cloudflare 7.1.0 → 7.3.0

package/src/resources/zero-trust/casb/posture/posture.ts

@@ -21,6 +21,22 @@ import {
   ExportListResponsesV4PagePaginationArray,
   Exports,
 } from './exports';
+import * as PoliciesAPI from './policies';
+import {
+  BasePolicies,
+  Policies,
+  PolicyCreateParams,
+  PolicyCreateResponse,
+  PolicyDeleteParams,
+  PolicyDeleteResponse,
+  PolicyGetParams,
+  PolicyGetResponse,
+  PolicyListParams,
+  PolicyListResponse,
+  PolicyListResponsesCursorPaginationAfter,
+  PolicyUpdateParams,
+  PolicyUpdateResponse,
+} from './policies';
 import * as FindingTypesAPI from './finding-types/finding-types';
 import {
   BaseFindingTypes,
@@ -87,6 +103,7 @@ export class Posture extends BasePosture {
   findingTypes: FindingTypesAPI.FindingTypes = new FindingTypesAPI.FindingTypes(this._client);
   content: ContentAPI.Content = new ContentAPI.Content(this._client);
   remediations: RemediationsAPI.Remediations = new RemediationsAPI.Remediations(this._client);
+  policies: PoliciesAPI.Policies = new PoliciesAPI.Policies(this._client);
   webhooks: WebhooksAPI.Webhooks = new WebhooksAPI.Webhooks(this._client);
 }
 
@@ -100,6 +117,8 @@ Posture.Content = Content;
 Posture.BaseContent = BaseContent;
 Posture.Remediations = Remediations;
 Posture.BaseRemediations = BaseRemediations;
+Posture.Policies = Policies;
+Posture.BasePolicies = BasePolicies;
 Posture.Webhooks = Webhooks;
 Posture.BaseWebhooks = BaseWebhooks;
 
@@ -156,6 +175,22 @@ export declare namespace Posture {
 
   export { Remediations as Remediations, BaseRemediations as BaseRemediations };
 
+  export {
+    Policies as Policies,
+    BasePolicies as BasePolicies,
+    type PolicyCreateResponse as PolicyCreateResponse,
+    type PolicyUpdateResponse as PolicyUpdateResponse,
+    type PolicyListResponse as PolicyListResponse,
+    type PolicyDeleteResponse as PolicyDeleteResponse,
+    type PolicyGetResponse as PolicyGetResponse,
+    type PolicyListResponsesCursorPaginationAfter as PolicyListResponsesCursorPaginationAfter,
+    type PolicyCreateParams as PolicyCreateParams,
+    type PolicyUpdateParams as PolicyUpdateParams,
+    type PolicyListParams as PolicyListParams,
+    type PolicyDeleteParams as PolicyDeleteParams,
+    type PolicyGetParams as PolicyGetParams,
+  };
+
   export {
     Webhooks as Webhooks,
     BaseWebhooks as BaseWebhooks,

package/src/resources/zero-trust/casb/posture/remediations/jobs.ts

@@ -252,12 +252,10 @@ export namespace JobCreateResponse {
           | 'Jira'
           | 'Microsoft'
           | 'Microsoft Internal'
-          | 'Okta'
           | 'OpenAI'
           | 'Slack'
           | 'Salesforce'
           | 'ServiceNow'
-          | 'Workday'
           | 'Zoom';
       }
 
