cloudflare 6.2.0 → 6.4.0

package/src/resources/zero-trust/devices/policies/default/default.ts

@@ -101,6 +101,12 @@ export interface DefaultEditResponse {
    */
   disable_auto_fallback?: boolean;
 
+  /**
+   * List of DNS search suffixes to apply to clients. Suffixes are evaluated in
+   * order. Use an empty array to clear.
+   */
+  dns_search_suffixes?: Array<DefaultEditResponse.DNSSearchSuffix>;
+
   /**
    * Whether the policy will be applied to matching devices.
    */
@@ -163,6 +169,18 @@ export interface DefaultEditResponse {
 }
 
 export namespace DefaultEditResponse {
+  export interface DNSSearchSuffix {
+    /**
+     * The DNS search suffix to append when resolving short hostnames.
+     */
+    suffix: string;
+
+    /**
+     * A description of the DNS search suffix.
+     */
+    description?: string;
+  }
+
   export interface ServiceModeV2 {
     /**
      * The mode to run the WARP client under.
@@ -231,6 +249,12 @@ export interface DefaultGetResponse {
    */
   disable_auto_fallback?: boolean;
 
+  /**
+   * List of DNS search suffixes to apply to clients. Suffixes are evaluated in
+   * order. Use an empty array to clear.
+   */
+  dns_search_suffixes?: Array<DefaultGetResponse.DNSSearchSuffix>;
+
   /**
    * Whether the policy will be applied to matching devices.
    */
@@ -293,6 +317,18 @@ export interface DefaultGetResponse {
 }
 
 export namespace DefaultGetResponse {
+  export interface DNSSearchSuffix {
+    /**
+     * The DNS search suffix to append when resolving short hostnames.
+     */
+    suffix: string;
+
+    /**
+     * A description of the DNS search suffix.
+     */
+    description?: string;
+  }
+
   export interface ServiceModeV2 {
     /**
      * The mode to run the WARP client under.
@@ -362,6 +398,12 @@ export interface DefaultEditParams {
    */
   disable_auto_fallback?: boolean;
 
+  /**
+   * Body param: List of DNS search suffixes to apply to clients. Suffixes are
+   * evaluated in order. Use an empty array to clear.
+   */
+  dns_search_suffixes?: Array<DefaultEditParams.DNSSearchSuffix>;
+
   /**
    * Body param: List of routes excluded in the WARP client's tunnel. Both 'exclude'
    * and 'include' cannot be set in the same request.
@@ -433,6 +475,18 @@ export interface DefaultEditParams {
 }
 
 export namespace DefaultEditParams {
+  export interface DNSSearchSuffix {
+    /**
+     * The DNS search suffix to append when resolving short hostnames.
+     */
+    suffix: string;
+
+    /**
+     * A description of the DNS search suffix.
+     */
+    description?: string;
+  }
+
   export interface ServiceModeV2 {
     /**
      * The mode to run the WARP client under.

package/src/resources/zero-trust/devices/policies/policies.ts

@@ -121,6 +121,12 @@ export interface SettingsPolicy {
    */
   disable_auto_fallback?: boolean;
 
+  /**
+   * List of DNS search suffixes to apply to clients. Suffixes are evaluated in
+   * order. Use an empty array to clear.
+   */
+  dns_search_suffixes?: Array<SettingsPolicy.DNSSearchSuffix>;
+
   /**
    * Whether the policy will be applied to matching devices.
    */
@@ -218,6 +224,18 @@ export interface SettingsPolicy {
 }
 
 export namespace SettingsPolicy {
+  export interface DNSSearchSuffix {
+    /**
+     * The DNS search suffix to append when resolving short hostnames.
+     */
+    suffix: string;
+
+    /**
+     * A description of the DNS search suffix.
+     */
+    description?: string;
+  }
+
   export interface ServiceModeV2 {
     /**
      * The mode to run the WARP client under.

package/src/resources/zero-trust/devices/posture/posture.ts

@@ -811,6 +811,12 @@ export interface KolideInput {
    */
   connection_id: string;
 
