cloudflare 4.0.0 → 4.2.0

package/src/resources/zero-trust/access/logs/scim/updates.ts

@@ -0,0 +1,158 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+import { APIResource } from '../../../../../resource';
+import * as Core from '../../../../../core';
+import { SinglePage } from '../../../../../pagination';
+
+export class Updates extends APIResource {
+  /**
+   * Lists Access SCIM update logs that maintain a record of updates made to User and
+   * Group resources synced to Cloudflare via the System for Cross-domain Identity
+   * Management (SCIM).
+   */
+  list(
+    params: UpdateListParams,
+    options?: Core.RequestOptions,
+  ): Core.PagePromise<UpdateListResponsesSinglePage, UpdateListResponse> {
+    const { account_id, ...query } = params;
+    return this._client.getAPIList(
+      `/accounts/${account_id}/access/logs/scim/updates`,
+      UpdateListResponsesSinglePage,
+      { query, ...options },
+    );
+  }
+}
+
+export class UpdateListResponsesSinglePage extends SinglePage<UpdateListResponse> {}
+
+export interface UpdateListResponse {
+  /**
+   * The unique Cloudflare-generated Id of the SCIM resource.
+   */
+  cf_resource_id?: string;
+
+  /**
+   * The error message which is generated when the status of the SCIM request is
+   * 'FAILURE'.
+   */
+  error_description?: string;
+
+  /**
+   * The unique Id of the IdP that has SCIM enabled.
+   */
+  idp_id?: string;
+
+  /**
+   * The IdP-generated Id of the SCIM resource.
+   */
+  idp_resource_id?: string;
+
+  logged_at?: string;
+
+  /**
+   * The JSON-encoded string body of the SCIM request.
+   */
+  request_body?: string;
+
+  /**
+   * The request method of the SCIM request.
+   */
+  request_method?: string;
+
+  /**
+   * The display name of the SCIM Group resource if it exists.
+   */
+  resource_group_name?: string;
+
+  /**
+   * The resource type of the SCIM request.
+   */
+  resource_type?: string;
+
+  /**
+   * The email address of the SCIM User resource if it exists.
+   */
+  resource_user_email?: string;
+
+  /**
+   * The status of the SCIM request.
+   */
+  status?: string;
+}
+
+export interface UpdateListParams {
+  /**
+   * Path param: Identifier
+   */
+  account_id: string;
+
+  /**
+   * Query param: The unique Id of the IdP that has SCIM enabled.
+   */
+  idp_id: Array<string>;
+
+  /**
+   * Query param: The unique Cloudflare-generated Id of the SCIM resource.
+   */
+  cf_resource_id?: string;
+
+  /**
+   * Query param: The chronological order used to sort the logs.
+   */
+  direction?: 'desc' | 'asc';
+
+  /**
+   * Query param: The IdP-generated Id of the SCIM resource.
+   */
+  idp_resource_id?: string;
+
+  /**
+   * Query param: The maximum number of update logs to retrieve.
+   */
+  limit?: number;
+
+  /**
+   * Query param: The request method of the SCIM request.
+   */
+  request_method?: Array<'DELETE' | 'PATCH' | 'POST' | 'PUT'>;
+
+  /**
+   * Query param: The display name of the SCIM Group resource.
+   */
+  resource_group_name?: string;
+
+  /**
+   * Query param: The resource type of the SCIM request.
+   */
+  resource_type?: Array<'USER' | 'GROUP'>;
+
+  /**
+   * Query param: The email address of the SCIM User resource.
+   */
+  resource_user_email?: string;
+
+  /**
+   * Query param: the timestamp of the earliest update log.
+   */
+  since?: string;
+
+  /**
+   * Query param: The status of the SCIM request.
+   */
+  status?: Array<'FAILURE' | 'SUCCESS'>;
+
+  /**
+   * Query param: the timestamp of the most-recent update log.
+   */
+  until?: string;
+}
+
+Updates.UpdateListResponsesSinglePage = UpdateListResponsesSinglePage;
+
+export declare namespace Updates {
+  export {
+    type UpdateListResponse as UpdateListResponse,
+    UpdateListResponsesSinglePage as UpdateListResponsesSinglePage,
+    type UpdateListParams as UpdateListParams,
+  };
+}

