cloudflare 6.2.0 → 6.4.0

package/src/resources/zero-trust/access/saml-certificates.ts

@@ -0,0 +1,343 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+import { APIResource } from '../../../resource';
+import * as Core from '../../../core';
+import { V4PagePaginationArray, type V4PagePaginationArrayParams } from '../../../pagination';
+import { type Response } from '../../../_shims/index';
+
+export class SAMLCertificates extends APIResource {
+  /**
+   * Returns a paginated list of the organization's SAML encryption certificate sets.
+   * Each certificate set includes the current and (if present) previous
+   * certificates.
+   *
+   * @example
+   * ```ts
+   * // Automatically fetches more pages as needed.
+   * for await (const samlCertificateListResponse of client.zeroTrust.access.samlCertificates.list(
+   *   { account_id: '023e105f4ecef8ad9ca31a8372d0c353' },
+   * )) {
+   *   // ...
+   * }
+   * ```
+   */
+  list(
+    params: SAMLCertificateListParams,
+    options?: Core.RequestOptions,
+  ): Core.PagePromise<SAMLCertificateListResponsesV4PagePaginationArray, SAMLCertificateListResponse> {
+    const { account_id, ...query } = params;
+    return this._client.getAPIList(
+      `/accounts/${account_id}/access/saml_certificates`,
+      SAMLCertificateListResponsesV4PagePaginationArray,
+      { query, ...options },
+    );
+  }
+
+  /**
+   * Retrieves a specific SAML encryption certificate set by its UID, including both
+   * current and previous certificates if available.
+   *
+   * @example
+   * ```ts
+   * const samlCertificate =
+   *   await client.zeroTrust.access.samlCertificates.get(
+   *     'f174e90a-fafe-4643-bbbc-4a0ed4fc8415',
+   *     { account_id: '023e105f4ecef8ad9ca31a8372d0c353' },
+   *   );
+   * ```
+   */
+  get(
+    samlCERTSetId: string,
+    params: SAMLCertificateGetParams,
+    options?: Core.RequestOptions,
+  ): Core.APIPromise<SAMLCertificateGetResponse> {
+    const { account_id } = params;
+    return (
+      this._client.get(
+        `/accounts/${account_id}/access/saml_certificates/${samlCERTSetId}`,
+        options,
+      ) as Core.APIPromise<{ result: SAMLCertificateGetResponse }>
+    )._thenUnwrap((obj) => obj.result);
+  }
+
+  /**
+   * Downloads the current SAML encryption certificate's public key in PEM format for
+   * the specified certificate set. This endpoint is useful for providing the
+   * certificate to Identity Providers for SAML assertion encryption configuration.
+   *
+   * @example
+   * ```ts
+   * const response =
+   *   await client.zeroTrust.access.samlCertificates.getPem(
+   *     'f174e90a-fafe-4643-bbbc-4a0ed4fc8415',
+   *     { account_id: '023e105f4ecef8ad9ca31a8372d0c353' },
+   *   );
+   *
+   * const content = await response.blob();
+   * console.log(content);
+   * ```
+   */
+  getPem(
+    samlCERTSetId: string,
+    params: SAMLCertificateGetPemParams,
+    options?: Core.RequestOptions,
+  ): Core.APIPromise<Response> {
+    const { account_id } = params;
+    return this._client.get(`/accounts/${account_id}/access/saml_certificates/${samlCERTSetId}/pem`, {
+      ...options,
+      headers: { Accept: 'application/x-pem-file', ...options?.headers },
+      __binaryResponse: true,
+    });
+  }
+
+  /**
+   * Rotates the SAML encryption certificates within the specified certificate set.
+   * This generates a new certificate and moves the current certificate to the
+   * previous slot. If a previous certificate exists, it will be deactivated and
+   * removed.
+   *
+   * This endpoint ensures zero-downtime rotation by maintaining both current and
+   * previous certificates during the transition period, allowing IdPs time to update
+   * their configurations. Automated rotation happens 30 days before a current
+   * certificate's expiration.
+   *
+   * @example
+   * ```ts
+   * const response =
+   *   await client.zeroTrust.access.samlCertificates.rotate(
+   *     'f174e90a-fafe-4643-bbbc-4a0ed4fc8415',
+   *     { account_id: '023e105f4ecef8ad9ca31a8372d0c353' },
+   *   );
+   * ```
+   */
+  rotate(
+    samlCERTSetId: string,
+    params: SAMLCertificateRotateParams,
+    options?: Core.RequestOptions,
+  ): Core.APIPromise<SAMLCertificateRotateResponse> {
+    const { account_id } = params;
+    return (
+      this._client.post(
+        `/accounts/${account_id}/access/saml_certificates/${samlCERTSetId}/rotate`,
+        options,
+      ) as Core.APIPromise<{ result: SAMLCertificateRotateResponse }>
+    )._thenUnwrap((obj) => obj.result);
+  }
+}
+
+export class SAMLCertificateListResponsesV4PagePaginationArray extends V4PagePaginationArray<SAMLCertificateListResponse> {}
+
+export interface SAMLCertificateListResponse {
+  /**
+   * When the certificate set was created
+   */
+  created_at: string;
