cloudflare 4.5.0 → 5.0.0

package/src/resources/zero-trust/gateway/rules.ts

@@ -265,15 +265,10 @@ export type GatewayFilterParam = 'http' | 'dns' | 'l4' | 'egress' | 'dns_resolve
 
 export interface GatewayRule {
   /**
-   * The API resource UUID.
-   */
-  id?: string;
-
-  /**
-   * The action to preform when the associated traffic, identity, and device posture
+   * The action to perform when the associated traffic, identity, and device posture
    * expressions are either absent or evaluate to `true`.
    */
-  action?:
+  action:
     | 'on'
     | 'off'
     | 'allow'
@@ -291,6 +286,43 @@ export interface GatewayRule {
     | 'quarantine'
     | 'redirect';
 
+  /**
+   * True if the rule is enabled.
+   */
+  enabled: boolean;
+
+  /**
+   * The protocol or layer to evaluate the traffic, identity, and device. posture
+   * expressions.
+   */
+  filters: Array<GatewayFilter>;
+
+  /**
+   * The name of the rule.
+   */
+  name: string;
+
+  /**
+   * Precedence sets the order of your rules. Lower values indicate higher
+   * precedence. At each processing phase, applicable rules are evaluated in
+   * ascending order of this value. Refer to
+   * [Order of enforcement](http://developers.cloudflare.com/learning-paths/secure-internet-traffic/understand-policies/order-of-enforcement/#manage-precedence-with-terraform)
+   * docs on how to manage precedence via Terraform.
+   */
+  precedence: number;
+
+  /**
+   * The wirefilter expression used for traffic matching. The API automatically
+   * formats and sanitizes this expression. This returns a normalized version that
+   * may differ from your input and cause Terraform state drift.
+   */
+  traffic: string;
+
+  /**
+   * The API resource UUID.
+   */
+  id?: string;
+
   created_at?: string;
 
   /**
@@ -304,15 +336,12 @@ export interface GatewayRule {
   description?: string;
 
   /**
-   * The wirefilter expression used for device posture check matching.
+   * The wirefilter expression used for device posture check matching. The API
+   * automatically formats and sanitizes this expression. This returns a normalized
+   * version that may differ from your input and cause Terraform state drift.
    */
   device_posture?: string;
 
-  /**
-   * True if the rule is enabled.
-   */
-  enabled?: boolean;
-
   /**
    * The expiration time stamp and default duration of a DNS policy. Takes precedence
    * over the policy's `schedule` configuration, if any.
@@ -322,29 +351,22 @@ export interface GatewayRule {
   expiration?: GatewayRule.Expiration | null;
 
   /**
-   * The protocol or layer to evaluate the traffic, identity, and device posture
-   * expressions.
-   */
-  filters?: Array<GatewayFilter>;
-
-  /**
-   * The wirefilter expression used for identity matching.
+   * The wirefilter expression used for identity matching. The API automatically
+   * formats and sanitizes this expression. This returns a normalized version that
+   * may differ from your input and cause Terraform state drift.
    */
   identity?: string;
 
   /**
-   * The name of the rule.
+   * The rule cannot be shared via the Orgs API.
    */
-  name?: string;
+  not_sharable?: boolean;
 
   /**
-   * Precedence sets the order of your rules. Lower values indicate higher
-   * precedence. At each processing phase, applicable rules are evaluated in
-   * ascending order of this value. Refer to
-   * [Order of enforcement](http://developers.cloudflare.com/learning-paths/secure-internet-traffic/understand-policies/order-of-enforcement/#manage-precedence-with-terraform)
-   * docs on how to manage precedence via Terraform.
+   * The rule was shared via the Orgs API and cannot be edited by the current
+   * account.
    */
-  precedence?: number;
+  read_only?: boolean;
 
   /**
    * Additional settings that modify the rule's action.
@@ -358,14 +380,14 @@ export interface GatewayRule {
   schedule?: Schedule | null;
 
   /**
-   * The wirefilter expression used for traffic matching.
+   * account tag of account that created the rule.
    */
-  traffic?: string;
+  source_account?: string;
 
   updated_at?: string;
 
