cloudflare 6.2.0 → 6.4.0

package/src/resources/workers/scripts/script-and-version-settings.ts

@@ -1044,6 +1044,15 @@ export namespace ScriptAndVersionSettingEditResponse {
        * Whether trace persistence is enabled for the Worker.
        */
       persist?: boolean;
+
+      /**
+       * Controls how inbound trace context (traceparent/tracestate) headers on incoming
+       * requests are handled. "authenticated" (default) honors inbound trace context
+       * only when accompanied by a valid trace auth token. "accept" unconditionally
+       * accepts inbound trace context. Requires the trace propagation feature to be
+       * enabled.
+       */
+      propagation_policy?: 'authenticated' | 'accept';
     }
   }
 
@@ -2133,6 +2142,15 @@ export namespace ScriptAndVersionSettingGetResponse {
        * Whether trace persistence is enabled for the Worker.
        */
       persist?: boolean;
+
+      /**
+       * Controls how inbound trace context (traceparent/tracestate) headers on incoming
+       * requests are handled. "authenticated" (default) honors inbound trace context
+       * only when accompanied by a valid trace auth token. "accept" unconditionally
+       * accepts inbound trace context. Requires the trace propagation feature to be
+       * enabled.
+       */
+      propagation_policy?: 'authenticated' | 'accept';
     }
   }
 
@@ -3269,6 +3287,15 @@ export namespace ScriptAndVersionSettingEditParams {
          * Whether trace persistence is enabled for the Worker.
          */
         persist?: boolean;
+
+        /**
+         * Controls how inbound trace context (traceparent/tracestate) headers on incoming
+         * requests are handled. "authenticated" (default) honors inbound trace context
+         * only when accompanied by a valid trace auth token. "accept" unconditionally
+         * accepts inbound trace context. Requires the trace propagation feature to be
+         * enabled.
+         */
+        propagation_policy?: 'authenticated' | 'accept';
       }
     }
 

package/src/resources/workers/scripts/scripts.ts

@@ -34,6 +34,8 @@ import {
 } from './script-and-version-settings';
 import * as SecretsAPI from './secrets';
 import {
+  SecretBulkUpdateParams,
+  SecretBulkUpdateResponse,
   SecretDeleteParams,
   SecretDeleteResponse,
   SecretGetParams,
@@ -444,6 +446,15 @@ export namespace Script {
        * Whether trace persistence is enabled for the Worker.
        */
       persist?: boolean;
+
+      /**
+       * Controls how inbound trace context (traceparent/tracestate) headers on incoming
+       * requests are handled. "authenticated" (default) honors inbound trace context
+       * only when accompanied by a valid trace auth token. "accept" unconditionally
+       * accepts inbound trace context. Requires the trace propagation feature to be
+       * enabled.
+       */
+      propagation_policy?: 'authenticated' | 'accept';
     }
   }
 
@@ -749,6 +760,15 @@ export namespace ScriptSetting {
        * Whether trace persistence is enabled for the Worker.
        */
       persist?: boolean;
+
+      /**
+       * Controls how inbound trace context (traceparent/tracestate) headers on incoming
+       * requests are handled. "authenticated" (default) honors inbound trace context
+       * only when accompanied by a valid trace auth token. "accept" unconditionally
+       * accepts inbound trace context. Requires the trace propagation feature to be
+       * enabled.
+       */
+      propagation_policy?: 'authenticated' | 'accept';
     }
   }
 }
@@ -977,6 +997,15 @@ export namespace ScriptUpdateResponse {
        * Whether trace persistence is enabled for the Worker.
        */
       persist?: boolean;
+
+      /**
+       * Controls how inbound trace context (traceparent/tracestate) headers on incoming
+       * requests are handled. "authenticated" (default) honors inbound trace context
+       * only when accompanied by a valid trace auth token. "accept" unconditionally
+       * accepts inbound trace context. Requires the trace propagation feature to be
+       * enabled.
+       */
+      propagation_policy?: 'authenticated' | 'accept';
     }
   }
 
@@ -1399,6 +1428,15 @@ export namespace ScriptListResponse {
        * Whether trace persistence is enabled for the Worker.
        */
       persist?: boolean;
+
+      /**
+       * Controls how inbound trace context (traceparent/tracestate) headers on incoming
+       * requests are handled. "authenticated" (default) honors inbound trace context
+       * only when accompanied by a valid trace auth token. "accept" unconditionally
+       * accepts inbound trace context. Requires the trace propagation feature to be
+       * enabled.
+       */
+      propagation_policy?: 'authenticated' | 'accept';
     }
   }
 