+
+  /**
+   * Unique identifier for the certificate set
+   */
+  uid: string;
+
+  /**
+   * When the certificate set was last updated
+   */
+  updated_at: string;
+
+  /**
+   * The current active certificate
+   */
+  current_certificate?: SAMLCertificateListResponse.CurrentCertificate;
+
+  /**
+   * The previous certificate (maintained during rotation period). May be null when
+   * no rotation has occurred. Mirrors the structure of `saml_certificate`.
+   */
+  previous_certificate?: unknown | null;
+}
+
+export namespace SAMLCertificateListResponse {
+  /**
+   * The current active certificate
+   */
+  export interface CurrentCertificate {
+    /**
+     * Indicates whether the certificate can be used for IdP configuration.
+     */
+    is_current: boolean;
+
+    /**
+     * Certificate expiration date
+     */
+    not_after: string;
+
+    /**
+     * The public certificate in PEM format
+     */
+    public_certificate: string;
+
+    /**
+     * Unique identifier for the certificate
+     */
+    uid: string;
+  }
+}
+
+export interface SAMLCertificateGetResponse {
+  /**
+   * When the certificate set was created
+   */
+  created_at: string;
+
+  /**
+   * Unique identifier for the certificate set
+   */
+  uid: string;
+
+  /**
+   * When the certificate set was last updated
+   */
+  updated_at: string;
+
+  /**
+   * The current active certificate
+   */
+  current_certificate?: SAMLCertificateGetResponse.CurrentCertificate;
+
+  /**
+   * The previous certificate (maintained during rotation period). May be null when
+   * no rotation has occurred. Mirrors the structure of `saml_certificate`.
+   */
+  previous_certificate?: unknown | null;
+}
+
+export namespace SAMLCertificateGetResponse {
+  /**
+   * The current active certificate
+   */
+  export interface CurrentCertificate {
+    /**
+     * Indicates whether the certificate can be used for IdP configuration.
+     */
+    is_current: boolean;
+
+    /**
+     * Certificate expiration date
+     */
+    not_after: string;
+
+    /**
+     * The public certificate in PEM format
+     */
+    public_certificate: string;
+
+    /**
+     * Unique identifier for the certificate
+     */
+    uid: string;
+  }
+}
+
+export interface SAMLCertificateRotateResponse {
+  /**
+   * When the certificate set was created
+   */
+  created_at: string;
+
+  /**
+   * Unique identifier for the certificate set
+   */
+  uid: string;
+
+  /**
+   * When the certificate set was last updated
+   */
+  updated_at: string;
+
+  /**
+   * The current active certificate
+   */
+  current_certificate?: SAMLCertificateRotateResponse.CurrentCertificate;
+
+  /**
+   * The previous certificate (maintained during rotation period). May be null when
+   * no rotation has occurred. Mirrors the structure of `saml_certificate`.
+   */
+  previous_certificate?: unknown | null;
+}
+
+export namespace SAMLCertificateRotateResponse {
+  /**
+   * The current active certificate
+   */
+  export interface CurrentCertificate {
+    /**
+     * Indicates whether the certificate can be used for IdP configuration.
+     */
+    is_current: boolean;
+
+    /**
+     * Certificate expiration date
+     */
+    not_after: string;
+
+    /**
+     * The public certificate in PEM format
+     */
+    public_certificate: string;
+
+    /**
+     * Unique identifier for the certificate
+     */
+    uid: string;
+  }
+}
+
+export interface SAMLCertificateListParams extends V4PagePaginationArrayParams {
+  /**
+   * Path param: Identifier.
+   */
+  account_id: string;
+
+  /**
+   * Query param: Filter by SAML certificate set UID. Accepts a comma-separated list
+   * of UIDs.
+   */
+  id?: string;
+}
+
+export interface SAMLCertificateGetParams {
+  /**
+   * Identifier.
+   */
+  account_id: string;
+}
+
+export interface SAMLCertificateGetPemParams {
+  /**
+   * Identifier.
+   */
+  account_id: string;
+}
+
+export interface SAMLCertificateRotateParams {
+  /**
+   * Identifier.
+   */
+  account_id: string;
+}
+
+SAMLCertificates.SAMLCertificateListResponsesV4PagePaginationArray =
+  SAMLCertificateListResponsesV4PagePaginationArray;
+
+export declare namespace SAMLCertificates {
+  export {
+    type SAMLCertificateListResponse as SAMLCertificateListResponse,
+    type SAMLCertificateGetResponse as SAMLCertificateGetResponse,
+    type SAMLCertificateRotateResponse as SAMLCertificateRotateResponse,
+    SAMLCertificateListResponsesV4PagePaginationArray as SAMLCertificateListResponsesV4PagePaginationArray,
+    type SAMLCertificateListParams as SAMLCertificateListParams,
+    type SAMLCertificateGetParams as SAMLCertificateGetParams,
+    type SAMLCertificateGetPemParams as SAMLCertificateGetPemParams,
+    type SAMLCertificateRotateParams as SAMLCertificateRotateParams,
+  };
+}