package/src/resources/zero-trust/access/logs/scim.ts

@@ -0,0 +1,3 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+export * from './scim/index';

package/src/resources/zero-trust/access/logs.ts

@@ -0,0 +1,3 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+export * from './logs/index';

package/src/resources/zero-trust/access/policies.ts

@@ -2,8 +2,8 @@
 
 import { APIResource } from '../../../resource';
 import * as Core from '../../../core';
-import * as AccessAPI from './access';
 import * as ApplicationsAPI from './applications/applications';
+import * as ApplicationsPoliciesAPI from './applications/policies';
 import { SinglePage } from '../../../pagination';
 
 export class Policies extends APIResource {
@@ -154,13 +154,13 @@ export interface Policy {
    * Rules evaluated with a NOT logical operator. To match the policy, a user cannot
    * meet any of the Exclude rules.
    */
-  exclude?: Array<AccessAPI.AccessRule>;
+  exclude?: Array<ApplicationsPoliciesAPI.AccessRule>;
 
   /**
    * Rules evaluated with an OR logical operator. A user needs to meet only one of
    * the Include rules.
    */
-  include?: Array<AccessAPI.AccessRule>;
+  include?: Array<ApplicationsPoliciesAPI.AccessRule>;
 
   /**
    * Require this application to be served in an isolated browser for users matching
@@ -192,7 +192,7 @@ export interface Policy {
    * Rules evaluated with an AND logical operator. To match the policy, a user must
    * meet all of the Require rules.
    */
-  require?: Array<AccessAPI.AccessRule>;
+  require?: Array<ApplicationsPoliciesAPI.AccessRule>;
 
   updated_at?: string;
 }
@@ -253,13 +253,13 @@ export interface PolicyCreateResponse {
    * Rules evaluated with a NOT logical operator. To match the policy, a user cannot
    * meet any of the Exclude rules.
    */
-  exclude?: Array<AccessAPI.AccessRule>;
+  exclude?: Array<ApplicationsPoliciesAPI.AccessRule>;
 
   /**
    * Rules evaluated with an OR logical operator. A user needs to meet only one of
    * the Include rules.
    */
-  include?: Array<AccessAPI.AccessRule>;
+  include?: Array<ApplicationsPoliciesAPI.AccessRule>;
 
   /**
    * Require this application to be served in an isolated browser for users matching
@@ -287,7 +287,7 @@ export interface PolicyCreateResponse {
    * Rules evaluated with an AND logical operator. To match the policy, a user must
    * meet all of the Require rules.
    */
-  require?: Array<AccessAPI.AccessRule>;
+  require?: Array<ApplicationsPoliciesAPI.AccessRule>;
 
   reusable?: true;
 
@@ -335,13 +335,13 @@ export interface PolicyUpdateResponse {
    * Rules evaluated with a NOT logical operator. To match the policy, a user cannot
    * meet any of the Exclude rules.
    */
-  exclude?: Array<AccessAPI.AccessRule>;
+  exclude?: Array<ApplicationsPoliciesAPI.AccessRule>;
 
   /**
    * Rules evaluated with an OR logical operator. A user needs to meet only one of
    * the Include rules.
    */
-  include?: Array<AccessAPI.AccessRule>;
+  include?: Array<ApplicationsPoliciesAPI.AccessRule>;
 
   /**
    * Require this application to be served in an isolated browser for users matching
@@ -369,7 +369,7 @@ export interface PolicyUpdateResponse {
    * Rules evaluated with an AND logical operator. To match the policy, a user must
    * meet all of the Require rules.
    */
-  require?: Array<AccessAPI.AccessRule>;
+  require?: Array<ApplicationsPoliciesAPI.AccessRule>;
 
   reusable?: true;
 
@@ -417,13 +417,13 @@ export interface PolicyListResponse {
    * Rules evaluated with a NOT logical operator. To match the policy, a user cannot
    * meet any of the Exclude rules.
    */
-  exclude?: Array<AccessAPI.AccessRule>;
+  exclude?: Array<ApplicationsPoliciesAPI.AccessRule>;
 
   /**
    * Rules evaluated with an OR logical operator. A user needs to meet only one of
    * the Include rules.
    */
-  include?: Array<AccessAPI.AccessRule>;
+  include?: Array<ApplicationsPoliciesAPI.AccessRule>;
 