@@ -2800,6 +2838,15 @@ export namespace ScriptUpdateParams {
          * Whether trace persistence is enabled for the Worker.
          */
         persist?: boolean;
+
+        /**
+         * Controls how inbound trace context (traceparent/tracestate) headers on incoming
+         * requests are handled. "authenticated" (default) honors inbound trace context
+         * only when accompanied by a valid trace auth token. "accept" unconditionally
+         * accepts inbound trace context. Requires the trace propagation feature to be
+         * enabled.
+         */
+        propagation_policy?: 'authenticated' | 'accept';
       }
     }
 
@@ -3074,11 +3121,13 @@ export declare namespace Scripts {
     type SecretUpdateResponse as SecretUpdateResponse,
     type SecretListResponse as SecretListResponse,
     type SecretDeleteResponse as SecretDeleteResponse,
+    type SecretBulkUpdateResponse as SecretBulkUpdateResponse,
     type SecretGetResponse as SecretGetResponse,
     SecretListResponsesSinglePage as SecretListResponsesSinglePage,
     type SecretUpdateParams as SecretUpdateParams,
     type SecretListParams as SecretListParams,
     type SecretDeleteParams as SecretDeleteParams,
+    type SecretBulkUpdateParams as SecretBulkUpdateParams,
     type SecretGetParams as SecretGetParams,
   };
 

package/src/resources/workers/scripts/secrets.ts

@@ -89,6 +89,40 @@ export class Secrets extends APIResource {
     )._thenUnwrap((obj) => obj.result);
   }
 
+  /**
+   * Create, update, or delete multiple secrets on a script in a single operation
+   * using JSON Merge Patch (RFC 7396).
+   *
+   * Usage:
+   *
+   * - To create or update a secret, set its value to a secret object.
+   * - To delete a secret, set its value to `null`.
+   * - Secrets not included in the request are left unchanged.
+   *
+   * @example
+   * ```ts
+   * const response =
+   *   await client.workers.scripts.secrets.bulkUpdate(
+   *     'this-is_my_script-01',
+   *     { account_id: '023e105f4ecef8ad9ca31a8372d0c353' },
+   *   );
+   * ```
+   */
+  bulkUpdate(
+    scriptName: string,
+    params: SecretBulkUpdateParams,
+    options?: Core.RequestOptions,
+  ): Core.APIPromise<SecretBulkUpdateResponse> {
+    const { account_id, ...body } = params;
+    return (
+      this._client.patch(`/accounts/${account_id}/workers/scripts/${scriptName}/secrets-bulk`, {
+        body,
+        ...options,
+        headers: { 'Content-Type': 'application/merge-patch+json', ...options?.headers },
+      }) as Core.APIPromise<{ result: SecretBulkUpdateResponse }>
+    )._thenUnwrap((obj) => obj.result);
+  }
+
   /**
    * Get a given secret binding (value omitted) on a script.
    *
@@ -227,6 +261,61 @@ export namespace SecretListResponse {
 
 export type SecretDeleteResponse = unknown;
 
+/**
+ * Map of secret names to secret metadata for resulting secrets.
+ */
+export type SecretBulkUpdateResponse = {
+  [key: string]:
+    | SecretBulkUpdateResponse.WorkersBindingKindSecretText
+    | SecretBulkUpdateResponse.WorkersBindingKindSecretKey;
+};
+
+export namespace SecretBulkUpdateResponse {
+  export interface WorkersBindingKindSecretText {
+    /**
+     * A JavaScript variable name for the binding.
+     */
+    name: string;
+
+    /**
+     * The kind of resource that the binding provides.
+     */
+    type: 'secret_text';
+  }
+
+  export interface WorkersBindingKindSecretKey {
+    /**
+     * Algorithm-specific key parameters.
+     * [Learn more](https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/importKey#algorithm).
+     */
+    algorithm: unknown;
+
+    /**
+     * Data format of the key.
+     * [Learn more](https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/importKey#format).
+     */
+    format: 'raw' | 'pkcs8' | 'spki' | 'jwk';
+
+    /**
+     * A JavaScript variable name for the binding.
+     */
+    name: string;
+
+    /**
+     * The kind of resource that the binding provides.
+     */
+    type: 'secret_key';
+
+    /**
+     * Allowed operations with the key.
+     * [Learn more](https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/importKey#keyUsages).
+     */
+    usages: Array<
+      'encrypt' | 'decrypt' | 'sign' | 'verify' | 'deriveKey' | 'deriveBits' | 'wrapKey' | 'unwrapKey'
+    >;
+  }
+}
+
 /**
  * A secret value accessible through a binding.
  */
@@ -377,6 +466,95 @@ export interface SecretDeleteParams {
   url_encoded?: boolean;
 }
 
