for this zone (based on your
+     * Cloudflare plan level).
+     */
+    editable?: true | false;
+
+    /**
+     * last time this setting was modified.
+     */
+    modified_on?: string | null;
+  }
+
+  /**
+   * Enable the Automatic HTTPS Rewrites feature for this zone.
+   */
+  export interface ZonesSchemasAutomaticHTTPSRewrites {
+    /**
+     * ID of the zone setting.
+     */
+    id: 'automatic_https_rewrites';
+
+    /**
+     * Current value of the zone setting.
+     */
+    value: 'on' | 'off';
+
+    /**
+     * Whether or not this setting can be modified for this zone (based on your
+     * Cloudflare plan level).
+     */
+    editable?: true | false;
+
+    /**
+     * last time this setting was modified.
+     */
+    modified_on?: string | null;
+  }
+
+  /**
+   * Browser Cache TTL (in seconds) specifies how long Cloudflare-cached resources
+   * will remain on your visitors' computers. Cloudflare will honor any larger times
+   * specified by your server.
+   * (https://support.cloudflare.com/hc/en-us/articles/200168276).
+   */
+  export interface ZonesSchemasBrowserCacheTTL {
+    /**
+     * ID of the zone setting.
+     */
+    id: 'browser_cache_ttl';
+
+    /**
+     * Current value of the zone setting.
+     */
+    value:
+      | 0
+      | 30
+      | 60
+      | 120
+      | 300
+      | 1200
+      | 1800
+      | 3600
+      | 7200
+      | 10800
+      | 14400
+      | 18000
+      | 28800
+      | 43200
+      | 57600
+      | 72000
+      | 86400
+      | 172800
+      | 259200
+      | 345600
+      | 432000
+      | 691200
+      | 1382400
+      | 2073600
+      | 2678400
+      | 5356800
+      | 16070400
+      | 31536000;
+
+    /**
+     * Whether or not this setting can be modified for this zone (based on your
+     * Cloudflare plan level).
+     */
+    editable?: true | false;
+
+    /**
+     * last time this setting was modified.
+     */
+    modified_on?: string | null;
+  }
+
+  /**
+   * Browser Integrity Check is similar to Bad Behavior and looks for common HTTP
+   * headers abused most commonly by spammers and denies access to your page. It will
+   * also challenge visitors that do not have a user agent or a non standard user
+   * agent (also commonly used by abuse bots, crawlers or visitors).
+   * (https://support.cloudflare.com/hc/en-us/articles/200170086).
+   */
+  export interface ZonesSchemasBrowserCheck {
+    /**
+     * ID of the zone setting.
+     */
+    id: 'browser_check';
+
+    /**
+     * Current value of the zone setting.
+     */
+    value: 'on' | 'off';
+
+    /**
+     * Whether or not this setting can be modified for this zone (based on your
+     * Cloudflare plan level).
+     */
+    editable?: true | false;
+
+    /**
+     * last time this setting was modified.
+     */
+    modified_on?: string | null;
+  }
+
+  /**
+   * Cache Level functions based off the setting level. The basic setting will cache
+   * most static resources (i.e., css, images, and JavaScript). The simplified
+   * setting will ignore the query string when delivering a cached resource. The
+   * aggressive setting will cache all static resources, including ones with a query
+   * string. (https://support.cloudflare.com/hc/en-us/articles/200168256).
+   */
+  export interface ZonesSchemasCacheLevel {
+    /**
+     * ID of the zone setting.
+     */
+    id: 'cache_level';
+
+    /**
+     * Current value of the zone setting.
+     */
+    value: 'aggressive' | 'basic' | 'simplified';
+
+    /**
+     * Whether or not this setting can be modified for this zone (based on your
+     * Cloudflare plan level).
+     */
+    editable?: true | false;
+
+    /**
+     * last time this setting was modified.
+     */
+    modified_on?: string | null;
+  }
+
+  /**
+   * Whether or not cname flattening is on.
+   */
+  export interface ZonesCNAMEFlattening {
+    /**
+     * How to flatten the cname destination.
+     */
+    id: 'cname_flattening';
+
+    /**
+     * Current value of the zone setting.
+     */
+    value: 'flatten_at_root' | 'flatten_all';
+
+    /**
+     * Whether or not this setting can be modified for this zone (based on your
+     * Cloudflare plan level).
+     */
+    editable?: true | false;
+
+    /**
+     * last time this setting was modified.
+     */
+    modified_on?: string | null;
+  }
+
+  /**
+   * Time (in seconds) that a resource will be ensured to remain on Cloudflare's
+   * cache servers.
+   */
+  export interface ZonesSchemasEdgeCacheTTL {
+    /**
+     * ID of the zone setting.
+     */
+    id: 'edge_cache_ttl';
+
+    /**
+     * Current value of the zone setting.
+     */
+    value:
+      | 30
+      | 60
+      | 300
+      | 1200
+      | 1800
+      | 3600
+      | 7200
+      | 10800
+      | 14400
+      | 18000
+      | 28800
+      | 43200
+      | 57600
+      | 72000
+      | 86400
+      | 172800
+      | 259200
+      | 345600
+      | 432000
+      | 518400
+      | 604800;
+
+    /**
+     * Whether or not this setting can be modified for this zone (based on your
+     * Cloudflare plan level).
+     */
+    editable?: true | false;
+
+    /**
+     * last time this setting was modified.
+     */
+    modified_on?: string | null;
+  }
+
+  /**
+   * Encrypt email adresses on your web page from bots, while keeping them visible to
+   * humans. (https://support.cloudflare.com/hc/en-us/articles/200170016).
+   */
+  export interface ZonesSchemasEmailObfuscation {
+    /**
+     * ID of the zone setting.
+     */
+    id: 'email_obfuscation';
+
+    /**
+     * Current value of the zone setting.
+     */
+    value: 'on' | 'off';
+
+    /**
+     * Whether or not this setting can be modified for this zone (based on your
+     * Cloudflare plan level).
+     */
+    editable?: true | false;
+
+    /**
+     * last time this setting was modified.
+     */
+    modified_on?: string | null;
+  }
+
+  /**
+   * Enable IP Geolocation to have Cloudflare geolocate visitors to your website and
+   * pass the country code to you.
+   * (https://support.cloudflare.com/hc/en-us/articles/200168236).
+   */
+  export interface ZonesSchemasIPGeolocation {
+    /**
+     * ID of the zone setting.
+     */
+    id: 'ip_geolocation';
+
+    /**
+     * Current value of the zone setting.
+     */
+    value: 'on' | 'off';
+
+    /**
+     * Whether or not this setting can be modified for this zone (based on your
+     * Cloudflare plan level).
+     */
+    editable?: true | false;
+
+    /**
+     * last time this setting was modified.
+     */
+    modified_on?: string | null;
+  }
+
+  /**
+   * Maximum size of an allowable upload.
+   */
+  export interface ZonesMaxUpload {
+    /**
+     * identifier of the zone setting.
+     */
+    id: 'max_upload';
+
+    /**
+     * Current value of the zone setting.
+     */
+    value: 100 | 200 | 500;
+
+    /**
+     * Whether or not this setting can be modified for this zone (based on your
+     * Cloudflare plan level).
+     */
+    editable?: true | false;
+
+    /**
+     * last time this setting was modified.
+     */
+    modified_on?: string | null;
+  }
+
+  /**
+   * Automatically optimize image loading for website visitors on mobile devices.
+   * Refer to
+   * [our blog post](http://blog.cloudflare.com/mirage2-solving-mobile-speed) for
+   * more information.
+   */
+  export interface ZonesSchemasMirage {
+    /**
+     * ID of the zone setting.
+     */
+    id: 'mirage';
+
+    /**
+     * Current value of the zone setting.
+     */
+    value: 'on' | 'off';
+
+    /**
+     * Whether or not this setting can be modified for this zone (based on your
+     * Cloudflare plan level).
+     */
+    editable?: true | false;
+
+    /**
+     * last time this setting was modified.
+     */
+    modified_on?: string | null;
+  }
+
+  /**
+   * Enables the Opportunistic Encryption feature for a zone.
+   */
+  export interface ZonesSchemasOpportunisticEncryption {
+    /**
+     * ID of the zone setting.
+     */
+    id: 'opportunistic_encryption';
+
+    /**
+     * Current value of the zone setting.
+     */
+    value: 'on' | 'off';
+
+    /**
+     * Whether or not this setting can be modified for this zone (based on your
+     * Cloudflare plan level).
+     */
+    editable?: true | false;
+
+    /**
+     * last time this setting was modified.
+     */
+    modified_on?: string | null;
+  }
+
+  /**
+   * Cloudflare will proxy customer error pages on any 502,504 errors on origin
+   * server instead of showing a default Cloudflare error page. This does not apply
+   * to 522 errors and is limited to Enterprise Zones.
+   */
+  export interface ZonesSchemasOriginErrorPagePassThru {
+    /**
+     * ID of the zone setting.
+     */
+    id: 'origin_error_page_pass_thru';
+
+    /**
+     * Current value of the zone setting.
+     */
+    value: 'on' | 'off';
+
+    /**
+     * Whether or not this setting can be modified for this zone (based on your
+     * Cloudflare plan level).
+     */
+    editable?: true | false;
+
+    /**
+     * last time this setting was modified.
+     */
+    modified_on?: string | null;
+  }
+
+  /**
+   * Origin H2 Max Streams configures the max number of concurrent requests that
+   * Cloudflare will send within the same connection when communicating with the
+   * origin server, if the origin supports it. Note that if your origin does not
+   * support H2 multiplexing, 5xx errors may be observed, particularly 520s. Also
+   * note that the default value is `100` for all plan types except Enterprise where
+   * it is `1`. `1` means that H2 multiplexing is disabled.
+   */
+  export interface ZonesCacheRulesOriginH2MaxStreams {
+    /**
+     * Value of the zone setting.
+     */
+    id: 'origin_h2_max_streams';
+
+    /**
+     * Last time this setting was modified.
+     */
+    modified_on?: string | null;
+
+    /**
+     * Value of the Origin H2 Max Streams Setting.
+     */
+    value?: number;
+  }
+
+  /**
+   * Origin Max HTTP Setting Version sets the highest HTTP version Cloudflare will
+   * attempt to use with your origin. This setting allows Cloudflare to make HTTP/2
+   * requests to your origin. (Refer to
+   * [Enable HTTP/2 to Origin](https://developers.cloudflare.com/cache/how-to/enable-http2-to-origin/),
+   * for more information.). The default value is "2" for all plan types except
+   * Enterprise where it is "1"
+   */
+  export interface ZonesCacheRulesOriginMaxHTTPVersion {
+    /**
+     * Value of the zone setting.
+     */
+    id: 'origin_max_http_version';
+
+    /**
+     * Last time this setting was modified.
+     */
+    modified_on?: string | null;
+
+    /**
+     * Value of the Origin Max HTTP Version Setting.
+     */
+    value?: '2' | '1';
+  }
+
+  /**
+   * Removes metadata and compresses your images for faster page load times. Basic
+   * (Lossless): Reduce the size of PNG, JPEG, and GIF files - no impact on visual
+   * quality. Basic + JPEG (Lossy): Further reduce the size of JPEG files for faster
+   * image loading. Larger JPEGs are converted to progressive images, loading a
+   * lower-resolution image first and ending in a higher-resolution version. Not
+   * recommended for hi-res photography sites.
+   */
+  export interface ZonesSchemasPolish {
+    /**
+     * ID of the zone setting.
+     */
+    id: 'polish';
+
+    /**
+     * Current value of the zone setting.
+     */
+    value: 'off' | 'lossless' | 'lossy';
+
+    /**
+     * Whether or not this setting can be modified for this zone (based on your
+     * Cloudflare plan level).
+     */
+    editable?: true | false;
+
+    /**
+     * last time this setting was modified.
+     */
+    modified_on?: string | null;
+  }
+
+  /**
+   * Automatically replace insecure JavaScript libraries with safer and faster
+   * alternatives provided under cdnjs and powered by Cloudflare. Currently supports
+   * the following libraries: Polyfill under polyfill.io.
+   */
+  export interface ZonesReplaceInsecureJS {
+    /**
+     * ID of the zone setting.
+     */
+    id: 'replace_insecure_js';
+
+    /**
+     * Current value of the zone setting.
+     */
+    value: 'on' | 'off';
+
+    /**
+     * Whether or not this setting can be modified for this zone (based on your
+     * Cloudflare plan level).
+     */
+    editable?: true | false;
+
+    /**
+     * last time this setting was modified.
+     */
+    modified_on?: string | null;
+  }
+
+  /**
+   * Enables or disables buffering of responses from the proxied server. Cloudflare
+   * may buffer the whole payload to deliver it at once to the client versus allowing
+   * it to be delivered in chunks. By default, the proxied server streams directly
+   * and is not buffered by Cloudflare. This is limited to Enterprise Zones.
+   */
+  export interface ZonesSchemasResponseBuffering {
+    /**
+     * ID of the zone setting.
+     */
+    id: 'response_buffering';
+
+    /**
+     * Current value of the zone setting.
+     */
+    value: 'on' | 'off';
+
+    /**
+     * Whether or not this setting can be modified for this zone (based on your
+     * Cloudflare plan level).
+     */
+    editable?: true | false;
+
+    /**
+     * last time this setting was modified.
+     */
+    modified_on?: string | null;
+  }
+
+  /**
+   * Rocket Loader is a general-purpose asynchronous JavaScript optimisation that
+   * prioritises rendering your content while loading your site's Javascript
+   * asynchronously. Turning on Rocket Loader will immediately improve a web page's
+   * rendering time sometimes measured as Time to First Paint (TTFP), and also the
+   * `window.onload` time (assuming there is JavaScript on the page). This can have a
+   * positive impact on your Google search ranking. When turned on, Rocket Loader
+   * will automatically defer the loading of all Javascript referenced in your HTML,
+   * with no configuration required. Refer to
+   * [Understanding Rocket Loader](https://support.cloudflare.com/hc/articles/200168056)
+   * for more information.
+   */
+  export interface ZonesSchemasRocketLoader {
+    /**
+     * ID of the zone setting.
+     */
+    id: 'rocket_loader';
+
+    /**
+     * Current value of the zone setting.
+     */
+    value: 'on' | 'off';
+
+    /**
+     * Whether or not this setting can be modified for this zone (based on your
+     * Cloudflare plan level).
+     */
+    editable?: true | false;
+
+    /**
+     * last time this setting was modified.
+     */
+    modified_on?: string | null;
+  }
+
+  /**
+   * [Automatic Platform Optimization for WordPress](https://developers.cloudflare.com/automatic-platform-optimization/)
+   * serves your WordPress site from Cloudflare's edge network and caches third-party
+   * fonts.
+   */
+  export interface ZonesSchemasAutomaticPlatformOptimization {
+    /**
+     * ID of the zone setting.
+     */
+    id: 'automatic_platform_optimization';
+
+    /**
+     * Current value of the zone setting.
+     */
+    value: SettingsAPI.AutomaticPlatformOptimization;
+
+    /**