   /**
    * Require this application to be served in an isolated browser for users matching
@@ -451,7 +451,7 @@ export interface PolicyListResponse {
    * Rules evaluated with an AND logical operator. To match the policy, a user must
    * meet all of the Require rules.
    */
-  require?: Array<AccessAPI.AccessRule>;
+  require?: Array<ApplicationsPoliciesAPI.AccessRule>;
 
   reusable?: true;
 
@@ -506,13 +506,13 @@ export interface PolicyGetResponse {
    * Rules evaluated with a NOT logical operator. To match the policy, a user cannot
    * meet any of the Exclude rules.
    */
-  exclude?: Array<AccessAPI.AccessRule>;
+  exclude?: Array<ApplicationsPoliciesAPI.AccessRule>;
 
   /**
    * Rules evaluated with an OR logical operator. A user needs to meet only one of
    * the Include rules.
    */
-  include?: Array<AccessAPI.AccessRule>;
+  include?: Array<ApplicationsPoliciesAPI.AccessRule>;
 
   /**
    * Require this application to be served in an isolated browser for users matching
@@ -540,7 +540,7 @@ export interface PolicyGetResponse {
    * Rules evaluated with an AND logical operator. To match the policy, a user must
    * meet all of the Require rules.
    */
-  require?: Array<AccessAPI.AccessRule>;
+  require?: Array<ApplicationsPoliciesAPI.AccessRule>;
 
   reusable?: true;
 
@@ -570,7 +570,7 @@ export interface PolicyCreateParams {
    * Body param: Rules evaluated with an OR logical operator. A user needs to meet
    * only one of the Include rules.
    */
-  include: Array<AccessAPI.AccessRuleParam>;
+  include: Array<ApplicationsPoliciesAPI.AccessRuleParam>;
 
   /**
    * Body param: The name of the Access policy.
@@ -592,7 +592,7 @@ export interface PolicyCreateParams {
    * Body param: Rules evaluated with a NOT logical operator. To match the policy, a
    * user cannot meet any of the Exclude rules.
    */
-  exclude?: Array<AccessAPI.AccessRuleParam>;
+  exclude?: Array<ApplicationsPoliciesAPI.AccessRuleParam>;
 
   /**
    * Body param: Require this application to be served in an isolated browser for
@@ -617,7 +617,7 @@ export interface PolicyCreateParams {
    * Body param: Rules evaluated with an AND logical operator. To match the policy, a
    * user must meet all of the Require rules.
    */
-  require?: Array<AccessAPI.AccessRuleParam>;
+  require?: Array<ApplicationsPoliciesAPI.AccessRuleParam>;
 
   /**
    * Body param: The amount of time that tokens issued for the application will be
@@ -643,7 +643,7 @@ export interface PolicyUpdateParams {
    * Body param: Rules evaluated with an OR logical operator. A user needs to meet
    * only one of the Include rules.
    */
-  include: Array<AccessAPI.AccessRuleParam>;
+  include: Array<ApplicationsPoliciesAPI.AccessRuleParam>;
 
   /**
    * Body param: The name of the Access policy.
@@ -665,7 +665,7 @@ export interface PolicyUpdateParams {
    * Body param: Rules evaluated with a NOT logical operator. To match the policy, a
    * user cannot meet any of the Exclude rules.
    */
-  exclude?: Array<AccessAPI.AccessRuleParam>;
+  exclude?: Array<ApplicationsPoliciesAPI.AccessRuleParam>;
 
   /**
    * Body param: Require this application to be served in an isolated browser for
@@ -690,7 +690,7 @@ export interface PolicyUpdateParams {
    * Body param: Rules evaluated with an AND logical operator. To match the policy, a
    * user must meet all of the Require rules.
    */
-  require?: Array<AccessAPI.AccessRuleParam>;
+  require?: Array<ApplicationsPoliciesAPI.AccessRuleParam>;
 
   /**
    * Body param: The amount of time that tokens issued for the application will be

package/src/resources/zero-trust/access/service-tokens.ts

@@ -3,7 +3,7 @@
 import { APIResource } from '../../../resource';
 import { isRequestOptions } from '../../../core';
 import * as Core from '../../../core';
-import { CloudflareError } from "../../../error";
+import { CloudflareError } from '../../../error';
 import { SinglePage } from '../../../pagination';
 
 export class ServiceTokens extends APIResource {
@@ -257,6 +257,8 @@ export interface ServiceToken {
 
   expires_at?: string;
 