+export interface SecretBulkUpdateParams {
+  /**
+   * Path param: Identifier.
+   */
+  account_id: string;
+
+  /**
+   * Body param: Map of secret names to secret values:
+   *
+   * - Set to a secret object to create or update.
+   * - Set to `null` to delete.
+   * - Omit to leave unchanged.
+   */
+  secrets?: {
+    [key: string]:
+      | SecretBulkUpdateParams.WorkersBindingKindSecretText
+      | SecretBulkUpdateParams.WorkersBindingKindSecretKey
+      | null;
+  };
+
+  /**
+   * Body param: Optional version tags to apply to the new script version.
+   */
+  version_tags?: { [key: string]: unknown };
+}
+
+export namespace SecretBulkUpdateParams {
+  export interface WorkersBindingKindSecretText {
+    /**
+     * A JavaScript variable name for the binding.
+     */
+    name: string;
+
+    /**
+     * The secret value to use.
+     */
+    text: string;
+
+    /**
+     * The kind of resource that the binding provides.
+     */
+    type: 'secret_text';
+  }
+
+  export interface WorkersBindingKindSecretKey {
+    /**
+     * Algorithm-specific key parameters.
+     * [Learn more](https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/importKey#algorithm).
+     */
+    algorithm: unknown;
+
+    /**
+     * Data format of the key.
+     * [Learn more](https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/importKey#format).
+     */
+    format: 'raw' | 'pkcs8' | 'spki' | 'jwk';
+
+    /**
+     * A JavaScript variable name for the binding.
+     */
+    name: string;
+
+    /**
+     * The kind of resource that the binding provides.
+     */
+    type: 'secret_key';
+
+    /**
+     * Allowed operations with the key.
+     * [Learn more](https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/importKey#keyUsages).
+     */
+    usages: Array<
+      'encrypt' | 'decrypt' | 'sign' | 'verify' | 'deriveKey' | 'deriveBits' | 'wrapKey' | 'unwrapKey'
+    >;
+
+    /**
+     * Base64-encoded key data. Required if `format` is "raw", "pkcs8", or "spki".
+     */
+    key_base64?: string;
+
+    /**
+     * Key data in
+     * [JSON Web Key](https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/importKey#json_web_key)
+     * format. Required if `format` is "jwk".
+     */
+    key_jwk?: unknown;
+  }
+}
+
 export interface SecretGetParams {
   /**
    * Path param: Identifier.
@@ -396,11 +574,13 @@ export declare namespace Secrets {
     type SecretUpdateResponse as SecretUpdateResponse,
     type SecretListResponse as SecretListResponse,
     type SecretDeleteResponse as SecretDeleteResponse,
+    type SecretBulkUpdateResponse as SecretBulkUpdateResponse,
     type SecretGetResponse as SecretGetResponse,
     SecretListResponsesSinglePage as SecretListResponsesSinglePage,
     type SecretUpdateParams as SecretUpdateParams,
     type SecretListParams as SecretListParams,
     type SecretDeleteParams as SecretDeleteParams,
+    type SecretBulkUpdateParams as SecretBulkUpdateParams,
     type SecretGetParams as SecretGetParams,
   };
 }

package/src/resources/workers/scripts/settings.ts

@@ -173,6 +173,15 @@ export namespace SettingEditParams {
        * Whether trace persistence is enabled for the Worker.
        */
       persist?: boolean;
+
+      /**
+       * Controls how inbound trace context (traceparent/tracestate) headers on incoming
+       * requests are handled. "authenticated" (default) honors inbound trace context
+       * only when accompanied by a valid trace auth token. "accept" unconditionally
+       * accepts inbound trace context. Requires the trace propagation feature to be
+       * enabled.
+       */
+      propagation_policy?: 'authenticated' | 'accept';
     }
   }
 }