package/src/resources/zero-trust/api.md

@@ -344,6 +344,16 @@ Methods:
 
 - <code title="get /accounts/{account_id}/access/identity_providers/{identity_provider_id}/scim/users">client.zeroTrust.identityProviders.scim.users.<a href="./src/resources/zero-trust/identity-providers/scim/users.ts">list</a>(identityProviderId, { ...params }) -> AccessUsersV4PagePaginationArray</code>
 
+### SAMLCertificate
+
+Types:
+
+- <code><a href="./src/resources/zero-trust/identity-providers/saml-certificate.ts">SAMLCertificateCreateResponse</a></code>
+
+Methods:
+
+- <code title="post /accounts/{account_id}/access/identity_providers/{identity_provider_id}/saml_certificate">client.zeroTrust.identityProviders.samlCertificate.<a href="./src/resources/zero-trust/identity-providers/saml-certificate.ts">create</a>(identityProviderId, { ...params }) -> SAMLCertificateCreateResponse</code>
+
 ## Organizations
 
 Types:
@@ -439,6 +449,36 @@ Methods:
 - <code title="get /accounts/{account_id}/access/gateway_ca">client.zeroTrust.access.gatewayCA.<a href="./src/resources/zero-trust/access/gateway-ca.ts">list</a>({ ...params }) -> GatewayCAListResponsesSinglePage</code>
 - <code title="delete /accounts/{account_id}/access/gateway_ca/{certificate_id}">client.zeroTrust.access.gatewayCA.<a href="./src/resources/zero-trust/access/gateway-ca.ts">delete</a>(certificateId, { ...params }) -> GatewayCADeleteResponse</code>
 
+### IdPFederationGrants
+
+Types:
+
+- <code><a href="./src/resources/zero-trust/access/idp-federation-grants.ts">IdPFederationGrant</a></code>
+- <code><a href="./src/resources/zero-trust/access/idp-federation-grants.ts">IdPFederationGrantListResponse</a></code>
+- <code><a href="./src/resources/zero-trust/access/idp-federation-grants.ts">IdPFederationGrantDeleteResponse</a></code>
+
+Methods:
+
+- <code title="post /accounts/{account_id}/access/idp_federation_grants">client.zeroTrust.access.IdPFederationGrants.<a href="./src/resources/zero-trust/access/idp-federation-grants.ts">create</a>({ ...params }) -> IdPFederationGrant</code>
+- <code title="get /accounts/{account_id}/access/idp_federation_grants">client.zeroTrust.access.IdPFederationGrants.<a href="./src/resources/zero-trust/access/idp-federation-grants.ts">list</a>({ ...params }) -> IdPFederationGrantListResponse</code>
+- <code title="delete /accounts/{account_id}/access/idp_federation_grants/{grant_id}">client.zeroTrust.access.IdPFederationGrants.<a href="./src/resources/zero-trust/access/idp-federation-grants.ts">delete</a>(grantId, { ...params }) -> IdPFederationGrantDeleteResponse</code>
+- <code title="get /accounts/{account_id}/access/idp_federation_grants/{grant_id}">client.zeroTrust.access.IdPFederationGrants.<a href="./src/resources/zero-trust/access/idp-federation-grants.ts">get</a>(grantId, { ...params }) -> IdPFederationGrant</code>
+
+### SAMLCertificates
+
+Types:
+
+- <code><a href="./src/resources/zero-trust/access/saml-certificates.ts">SAMLCertificateListResponse</a></code>
+- <code><a href="./src/resources/zero-trust/access/saml-certificates.ts">SAMLCertificateGetResponse</a></code>
+- <code><a href="./src/resources/zero-trust/access/saml-certificates.ts">SAMLCertificateRotateResponse</a></code>
+
+Methods:
+
+- <code title="get /accounts/{account_id}/access/saml_certificates">client.zeroTrust.access.samlCertificates.<a href="./src/resources/zero-trust/access/saml-certificates.ts">list</a>({ ...params }) -> SAMLCertificateListResponsesV4PagePaginationArray</code>
+- <code title="get /accounts/{account_id}/access/saml_certificates/{saml_cert_set_id}">client.zeroTrust.access.samlCertificates.<a href="./src/resources/zero-trust/access/saml-certificates.ts">get</a>(samlCERTSetId, { ...params }) -> SAMLCertificateGetResponse</code>
+- <code title="get /accounts/{account_id}/access/saml_certificates/{saml_cert_set_id}/pem">client.zeroTrust.access.samlCertificates.<a href="./src/resources/zero-trust/access/saml-certificates.ts">getPem</a>(samlCERTSetId, { ...params }) -> Response</code>
+- <code title="post /accounts/{account_id}/access/saml_certificates/{saml_cert_set_id}/rotate">client.zeroTrust.access.samlCertificates.<a href="./src/resources/zero-trust/access/saml-certificates.ts">rotate</a>(samlCERTSetId, { ...params }) -> SAMLCertificateRotateResponse</code>
+
 ### Infrastructure
 
