cloudflare 7.1.0 → 7.3.0

package/src/resources/resource-tagging/account-tags.ts

@@ -13,7 +13,8 @@ export class BaseAccountTags extends APIResource {
   ] as const);
 
   /**
-   * Creates or updates tags for a specific account-level resource.
+   * Creates or updates tags for a specific account-level resource. Replaces all
+   * existing tags for the resource.
    *
    * @example
    * ```ts
@@ -21,7 +22,7 @@ export class BaseAccountTags extends APIResource {
    *   await client.resourceTagging.accountTags.update({
    *     account_id: '023e105f4ecef8ad9ca31a8372d0c353',
    *     resource_id: '023e105f4ecef8ad9ca31a8372d0c353',
-   *     resource_type: 'worker',
+   *     resource_type: 'worker_version',
    *     worker_id: '3f72a691-44b3-4c11-8642-c18a88ddaa5e',
    *   });
    * ```
@@ -84,6 +85,10 @@ export type AccountTagUpdateResponse =
   | AccountTagUpdateResponse.ResourceTaggingTaggedResourceObjectCloudflaredTunnel
   | AccountTagUpdateResponse.ResourceTaggingTaggedResourceObjectCustomCertificate
   | AccountTagUpdateResponse.ResourceTaggingTaggedResourceObjectCustomHostname
+  | AccountTagUpdateResponse.ResourceTaggingTaggedResourceObjectCwsDeployment
+  | AccountTagUpdateResponse.ResourceTaggingTaggedResourceObjectCwsPolicy
+  | AccountTagUpdateResponse.ResourceTaggingTaggedResourceObjectCwsPolicySet
+  | AccountTagUpdateResponse.ResourceTaggingTaggedResourceObjectCwsWorkload
   | AccountTagUpdateResponse.ResourceTaggingTaggedResourceObjectD1Database
   | AccountTagUpdateResponse.ResourceTaggingTaggedResourceObjectDNSRecord
   | AccountTagUpdateResponse.ResourceTaggingTaggedResourceObjectDurableObjectNamespace
@@ -141,6 +146,17 @@ export namespace AccountTagUpdateResponse {
     tags: { [key: string]: string };
 
     type: 'access_application';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -183,6 +199,17 @@ export namespace AccountTagUpdateResponse {
      * Zone ID is required only for zone-level resources
      */
     zone_id: string;
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -215,6 +242,17 @@ export namespace AccountTagUpdateResponse {
     tags: { [key: string]: string };
 
     type: 'access_group';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -247,6 +285,17 @@ export namespace AccountTagUpdateResponse {
     tags: { [key: string]: string };
 
     type: 'account';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -279,6 +328,17 @@ export namespace AccountTagUpdateResponse {
     tags: { [key: string]: string };
 
     type: 'account_ruleset';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -311,6 +371,17 @@ export namespace AccountTagUpdateResponse {
     tags: { [key: string]: string };
 
     type: 'ai_gateway';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -343,6 +414,17 @@ export namespace AccountTagUpdateResponse {
     tags: { [key: string]: string };
 
     type: 'alerting_policy';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -375,6 +457,17 @@ export namespace AccountTagUpdateResponse {
     tags: { [key: string]: string };
 
     type: 'alerting_webhook';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -412,6 +505,17 @@ export namespace AccountTagUpdateResponse {
      * Zone ID is required only for zone-level resources
      */
     zone_id: string;
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -444,6 +548,17 @@ export namespace AccountTagUpdateResponse {
     tags: { [key: string]: string };
 