package/src/resources/workers-for-platforms/api.md

@@ -78,6 +78,7 @@ Types:
 - <code><a href="./src/resources/workers-for-platforms/dispatch/namespaces/scripts/secrets.ts">SecretUpdateResponse</a></code>
 - <code><a href="./src/resources/workers-for-platforms/dispatch/namespaces/scripts/secrets.ts">SecretListResponse</a></code>
 - <code><a href="./src/resources/workers-for-platforms/dispatch/namespaces/scripts/secrets.ts">SecretDeleteResponse</a></code>
+- <code><a href="./src/resources/workers-for-platforms/dispatch/namespaces/scripts/secrets.ts">SecretBulkUpdateResponse</a></code>
 - <code><a href="./src/resources/workers-for-platforms/dispatch/namespaces/scripts/secrets.ts">SecretGetResponse</a></code>
 
 Methods:
@@ -85,6 +86,7 @@ Methods:
 - <code title="put /accounts/{account_id}/workers/dispatch/namespaces/{dispatch_namespace}/scripts/{script_name}/secrets">client.workersForPlatforms.dispatch.namespaces.scripts.secrets.<a href="./src/resources/workers-for-platforms/dispatch/namespaces/scripts/secrets.ts">update</a>(dispatchNamespace, scriptName, { ...params }) -> SecretUpdateResponse</code>
 - <code title="get /accounts/{account_id}/workers/dispatch/namespaces/{dispatch_namespace}/scripts/{script_name}/secrets">client.workersForPlatforms.dispatch.namespaces.scripts.secrets.<a href="./src/resources/workers-for-platforms/dispatch/namespaces/scripts/secrets.ts">list</a>(dispatchNamespace, scriptName, { ...params }) -> SecretListResponsesSinglePage</code>
 - <code title="delete /accounts/{account_id}/workers/dispatch/namespaces/{dispatch_namespace}/scripts/{script_name}/secrets/{secret_name}">client.workersForPlatforms.dispatch.namespaces.scripts.secrets.<a href="./src/resources/workers-for-platforms/dispatch/namespaces/scripts/secrets.ts">delete</a>(dispatchNamespace, scriptName, secretName, { ...params }) -> SecretDeleteResponse | null</code>
+- <code title="patch /accounts/{account_id}/workers/dispatch/namespaces/{dispatch_namespace}/scripts/{script_name}/secrets-bulk">client.workersForPlatforms.dispatch.namespaces.scripts.secrets.<a href="./src/resources/workers-for-platforms/dispatch/namespaces/scripts/secrets.ts">bulkUpdate</a>(dispatchNamespace, scriptName, { ...params }) -> SecretBulkUpdateResponse</code>
 - <code title="get /accounts/{account_id}/workers/dispatch/namespaces/{dispatch_namespace}/scripts/{script_name}/secrets/{secret_name}">client.workersForPlatforms.dispatch.namespaces.scripts.secrets.<a href="./src/resources/workers-for-platforms/dispatch/namespaces/scripts/secrets.ts">get</a>(dispatchNamespace, scriptName, secretName, { ...params }) -> SecretGetResponse</code>
 
 ##### Tags

package/src/resources/workers-for-platforms/dispatch/namespaces/scripts/index.ts

@@ -23,10 +23,12 @@ export {
   type SecretUpdateResponse,
   type SecretListResponse,
   type SecretDeleteResponse,
+  type SecretBulkUpdateResponse,
   type SecretGetResponse,
   type SecretUpdateParams,
   type SecretListParams,
   type SecretDeleteParams,
+  type SecretBulkUpdateParams,
   type SecretGetParams,
 } from './secrets';
 export {

package/src/resources/workers-for-platforms/dispatch/namespaces/scripts/scripts.ts

