cloudflare 5.1.0 → 5.2.0

package/src/resources/zero-trust/access/bookmarks.ts

@@ -107,8 +107,6 @@ export interface Bookmark {
    */
   app_launcher_visible?: boolean;
 
-  created_at?: string;
-
   /**
    * The domain of the Bookmark application.
    */
@@ -123,8 +121,6 @@ export interface Bookmark {
    * The name of the Bookmark application.
    */
   name?: string;
-
-  updated_at?: string;
 }
 
 export interface BookmarkDeleteResponse {

package/src/resources/zero-trust/access/certificates/certificates.ts

@@ -277,8 +277,6 @@ export interface Certificate {
    */
   associated_hostnames?: Array<AssociatedHostnames>;
 
-  created_at?: string;
-
   expires_on?: string;
 
   /**
@@ -290,8 +288,6 @@ export interface Certificate {
    * The name of the certificate.
    */
   name?: string;
-
-  updated_at?: string;
 }
 
 export interface CertificateDeleteResponse {

package/src/resources/zero-trust/access/custom-pages.ts

@@ -161,19 +161,10 @@ export interface CustomPage {
    */
   type: 'identity_denied' | 'forbidden';
 
-  /**
-   * Number of apps the custom page is assigned to.
-   */
-  app_count?: number;
-
-  created_at?: string;
-
   /**
    * UUID.
    */
   uid?: string;
-
-  updated_at?: string;
 }
 
 export interface CustomPageWithoutHTML {
@@ -187,19 +178,10 @@ export interface CustomPageWithoutHTML {
    */
   type: 'identity_denied' | 'forbidden';
 
-  /**
-   * Number of apps the custom page is assigned to.
-   */
-  app_count?: number;
-
-  created_at?: string;
-
   /**
    * UUID.
    */
   uid?: string;
-
-  updated_at?: string;
 }
 
 export interface CustomPageDeleteResponse {
@@ -229,11 +211,6 @@ export interface CustomPageCreateParams {
    * Body param: Custom page type.
    */
   type: 'identity_denied' | 'forbidden';
-
-  /**
-   * Body param: Number of apps the custom page is assigned to.
-   */
-  app_count?: number;
 }
 
 export interface CustomPageUpdateParams {
@@ -256,11 +233,6 @@ export interface CustomPageUpdateParams {
    * Body param: Custom page type.
    */
   type: 'identity_denied' | 'forbidden';
-
-  /**
-   * Body param: Number of apps the custom page is assigned to.
-   */
-  app_count?: number;
 }
 
 export interface CustomPageListParams extends V4PagePaginationArrayParams {

package/src/resources/zero-trust/access/groups.ts

@@ -307,8 +307,6 @@ export interface GroupCreateResponse {
    */
   id?: string;
 
-  created_at?: string;
-
   /**
    * Rules evaluated with a NOT logical operator. To match a policy, a user cannot
    * meet any of the Exclude rules.
@@ -337,8 +335,6 @@ export interface GroupCreateResponse {
    * meet all of the Require rules.
    */
   require?: Array<PoliciesAPI.AccessRule>;
-
-  updated_at?: string;
 }
 
 export interface GroupUpdateResponse {
@@ -347,8 +343,6 @@ export interface GroupUpdateResponse {
    */
   id?: string;
 
-  created_at?: string;
-
   /**
    * Rules evaluated with a NOT logical operator. To match a policy, a user cannot
    * meet any of the Exclude rules.
@@ -377,8 +371,6 @@ export interface GroupUpdateResponse {
    * meet all of the Require rules.
    */
   require?: Array<PoliciesAPI.AccessRule>;
-
-  updated_at?: string;
 }
 
 export interface GroupListResponse {
@@ -387,8 +379,6 @@ export interface GroupListResponse {
    */
   id?: string;
 
-  created_at?: string;
-
   /**
    * Rules evaluated with a NOT logical operator. To match a policy, a user cannot
    * meet any of the Exclude rules.
@@ -417,8 +407,6 @@ export interface GroupListResponse {
    * meet all of the Require rules.
    */
   require?: Array<PoliciesAPI.AccessRule>;
-
-  updated_at?: string;
 }
 
 export interface GroupDeleteResponse {
@@ -434,8 +422,6 @@ export interface GroupGetResponse {
    */
   id?: string;
 