+     * Whether or not this setting can be modified for this zone (based on your
+     * Cloudflare plan level).
+     */
+    editable?: true | false;
+
+    /**
+     * last time this setting was modified.
+     */
+    modified_on?: string | null;
+  }
+
+  /**
+   * Choose the appropriate security profile for your website, which will
+   * automatically adjust each of the security settings. If you choose to customize
+   * an individual security setting, the profile will become Custom.
+   * (https://support.cloudflare.com/hc/en-us/articles/200170056).
+   */
+  export interface ZonesSchemasSecurityLevel {
+    /**
+     * ID of the zone setting.
+     */
+    id: 'security_level';
+
+    /**
+     * Current value of the zone setting.
+     */
+    value: 'off' | 'essentially_off' | 'low' | 'medium' | 'high' | 'under_attack';
+
+    /**
+     * Whether or not this setting can be modified for this zone (based on your
+     * Cloudflare plan level).
+     */
+    editable?: true | false;
+
+    /**
+     * last time this setting was modified.
+     */
+    modified_on?: string | null;
+  }
+
+  /**
+   * Allow SHA1 support.
+   */
+  export interface ZonesSha1Support {
+    /**
+     * Zone setting identifier.
+     */
+    id: 'sha1_support';
+
+    /**
+     * Current value of the zone setting.
+     */
+    value: 'off' | 'on';
+
+    /**
+     * Whether or not this setting can be modified for this zone (based on your
+     * Cloudflare plan level).
+     */
+    editable?: true | false;
+
+    /**
+     * last time this setting was modified.
+     */
+    modified_on?: string | null;
+  }
+
+  /**
+   * Cloudflare will treat files with the same query strings as the same file in
+   * cache, regardless of the order of the query strings. This is limited to
+   * Enterprise Zones.
+   */
+  export interface ZonesSchemasSortQueryStringForCache {
+    /**
+     * ID of the zone setting.
+     */
+    id: 'sort_query_string_for_cache';
+
+    /**
+     * Current value of the zone setting.
+     */
+    value: 'on' | 'off';
+
+    /**
+     * Whether or not this setting can be modified for this zone (based on your
+     * Cloudflare plan level).
+     */
+    editable?: true | false;
+
+    /**
+     * last time this setting was modified.
+     */
+    modified_on?: string | null;
+  }
+
+  /**
+   * SSL encrypts your visitor's connection and safeguards credit card numbers and
+   * other personal data to and from your website. SSL can take up to 5 minutes to
+   * fully activate. Requires Cloudflare active on your root domain or www domain.
+   * Off: no SSL between the visitor and Cloudflare, and no SSL between Cloudflare
+   * and your web server (all HTTP traffic). Flexible: SSL between the visitor and
+   * Cloudflare -- visitor sees HTTPS on your site, but no SSL between Cloudflare and
+   * your web server. You don't need to have an SSL cert on your web server, but your
+   * vistors will still see the site as being HTTPS enabled. Full: SSL between the
+   * visitor and Cloudflare -- visitor sees HTTPS on your site, and SSL between
+   * Cloudflare and your web server. You'll need to have your own SSL cert or
+   * self-signed cert at the very least. Full (Strict): SSL between the visitor and
+   * Cloudflare -- visitor sees HTTPS on your site, and SSL between Cloudflare and
+   * your web server. You'll need to have a valid SSL certificate installed on your
+   * web server. This certificate must be signed by a certificate authority, have an
+   * expiration date in the future, and respond for the request domain name
+   * (hostname). (https://support.cloudflare.com/hc/en-us/articles/200170416).
+   */
+  export interface ZonesSchemasSSL {
+    /**
+     * ID of the zone setting.
+     */
+    id: 'ssl';
+
+    /**
+     * Current value of the zone setting.
+     */
+    value: 'off' | 'flexible' | 'full' | 'strict';
+
+    /**
+     * Whether or not this setting can be modified for this zone (based on your
+     * Cloudflare plan level).
+     */
+    editable?: true | false;
+
+    /**
+     * last time this setting was modified.
+     */
+    modified_on?: string | null;
+  }
+
+  /**
+   * Only allows TLS1.2.
+   */
+  export interface ZonesTLS1_2Only {
+    /**
+     * Zone setting identifier.
+     */
+    id: 'tls_1_2_only';
+
+    /**
+     * Current value of the zone setting.
+     */
+    value: 'off' | 'on';
+
+    /**
+     * Whether or not this setting can be modified for this zone (based on your
+     * Cloudflare plan level).
+     */
+    editable?: true | false;
+
+    /**
+     * last time this setting was modified.
+     */
+    modified_on?: string | null;
+  }
+
+  /**
+   * Allows customer to continue to use True Client IP (Akamai feature) in the
+   * headers we send to the origin. This is limited to Enterprise Zones.
+   */
+  export interface ZonesSchemasTrueClientIPHeader {
+    /**
+     * ID of the zone setting.
+     */
+    id: 'true_client_ip_header';
+
+    /**
+     * Current value of the zone setting.
+     */
+    value: 'on' | 'off';
+
+    /**
+     * Whether or not this setting can be modified for this zone (based on your
+     * Cloudflare plan level).
+     */
+    editable?: true | false;
+
+    /**
+     * last time this setting was modified.
+     */
+    modified_on?: string | null;
+  }
+
+  /**
+   * The WAF examines HTTP requests to your website. It inspects both GET and POST
+   * requests and applies rules to help filter out illegitimate traffic from
+   * legitimate website visitors. The Cloudflare WAF inspects website addresses or
+   * URLs to detect anything out of the ordinary. If the Cloudflare WAF determines
+   * suspicious user behavior, then the WAF will 'challenge' the web visitor with a
+   * page that asks them to submit a CAPTCHA successfully to continue their action.
+   * If the challenge is failed, the action will be stopped. What this means is that
+   * Cloudflare's WAF will block any traffic identified as illegitimate before it
+   * reaches your origin web server.
+   * (https://support.cloudflare.com/hc/en-us/articles/200172016).
+   */
+  export interface ZonesSchemasWAF {
+    /**
+     * ID of the zone setting.
+     */
+    id: 'waf';
+
+    /**
+     * Current value of the zone setting.
+     */
+    value: 'on' | 'off';
+
+    /**
+     * Whether or not this setting can be modified for this zone (based on your
+     * Cloudflare plan level).
+     */
+    editable?: true | false;
+
+    /**
+     * last time this setting was modified.
+     */
+    modified_on?: string | null;
+  }
+}
+
+/**
+ * 0-RTT session resumption enabled for this zone.
+ */
+export type SettingGetResponse =
+  | ZeroRTT
+  | AdvancedDDoS
+  | SettingGetResponse.ZonesCacheRulesAegis
+  | AlwaysOnline
+  | SettingGetResponse.ZonesSchemasAlwaysUseHTTPS
+  | SettingGetResponse.ZonesSchemasAutomaticHTTPSRewrites
+  | Brotli
+  | SettingGetResponse.ZonesSchemasBrowserCacheTTL
+  | SettingGetResponse.ZonesSchemasBrowserCheck
+  | SettingGetResponse.ZonesSchemasCacheLevel
+  | ChallengeTTL
+  | Ciphers
+  | SettingGetResponse.ZonesCNAMEFlattening
+  | DevelopmentMode
+  | EarlyHints
+  | SettingGetResponse.ZonesSchemasEdgeCacheTTL
+  | SettingGetResponse.ZonesSchemasEmailObfuscation
+  | H2Prioritization
+  | HotlinkProtection
+  | HTTP2
+  | HTTP3
+  | ImageResizing
+  | SettingGetResponse.ZonesSchemasIPGeolocation
+  | IPV6
+  | SettingGetResponse.ZonesMaxUpload
+  | MinTLSVersion
+  | SettingGetResponse.ZonesSchemasMirage
+  | NEL
+  | SettingGetResponse.ZonesSchemasOpportunisticEncryption
+  | OpportunisticOnion
+  | OrangeToOrange
+  | SettingGetResponse.ZonesSchemasOriginErrorPagePassThru
+  | SettingGetResponse.ZonesCacheRulesOriginH2MaxStreams
+  | SettingGetResponse.ZonesCacheRulesOriginMaxHTTPVersion
+  | SettingGetResponse.ZonesSchemasPolish
+  | PrefetchPreload
+  | ProxyReadTimeout
+  | PseudoIPV4
+  | SettingGetResponse.ZonesReplaceInsecureJS
+  | SettingGetResponse.ZonesSchemasResponseBuffering
+  | SettingGetResponse.ZonesSchemasRocketLoader
+  | SettingGetResponse.ZonesSchemasAutomaticPlatformOptimization
+  | SecurityHeaders
+  | SettingGetResponse.ZonesSchemasSecurityLevel
+  | ServerSideExcludes
+  | SettingGetResponse.ZonesSha1Support
+  | SettingGetResponse.ZonesSchemasSortQueryStringForCache
+  | SettingGetResponse.ZonesSchemasSSL
+  | SSLRecommender
+  | SettingGetResponse.ZonesTLS1_2Only
+  | TLS1_3
+  | TLSClientAuth
+  | SettingGetResponse.ZonesSchemasTrueClientIPHeader
+  | SettingGetResponse.ZonesSchemasWAF
+  | WebP
+  | Websocket;
+
+export namespace SettingGetResponse {
+  /**
+   * Aegis provides dedicated egress IPs (from Cloudflare to your origin) for your
+   * layer 7 WAF and CDN services. The egress IPs are reserved exclusively for your
+   * account so that you can increase your origin security by only allowing traffic
+   * from a small list of IP addresses.
+   */
+  export interface ZonesCacheRulesAegis {
+    /**
+     * ID of the zone setting.
+     */
+    id: 'aegis';
+
+    /**
+     * Last time this setting was modified.
+     */
+    modified_on?: string | null;
+
+    /**
+     * Value of the zone setting.
+     */
+    value?: ZonesCacheRulesAegis.Value;
+  }
+
+  export namespace ZonesCacheRulesAegis {
+    /**
+     * Value of the zone setting.
+     */
+    export interface Value {
+      /**
+       * Whether the feature is enabled or not.
+       */
+      enabled?: boolean;
+
+      /**
+       * Egress pool id which refers to a grouping of dedicated egress IPs through which
+       * Cloudflare will connect to origin.
+       */
+      pool_id?: string;
+    }
+  }
+
+  /**
+   * Reply to all requests for URLs that use "http" with a 301 redirect to the
+   * equivalent "https" URL. If you only want to redirect for a subset of requests,
+   * consider creating an "Always use HTTPS" page rule.
+   */
+  export interface ZonesSchemasAlwaysUseHTTPS {
+    /**
+     * ID of the zone setting.
+     */
+    id: 'always_use_https';
+
+    /**
+     * Current value of the zone setting.
+     */
+    value: 'on' | 'off';
+
+    /**
+     * Whether or not this setting can be modified for this zone (based on your
+     * Cloudflare plan level).
+     */
+    editable?: true | false;
+
+    /**
+     * last time this setting was modified.
+     */
+    modified_on?: string | null;
+  }
+
+  /**
+   * Enable the Automatic HTTPS Rewrites feature for this zone.
+   */
+  export interface ZonesSchemasAutomaticHTTPSRewrites {
+    /**
+     * ID of the zone setting.
+     */
+    id: 'automatic_https_rewrites';
+
+    /**
+     * Current value of the zone setting.
+     */
+    value: 'on' | 'off';
+
+    /**
+     * Whether or not this setting can be modified for this zone (based on your
+     * Cloudflare plan level).
+     */
+    editable?: true | false;
+
+    /**
+     * last time this setting was modified.
+     */
+    modified_on?: string | null;
+  }
+
+  /**
+   * Browser Cache TTL (in seconds) specifies how long Cloudflare-cached resources
+   * will remain on your visitors' computers. Cloudflare will honor any larger times
+   * specified by your server.
+   * (https://support.cloudflare.com/hc/en-us/articles/200168276).
+   */
+  export interface ZonesSchemasBrowserCacheTTL {
+    /**
+     * ID of the zone setting.
+     */
+    id: 'browser_cache_ttl';
+
+    /**
+     * Current value of the zone setting.
+     */
+    value:
+      | 0
+      | 30
+      | 60
+      | 120
+      | 300
+      | 1200
+      | 1800
+      | 3600
+      | 7200
+      | 10800
+      | 14400
+      | 18000
+      | 28800
+      | 43200
+      | 57600
+      | 72000
+      | 86400
+      | 172800
+      | 259200
+      | 345600
+      | 432000
+      | 691200
+      | 1382400
+      | 2073600
+      | 2678400
+      | 5356800
+      | 16070400
+      | 31536000;
+
+    /**
+     * Whether or not this setting can be modified for this zone (based on your
+     * Cloudflare plan level).
+     */
+    editable?: true | false;
+
+    /**
+     * last time this setting was modified.
+     */
+    modified_on?: string | null;
+  }
+
+  /**
+   * Browser Integrity Check is similar to Bad Behavior and looks for common HTTP
+   * headers abused most commonly by spammers and denies access to your page. It will
+   * also challenge visitors that do not have a user agent or a non standard user
+   * agent (also commonly used by abuse bots, crawlers or visitors).
+   * (https://support.cloudflare.com/hc/en-us/articles/200170086).
+   */
+  export interface ZonesSchemasBrowserCheck {
+    /**
+     * ID of the zone setting.
+     */
+    id: 'browser_check';
+
+    /**
+     * Current value of the zone setting.
+     */
+    value: 'on' | 'off';
+
+    /**
+     * Whether or not this setting can be modified for this zone (based on your
+     * Cloudflare plan level).
+     */
+    editable?: true | false;
+
+    /**
+     * last time this setting was modified.
+     */
+    modified_on?: string | null;
+  }
+
+  /**
+   * Cache Level functions based off the setting level. The basic setting will cache
+   * most static resources (i.e., css, images, and JavaScript). The simplified
+   * setting will ignore the query string when delivering a cached resource. The
+   * aggressive setting will cache all static resources, including ones with a query
+   * string. (https://support.cloudflare.com/hc/en-us/articles/200168256).
+   */
+  export interface ZonesSchemasCacheLevel {
+    /**
+     * ID of the zone setting.
+     */
+    id: 'cache_level';
+
+    /**
+     * Current value of the zone setting.
+     */
+    value: 'aggressive' | 'basic' | 'simplified';
+
+    /**
+     * Whether or not this setting can be modified for this zone (based on your
+     * Cloudflare plan level).
+     */
+    editable?: true | false;
+
+    /**
+     * last time this setting was modified.
+     */
+    modified_on?: string | null;
+  }
+
+  /**
+   * Whether or not cname flattening is on.
+   */
+  export interface ZonesCNAMEFlattening {
+    /**
+     * How to flatten the cname destination.
+     */
+    id: 'cname_flattening';
+
+    /**
+     * Current value of the zone setting.
+     */
+    value: 'flatten_at_root' | 'flatten_all';
+
+    /**
+     * Whether or not this setting can be modified for this zone (based on your
+     * Cloudflare plan level).
+     */
+    editable?: true | false;
+
+    /**
+     * last time this setting was modified.
+     */
+    modified_on?: string | null;
+  }
+
+  /**
+   * Time (in seconds) that a resource will be ensured to remain on Cloudflare's
+   * cache servers.
+   */
+  export interface ZonesSchemasEdgeCacheTTL {
+    /**
+     * ID of the zone setting.
+     */
+    id: 'edge_cache_ttl';
+
+    /**
+     * Current value of the zone setting.
+     */
+    value:
+      | 30
+      | 60
+      | 300
+      | 1200
+      | 1800
+      | 3600
+      | 7200
+      | 10800
       | 14400
       | 18000
       | 28800
@@ -1798,6 +3331,61 @@ export namespace SettingEditResponse {
     modified_on?: string | null;
   }
 