     type: 'cloudflared_tunnel';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -481,6 +596,17 @@ export namespace AccountTagUpdateResponse {
      * Zone ID is required only for zone-level resources
      */
     zone_id: string;
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -518,6 +644,189 @@ export namespace AccountTagUpdateResponse {
      * Zone ID is required only for zone-level resources
      */
     zone_id: string;
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
+  }
+
+  /**
+   * Response for cws_deployment resources
+   */
+  export interface ResourceTaggingTaggedResourceObjectCwsDeployment {
+    /**
+     * Identifies the unique resource.
+     */
+    id: string;
+
+    /**
+     * ETag identifier for optimistic concurrency control. Formatted as "v1:<hash>"
+     * where the hash is the base64url-encoded SHA-256 (truncated to 128 bits) of the
+     * tags map canonicalized using RFC 8785 (JSON Canonicalization Scheme). Clients
+     * should treat ETags as opaque strings and pass them back via the If-Match header
+     * on write operations.
+     */
+    etag: string;
+
+    /**
+     * Human-readable name of the resource.
+     */
+    name: string;
+
+    /**
+     * Contains key-value pairs of tags. Keys may contain at most 256 characters.
+     * Values may contain at most 1024 characters and may be empty for key-only tags.
+     */
+    tags: { [key: string]: string };
+
+    type: 'cws_deployment';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
+  }
+
+  /**
+   * Response for cws_policy resources
+   */
+  export interface ResourceTaggingTaggedResourceObjectCwsPolicy {
+    /**
+     * Identifies the unique resource.
+     */
+    id: string;
+
+    /**
+     * ETag identifier for optimistic concurrency control. Formatted as "v1:<hash>"
+     * where the hash is the base64url-encoded SHA-256 (truncated to 128 bits) of the
+     * tags map canonicalized using RFC 8785 (JSON Canonicalization Scheme). Clients
+     * should treat ETags as opaque strings and pass them back via the If-Match header
+     * on write operations.
+     */
+    etag: string;
+
+    /**
+     * Human-readable name of the resource.
+     */
+    name: string;
+
+    /**
+     * Contains key-value pairs of tags. Keys may contain at most 256 characters.
+     * Values may contain at most 1024 characters and may be empty for key-only tags.
+     */
+    tags: { [key: string]: string };
+
+    type: 'cws_policy';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
+  }
+
+  /**
+   * Response for cws_policy_set resources
+   */
+  export interface ResourceTaggingTaggedResourceObjectCwsPolicySet {
+    /**
+     * Identifies the unique resource.
+     */
+    id: string;
+
+    /**
+     * ETag identifier for optimistic concurrency control. Formatted as "v1:<hash>"
+     * where the hash is the base64url-encoded SHA-256 (truncated to 128 bits) of the
+     * tags map canonicalized using RFC 8785 (JSON Canonicalization Scheme). Clients
+     * should treat ETags as opaque strings and pass them back via the If-Match header
+     * on write operations.
+     */
+    etag: string;
+
+    /**
+     * Human-readable name of the resource.
+     */
+    name: string;
+
+    /**
+     * Contains key-value pairs of tags. Keys may contain at most 256 characters.
+     * Values may contain at most 1024 characters and may be empty for key-only tags.
+     */
+    tags: { [key: string]: string };
+
+    type: 'cws_policy_set';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
+  }
+
+  /**
+   * Response for cws_workload resources
+   */
+  export interface ResourceTaggingTaggedResourceObjectCwsWorkload {
+    /**
+     * Identifies the unique resource.
+     */
+    id: string;
+
+    /**
+     * ETag identifier for optimistic concurrency control. Formatted as "v1:<hash>"
+     * where the hash is the base64url-encoded SHA-256 (truncated to 128 bits) of the
+     * tags map canonicalized using RFC 8785 (JSON Canonicalization Scheme). Clients
+     * should treat ETags as opaque strings and pass them back via the If-Match header
+     * on write operations.
+     */
+    etag: string;
+
+    /**
+     * Human-readable name of the resource.
+     */
+    name: string;
+
+    /**
+     * Contains key-value pairs of tags. Keys may contain at most 256 characters.
+     * Values may contain at most 1024 characters and may be empty for key-only tags.
+     */
+    tags: { [key: string]: string };
+
+    type: 'cws_workload';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -550,6 +859,17 @@ export namespace AccountTagUpdateResponse {
     tags: { [key: string]: string };
 
     type: 'd1_database';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -587,6 +907,17 @@ export namespace AccountTagUpdateResponse {
      * Zone ID is required only for zone-level resources
      */
     zone_id: string;
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -619,6 +950,17 @@ export namespace AccountTagUpdateResponse {
     tags: { [key: string]: string };
 