+  /**
+   * The set of Kolide device authentication states that pass the posture check.
+   * Device must match one of the specified states.
+   */
+  auth_state?: Array<'Good' | 'Notified' | 'Will Block' | 'Blocked'>;
+
   /**
    * Count Operator.
    */
@@ -828,6 +834,12 @@ export interface KolideInputParam {
    */
   connection_id: string;
 
+  /**
+   * The set of Kolide device authentication states that pass the posture check.
+   * Device must match one of the specified states.
+   */
+  auth_state?: Array<'Good' | 'Notified' | 'Will Block' | 'Blocked'>;
+
   /**
    * Count Operator.
    */

package/src/resources/zero-trust/dex/commands/commands.ts

@@ -29,8 +29,8 @@ export class Commands extends APIResource {
    *   account_id: '01a7362d577a6c3019a474fd6f485823',
    *   commands: [
    *     {
-   *       command_type: 'pcap',
    *       device_id: 'device_id',
+   *       type: 'pcap',
    *       user_email: 'user_email',
    *     },
    *   ],
@@ -114,7 +114,7 @@ export namespace CommandCreateResponse {
     status?: 'PENDING_EXEC' | 'PENDING_UPLOAD' | 'SUCCESS' | 'FAILED';
 
     /**
-     * Type of the command (e.g., "pcap" or "warp-diag")
+     * Type of the command (e.g., "pcap", "speed-test", or "warp-diag")
      */
     type?: string;
   }
@@ -164,21 +164,24 @@ export interface CommandCreateParams {
 export namespace CommandCreateParams {
   export interface Command {
     /**
-     * Type of command to execute on the device
+     * Unique identifier for the physical device
      */
-    command_type: 'pcap' | 'warp-diag';
+    device_id: string;
 
     /**
-     * Unique identifier for the physical device
+     * Type of command to execute on the device
      */
-    device_id: string;
+    type: 'pcap' | 'speed-test' | 'warp-diag';
 
     /**
      * Email tied to the device
      */
     user_email: string;
 
-    command_args?: Command.CommandArgs;
+    /**
+     * Command arguments. Allowed fields depend on `type`.
+     */
+    args?: Command.WARPDiagArgs | Command.PCAPArgs | Command.SpeedTestArgs;
 
     /**
      * Unique identifier for the device registration. Required for multi-user devices
@@ -188,16 +191,19 @@ export namespace CommandCreateParams {
   }
 
   export namespace Command {
-    export interface CommandArgs {
+    export interface WARPDiagArgs {
       /**
-       * List of interfaces to capture packets on
+       * Test an IP address from all included or excluded ranges. Essentially the same as
+       * running 'route get <ip>' and collecting the results. This option may increase
+       * the time taken to collect the warp-diag.
        */
-      interfaces?: Array<'default' | 'tunnel'>;
+      'test-all-routes'?: boolean;
+    }
 
+    export interface PCAPArgs {
       /**
-       * Maximum file size (in MB) for the capture file. Specifies the maximum file size
-       * of the warp-diag zip artifact that can be uploaded. If the zip artifact exceeds
-       * the specified max file size, it will NOT be uploaded
+       * Maximum file size (in MB) for the capture file. If the capture artifact exceeds
+       * the specified max file size, it will NOT be uploaded.
        */
       'max-file-size-mb'?: number;
 
@@ -207,17 +213,16 @@ export namespace CommandCreateParams {
       'packet-size-bytes'?: number;
 
       /**
-       * Test an IP address from all included or excluded ranges. Tests an IP address
-       * from all included or excluded ranges. Essentially the same as running 'route get
-       * <ip>'' and collecting the results. This option may increase the time taken to
-       * collect the warp-diag
+       * Limit on capture duration (in minutes)
        */
-      'test-all-routes'?: boolean;
+      'time-limit-min'?: number;
+    }
 
+    export interface SpeedTestArgs {
       /**
-       * Limit on capture duration (in minutes)
+       * List of interfaces to run the speed test on
        */
-      'time-limit-min'?: number;
+      interfaces?: Array<'default' | 'tunnel'>;
     }
   }
 }
@@ -231,7 +236,7 @@ export interface CommandListParams extends V4PagePaginationParams {
   /**
    * Query param: Optionally filter executed commands by command type
    */
-  command_type?: string;
+  command_type?: 'pcap' | 'speed-test' | 'warp-diag';
 