   /**
-   * version number of the rule
+   * version number of the rule.
    */
   version?: number;
 
@@ -417,7 +439,7 @@ export interface RuleSetting {
    * Add custom headers to allowed requests, in the form of key-value pairs. Keys are
    * header names, pointing to an array with its header value(s).
    */
-  add_headers?: { [key: string]: string } | null;
+  add_headers?: { [key: string]: Array<string> } | null;
 
   /**
    * Set by parent MSP accounts to enable their children to bypass this rule.
@@ -432,7 +454,7 @@ export interface RuleSetting {
   /**
    * Configure how browser isolation behaves.
    */
-  biso_admin_controls?: RuleSetting.BISOAdminControls | null;
+  biso_admin_controls?: RuleSetting.BISOAdminControls;
 
   /**
    * Custom block page settings. If missing/null, blocking will use the the account
@@ -449,7 +471,7 @@ export interface RuleSetting {
    * The text describing why this block occurred, displayed on the custom block page
    * (if enabled).
    */
-  block_reason?: string;
+  block_reason?: string | null;
 
   /**
    * Set by children MSP accounts to bypass their parent's rules.
@@ -501,7 +523,7 @@ export interface RuleSetting {
   ip_indicator_feeds?: boolean;
 
   /**
-   * Send matching traffic to the supplied destination IP address and port.
+   * Send matching traffic to the supplied destination IP address. and port.
    */
   l4override?: RuleSetting.L4override | null;
 
@@ -527,12 +549,12 @@ export interface RuleSetting {
   payload_log?: RuleSetting.PayloadLog | null;
 
   /**
-   * Settings that apply to quarantine rules
+   * Settings that apply to quarantine rules.
    */
   quarantine?: RuleSetting.Quarantine | null;
 
   /**
-   * Settings that apply to redirect rules
+   * Settings that apply to redirect rules.
    */
   redirect?: RuleSetting.Redirect | null;
 
@@ -648,12 +670,12 @@ export namespace RuleSetting {
    */
   export interface BlockPage {
     /**
-     * URI to which the user will be redirected
+     * URI to which the user will be redirected.
      */
     target_uri: string;
 
     /**
-     * If true, context information will be passed as query parameters
+     * If true, context information will be passed as query parameters.
      */
     include_context?: boolean;
   }
@@ -663,7 +685,9 @@ export namespace RuleSetting {
    */
   export interface CheckSession {
     /**
-     * Configure how fresh the session needs to be to be considered valid.
+     * Configure how fresh the session needs to be to be considered valid. The API
+     * automatically formats and sanitizes this expression. This returns a normalized
+     * version that may differ from your input and cause Terraform state drift.
      */
     duration?: string;
 
@@ -710,7 +734,7 @@ export namespace RuleSetting {
   }
 
   /**
-   * Send matching traffic to the supplied destination IP address and port.
+   * Send matching traffic to the supplied destination IP address. and port.
    */
   export interface L4override {
     /**
@@ -730,12 +754,12 @@ export namespace RuleSetting {
    */
   export interface NotificationSettings {
     /**
-     * Set notification on
+     * Set notification on.
      */
     enabled?: boolean;
 
     /**
-     * If true, context information will be passed as query parameters
+     * If true, context information will be passed as query parameters.
      */
     include_context?: boolean;
 
@@ -762,7 +786,7 @@ export namespace RuleSetting {
   }
 
   /**
-   * Settings that apply to quarantine rules
+   * Settings that apply to quarantine rules.
    */
   export interface Quarantine {
     /**
@@ -786,22 +810,22 @@ export namespace RuleSetting {
   }
 
   /**
-   * Settings that apply to redirect rules
+   * Settings that apply to redirect rules.
    */
   export interface Redirect {
     /**
-     * URI to which the user will be redirected
+     * URI to which the user will be redirected.
      */
     target_uri: string;
 
     /**
-     * If true, context information will be passed as query parameters
+     * If true, context information will be passed as query parameters.
      */
     include_context?: boolean;
 