 #### Targets
@@ -996,6 +1036,18 @@ Methods:
 - <code title="delete /accounts/{account_id}/dex/rules/{rule_id}">client.zeroTrust.dex.rules.<a href="./src/resources/zero-trust/dex/rules.ts">delete</a>(ruleId, { ...params }) -> RuleDeleteResponse | null</code>
 - <code title="get /accounts/{account_id}/dex/rules/{rule_id}">client.zeroTrust.dex.rules.<a href="./src/resources/zero-trust/dex/rules.ts">get</a>(ruleId, { ...params }) -> RuleGetResponse</code>
 
+### Devices
+
+#### ISPs
+
+Types:
+
+- <code><a href="./src/resources/zero-trust/dex/devices/isps.ts">ISPs</a></code>
+
+Methods:
+
+- <code title="get /accounts/{account_id}/dex/devices/{device_id}/isps">client.zeroTrust.dex.devices.isps.<a href="./src/resources/zero-trust/dex/devices/isps.ts">list</a>(deviceId, { ...params }) -> ISPsV4PagePagination</code>
+
 ## Tunnels
 
 Types:
@@ -1125,6 +1177,18 @@ Methods:
 
 - <code title="put /accounts/{account_id}/warp_connector/{tunnel_id}/failover">client.zeroTrust.tunnels.warpConnector.failover.<a href="./src/resources/zero-trust/tunnels/warp-connector/failover.ts">update</a>(tunnelId, { ...params }) -> FailoverUpdateResponse | null</code>
 
+#### Configurations
+
+Types:
+
+- <code><a href="./src/resources/zero-trust/tunnels/warp-connector/configurations.ts">ConfigurationUpdateResponse</a></code>
+- <code><a href="./src/resources/zero-trust/tunnels/warp-connector/configurations.ts">ConfigurationGetResponse</a></code>
+
+Methods:
+
+- <code title="put /accounts/{account_id}/warp_connector/{tunnel_id}/configurations">client.zeroTrust.tunnels.warpConnector.configurations.<a href="./src/resources/zero-trust/tunnels/warp-connector/configurations.ts">update</a>(tunnelId, { ...params }) -> ConfigurationUpdateResponse</code>
+- <code title="get /accounts/{account_id}/warp_connector/{tunnel_id}/configurations">client.zeroTrust.tunnels.warpConnector.configurations.<a href="./src/resources/zero-trust/tunnels/warp-connector/configurations.ts">get</a>(tunnelId, { ...params }) -> ConfigurationGetResponse</code>
+
 ## ConnectivitySettings
 
 Types:
@@ -1139,6 +1203,21 @@ Methods:
 
