cloudflare 6.1.0 → 6.3.0

package/src/resources/zero-trust/identity-providers/index.ts

@@ -16,4 +16,9 @@ export {
   type IdentityProviderDeleteParams,
   type IdentityProviderGetParams,
 } from './identity-providers';
+export {
+  SAMLCertificate,
+  type SAMLCertificateCreateResponse,
+  type SAMLCertificateCreateParams,
+} from './saml-certificate';
 export { SCIM } from './scim/index';

package/src/resources/zero-trust/identity-providers/saml-certificate.ts

@@ -0,0 +1,119 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+import { APIResource } from '../../../resource';
+import * as Core from '../../../core';
+
+export class SAMLCertificate extends APIResource {
+  /**
+   * Creates a new SAML encryption certificate set and assigns it to the specified
+   * SAML Identity Provider. This endpoint is idempotent - if the IdP already has a
+   * certificate set assigned, the existing certificate set is returned with a 200
+   * status.
+   *
+   * **Workflow for enabling SAML encryption:**
+   *
+   * 1. Call this endpoint to create and assign a certificate set to the IdP
+   * 2. Update the IdP configuration (PUT `/identity_providers/{id}`) with:
+   *    - `config.enable_encryption: true`
+   *    - `saml_certificate_set_id: <uid from step 1>`
+   * 3. Configure the certificate's public key in your external SAML Identity
+   *    Provider
+   *
+   * @example
+   * ```ts
+   * const samlCertificate =
+   *   await client.zeroTrust.identityProviders.samlCertificate.create(
+   *     'f174e90a-fafe-4643-bbbc-4a0ed4fc8415',
+   *     { account_id: '023e105f4ecef8ad9ca31a8372d0c353' },
+   *   );
+   * ```
+   */
+  create(
+    identityProviderId: string,
+    params: SAMLCertificateCreateParams,
+    options?: Core.RequestOptions,
+  ): Core.APIPromise<SAMLCertificateCreateResponse> {
+    const { account_id } = params;
+    return (
+      this._client.post(
+        `/accounts/${account_id}/access/identity_providers/${identityProviderId}/saml_certificate`,
+        options,
+      ) as Core.APIPromise<{ result: SAMLCertificateCreateResponse }>
+    )._thenUnwrap((obj) => obj.result);
+  }
+}
+
+/**
+ * A SAML encryption certificate set containing current and optionally previous
+ * certificates for encryption key rotation.
+ */
+export interface SAMLCertificateCreateResponse {
+  /**
+   * Timestamp when the certificate set was created
+   */
+  created_at: string;
+
+  /**
+   * Unique identifier for the certificate set
+   */
+  uid: string;
+
+  /**
+   * Timestamp when the certificate set was last updated (e.g., during rotation)
+   */
+  updated_at: string;
+
+  /**
+   * The currently active certificate used for encrypting SAML assertions
+   */
+  current_certificate?: SAMLCertificateCreateResponse.CurrentCertificate;
+
+  /**
+   * The previous certificate, maintained during rotation to ensure continuity. Null
+   * if no rotation has occurred. Mirrors the structure of `saml_certificate`.
+   */
+  previous_certificate?: unknown | null;
+}
+
+export namespace SAMLCertificateCreateResponse {
+  /**
+   * The currently active certificate used for encrypting SAML assertions
+   */
+  export interface CurrentCertificate {
+    /**
+     * Indicates whether this is the currently active certificate
+     */
+    is_current: boolean;
+
+    /**
+     * Certificate expiration date. Certificates are automatically rotated 30 days
+     * before expiration.
+     */
+    not_after: string;
+
+    /**
+     * PEM-encoded X.509 certificate containing the public key. Configure this
+     * certificate in your external SAML Identity Provider to enable encryption.
+     */
+    public_certificate: string;
+
+    /**
+     * Unique identifier for the certificate
+     */
+    uid: string;
+  }
+}
+
+export interface SAMLCertificateCreateParams {
+  /**
+   * Identifier.
+   */
+  account_id: string;
+}
+
+export declare namespace SAMLCertificate {
+  export {
+    type SAMLCertificateCreateResponse as SAMLCertificateCreateResponse,
+    type SAMLCertificateCreateParams as SAMLCertificateCreateParams,
+  };
+}