     /**
      * If true, the path and query parameters from the original request will be
-     * appended to target_uri
+     * appended to target_uri.
      */
     preserve_path_and_query?: boolean;
   }
@@ -846,7 +870,7 @@ export interface RuleSettingParam {
    * Add custom headers to allowed requests, in the form of key-value pairs. Keys are
    * header names, pointing to an array with its header value(s).
    */
-  add_headers?: { [key: string]: string } | null;
+  add_headers?: { [key: string]: Array<string> } | null;
 
   /**
    * Set by parent MSP accounts to enable their children to bypass this rule.
@@ -861,7 +885,7 @@ export interface RuleSettingParam {
   /**
    * Configure how browser isolation behaves.
    */
-  biso_admin_controls?: RuleSettingParam.BISOAdminControls | null;
+  biso_admin_controls?: RuleSettingParam.BISOAdminControls;
 
   /**
    * Custom block page settings. If missing/null, blocking will use the the account
@@ -878,7 +902,7 @@ export interface RuleSettingParam {
    * The text describing why this block occurred, displayed on the custom block page
    * (if enabled).
    */
-  block_reason?: string;
+  block_reason?: string | null;
 
   /**
    * Set by children MSP accounts to bypass their parent's rules.
@@ -930,7 +954,7 @@ export interface RuleSettingParam {
   ip_indicator_feeds?: boolean;
 
   /**
-   * Send matching traffic to the supplied destination IP address and port.
+   * Send matching traffic to the supplied destination IP address. and port.
    */
   l4override?: RuleSettingParam.L4override | null;
 
@@ -956,12 +980,12 @@ export interface RuleSettingParam {
   payload_log?: RuleSettingParam.PayloadLog | null;
 
   /**
-   * Settings that apply to quarantine rules
+   * Settings that apply to quarantine rules.
    */
   quarantine?: RuleSettingParam.Quarantine | null;
 
   /**
-   * Settings that apply to redirect rules
+   * Settings that apply to redirect rules.
    */
   redirect?: RuleSettingParam.Redirect | null;
 
@@ -1077,12 +1101,12 @@ export namespace RuleSettingParam {
    */
   export interface BlockPage {
     /**
-     * URI to which the user will be redirected
+     * URI to which the user will be redirected.
      */
     target_uri: string;
 
     /**
-     * If true, context information will be passed as query parameters
+     * If true, context information will be passed as query parameters.
      */
     include_context?: boolean;
   }
@@ -1092,7 +1116,9 @@ export namespace RuleSettingParam {
    */
   export interface CheckSession {
     /**
-     * Configure how fresh the session needs to be to be considered valid.
+     * Configure how fresh the session needs to be to be considered valid. The API
+     * automatically formats and sanitizes this expression. This returns a normalized
+     * version that may differ from your input and cause Terraform state drift.
      */
     duration?: string;
 
@@ -1139,7 +1165,7 @@ export namespace RuleSettingParam {
   }
 
   /**
-   * Send matching traffic to the supplied destination IP address and port.
+   * Send matching traffic to the supplied destination IP address. and port.
    */
   export interface L4override {
     /**
@@ -1159,12 +1185,12 @@ export namespace RuleSettingParam {
    */
   export interface NotificationSettings {
     /**
-     * Set notification on
+     * Set notification on.
      */
     enabled?: boolean;
 
     /**
-     * If true, context information will be passed as query parameters
+     * If true, context information will be passed as query parameters.
      */
     include_context?: boolean;
 
@@ -1191,7 +1217,7 @@ export namespace RuleSettingParam {
   }
 
   /**
-   * Settings that apply to quarantine rules
+   * Settings that apply to quarantine rules.
    */
   export interface Quarantine {
     /**
@@ -1215,22 +1241,22 @@ export namespace RuleSettingParam {
   }
 
   /**
-   * Settings that apply to redirect rules
+   * Settings that apply to redirect rules.
    */
   export interface Redirect {
     /**
-     * URI to which the user will be redirected
+     * URI to which the user will be redirected.
      */
     target_uri: string;
 