 ## DLP
 
+### CustomPromptTopics
+
+Types:
+
+- <code><a href="./src/resources/zero-trust/dlp/custom-prompt-topics.ts">CustomPromptTopic</a></code>
+- <code><a href="./src/resources/zero-trust/dlp/custom-prompt-topics.ts">CustomPromptTopicDeleteResponse</a></code>
+
+Methods:
+
+- <code title="post /accounts/{account_id}/dlp/custom_prompt_topics">client.zeroTrust.dlp.customPromptTopics.<a href="./src/resources/zero-trust/dlp/custom-prompt-topics.ts">create</a>({ ...params }) -> CustomPromptTopic</code>
+- <code title="put /accounts/{account_id}/dlp/custom_prompt_topics/{entry_id}">client.zeroTrust.dlp.customPromptTopics.<a href="./src/resources/zero-trust/dlp/custom-prompt-topics.ts">update</a>(entryId, { ...params }) -> CustomPromptTopic</code>
+- <code title="get /accounts/{account_id}/dlp/custom_prompt_topics">client.zeroTrust.dlp.customPromptTopics.<a href="./src/resources/zero-trust/dlp/custom-prompt-topics.ts">list</a>({ ...params }) -> CustomPromptTopicsSinglePage</code>
+- <code title="delete /accounts/{account_id}/dlp/custom_prompt_topics/{entry_id}">client.zeroTrust.dlp.customPromptTopics.<a href="./src/resources/zero-trust/dlp/custom-prompt-topics.ts">delete</a>(entryId, { ...params }) -> CustomPromptTopicDeleteResponse | null</code>
+- <code title="get /accounts/{account_id}/dlp/custom_prompt_topics/{entry_id}">client.zeroTrust.dlp.customPromptTopics.<a href="./src/resources/zero-trust/dlp/custom-prompt-topics.ts">get</a>(entryId, { ...params }) -> CustomPromptTopic</code>
+
 ### Datasets
 
 Types:
@@ -1378,6 +1457,108 @@ Methods:
 - <code title="delete /accounts/{account_id}/dlp/entries/integration/{entry_id}">client.zeroTrust.dlp.entries.integration.<a href="./src/resources/zero-trust/dlp/entries/integration.ts">delete</a>(entryId, { ...params }) -> IntegrationDeleteResponse | null</code>
 - <code title="get /accounts/{account_id}/dlp/entries/{entry_id}">client.zeroTrust.dlp.entries.integration.<a href="./src/resources/zero-trust/dlp/entries/integration.ts">get</a>(entryId, { ...params }) -> IntegrationGetResponse</code>
 