package/src/resources/zero-trust/index.ts

@@ -58,6 +58,7 @@ export {
   type OrganizationListParams,
   type OrganizationRevokeUsersParams,
 } from './organizations/index';
+export { ResourceLibrary } from './resource-library/index';
 export {
   RiskScoring,
   type RiskScoringGetResponse,

package/src/resources/zero-trust/resource-library/applications.ts

@@ -0,0 +1,315 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+import { APIResource } from '../../../resource';
+import * as Core from '../../../core';
+import { SinglePage } from '../../../pagination';
+
+export class Applications extends APIResource {
+  /**
+   * List applications with different filters.
+   *
+   * @example
+   * ```ts
+   * // Automatically fetches more pages as needed.
+   * for await (const applicationListResponse of client.zeroTrust.resourceLibrary.applications.list(
+   *   { account_id: '023e105f4ecef8ad9ca31a8372d0c353' },
+   * )) {
+   *   // ...
+   * }
+   * ```
+   */
+  list(
+    params: ApplicationListParams,
+    options?: Core.RequestOptions,
+  ): Core.PagePromise<ApplicationListResponsesSinglePage, ApplicationListResponse> {
+    const { account_id, ...query } = params;
+    return this._client.getAPIList(
+      `/accounts/${account_id}/resource-library/applications`,
+      ApplicationListResponsesSinglePage,
+      { query, ...options },
+    );
+  }
+
+  /**
+   * Get application by ID.
+   *
+   * @example
+   * ```ts
+   * const application =
+   *   await client.zeroTrust.resourceLibrary.applications.get(
+   *     '0b63249c-95bf-4cc0-a7cc-d7faaaf1dac0',
+   *     { account_id: '023e105f4ecef8ad9ca31a8372d0c353' },
+   *   );
+   * ```
+   */
+  get(
+    id: string,
+    params: ApplicationGetParams,
+    options?: Core.RequestOptions,
+  ): Core.APIPromise<ApplicationGetResponse> {
+    const { account_id } = params;
+    return (
+      this._client.get(
+        `/accounts/${account_id}/resource-library/applications/${id}`,
+        options,
+      ) as Core.APIPromise<{ result: ApplicationGetResponse }>
+    )._thenUnwrap((obj) => obj.result);
+  }
+}
+
+export class ApplicationListResponsesSinglePage extends SinglePage<ApplicationListResponse> {}
+
+export interface ApplicationListResponse {
+  /**
+   * Returns the application ID.
+   */
+  id: string;
+
+  /**
+   * Confidence score for the application. Returns -1 when no score is available.
+   */
+  application_confidence_score: number;
+
+  /**
+   * Returns the application source.
+   */
+  application_source: string;
+
+  /**
+   * Returns the application type.
+   */
+  application_type: string;
+
+  /**
+   * Returns the application type description.
+   */
+  application_type_description: string;
+
+  /**
+   * Returns the application creation time.
+   */
+  created_at: string;
+
+  /**
+   * GenAI score for the application. Returns -1 when no score is available.
+   */
+  gen_ai_score: number;
+
+  /**
+   * Returns the list of hostnames for the application.
+   */
+  hostnames: Array<string>;
+
+  /**
+   * Returns the human readable ID.
+   */
+  human_id: string;
+
+  /**
+   * Returns the list of IP subnets for the application.
+   */
+  ip_subnets: Array<string>;
+
+  /**
+   * Returns the application name.
+   */
+  name: string;
+
+  /**
+   * Returns the list of port protocols for the application.
+   */
+  port_protocols: Array<string>;
+
+  /**
+   * Returns the list of support domains for the application.
+   */
+  support_domains: Array<string>;
+
+  /**
+   * Cloudflare products that support this application.
+   */
+  supported: Array<'GATEWAY' | 'ACCESS' | 'CASB'>;
+
+  /**
+   * Returns the application update time.
+   */
+  updated_at: string;
+
+  /**
+   * Returns the application version.
+   */
+  version: string;
+
+  /**
+   * Returns the score composition breakdown for the application.
+   */
+  application_score_composition?: unknown | null;
+
+  /**
+   * Returns the Intel API ID for the application.
+   */
+  intel_id?: number | null;
+}
+
+export interface ApplicationGetResponse {
+  /**
+   * Returns the application ID.
+   */
+  id: string;
+
+  /**