     /**
-     * If true, context information will be passed as query parameters
+     * If true, context information will be passed as query parameters.
      */
     include_context?: boolean;
 
     /**
      * If true, the path and query parameters from the original request will be
-     * appended to target_uri
+     * appended to target_uri.
      */
     preserve_path_and_query?: boolean;
   }
@@ -1408,7 +1434,7 @@ export interface RuleCreateParams {
   account_id: string;
 
   /**
-   * Body param: The action to preform when the associated traffic, identity, and
+   * Body param: The action to perform when the associated traffic, identity, and
    * device posture expressions are either absent or evaluate to `true`.
    */
   action:
@@ -1441,6 +1467,9 @@ export interface RuleCreateParams {
 
   /**
    * Body param: The wirefilter expression used for device posture check matching.
+   * The API automatically formats and sanitizes this expression. This returns a
+   * normalized version that may differ from your input and cause Terraform state
+   * drift.
    */
   device_posture?: string;
 
@@ -1458,13 +1487,15 @@ export interface RuleCreateParams {
   expiration?: RuleCreateParams.Expiration | null;
 
   /**
-   * Body param: The protocol or layer to evaluate the traffic, identity, and device
+   * Body param: The protocol or layer to evaluate the traffic, identity, and device.
    * posture expressions.
    */
   filters?: Array<GatewayFilterParam>;
 
   /**
-   * Body param: The wirefilter expression used for identity matching.
+   * Body param: The wirefilter expression used for identity matching. The API
+   * automatically formats and sanitizes this expression. This returns a normalized
+   * version that may differ from your input and cause Terraform state drift.
    */
   identity?: string;
 
@@ -1489,7 +1520,9 @@ export interface RuleCreateParams {
   schedule?: ScheduleParam | null;
 
   /**
-   * Body param: The wirefilter expression used for traffic matching.
+   * Body param: The wirefilter expression used for traffic matching. The API
+   * automatically formats and sanitizes this expression. This returns a normalized
+   * version that may differ from your input and cause Terraform state drift.
    */
   traffic?: string;
 }
@@ -1530,7 +1563,7 @@ export interface RuleUpdateParams {
   account_id: string;
 
   /**
-   * Body param: The action to preform when the associated traffic, identity, and
+   * Body param: The action to perform when the associated traffic, identity, and
    * device posture expressions are either absent or evaluate to `true`.
    */
   action:
@@ -1563,6 +1596,9 @@ export interface RuleUpdateParams {
 
   /**
    * Body param: The wirefilter expression used for device posture check matching.
+   * The API automatically formats and sanitizes this expression. This returns a
+   * normalized version that may differ from your input and cause Terraform state
+   * drift.
    */
   device_posture?: string;
 
@@ -1580,13 +1616,15 @@ export interface RuleUpdateParams {
   expiration?: RuleUpdateParams.Expiration | null;
 
   /**
-   * Body param: The protocol or layer to evaluate the traffic, identity, and device
+   * Body param: The protocol or layer to evaluate the traffic, identity, and device.
    * posture expressions.
    */
   filters?: Array<GatewayFilterParam>;
 
   /**
-   * Body param: The wirefilter expression used for identity matching.
+   * Body param: The wirefilter expression used for identity matching. The API
+   * automatically formats and sanitizes this expression. This returns a normalized
+   * version that may differ from your input and cause Terraform state drift.
    */
   identity?: string;
 
@@ -1611,7 +1649,9 @@ export interface RuleUpdateParams {
   schedule?: ScheduleParam | null;
 