@@ -13,6 +13,8 @@ import * as ContentAPI from './content';
 import { Content, ContentGetParams, ContentUpdateParams } from './content';
 import * as SecretsAPI from './secrets';
 import {
+  SecretBulkUpdateParams,
+  SecretBulkUpdateResponse,
   SecretDeleteParams,
   SecretDeleteResponse,
   SecretGetParams,
@@ -396,6 +398,15 @@ export namespace ScriptUpdateResponse {
        * Whether trace persistence is enabled for the Worker.
        */
       persist?: boolean;
+
+      /**
+       * Controls how inbound trace context (traceparent/tracestate) headers on incoming
+       * requests are handled. "authenticated" (default) honors inbound trace context
+       * only when accompanied by a valid trace auth token. "accept" unconditionally
+       * accepts inbound trace context. Requires the trace propagation feature to be
+       * enabled.
+       */
+      propagation_policy?: 'authenticated' | 'accept';
     }
   }
 
@@ -1716,6 +1727,15 @@ export namespace ScriptUpdateParams {
          * Whether trace persistence is enabled for the Worker.
          */
         persist?: boolean;
+
+        /**
+         * Controls how inbound trace context (traceparent/tracestate) headers on incoming
+         * requests are handled. "authenticated" (default) honors inbound trace context
+         * only when accompanied by a valid trace auth token. "accept" unconditionally
+         * accepts inbound trace context. Requires the trace propagation feature to be
+         * enabled.
+         */
+        propagation_policy?: 'authenticated' | 'accept';
       }
     }
 
@@ -1895,11 +1915,13 @@ export declare namespace Scripts {
     type SecretUpdateResponse as SecretUpdateResponse,
     type SecretListResponse as SecretListResponse,
     type SecretDeleteResponse as SecretDeleteResponse,
+    type SecretBulkUpdateResponse as SecretBulkUpdateResponse,
     type SecretGetResponse as SecretGetResponse,
     SecretListResponsesSinglePage as SecretListResponsesSinglePage,
     type SecretUpdateParams as SecretUpdateParams,
     type SecretListParams as SecretListParams,
     type SecretDeleteParams as SecretDeleteParams,
+    type SecretBulkUpdateParams as SecretBulkUpdateParams,
     type SecretGetParams as SecretGetParams,
   };
 

package/src/resources/workers-for-platforms/dispatch/namespaces/scripts/secrets.ts

@@ -97,6 +97,45 @@ export class Secrets extends APIResource {
     )._thenUnwrap((obj) => obj.result);
   }
 
+  /**
+   * Create, update, or delete multiple secrets on a script in a single operation
+   * using JSON Merge Patch (RFC 7396).
+   *
+   * Usage:
+   *
+   * - To create or update a secret, set its value to a secret object.
+   * - To delete a secret, set its value to `null`.
+   * - Secrets not included in the request are left unchanged.
+   *
+   * @example
+   * ```ts
+   * const response =
+   *   await client.workersForPlatforms.dispatch.namespaces.scripts.secrets.bulkUpdate(
+   *     'my-dispatch-namespace',
+   *     'this-is_my_script-01',
+   *     { account_id: '023e105f4ecef8ad9ca31a8372d0c353' },
+   *   );
+   * ```
+   */
+  bulkUpdate(
+    dispatchNamespace: string,
+    scriptName: string,
+    params: SecretBulkUpdateParams,
+    options?: Core.RequestOptions,
+  ): Core.APIPromise<SecretBulkUpdateResponse> {
+    const { account_id, ...body } = params;
+    return (
+      this._client.patch(
+        `/accounts/${account_id}/workers/dispatch/namespaces/${dispatchNamespace}/scripts/${scriptName}/secrets-bulk`,
+        {
+          body,
+          ...options,
+          headers: { 'Content-Type': 'application/merge-patch+json', ...options?.headers },
+        },
+      ) as Core.APIPromise<{ result: SecretBulkUpdateResponse }>
+    )._thenUnwrap((obj) => obj.result);
+  }
+
   /**
    * Get a given secret binding (value omitted) on a script uploaded to a Workers for
    * Platforms namespace.
@@ -239,6 +278,61 @@ export namespace SecretListResponse {
 
 export type SecretDeleteResponse = unknown;
 
