cloudflare 6.0.0 → 6.1.0

package/src/resources/security-center/insights/classification.ts

@@ -0,0 +1,127 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+import { APIResource } from '../../../resource';
+import * as Core from '../../../core';
+import { CloudflareError } from '../../../error';
+
+export class Classification extends APIResource {
+  /**
+   * Updates the user classification for a Security Center insight. Valid values are
+   * 'false_positive' or 'accept_risk'. To reset, set classification to null. Cannot
+   * change directly between classification values - must reset to null first.
+   *
+   * @example
+   * ```ts
+   * const classification =
+   *   await client.securityCenter.insights.classification.update(
+   *     'issue_id',
+   *     { account_id: 'account_id' },
+   *   );
+   * ```
+   */
+  update(
+    issueId: string,
+    params: ClassificationUpdateParams,
+    options?: Core.RequestOptions,
+  ): Core.APIPromise<ClassificationUpdateResponse> {
+    const { account_id, zone_id, ...body } = params;
+    if (!account_id && !zone_id) {
+      throw new CloudflareError('You must provide either account_id or zone_id.');
+    }
+    if (account_id && zone_id) {
+      throw new CloudflareError('You cannot provide both account_id and zone_id.');
+    }
+    const { accountOrZone, accountOrZoneId } =
+      account_id ?
+        {
+          accountOrZone: 'accounts',
+          accountOrZoneId: account_id,
+        }
+      : {
+          accountOrZone: 'zones',
+          accountOrZoneId: zone_id,
+        };
+    return this._client.patch(
+      `/${accountOrZone}/${accountOrZoneId}/security-center/insights/${issueId}/classification`,
+      { body, ...options },
+    );
+  }
+}
+
+export interface ClassificationUpdateResponse {
+  errors: Array<ClassificationUpdateResponse.Error>;
+
+  messages: Array<ClassificationUpdateResponse.Message>;
+
+  /**
+   * Whether the API call was successful.
+   */
+  success: true;
+}
+
+export namespace ClassificationUpdateResponse {
+  export interface Error {
+    code: number;
+
+    message: string;
+
+    documentation_url?: string;
+
+    source?: Error.Source;
+  }
+
+  export namespace Error {
+    export interface Source {
+      pointer?: string;
+    }
+  }
+
+  export interface Message {
+    code: number;
+
+    message: string;
+
+    documentation_url?: string;
+
+    source?: Message.Source;
+  }
+
+  export namespace Message {
+    export interface Source {
+      pointer?: string;
+    }
+  }
+}
+
+export interface ClassificationUpdateParams {
+  /**
+   * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+   * Zone ID.
+   */
+  account_id?: string;
+
+  /**
+   * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+   * Account ID.
+   */
+  zone_id?: string;
+
+  /**
+   * Body param: User-defined classification for the insight. Can be
+   * 'false_positive', 'accept_risk', 'other', or null.
+   */
+  classification?: 'false_positive' | 'accept_risk' | 'other' | null;
+
+  /**
+   * Body param: Rationale for the classification change. Required when
+   * classification is 'accept_risk' or 'other'.
+   */
+  rationale?: string;
+}
+
+export declare namespace Classification {
+  export {
+    type ClassificationUpdateResponse as ClassificationUpdateResponse,
+    type ClassificationUpdateParams as ClassificationUpdateParams,
+  };
+}

package/src/resources/security-center/insights/context.ts

@@ -0,0 +1,46 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+import { APIResource } from '../../../resource';
+import * as Core from '../../../core';
+
+export class Context extends APIResource {
+  /**
+   * Returns the full context payload for an insight. This endpoint is used for
+   * insights with large payloads that are not included inline in the list response.
+   *
+   * @example
+   * ```ts
+   * const context =
+   *   await client.securityCenter.insights.context.get(
+   *     'issue_id',
+   *     { account_id: '023e105f4ecef8ad9ca31a8372d0c353' },
+   *   );
+   * ```
+   */
+  get(
+    issueId: string,
+    params: ContextGetParams,
+    options?: Core.RequestOptions,
+  ): Core.APIPromise<ContextGetResponse> {
+    const { account_id } = params;
+    return (
+      this._client.get(
+        `/accounts/${account_id}/security-center/insights/${issueId}/context`,
+        options,
+      ) as Core.APIPromise<{ result: ContextGetResponse }>
+    )._thenUnwrap((obj) => obj.result);
+  }
+}
+
+export type ContextGetResponse = { [key: string]: unknown };
+
+export interface ContextGetParams {
+  /**
+   * Identifier.
+   */
+  account_id: string;
+}
+
+export declare namespace Context {
+  export { type ContextGetResponse as ContextGetResponse, type ContextGetParams as ContextGetParams };
+}

