cloudflare 6.4.0 → 6.5.0

package/src/resources/user/tenants.ts

@@ -0,0 +1,27 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+import { APIResource } from '../../resource';
+import * as Core from '../../core';
+import * as OrganizationsAPI from '../organizations/organizations';
+import { OrganizationsSinglePage } from '../organizations/organizations';
+
+export class Tenants extends APIResource {
+  /**
+   * Retrieves list of tenants the authenticated user / method has access to.
+   *
+   * @example
+   * ```ts
+   * // Automatically fetches more pages as needed.
+   * for await (const organization of client.user.tenants.list()) {
+   *   // ...
+   * }
+   * ```
+   */
+  list(
+    options?: Core.RequestOptions,
+  ): Core.PagePromise<OrganizationsSinglePage, OrganizationsAPI.Organization> {
+    return this._client.getAPIList('/user/tenants', OrganizationsSinglePage, options);
+  }
+}
+
+export { OrganizationsSinglePage };

package/src/resources/user/tokens/permission-groups.ts

@@ -46,6 +46,24 @@ export interface PermissionGroupListResponse {
    */
   id?: string;
 
+  /**
+   * Product category that this permission group belongs to.
+   */
+  category?:
+    | 'developer_platform'
+    | 'ai_and_machine_learning'
+    | 'dns_and_zones'
+    | 'app_security'
+    | 'rules_and_configuration'
+    | 'cloudflare_one_and_zero_trust'
+    | 'analytics_and_logs'
+    | 'network_services'
+    | 'media'
+    | 'email_and_messaging'
+    | 'cache_and_performance'
+    | 'account_and_billing'
+    | 'other';
+
   /**
    * Permission Group Name
    */

package/src/resources/user/user.ts

@@ -22,6 +22,8 @@ import {
   SubscriptionUpdateResponse,
   Subscriptions,
 } from './subscriptions';
+import * as TenantsAPI from './tenants';
+import { Tenants } from './tenants';
 import * as BillingAPI from './billing/billing';
 import { Billing } from './billing/billing';
 import * as TokensAPI from './tokens/tokens';
@@ -41,6 +43,7 @@ export class User extends APIResource {
   invites: InvitesAPI.Invites = new InvitesAPI.Invites(this._client);
   organizations: OrganizationsAPI.Organizations = new OrganizationsAPI.Organizations(this._client);
   subscriptions: SubscriptionsAPI.Subscriptions = new SubscriptionsAPI.Subscriptions(this._client);
+  tenants: TenantsAPI.Tenants = new TenantsAPI.Tenants(this._client);
   tokens: TokensAPI.Tokens = new TokensAPI.Tokens(this._client);
 
   /**
@@ -58,7 +61,8 @@ export class User extends APIResource {
   }
 
   /**
-   * User Details
+   * Retrieves detailed information about the currently authenticated user, including
+   * email, name, and account memberships.
    *
    * @example
    * ```ts
@@ -258,6 +262,7 @@ User.InvitesSinglePage = InvitesSinglePage;
 User.Organizations = Organizations;
 User.OrganizationsV4PagePaginationArray = OrganizationsV4PagePaginationArray;
 User.Subscriptions = Subscriptions;
+User.Tenants = Tenants;
 User.Tokens = Tokens;
 
 export declare namespace User {
@@ -294,6 +299,8 @@ export declare namespace User {
     type SubscriptionUpdateParams as SubscriptionUpdateParams,
   };
 
+  export { Tenants as Tenants };
+
   export {
     Tokens as Tokens,
     type TokenCreateResponse as TokenCreateResponse,

package/src/resources/workers/scripts/scripts.ts

@@ -1810,7 +1810,8 @@ export namespace ScriptUpdateParams {
 
     /**
      * Retain assets which exist for a previously uploaded Worker version; used in lieu
-     * of providing a completion token.
+     * of providing a completion token. An explicit `assets` upload takes precedence
+     * over `keep_assets`.
      */
     keep_assets?: boolean;
 

package/src/resources/workers/scripts/secrets.ts

@@ -118,7 +118,6 @@ export class Secrets extends APIResource {
       this._client.patch(`/accounts/${account_id}/workers/scripts/${scriptName}/secrets-bulk`, {
         body,
         ...options,
-        headers: { 'Content-Type': 'application/merge-patch+json', ...options?.headers },
       }) as Core.APIPromise<{ result: SecretBulkUpdateResponse }>
     )._thenUnwrap((obj) => obj.result);
   }

package/src/resources/workers-for-platforms/dispatch/namespaces/scripts/scripts.ts