+### SensitivityGroups
+
+Types:
+
+- <code><a href="./src/resources/zero-trust/dlp/sensitivity-groups/sensitivity-groups.ts">SensitivityGroupCreateResponse</a></code>
+- <code><a href="./src/resources/zero-trust/dlp/sensitivity-groups/sensitivity-groups.ts">SensitivityGroupUpdateResponse</a></code>
+- <code><a href="./src/resources/zero-trust/dlp/sensitivity-groups/sensitivity-groups.ts">SensitivityGroupListResponse</a></code>
+- <code><a href="./src/resources/zero-trust/dlp/sensitivity-groups/sensitivity-groups.ts">SensitivityGroupDeleteResponse</a></code>
+- <code><a href="./src/resources/zero-trust/dlp/sensitivity-groups/sensitivity-groups.ts">SensitivityGroupGetResponse</a></code>
+
+Methods:
+
+- <code title="post /accounts/{account_id}/dlp/sensitivity_groups">client.zeroTrust.dlp.sensitivityGroups.<a href="./src/resources/zero-trust/dlp/sensitivity-groups/sensitivity-groups.ts">create</a>({ ...params }) -> SensitivityGroupCreateResponse</code>
+- <code title="put /accounts/{account_id}/dlp/sensitivity_groups/{sensitivity_group_id}">client.zeroTrust.dlp.sensitivityGroups.<a href="./src/resources/zero-trust/dlp/sensitivity-groups/sensitivity-groups.ts">update</a>(sensitivityGroupId, { ...params }) -> SensitivityGroupUpdateResponse</code>
+- <code title="get /accounts/{account_id}/dlp/sensitivity_groups">client.zeroTrust.dlp.sensitivityGroups.<a href="./src/resources/zero-trust/dlp/sensitivity-groups/sensitivity-groups.ts">list</a>({ ...params }) -> SensitivityGroupListResponsesSinglePage</code>
+- <code title="delete /accounts/{account_id}/dlp/sensitivity_groups/{sensitivity_group_id}">client.zeroTrust.dlp.sensitivityGroups.<a href="./src/resources/zero-trust/dlp/sensitivity-groups/sensitivity-groups.ts">delete</a>(sensitivityGroupId, { ...params }) -> SensitivityGroupDeleteResponse | null</code>
+- <code title="get /accounts/{account_id}/dlp/sensitivity_groups/{sensitivity_group_id}">client.zeroTrust.dlp.sensitivityGroups.<a href="./src/resources/zero-trust/dlp/sensitivity-groups/sensitivity-groups.ts">get</a>(sensitivityGroupId, { ...params }) -> SensitivityGroupGetResponse</code>
+
+#### Levels
+
+Types:
+
+- <code><a href="./src/resources/zero-trust/dlp/sensitivity-groups/levels/levels.ts">LevelCreateResponse</a></code>
+- <code><a href="./src/resources/zero-trust/dlp/sensitivity-groups/levels/levels.ts">LevelUpdateResponse</a></code>
+- <code><a href="./src/resources/zero-trust/dlp/sensitivity-groups/levels/levels.ts">LevelListResponse</a></code>
+- <code><a href="./src/resources/zero-trust/dlp/sensitivity-groups/levels/levels.ts">LevelDeleteResponse</a></code>
+- <code><a href="./src/resources/zero-trust/dlp/sensitivity-groups/levels/levels.ts">LevelGetResponse</a></code>
+
+Methods:
+
+- <code title="post /accounts/{account_id}/dlp/sensitivity_groups/{sensitivity_group_id}/levels">client.zeroTrust.dlp.sensitivityGroups.levels.<a href="./src/resources/zero-trust/dlp/sensitivity-groups/levels/levels.ts">create</a>(sensitivityGroupId, { ...params }) -> LevelCreateResponse</code>
+- <code title="put /accounts/{account_id}/dlp/sensitivity_groups/{sensitivity_group_id}/levels/{sensitivity_level_id}">client.zeroTrust.dlp.sensitivityGroups.levels.<a href="./src/resources/zero-trust/dlp/sensitivity-groups/levels/levels.ts">update</a>(sensitivityGroupId, sensitivityLevelId, { ...params }) -> LevelUpdateResponse</code>
+- <code title="get /accounts/{account_id}/dlp/sensitivity_groups/{sensitivity_group_id}/levels">client.zeroTrust.dlp.sensitivityGroups.levels.<a href="./src/resources/zero-trust/dlp/sensitivity-groups/levels/levels.ts">list</a>(sensitivityGroupId, { ...params }) -> LevelListResponsesSinglePage</code>
+- <code title="delete /accounts/{account_id}/dlp/sensitivity_groups/{sensitivity_group_id}/levels/{sensitivity_level_id}">client.zeroTrust.dlp.sensitivityGroups.levels.<a href="./src/resources/zero-trust/dlp/sensitivity-groups/levels/levels.ts">delete</a>(sensitivityGroupId, sensitivityLevelId, { ...params }) -> LevelDeleteResponse | null</code>
+- <code title="get /accounts/{account_id}/dlp/sensitivity_groups/{sensitivity_group_id}/levels/{sensitivity_level_id}">client.zeroTrust.dlp.sensitivityGroups.levels.<a href="./src/resources/zero-trust/dlp/sensitivity-groups/levels/levels.ts">get</a>(sensitivityGroupId, sensitivityLevelId, { ...params }) -> LevelGetResponse</code>
+
+##### Order
+
+Types:
+
+- <code><a href="./src/resources/zero-trust/dlp/sensitivity-groups/levels/order.ts">OrderUpdateResponse</a></code>
+- <code><a href="./src/resources/zero-trust/dlp/sensitivity-groups/levels/order.ts">OrderGetResponse</a></code>
+
+Methods:
+
+- <code title="put /accounts/{account_id}/dlp/sensitivity_groups/{sensitivity_group_id}/level_order">client.zeroTrust.dlp.sensitivityGroups.levels.order.<a href="./src/resources/zero-trust/dlp/sensitivity-groups/levels/order.ts">update</a>(sensitivityGroupId, { ...params }) -> OrderUpdateResponse</code>
+- <code title="get /accounts/{account_id}/dlp/sensitivity_groups/{sensitivity_group_id}/level_order">client.zeroTrust.dlp.sensitivityGroups.levels.order.<a href="./src/resources/zero-trust/dlp/sensitivity-groups/levels/order.ts">get</a>(sensitivityGroupId, { ...params }) -> OrderGetResponse</code>
+
+### DataTagCategories
+
+Types:
+
+- <code><a href="./src/resources/zero-trust/dlp/data-tag-categories/data-tag-categories.ts">DataTagCategoryCreateResponse</a></code>
+- <code><a href="./src/resources/zero-trust/dlp/data-tag-categories/data-tag-categories.ts">DataTagCategoryUpdateResponse</a></code>