@@ -444,12 +442,10 @@ export namespace JobListResponse {
         | 'Jira'
         | 'Microsoft'
         | 'Microsoft Internal'
-        | 'Okta'
         | 'OpenAI'
         | 'Slack'
         | 'Salesforce'
         | 'ServiceNow'
-        | 'Workday'
         | 'Zoom';
     }
 

package/src/resources/zero-trust/casb/posture/webhooks/webhooks.ts

@@ -608,6 +608,12 @@ export interface WebhookCreateParams {
    * "HMAC-Signing".
    */
   signing_secret?: string;
+
+  /**
+   * Body param: Status of the webhook configuration. Defaults to enabled when
+   * omitted.
+   */
+  status?: 'enabled' | 'disabled';
 }
 
 export namespace WebhookCreateParams {

package/src/resources/zero-trust/devices/devices.ts

@@ -73,7 +73,6 @@ import {
   OverrideCodeGetResponse,
   OverrideCodeListParams,
   OverrideCodeListResponse,
-  OverrideCodeListResponsesSinglePage,
   OverrideCodes,
 } from './override-codes';
 import * as RegistrationsAPI from './registrations';
@@ -113,7 +112,6 @@ import {
   BasePolicies,
   DevicePolicyCertificates,
   FallbackDomain,
-  FallbackDomainPolicy,
   Policies,
   SettingsPolicy,
   SplitTunnelExclude,
@@ -609,7 +607,6 @@ export declare namespace Devices {
     BasePolicies as BasePolicies,
     type DevicePolicyCertificates as DevicePolicyCertificates,
     type FallbackDomain as FallbackDomain,
-    type FallbackDomainPolicy as FallbackDomainPolicy,
     type SettingsPolicy as SettingsPolicy,
     type SplitTunnelExclude as SplitTunnelExclude,
     type SplitTunnelInclude as SplitTunnelInclude,
@@ -674,7 +671,6 @@ export declare namespace Devices {
     BaseOverrideCodes as BaseOverrideCodes,
     type OverrideCodeListResponse as OverrideCodeListResponse,
     type OverrideCodeGetResponse as OverrideCodeGetResponse,
-    type OverrideCodeListResponsesSinglePage as OverrideCodeListResponsesSinglePage,
     type OverrideCodeListParams as OverrideCodeListParams,
     type OverrideCodeGetParams as OverrideCodeGetParams,
   };

package/src/resources/zero-trust/devices/devices_.ts

@@ -86,16 +86,10 @@ export class BaseDevices extends APIResource {
   }
 
   /**
-   * Revokes all WARP registrations associated with the specified device.
+   * Revokes all WARP registrations associated with the specified device. Prefer
+   * "delete" operation instead, "revoke" does not release virtual IPs.
    *
-   * @example
-   * ```ts
-   * const response =
-   *   await client.zeroTrust.devices.devices.revoke(
-   *     'device_id',
-   *     { account_id: 'account_id' },
-   *   );
-   * ```
+   * @deprecated
    */
   revoke(
     deviceID: string,
@@ -145,6 +139,11 @@ export interface DeviceListResponse {
    */
   name: string;
 
+  /**
+   * Tags assigned to the device. An empty object if the device has no tags.
+   */
+  tags: { [key: string]: string };
+
   /**
    * The RFC3339 timestamp when the device was last updated.
    */
@@ -316,6 +315,11 @@ export interface DeviceGetResponse {
    */
   name: string;
 
+  /**
+   * Tags assigned to the device. An empty object if the device has no tags.
+   */
+  tags: { [key: string]: string };
+
   /**
    * The RFC3339 timestamp when the device was last updated.
    */
@@ -474,6 +478,12 @@ export interface DeviceListParams extends CursorPaginationParams {
    */
   active_registrations?: 'include' | 'only' | 'exclude';
 
+  /**
+   * Query param: Filter by the type of active registration associated with the
+   * device.
+   */
+  has_registration_type?: 'warp' | 'browser_extension';
+
   /**
    * Query param: Comma-separated list of additional information that should be
    * included in the device response. Supported values are:
@@ -524,6 +534,12 @@ export interface DeviceListParams extends CursorPaginationParams {
    * Query param: Sort direction.
    */
   sort_order?: 'asc' | 'desc';
+
+  /**
+   * Query param: Filter by one or more device tags in key:value format. Devices must
+   * match all provided tags.
+   */
+  tag?: Array<string>;
 }
 
 export namespace DeviceListParams {

package/src/resources/zero-trust/devices/dex-tests.ts

@@ -271,7 +271,7 @@ export interface DEXTestDeleteResponse {
 
 export interface DEXTestCreateParams {
   /**
-   * Path param: Unique identifier linked to an account.
+   * Path param: Unique Cloudflare account ID.
    */
   account_id: string;
 