+/**
+ * Map of secret names to secret metadata for resulting secrets.
+ */
+export type SecretBulkUpdateResponse = {
+  [key: string]:
+    | SecretBulkUpdateResponse.WorkersBindingKindSecretText
+    | SecretBulkUpdateResponse.WorkersBindingKindSecretKey;
+};
+
+export namespace SecretBulkUpdateResponse {
+  export interface WorkersBindingKindSecretText {
+    /**
+     * A JavaScript variable name for the binding.
+     */
+    name: string;
+
+    /**
+     * The kind of resource that the binding provides.
+     */
+    type: 'secret_text';
+  }
+
+  export interface WorkersBindingKindSecretKey {
+    /**
+     * Algorithm-specific key parameters.
+     * [Learn more](https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/importKey#algorithm).
+     */
+    algorithm: unknown;
+
+    /**
+     * Data format of the key.
+     * [Learn more](https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/importKey#format).
+     */
+    format: 'raw' | 'pkcs8' | 'spki' | 'jwk';
+
+    /**
+     * A JavaScript variable name for the binding.
+     */
+    name: string;
+
+    /**
+     * The kind of resource that the binding provides.
+     */
+    type: 'secret_key';
+
+    /**
+     * Allowed operations with the key.
+     * [Learn more](https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/importKey#keyUsages).
+     */
+    usages: Array<
+      'encrypt' | 'decrypt' | 'sign' | 'verify' | 'deriveKey' | 'deriveBits' | 'wrapKey' | 'unwrapKey'
+    >;
+  }
+}
+
 /**
  * A secret value accessible through a binding.
  */
@@ -389,6 +483,95 @@ export interface SecretDeleteParams {
   url_encoded?: boolean;
 }
 
+export interface SecretBulkUpdateParams {
+  /**
+   * Path param: Identifier.
+   */
+  account_id: string;
+
+  /**
+   * Body param: Map of secret names to secret values:
+   *
+   * - Set to a secret object to create or update.
+   * - Set to `null` to delete.
+   * - Omit to leave unchanged.
+   */
+  secrets?: {
+    [key: string]:
+      | SecretBulkUpdateParams.WorkersBindingKindSecretText
+      | SecretBulkUpdateParams.WorkersBindingKindSecretKey
+      | null;
+  };
+
+  /**
+   * Body param: Optional version tags to apply to the new script version.
+   */
+  version_tags?: { [key: string]: unknown };
+}
+
+export namespace SecretBulkUpdateParams {
+  export interface WorkersBindingKindSecretText {
+    /**
+     * A JavaScript variable name for the binding.
+     */
+    name: string;
+
+    /**
+     * The secret value to use.
+     */
+    text: string;
+
+    /**
+     * The kind of resource that the binding provides.
+     */
+    type: 'secret_text';
+  }
+
+  export interface WorkersBindingKindSecretKey {
+    /**
+     * Algorithm-specific key parameters.
+     * [Learn more](https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/importKey#algorithm).
+     */
+    algorithm: unknown;
+
+    /**
+     * Data format of the key.
+     * [Learn more](https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/importKey#format).
+     */
+    format: 'raw' | 'pkcs8' | 'spki' | 'jwk';
+
+    /**
+     * A JavaScript variable name for the binding.
+     */
+    name: string;
+
+    /**
+     * The kind of resource that the binding provides.
+     */
+    type: 'secret_key';
+
+    /**
+     * Allowed operations with the key.
+     * [Learn more](https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/importKey#keyUsages).
+     */
+    usages: Array<
+      'encrypt' | 'decrypt' | 'sign' | 'verify' | 'deriveKey' | 'deriveBits' | 'wrapKey' | 'unwrapKey'
+    >;
+
+    /**
+     * Base64-encoded key data. Required if `format` is "raw", "pkcs8", or "spki".
+     */
+    key_base64?: string;
+
+    /**
+     * Key data in
+     * [JSON Web Key](https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/importKey#json_web_key)
+     * format. Required if `format` is "jwk".
+     */
+    key_jwk?: unknown;
+  }
+}
+
 export interface SecretGetParams {
   /**
    * Path param: Identifier.
@@ -408,11 +591,13 @@ export declare namespace Secrets {
     type SecretUpdateResponse as SecretUpdateResponse,
     type SecretListResponse as SecretListResponse,
     type SecretDeleteResponse as SecretDeleteResponse,
+    type SecretBulkUpdateResponse as SecretBulkUpdateResponse,
     type SecretGetResponse as SecretGetResponse,
     SecretListResponsesSinglePage as SecretListResponsesSinglePage,
     type SecretUpdateParams as SecretUpdateParams,
     type SecretListParams as SecretListParams,
     type SecretDeleteParams as SecretDeleteParams,
+    type SecretBulkUpdateParams as SecretBulkUpdateParams,
     type SecretGetParams as SecretGetParams,
   };
 }