@@ -714,7 +714,8 @@ export namespace ScriptUpdateParams {
 
     /**
      * Retain assets which exist for a previously uploaded Worker version; used in lieu
-     * of providing a completion token.
+     * of providing a completion token. An explicit `assets` upload takes precedence
+     * over `keep_assets`.
      */
     keep_assets?: boolean;
 

package/src/resources/workers-for-platforms/dispatch/namespaces/scripts/secrets.ts

@@ -127,11 +127,7 @@ export class Secrets extends APIResource {
     return (
       this._client.patch(
         `/accounts/${account_id}/workers/dispatch/namespaces/${dispatchNamespace}/scripts/${scriptName}/secrets-bulk`,
-        {
-          body,
-          ...options,
-          headers: { 'Content-Type': 'application/merge-patch+json', ...options?.headers },
-        },
+        { body, ...options },
       ) as Core.APIPromise<{ result: SecretBulkUpdateResponse }>
     )._thenUnwrap((obj) => obj.result);
   }

package/src/resources/zero-trust/access/access.ts

@@ -152,7 +152,6 @@ import {
   ApplicationPolicy,
   ApplicationRevokeTokensParams,
   ApplicationRevokeTokensResponse,
-  ApplicationSCIMConfig,
   ApplicationType,
   ApplicationUpdateParams,
   ApplicationUpdateResponse,
@@ -300,7 +299,6 @@ export declare namespace Access {
     type AppID as AppID,
     type Application as Application,
     type ApplicationPolicy as ApplicationPolicy,
-    type ApplicationSCIMConfig as ApplicationSCIMConfig,
     type ApplicationType as ApplicationType,
     type CORSHeaders as CORSHeaders,
     type Decision as Decision,

package/src/resources/zero-trust/access/ai-controls/mcp/portals.ts

@@ -202,9 +202,9 @@ export namespace PortalCreateResponse {
     /**
      * When true, the gateway worker uses the shared Cloudflare-owned OAuth callback
      * endpoint as the redirect_uri for upstream on-behalf OAuth, instead of the
-     * customer portal hostname. New public server creates default to true; existing
-     * servers default to false from migration until explicitly updated. Effective
-     * behavior is gated by the gateway worker's per-env rollout mode KV key.
+     * customer portal hostname. Defaults to false (off); opt in per server by setting
+     * true. Effective behavior is gated by the gateway worker's per-env rollout mode
+     * KV key.
      */
     is_shared_oauth_callback_enabled?: boolean;
 
@@ -353,9 +353,9 @@ export namespace PortalUpdateResponse {
     /**
      * When true, the gateway worker uses the shared Cloudflare-owned OAuth callback
      * endpoint as the redirect_uri for upstream on-behalf OAuth, instead of the
-     * customer portal hostname. New public server creates default to true; existing
-     * servers default to false from migration until explicitly updated. Effective
-     * behavior is gated by the gateway worker's per-env rollout mode KV key.
+     * customer portal hostname. Defaults to false (off); opt in per server by setting
+     * true. Effective behavior is gated by the gateway worker's per-env rollout mode
+     * KV key.
      */
     is_shared_oauth_callback_enabled?: boolean;
 
@@ -504,9 +504,9 @@ export namespace PortalListResponse {
     /**
      * When true, the gateway worker uses the shared Cloudflare-owned OAuth callback
      * endpoint as the redirect_uri for upstream on-behalf OAuth, instead of the
-     * customer portal hostname. New public server creates default to true; existing
-     * servers default to false from migration until explicitly updated. Effective
-     * behavior is gated by the gateway worker's per-env rollout mode KV key.
+     * customer portal hostname. Defaults to false (off); opt in per server by setting
+     * true. Effective behavior is gated by the gateway worker's per-env rollout mode
+     * KV key.
      */
     is_shared_oauth_callback_enabled?: boolean;
 
@@ -686,9 +686,9 @@ export namespace PortalReadResponse {
     /**
      * When true, the gateway worker uses the shared Cloudflare-owned OAuth callback
      * endpoint as the redirect_uri for upstream on-behalf OAuth, instead of the
-     * customer portal hostname. New public server creates default to true; existing
-     * servers default to false from migration until explicitly updated. Effective
-     * behavior is gated by the gateway worker's per-env rollout mode KV key.
+     * customer portal hostname. Defaults to false (off); opt in per server by setting
+     * true. Effective behavior is gated by the gateway worker's per-env rollout mode
+     * KV key.
      */
     is_shared_oauth_callback_enabled?: boolean;
 

package/src/resources/zero-trust/access/ai-controls/mcp/servers.ts

@@ -194,9 +194,9 @@ export interface ServerCreateResponse {
   /**
    * When true, the gateway worker uses the shared Cloudflare-owned OAuth callback
    * endpoint as the redirect_uri for upstream on-behalf OAuth, instead of the
-   * customer portal hostname. New public server creates default to true; existing
-   * servers default to false from migration until explicitly updated. Effective
-   * behavior is gated by the gateway worker's per-env rollout mode KV key.
+   * customer portal hostname. Defaults to false (off); opt in per server by setting
+   * true. Effective behavior is gated by the gateway worker's per-env rollout mode
+   * KV key.
    */
   is_shared_oauth_callback_enabled?: boolean;
 