   /**
-   * Body param: The wirefilter expression used for traffic matching.
+   * Body param: The wirefilter expression used for traffic matching. The API
+   * automatically formats and sanitizes this expression. This returns a normalized
+   * version that may differ from your input and cause Terraform state drift.
    */
   traffic?: string;
 }

package/src/resources/zero-trust/identity-providers/identity-providers.ts

@@ -7,7 +7,7 @@ import * as IdentityProvidersAPI from './identity-providers';
 import * as SCIMAPI from './scim/scim';
 import { SCIM } from './scim/scim';
 import { CloudflareError } from '../../../error';
-import { SinglePage } from '../../../pagination';
+import { V4PagePaginationArray, type V4PagePaginationArrayParams } from '../../../pagination';
 
 export class IdentityProviders extends APIResource {
   scim: SCIMAPI.SCIM = new SCIMAPI.SCIM(this._client);
@@ -118,14 +118,14 @@ export class IdentityProviders extends APIResource {
   list(
     params?: IdentityProviderListParams,
     options?: Core.RequestOptions,
-  ): Core.PagePromise<IdentityProviderListResponsesSinglePage, IdentityProviderListResponse>;
+  ): Core.PagePromise<IdentityProviderListResponsesV4PagePaginationArray, IdentityProviderListResponse>;
   list(
     options?: Core.RequestOptions,
-  ): Core.PagePromise<IdentityProviderListResponsesSinglePage, IdentityProviderListResponse>;
+  ): Core.PagePromise<IdentityProviderListResponsesV4PagePaginationArray, IdentityProviderListResponse>;
   list(
     params: IdentityProviderListParams | Core.RequestOptions = {},
     options?: Core.RequestOptions,
-  ): Core.PagePromise<IdentityProviderListResponsesSinglePage, IdentityProviderListResponse> {
+  ): Core.PagePromise<IdentityProviderListResponsesV4PagePaginationArray, IdentityProviderListResponse> {
     if (isRequestOptions(params)) {
       return this.list({}, params);
     }
@@ -148,7 +148,7 @@ export class IdentityProviders extends APIResource {
         };
     return this._client.getAPIList(
       `/${accountOrZone}/${accountOrZoneId}/access/identity_providers`,
-      IdentityProviderListResponsesSinglePage,
+      IdentityProviderListResponsesV4PagePaginationArray,
       { query, ...options },
     );
   }
@@ -259,7 +259,7 @@ export class IdentityProviders extends APIResource {
   }
 }
 
-export class IdentityProviderListResponsesSinglePage extends SinglePage<IdentityProviderListResponse> {}
+export class IdentityProviderListResponsesV4PagePaginationArray extends V4PagePaginationArray<IdentityProviderListResponse> {}
 
 export interface AzureAD {
   /**
@@ -4689,7 +4689,7 @@ export declare namespace IdentityProviderUpdateParams {
   }
 }
 
-export interface IdentityProviderListParams {
+export interface IdentityProviderListParams extends V4PagePaginationArrayParams {
   /**
    * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
    * Zone ID.
@@ -4733,7 +4733,8 @@ export interface IdentityProviderGetParams {
   zone_id?: string;
 }
 
-IdentityProviders.IdentityProviderListResponsesSinglePage = IdentityProviderListResponsesSinglePage;
+IdentityProviders.IdentityProviderListResponsesV4PagePaginationArray =
+  IdentityProviderListResponsesV4PagePaginationArray;
 IdentityProviders.SCIM = SCIM;
 
 export declare namespace IdentityProviders {
@@ -4745,7 +4746,7 @@ export declare namespace IdentityProviders {
     type IdentityProviderType as IdentityProviderType,
     type IdentityProviderListResponse as IdentityProviderListResponse,
     type IdentityProviderDeleteResponse as IdentityProviderDeleteResponse,
-    IdentityProviderListResponsesSinglePage as IdentityProviderListResponsesSinglePage,
+    IdentityProviderListResponsesV4PagePaginationArray as IdentityProviderListResponsesV4PagePaginationArray,
     type IdentityProviderCreateParams as IdentityProviderCreateParams,
     type IdentityProviderUpdateParams as IdentityProviderUpdateParams,
     type IdentityProviderListParams as IdentityProviderListParams,

package/src/resources/zero-trust/identity-providers/index.ts

@@ -1,7 +1,7 @@
 // File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
 
 export {
-  IdentityProviderListResponsesSinglePage,
+  IdentityProviderListResponsesV4PagePaginationArray,
   IdentityProviders,
   type AzureAD,
   type GenericOAuthConfig,