+  last_seen_at?: string;
+
   /**
    * The name of the service token.
    */

package/src/resources/zero-trust/access/users/index.ts

@@ -1,6 +1,13 @@
 // File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
 
-export { AccessUsersSinglePage, Users, type AccessUser, type UserListParams } from './users';
+export {
+  AccessUsersSinglePage,
+  UserListResponsesSinglePage,
+  Users,
+  type AccessUser,
+  type UserListResponse,
+  type UserListParams,
+} from './users';
 export {
   ActiveSessionListResponsesSinglePage,
   ActiveSessions,

package/src/resources/zero-trust/access/users/users.ts

@@ -35,18 +35,89 @@ export class Users extends APIResource {
   list(
     params: UserListParams,
     options?: Core.RequestOptions,
-  ): Core.PagePromise<AccessUsersSinglePage, AccessUser> {
+  ): Core.PagePromise<UserListResponsesSinglePage, UserListResponse> {
     const { account_id, ...query } = params;
-    return this._client.getAPIList(`/accounts/${account_id}/access/users`, AccessUsersSinglePage, {
+    return this._client.getAPIList(`/accounts/${account_id}/access/users`, UserListResponsesSinglePage, {
       query,
       ...options,
     });
   }
 }
 
+export class UserListResponsesSinglePage extends SinglePage<UserListResponse> {}
+
 export class AccessUsersSinglePage extends SinglePage<AccessUser> {}
 
 export interface AccessUser {
+  /**
+   * The unique Cloudflare-generated Id of the SCIM resource.
+   */
+  id?: string;
+
+  /**
+   * Determines the status of the SCIM User resource.
+   */
+  active?: boolean;
+
+  /**
+   * The name of the SCIM User resource.
+   */
+  displayName?: string;
+
+  emails?: Array<AccessUser.Email>;
+
+  /**
+   * The IdP-generated Id of the SCIM resource.
+   */
+  externalId?: string;
+
+  /**
+   * The metadata of the SCIM resource.
+   */
+  meta?: AccessUser.Meta;
+
+  /**
+   * The list of URIs which indicate the attributes contained within a SCIM resource.
+   */
+  schemas?: Array<string>;
+}
+
+export namespace AccessUser {
+  export interface Email {
+    /**
+     * Indicates if the email address is the primary email belonging to the SCIM User
+     * resource.
+     */
+    primary?: boolean;
+
+    /**
+     * Indicates the type of the email address.
+     */
+    type?: string;
+
+    /**
+     * The email address of the SCIM User resource.
+     */
+    value?: string;
+  }
+
+  /**
+   * The metadata of the SCIM resource.
+   */
+  export interface Meta {
+    /**
+     * The timestamp of when the SCIM resource was created.
+     */
+    created?: string;
+
+    /**
+     * The timestamp of when the SCIM resource was last modified.
+     */
+    lastModified?: string;
+  }
+}
+
+export interface UserListResponse {
   /**
    * UUID
    */
@@ -119,7 +190,7 @@ export interface UserListParams {
   search?: string;
 }
 
-Users.AccessUsersSinglePage = AccessUsersSinglePage;
+Users.UserListResponsesSinglePage = UserListResponsesSinglePage;
 Users.ActiveSessions = ActiveSessions;
 Users.ActiveSessionListResponsesSinglePage = ActiveSessionListResponsesSinglePage;
 Users.LastSeenIdentity = LastSeenIdentity;
@@ -129,7 +200,8 @@ Users.FailedLoginListResponsesSinglePage = FailedLoginListResponsesSinglePage;
 export declare namespace Users {
   export {
     type AccessUser as AccessUser,
-    AccessUsersSinglePage as AccessUsersSinglePage,
+    type UserListResponse as UserListResponse,
+    UserListResponsesSinglePage as UserListResponsesSinglePage,
     type UserListParams as UserListParams,
   };
 

package/src/resources/zero-trust/access/users.ts

@@ -0,0 +1,3 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+export * from './users/index';

package/src/resources/zero-trust/access.ts

@@ -0,0 +1,3 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+export * from './access/index';