@@ -333,7 +333,7 @@ export namespace DEXTestCreateParams {
 
 export interface DEXTestUpdateParams {
   /**
-   * Path param: Unique identifier linked to an account.
+   * Path param: Unique Cloudflare account ID.
    */
   account_id: string;
 
@@ -395,7 +395,7 @@ export namespace DEXTestUpdateParams {
 
 export interface DEXTestListParams extends V4PagePaginationArrayParams {
   /**
-   * Path param: Unique identifier linked to an account.
+   * Path param: Unique Cloudflare account ID.
    */
   account_id: string;
 
@@ -412,14 +412,14 @@ export interface DEXTestListParams extends V4PagePaginationArrayParams {
 
 export interface DEXTestDeleteParams {
   /**
-   * Unique identifier linked to an account.
+   * Unique Cloudflare account ID.
    */
   account_id: string;
 }
 
 export interface DEXTestGetParams {
   /**
-   * Unique identifier linked to an account.
+   * Unique Cloudflare account ID.
    */
   account_id: string;
 }

package/src/resources/zero-trust/devices/fleet-status.ts

@@ -553,7 +553,7 @@ export namespace FleetStatusGetResponse {
 
 export interface FleetStatusGetParams {
   /**
-   * Path param: Unique identifier linked to an account.
+   * Path param: Unique Cloudflare account ID.
    */
   account_id: string;
 

package/src/resources/zero-trust/devices/index.ts

@@ -70,14 +70,12 @@ export {
   type OverrideCodeGetResponse,
   type OverrideCodeListParams,
   type OverrideCodeGetParams,
-  type OverrideCodeListResponsesSinglePage,
 } from './override-codes';
 export {
   Policies,
   BasePolicies,
   type DevicePolicyCertificates,
   type FallbackDomain,
-  type FallbackDomainPolicy,
   type SettingsPolicy,
   type SplitTunnelExclude,
   type SplitTunnelInclude,

package/src/resources/zero-trust/devices/override-codes.ts

@@ -2,7 +2,6 @@
 
 import { APIResource } from '../../../core/resource';
 import { APIPromise } from '../../../core/api-promise';
-import { PagePromise, SinglePage } from '../../../core/pagination';
 import { RequestOptions } from '../../../internal/request-options';
 import { path } from '../../../internal/utils/path';
 
@@ -28,13 +27,14 @@ export class BaseOverrideCodes extends APIResource {
     deviceID: string,
     params: OverrideCodeListParams,
     options?: RequestOptions,
-  ): PagePromise<OverrideCodeListResponsesSinglePage, OverrideCodeListResponse> {
+  ): APIPromise<OverrideCodeListResponse | null> {
     const { account_id } = params;
-    return this._client.getAPIList(
-      path`/accounts/${account_id}/devices/${deviceID}/override_codes`,
-      SinglePage<OverrideCodeListResponse>,
-      options,
-    );
+    return (
+      this._client.get(
+        path`/accounts/${account_id}/devices/${deviceID}/override_codes`,
+        options,
+      ) as APIPromise<{ result: OverrideCodeListResponse | null }>
+    )._thenUnwrap((obj) => obj.result);
   }
 
   /**
@@ -66,9 +66,38 @@ export class BaseOverrideCodes extends APIResource {
 }
 export class OverrideCodes extends BaseOverrideCodes {}
 
-export type OverrideCodeListResponsesSinglePage = SinglePage<OverrideCodeListResponse>;
+export interface OverrideCodeListResponse {
+  disable_for_time?: OverrideCodeListResponse.DisableForTime;
+}
+
+export namespace OverrideCodeListResponse {
+  export interface DisableForTime {
+    /**
+     * Override code that is valid for 1 hour.
+     */
+    '1'?: string;
 