   /**
    * Query param: Unique identifier for a device

package/src/resources/zero-trust/dex/devices/devices.ts

@@ -0,0 +1,19 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+import { APIResource } from '../../../../resource';
+import * as ISPsAPI from './isps';
+import { ISPListParams, ISPs, ISPsV4PagePagination } from './isps';
+
+export class Devices extends APIResource {
+  isps: ISPsAPI.ISPs = new ISPsAPI.ISPs(this._client);
+}
+
+Devices.ISPsV4PagePagination = ISPsV4PagePagination;
+
+export declare namespace Devices {
+  export {
+    type ISPs as ISPs,
+    ISPsV4PagePagination as ISPsV4PagePagination,
+    type ISPListParams as ISPListParams,
+  };
+}

package/src/resources/zero-trust/dex/devices/index.ts

@@ -0,0 +1,4 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+export { Devices } from './devices';
+export { ISPsV4PagePagination, ISPs, type ISPListParams } from './isps';

package/src/resources/zero-trust/dex/devices/isps.ts

@@ -0,0 +1,187 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+import { APIResource } from '../../../../resource';
+import * as Core from '../../../../core';
+import { V4PagePagination, type V4PagePaginationParams } from '../../../../pagination';
+
+export class ISPs extends APIResource {
+  /**
+   * List ISP information observed for a specific device during traceroute tests.
+   *
+   * @example
+   * ```ts
+   * // Automatically fetches more pages as needed.
+   * for await (const isps of client.zeroTrust.dex.devices.isps.list(
+   *   'f174e90a-fafe-4643-bbbc-4a0ed4fc8415',
+   *   {
+   *     account_id: '01a7362d577a6c3019a474fd6f485823',
+   *     per_page: 1,
+   *   },
+   * )) {
+   *   // ...
+   * }
+   * ```
+   */
+  list(
+    deviceId: string,
+    params: ISPListParams,
+    options?: Core.RequestOptions,
+  ): Core.PagePromise<ISPsV4PagePagination, ISPs> {
+    const { account_id, ...query } = params;
+    return this._client.getAPIList(
+      `/accounts/${account_id}/dex/devices/${deviceId}/isps`,
+      ISPsV4PagePagination,
+      { query, ...options },
+    );
+  }
+}
+
+export class ISPsV4PagePagination extends V4PagePagination<ISPs> {}
+
+export interface ISPs {
+  isps: Array<ISPs.ISP>;
+}
+
+export namespace ISPs {
+  export interface ISP {
+    /**
+     * The test that generated this result
+     */
+    test_id: string;
+
+    /**
+     * The specific test result
+     */
+    test_result_id: string;
+
+    /**
+     * Timestamp of when the ISP was observed
+     */
+    time_start: string;
+
+    /**
+     * IP address information for the ISP hop. Fields marked as PII-gated (`name`,
+     * `address`, `netmask`, and all `location` sub-fields) will be returned as the
+     * literal string `"REDACTED"` for callers that do not have the PII permission.
+     * `asn`, `aso`, and `version` are always returned regardless of PII access.
+     */
+    ip?: ISP.IP;
+  }
+
+  export namespace ISP {
+    /**
+     * IP address information for the ISP hop. Fields marked as PII-gated (`name`,
+     * `address`, `netmask`, and all `location` sub-fields) will be returned as the
+     * literal string `"REDACTED"` for callers that do not have the PII permission.
+     * `asn`, `aso`, and `version` are always returned regardless of PII access.
+     */
+    export interface IP {
+      /**
+       * IP address. Returned as `"REDACTED"` without PII permission.
+       */
+      address?: string;
+
+      /**
+       * Autonomous System Number
+       */
+      asn?: number;
+
+      /**
+       * Autonomous System Organization name
+       */
+      aso?: string;
+
+      /**
+       * Geographic location information. All fields are returned as the literal string
+       * `"REDACTED"` for callers that do not have the PII permission.
+       */
+      location?: IP.Location;
+
+      /**
+       * Named IP address (reverse DNS hostname when available). Returned as `"REDACTED"`
+       * without PII permission.
+       */
+      name?: string;
+
+      /**
+       * Network mask. Returned as `"REDACTED"` without PII permission.
+       */
+      netmask?: string;
+
+      /**
+       * IP version (`1` for IPv4, `2` for IPv6, `0` if unknown)
+       */
+      version?: number;
+    }
+
+    export namespace IP {
+      /**
+       * Geographic location information. All fields are returned as the literal string
+       * `"REDACTED"` for callers that do not have the PII permission.
+       */
+      export interface Location {
+        /**
+         * City name. Returned as `"REDACTED"` without PII permission.
+         */
+        city?: string;
+
+        /**
+         * Country ISO code. Returned as `"REDACTED"` without PII permission.
+         */
+        country_iso?: string;
+
+        /**
+         * State/province ISO code. Returned as `"REDACTED"` without PII permission.
+         */
+        state_iso?: string;
+
+        /**
+         * ZIP/postal code. Returned as `"REDACTED"` without PII permission.
+         */
+        zip?: string;
+      }
+    }
+  }
+}
+
+export interface ISPListParams extends V4PagePaginationParams {
+  /**
+   * Path param: unique identifier linked to an account in the API request path
+   */
+  account_id: string;
+
+  /**
+   * Query param: Cursor for cursor-based pagination. Mutually exclusive with page.
+   */
+  cursor?: string;
+
+  /**
+   * Query param: Start time for the query in ISO 8601 format
+   */
+  from?: string;
+
+  /**
+   * Query param: The field to sort results by
+   */
+  sort_by?: 'time_start';
+
+  /**
+   * Query param: The order to sort results
+   */
+  sort_order?: 'ASC' | 'DESC';
+
+  /**
+   * Query param: End time for the query in ISO 8601 format
+   */
+  to?: string;
+}
+
+ISPs.ISPsV4PagePagination = ISPsV4PagePagination;
+
+export declare namespace ISPs {
+  export {
+    type ISPs as ISPs,
+    ISPsV4PagePagination as ISPsV4PagePagination,
+    type ISPListParams as ISPListParams,
+  };
+}