-  created_at?: string;
-
   /**
    * Rules evaluated with a NOT logical operator. To match a policy, a user cannot
    * meet any of the Exclude rules.
@@ -464,8 +450,6 @@ export interface GroupGetResponse {
    * meet all of the Require rules.
    */
   require?: Array<PoliciesAPI.AccessRule>;
-
-  updated_at?: string;
 }
 
 export interface GroupCreateParams {

package/src/resources/zero-trust/access/service-tokens.ts

@@ -286,12 +286,12 @@ export class ServiceTokens extends APIResource {
     params: ServiceTokenRotateParams,
     options?: Core.RequestOptions,
   ): Core.APIPromise<ServiceTokenRotateResponse> {
-    const { account_id } = params;
+    const { account_id, ...body } = params;
     return (
-      this._client.post(
-        `/accounts/${account_id}/access/service_tokens/${serviceTokenId}/rotate`,
-        options,
-      ) as Core.APIPromise<{ result: ServiceTokenRotateResponse }>
+      this._client.post(`/accounts/${account_id}/access/service_tokens/${serviceTokenId}/rotate`, {
+        body,
+        ...options,
+      }) as Core.APIPromise<{ result: ServiceTokenRotateResponse }>
     )._thenUnwrap((obj) => obj.result);
   }
 }
@@ -310,8 +310,6 @@ export interface ServiceToken {
    */
   client_id?: string;
 
-  created_at?: string;
-
   /**
    * The duration for how long the service token will be valid. Must be in the format
    * `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. The
@@ -321,14 +319,10 @@ export interface ServiceToken {
 
   expires_at?: string;
 
-  last_seen_at?: string;
-
   /**
    * The name of the service token.
    */
   name?: string;
-
-  updated_at?: string;
 }
 
 export interface ServiceTokenCreateResponse {
@@ -349,8 +343,6 @@ export interface ServiceTokenCreateResponse {
    */
   client_secret?: string;
 
-  created_at?: string;
-
   /**
    * The duration for how long the service token will be valid. Must be in the format
    * `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. The
@@ -362,8 +354,6 @@ export interface ServiceTokenCreateResponse {
    * The name of the service token.
    */
   name?: string;
-
-  updated_at?: string;
 }
 
 export interface ServiceTokenRotateResponse {
@@ -384,8 +374,6 @@ export interface ServiceTokenRotateResponse {
    */
   client_secret?: string;
 
-  created_at?: string;
-
   /**
    * The duration for how long the service token will be valid. Must be in the format
    * `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. The
@@ -397,8 +385,6 @@ export interface ServiceTokenRotateResponse {
    * The name of the service token.
    */
   name?: string;
-
-  updated_at?: string;
 }
 
 export interface ServiceTokenCreateParams {
@@ -419,12 +405,29 @@ export interface ServiceTokenCreateParams {
    */
   zone_id?: string;
 
+  /**
+   * Body param: A version number identifying the current `client_secret` associated
+   * with the service token. Incrementing it triggers a rotation; the previous secret
+   * will still be accepted until the time indicated by
+   * `previous_client_secret_expires_at`.
+   */
+  client_secret_version?: number;
+
   /**
    * Body param: The duration for how long the service token will be valid. Must be
    * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
    * m, h. The default is 1 year in hours (8760h).
    */
   duration?: string;
+
+  /**
+   * Body param: The expiration of the previous `client_secret`. This can be modified
+   * at any point after a rotation. For example, you may extend it further into the
+   * future if you need more time to update services with the new secret; or move it
+   * into the past to immediately invalidate the previous token in case of
+   * compromise.
+   */
+  previous_client_secret_expires_at?: string;
 }
 
 export interface ServiceTokenUpdateParams {
@@ -440,6 +443,14 @@ export interface ServiceTokenUpdateParams {
    */
   zone_id?: string;
 
+  /**
+   * Body param: A version number identifying the current `client_secret` associated
+   * with the service token. Incrementing it triggers a rotation; the previous secret
+   * will still be accepted until the time indicated by
+   * `previous_client_secret_expires_at`.
+   */
+  client_secret_version?: number;
+
   /**
    * Body param: The duration for how long the service token will be valid. Must be
    * in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s,
@@ -451,6 +462,15 @@ export interface ServiceTokenUpdateParams {
    * Body param: The name of the service token.
    */
   name?: string;
+
+  /**
+   * Body param: The expiration of the previous `client_secret`. This can be modified
+   * at any point after a rotation. For example, you may extend it further into the
+   * future if you need more time to update services with the new secret; or move it
+   * into the past to immediately invalidate the previous token in case of
+   * compromise.
+   */
+  previous_client_secret_expires_at?: string;
 }
 
 export interface ServiceTokenListParams extends V4PagePaginationArrayParams {
@@ -510,9 +530,16 @@ export interface ServiceTokenRefreshParams {
 
 export interface ServiceTokenRotateParams {
   /**
-   * Identifier.
+   * Path param: Identifier.
    */
   account_id: string;
+
+  /**
+   * Body param: The expiration of the previous `client_secret`. If not provided, it
+   * defaults to the current timestamp in order to immediately expire the previous
+   * secret.
+   */
+  previous_client_secret_expires_at?: string;
 }
 