-export type OverrideCodeListResponse = unknown;
+    /**
+     * Override code that is valid for 12 hour2.
+     */
+    '12'?: string;
+
+    /**
+     * Override code that is valid for 24 hour.2.
+     */
+    '24'?: string;
+
+    /**
+     * Override code that is valid for 3 hours.
+     */
+    '3'?: string;
+
+    /**
+     * Override code that is valid for 6 hours.
+     */
+    '6'?: string;
+  }
+}
 
 export interface OverrideCodeGetResponse {
   disable_for_time?: { [key: string]: string };
@@ -86,7 +115,6 @@ export declare namespace OverrideCodes {
   export {
     type OverrideCodeListResponse as OverrideCodeListResponse,
     type OverrideCodeGetResponse as OverrideCodeGetResponse,
-    type OverrideCodeListResponsesSinglePage as OverrideCodeListResponsesSinglePage,
     type OverrideCodeListParams as OverrideCodeListParams,
     type OverrideCodeGetParams as OverrideCodeGetParams,
   };

package/src/resources/zero-trust/devices/policies/custom/custom.ts

@@ -36,9 +36,7 @@ export class BaseCustom extends APIResource {
    * const settingsPolicy =
    *   await client.zeroTrust.devices.policies.custom.create({
    *     account_id: '699d98642c564d2e855e9661899b7252',
-   *     match: 'identity.email == "test@cloudflare.com"',
    *     name: 'Allow Developers',
-   *     precedence: 100,
    *   });
    * ```
    */
@@ -71,11 +69,11 @@ export class BaseCustom extends APIResource {
     params: CustomListParams,
     options?: RequestOptions,
   ): PagePromise<SettingsPoliciesSinglePage, PoliciesAPI.SettingsPolicy> {
-    const { account_id } = params;
+    const { account_id, ...query } = params;
     return this._client.getAPIList(
       path`/accounts/${account_id}/devices/policies`,
       SinglePage<PoliciesAPI.SettingsPolicy>,
-      options,
+      { query, ...options },
     );
   }
 
@@ -170,25 +168,11 @@ export interface CustomCreateParams {
    */
   account_id: string;
 
-  /**
-   * Body param: The wirefilter expression to match devices. Available values:
-   * "identity.email", "identity.groups.id", "identity.groups.name",
-   * "identity.groups.email", "identity.service_token_uuid",
-   * "identity.saml_attributes", "network", "os.name", "os.version".
-   */
-  match: string;
-
   /**
    * Body param: The name of the device settings profile.
    */
   name: string;
 
-  /**
-   * Body param: The precedence of the policy. Lower values indicate higher
-   * precedence. Policies will be evaluated in ascending order of this field.
-   */
-  precedence: number;
-
   /**
    * Body param: Whether to allow the user to switch WARP between modes.
    */
@@ -211,11 +195,23 @@ export interface CustomCreateParams {
    */
   auto_connect?: number;
 
+  /**
+   * Body param: Browser extension proxy settings. Required when profile_type is
+   * browser_extension and invalid for WARP profiles.
+   */
+  browser_extension_config?: CustomCreateParams.BrowserExtensionConfig | null;
+
   /**
    * Body param: Turn on the captive portal after the specified amount of time.
    */
   captive_portal?: number;
 
+  /**
+   * Body param: Whether the policy is the account default. WARP group profiles
+   * cannot set this field.
+   */
+  default?: boolean;
+
   /**
    * Body param: A description of the policy.
    */
@@ -279,6 +275,26 @@ export interface CustomCreateParams {
    */
   lan_allow_subnet_size?: number;
 