package/src/resources/zero-trust/identity-providers/scim/groups.ts

@@ -3,7 +3,8 @@
 import { APIResource } from '../../../../resource';
 import * as Core from '../../../../core';
 import * as GroupsAPI from '../../access/groups';
-import { ZeroTrustGroupsSinglePage } from '../../access/groups';
+import { ZeroTrustGroupsV4PagePaginationArray } from '../../access/groups';
+import { type V4PagePaginationArrayParams } from '../../../../pagination';
 
 export class Groups extends APIResource {
   /**
@@ -25,17 +26,17 @@ export class Groups extends APIResource {
     identityProviderId: string,
     params: GroupListParams,
     options?: Core.RequestOptions,
-  ): Core.PagePromise<ZeroTrustGroupsSinglePage, GroupsAPI.ZeroTrustGroup> {
+  ): Core.PagePromise<ZeroTrustGroupsV4PagePaginationArray, GroupsAPI.ZeroTrustGroup> {
     const { account_id, ...query } = params;
     return this._client.getAPIList(
       `/accounts/${account_id}/access/identity_providers/${identityProviderId}/scim/groups`,
-      ZeroTrustGroupsSinglePage,
+      ZeroTrustGroupsV4PagePaginationArray,
       { query, ...options },
     );
   }
 }
 
-export interface GroupListParams {
+export interface GroupListParams extends V4PagePaginationArrayParams {
   /**
    * Path param: Identifier.
    */
@@ -63,4 +64,4 @@ export declare namespace Groups {
   export { type GroupListParams as GroupListParams };
 }
 
-export { ZeroTrustGroupsSinglePage };
+export { ZeroTrustGroupsV4PagePaginationArray };

package/src/resources/zero-trust/identity-providers/scim/users.ts

@@ -3,7 +3,8 @@
 import { APIResource } from '../../../../resource';
 import * as Core from '../../../../core';
 import * as UsersAPI from '../../access/users/users';
-import { AccessUsersSinglePage } from '../../access/users/users';
+import { AccessUsersV4PagePaginationArray } from '../../access/users/users';
+import { type V4PagePaginationArrayParams } from '../../../../pagination';
 
 export class Users extends APIResource {
   /**
@@ -25,17 +26,17 @@ export class Users extends APIResource {
     identityProviderId: string,
     params: UserListParams,
     options?: Core.RequestOptions,
-  ): Core.PagePromise<AccessUsersSinglePage, UsersAPI.AccessUser> {
+  ): Core.PagePromise<AccessUsersV4PagePaginationArray, UsersAPI.AccessUser> {
     const { account_id, ...query } = params;
     return this._client.getAPIList(
       `/accounts/${account_id}/access/identity_providers/${identityProviderId}/scim/users`,
-      AccessUsersSinglePage,
+      AccessUsersV4PagePaginationArray,
       { query, ...options },
     );
   }
 }
 
-export interface UserListParams {
+export interface UserListParams extends V4PagePaginationArrayParams {
   /**
    * Path param: Identifier.
    */
@@ -73,4 +74,4 @@ export declare namespace Users {
   export { type UserListParams as UserListParams };
 }
 
-export { AccessUsersSinglePage };
+export { AccessUsersV4PagePaginationArray };

package/src/resources/zero-trust/index.ts

@@ -32,7 +32,7 @@ export {
   type GatewayListParams,
 } from './gateway/index';
 export {
-  IdentityProviderListResponsesSinglePage,
+  IdentityProviderListResponsesV4PagePaginationArray,
   IdentityProviders,
   type AzureAD,
   type GenericOAuthConfig,

package/src/resources/zero-trust/networks/virtual-networks.ts

@@ -211,6 +211,13 @@ export interface VirtualNetworkListParams {
    */
   is_default?: boolean;
 
+  /**
+   * Query param: If `true`, only include the default virtual network. If `false`,
+   * exclude the default virtual network. If empty, all virtual networks will be
+   * included.
+   */
+  is_default_network?: boolean;
+
   /**
    * Query param: If `true`, only include deleted virtual networks. If `false`,
    * exclude deleted virtual networks. If empty, all virtual networks will be