 ServiceTokens.ServiceTokensV4PagePaginationArray = ServiceTokensV4PagePaginationArray;

package/src/resources/zero-trust/access/tags.ts

@@ -127,15 +127,6 @@ export interface Tag {
    * The name of the tag
    */
   name: string;
-
-  /**
-   * The number of applications that have this tag
-   */
-  app_count?: number;
-
-  created_at?: string;
-
-  updated_at?: string;
 }
 
 export interface TagDeleteResponse {

package/src/resources/zero-trust/devices/devices_.ts

@@ -72,12 +72,12 @@ export class Devices extends APIResource {
     params: DeviceGetParams,
     options?: Core.RequestOptions,
   ): Core.APIPromise<DeviceGetResponse> {
-    const { account_id } = params;
+    const { account_id, ...query } = params;
     return (
-      this._client.get(
-        `/accounts/${account_id}/devices/physical-devices/${deviceId}`,
-        options,
-      ) as Core.APIPromise<{ result: DeviceGetResponse }>
+      this._client.get(`/accounts/${account_id}/devices/physical-devices/${deviceId}`, {
+        query,
+        ...options,
+      }) as Core.APIPromise<{ result: DeviceGetResponse }>
     )._thenUnwrap((obj) => obj.result);
   }
 
@@ -165,6 +165,11 @@ export interface DeviceListResponse {
    */
   hardware_id?: string | null;
 
+  /**
+   * The last seen registration for the device.
+   */
+  last_seen_registration?: DeviceListResponse.LastSeenRegistration | null;
+
   /**
    * The last user to use the WARP device.
    */
@@ -208,6 +213,49 @@ export interface DeviceListResponse {
 }
 
 export namespace DeviceListResponse {
+  /**
+   * The last seen registration for the device.
+   */
+  export interface LastSeenRegistration {
+    /**
+     * A summary of the device profile evaluated for the registration.
+     */
+    policy?: LastSeenRegistration.Policy | null;
+  }
+
+  export namespace LastSeenRegistration {
+    /**
+     * A summary of the device profile evaluated for the registration.
+     */
+    export interface Policy {
+      /**
+       * The ID of the device settings profile.
+       */
+      id: string;
+
+      /**
+       * Whether the device settings profile is the default profile for the account.
+       */
+      default: boolean;
+
+      /**
+       * Whether the device settings profile was deleted.
+       */
+      deleted: boolean;
+
+      /**
+       * The name of the device settings profile.
+       */
+      name: string;
+
+      /**
+       * The RFC3339 timestamp of when the device settings profile last changed for the
+       * registration.
+       */
+      updated_at: string;
+    }
+  }
+
   /**
    * The last user to use the WARP device.
    */
@@ -286,6 +334,11 @@ export interface DeviceGetResponse {
    */
   hardware_id?: string | null;
 
+  /**
+   * The last seen registration for the device.
+   */
+  last_seen_registration?: DeviceGetResponse.LastSeenRegistration | null;
+
   /**
    * The last user to use the WARP device.
    */
@@ -329,6 +382,49 @@ export interface DeviceGetResponse {
 }
 
 export namespace DeviceGetResponse {
+  /**
+   * The last seen registration for the device.
+   */
+  export interface LastSeenRegistration {
+    /**
+     * A summary of the device profile evaluated for the registration.
+     */
+    policy?: LastSeenRegistration.Policy | null;
+  }
+
+  export namespace LastSeenRegistration {
+    /**
+     * A summary of the device profile evaluated for the registration.
+     */
+    export interface Policy {
+      /**
+       * The ID of the device settings profile.
+       */
+      id: string;
+
+      /**
+       * Whether the device settings profile is the default profile for the account.
+       */
+      default: boolean;
+
+      /**
+       * Whether the device settings profile was deleted.
+       */
+      deleted: boolean;
+
+      /**
+       * The name of the device settings profile.
+       */
+      name: string;
+
+      /**
+       * The RFC3339 timestamp of when the device settings profile last changed for the
+       * registration.
+       */
+      updated_at: string;
+    }
+  }
+
   /**
    * The last user to use the WARP device.
    */
@@ -370,7 +466,9 @@ export interface DeviceListParams extends CursorPaginationParams {
   active_registrations?: 'include' | 'only' | 'exclude';
 