+  /**
+   * Encrypt email adresses on your web page from bots, while keeping them visible to
+   * humans. (https://support.cloudflare.com/hc/en-us/articles/200170016).
+   */
+  export interface ZonesSchemasEmailObfuscation {
+    /**
+     * ID of the zone setting.
+     */
+    id: 'email_obfuscation';
+
+    /**
+     * Current value of the zone setting.
+     */
+    value: 'on' | 'off';
+
+    /**
+     * Whether or not this setting can be modified for this zone (based on your
+     * Cloudflare plan level).
+     */
+    editable?: true | false;
+
+    /**
+     * last time this setting was modified.
+     */
+    modified_on?: string | null;
+  }
+
+  /**
+   * Enable IP Geolocation to have Cloudflare geolocate visitors to your website and
+   * pass the country code to you.
+   * (https://support.cloudflare.com/hc/en-us/articles/200168236).
+   */
+  export interface ZonesSchemasIPGeolocation {
+    /**
+     * ID of the zone setting.
+     */
+    id: 'ip_geolocation';
+
+    /**
+     * Current value of the zone setting.
+     */
+    value: 'on' | 'off';
+
+    /**
+     * Whether or not this setting can be modified for this zone (based on your
+     * Cloudflare plan level).
+     */
+    editable?: true | false;
+
+    /**
+     * last time this setting was modified.
+     */
+    modified_on?: string | null;
+  }
+
   /**
    * Maximum size of an allowable upload.
    */
@@ -1824,6 +3412,170 @@ export namespace SettingEditResponse {
     modified_on?: string | null;
   }
 