     type: 'durable_object_namespace';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -651,6 +993,17 @@ export namespace AccountTagUpdateResponse {
     tags: { [key: string]: string };
 
     type: 'gateway_list';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -683,6 +1036,17 @@ export namespace AccountTagUpdateResponse {
     tags: { [key: string]: string };
 
     type: 'gateway_rule';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -720,6 +1084,17 @@ export namespace AccountTagUpdateResponse {
      * Zone ID is required only for zone-level resources
      */
     zone_id: string;
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -752,6 +1127,17 @@ export namespace AccountTagUpdateResponse {
     tags: { [key: string]: string };
 
     type: 'image';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -784,6 +1170,17 @@ export namespace AccountTagUpdateResponse {
     tags: { [key: string]: string };
 
     type: 'infrastructure_target';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -816,6 +1213,17 @@ export namespace AccountTagUpdateResponse {
     tags: { [key: string]: string };
 
     type: 'kv_namespace';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -853,6 +1261,17 @@ export namespace AccountTagUpdateResponse {
      * Zone ID is required only for zone-level resources
      */
     zone_id: string;
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -885,6 +1304,17 @@ export namespace AccountTagUpdateResponse {
     tags: { [key: string]: string };
 
     type: 'load_balancer_monitor';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -917,6 +1347,17 @@ export namespace AccountTagUpdateResponse {
     tags: { [key: string]: string };
 
     type: 'load_balancer_pool';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -954,6 +1395,17 @@ export namespace AccountTagUpdateResponse {
      * Zone ID is required only for zone-level resources
      */
     zone_id: string;
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -986,6 +1438,17 @@ export namespace AccountTagUpdateResponse {
     tags: { [key: string]: string };
 
     type: 'pages_project';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -1018,6 +1481,17 @@ export namespace AccountTagUpdateResponse {
     tags: { [key: string]: string };
 
     type: 'queue';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -1050,6 +1524,17 @@ export namespace AccountTagUpdateResponse {
     tags: { [key: string]: string };
 
     type: 'r2_bucket';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -1082,6 +1567,17 @@ export namespace AccountTagUpdateResponse {
     tags: { [key: string]: string };
 
     type: 'resource_share';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -1114,6 +1610,17 @@ export namespace AccountTagUpdateResponse {
     tags: { [key: string]: string };
 
     type: 'stream_live_input';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -1146,6 +1653,17 @@ export namespace AccountTagUpdateResponse {
     tags: { [key: string]: string };
 
     type: 'stream_video';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -1178,6 +1696,17 @@ export namespace AccountTagUpdateResponse {
     tags: { [key: string]: string };
 
     type: 'vectorize_index';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -1210,6 +1739,17 @@ export namespace AccountTagUpdateResponse {
     tags: { [key: string]: string };
 
     type: 'worker';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -1247,6 +1787,17 @@ export namespace AccountTagUpdateResponse {
      * Zone ID is required only for zone-level resources
      */
     zone_id: string;
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -1284,6 +1835,17 @@ export namespace AccountTagUpdateResponse {
      * Worker ID is required only for worker_version resources
      */
     worker_id: string;
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -1321,6 +1883,17 @@ export namespace AccountTagUpdateResponse {
      * Zone ID is required only for zone-level resources
      */
     zone_id: string;
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -1358,6 +1931,17 @@ export namespace AccountTagUpdateResponse {
      * Zone ID is required only for zone-level resources
      */
     zone_id: string;
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 }
 
@@ -1377,6 +1961,10 @@ export type AccountTagGetResponse =
   | AccountTagGetResponse.ResourceTaggingTaggedResourceObjectCloudflaredTunnel
   | AccountTagGetResponse.ResourceTaggingTaggedResourceObjectCustomCertificate
   | AccountTagGetResponse.ResourceTaggingTaggedResourceObjectCustomHostname
+  | AccountTagGetResponse.ResourceTaggingTaggedResourceObjectCwsDeployment
+  | AccountTagGetResponse.ResourceTaggingTaggedResourceObjectCwsPolicy
+  | AccountTagGetResponse.ResourceTaggingTaggedResourceObjectCwsPolicySet
+  | AccountTagGetResponse.ResourceTaggingTaggedResourceObjectCwsWorkload
   | AccountTagGetResponse.ResourceTaggingTaggedResourceObjectD1Database
   | AccountTagGetResponse.ResourceTaggingTaggedResourceObjectDNSRecord
   | AccountTagGetResponse.ResourceTaggingTaggedResourceObjectDurableObjectNamespace
@@ -1434,6 +2022,17 @@ export namespace AccountTagGetResponse {
     tags: { [key: string]: string };
 