package/src/resources/zero-trust/devices/devices.ts

@@ -24,7 +24,6 @@ import {
   DeviceNetworksSinglePage,
   NetworkCreateParams,
   NetworkDeleteParams,
-  NetworkDeleteResponse,
   NetworkGetParams,
   NetworkListParams,
   NetworkUpdateParams,
@@ -410,7 +409,6 @@ export declare namespace Devices {
   export {
     Networks as Networks,
     type DeviceNetwork as DeviceNetwork,
-    type NetworkDeleteResponse as NetworkDeleteResponse,
     DeviceNetworksSinglePage as DeviceNetworksSinglePage,
     type NetworkCreateParams as NetworkCreateParams,
     type NetworkUpdateParams as NetworkUpdateParams,

package/src/resources/zero-trust/devices/index.ts

@@ -4,7 +4,6 @@ export {
   DeviceNetworksSinglePage,
   Networks,
   type DeviceNetwork,
-  type NetworkDeleteResponse,
   type NetworkCreateParams,
   type NetworkUpdateParams,
   type NetworkListParams,
@@ -71,6 +70,9 @@ export {
   type SettingEditParams,
 } from './settings';
 export {
+  SplitTunnelExcludesSinglePage,
+  SplitTunnelIncludesSinglePage,
+  FallbackDomainsSinglePage,
   SettingsPoliciesSinglePage,
   Policies,
   type DevicePolicyCertificates,

package/src/resources/zero-trust/devices/networks.ts

@@ -57,14 +57,13 @@ export class Networks extends APIResource {
     networkId: string,
     params: NetworkDeleteParams,
     options?: Core.RequestOptions,
-  ): Core.APIPromise<NetworkDeleteResponse | null> {
+  ): Core.PagePromise<DeviceNetworksSinglePage, DeviceNetwork> {
     const { account_id } = params;
-    return (
-      this._client.delete(
-        `/accounts/${account_id}/devices/networks/${networkId}`,
-        options,
-      ) as Core.APIPromise<{ result: NetworkDeleteResponse | null }>
-    )._thenUnwrap((obj) => obj.result);
+    return this._client.getAPIList(
+      `/accounts/${account_id}/devices/networks/${networkId}`,
+      DeviceNetworksSinglePage,
+      { method: 'delete', ...options },
+    );
   }
 
   /**
@@ -130,8 +129,6 @@ export namespace DeviceNetwork {
   }
 }
 
-export type NetworkDeleteResponse = Array<DeviceNetwork>;
-
 export interface NetworkCreateParams {
   /**
    * Path param:
@@ -139,7 +136,8 @@ export interface NetworkCreateParams {
   account_id: string;
 
   /**
-   * Body param:
+   * Body param: The configuration object containing information for the WARP client
+   * to detect the managed network.
    */
   config: NetworkCreateParams.Config;
 
@@ -155,6 +153,10 @@ export interface NetworkCreateParams {
 }
 
 export namespace NetworkCreateParams {
+  /**
+   * The configuration object containing information for the WARP client to detect
+   * the managed network.
+   */
   export interface Config {
     /**
      * A network address of the form "host:port" that the WARP client will use to
@@ -178,7 +180,8 @@ export interface NetworkUpdateParams {
   account_id: string;
 
   /**
-   * Body param:
+   * Body param: The configuration object containing information for the WARP client
+   * to detect the managed network.
    */
   config?: NetworkUpdateParams.Config;
 
@@ -194,6 +197,10 @@ export interface NetworkUpdateParams {
 }
 
 export namespace NetworkUpdateParams {
+  /**
+   * The configuration object containing information for the WARP client to detect
+   * the managed network.
+   */
   export interface Config {
     /**
      * A network address of the form "host:port" that the WARP client will use to
@@ -227,7 +234,6 @@ Networks.DeviceNetworksSinglePage = DeviceNetworksSinglePage;
 export declare namespace Networks {
   export {
     type DeviceNetwork as DeviceNetwork,
-    type NetworkDeleteResponse as NetworkDeleteResponse,
     DeviceNetworksSinglePage as DeviceNetworksSinglePage,
     type NetworkCreateParams as NetworkCreateParams,
     type NetworkUpdateParams as NetworkUpdateParams,