+  /**
+   * Automatically optimize image loading for website visitors on mobile devices.
+   * Refer to
+   * [our blog post](http://blog.cloudflare.com/mirage2-solving-mobile-speed) for
+   * more information.
+   */
+  export interface ZonesSchemasMirage {
+    /**
+     * ID of the zone setting.
+     */
+    id: 'mirage';
+
+    /**
+     * Current value of the zone setting.
+     */
+    value: 'on' | 'off';
+
+    /**
+     * Whether or not this setting can be modified for this zone (based on your
+     * Cloudflare plan level).
+     */
+    editable?: true | false;
+
+    /**
+     * last time this setting was modified.
+     */
+    modified_on?: string | null;
+  }
+
+  /**
+   * Enables the Opportunistic Encryption feature for a zone.
+   */
+  export interface ZonesSchemasOpportunisticEncryption {
+    /**
+     * ID of the zone setting.
+     */
+    id: 'opportunistic_encryption';
+
+    /**
+     * Current value of the zone setting.
+     */
+    value: 'on' | 'off';
+
+    /**
+     * Whether or not this setting can be modified for this zone (based on your
+     * Cloudflare plan level).
+     */
+    editable?: true | false;
+
+    /**
+     * last time this setting was modified.
+     */
+    modified_on?: string | null;
+  }
+
+  /**
+   * Cloudflare will proxy customer error pages on any 502,504 errors on origin
+   * server instead of showing a default Cloudflare error page. This does not apply
+   * to 522 errors and is limited to Enterprise Zones.
+   */
+  export interface ZonesSchemasOriginErrorPagePassThru {
+    /**
+     * ID of the zone setting.
+     */
+    id: 'origin_error_page_pass_thru';
+
+    /**
+     * Current value of the zone setting.
+     */
+    value: 'on' | 'off';
+
+    /**
+     * Whether or not this setting can be modified for this zone (based on your
+     * Cloudflare plan level).
+     */
+    editable?: true | false;
+
+    /**
+     * last time this setting was modified.
+     */
+    modified_on?: string | null;
+  }
+
+  /**
+   * Origin H2 Max Streams configures the max number of concurrent requests that
+   * Cloudflare will send within the same connection when communicating with the
+   * origin server, if the origin supports it. Note that if your origin does not
+   * support H2 multiplexing, 5xx errors may be observed, particularly 520s. Also
+   * note that the default value is `100` for all plan types except Enterprise where
+   * it is `1`. `1` means that H2 multiplexing is disabled.
+   */
+  export interface ZonesCacheRulesOriginH2MaxStreams {
+    /**
+     * Value of the zone setting.
+     */
+    id: 'origin_h2_max_streams';
+
+    /**
+     * Last time this setting was modified.
+     */
+    modified_on?: string | null;
+
+    /**
+     * Value of the Origin H2 Max Streams Setting.
+     */
+    value?: number;
+  }
+
+  /**
+   * Origin Max HTTP Setting Version sets the highest HTTP version Cloudflare will
+   * attempt to use with your origin. This setting allows Cloudflare to make HTTP/2
+   * requests to your origin. (Refer to
+   * [Enable HTTP/2 to Origin](https://developers.cloudflare.com/cache/how-to/enable-http2-to-origin/),
+   * for more information.). The default value is "2" for all plan types except
+   * Enterprise where it is "1"
+   */
+  export interface ZonesCacheRulesOriginMaxHTTPVersion {
+    /**
+     * Value of the zone setting.
+     */
+    id: 'origin_max_http_version';
+
+    /**
+     * Last time this setting was modified.
+     */
+    modified_on?: string | null;
+
+    /**
+     * Value of the Origin Max HTTP Version Setting.
+     */
+    value?: '2' | '1';
+  }
+
+  /**
+   * Removes metadata and compresses your images for faster page load times. Basic
+   * (Lossless): Reduce the size of PNG, JPEG, and GIF files - no impact on visual
+   * quality. Basic + JPEG (Lossy): Further reduce the size of JPEG files for faster
+   * image loading. Larger JPEGs are converted to progressive images, loading a
+   * lower-resolution image first and ending in a higher-resolution version. Not
+   * recommended for hi-res photography sites.
+   */
+  export interface ZonesSchemasPolish {
+    /**
+     * ID of the zone setting.
+     */
+    id: 'polish';
+
+    /**
+     * Current value of the zone setting.
+     */
+    value: 'off' | 'lossless' | 'lossy';
+
+    /**
+     * Whether or not this setting can be modified for this zone (based on your
+     * Cloudflare plan level).
+     */
+    editable?: true | false;
+
+    /**
+     * last time this setting was modified.
+     */
+    modified_on?: string | null;
+  }
+
   /**
    * Automatically replace insecure JavaScript libraries with safer and faster
    * alternatives provided under cdnjs and powered by Cloudflare. Currently supports
@@ -1852,21 +3604,22 @@ export namespace SettingEditResponse {
     modified_on?: string | null;
   }
 