     type: 'access_application';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -1476,6 +2075,17 @@ export namespace AccountTagGetResponse {
      * Zone ID is required only for zone-level resources
      */
     zone_id: string;
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -1508,6 +2118,17 @@ export namespace AccountTagGetResponse {
     tags: { [key: string]: string };
 
     type: 'access_group';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -1540,6 +2161,17 @@ export namespace AccountTagGetResponse {
     tags: { [key: string]: string };
 
     type: 'account';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -1572,6 +2204,17 @@ export namespace AccountTagGetResponse {
     tags: { [key: string]: string };
 
     type: 'account_ruleset';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -1604,6 +2247,17 @@ export namespace AccountTagGetResponse {
     tags: { [key: string]: string };
 
     type: 'ai_gateway';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -1636,6 +2290,17 @@ export namespace AccountTagGetResponse {
     tags: { [key: string]: string };
 
     type: 'alerting_policy';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -1668,6 +2333,17 @@ export namespace AccountTagGetResponse {
     tags: { [key: string]: string };
 
     type: 'alerting_webhook';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -1705,6 +2381,17 @@ export namespace AccountTagGetResponse {
      * Zone ID is required only for zone-level resources
      */
     zone_id: string;
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -1737,6 +2424,17 @@ export namespace AccountTagGetResponse {
     tags: { [key: string]: string };
 
     type: 'cloudflared_tunnel';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -1774,6 +2472,17 @@ export namespace AccountTagGetResponse {
      * Zone ID is required only for zone-level resources
      */
     zone_id: string;
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -1811,6 +2520,189 @@ export namespace AccountTagGetResponse {
      * Zone ID is required only for zone-level resources
      */
     zone_id: string;
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
+  }
+
+  /**
+   * Response for cws_deployment resources
+   */
+  export interface ResourceTaggingTaggedResourceObjectCwsDeployment {
+    /**
+     * Identifies the unique resource.
+     */
+    id: string;
+
+    /**
+     * ETag identifier for optimistic concurrency control. Formatted as "v1:<hash>"
+     * where the hash is the base64url-encoded SHA-256 (truncated to 128 bits) of the
+     * tags map canonicalized using RFC 8785 (JSON Canonicalization Scheme). Clients
+     * should treat ETags as opaque strings and pass them back via the If-Match header
+     * on write operations.
+     */
+    etag: string;
+
+    /**
+     * Human-readable name of the resource.
+     */
+    name: string;
+
+    /**
+     * Contains key-value pairs of tags. Keys may contain at most 256 characters.
+     * Values may contain at most 1024 characters and may be empty for key-only tags.
+     */
+    tags: { [key: string]: string };
+
+    type: 'cws_deployment';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
+  }
+
+  /**
+   * Response for cws_policy resources
+   */
+  export interface ResourceTaggingTaggedResourceObjectCwsPolicy {
+    /**
+     * Identifies the unique resource.
+     */
+    id: string;
+
+    /**
+     * ETag identifier for optimistic concurrency control. Formatted as "v1:<hash>"
+     * where the hash is the base64url-encoded SHA-256 (truncated to 128 bits) of the
+     * tags map canonicalized using RFC 8785 (JSON Canonicalization Scheme). Clients
+     * should treat ETags as opaque strings and pass them back via the If-Match header
+     * on write operations.
+     */
+    etag: string;
+
+    /**
+     * Human-readable name of the resource.
+     */
+    name: string;
+
+    /**
+     * Contains key-value pairs of tags. Keys may contain at most 256 characters.
+     * Values may contain at most 1024 characters and may be empty for key-only tags.
+     */
+    tags: { [key: string]: string };
+
+    type: 'cws_policy';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
+  }
+
+  /**
+   * Response for cws_policy_set resources
+   */
+  export interface ResourceTaggingTaggedResourceObjectCwsPolicySet {
+    /**
+     * Identifies the unique resource.
+     */
+    id: string;
+
+    /**
+     * ETag identifier for optimistic concurrency control. Formatted as "v1:<hash>"
+     * where the hash is the base64url-encoded SHA-256 (truncated to 128 bits) of the
+     * tags map canonicalized using RFC 8785 (JSON Canonicalization Scheme). Clients
+     * should treat ETags as opaque strings and pass them back via the If-Match header
+     * on write operations.
+     */
+    etag: string;
+
+    /**
+     * Human-readable name of the resource.
+     */
+    name: string;
+
+    /**
+     * Contains key-value pairs of tags. Keys may contain at most 256 characters.
+     * Values may contain at most 1024 characters and may be empty for key-only tags.
+     */
+    tags: { [key: string]: string };
+
+    type: 'cws_policy_set';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
+  }
+
+  /**
+   * Response for cws_workload resources
+   */
+  export interface ResourceTaggingTaggedResourceObjectCwsWorkload {
+    /**
+     * Identifies the unique resource.
+     */
+    id: string;
+
+    /**
+     * ETag identifier for optimistic concurrency control. Formatted as "v1:<hash>"
+     * where the hash is the base64url-encoded SHA-256 (truncated to 128 bits) of the
+     * tags map canonicalized using RFC 8785 (JSON Canonicalization Scheme). Clients
+     * should treat ETags as opaque strings and pass them back via the If-Match header
+     * on write operations.
+     */
+    etag: string;
+
+    /**
+     * Human-readable name of the resource.
+     */
+    name: string;
+
+    /**
+     * Contains key-value pairs of tags. Keys may contain at most 256 characters.
+     * Values may contain at most 1024 characters and may be empty for key-only tags.
+     */
+    tags: { [key: string]: string };
+
+    type: 'cws_workload';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -1843,6 +2735,17 @@ export namespace AccountTagGetResponse {
     tags: { [key: string]: string };
 