package/src/resources/zero-trust/dex/devices.ts

@@ -0,0 +1,3 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+export * from './devices/index';

package/src/resources/zero-trust/dex/dex.ts

@@ -38,6 +38,8 @@ import {
   CommandListResponsesV4PagePagination,
   Commands,
 } from './commands/commands';
+import * as DevicesAPI from './devices/devices';
+import { Devices } from './devices/devices';
 import * as FleetStatusAPI from './fleet-status/fleet-status';
 import {
   FleetStatus,
@@ -67,6 +69,7 @@ export class DEX extends APIResource {
     new TracerouteTestResultsAPI.TracerouteTestResults(this._client);
   tracerouteTests: TracerouteTestsAPI.TracerouteTests = new TracerouteTestsAPI.TracerouteTests(this._client);
   rules: RulesAPI.Rules = new RulesAPI.Rules(this._client);
+  devices: DevicesAPI.Devices = new DevicesAPI.Devices(this._client);
 }
 
 export interface DigitalExperienceMonitor {
@@ -195,6 +198,7 @@ DEX.TracerouteTestResults = TracerouteTestResults;
 DEX.TracerouteTests = TracerouteTests;
 DEX.Rules = Rules;
 DEX.RuleListResponsesV4PagePagination = RuleListResponsesV4PagePagination;
+DEX.Devices = Devices;
 
 export declare namespace DEX {
   export {
@@ -273,4 +277,6 @@ export declare namespace DEX {
     type RuleDeleteParams as RuleDeleteParams,
     type RuleGetParams as RuleGetParams,
   };
+
+  export { Devices as Devices };
 }

package/src/resources/zero-trust/dex/index.ts

@@ -16,6 +16,7 @@ export {
   type NetworkPathResponse,
   type Percentiles,
 } from './dex';
+export { Devices } from './devices/index';
 export {
   FleetStatus,
   type LiveStat,