-  /**
-   * [Automatic Platform Optimization for WordPress](https://developers.cloudflare.com/automatic-platform-optimization/)
-   * serves your WordPress site from Cloudflare's edge network and caches third-party
-   * fonts.
+  /**
+   * Enables or disables buffering of responses from the proxied server. Cloudflare
+   * may buffer the whole payload to deliver it at once to the client versus allowing
+   * it to be delivered in chunks. By default, the proxied server streams directly
+   * and is not buffered by Cloudflare. This is limited to Enterprise Zones.
    */
-  export interface ZonesSchemasAutomaticPlatformOptimization {
+  export interface ZonesSchemasResponseBuffering {
     /**
      * ID of the zone setting.
      */
-    id: 'automatic_platform_optimization';
+    id: 'response_buffering';
 
     /**
      * Current value of the zone setting.
      */
-    value: SettingsAPI.AutomaticPlatformOptimization;
+    value: 'on' | 'off';
 
     /**
      * Whether or not this setting can be modified for this zone (based on your
@@ -1881,18 +3634,27 @@ export namespace SettingEditResponse {
   }
 
   /**
-   * Allow SHA1 support.
+   * Rocket Loader is a general-purpose asynchronous JavaScript optimisation that
+   * prioritises rendering your content while loading your site's Javascript
+   * asynchronously. Turning on Rocket Loader will immediately improve a web page's
+   * rendering time sometimes measured as Time to First Paint (TTFP), and also the
+   * `window.onload` time (assuming there is JavaScript on the page). This can have a
+   * positive impact on your Google search ranking. When turned on, Rocket Loader
+   * will automatically defer the loading of all Javascript referenced in your HTML,
+   * with no configuration required. Refer to
+   * [Understanding Rocket Loader](https://support.cloudflare.com/hc/articles/200168056)
+   * for more information.
    */
-  export interface ZonesSha1Support {
+  export interface ZonesSchemasRocketLoader {
     /**
-     * Zone setting identifier.
+     * ID of the zone setting.
      */
-    id: 'sha1_support';
+    id: 'rocket_loader';
 
     /**
      * Current value of the zone setting.
      */
-    value: 'off' | 'on';
+    value: 'on' | 'off';
 
     /**
      * Whether or not this setting can be modified for this zone (based on your
@@ -1907,18 +3669,20 @@ export namespace SettingEditResponse {
   }
 
   /**
-   * Only allows TLS1.2.
+   * [Automatic Platform Optimization for WordPress](https://developers.cloudflare.com/automatic-platform-optimization/)
+   * serves your WordPress site from Cloudflare's edge network and caches third-party
+   * fonts.
    */
-  export interface ZonesTLS1_2Only {
+  export interface ZonesSchemasAutomaticPlatformOptimization {
     /**
-     * Zone setting identifier.
+     * ID of the zone setting.
      */
-    id: 'tls_1_2_only';
+    id: 'automatic_platform_optimization';
 
     /**
      * Current value of the zone setting.
      */
-    value: 'off' | 'on';
+    value: SettingsAPI.AutomaticPlatformOptimization;
 
     /**
      * Whether or not this setting can be modified for this zone (based on your
@@ -1931,82 +3695,23 @@ export namespace SettingEditResponse {
      */
     modified_on?: string | null;
   }
-}
-
-/**
- * 0-RTT session resumption enabled for this zone.
- */
-export type SettingGetResponse =
-  | ZeroRTT
-  | AdvancedDDoS
-  | AlwaysOnline
-  | AlwaysUseHTTPS
-  | AutomaticHTTPSRewrites
-  | Brotli
-  | BrowserCacheTTL
-  | BrowserCheck
-  | CacheLevel
-  | ChallengeTTL
-  | Ciphers
-  | SettingGetResponse.ZonesCNAMEFlattening
-  | DevelopmentMode
-  | EarlyHints
-  | SettingGetResponse.ZonesEdgeCacheTTL
-  | EmailObfuscation
-  | H2Prioritization
-  | HotlinkProtection
-  | HTTP2
-  | HTTP3
-  | ImageResizing
-  | IPGeolocation
-  | IPV6
-  | SettingGetResponse.ZonesMaxUpload
-  | MinTLSVersion
-  | Minify
-  | Mirage
-  | MobileRedirect
-  | NEL
-  | OpportunisticEncryption
-  | OpportunisticOnion
-  | OrangeToOrange
-  | OriginErrorPagePassThru
-  | Polish
-  | PrefetchPreload
-  | ProxyReadTimeout
-  | PseudoIPV4
-  | SettingGetResponse.ZonesReplaceInsecureJS
-  | ResponseBuffering
-  | RocketLoader
-  | SettingGetResponse.ZonesSchemasAutomaticPlatformOptimization
-  | SecurityHeaders
-  | SecurityLevel
-  | ServerSideExcludes
-  | SettingGetResponse.ZonesSha1Support
-  | SortQueryStringForCache
-  | SSL
-  | SSLRecommender
-  | SettingGetResponse.ZonesTLS1_2Only
-  | TLS1_3
-  | TLSClientAuth
-  | TrueClientIPHeader
-  | WAF
-  | WebP
-  | Websocket;
 
-export namespace SettingGetResponse {
   /**
-   * Whether or not cname flattening is on.
+   * Choose the appropriate security profile for your website, which will
+   * automatically adjust each of the security settings. If you choose to customize
+   * an individual security setting, the profile will become Custom.
+   * (https://support.cloudflare.com/hc/en-us/articles/200170056).
    */
-  export interface ZonesCNAMEFlattening {
+  export interface ZonesSchemasSecurityLevel {
     /**
-     * How to flatten the cname destination.
+     * ID of the zone setting.
      */
-    id: 'cname_flattening';
+    id: 'security_level';
 
     /**
      * Current value of the zone setting.
      */
-    value: 'flatten_at_root' | 'flatten_all';
+    value: 'off' | 'essentially_off' | 'low' | 'medium' | 'high' | 'under_attack';
 
     /**
      * Whether or not this setting can be modified for this zone (based on your
@@ -2021,40 +3726,18 @@ export namespace SettingGetResponse {
   }
 
   /**
-   * Time (in seconds) that a resource will be ensured to remain on Cloudflare's
-   * cache servers.
+   * Allow SHA1 support.
    */
-  export interface ZonesEdgeCacheTTL {
+  export interface ZonesSha1Support {
     /**
-     * ID of the zone setting.
+     * Zone setting identifier.
      */
-    id: 'edge_cache_ttl';
+    id: 'sha1_support';
 
     /**
      * Current value of the zone setting.
      */
-    value:
-      | 30
-      | 60
-      | 300
-      | 1200
-      | 1800
-      | 3600
-      | 7200
-      | 10800
-      | 14400
-      | 18000
-      | 28800
-      | 43200
-      | 57600
-      | 72000
-      | 86400
-      | 172800
-      | 259200
-      | 345600
-      | 432000
-      | 518400
-      | 604800;
+    value: 'off' | 'on';
 