     type: 'd1_database';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -1880,6 +2783,17 @@ export namespace AccountTagGetResponse {
      * Zone ID is required only for zone-level resources
      */
     zone_id: string;
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -1912,6 +2826,17 @@ export namespace AccountTagGetResponse {
     tags: { [key: string]: string };
 
     type: 'durable_object_namespace';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -1944,6 +2869,17 @@ export namespace AccountTagGetResponse {
     tags: { [key: string]: string };
 
     type: 'gateway_list';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -1976,6 +2912,17 @@ export namespace AccountTagGetResponse {
     tags: { [key: string]: string };
 
     type: 'gateway_rule';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -2013,6 +2960,17 @@ export namespace AccountTagGetResponse {
      * Zone ID is required only for zone-level resources
      */
     zone_id: string;
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -2045,6 +3003,17 @@ export namespace AccountTagGetResponse {
     tags: { [key: string]: string };
 
     type: 'image';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -2077,6 +3046,17 @@ export namespace AccountTagGetResponse {
     tags: { [key: string]: string };
 
     type: 'infrastructure_target';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -2109,6 +3089,17 @@ export namespace AccountTagGetResponse {
     tags: { [key: string]: string };
 
     type: 'kv_namespace';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -2146,6 +3137,17 @@ export namespace AccountTagGetResponse {
      * Zone ID is required only for zone-level resources
      */
     zone_id: string;
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -2178,6 +3180,17 @@ export namespace AccountTagGetResponse {
     tags: { [key: string]: string };
 
     type: 'load_balancer_monitor';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -2210,6 +3223,17 @@ export namespace AccountTagGetResponse {
     tags: { [key: string]: string };
 
     type: 'load_balancer_pool';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -2247,6 +3271,17 @@ export namespace AccountTagGetResponse {
      * Zone ID is required only for zone-level resources
      */
     zone_id: string;
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -2279,6 +3314,17 @@ export namespace AccountTagGetResponse {
     tags: { [key: string]: string };
 
     type: 'pages_project';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -2311,6 +3357,17 @@ export namespace AccountTagGetResponse {
     tags: { [key: string]: string };
 