package/src/resources/security-center/insights/index.ts

@@ -1,6 +1,21 @@
 // File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
 
+export {
+  AuditLogListResponsesCursorPagination,
+  AuditLogListByInsightResponsesCursorPagination,
+  AuditLogs,
+  type AuditLogListResponse,
+  type AuditLogListByInsightResponse,
+  type AuditLogListParams,
+  type AuditLogListByInsightParams,
+} from './audit-logs';
 export { Class, type ClassGetResponse, type ClassGetParams } from './class';
+export {
+  Classification,
+  type ClassificationUpdateResponse,
+  type ClassificationUpdateParams,
+} from './classification';
+export { Context, type ContextGetResponse, type ContextGetParams } from './context';
 export {
   InsightListResponsesV4PagePagination,
   Insights,

package/src/resources/security-center/insights/insights.ts

@@ -4,8 +4,22 @@ import { APIResource } from '../../../resource';
 import { isRequestOptions } from '../../../core';
 import * as Core from '../../../core';
 import * as IssuesAPI from '../../intel/attack-surface-report/issues';
+import * as AuditLogsAPI from './audit-logs';
+import {
+  AuditLogListByInsightParams,
+  AuditLogListByInsightResponse,
+  AuditLogListByInsightResponsesCursorPagination,
+  AuditLogListParams,
+  AuditLogListResponse,
+  AuditLogListResponsesCursorPagination,
+  AuditLogs,
+} from './audit-logs';
 import * as ClassAPI from './class';
 import { Class, ClassGetParams, ClassGetResponse } from './class';
+import * as ClassificationAPI from './classification';
+import { Classification, ClassificationUpdateParams, ClassificationUpdateResponse } from './classification';
+import * as ContextAPI from './context';
+import { Context, ContextGetParams, ContextGetResponse } from './context';
 import * as SeverityAPI from './severity';
 import { Severity, SeverityGetParams, SeverityGetResponse } from './severity';
 import * as TypeAPI from './type';
@@ -17,10 +31,23 @@ export class Insights extends APIResource {
   class: ClassAPI.Class = new ClassAPI.Class(this._client);
   severity: SeverityAPI.Severity = new SeverityAPI.Severity(this._client);
   type: TypeAPI.Type = new TypeAPI.Type(this._client);
+  auditLogs: AuditLogsAPI.AuditLogs = new AuditLogsAPI.AuditLogs(this._client);
+  classification: ClassificationAPI.Classification = new ClassificationAPI.Classification(this._client);
+  context: ContextAPI.Context = new ContextAPI.Context(this._client);
 
   /**
    * Lists all Security Center insights for the account or zone, showing security
    * findings and recommendations.
+   *
+   * @example
+   * ```ts
+   * // Automatically fetches more pages as needed.
+   * for await (const insightListResponse of client.securityCenter.insights.list(
+   *   { account_id: 'account_id' },
+   * )) {
+   *   // ...
+   * }
+   * ```
    */
   list(
     params?: InsightListParams,
@@ -63,6 +90,14 @@ export class Insights extends APIResource {
   /**
    * Archives a Security Center insight for an account or zone, removing it from the
    * active insights list while preserving historical data.
+   *
+   * @example
+   * ```ts
+   * const response =
+   *   await client.securityCenter.insights.dismiss('issue_id', {
+   *     account_id: 'account_id',
+   *   });
+   * ```
    */
   dismiss(
     issueId: string,
@@ -305,6 +340,11 @@ Insights.InsightListResponsesV4PagePagination = InsightListResponsesV4PagePagina
 Insights.Class = Class;
 Insights.Severity = Severity;
 Insights.Type = Type;
+Insights.AuditLogs = AuditLogs;
+Insights.AuditLogListResponsesCursorPagination = AuditLogListResponsesCursorPagination;
+Insights.AuditLogListByInsightResponsesCursorPagination = AuditLogListByInsightResponsesCursorPagination;
+Insights.Classification = Classification;
+Insights.Context = Context;
 
 export declare namespace Insights {
   export {
@@ -324,4 +364,26 @@ export declare namespace Insights {
   };
 