     /**
      * Whether or not this setting can be modified for this zone (based on your
@@ -2069,18 +3752,20 @@ export namespace SettingGetResponse {
   }
 
   /**
-   * Maximum size of an allowable upload.
+   * Cloudflare will treat files with the same query strings as the same file in
+   * cache, regardless of the order of the query strings. This is limited to
+   * Enterprise Zones.
    */
-  export interface ZonesMaxUpload {
+  export interface ZonesSchemasSortQueryStringForCache {
     /**
-     * identifier of the zone setting.
+     * ID of the zone setting.
      */
-    id: 'max_upload';
+    id: 'sort_query_string_for_cache';
 
     /**
      * Current value of the zone setting.
      */
-    value: 100 | 200 | 500;
+    value: 'on' | 'off';
 
     /**
      * Whether or not this setting can be modified for this zone (based on your
@@ -2095,20 +3780,33 @@ export namespace SettingGetResponse {
   }
 
   /**
-   * Automatically replace insecure JavaScript libraries with safer and faster
-   * alternatives provided under cdnjs and powered by Cloudflare. Currently supports
-   * the following libraries: Polyfill under polyfill.io.
-   */
-  export interface ZonesReplaceInsecureJS {
+   * SSL encrypts your visitor's connection and safeguards credit card numbers and
+   * other personal data to and from your website. SSL can take up to 5 minutes to
+   * fully activate. Requires Cloudflare active on your root domain or www domain.
+   * Off: no SSL between the visitor and Cloudflare, and no SSL between Cloudflare
+   * and your web server (all HTTP traffic). Flexible: SSL between the visitor and
+   * Cloudflare -- visitor sees HTTPS on your site, but no SSL between Cloudflare and
+   * your web server. You don't need to have an SSL cert on your web server, but your
+   * vistors will still see the site as being HTTPS enabled. Full: SSL between the
+   * visitor and Cloudflare -- visitor sees HTTPS on your site, and SSL between
+   * Cloudflare and your web server. You'll need to have your own SSL cert or
+   * self-signed cert at the very least. Full (Strict): SSL between the visitor and
+   * Cloudflare -- visitor sees HTTPS on your site, and SSL between Cloudflare and
+   * your web server. You'll need to have a valid SSL certificate installed on your
+   * web server. This certificate must be signed by a certificate authority, have an
+   * expiration date in the future, and respond for the request domain name
+   * (hostname). (https://support.cloudflare.com/hc/en-us/articles/200170416).
+   */
+  export interface ZonesSchemasSSL {
     /**
      * ID of the zone setting.
      */
-    id: 'replace_insecure_js';
+    id: 'ssl';
 
     /**
      * Current value of the zone setting.
      */
-    value: 'on' | 'off';
+    value: 'off' | 'flexible' | 'full' | 'strict';
 
     /**
      * Whether or not this setting can be modified for this zone (based on your
@@ -2123,20 +3821,18 @@ export namespace SettingGetResponse {
   }
 
   /**
-   * [Automatic Platform Optimization for WordPress](https://developers.cloudflare.com/automatic-platform-optimization/)
-   * serves your WordPress site from Cloudflare's edge network and caches third-party
-   * fonts.
+   * Only allows TLS1.2.
    */
-  export interface ZonesSchemasAutomaticPlatformOptimization {
+  export interface ZonesTLS1_2Only {
     /**
-     * ID of the zone setting.
+     * Zone setting identifier.
      */
-    id: 'automatic_platform_optimization';
+    id: 'tls_1_2_only';
 
     /**
      * Current value of the zone setting.
      */
-    value: SettingsAPI.AutomaticPlatformOptimization;
+    value: 'off' | 'on';
 
     /**
      * Whether or not this setting can be modified for this zone (based on your
@@ -2151,18 +3847,19 @@ export namespace SettingGetResponse {
   }
 
   /**
-   * Allow SHA1 support.
+   * Allows customer to continue to use True Client IP (Akamai feature) in the
+   * headers we send to the origin. This is limited to Enterprise Zones.
    */
-  export interface ZonesSha1Support {
+  export interface ZonesSchemasTrueClientIPHeader {
     /**
-     * Zone setting identifier.
+     * ID of the zone setting.
      */
-    id: 'sha1_support';
+    id: 'true_client_ip_header';
 
     /**
      * Current value of the zone setting.
      */
-    value: 'off' | 'on';
+    value: 'on' | 'off';
 
     /**
      * Whether or not this setting can be modified for this zone (based on your
@@ -2177,18 +3874,27 @@ export namespace SettingGetResponse {
   }
 
   /**
-   * Only allows TLS1.2.
+   * The WAF examines HTTP requests to your website. It inspects both GET and POST
+   * requests and applies rules to help filter out illegitimate traffic from
+   * legitimate website visitors. The Cloudflare WAF inspects website addresses or
+   * URLs to detect anything out of the ordinary. If the Cloudflare WAF determines
+   * suspicious user behavior, then the WAF will 'challenge' the web visitor with a
+   * page that asks them to submit a CAPTCHA successfully to continue their action.
+   * If the challenge is failed, the action will be stopped. What this means is that
+   * Cloudflare's WAF will block any traffic identified as illegitimate before it
+   * reaches your origin web server.
+   * (https://support.cloudflare.com/hc/en-us/articles/200172016).
    */
-  export interface ZonesTLS1_2Only {
+  export interface ZonesSchemasWAF {
     /**
-     * Zone setting identifier.
+     * ID of the zone setting.
      */
-    id: 'tls_1_2_only';
+    id: 'waf';
 
     /**
      * Current value of the zone setting.
      */
-    value: 'off' | 'on';
+    value: 'on' | 'off';
 
     /**
      * Whether or not this setting can be modified for this zone (based on your
@@ -2206,61 +3912,62 @@ export namespace SettingGetResponse {
 export type SettingEditParams =
   | SettingEditParams.ZeroRTT
   | SettingEditParams.AdvancedDDoS
+  | SettingEditParams.ZonesCacheRulesAegis
   | SettingEditParams.AlwaysOnline
-  | SettingEditParams.AlwaysUseHTTPS
-  | SettingEditParams.AutomaticHTTPSRewrites
+  | SettingEditParams.ZonesSchemasAlwaysUseHTTPS
+  | SettingEditParams.ZonesSchemasAutomaticHTTPSRewrites
   | SettingEditParams.Brotli
-  | SettingEditParams.BrowserCacheTTL
-  | SettingEditParams.BrowserCheck
-  | SettingEditParams.CacheLevel
+  | SettingEditParams.ZonesSchemasBrowserCacheTTL
+  | SettingEditParams.ZonesSchemasBrowserCheck
+  | SettingEditParams.ZonesSchemasCacheLevel
   | SettingEditParams.ChallengeTTL
   | SettingEditParams.Ciphers
   | SettingEditParams.ZonesCNAMEFlattening
   | SettingEditParams.DevelopmentMode
   | SettingEditParams.EarlyHints
-  | SettingEditParams.ZonesEdgeCacheTTL
-  | SettingEditParams.EmailObfuscation
+  | SettingEditParams.ZonesSchemasEdgeCacheTTL
+  | SettingEditParams.ZonesSchemasEmailObfuscation
   | SettingEditParams.H2Prioritization
   | SettingEditParams.HotlinkProtection
   | SettingEditParams.HTTP2
   | SettingEditParams.HTTP3
   | SettingEditParams.ImageResizing
-  | SettingEditParams.IPGeolocation
+  | SettingEditParams.ZonesSchemasIPGeolocation
   | SettingEditParams.IPV6
   | SettingEditParams.ZonesMaxUpload
   | SettingEditParams.MinTLSVersion
-  | SettingEditParams.Minify
-  | SettingEditParams.Mirage
-  | SettingEditParams.MobileRedirect
+  | SettingEditParams.ZonesSchemasMirage
   | SettingEditParams.NEL
-  | SettingEditParams.OpportunisticEncryption
+  | SettingEditParams.ZonesSchemasOpportunisticEncryption
   | SettingEditParams.OpportunisticOnion
   | SettingEditParams.OrangeToOrange
-  | SettingEditParams.OriginErrorPagePassThru
-  | SettingEditParams.Polish
+  | SettingEditParams.ZonesSchemasOriginErrorPagePassThru
+  | SettingEditParams.ZonesCacheRulesOriginH2MaxStreams
+  | SettingEditParams.ZonesCacheRulesOriginMaxHTTPVersion
+  | SettingEditParams.ZonesSchemasPolish
   | SettingEditParams.PrefetchPreload
   | SettingEditParams.ProxyReadTimeout
   | SettingEditParams.PseudoIPV4
   | SettingEditParams.ZonesReplaceInsecureJS
-  | SettingEditParams.ResponseBuffering
-  | SettingEditParams.RocketLoader
+  | SettingEditParams.ZonesSchemasResponseBuffering
+  | SettingEditParams.ZonesSchemasRocketLoader
   | SettingEditParams.ZonesSchemasAutomaticPlatformOptimization
   | SettingEditParams.SecurityHeaders
-  | SettingEditParams.SecurityLevel
+  | SettingEditParams.ZonesSchemasSecurityLevel
   | SettingEditParams.ServerSideExcludes
   | SettingEditParams.ZonesSha1Support
-  | SettingEditParams.SortQueryStringForCache
-  | SettingEditParams.SSL
+  | SettingEditParams.ZonesSchemasSortQueryStringForCache
+  | SettingEditParams.ZonesSchemasSSL
   | SettingEditParams.SSLRecommender
   | SettingEditParams.ZonesTLS1_2Only
   | SettingEditParams.TLS1_3
   | SettingEditParams.TLSClientAuth
-  | SettingEditParams.TrueClientIPHeader
-  | SettingEditParams.WAF
+  | SettingEditParams.ZonesSchemasTrueClientIPHeader
+  | SettingEditParams.ZonesSchemasWAF
   | SettingEditParams.WebP
   | SettingEditParams.Websocket;
 