   /**
-   * Query param:
+   * Query param: Comma-separated list of additional information that should be
+   * included in the device response. Supported values are:
+   * "last_seen_registration.policy".
    */
   include?: string;
 
@@ -428,7 +526,17 @@ export interface DeviceDeleteParams {
 }
 
 export interface DeviceGetParams {
+  /**
+   * Path param:
+   */
   account_id: string;
+
+  /**
+   * Query param: Comma-separated list of additional information that should be
+   * included in the device response. Supported values are:
+   * "last_seen_registration.policy".
+   */
+  include?: string;
 }
 
 export interface DeviceRevokeParams {

package/src/resources/zero-trust/devices/registrations.ts

@@ -98,12 +98,12 @@ export class Registrations extends APIResource {
     params: RegistrationGetParams,
     options?: Core.RequestOptions,
   ): Core.APIPromise<RegistrationGetResponse> {
-    const { account_id } = params;
+    const { account_id, ...query } = params;
     return (
-      this._client.get(
-        `/accounts/${account_id}/devices/registrations/${registrationId}`,
-        options,
-      ) as Core.APIPromise<{ result: RegistrationGetResponse }>
+      this._client.get(`/accounts/${account_id}/devices/registrations/${registrationId}`, {
+        query,
+        ...options,
+      }) as Core.APIPromise<{ result: RegistrationGetResponse }>
     )._thenUnwrap((obj) => obj.result);
   }
 
@@ -206,6 +206,11 @@ export interface RegistrationListResponse {
    */
   key_type?: string | null;
 
+  /**
+   * The device settings profile assigned to this registration.
+   */
+  policy?: RegistrationListResponse.Policy;
+
   /**
    * The RFC3339 timestamp when the registration was revoked.
    */
@@ -240,6 +245,37 @@ export namespace RegistrationListResponse {
     client_version?: string;
   }
 
+  /**
+   * The device settings profile assigned to this registration.
+   */
+  export interface Policy {
+    /**
+     * The ID of the device settings profile.
+     */
+    id: string;
+
+    /**
+     * Whether the device settings profile is the default profile for the account.
+     */
+    default: boolean;
+
+    /**
+     * Whether the device settings profile was deleted.
+     */
+    deleted: boolean;
+
+    /**
+     * The name of the device settings profile.
+     */
+    name: string;
+
+    /**
+     * The RFC3339 timestamp of when the device settings profile last changed for the
+     * registration.
+     */
+    updated_at: string;
+  }
+
   export interface User {
     /**
      * UUID.
@@ -308,6 +344,11 @@ export interface RegistrationGetResponse {
    */
   key_type?: string | null;
 
+  /**
+   * The device settings profile assigned to this registration.
+   */
+  policy?: RegistrationGetResponse.Policy;
+
   /**
    * The RFC3339 timestamp when the registration was revoked.
    */
@@ -342,6 +383,37 @@ export namespace RegistrationGetResponse {
     client_version?: string;
   }
 
+  /**
+   * The device settings profile assigned to this registration.
+   */
+  export interface Policy {
+    /**
+     * The ID of the device settings profile.
+     */
+    id: string;
+
+    /**
+     * Whether the device settings profile is the default profile for the account.
+     */
+    default: boolean;
+
+    /**
+     * Whether the device settings profile was deleted.
+     */
+    deleted: boolean;
+
+    /**
+     * The name of the device settings profile.
+     */
+    name: string;
+
+    /**
+     * The RFC3339 timestamp of when the device settings profile last changed for the
+     * registration.
+     */
+    updated_at: string;
+  }
+
   export interface User {
     /**
      * UUID.
@@ -381,7 +453,8 @@ export interface RegistrationListParams extends CursorPaginationParams {
   device?: RegistrationListParams.Device;
 
   /**
-   * Query param:
+   * Query param: Comma-separated list of additional information that should be
+   * included in the registration response. Supported values are: "policy".
    */
   include?: string;
 
@@ -456,7 +529,16 @@ export interface RegistrationBulkDeleteParams {
 }
 
 export interface RegistrationGetParams {
+  /**
+   * Path param:
+   */
   account_id: string;
+
+  /**
+   * Query param: Comma-separated list of additional information that should be
+   * included in the registration response. Supported values are: "policy".
+   */
+  include?: string;
 }
 
 export interface RegistrationRevokeParams {