+  /**
+   * Body param: The wirefilter expression to match devices. Available values:
+   * "identity.email", "identity.groups.id", "identity.groups.name",
+   * "identity.groups.email", "identity.service_token_uuid",
+   * "identity.saml_attributes", "network", "os.name", "os.version".
+   */
+  match?: string;
+
+  /**
+   * Body param: The precedence of the policy. Lower values indicate higher
+   * precedence. Policies will be evaluated in ascending order of this field.
+   */
+  precedence?: number;
+
+  /**
+   * Body param: The client type to which the device settings profile applies. This
+   * field is set when the profile is created and cannot be changed.
+   */
+  profile_type?: 'warp' | 'browser_extension';
+
   /**
    * Body param: Determines if the operating system will register WARP's local
    * interface IP with your on-premises DNS server.
@@ -312,6 +328,12 @@ export interface CustomCreateParams {
    */
   tunnel_protocol?: string;
 
+  /**
+   * Body param: Determines whether uninstalling the WARP client requires an override
+   * code. (Windows only).
+   */
+  uninstall_protection?: boolean;
+
   /**
    * Body param: Virtual network access settings for the device.
    */
@@ -319,6 +341,22 @@ export interface CustomCreateParams {
 }
 
 export namespace CustomCreateParams {
+  /**
+   * Browser extension proxy settings. Required when profile_type is
+   * browser_extension and invalid for WARP profiles.
+   */
+  export interface BrowserExtensionConfig {
+    /**
+     * Whether the user may disable the browser extension proxy.
+     */
+    proxy_control: 'unlocked' | 'locked';
+
+    /**
+     * Whether the browser extension proxy is active.
+     */
+    proxy_enabled: boolean;
+  }
+
   export interface DNSSearchSuffix {
     /**
      * The DNS search suffix to append when resolving short hostnames.
@@ -359,6 +397,12 @@ export namespace CustomCreateParams {
      * or masque_endpoints must be provided.
      */
     wireguard_endpoints: Array<string>;
+
+    /**
+     * Automatically switch Global Acceleration regions based on device location.
+     * Defaults to false when not provided.
+     */
+    autoswitch?: boolean;
   }
 
   export interface ServiceModeV2 {
@@ -391,7 +435,16 @@ export namespace CustomCreateParams {
 }
 
 export interface CustomListParams {
+  /**
+   * Path param
+   */
   account_id: string;
+
+  /**
+   * Query param: Filter profiles by client type. When omitted, only WARP profiles
+   * are returned.
+   */
+  profile_type?: 'warp' | 'browser_extension';
 }
 
 export interface CustomDeleteParams {
@@ -426,11 +479,23 @@ export interface CustomEditParams {
    */
   auto_connect?: number;
 
+  /**
+   * Body param: Browser extension proxy settings. Required when profile_type is
+   * browser_extension and invalid for WARP profiles.
+   */
+  browser_extension_config?: CustomEditParams.BrowserExtensionConfig | null;
+
   /**
    * Body param: Turn on the captive portal after the specified amount of time.
    */
   captive_portal?: number;
 
+  /**
+   * Body param: Whether the policy is the account default. WARP group profiles
+   * cannot set this field.
+   */
+  default?: boolean;
+
   /**
    * Body param: A description of the policy.
    */
@@ -546,6 +611,12 @@ export interface CustomEditParams {
    */
   tunnel_protocol?: string;
 
+  /**
+   * Body param: Determines whether uninstalling the WARP client requires an override
+   * code. (Windows only).
+   */
+  uninstall_protection?: boolean;
+
   /**
    * Body param: Virtual network access settings for the device.
    */
@@ -553,6 +624,22 @@ export interface CustomEditParams {
 }
 