     type: 'queue';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -2343,6 +3400,17 @@ export namespace AccountTagGetResponse {
     tags: { [key: string]: string };
 
     type: 'r2_bucket';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -2375,6 +3443,17 @@ export namespace AccountTagGetResponse {
     tags: { [key: string]: string };
 
     type: 'resource_share';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -2407,6 +3486,17 @@ export namespace AccountTagGetResponse {
     tags: { [key: string]: string };
 
     type: 'stream_live_input';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -2439,6 +3529,17 @@ export namespace AccountTagGetResponse {
     tags: { [key: string]: string };
 
     type: 'stream_video';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -2471,6 +3572,17 @@ export namespace AccountTagGetResponse {
     tags: { [key: string]: string };
 
     type: 'vectorize_index';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -2503,6 +3615,17 @@ export namespace AccountTagGetResponse {
     tags: { [key: string]: string };
 
     type: 'worker';
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -2540,6 +3663,17 @@ export namespace AccountTagGetResponse {
      * Zone ID is required only for zone-level resources
      */
     zone_id: string;
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -2577,6 +3711,17 @@ export namespace AccountTagGetResponse {
      * Worker ID is required only for worker_version resources
      */
     worker_id: string;
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -2614,6 +3759,17 @@ export namespace AccountTagGetResponse {
      * Zone ID is required only for zone-level resources
      */
     zone_id: string;
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 
   /**
@@ -2651,6 +3807,17 @@ export namespace AccountTagGetResponse {
      * Zone ID is required only for zone-level resources
      */
     zone_id: string;
+
+    /**
+     * Monotonic version of the resource's tags: the timestamp assigned when the tags
+     * were last written. Returned by read endpoints, by 2PC prepare (the version that
+     * will be assigned on commit, unless a concurrent write lands first, in which case
+     * a newer version is assigned), and by 2PC commit (the authoritative committed
+     * version). Omitted for untagged resources and delete commits: a deleted resource
+     * has no current version, and deletions are ordered by event order rather than by
+     * version.
+     */
+    tags_updated_at?: string;
   }
 }
 
@@ -2671,36 +3838,9 @@ export declare namespace AccountTagUpdateParams {
     resource_id: string;
 
     /**
-     * Body param: Enum for base account-level resource types (those with no extra
-     * required fields).
+     * Body param: Enum for worker_version resource type.
      */
-    resource_type:
-      | 'access_application'
-      | 'access_group'
-      | 'account'
-      | 'account_ruleset'
-      | 'ai_gateway'
-      | 'alerting_policy'
-      | 'alerting_webhook'
-      | 'cloudflared_tunnel'
-      | 'd1_database'
-      | 'durable_object_namespace'
-      | 'gateway_list'
-      | 'gateway_rule'
-      | 'image'
-      | 'infrastructure_target'
-      | 'kv_namespace'
-      | 'load_balancer_monitor'
-      | 'load_balancer_pool'
-      | 'pages_project'
-      | 'queue'
-      | 'r2_bucket'
-      | 'resource_share'
-      | 'stream_live_input'
-      | 'stream_video'
-      | 'vectorize_index'
-      | 'worker'
-      | 'worker_version';
+    resource_type: 'worker_version';
 
     /**
      * Body param: Worker ID is required only for worker_version resources
@@ -2747,6 +3887,10 @@ export declare namespace AccountTagUpdateParams {
       | 'alerting_policy'
       | 'alerting_webhook'
       | 'cloudflared_tunnel'
+      | 'cws_deployment'
+      | 'cws_policy'
+      | 'cws_policy_set'
+      | 'cws_workload'
       | 'd1_database'
       | 'durable_object_namespace'
       | 'gateway_list'
@@ -2820,6 +3964,10 @@ export interface AccountTagGetParams {
     | 'alerting_policy'
     | 'alerting_webhook'
     | 'cloudflared_tunnel'
+    | 'cws_deployment'
+    | 'cws_policy'
+    | 'cws_policy_set'
+    | 'cws_workload'
     | 'd1_database'
     | 'durable_object_namespace'
     | 'gateway_list'