@@ -298,9 +298,9 @@ export interface ServerUpdateResponse {
   /**
    * When true, the gateway worker uses the shared Cloudflare-owned OAuth callback
    * endpoint as the redirect_uri for upstream on-behalf OAuth, instead of the
-   * customer portal hostname. New public server creates default to true; existing
-   * servers default to false from migration until explicitly updated. Effective
-   * behavior is gated by the gateway worker's per-env rollout mode KV key.
+   * customer portal hostname. Defaults to false (off); opt in per server by setting
+   * true. Effective behavior is gated by the gateway worker's per-env rollout mode
+   * KV key.
    */
   is_shared_oauth_callback_enabled?: boolean;
 
@@ -402,9 +402,9 @@ export interface ServerListResponse {
   /**
    * When true, the gateway worker uses the shared Cloudflare-owned OAuth callback
    * endpoint as the redirect_uri for upstream on-behalf OAuth, instead of the
-   * customer portal hostname. New public server creates default to true; existing
-   * servers default to false from migration until explicitly updated. Effective
-   * behavior is gated by the gateway worker's per-env rollout mode KV key.
+   * customer portal hostname. Defaults to false (off); opt in per server by setting
+   * true. Effective behavior is gated by the gateway worker's per-env rollout mode
+   * KV key.
    */
   is_shared_oauth_callback_enabled?: boolean;
 
@@ -506,9 +506,9 @@ export interface ServerDeleteResponse {
   /**
    * When true, the gateway worker uses the shared Cloudflare-owned OAuth callback
    * endpoint as the redirect_uri for upstream on-behalf OAuth, instead of the
-   * customer portal hostname. New public server creates default to true; existing
-   * servers default to false from migration until explicitly updated. Effective
-   * behavior is gated by the gateway worker's per-env rollout mode KV key.
+   * customer portal hostname. Defaults to false (off); opt in per server by setting
+   * true. Effective behavior is gated by the gateway worker's per-env rollout mode
+   * KV key.
    */
   is_shared_oauth_callback_enabled?: boolean;
 
@@ -610,9 +610,9 @@ export interface ServerReadResponse {
   /**
    * When true, the gateway worker uses the shared Cloudflare-owned OAuth callback
    * endpoint as the redirect_uri for upstream on-behalf OAuth, instead of the
-   * customer portal hostname. New public server creates default to true; existing
-   * servers default to false from migration until explicitly updated. Effective
-   * behavior is gated by the gateway worker's per-env rollout mode KV key.
+   * customer portal hostname. Defaults to false (off); opt in per server by setting
+   * true. Effective behavior is gated by the gateway worker's per-env rollout mode
+   * KV key.
    */
   is_shared_oauth_callback_enabled?: boolean;
 
@@ -761,9 +761,9 @@ export interface ServerCreateParams {
   /**
    * Body param: When true, the gateway worker uses the shared Cloudflare-owned OAuth
    * callback endpoint as the redirect_uri for upstream on-behalf OAuth, instead of
-   * the customer portal hostname. New public server creates default to true;
-   * existing servers default to false from migration until explicitly updated.
-   * Effective behavior is gated by the gateway worker's per-env rollout mode KV key.
+   * the customer portal hostname. Defaults to false (off); opt in per server by
+   * setting true. Effective behavior is gated by the gateway worker's per-env
+   * rollout mode KV key.
    */
   is_shared_oauth_callback_enabled?: boolean;
 
@@ -825,9 +825,9 @@ export interface ServerUpdateParams {
   /**
    * Body param: When true, the gateway worker uses the shared Cloudflare-owned OAuth
    * callback endpoint as the redirect_uri for upstream on-behalf OAuth, instead of
-   * the customer portal hostname. New public server creates default to true;
-   * existing servers default to false from migration until explicitly updated.
-   * Effective behavior is gated by the gateway worker's per-env rollout mode KV key.
+   * the customer portal hostname. Defaults to false (off); opt in per server by
+   * setting true. Effective behavior is gated by the gateway worker's per-env
+   * rollout mode KV key.
    */
   is_shared_oauth_callback_enabled?: boolean;