 export namespace CustomEditParams {
+  /**
+   * Browser extension proxy settings. Required when profile_type is
+   * browser_extension and invalid for WARP profiles.
+   */
+  export interface BrowserExtensionConfig {
+    /**
+     * Whether the user may disable the browser extension proxy.
+     */
+    proxy_control: 'unlocked' | 'locked';
+
+    /**
+     * Whether the browser extension proxy is active.
+     */
+    proxy_enabled: boolean;
+  }
+
   export interface DNSSearchSuffix {
     /**
      * The DNS search suffix to append when resolving short hostnames.
@@ -593,6 +680,12 @@ export namespace CustomEditParams {
      * or masque_endpoints must be provided.
      */
     wireguard_endpoints: Array<string>;
+
+    /**
+     * Automatically switch Global Acceleration regions based on device location.
+     * Defaults to false when not provided.
+     */
+    autoswitch?: boolean;
   }
 
   export interface ServiceModeV2 {

package/src/resources/zero-trust/devices/policies/default/default.ts

@@ -153,6 +153,12 @@ export interface DefaultEditResponse {
 
   policy_id?: string;
 
+  /**
+   * The client type to which the device settings profile applies. This field is set
+   * when the profile is created and cannot be changed.
+   */
+  profile_type?: 'warp' | 'browser_extension';
+
   /**
    * Determines if the operating system will register WARP's local interface IP with
    * your on-premises DNS server.
@@ -182,6 +188,12 @@ export interface DefaultEditResponse {
    */
   tunnel_protocol?: string;
 
+  /**
+   * Determines whether uninstalling the WARP client requires an override code.
+   * (Windows only).
+   */
+  uninstall_protection?: boolean;
+
   /**
    * Virtual network access settings for the device.
    */
@@ -229,6 +241,12 @@ export namespace DefaultEditResponse {
      * or masque_endpoints must be provided.
      */
     wireguard_endpoints: Array<string>;
+
+    /**
+     * Automatically switch Global Acceleration regions based on device location.
+     * Defaults to false when not provided.
+     */
+    autoswitch?: boolean;
   }
 
   export interface ServiceModeV2 {
@@ -339,6 +357,12 @@ export interface DefaultGetResponse {
 
   policy_id?: string;
 
+  /**
+   * The client type to which the device settings profile applies. This field is set
+   * when the profile is created and cannot be changed.
+   */
+  profile_type?: 'warp' | 'browser_extension';
+
   /**
    * Determines if the operating system will register WARP's local interface IP with
    * your on-premises DNS server.
@@ -368,6 +392,12 @@ export interface DefaultGetResponse {
    */
   tunnel_protocol?: string;
 
+  /**
+   * Determines whether uninstalling the WARP client requires an override code.
+   * (Windows only).
+   */
+  uninstall_protection?: boolean;
+
   /**
    * Virtual network access settings for the device.
    */
@@ -415,6 +445,12 @@ export namespace DefaultGetResponse {
      * or masque_endpoints must be provided.
      */
     wireguard_endpoints: Array<string>;
+
+    /**
+     * Automatically switch Global Acceleration regions based on device location.
+     * Defaults to false when not provided.
+     */
+    autoswitch?: boolean;
   }
 
   export interface ServiceModeV2 {
@@ -565,6 +601,12 @@ export interface DefaultEditParams {
    */
   tunnel_protocol?: string;
 
+  /**
+   * Body param: Determines whether uninstalling the WARP client requires an override
+   * code. (Windows only).
+   */
+  uninstall_protection?: boolean;
+
   /**
    * Body param: Virtual network access settings for the device.
    */
@@ -612,6 +654,12 @@ export namespace DefaultEditParams {
      * or masque_endpoints must be provided.
      */
     wireguard_endpoints: Array<string>;
+
+    /**
+     * Automatically switch Global Acceleration regions based on device location.
+     * Defaults to false when not provided.
+     */
+    autoswitch?: boolean;
   }
 
   export interface ServiceModeV2 {

package/src/resources/zero-trust/devices/policies/index.ts

@@ -22,7 +22,6 @@ export {
   BasePolicies,
   type DevicePolicyCertificates,
   type FallbackDomain,
-  type FallbackDomainPolicy,
   type SettingsPolicy,
   type SplitTunnelExclude,
   type SplitTunnelInclude,