-export namespace SettingEditParams {
+export declare namespace SettingEditParams {
   export interface ZeroRTT {
     /**
      * Path param: Identifier
@@ -2295,6 +4002,41 @@ export namespace SettingEditParams {
     value: 'on' | 'off';
   }
 
+  export interface ZonesCacheRulesAegis {
+    /**
+     * Path param: Identifier
+     */
+    zone_id: string;
+
+    /**
+     * Body param: ID of the zone setting.
+     */
+    id: 'aegis';
+
+    /**
+     * Body param: Value of the zone setting.
+     */
+    value?: ZonesCacheRulesAegis.Value;
+  }
+
+  export namespace ZonesCacheRulesAegis {
+    /**
+     * Value of the zone setting.
+     */
+    export interface Value {
+      /**
+       * Whether the feature is enabled or not.
+       */
+      enabled?: boolean;
+
+      /**
+       * Egress pool id which refers to a grouping of dedicated egress IPs through which
+       * Cloudflare will connect to origin.
+       */
+      pool_id?: string;
+    }
+  }
+
   export interface AlwaysOnline {
     /**
      * Path param: Identifier
@@ -2312,7 +4054,7 @@ export namespace SettingEditParams {
     value: 'on' | 'off';
   }
 
-  export interface AlwaysUseHTTPS {
+  export interface ZonesSchemasAlwaysUseHTTPS {
     /**
      * Path param: Identifier
      */
@@ -2329,7 +4071,7 @@ export namespace SettingEditParams {
     value: 'on' | 'off';
   }
 
-  export interface AutomaticHTTPSRewrites {
+  export interface ZonesSchemasAutomaticHTTPSRewrites {
     /**
      * Path param: Identifier
      */
@@ -2363,7 +4105,7 @@ export namespace SettingEditParams {
     value: 'off' | 'on';
   }
 
-  export interface BrowserCacheTTL {
+  export interface ZonesSchemasBrowserCacheTTL {
     /**
      * Path param: Identifier
      */
@@ -2408,7 +4150,7 @@ export namespace SettingEditParams {
       | 31536000;
   }
 
-  export interface BrowserCheck {
+  export interface ZonesSchemasBrowserCheck {
     /**
      * Path param: Identifier
      */
@@ -2425,7 +4167,7 @@ export namespace SettingEditParams {
     value: 'on' | 'off';
   }
 
-  export interface CacheLevel {
+  export interface ZonesSchemasCacheLevel {
     /**
      * Path param: Identifier
      */
@@ -2541,7 +4283,7 @@ export namespace SettingEditParams {
     value: 'on' | 'off';
   }
 
-  export interface ZonesEdgeCacheTTL {
+  export interface ZonesSchemasEdgeCacheTTL {
     /**
      * Path param: Identifier
      */
@@ -2579,7 +4321,7 @@ export namespace SettingEditParams {
       | 604800;
   }
 
-  export interface EmailObfuscation {
+  export interface ZonesSchemasEmailObfuscation {
     /**
      * Path param: Identifier
      */
@@ -2681,7 +4423,7 @@ export namespace SettingEditParams {
     value: 'on' | 'off' | 'open';
   }
 
-  export interface IPGeolocation {
+  export interface ZonesSchemasIPGeolocation {
     /**
      * Path param: Identifier
      */
@@ -2749,46 +4491,7 @@ export namespace SettingEditParams {
     value: '1.0' | '1.1' | '1.2' | '1.3';
   }
 
-  export interface Minify {
-    /**
-     * Path param: Identifier
-     */
-    zone_id: string;
-
-    /**
-     * Body param: Zone setting identifier.
-     */
-    id: 'minify';
-
-    /**
-     * Body param: Current value of the zone setting.
-     */
-    value: SettingEditParams.Minify.Value;
-  }
-
-  export namespace Minify {
-    /**
-     * Current value of the zone setting.
-     */
-    export interface Value {
-      /**
-       * Automatically minify all CSS files for your website.
-       */
-      css?: 'on' | 'off';
-
-      /**
-       * Automatically minify all HTML files for your website.
-       */
-      html?: 'on' | 'off';
-
-      /**
-       * Automatically minify all JavaScript files for your website.
-       */
-      js?: 'on' | 'off';
-    }
-  }
-
-  export interface Mirage {
+  export interface ZonesSchemasMirage {
     /**
      * Path param: Identifier
      */
@@ -2805,49 +4508,6 @@ export namespace SettingEditParams {
     value: 'on' | 'off';
   }
 
-  export interface MobileRedirect {
-    /**
-     * Path param: Identifier
-     */
-    zone_id: string;
-
-    /**
-     * Body param: Identifier of the zone setting.
-     */
-    id: 'mobile_redirect';
-
-    /**
-     * Body param: Current value of the zone setting.
-     */
-    value: SettingEditParams.MobileRedirect.Value;
-  }
-
-  export namespace MobileRedirect {
-    /**
-     * @deprecated: Current value of the zone setting.
-     */
-    export interface Value {
-      /**
-       * Which subdomain prefix you wish to redirect visitors on mobile devices to
-       * (subdomain must already exist).
-       */
-      mobile_subdomain?: string | null;
-
-      /**
-       * Deprecated: Use Single Redirects instead
-       * https://developers.cloudflare.com/rules/url-forwarding/single-redirects/examples/#perform-mobile-redirects.
-       * Whether or not mobile redirect is enabled.
-       */
-      status?: 'on' | 'off';
-
-      /**
-       * Whether to drop the current page path and redirect to the mobile subdomain URL
-       * root, or keep the path and redirect to the same page on the mobile subdomain.
-       */
-      strip_uri?: boolean;
-    }
-  }
-
   export interface NEL {
     /**
      * Path param: Identifier
@@ -2862,7 +4522,7 @@ export namespace SettingEditParams {
     /**
      * Body param: Current value of the zone setting.
      */
-    value: SettingEditParams.NEL.Value;
+    value: NEL.Value;
   }
 
   export namespace NEL {
@@ -2874,7 +4534,7 @@ export namespace SettingEditParams {
     }
   }
 
-  export interface OpportunisticEncryption {
+  export interface ZonesSchemasOpportunisticEncryption {
     /**
      * Path param: Identifier
      */
@@ -2925,7 +4585,7 @@ export namespace SettingEditParams {
     value: 'on' | 'off';
   }
 
-  export interface OriginErrorPagePassThru {
+  export interface ZonesSchemasOriginErrorPagePassThru {
     /**
      * Path param: Identifier
      */
@@ -2942,7 +4602,41 @@ export namespace SettingEditParams {
     value: 'on' | 'off';
   }
 
-  export interface Polish {
+  export interface ZonesCacheRulesOriginH2MaxStreams {
+    /**
+     * Path param: Identifier
+     */
+    zone_id: string;
+
+    /**
+     * Body param: Value of the zone setting.
+     */
+    id: 'origin_h2_max_streams';
+
+    /**
+     * Body param: Value of the Origin H2 Max Streams Setting.
+     */
+    value?: number;
+  }
+
+  export interface ZonesCacheRulesOriginMaxHTTPVersion {
+    /**
+     * Path param: Identifier
+     */
+    zone_id: string;
+
+    /**
+     * Body param: Value of the zone setting.
+     */
+    id: 'origin_max_http_version';
+
+    /**
+     * Body param: Value of the Origin Max HTTP Version Setting.
+     */
+    value?: '2' | '1';
+  }
+
+  export interface ZonesSchemasPolish {
     /**
      * Path param: Identifier
      */
@@ -3027,7 +4721,7 @@ export namespace SettingEditParams {
     value: 'on' | 'off';
   }
 