+   * Confidence score for the application. Returns -1 when no score is available.
+   */
+  application_confidence_score: number;
+
+  /**
+   * Returns the application source.
+   */
+  application_source: string;
+
+  /**
+   * Returns the application type.
+   */
+  application_type: string;
+
+  /**
+   * Returns the application type description.
+   */
+  application_type_description: string;
+
+  /**
+   * Returns the application creation time.
+   */
+  created_at: string;
+
+  /**
+   * GenAI score for the application. Returns -1 when no score is available.
+   */
+  gen_ai_score: number;
+
+  /**
+   * Returns the list of hostnames for the application.
+   */
+  hostnames: Array<string>;
+
+  /**
+   * Returns the human readable ID.
+   */
+  human_id: string;
+
+  /**
+   * Returns the list of IP subnets for the application.
+   */
+  ip_subnets: Array<string>;
+
+  /**
+   * Returns the application name.
+   */
+  name: string;
+
+  /**
+   * Returns the list of port protocols for the application.
+   */
+  port_protocols: Array<string>;
+
+  /**
+   * Returns the list of support domains for the application.
+   */
+  support_domains: Array<string>;
+
+  /**
+   * Cloudflare products that support this application.
+   */
+  supported: Array<'GATEWAY' | 'ACCESS' | 'CASB'>;
+
+  /**
+   * Returns the application update time.
+   */
+  updated_at: string;
+
+  /**
+   * Returns the application version.
+   */
+  version: string;
+
+  /**
+   * Returns the score composition breakdown for the application.
+   */
+  application_score_composition?: unknown | null;
+
+  /**
+   * Returns the Intel API ID for the application.
+   */
+  intel_id?: number | null;
+}
+
+export interface ApplicationListParams {
+  /**
+   * Path param: Account ID.
+   */
+  account_id: string;
+
+  /**
+   * Query param: Filter applications using key:value format. Supported filter keys:
+   *
+   * - name: Filter by application name (e.g., name:HR)
+   * - id: Filter by application ID (e.g., id:0b63249c-95bf-4cc0-a7cc-d7faaaf1dac0)
+   * - human_id: Filter by human-readable ID (e.g., human_id:HR)
+   * - hostname: Filter by hostname or support domain (e.g.,
+   *   hostname:portal.example.com)
+   * - source: Filter by application source name (e.g., source:cloudflare)
+   * - ip_subnet: Filter by IP subnet using CIDR containment — returns applications
+   *   where any stored subnet contains the search value (e.g., ip_subnet:10.0.1.5/32
+   *   matches apps with 10.0.0.0/16)
+   * - intel_id: Filter by Intel API ID (e.g., intel_id:498). also supports multiple
+   *   values (e.g., intel_id:498,1001)
+   * - category_id: Filter by category ID (e.g.,
+   *   category_id:37f8ec03-8766-49d4-9a15-369b044c842c).
+   * - category_name: Filter by category name (e.g., category_name:HR).
+   * - supported: Filter by supported Cloudflare product (e.g., supported:ACCESS).
+   *   Values: GATEWAY, ACCESS, CASB. .
+   */
+  filter?: string;
+
+  /**
+   * Query param: Limit of number of results to return (max 250).
+   */
+  limit?: number;
+
+  /**
+   * Query param: Offset of results to return.
+   */
+  offset?: number;
+
+  /**
+   * Query param: Order results by field name and direction (e.g., name:asc). Ignored
+   * when search is provided; results are ranked by relevance instead.
+   */
+  order_by?: string;
+
+  /**
+   * Query param: Fuzzy search across application name and hostnames. Results are
+   * ranked by relevance. Must be between 2 and 200 characters. Can be combined with
+   * filter parameters.
+   */
+  search?: string;
+}
+
+export interface ApplicationGetParams {
+  /**
+   * Account ID.
+   */
+  account_id: string;
+}
+
+Applications.ApplicationListResponsesSinglePage = ApplicationListResponsesSinglePage;
+
+export declare namespace Applications {
+  export {
+    type ApplicationListResponse as ApplicationListResponse,
+    type ApplicationGetResponse as ApplicationGetResponse,
+    ApplicationListResponsesSinglePage as ApplicationListResponsesSinglePage,
+    type ApplicationListParams as ApplicationListParams,
+    type ApplicationGetParams as ApplicationGetParams,
+  };
+}