+- <code><a href="./src/resources/zero-trust/dlp/data-tag-categories/data-tag-categories.ts">DataTagCategoryListResponse</a></code>
+- <code><a href="./src/resources/zero-trust/dlp/data-tag-categories/data-tag-categories.ts">DataTagCategoryDeleteResponse</a></code>
+- <code><a href="./src/resources/zero-trust/dlp/data-tag-categories/data-tag-categories.ts">DataTagCategoryGetResponse</a></code>
+
+Methods:
+
+- <code title="post /accounts/{account_id}/dlp/data_tag_categories">client.zeroTrust.dlp.dataTagCategories.<a href="./src/resources/zero-trust/dlp/data-tag-categories/data-tag-categories.ts">create</a>({ ...params }) -> DataTagCategoryCreateResponse</code>
+- <code title="put /accounts/{account_id}/dlp/data_tag_categories/{category_id}">client.zeroTrust.dlp.dataTagCategories.<a href="./src/resources/zero-trust/dlp/data-tag-categories/data-tag-categories.ts">update</a>(categoryId, { ...params }) -> DataTagCategoryUpdateResponse</code>
+- <code title="get /accounts/{account_id}/dlp/data_tag_categories">client.zeroTrust.dlp.dataTagCategories.<a href="./src/resources/zero-trust/dlp/data-tag-categories/data-tag-categories.ts">list</a>({ ...params }) -> DataTagCategoryListResponsesSinglePage</code>
+- <code title="delete /accounts/{account_id}/dlp/data_tag_categories/{category_id}">client.zeroTrust.dlp.dataTagCategories.<a href="./src/resources/zero-trust/dlp/data-tag-categories/data-tag-categories.ts">delete</a>(categoryId, { ...params }) -> DataTagCategoryDeleteResponse | null</code>
+- <code title="get /accounts/{account_id}/dlp/data_tag_categories/{category_id}">client.zeroTrust.dlp.dataTagCategories.<a href="./src/resources/zero-trust/dlp/data-tag-categories/data-tag-categories.ts">get</a>(categoryId, { ...params }) -> DataTagCategoryGetResponse</code>
+
+#### DataTags
+
+Types:
+
+- <code><a href="./src/resources/zero-trust/dlp/data-tag-categories/data-tags.ts">DataTagCreateResponse</a></code>
+- <code><a href="./src/resources/zero-trust/dlp/data-tag-categories/data-tags.ts">DataTagUpdateResponse</a></code>
+- <code><a href="./src/resources/zero-trust/dlp/data-tag-categories/data-tags.ts">DataTagListResponse</a></code>
+- <code><a href="./src/resources/zero-trust/dlp/data-tag-categories/data-tags.ts">DataTagDeleteResponse</a></code>
+- <code><a href="./src/resources/zero-trust/dlp/data-tag-categories/data-tags.ts">DataTagGetResponse</a></code>
+
+Methods:
+
+- <code title="post /accounts/{account_id}/dlp/data_tag_categories/{category_id}/data_tags">client.zeroTrust.dlp.dataTagCategories.dataTags.<a href="./src/resources/zero-trust/dlp/data-tag-categories/data-tags.ts">create</a>(categoryId, { ...params }) -> DataTagCreateResponse</code>
+- <code title="put /accounts/{account_id}/dlp/data_tag_categories/{category_id}/data_tags/{tag_id}">client.zeroTrust.dlp.dataTagCategories.dataTags.<a href="./src/resources/zero-trust/dlp/data-tag-categories/data-tags.ts">update</a>(categoryId, tagId, { ...params }) -> DataTagUpdateResponse</code>
+- <code title="get /accounts/{account_id}/dlp/data_tag_categories/{category_id}/data_tags">client.zeroTrust.dlp.dataTagCategories.dataTags.<a href="./src/resources/zero-trust/dlp/data-tag-categories/data-tags.ts">list</a>(categoryId, { ...params }) -> DataTagListResponsesSinglePage</code>
+- <code title="delete /accounts/{account_id}/dlp/data_tag_categories/{category_id}/data_tags/{tag_id}">client.zeroTrust.dlp.dataTagCategories.dataTags.<a href="./src/resources/zero-trust/dlp/data-tag-categories/data-tags.ts">delete</a>(categoryId, tagId, { ...params }) -> DataTagDeleteResponse | null</code>
+- <code title="get /accounts/{account_id}/dlp/data_tag_categories/{category_id}/data_tags/{tag_id}">client.zeroTrust.dlp.dataTagCategories.dataTags.<a href="./src/resources/zero-trust/dlp/data-tag-categories/data-tags.ts">get</a>(categoryId, tagId, { ...params }) -> DataTagGetResponse</code>
+
+### DataClasses
+
+Types:
+
+- <code><a href="./src/resources/zero-trust/dlp/data-classes.ts">DataClassCreateResponse</a></code>
+- <code><a href="./src/resources/zero-trust/dlp/data-classes.ts">DataClassUpdateResponse</a></code>
+- <code><a href="./src/resources/zero-trust/dlp/data-classes.ts">DataClassListResponse</a></code>
+- <code><a href="./src/resources/zero-trust/dlp/data-classes.ts">DataClassDeleteResponse</a></code>
+- <code><a href="./src/resources/zero-trust/dlp/data-classes.ts">DataClassGetResponse</a></code>
+
+Methods:
+
+- <code title="post /accounts/{account_id}/dlp/data_classes">client.zeroTrust.dlp.dataClasses.<a href="./src/resources/zero-trust/dlp/data-classes.ts">create</a>({ ...params }) -> DataClassCreateResponse</code>
+- <code title="put /accounts/{account_id}/dlp/data_classes/{data_class_id}">client.zeroTrust.dlp.dataClasses.<a href="./src/resources/zero-trust/dlp/data-classes.ts">update</a>(dataClassId, { ...params }) -> DataClassUpdateResponse</code>
+- <code title="get /accounts/{account_id}/dlp/data_classes">client.zeroTrust.dlp.dataClasses.<a href="./src/resources/zero-trust/dlp/data-classes.ts">list</a>({ ...params }) -> DataClassListResponsesSinglePage</code>
+- <code title="delete /accounts/{account_id}/dlp/data_classes/{data_class_id}">client.zeroTrust.dlp.dataClasses.<a href="./src/resources/zero-trust/dlp/data-classes.ts">delete</a>(dataClassId, { ...params }) -> DataClassDeleteResponse | null</code>
+- <code title="get /accounts/{account_id}/dlp/data_classes/{data_class_id}">client.zeroTrust.dlp.dataClasses.<a href="./src/resources/zero-trust/dlp/data-classes.ts">get</a>(dataClassId, { ...params }) -> DataClassGetResponse</code>
+
 ## Gateway
 