-  export interface ResponseBuffering {
+  export interface ZonesSchemasResponseBuffering {
     /**
      * Path param: Identifier
      */
@@ -3044,7 +4738,7 @@ export namespace SettingEditParams {
     value: 'on' | 'off';
   }
 
-  export interface RocketLoader {
+  export interface ZonesSchemasRocketLoader {
     /**
      * Path param: Identifier
      */
@@ -3092,7 +4786,7 @@ export namespace SettingEditParams {
     /**
      * Body param: Current value of the zone setting.
      */
-    value: SettingEditParams.SecurityHeaders.Value;
+    value: SecurityHeaders.Value;
   }
 
   export namespace SecurityHeaders {
@@ -3139,7 +4833,7 @@ export namespace SettingEditParams {
     }
   }
 
-  export interface SecurityLevel {
+  export interface ZonesSchemasSecurityLevel {
     /**
      * Path param: Identifier
      */
@@ -3190,7 +4884,7 @@ export namespace SettingEditParams {
     value: 'off' | 'on';
   }
 
-  export interface SortQueryStringForCache {
+  export interface ZonesSchemasSortQueryStringForCache {
     /**
      * Path param: Identifier
      */
@@ -3207,7 +4901,7 @@ export namespace SettingEditParams {
     value: 'on' | 'off';
   }
 
-  export interface SSL {
+  export interface ZonesSchemasSSL {
     /**
      * Path param: Identifier
      */
@@ -3292,7 +4986,7 @@ export namespace SettingEditParams {
     value: 'on' | 'off';
   }
 
-  export interface TrueClientIPHeader {
+  export interface ZonesSchemasTrueClientIPHeader {
     /**
      * Path param: Identifier
      */
@@ -3309,7 +5003,7 @@ export namespace SettingEditParams {
     value: 'on' | 'off';
   }
 
-  export interface WAF {
+  export interface ZonesSchemasWAF {
     /**
      * Path param: Identifier
      */
@@ -3368,60 +5062,61 @@ export interface SettingGetParams {
   zone_id: string;
 }
 
-export namespace Settings {
-  export import AdvancedDDoS = SettingsAPI.AdvancedDDoS;
-  export import AlwaysOnline = SettingsAPI.AlwaysOnline;
-  export import AlwaysUseHTTPS = SettingsAPI.AlwaysUseHTTPS;
-  export import AutomaticHTTPSRewrites = SettingsAPI.AutomaticHTTPSRewrites;
-  export import AutomaticPlatformOptimization = SettingsAPI.AutomaticPlatformOptimization;
-  export import Brotli = SettingsAPI.Brotli;
-  export import BrowserCacheTTL = SettingsAPI.BrowserCacheTTL;
-  export import BrowserCheck = SettingsAPI.BrowserCheck;
-  export import CacheLevel = SettingsAPI.CacheLevel;
-  export import ChallengeTTL = SettingsAPI.ChallengeTTL;
-  export import Ciphers = SettingsAPI.Ciphers;
-  export import DevelopmentMode = SettingsAPI.DevelopmentMode;
-  export import EarlyHints = SettingsAPI.EarlyHints;
-  export import EmailObfuscation = SettingsAPI.EmailObfuscation;
-  export import FontSettings = SettingsAPI.FontSettings;
-  export import H2Prioritization = SettingsAPI.H2Prioritization;
-  export import HotlinkProtection = SettingsAPI.HotlinkProtection;
-  export import HTTP2 = SettingsAPI.HTTP2;
-  export import HTTP3 = SettingsAPI.HTTP3;
-  export import ImageResizing = SettingsAPI.ImageResizing;
-  export import IPGeolocation = SettingsAPI.IPGeolocation;
-  export import IPV6 = SettingsAPI.IPV6;
-  export import MinTLSVersion = SettingsAPI.MinTLSVersion;
-  export import Minify = SettingsAPI.Minify;
-  export import Mirage = SettingsAPI.Mirage;
-  export import MobileRedirect = SettingsAPI.MobileRedirect;
-  export import NEL = SettingsAPI.NEL;
-  export import OpportunisticEncryption = SettingsAPI.OpportunisticEncryption;
-  export import OpportunisticOnion = SettingsAPI.OpportunisticOnion;
-  export import OrangeToOrange = SettingsAPI.OrangeToOrange;
-  export import OriginErrorPagePassThru = SettingsAPI.OriginErrorPagePassThru;
-  export import OriginMaxHTTPVersion = SettingsAPI.OriginMaxHTTPVersion;
-  export import Polish = SettingsAPI.Polish;
-  export import PrefetchPreload = SettingsAPI.PrefetchPreload;
-  export import ProxyReadTimeout = SettingsAPI.ProxyReadTimeout;
-  export import PseudoIPV4 = SettingsAPI.PseudoIPV4;
-  export import ResponseBuffering = SettingsAPI.ResponseBuffering;
-  export import RocketLoader = SettingsAPI.RocketLoader;
-  export import SecurityHeaders = SettingsAPI.SecurityHeaders;
-  export import SecurityLevel = SettingsAPI.SecurityLevel;
-  export import ServerSideExcludes = SettingsAPI.ServerSideExcludes;
-  export import SortQueryStringForCache = SettingsAPI.SortQueryStringForCache;
-  export import SSL = SettingsAPI.SSL;
-  export import SSLRecommender = SettingsAPI.SSLRecommender;
-  export import TLS1_3 = SettingsAPI.TLS1_3;
-  export import TLSClientAuth = SettingsAPI.TLSClientAuth;
-  export import TrueClientIPHeader = SettingsAPI.TrueClientIPHeader;
-  export import WAF = SettingsAPI.WAF;
-  export import WebP = SettingsAPI.WebP;
-  export import Websocket = SettingsAPI.Websocket;
-  export import ZeroRTT = SettingsAPI.ZeroRTT;
-  export import SettingEditResponse = SettingsAPI.SettingEditResponse;
-  export import SettingGetResponse = SettingsAPI.SettingGetResponse;
-  export import SettingEditParams = SettingsAPI.SettingEditParams;
-  export import SettingGetParams = SettingsAPI.SettingGetParams;
+export declare namespace Settings {
+  export {
+    type AdvancedDDoS as AdvancedDDoS,
+    type Aegis as Aegis,
+    type AlwaysOnline as AlwaysOnline,
+    type AlwaysUseHTTPS as AlwaysUseHTTPS,
+    type AutomaticHTTPSRewrites as AutomaticHTTPSRewrites,
+    type AutomaticPlatformOptimization as AutomaticPlatformOptimization,
+    type Brotli as Brotli,
+    type BrowserCacheTTL as BrowserCacheTTL,
+    type BrowserCheck as BrowserCheck,
+    type CacheLevel as CacheLevel,
+    type ChallengeTTL as ChallengeTTL,
+    type Ciphers as Ciphers,
+    type DevelopmentMode as DevelopmentMode,
+    type EarlyHints as EarlyHints,
+    type EmailObfuscation as EmailObfuscation,
+    type FontSettings as FontSettings,
+    type H2Prioritization as H2Prioritization,
+    type HotlinkProtection as HotlinkProtection,
+    type HTTP2 as HTTP2,
+    type HTTP3 as HTTP3,
+    type ImageResizing as ImageResizing,
+    type IPGeolocation as IPGeolocation,
+    type IPV6 as IPV6,
+    type MinTLSVersion as MinTLSVersion,
+    type Mirage as Mirage,
+    type NEL as NEL,
+    type OpportunisticEncryption as OpportunisticEncryption,
+    type OpportunisticOnion as OpportunisticOnion,
+    type OrangeToOrange as OrangeToOrange,
+    type OriginErrorPagePassThru as OriginErrorPagePassThru,
+    type OriginMaxHTTPVersion as OriginMaxHTTPVersion,
+    type Polish as Polish,
+    type PrefetchPreload as PrefetchPreload,
+    type ProxyReadTimeout as ProxyReadTimeout,
+    type PseudoIPV4 as PseudoIPV4,
+    type ResponseBuffering as ResponseBuffering,
+    type RocketLoader as RocketLoader,
+    type SecurityHeaders as SecurityHeaders,
+    type SecurityLevel as SecurityLevel,
+    type ServerSideExcludes as ServerSideExcludes,
+    type SortQueryStringForCache as SortQueryStringForCache,
+    type SSL as SSL,
+    type SSLRecommender as SSLRecommender,
+    type TLS1_3 as TLS1_3,
+    type TLSClientAuth as TLSClientAuth,
+    type TrueClientIPHeader as TrueClientIPHeader,
+    type WAF as WAF,
+    type WebP as WebP,
+    type Websocket as Websocket,
+    type ZeroRTT as ZeroRTT,
+    type SettingEditResponse as SettingEditResponse,
+    type SettingGetResponse as SettingGetResponse,
+    type SettingEditParams as SettingEditParams,
+    type SettingGetParams as SettingGetParams,
+  };
 }