package/src/resources/zero-trust/resource-library/categories.ts

@@ -0,0 +1,140 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+import { APIResource } from '../../../resource';
+import * as Core from '../../../core';
+import { SinglePage } from '../../../pagination';
+
+export class Categories extends APIResource {
+  /**
+   * List application categories.
+   *
+   * @example
+   * ```ts
+   * // Automatically fetches more pages as needed.
+   * for await (const categoryListResponse of client.zeroTrust.resourceLibrary.categories.list(
+   *   { account_id: '023e105f4ecef8ad9ca31a8372d0c353' },
+   * )) {
+   *   // ...
+   * }
+   * ```
+   */
+  list(
+    params: CategoryListParams,
+    options?: Core.RequestOptions,
+  ): Core.PagePromise<CategoryListResponsesSinglePage, CategoryListResponse> {
+    const { account_id, ...query } = params;
+    return this._client.getAPIList(
+      `/accounts/${account_id}/resource-library/categories`,
+      CategoryListResponsesSinglePage,
+      { query, ...options },
+    );
+  }
+
+  /**
+   * Get application category by ID.
+   *
+   * @example
+   * ```ts
+   * const category =
+   *   await client.zeroTrust.resourceLibrary.categories.get(
+   *     '0b63249c-95bf-4cc0-a7cc-d7faaaf1dac0',
+   *     { account_id: '023e105f4ecef8ad9ca31a8372d0c353' },
+   *   );
+   * ```
+   */
+  get(
+    id: string,
+    params: CategoryGetParams,
+    options?: Core.RequestOptions,
+  ): Core.APIPromise<CategoryGetResponse> {
+    const { account_id } = params;
+    return (
+      this._client.get(
+        `/accounts/${account_id}/resource-library/categories/${id}`,
+        options,
+      ) as Core.APIPromise<{ result: CategoryGetResponse }>
+    )._thenUnwrap((obj) => obj.result);
+  }
+}
+
+export class CategoryListResponsesSinglePage extends SinglePage<CategoryListResponse> {}
+
+export interface CategoryListResponse {
+  /**
+   * Returns the category ID.
+   */
+  id: string;
+
+  /**
+   * Returns the category creation time.
+   */
+  created_at: string;
+
+  /**
+   * Returns the category description.
+   */
+  description: string;
+
+  /**
+   * Returns the category name.
+   */
+  name: string;
+}
+
+export interface CategoryGetResponse {
+  /**
+   * Returns the category ID.
+   */
+  id: string;
+
+  /**
+   * Returns the category creation time.
+   */
+  created_at: string;
+
+  /**
+   * Returns the category description.
+   */
+  description: string;
+
+  /**
+   * Returns the category name.
+   */
+  name: string;
+}
+
+export interface CategoryListParams {
+  /**
+   * Path param: Account ID.
+   */
+  account_id: string;
+
+  /**
+   * Query param: Limit of number of results to return.
+   */
+  limit?: number;
+
+  /**
+   * Query param: Offset of results to return.
+   */
+  offset?: number;
+}
+
+export interface CategoryGetParams {
+  /**
+   * Account ID.
+   */
+  account_id: string;
+}
+
+Categories.CategoryListResponsesSinglePage = CategoryListResponsesSinglePage;
+
+export declare namespace Categories {
+  export {
+    type CategoryListResponse as CategoryListResponse,
+    type CategoryGetResponse as CategoryGetResponse,
+    CategoryListResponsesSinglePage as CategoryListResponsesSinglePage,
+    type CategoryListParams as CategoryListParams,
+    type CategoryGetParams as CategoryGetParams,
+  };
+}

package/src/resources/zero-trust/resource-library/index.ts

@@ -0,0 +1,19 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+export {
+  ApplicationListResponsesSinglePage,
+  Applications,
+  type ApplicationListResponse,
+  type ApplicationGetResponse,
+  type ApplicationListParams,
+  type ApplicationGetParams,
+} from './applications';
+export {
+  CategoryListResponsesSinglePage,
+  Categories,
+  type CategoryListResponse,
+  type CategoryGetResponse,
+  type CategoryListParams,
+  type CategoryGetParams,
+} from './categories';
+export { ResourceLibrary } from './resource-library';

package/src/resources/zero-trust/resource-library/resource-library.ts

@@ -0,0 +1,51 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+import { APIResource } from '../../../resource';
+import * as ApplicationsAPI from './applications';
+import {
+  ApplicationGetParams,
+  ApplicationGetResponse,
+  ApplicationListParams,
+  ApplicationListResponse,
+  ApplicationListResponsesSinglePage,
+  Applications,
+} from './applications';
+import * as CategoriesAPI from './categories';
+import {
+  Categories,
+  CategoryGetParams,
+  CategoryGetResponse,
+  CategoryListParams,
+  CategoryListResponse,
+  CategoryListResponsesSinglePage,
+} from './categories';
+
+export class ResourceLibrary extends APIResource {
+  applications: ApplicationsAPI.Applications = new ApplicationsAPI.Applications(this._client);
+  categories: CategoriesAPI.Categories = new CategoriesAPI.Categories(this._client);
+}
+
+ResourceLibrary.Applications = Applications;
+ResourceLibrary.ApplicationListResponsesSinglePage = ApplicationListResponsesSinglePage;
+ResourceLibrary.Categories = Categories;
+ResourceLibrary.CategoryListResponsesSinglePage = CategoryListResponsesSinglePage;
+
+export declare namespace ResourceLibrary {
+  export {
+    Applications as Applications,
+    type ApplicationListResponse as ApplicationListResponse,
+    type ApplicationGetResponse as ApplicationGetResponse,
+    ApplicationListResponsesSinglePage as ApplicationListResponsesSinglePage,
+    type ApplicationListParams as ApplicationListParams,
+    type ApplicationGetParams as ApplicationGetParams,
+  };
+
+  export {
+    Categories as Categories,
+    type CategoryListResponse as CategoryListResponse,
+    type CategoryGetResponse as CategoryGetResponse,
+    CategoryListResponsesSinglePage as CategoryListResponsesSinglePage,
+    type CategoryListParams as CategoryListParams,
+    type CategoryGetParams as CategoryGetParams,
+  };
+}

package/src/resources/zero-trust/resource-library.ts

@@ -0,0 +1,3 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+export * from './resource-library/index';

package/src/resources/zero-trust/zero-trust.ts

@@ -64,6 +64,8 @@ import {
   OrganizationUpdateParams,
   Organizations,
 } from './organizations/organizations';
+import * as ResourceLibraryAPI from './resource-library/resource-library';
+import { ResourceLibrary } from './resource-library/resource-library';
 import * as RiskScoringAPI from './risk-scoring/risk-scoring';
 import {
   RiskScoring,
@@ -97,6 +99,7 @@ export class ZeroTrust extends APIResource {
   gateway: GatewayAPI.Gateway = new GatewayAPI.Gateway(this._client);
   networks: NetworksAPI.Networks = new NetworksAPI.Networks(this._client);
   riskScoring: RiskScoringAPI.RiskScoring = new RiskScoringAPI.RiskScoring(this._client);
+  resourceLibrary: ResourceLibraryAPI.ResourceLibrary = new ResourceLibraryAPI.ResourceLibrary(this._client);
 }
 
 ZeroTrust.Devices = Devices;
@@ -116,6 +119,7 @@ ZeroTrust.DLP = DLP;
 ZeroTrust.Gateway = Gateway;
 ZeroTrust.Networks = Networks;
 ZeroTrust.RiskScoring = RiskScoring;
+ZeroTrust.ResourceLibrary = ResourceLibrary;
 
 export declare namespace ZeroTrust {
   export {
@@ -207,4 +211,6 @@ export declare namespace ZeroTrust {
     type RiskScoringGetParams as RiskScoringGetParams,
     type RiskScoringResetParams as RiskScoringResetParams,
   };
+
+  export { ResourceLibrary as ResourceLibrary };
 }