   export { Type as Type, type TypeGetResponse as TypeGetResponse, type TypeGetParams as TypeGetParams };
+
+  export {
+    AuditLogs as AuditLogs,
+    type AuditLogListResponse as AuditLogListResponse,
+    type AuditLogListByInsightResponse as AuditLogListByInsightResponse,
+    AuditLogListResponsesCursorPagination as AuditLogListResponsesCursorPagination,
+    AuditLogListByInsightResponsesCursorPagination as AuditLogListByInsightResponsesCursorPagination,
+    type AuditLogListParams as AuditLogListParams,
+    type AuditLogListByInsightParams as AuditLogListByInsightParams,
+  };
+
+  export {
+    Classification as Classification,
+    type ClassificationUpdateResponse as ClassificationUpdateResponse,
+    type ClassificationUpdateParams as ClassificationUpdateParams,
+  };
+
+  export {
+    Context as Context,
+    type ContextGetResponse as ContextGetResponse,
+    type ContextGetParams as ContextGetParams,
+  };
 }

package/src/resources/security-center/insights/severity.ts

@@ -10,6 +10,14 @@ export class Severity extends APIResource {
   /**
    * Retrieves Security Center insight counts aggregated by severity level (critical,
    * high, medium, low).
+   *
+   * @example
+   * ```ts
+   * const severities =
+   *   await client.securityCenter.insights.severity.get({
+   *     account_id: 'account_id',
+   *   });
+   * ```
    */
   get(params?: SeverityGetParams, options?: Core.RequestOptions): Core.APIPromise<SeverityGetResponse>;
   get(options?: Core.RequestOptions): Core.APIPromise<SeverityGetResponse>;

package/src/resources/security-center/insights/type.ts

@@ -9,6 +9,13 @@ import { CloudflareError } from '../../../error';
 export class Type extends APIResource {
   /**
    * Retrieves Security Center insight counts aggregated by insight type.
+   *
+   * @example
+   * ```ts
+   * const types = await client.securityCenter.insights.type.get(
+   *   { account_id: 'account_id' },
+   * );
+   * ```
    */
   get(params?: TypeGetParams, options?: Core.RequestOptions): Core.APIPromise<TypeGetResponse>;
   get(options?: Core.RequestOptions): Core.APIPromise<TypeGetResponse>;

package/src/resources/zero-trust/access/logs/access-requests.ts

@@ -64,10 +64,17 @@ export interface AccessRequestListParams {
   direction?: 'desc' | 'asc';
 
   /**
-   * Query param: Filter by user email. Defaults to substring matching. To force
-   * exact matching, set `email_exact=true`. Example (default): `email=@example.com`
-   * returns all events with that domain. Example (exact):
-   * `email=user@example.com&email_exact=true` returns only that user.
+   * Query param: Filter by user email. Match mode is controlled by `emailOp`
+   * (preferred) or the legacy `email_exact` flag.
+   *
+   * - Default (no `emailOp`, `email_exact=false` or unset): substring match —
+   *   `email=@example.com` returns all events with that domain.
+   * - Exact match: set `emailOp=eq` (preferred) or `email_exact=true` — e.g.
+   *   `email=user@example.com&email_exact=true` returns only that user.
+   * - Explicit substring match: set `emailOp=contains` (without `email_exact=true`).
+   *   When both are set, `email_exact=true` takes precedence and the match is exact.
+   * - Exclusion: set `emailOp=neq`. With `email_exact=true` this is an exact-value
+   *   exclusion; without it, a fuzzy substring exclusion.
    */
   email?: string;
 
@@ -78,9 +85,11 @@ export interface AccessRequestListParams {
   email_exact?: boolean;
 
   /**
-   * Query param: Operator for the `email` filter.
+   * Query param: Operator for the `email` filter. `contains` performs a substring
+   * (case-sensitive) match. When `email_exact=true` is also set, `email_exact` takes
+   * precedence and `contains` is ignored.
    */
-  emailOp?: 'eq' | 'neq';
+  emailOp?: 'eq' | 'neq' | 'contains';
 
   /**
    * Query param: Comma-separated list of fields to include in the response. When
@@ -129,12 +138,14 @@ export interface AccessRequestListParams {
   until?: string;
 
   /**
-   * Query param: Filter by user UUID.
+   * Query param: Deprecated. Accepted for backward compatibility but no longer
+   * applied as a filter. Use `email` instead.
    */
   user_id?: string;
 
   /**
-   * Query param: Operator for the `user_id` filter.
+   * Query param: Deprecated. Accepted for backward compatibility but no longer
+   * applied as a filter (the `user_id` parameter is itself deprecated).
    */
   user_idOp?: 'eq' | 'neq';
 }

package/src/resources/zero-trust/access/logs/scim/updates.ts

@@ -108,9 +108,12 @@ export interface UpdateListParams extends V4PagePaginationArrayParams {
   idp_id: Array<string>;
 
   /**
-   * Query param: The unique Cloudflare-generated Id of the SCIM resource.
+   * Query param: The unique Cloudflare-generated Id of the SCIM resource. Pass once
+   * for a single lookup (`?cf_resource_id=A`) or repeat the parameter
+   * (`?cf_resource_id=A&cf_resource_id=B`) to filter by multiple resources in one
+   * request.
    */
-  cf_resource_id?: string;
+  cf_resource_id?: Array<string>;
 