 Types:
@@ -1474,13 +1655,9 @@ Methods:
 
 #### Items
 
-Types:
-
-- <code><a href="./src/resources/zero-trust/gateway/lists/items.ts">ItemListResponse</a></code>
-
 Methods:
 
-- <code title="get /accounts/{account_id}/gateway/lists/{list_id}/items">client.zeroTrust.gateway.lists.items.<a href="./src/resources/zero-trust/gateway/lists/items.ts">list</a>(listId, { ...params }) -> ItemListResponsesSinglePage</code>
+- <code title="get /accounts/{account_id}/gateway/lists/{list_id}/items">client.zeroTrust.gateway.lists.items.<a href="./src/resources/zero-trust/gateway/lists/items.ts">list</a>(listId, { ...params }) -> GatewayItemsSinglePage</code>
 
 ### Locations
 

package/src/resources/zero-trust/devices/policies/custom/custom.ts

@@ -212,6 +212,12 @@ export interface CustomCreateParams {
    */
   disable_auto_fallback?: boolean;
 
+  /**
+   * Body param: List of DNS search suffixes to apply to clients. Suffixes are
+   * evaluated in order. Use an empty array to clear.
+   */
+  dns_search_suffixes?: Array<CustomCreateParams.DNSSearchSuffix>;
+
   /**
    * Body param: Whether the policy will be applied to matching devices.
    */
@@ -288,6 +294,18 @@ export interface CustomCreateParams {
 }
 
 export namespace CustomCreateParams {
+  export interface DNSSearchSuffix {
+    /**
+     * The DNS search suffix to append when resolving short hostnames.
+     */
+    suffix: string;
+
+    /**
+     * A description of the DNS search suffix.
+     */
+    description?: string;
+  }
+
   export interface ServiceModeV2 {
     /**
      * The mode to run the WARP client under.
@@ -370,6 +388,12 @@ export interface CustomEditParams {
    */
   disable_auto_fallback?: boolean;
 
+  /**
+   * Body param: List of DNS search suffixes to apply to clients. Suffixes are
+   * evaluated in order. Use an empty array to clear.
+   */
+  dns_search_suffixes?: Array<CustomEditParams.DNSSearchSuffix>;
+
   /**
    * Body param: Whether the policy will be applied to matching devices.
    */
@@ -465,6 +489,18 @@ export interface CustomEditParams {
 }
 
 export namespace CustomEditParams {
+  export interface DNSSearchSuffix {
+    /**
+     * The DNS search suffix to append when resolving short hostnames.
+     */
+    suffix: string;
+
+    /**
+     * A description of the DNS search suffix.
+     */
+    description?: string;
+  }
+
   export interface ServiceModeV2 {
     /**
      * The mode to run the WARP client under.