   /**
    * Query param: The chronological order used to sort the logs.
@@ -118,9 +121,12 @@ export interface UpdateListParams extends V4PagePaginationArrayParams {
   direction?: 'desc' | 'asc';
 
   /**
-   * Query param: The IdP-generated Id of the SCIM resource.
+   * Query param: The IdP-generated Id of the SCIM resource. Pass once for a single
+   * lookup (`?idp_resource_id=A`) or repeat the parameter
+   * (`?idp_resource_id=A&idp_resource_id=B`) to filter by multiple resources in one
+   * request.
    */
-  idp_resource_id?: string;
+  idp_resource_id?: Array<string>;
 
   /**
    * Query param: The maximum number of update logs to retrieve.
@@ -133,9 +139,12 @@ export interface UpdateListParams extends V4PagePaginationArrayParams {
   request_method?: Array<'DELETE' | 'PATCH' | 'POST' | 'PUT'>;
 
   /**
-   * Query param: The display name of the SCIM Group resource.
+   * Query param: The display name of the SCIM Group resource. Pass once for a single
+   * lookup (`?resource_group_name=A`) or repeat the parameter
+   * (`?resource_group_name=A&resource_group_name=B`) to filter by multiple group
+   * names in one request.
    */
-  resource_group_name?: string;
+  resource_group_name?: Array<string>;
 
   /**
    * Query param: The resource type of the SCIM request.
@@ -143,9 +152,12 @@ export interface UpdateListParams extends V4PagePaginationArrayParams {
   resource_type?: Array<'USER' | 'GROUP'>;
 
   /**
-   * Query param: The email address of the SCIM User resource.
+   * Query param: The email address of the SCIM User resource. Pass once for a single
+   * lookup (`?resource_user_email=A`) or repeat the parameter
+   * (`?resource_user_email=A&resource_user_email=B`) to filter by multiple emails in
+   * one request.
    */
-  resource_user_email?: string;
+  resource_user_email?: Array<string>;
 
   /**
    * Query param: the timestamp of the earliest update log.

package/src/resources/zero-trust/api.md

@@ -97,6 +97,21 @@ Methods:
 - <code title="delete /accounts/{account_id}/devices/ip-profiles/{profile_id}">client.zeroTrust.devices.ipProfiles.<a href="./src/resources/zero-trust/devices/ip-profiles.ts">delete</a>(profileId, { ...params }) -> IPProfileDeleteResponse</code>
 - <code title="get /accounts/{account_id}/devices/ip-profiles/{profile_id}">client.zeroTrust.devices.ipProfiles.<a href="./src/resources/zero-trust/devices/ip-profiles.ts">get</a>(profileId, { ...params }) -> IPProfile</code>
 
+### DeploymentGroups
+
+Types:
+
+- <code><a href="./src/resources/zero-trust/devices/deployment-groups.ts">DeploymentGroup</a></code>
+- <code><a href="./src/resources/zero-trust/devices/deployment-groups.ts">DeploymentGroupDeleteResponse</a></code>
+
+Methods:
+
+- <code title="post /accounts/{account_id}/devices/deployment-groups">client.zeroTrust.devices.deploymentGroups.<a href="./src/resources/zero-trust/devices/deployment-groups.ts">create</a>({ ...params }) -> DeploymentGroup</code>
+- <code title="get /accounts/{account_id}/devices/deployment-groups">client.zeroTrust.devices.deploymentGroups.<a href="./src/resources/zero-trust/devices/deployment-groups.ts">list</a>({ ...params }) -> DeploymentGroupsV4PagePaginationArray</code>
+- <code title="delete /accounts/{account_id}/devices/deployment-groups/{group_id}">client.zeroTrust.devices.deploymentGroups.<a href="./src/resources/zero-trust/devices/deployment-groups.ts">delete</a>(groupId, { ...params }) -> DeploymentGroupDeleteResponse</code>
+- <code title="patch /accounts/{account_id}/devices/deployment-groups/{group_id}">client.zeroTrust.devices.deploymentGroups.<a href="./src/resources/zero-trust/devices/deployment-groups.ts">edit</a>(groupId, { ...params }) -> DeploymentGroup</code>
+- <code title="get /accounts/{account_id}/devices/deployment-groups/{group_id}">client.zeroTrust.devices.deploymentGroups.<a href="./src/resources/zero-trust/devices/deployment-groups.ts">get</a>(groupId, { ...params }) -> DeploymentGroup</code>
+
 ### Networks
 
 Types: