feat(threat_events): fix create endpoint (#2532)

Author: stainless-app[bot]

.stats.yml

@@ -1,2 +1,2 @@
 configured_endpoints: 1610
-openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/cloudflare%2Fcloudflare-30da43ea5d0d999bce706d59618514c0c59d657ea27ad2e228663d731023449f.yml
+openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/cloudflare%2Fcloudflare-0f0082a0942d9f9edb37ef99423f7cdf16d0bfeb57c6ee5728e830b2a9ebff87.yml

api.md

@@ -8506,7 +8506,7 @@ from cloudflare.types.cloudforce_one import (
 
 Methods:
 
-- <code title="post /accounts/{account_id}/cloudforce-one/events">client.cloudforce_one.threat_events.<a href="./src/cloudflare/resources/cloudforce_one/threat_events/threat_events.py">create</a>(\*, account_id, \*\*<a href="src/cloudflare/types/cloudforce_one/threat_event_create_params.py">params</a>) -> <a href="./src/cloudflare/types/cloudforce_one/threat_event_create_response.py">ThreatEventCreateResponse</a></code>
+- <code title="post /accounts/{account_id}/cloudforce-one/events/create">client.cloudforce_one.threat_events.<a href="./src/cloudflare/resources/cloudforce_one/threat_events/threat_events.py">create</a>(\*, path_account_id, \*\*<a href="src/cloudflare/types/cloudforce_one/threat_event_create_params.py">params</a>) -> <a href="./src/cloudflare/types/cloudforce_one/threat_event_create_response.py">ThreatEventCreateResponse</a></code>
 - <code title="delete /accounts/{account_id}/cloudforce-one/events/{event_id}">client.cloudforce_one.threat_events.<a href="./src/cloudflare/resources/cloudforce_one/threat_events/threat_events.py">delete</a>(event_id, \*, account_id) -> <a href="./src/cloudflare/types/cloudforce_one/threat_event_delete_response.py">ThreatEventDeleteResponse</a></code>
 - <code title="post /accounts/{account_id}/cloudforce-one/events/create/bulk">client.cloudforce_one.threat_events.<a href="./src/cloudflare/resources/cloudforce_one/threat_events/threat_events.py">bulk_create</a>(\*, account_id, \*\*<a href="src/cloudflare/types/cloudforce_one/threat_event_bulk_create_params.py">params</a>) -> <a href="./src/cloudflare/types/cloudforce_one/threat_event_bulk_create_response.py">ThreatEventBulkCreateResponse</a></code>
 - <code title="patch /accounts/{account_id}/cloudforce-one/events/{event_id}">client.cloudforce_one.threat_events.<a href="./src/cloudflare/resources/cloudforce_one/threat_events/threat_events.py">edit</a>(event_id, \*, account_id, \*\*<a href="src/cloudflare/types/cloudforce_one/threat_event_edit_params.py">params</a>) -> <a href="./src/cloudflare/types/cloudforce_one/threat_event_edit_response.py">ThreatEventEditResponse</a></code>

src/cloudflare/resources/cloudforce_one/threat_events/threat_events.py

@@ -4,7 +4,6 @@
 
 from typing import List, Union, Iterable
 from datetime import datetime
-from typing_extensions import Literal
 
 import httpx
 
@@ -203,13 +202,21 @@ def with_streaming_response(self) -> ThreatEventsResourceWithStreamingResponse:
     def create(
         self,
         *,
-        account_id: float,
-        dataset_id: List[str] | NotGiven = NOT_GIVEN,
-        order: Literal["asc", "desc"] | NotGiven = NOT_GIVEN,
-        order_by: str | NotGiven = NOT_GIVEN,
-        page: float | NotGiven = NOT_GIVEN,
-        page_size: float | NotGiven = NOT_GIVEN,
-        search: Iterable[threat_event_create_params.Search] | NotGiven = NOT_GIVEN,
+        path_account_id: float,
+        attacker: str,
+        attacker_country: str,
+        category: str,
+        date: Union[str, datetime],
+        event: str,
+        indicator_type: str,
+        raw: threat_event_create_params.Raw,
+        tlp: str,
+        body_account_id: float | NotGiven = NOT_GIVEN,
+        dataset_id: str | NotGiven = NOT_GIVEN,
+        indicator: str | NotGiven = NOT_GIVEN,
+        tags: List[str] | NotGiven = NOT_GIVEN,
+        target_country: str | NotGiven = NOT_GIVEN,
+        target_industry: str | NotGiven = NOT_GIVEN,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
         # The extra values given here take precedence over values defined on the client or passed to this method.
         extra_headers: Headers | None = None,
@@ -218,10 +225,10 @@ def create(
         timeout: float | httpx.Timeout | None | NotGiven = NOT_GIVEN,
     ) -> ThreatEventCreateResponse:
         """
-        Filter and list events
+        Creates a new event
 
         Args:
-          account_id: Account ID
+          path_account_id: Account ID
 
           extra_headers: Send extra headers
 
@@ -232,15 +239,23 @@ def create(
           timeout: Override the client-level default timeout for this request, in seconds
         """
         return self._post(
-            f"/accounts/{account_id}/cloudforce-one/events",
+            f"/accounts/{path_account_id}/cloudforce-one/events/create",
             body=maybe_transform(
                 {
+                    "attacker": attacker,
+                    "attacker_country": attacker_country,
+                    "category": category,
+                    "date": date,
+                    "event": event,
+                    "indicator_type": indicator_type,
+                    "raw": raw,
+                    "tlp": tlp,
+                    "body_account_id": body_account_id,
                     "dataset_id": dataset_id,
-                    "order": order,
-                    "order_by": order_by,
-                    "page": page,
-                    "page_size": page_size,
-                    "search": search,
+                    "indicator": indicator,
+                    "tags": tags,
+                    "target_country": target_country,
+                    "target_industry": target_industry,
                 },
                 threat_event_create_params.ThreatEventCreateParams,
             ),
@@ -503,13 +518,21 @@ def with_streaming_response(self) -> AsyncThreatEventsResourceWithStreamingRespo
     async def create(
         self,
         *,
-        account_id: float,
-        dataset_id: List[str] | NotGiven = NOT_GIVEN,
-        order: Literal["asc", "desc"] | NotGiven = NOT_GIVEN,
-        order_by: str | NotGiven = NOT_GIVEN,
-        page: float | NotGiven = NOT_GIVEN,
-        page_size: float | NotGiven = NOT_GIVEN,
-        search: Iterable[threat_event_create_params.Search] | NotGiven = NOT_GIVEN,
+        path_account_id: float,
+        attacker: str,
+        attacker_country: str,
+        category: str,
+        date: Union[str, datetime],
+        event: str,
+        indicator_type: str,
+        raw: threat_event_create_params.Raw,
+        tlp: str,
+        body_account_id: float | NotGiven = NOT_GIVEN,
+        dataset_id: str | NotGiven = NOT_GIVEN,
+        indicator: str | NotGiven = NOT_GIVEN,
+        tags: List[str] | NotGiven = NOT_GIVEN,
+        target_country: str | NotGiven = NOT_GIVEN,
+        target_industry: str | NotGiven = NOT_GIVEN,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
         # The extra values given here take precedence over values defined on the client or passed to this method.
         extra_headers: Headers | None = None,
@@ -518,10 +541,10 @@ async def create(
         timeout: float | httpx.Timeout | None | NotGiven = NOT_GIVEN,
     ) -> ThreatEventCreateResponse:
         """
-        Filter and list events
+        Creates a new event
 
         Args:
-          account_id: Account ID
+          path_account_id: Account ID
 
           extra_headers: Send extra headers
 
@@ -532,15 +555,23 @@ async def create(
           timeout: Override the client-level default timeout for this request, in seconds
         """
         return await self._post(
-            f"/accounts/{account_id}/cloudforce-one/events",
+            f"/accounts/{path_account_id}/cloudforce-one/events/create",
             body=await async_maybe_transform(
                 {
+                    "attacker": attacker,
+                    "attacker_country": attacker_country,
+                    "category": category,
+                    "date": date,
+                    "event": event,
+                    "indicator_type": indicator_type,
+                    "raw": raw,
+                    "tlp": tlp,
+                    "body_account_id": body_account_id,
                     "dataset_id": dataset_id,
-                    "order": order,
-                    "order_by": order_by,
-                    "page": page,
-                    "page_size": page_size,
-                    "search": search,
+                    "indicator": indicator,
+                    "tags": tags,
+                    "target_country": target_country,
+                    "target_industry": target_industry,
                 },
                 threat_event_create_params.ThreatEventCreateParams,
             ),

src/cloudflare/resources/email_security/investigate/investigate.py

@@ -141,7 +141,7 @@ def list(
         detections_only: bool | NotGiven = NOT_GIVEN,
         domain: str | NotGiven = NOT_GIVEN,
         end: Union[str, datetime] | NotGiven = NOT_GIVEN,
-        final_disposition: Literal["MALICIOUS", "SUSPICIOUS", "SPOOF", "SPAM", "BULK", "NONE"] | NotGiven = NOT_GIVEN,
+        final_disposition: Literal["MALICIOUS", "SUSPICIOUS", "SPOOF", "SPAM", "BULK"] | NotGiven = NOT_GIVEN,
         message_action: Literal["PREVIEW", "QUARANTINE_RELEASED", "MOVED"] | NotGiven = NOT_GIVEN,
         message_id: str | NotGiven = NOT_GIVEN,
         metric: str | NotGiven = NOT_GIVEN,
@@ -351,7 +351,7 @@ def list(
         detections_only: bool | NotGiven = NOT_GIVEN,
         domain: str | NotGiven = NOT_GIVEN,
         end: Union[str, datetime] | NotGiven = NOT_GIVEN,
-        final_disposition: Literal["MALICIOUS", "SUSPICIOUS", "SPOOF", "SPAM", "BULK", "NONE"] | NotGiven = NOT_GIVEN,
+        final_disposition: Literal["MALICIOUS", "SUSPICIOUS", "SPOOF", "SPAM", "BULK"] | NotGiven = NOT_GIVEN,
         message_action: Literal["PREVIEW", "QUARANTINE_RELEASED", "MOVED"] | NotGiven = NOT_GIVEN,
         message_id: str | NotGiven = NOT_GIVEN,
         metric: str | NotGiven = NOT_GIVEN,

src/cloudflare/resources/workers_for_platforms/dispatch/namespaces/scripts/secrets.py

@@ -68,7 +68,7 @@ def update(
         timeout: float | httpx.Timeout | None | NotGiven = NOT_GIVEN,
     ) -> Optional[SecretUpdateResponse]:
         """
-        Add a secret to a script uploaded to a Workers for Platforms namespace.
+        Put secrets to a script uploaded to a Workers for Platforms namespace.
 
         Args:
           account_id: Identifier
@@ -132,7 +132,7 @@ def list(
         timeout: float | httpx.Timeout | None | NotGiven = NOT_GIVEN,
     ) -> SyncSinglePage[SecretListResponse]:
         """
-        List secrets bound to a script uploaded to a Workers for Platforms namespace.
+        List secrets from a script uploaded to a Workers for Platforms namespace.
 
         Args:
           account_id: Identifier
@@ -179,8 +179,7 @@ def get(
         timeout: float | httpx.Timeout | None | NotGiven = NOT_GIVEN,
     ) -> Optional[SecretGetResponse]:
         """
-        Get a given secret binding (value omitted) on a script uploaded to a Workers for
-        Platforms namespace.
+        Get secret from a script uploaded to a Workers for Platforms namespace.
 
         Args:
           account_id: Identifier
@@ -257,7 +256,7 @@ async def update(
         timeout: float | httpx.Timeout | None | NotGiven = NOT_GIVEN,
     ) -> Optional[SecretUpdateResponse]:
         """
-        Add a secret to a script uploaded to a Workers for Platforms namespace.
+        Put secrets to a script uploaded to a Workers for Platforms namespace.
 
         Args:
           account_id: Identifier
@@ -321,7 +320,7 @@ def list(
         timeout: float | httpx.Timeout | None | NotGiven = NOT_GIVEN,
     ) -> AsyncPaginator[SecretListResponse, AsyncSinglePage[SecretListResponse]]:
         """
-        List secrets bound to a script uploaded to a Workers for Platforms namespace.
+        List secrets from a script uploaded to a Workers for Platforms namespace.
 
         Args:
           account_id: Identifier
@@ -368,8 +367,7 @@ async def get(
         timeout: float | httpx.Timeout | None | NotGiven = NOT_GIVEN,
     ) -> Optional[SecretGetResponse]:
         """
-        Get a given secret binding (value omitted) on a script uploaded to a Workers for
-        Platforms namespace.
+        Get secret from a script uploaded to a Workers for Platforms namespace.
 
         Args:
           account_id: Identifier

src/cloudflare/resources/zero_trust/access/applications/applications.py

@@ -2,34 +2,51 @@
 
 from __future__ import annotations
 
-from typing import List, Union, Iterable
-from typing_extensions import Literal, Required, Annotated, TypedDict
+from typing import List, Union
+from datetime import datetime
+from typing_extensions import Required, Annotated, TypedDict
 
 from ..._utils import PropertyInfo
 
-__all__ = ["ThreatEventCreateParams", "Search"]
+__all__ = ["ThreatEventCreateParams", "Raw"]
 
 
 class ThreatEventCreateParams(TypedDict, total=False):
-    account_id: Required[float]
+    path_account_id: Required[Annotated[float, PropertyInfo(alias="account_id")]]
     """Account ID"""
 
-    dataset_id: Annotated[List[str], PropertyInfo(alias="datasetId")]
+    attacker: Required[str]
 
-    order: Literal["asc", "desc"]
+    attacker_country: Required[Annotated[str, PropertyInfo(alias="attackerCountry")]]
 
-    order_by: Annotated[str, PropertyInfo(alias="orderBy")]
+    category: Required[str]
 
-    page: float
+    date: Required[Annotated[Union[str, datetime], PropertyInfo(format="iso8601")]]
 
-    page_size: Annotated[float, PropertyInfo(alias="pageSize")]
+    event: Required[str]
 
-    search: Iterable[Search]
+    indicator_type: Required[Annotated[str, PropertyInfo(alias="indicatorType")]]
 
+    raw: Required[Raw]
 
-class Search(TypedDict, total=False):
-    field: str
+    tlp: Required[str]
 
-    op: str
+    body_account_id: Annotated[float, PropertyInfo(alias="accountId")]
 
-    value: Union[str, float, List[Union[str, float]]]
+    dataset_id: Annotated[str, PropertyInfo(alias="datasetId")]
+
+    indicator: str
+
+    tags: List[str]
+
+    target_country: Annotated[str, PropertyInfo(alias="targetCountry")]
+
+    target_industry: Annotated[str, PropertyInfo(alias="targetIndustry")]
+
+
+class Raw(TypedDict, total=False):
+    data: object
+
+    source: str
+
+    tlp: str

src/cloudflare/types/cloudforce_one/threat_event_create_params.py

@@ -1,16 +1,15 @@
 # File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
 
 from typing import List, Optional
-from typing_extensions import TypeAlias
 
 from pydantic import Field as FieldInfo
 
 from ..._models import BaseModel
 
-__all__ = ["ThreatEventCreateResponse", "ThreatEventCreateResponseItem"]
+__all__ = ["ThreatEventCreateResponse"]
 
 
-class ThreatEventCreateResponseItem(BaseModel):
+class ThreatEventCreateResponse(BaseModel):
     id: float
 
     account_id: float = FieldInfo(alias="accountId")
@@ -64,6 +63,3 @@ class ThreatEventCreateResponseItem(BaseModel):
     insight: Optional[str] = None
 
     releasability_id: Optional[str] = FieldInfo(alias="releasabilityId", default=None)
-
-
-ThreatEventCreateResponse: TypeAlias = List[ThreatEventCreateResponseItem]

src/cloudflare/types/cloudforce_one/threat_event_create_response.py

@@ -29,7 +29,7 @@ class InvestigateListParams(TypedDict, total=False):
     end: Annotated[Union[str, datetime], PropertyInfo(format="iso8601")]
     """The end of the search date range. Defaults to `now`."""
 
-    final_disposition: Literal["MALICIOUS", "SUSPICIOUS", "SPOOF", "SPAM", "BULK", "NONE"]
+    final_disposition: Literal["MALICIOUS", "SUSPICIOUS", "SPOOF", "SPAM", "BULK"]
     """The dispositions the search filters by."""
 
     message_action: Literal["PREVIEW", "QUARANTINE_RELEASED", "MOVED"]

src/cloudflare/types/email_security/investigate_list_params.py

@@ -29,8 +29,6 @@ class SubmissionListResponse(BaseModel):
         ]
     ] = None
 
-    original_edf_hash: Optional[str] = None
-
     outcome: Optional[str] = None
 
     outcome_disposition: Optional[

src/cloudflare/types/email_security/submission_list_response.py

@@ -111,19 +111,6 @@
     "InfrastructureApplicationPolicy",
     "InfrastructureApplicationPolicyConnectionRules",
     "InfrastructureApplicationPolicyConnectionRulesSSH",
-    "BrowserRdpApplication",
-    "BrowserRdpApplicationTargetCriterion",
-    "BrowserRdpApplicationDestination",
-    "BrowserRdpApplicationDestinationPublicDestination",
-    "BrowserRdpApplicationDestinationPrivateDestination",
-    "BrowserRdpApplicationPolicy",
-    "BrowserRdpApplicationPolicyAccessAppPolicyLink",
-    "BrowserRdpApplicationPolicyUnionMember2",
-    "BrowserRdpApplicationSCIMConfig",
-    "BrowserRdpApplicationSCIMConfigAuthentication",
-    "BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken",
-    "BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigMultiAuthentication",
-    "BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigMultiAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken",
 ]
 
 
@@ -2230,355 +2217,6 @@ class InfrastructureApplicationPolicy(TypedDict, total=False):
     """
 
 
-class BrowserRdpApplication(TypedDict, total=False):
-    domain: Required[str]
-    """The primary hostname and path secured by Access.
-
-    This domain will be displayed if the app is visible in the App Launcher.
-    """
-
-    target_criteria: Required[Iterable[BrowserRdpApplicationTargetCriterion]]
-
-    type: Required[str]
-    """The application type."""
-
-    account_id: str
-    """The Account ID to use for this endpoint. Mutually exclusive with the Zone ID."""
-
-    zone_id: str
-    """The Zone ID to use for this endpoint. Mutually exclusive with the Account ID."""
-
-    allow_authenticate_via_warp: bool
-    """
-    When set to true, users can authenticate to this application using their WARP
-    session. When set to false this application will always require direct IdP
-    authentication. This setting always overrides the organization setting for WARP
-    authentication.
-    """
-
-    allowed_idps: List[AllowedIdPs]
-    """The identity providers your users can select when connecting to this
-    application.
-
-    Defaults to all IdPs configured in your account.
-    """
-
-    app_launcher_visible: bool
-    """Displays the application in the App Launcher."""
-
-    auto_redirect_to_identity: bool
-    """When set to `true`, users skip the identity provider selection step during
-    login.
-
-    You must specify only one identity provider in allowed_idps.
-    """
-
-    cors_headers: CORSHeadersParam
-
-    custom_deny_message: str
-    """
-    The custom error message shown to a user when they are denied access to the
-    application.
-    """
-
-    custom_deny_url: str
-    """
-    The custom URL a user is redirected to when they are denied access to the
-    application when failing identity-based rules.
-    """
-
-    custom_non_identity_deny_url: str
-    """
-    The custom URL a user is redirected to when they are denied access to the
-    application when failing non-identity rules.
-    """
-
-    custom_pages: List[str]
-    """The custom pages that will be displayed when applicable for this application"""
-
-    destinations: Iterable[BrowserRdpApplicationDestination]
-    """List of destinations secured by Access.
-
-    This supersedes `self_hosted_domains` to allow for more flexibility in defining
-    different types of domains. If `destinations` are provided, then
-    `self_hosted_domains` will be ignored.
-    """
-
-    enable_binding_cookie: bool
-    """
-    Enables the binding cookie, which increases security against compromised
-    authorization tokens and CSRF attacks.
-    """
-
-    http_only_cookie_attribute: bool
-    """
-    Enables the HttpOnly cookie attribute, which increases security against XSS
-    attacks.
-    """
-
-    logo_url: str
-    """The image URL for the logo shown in the App Launcher dashboard."""
-
-    name: str
-    """The name of the application."""
-
-    options_preflight_bypass: bool
-    """
-    Allows options preflight requests to bypass Access authentication and go
-    directly to the origin. Cannot turn on if cors_headers is set.
-    """
-
-    path_cookie_attribute: bool
-    """Enables cookie paths to scope an application's JWT to the application path.
-
-    If disabled, the JWT will scope to the hostname by default
-    """
-
-    policies: List[BrowserRdpApplicationPolicy]
-    """
-    The policies that Access applies to the application, in ascending order of
-    precedence. Items can reference existing policies or create new policies
-    exclusive to the application.
-    """
-
-    same_site_cookie_attribute: str
-    """
-    Sets the SameSite cookie setting, which provides increased security against CSRF
-    attacks.
-    """
-
-    scim_config: BrowserRdpApplicationSCIMConfig
-    """Configuration for provisioning to this application via SCIM.
-
-    This is currently in closed beta.
-    """
-
-    self_hosted_domains: List[SelfHostedDomains]
-    """List of public domains that Access will secure.
-
-    This field is deprecated in favor of `destinations` and will be supported until
-    **November 21, 2025.** If `destinations` are provided, then
-    `self_hosted_domains` will be ignored.
-    """
-
-    service_auth_401_redirect: bool
-    """Returns a 401 status code when the request is blocked by a Service Auth policy."""
-
-    session_duration: str
-    """The amount of time that tokens issued for this application will be valid.
-
-    Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs),
-    ms, s, m, h.
-    """
-
-    skip_interstitial: bool
-    """Enables automatic authentication through cloudflared."""
-
-    tags: List[str]
-    """The tags you want assigned to an application.
-
-    Tags are used to filter applications in the App Launcher dashboard.
-    """
-
-
-class BrowserRdpApplicationTargetCriterion(TypedDict, total=False):
-    port: Required[int]
-    """The port that the targets use for the chosen communication protocol.
-
-    A port cannot be assigned to multiple protocols.
-    """
-
-    protocol: Required[Literal["ssh"]]
-    """The communication protocol your application secures."""
-
-    target_attributes: Required[Dict[str, List[str]]]
-    """Contains a map of target attribute keys to target attribute values."""
-
-
-class BrowserRdpApplicationDestinationPublicDestination(TypedDict, total=False):
-    type: Literal["public"]
-
-    uri: str
-    """The URI of the destination.
-
-    Public destinations' URIs can include a domain and path with
-    [wildcards](https://developers.cloudflare.com/cloudflare-one/policies/access/app-paths/).
-    """
-
-
-class BrowserRdpApplicationDestinationPrivateDestination(TypedDict, total=False):
-    cidr: str
-    """The CIDR range of the destination. Single IPs will be computed as /32."""
-
-    hostname: str
-    """The hostname of the destination. Matches a valid SNI served by an HTTPS origin."""
-
-    l4_protocol: Literal["tcp", "udp"]
-    """The L4 protocol of the destination.
-
-    When omitted, both UDP and TCP traffic will match.
-    """
-
-    port_range: str
-    """The port range of the destination.
-
-    Can be a single port or a range of ports. When omitted, all ports will match.
-    """
-
-    type: Literal["private"]
-
-    vnet_id: str
-    """The VNET ID to match the destination. When omitted, all VNETs will match."""
-
-
-BrowserRdpApplicationDestination: TypeAlias = Union[
-    BrowserRdpApplicationDestinationPublicDestination, BrowserRdpApplicationDestinationPrivateDestination
-]
-
-
-class BrowserRdpApplicationPolicyAccessAppPolicyLink(TypedDict, total=False):
-    id: str
-    """The UUID of the policy"""
-
-    precedence: int
-    """The order of execution for this policy.
-
-    Must be unique for each policy within an app.
-    """
-
-
-class BrowserRdpApplicationPolicyUnionMember2(TypedDict, total=False):
-    id: str
-    """The UUID of the policy"""
-
-    approval_groups: Iterable[ApprovalGroupParam]
-    """Administrators who can approve a temporary authentication request."""
-
-    approval_required: bool
-    """
-    Requires the user to request access from an administrator at the start of each
-    session.
-    """
-
-    isolation_required: bool
-    """
-    Require this application to be served in an isolated browser for users matching
-    this policy. 'Client Web Isolation' must be on for the account in order to use
-    this feature.
-    """
-
-    precedence: int
-    """The order of execution for this policy.
-
-    Must be unique for each policy within an app.
-    """
-
-    purpose_justification_prompt: str
-    """A custom message that will appear on the purpose justification screen."""
-
-    purpose_justification_required: bool
-    """Require users to enter a justification when they log in to the application."""
-
-    session_duration: str
-    """The amount of time that tokens issued for the application will be valid.
-
-    Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs),
-    ms, s, m, h.
-    """
-
-
-BrowserRdpApplicationPolicy: TypeAlias = Union[
-    BrowserRdpApplicationPolicyAccessAppPolicyLink, str, BrowserRdpApplicationPolicyUnionMember2
-]
-
-
-class BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken(
-    TypedDict, total=False
-):
-    client_id: Required[str]
-    """
-    Client ID of the Access service token used to authenticate with the remote
-    service.
-    """
-
-    client_secret: Required[str]
-    """
-    Client secret of the Access service token used to authenticate with the remote
-    service.
-    """
-
-    scheme: Required[Literal["access_service_token"]]
-    """The authentication scheme to use when making SCIM requests to this application."""
-
-
-class BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigMultiAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken(
-    TypedDict, total=False
-):
-    client_id: Required[str]
-    """
-    Client ID of the Access service token used to authenticate with the remote
-    service.
-    """
-
-    client_secret: Required[str]
-    """
-    Client secret of the Access service token used to authenticate with the remote
-    service.
-    """
-
-    scheme: Required[Literal["access_service_token"]]
-    """The authentication scheme to use when making SCIM requests to this application."""
-
-
-BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigMultiAuthentication: TypeAlias = Union[
-    SCIMConfigAuthenticationHTTPBasicParam,
-    SCIMConfigAuthenticationOAuthBearerTokenParam,
-    SCIMConfigAuthenticationOauth2Param,
-    BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigMultiAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken,
-]
-
-BrowserRdpApplicationSCIMConfigAuthentication: TypeAlias = Union[
-    SCIMConfigAuthenticationHTTPBasicParam,
-    SCIMConfigAuthenticationOAuthBearerTokenParam,
-    SCIMConfigAuthenticationOauth2Param,
-    BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken,
-    Iterable[BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigMultiAuthentication],
-]
-
-
-class BrowserRdpApplicationSCIMConfig(TypedDict, total=False):
-    idp_uid: Required[str]
-    """
-    The UID of the IdP to use as the source for SCIM resources to provision to this
-    application.
-    """
-
-    remote_uri: Required[str]
-    """The base URI for the application's SCIM-compatible API."""
-
-    authentication: BrowserRdpApplicationSCIMConfigAuthentication
-    """
-    Attributes for configuring HTTP Basic authentication scheme for SCIM
-    provisioning to an application.
-    """
-
-    deactivate_on_delete: bool
-    """
-    If false, propagates DELETE requests to the target application for SCIM
-    resources. If true, sets 'active' to false on the SCIM resource. Note: Some
-    targets do not support DELETE operations.
-    """
-
-    enabled: bool
-    """Whether SCIM provisioning is turned on for this application."""
-
-    mappings: Iterable[SCIMConfigMappingParam]
-    """
-    A list of mappings to apply to SCIM resources before provisioning them in this
-    application. These can transform or filter the resources to be provisioned.
-    """
-
-
 ApplicationCreateParams: TypeAlias = Union[
     SelfHostedApplication,
     SaaSApplication,
@@ -2589,5 +2227,4 @@ class BrowserRdpApplicationSCIMConfig(TypedDict, total=False):
     BrowserIsolationPermissionsApplication,
     BookmarkApplication,
     InfrastructureApplication,
-    BrowserRdpApplication,
 ]

src/cloudflare/types/zero_trust/access/application_create_params.py

@@ -102,17 +102,6 @@
     "InfrastructureApplicationSCIMConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken",
     "InfrastructureApplicationSCIMConfigAuthenticationAccessSCIMConfigMultiAuthentication",
     "InfrastructureApplicationSCIMConfigAuthenticationAccessSCIMConfigMultiAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken",
-    "BrowserRdpApplication",
-    "BrowserRdpApplicationTargetCriterion",
-    "BrowserRdpApplicationDestination",
-    "BrowserRdpApplicationDestinationPublicDestination",
-    "BrowserRdpApplicationDestinationPrivateDestination",
-    "BrowserRdpApplicationPolicy",
-    "BrowserRdpApplicationSCIMConfig",
-    "BrowserRdpApplicationSCIMConfigAuthentication",
-    "BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken",
-    "BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigMultiAuthentication",
-    "BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigMultiAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken",
 ]
 
 
@@ -1995,304 +1984,6 @@ class InfrastructureApplication(BaseModel):
     updated_at: Optional[datetime] = None
 
 
-class BrowserRdpApplicationTargetCriterion(BaseModel):
-    port: int
-    """The port that the targets use for the chosen communication protocol.
-
-    A port cannot be assigned to multiple protocols.
-    """
-
-    protocol: Literal["ssh"]
-    """The communication protocol your application secures."""
-
-    target_attributes: Dict[str, List[str]]
-    """Contains a map of target attribute keys to target attribute values."""
-
-
-class BrowserRdpApplicationDestinationPublicDestination(BaseModel):
-    type: Optional[Literal["public"]] = None
-
-    uri: Optional[str] = None
-    """The URI of the destination.
-
-    Public destinations' URIs can include a domain and path with
-    [wildcards](https://developers.cloudflare.com/cloudflare-one/policies/access/app-paths/).
-    """
-
-
-class BrowserRdpApplicationDestinationPrivateDestination(BaseModel):
-    cidr: Optional[str] = None
-    """The CIDR range of the destination. Single IPs will be computed as /32."""
-
-    hostname: Optional[str] = None
-    """The hostname of the destination. Matches a valid SNI served by an HTTPS origin."""
-
-    l4_protocol: Optional[Literal["tcp", "udp"]] = None
-    """The L4 protocol of the destination.
-
-    When omitted, both UDP and TCP traffic will match.
-    """
-
-    port_range: Optional[str] = None
-    """The port range of the destination.
-
-    Can be a single port or a range of ports. When omitted, all ports will match.
-    """
-
-    type: Optional[Literal["private"]] = None
-
-    vnet_id: Optional[str] = None
-    """The VNET ID to match the destination. When omitted, all VNETs will match."""
-
-
-BrowserRdpApplicationDestination: TypeAlias = Union[
-    BrowserRdpApplicationDestinationPublicDestination, BrowserRdpApplicationDestinationPrivateDestination
-]
-
-
-class BrowserRdpApplicationPolicy(ApplicationPolicy):
-    precedence: Optional[int] = None
-    """The order of execution for this policy.
-
-    Must be unique for each policy within an app.
-    """
-
-
-class BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken(BaseModel):
-    client_id: str
-    """
-    Client ID of the Access service token used to authenticate with the remote
-    service.
-    """
-
-    client_secret: str
-    """
-    Client secret of the Access service token used to authenticate with the remote
-    service.
-    """
-
-    scheme: Literal["access_service_token"]
-    """The authentication scheme to use when making SCIM requests to this application."""
-
-
-class BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigMultiAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken(
-    BaseModel
-):
-    client_id: str
-    """
-    Client ID of the Access service token used to authenticate with the remote
-    service.
-    """
-
-    client_secret: str
-    """
-    Client secret of the Access service token used to authenticate with the remote
-    service.
-    """
-
-    scheme: Literal["access_service_token"]
-    """The authentication scheme to use when making SCIM requests to this application."""
-
-
-BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigMultiAuthentication: TypeAlias = Union[
-    SCIMConfigAuthenticationHTTPBasic,
-    SCIMConfigAuthenticationOAuthBearerToken,
-    SCIMConfigAuthenticationOauth2,
-    BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigMultiAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken,
-]
-
-BrowserRdpApplicationSCIMConfigAuthentication: TypeAlias = Union[
-    SCIMConfigAuthenticationHTTPBasic,
-    SCIMConfigAuthenticationOAuthBearerToken,
-    SCIMConfigAuthenticationOauth2,
-    BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken,
-    List[BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigMultiAuthentication],
-]
-
-
-class BrowserRdpApplicationSCIMConfig(BaseModel):
-    idp_uid: str
-    """
-    The UID of the IdP to use as the source for SCIM resources to provision to this
-    application.
-    """
-
-    remote_uri: str
-    """The base URI for the application's SCIM-compatible API."""
-
-    authentication: Optional[BrowserRdpApplicationSCIMConfigAuthentication] = None
-    """
-    Attributes for configuring HTTP Basic authentication scheme for SCIM
-    provisioning to an application.
-    """
-
-    deactivate_on_delete: Optional[bool] = None
-    """
-    If false, propagates DELETE requests to the target application for SCIM
-    resources. If true, sets 'active' to false on the SCIM resource. Note: Some
-    targets do not support DELETE operations.
-    """
-
-    enabled: Optional[bool] = None
-    """Whether SCIM provisioning is turned on for this application."""
-
-    mappings: Optional[List[SCIMConfigMapping]] = None
-    """
-    A list of mappings to apply to SCIM resources before provisioning them in this
-    application. These can transform or filter the resources to be provisioned.
-    """
-
-
-class BrowserRdpApplication(BaseModel):
-    domain: str
-    """The primary hostname and path secured by Access.
-
-    This domain will be displayed if the app is visible in the App Launcher.
-    """
-
-    target_criteria: List[BrowserRdpApplicationTargetCriterion]
-
-    type: str
-    """The application type."""
-
-    id: Optional[str] = None
-    """UUID"""
-
-    allow_authenticate_via_warp: Optional[bool] = None
-    """
-    When set to true, users can authenticate to this application using their WARP
-    session. When set to false this application will always require direct IdP
-    authentication. This setting always overrides the organization setting for WARP
-    authentication.
-    """
-
-    allowed_idps: Optional[List[AllowedIdPs]] = None
-    """The identity providers your users can select when connecting to this
-    application.
-
-    Defaults to all IdPs configured in your account.
-    """
-
-    app_launcher_visible: Optional[bool] = None
-    """Displays the application in the App Launcher."""
-
-    aud: Optional[str] = None
-    """Audience tag."""
-
-    auto_redirect_to_identity: Optional[bool] = None
-    """When set to `true`, users skip the identity provider selection step during
-    login.
-
-    You must specify only one identity provider in allowed_idps.
-    """
-
-    cors_headers: Optional[CORSHeaders] = None
-
-    created_at: Optional[datetime] = None
-
-    custom_deny_message: Optional[str] = None
-    """
-    The custom error message shown to a user when they are denied access to the
-    application.
-    """
-
-    custom_deny_url: Optional[str] = None
-    """
-    The custom URL a user is redirected to when they are denied access to the
-    application when failing identity-based rules.
-    """
-
-    custom_non_identity_deny_url: Optional[str] = None
-    """
-    The custom URL a user is redirected to when they are denied access to the
-    application when failing non-identity rules.
-    """
-
-    custom_pages: Optional[List[str]] = None
-    """The custom pages that will be displayed when applicable for this application"""
-
-    destinations: Optional[List[BrowserRdpApplicationDestination]] = None
-    """List of destinations secured by Access.
-
-    This supersedes `self_hosted_domains` to allow for more flexibility in defining
-    different types of domains. If `destinations` are provided, then
-    `self_hosted_domains` will be ignored.
-    """
-
-    enable_binding_cookie: Optional[bool] = None
-    """
-    Enables the binding cookie, which increases security against compromised
-    authorization tokens and CSRF attacks.
-    """
-
-    http_only_cookie_attribute: Optional[bool] = None
-    """
-    Enables the HttpOnly cookie attribute, which increases security against XSS
-    attacks.
-    """
-
-    logo_url: Optional[str] = None
-    """The image URL for the logo shown in the App Launcher dashboard."""
-
-    name: Optional[str] = None
-    """The name of the application."""
-
-    options_preflight_bypass: Optional[bool] = None
-    """
-    Allows options preflight requests to bypass Access authentication and go
-    directly to the origin. Cannot turn on if cors_headers is set.
-    """
-
-    path_cookie_attribute: Optional[bool] = None
-    """Enables cookie paths to scope an application's JWT to the application path.
-
-    If disabled, the JWT will scope to the hostname by default
-    """
-
-    policies: Optional[List[BrowserRdpApplicationPolicy]] = None
-
-    same_site_cookie_attribute: Optional[str] = None
-    """
-    Sets the SameSite cookie setting, which provides increased security against CSRF
-    attacks.
-    """
-
-    scim_config: Optional[BrowserRdpApplicationSCIMConfig] = None
-    """Configuration for provisioning to this application via SCIM.
-
-    This is currently in closed beta.
-    """
-
-    self_hosted_domains: Optional[List[SelfHostedDomains]] = None
-    """List of public domains that Access will secure.
-
-    This field is deprecated in favor of `destinations` and will be supported until
-    **November 21, 2025.** If `destinations` are provided, then
-    `self_hosted_domains` will be ignored.
-    """
-
-    service_auth_401_redirect: Optional[bool] = None
-    """Returns a 401 status code when the request is blocked by a Service Auth policy."""
-
-    session_duration: Optional[str] = None
-    """The amount of time that tokens issued for this application will be valid.
-
-    Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs),
-    ms, s, m, h.
-    """
-
-    skip_interstitial: Optional[bool] = None
-    """Enables automatic authentication through cloudflared."""
-
-    tags: Optional[List[str]] = None
-    """The tags you want assigned to an application.
-
-    Tags are used to filter applications in the App Launcher dashboard.
-    """
-
-    updated_at: Optional[datetime] = None
-
-
 ApplicationCreateResponse: TypeAlias = Union[
     SelfHostedApplication,
     SaaSApplication,
@@ -2303,5 +1994,4 @@ class BrowserRdpApplication(BaseModel):
     BrowserIsolationPermissionsApplication,
     BookmarkApplication,
     InfrastructureApplication,
-    BrowserRdpApplication,
 ]

src/cloudflare/types/zero_trust/access/application_create_response.py

@@ -102,17 +102,6 @@
     "InfrastructureApplicationSCIMConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken",
     "InfrastructureApplicationSCIMConfigAuthenticationAccessSCIMConfigMultiAuthentication",
     "InfrastructureApplicationSCIMConfigAuthenticationAccessSCIMConfigMultiAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken",
-    "BrowserRdpApplication",
-    "BrowserRdpApplicationTargetCriterion",
-    "BrowserRdpApplicationDestination",
-    "BrowserRdpApplicationDestinationPublicDestination",
-    "BrowserRdpApplicationDestinationPrivateDestination",
-    "BrowserRdpApplicationPolicy",
-    "BrowserRdpApplicationSCIMConfig",
-    "BrowserRdpApplicationSCIMConfigAuthentication",
-    "BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken",
-    "BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigMultiAuthentication",
-    "BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigMultiAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken",
 ]
 
 
@@ -1995,304 +1984,6 @@ class InfrastructureApplication(BaseModel):
     updated_at: Optional[datetime] = None
 
 
-class BrowserRdpApplicationTargetCriterion(BaseModel):
-    port: int
-    """The port that the targets use for the chosen communication protocol.
-
-    A port cannot be assigned to multiple protocols.
-    """
-
-    protocol: Literal["ssh"]
-    """The communication protocol your application secures."""
-
-    target_attributes: Dict[str, List[str]]
-    """Contains a map of target attribute keys to target attribute values."""
-
-
-class BrowserRdpApplicationDestinationPublicDestination(BaseModel):
-    type: Optional[Literal["public"]] = None
-
-    uri: Optional[str] = None
-    """The URI of the destination.
-
-    Public destinations' URIs can include a domain and path with
-    [wildcards](https://developers.cloudflare.com/cloudflare-one/policies/access/app-paths/).
-    """
-
-
-class BrowserRdpApplicationDestinationPrivateDestination(BaseModel):
-    cidr: Optional[str] = None
-    """The CIDR range of the destination. Single IPs will be computed as /32."""
-
-    hostname: Optional[str] = None
-    """The hostname of the destination. Matches a valid SNI served by an HTTPS origin."""
-
-    l4_protocol: Optional[Literal["tcp", "udp"]] = None
-    """The L4 protocol of the destination.
-
-    When omitted, both UDP and TCP traffic will match.
-    """
-
-    port_range: Optional[str] = None
-    """The port range of the destination.
-
-    Can be a single port or a range of ports. When omitted, all ports will match.
-    """
-
-    type: Optional[Literal["private"]] = None
-
-    vnet_id: Optional[str] = None
-    """The VNET ID to match the destination. When omitted, all VNETs will match."""
-
-
-BrowserRdpApplicationDestination: TypeAlias = Union[
-    BrowserRdpApplicationDestinationPublicDestination, BrowserRdpApplicationDestinationPrivateDestination
-]
-
-
-class BrowserRdpApplicationPolicy(ApplicationPolicy):
-    precedence: Optional[int] = None
-    """The order of execution for this policy.
-
-    Must be unique for each policy within an app.
-    """
-
-
-class BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken(BaseModel):
-    client_id: str
-    """
-    Client ID of the Access service token used to authenticate with the remote
-    service.
-    """
-
-    client_secret: str
-    """
-    Client secret of the Access service token used to authenticate with the remote
-    service.
-    """
-
-    scheme: Literal["access_service_token"]
-    """The authentication scheme to use when making SCIM requests to this application."""
-
-
-class BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigMultiAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken(
-    BaseModel
-):
-    client_id: str
-    """
-    Client ID of the Access service token used to authenticate with the remote
-    service.
-    """
-
-    client_secret: str
-    """
-    Client secret of the Access service token used to authenticate with the remote
-    service.
-    """
-
-    scheme: Literal["access_service_token"]
-    """The authentication scheme to use when making SCIM requests to this application."""
-
-
-BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigMultiAuthentication: TypeAlias = Union[
-    SCIMConfigAuthenticationHTTPBasic,
-    SCIMConfigAuthenticationOAuthBearerToken,
-    SCIMConfigAuthenticationOauth2,
-    BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigMultiAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken,
-]
-
-BrowserRdpApplicationSCIMConfigAuthentication: TypeAlias = Union[
-    SCIMConfigAuthenticationHTTPBasic,
-    SCIMConfigAuthenticationOAuthBearerToken,
-    SCIMConfigAuthenticationOauth2,
-    BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken,
-    List[BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigMultiAuthentication],
-]
-
-
-class BrowserRdpApplicationSCIMConfig(BaseModel):
-    idp_uid: str
-    """
-    The UID of the IdP to use as the source for SCIM resources to provision to this
-    application.
-    """
-
-    remote_uri: str
-    """The base URI for the application's SCIM-compatible API."""
-
-    authentication: Optional[BrowserRdpApplicationSCIMConfigAuthentication] = None
-    """
-    Attributes for configuring HTTP Basic authentication scheme for SCIM
-    provisioning to an application.
-    """
-
-    deactivate_on_delete: Optional[bool] = None
-    """
-    If false, propagates DELETE requests to the target application for SCIM
-    resources. If true, sets 'active' to false on the SCIM resource. Note: Some
-    targets do not support DELETE operations.
-    """
-
-    enabled: Optional[bool] = None
-    """Whether SCIM provisioning is turned on for this application."""
-
-    mappings: Optional[List[SCIMConfigMapping]] = None
-    """
-    A list of mappings to apply to SCIM resources before provisioning them in this
-    application. These can transform or filter the resources to be provisioned.
-    """
-
-
-class BrowserRdpApplication(BaseModel):
-    domain: str
-    """The primary hostname and path secured by Access.
-
-    This domain will be displayed if the app is visible in the App Launcher.
-    """
-
-    target_criteria: List[BrowserRdpApplicationTargetCriterion]
-
-    type: str
-    """The application type."""
-
-    id: Optional[str] = None
-    """UUID"""
-
-    allow_authenticate_via_warp: Optional[bool] = None
-    """
-    When set to true, users can authenticate to this application using their WARP
-    session. When set to false this application will always require direct IdP
-    authentication. This setting always overrides the organization setting for WARP
-    authentication.
-    """
-
-    allowed_idps: Optional[List[AllowedIdPs]] = None
-    """The identity providers your users can select when connecting to this
-    application.
-
-    Defaults to all IdPs configured in your account.
-    """
-
-    app_launcher_visible: Optional[bool] = None
-    """Displays the application in the App Launcher."""
-
-    aud: Optional[str] = None
-    """Audience tag."""
-
-    auto_redirect_to_identity: Optional[bool] = None
-    """When set to `true`, users skip the identity provider selection step during
-    login.
-
-    You must specify only one identity provider in allowed_idps.
-    """
-
-    cors_headers: Optional[CORSHeaders] = None
-
-    created_at: Optional[datetime] = None
-
-    custom_deny_message: Optional[str] = None
-    """
-    The custom error message shown to a user when they are denied access to the
-    application.
-    """
-
-    custom_deny_url: Optional[str] = None
-    """
-    The custom URL a user is redirected to when they are denied access to the
-    application when failing identity-based rules.
-    """
-
-    custom_non_identity_deny_url: Optional[str] = None
-    """
-    The custom URL a user is redirected to when they are denied access to the
-    application when failing non-identity rules.
-    """
-
-    custom_pages: Optional[List[str]] = None
-    """The custom pages that will be displayed when applicable for this application"""
-
-    destinations: Optional[List[BrowserRdpApplicationDestination]] = None
-    """List of destinations secured by Access.
-
-    This supersedes `self_hosted_domains` to allow for more flexibility in defining
-    different types of domains. If `destinations` are provided, then
-    `self_hosted_domains` will be ignored.
-    """
-
-    enable_binding_cookie: Optional[bool] = None
-    """
-    Enables the binding cookie, which increases security against compromised
-    authorization tokens and CSRF attacks.
-    """
-
-    http_only_cookie_attribute: Optional[bool] = None
-    """
-    Enables the HttpOnly cookie attribute, which increases security against XSS
-    attacks.
-    """
-
-    logo_url: Optional[str] = None
-    """The image URL for the logo shown in the App Launcher dashboard."""
-
-    name: Optional[str] = None
-    """The name of the application."""
-
-    options_preflight_bypass: Optional[bool] = None
-    """
-    Allows options preflight requests to bypass Access authentication and go
-    directly to the origin. Cannot turn on if cors_headers is set.
-    """
-
-    path_cookie_attribute: Optional[bool] = None
-    """Enables cookie paths to scope an application's JWT to the application path.
-
-    If disabled, the JWT will scope to the hostname by default
-    """
-
-    policies: Optional[List[BrowserRdpApplicationPolicy]] = None
-
-    same_site_cookie_attribute: Optional[str] = None
-    """
-    Sets the SameSite cookie setting, which provides increased security against CSRF
-    attacks.
-    """
-
-    scim_config: Optional[BrowserRdpApplicationSCIMConfig] = None
-    """Configuration for provisioning to this application via SCIM.
-
-    This is currently in closed beta.
-    """
-
-    self_hosted_domains: Optional[List[SelfHostedDomains]] = None
-    """List of public domains that Access will secure.
-
-    This field is deprecated in favor of `destinations` and will be supported until
-    **November 21, 2025.** If `destinations` are provided, then
-    `self_hosted_domains` will be ignored.
-    """
-
-    service_auth_401_redirect: Optional[bool] = None
-    """Returns a 401 status code when the request is blocked by a Service Auth policy."""
-
-    session_duration: Optional[str] = None
-    """The amount of time that tokens issued for this application will be valid.
-
-    Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs),
-    ms, s, m, h.
-    """
-
-    skip_interstitial: Optional[bool] = None
-    """Enables automatic authentication through cloudflared."""
-
-    tags: Optional[List[str]] = None
-    """The tags you want assigned to an application.
-
-    Tags are used to filter applications in the App Launcher dashboard.
-    """
-
-    updated_at: Optional[datetime] = None
-
-
 ApplicationGetResponse: TypeAlias = Union[
     SelfHostedApplication,
     SaaSApplication,
@@ -2303,5 +1994,4 @@ class BrowserRdpApplication(BaseModel):
     BrowserIsolationPermissionsApplication,
     BookmarkApplication,
     InfrastructureApplication,
-    BrowserRdpApplication,
 ]

src/cloudflare/types/zero_trust/access/application_get_response.py

@@ -102,17 +102,6 @@
     "InfrastructureApplicationSCIMConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken",
     "InfrastructureApplicationSCIMConfigAuthenticationAccessSCIMConfigMultiAuthentication",
     "InfrastructureApplicationSCIMConfigAuthenticationAccessSCIMConfigMultiAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken",
-    "BrowserRdpApplication",
-    "BrowserRdpApplicationTargetCriterion",
-    "BrowserRdpApplicationDestination",
-    "BrowserRdpApplicationDestinationPublicDestination",
-    "BrowserRdpApplicationDestinationPrivateDestination",
-    "BrowserRdpApplicationPolicy",
-    "BrowserRdpApplicationSCIMConfig",
-    "BrowserRdpApplicationSCIMConfigAuthentication",
-    "BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken",
-    "BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigMultiAuthentication",
-    "BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigMultiAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken",
 ]
 
 
@@ -1995,304 +1984,6 @@ class InfrastructureApplication(BaseModel):
     updated_at: Optional[datetime] = None
 
 
-class BrowserRdpApplicationTargetCriterion(BaseModel):
-    port: int
-    """The port that the targets use for the chosen communication protocol.
-
-    A port cannot be assigned to multiple protocols.
-    """
-
-    protocol: Literal["ssh"]
-    """The communication protocol your application secures."""
-
-    target_attributes: Dict[str, List[str]]
-    """Contains a map of target attribute keys to target attribute values."""
-
-
-class BrowserRdpApplicationDestinationPublicDestination(BaseModel):
-    type: Optional[Literal["public"]] = None
-
-    uri: Optional[str] = None
-    """The URI of the destination.
-
-    Public destinations' URIs can include a domain and path with
-    [wildcards](https://developers.cloudflare.com/cloudflare-one/policies/access/app-paths/).
-    """
-
-
-class BrowserRdpApplicationDestinationPrivateDestination(BaseModel):
-    cidr: Optional[str] = None
-    """The CIDR range of the destination. Single IPs will be computed as /32."""
-
-    hostname: Optional[str] = None
-    """The hostname of the destination. Matches a valid SNI served by an HTTPS origin."""
-
-    l4_protocol: Optional[Literal["tcp", "udp"]] = None
-    """The L4 protocol of the destination.
-
-    When omitted, both UDP and TCP traffic will match.
-    """
-
-    port_range: Optional[str] = None
-    """The port range of the destination.
-
-    Can be a single port or a range of ports. When omitted, all ports will match.
-    """
-
-    type: Optional[Literal["private"]] = None
-
-    vnet_id: Optional[str] = None
-    """The VNET ID to match the destination. When omitted, all VNETs will match."""
-
-
-BrowserRdpApplicationDestination: TypeAlias = Union[
-    BrowserRdpApplicationDestinationPublicDestination, BrowserRdpApplicationDestinationPrivateDestination
-]
-
-
-class BrowserRdpApplicationPolicy(ApplicationPolicy):
-    precedence: Optional[int] = None
-    """The order of execution for this policy.
-
-    Must be unique for each policy within an app.
-    """
-
-
-class BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken(BaseModel):
-    client_id: str
-    """
-    Client ID of the Access service token used to authenticate with the remote
-    service.
-    """
-
-    client_secret: str
-    """
-    Client secret of the Access service token used to authenticate with the remote
-    service.
-    """
-
-    scheme: Literal["access_service_token"]
-    """The authentication scheme to use when making SCIM requests to this application."""
-
-
-class BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigMultiAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken(
-    BaseModel
-):
-    client_id: str
-    """
-    Client ID of the Access service token used to authenticate with the remote
-    service.
-    """
-
-    client_secret: str
-    """
-    Client secret of the Access service token used to authenticate with the remote
-    service.
-    """
-
-    scheme: Literal["access_service_token"]
-    """The authentication scheme to use when making SCIM requests to this application."""
-
-
-BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigMultiAuthentication: TypeAlias = Union[
-    SCIMConfigAuthenticationHTTPBasic,
-    SCIMConfigAuthenticationOAuthBearerToken,
-    SCIMConfigAuthenticationOauth2,
-    BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigMultiAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken,
-]
-
-BrowserRdpApplicationSCIMConfigAuthentication: TypeAlias = Union[
-    SCIMConfigAuthenticationHTTPBasic,
-    SCIMConfigAuthenticationOAuthBearerToken,
-    SCIMConfigAuthenticationOauth2,
-    BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken,
-    List[BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigMultiAuthentication],
-]
-
-
-class BrowserRdpApplicationSCIMConfig(BaseModel):
-    idp_uid: str
-    """
-    The UID of the IdP to use as the source for SCIM resources to provision to this
-    application.
-    """
-
-    remote_uri: str
-    """The base URI for the application's SCIM-compatible API."""
-
-    authentication: Optional[BrowserRdpApplicationSCIMConfigAuthentication] = None
-    """
-    Attributes for configuring HTTP Basic authentication scheme for SCIM
-    provisioning to an application.
-    """
-
-    deactivate_on_delete: Optional[bool] = None
-    """
-    If false, propagates DELETE requests to the target application for SCIM
-    resources. If true, sets 'active' to false on the SCIM resource. Note: Some
-    targets do not support DELETE operations.
-    """
-
-    enabled: Optional[bool] = None
-    """Whether SCIM provisioning is turned on for this application."""
-
-    mappings: Optional[List[SCIMConfigMapping]] = None
-    """
-    A list of mappings to apply to SCIM resources before provisioning them in this
-    application. These can transform or filter the resources to be provisioned.
-    """
-
-
-class BrowserRdpApplication(BaseModel):
-    domain: str
-    """The primary hostname and path secured by Access.
-
-    This domain will be displayed if the app is visible in the App Launcher.
-    """
-
-    target_criteria: List[BrowserRdpApplicationTargetCriterion]
-
-    type: str
-    """The application type."""
-
-    id: Optional[str] = None
-    """UUID"""
-
-    allow_authenticate_via_warp: Optional[bool] = None
-    """
-    When set to true, users can authenticate to this application using their WARP
-    session. When set to false this application will always require direct IdP
-    authentication. This setting always overrides the organization setting for WARP
-    authentication.
-    """
-
-    allowed_idps: Optional[List[AllowedIdPs]] = None
-    """The identity providers your users can select when connecting to this
-    application.
-
-    Defaults to all IdPs configured in your account.
-    """
-
-    app_launcher_visible: Optional[bool] = None
-    """Displays the application in the App Launcher."""
-
-    aud: Optional[str] = None
-    """Audience tag."""
-
-    auto_redirect_to_identity: Optional[bool] = None
-    """When set to `true`, users skip the identity provider selection step during
-    login.
-
-    You must specify only one identity provider in allowed_idps.
-    """
-
-    cors_headers: Optional[CORSHeaders] = None
-
-    created_at: Optional[datetime] = None
-
-    custom_deny_message: Optional[str] = None
-    """
-    The custom error message shown to a user when they are denied access to the
-    application.
-    """
-
-    custom_deny_url: Optional[str] = None
-    """
-    The custom URL a user is redirected to when they are denied access to the
-    application when failing identity-based rules.
-    """
-
-    custom_non_identity_deny_url: Optional[str] = None
-    """
-    The custom URL a user is redirected to when they are denied access to the
-    application when failing non-identity rules.
-    """
-
-    custom_pages: Optional[List[str]] = None
-    """The custom pages that will be displayed when applicable for this application"""
-
-    destinations: Optional[List[BrowserRdpApplicationDestination]] = None
-    """List of destinations secured by Access.
-
-    This supersedes `self_hosted_domains` to allow for more flexibility in defining
-    different types of domains. If `destinations` are provided, then
-    `self_hosted_domains` will be ignored.
-    """
-
-    enable_binding_cookie: Optional[bool] = None
-    """
-    Enables the binding cookie, which increases security against compromised
-    authorization tokens and CSRF attacks.
-    """
-
-    http_only_cookie_attribute: Optional[bool] = None
-    """
-    Enables the HttpOnly cookie attribute, which increases security against XSS
-    attacks.
-    """
-
-    logo_url: Optional[str] = None
-    """The image URL for the logo shown in the App Launcher dashboard."""
-
-    name: Optional[str] = None
-    """The name of the application."""
-
-    options_preflight_bypass: Optional[bool] = None
-    """
-    Allows options preflight requests to bypass Access authentication and go
-    directly to the origin. Cannot turn on if cors_headers is set.
-    """
-
-    path_cookie_attribute: Optional[bool] = None
-    """Enables cookie paths to scope an application's JWT to the application path.
-
-    If disabled, the JWT will scope to the hostname by default
-    """
-
-    policies: Optional[List[BrowserRdpApplicationPolicy]] = None
-
-    same_site_cookie_attribute: Optional[str] = None
-    """
-    Sets the SameSite cookie setting, which provides increased security against CSRF
-    attacks.
-    """
-
-    scim_config: Optional[BrowserRdpApplicationSCIMConfig] = None
-    """Configuration for provisioning to this application via SCIM.
-
-    This is currently in closed beta.
-    """
-
-    self_hosted_domains: Optional[List[SelfHostedDomains]] = None
-    """List of public domains that Access will secure.
-
-    This field is deprecated in favor of `destinations` and will be supported until
-    **November 21, 2025.** If `destinations` are provided, then
-    `self_hosted_domains` will be ignored.
-    """
-
-    service_auth_401_redirect: Optional[bool] = None
-    """Returns a 401 status code when the request is blocked by a Service Auth policy."""
-
-    session_duration: Optional[str] = None
-    """The amount of time that tokens issued for this application will be valid.
-
-    Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs),
-    ms, s, m, h.
-    """
-
-    skip_interstitial: Optional[bool] = None
-    """Enables automatic authentication through cloudflared."""
-
-    tags: Optional[List[str]] = None
-    """The tags you want assigned to an application.
-
-    Tags are used to filter applications in the App Launcher dashboard.
-    """
-
-    updated_at: Optional[datetime] = None
-
-
 ApplicationListResponse: TypeAlias = Union[
     SelfHostedApplication,
     SaaSApplication,
@@ -2303,5 +1994,4 @@ class BrowserRdpApplication(BaseModel):
     BrowserIsolationPermissionsApplication,
     BookmarkApplication,
     InfrastructureApplication,
-    BrowserRdpApplication,
 ]

src/cloudflare/types/zero_trust/access/application_list_response.py

@@ -5,5 +5,5 @@
 __all__ = ["ApplicationType"]
 
 ApplicationType: TypeAlias = Literal[
-    "self_hosted", "saas", "ssh", "vnc", "app_launcher", "warp", "biso", "bookmark", "dash_sso", "infrastructure", "rdp"
+    "self_hosted", "saas", "ssh", "vnc", "app_launcher", "warp", "biso", "bookmark", "dash_sso", "infrastructure"
 ]

src/cloudflare/types/zero_trust/access/application_type.py

@@ -111,19 +111,6 @@
     "InfrastructureApplicationPolicy",
     "InfrastructureApplicationPolicyConnectionRules",
     "InfrastructureApplicationPolicyConnectionRulesSSH",
-    "BrowserRdpApplication",
-    "BrowserRdpApplicationTargetCriterion",
-    "BrowserRdpApplicationDestination",
-    "BrowserRdpApplicationDestinationPublicDestination",
-    "BrowserRdpApplicationDestinationPrivateDestination",
-    "BrowserRdpApplicationPolicy",
-    "BrowserRdpApplicationPolicyAccessAppPolicyLink",
-    "BrowserRdpApplicationPolicyUnionMember2",
-    "BrowserRdpApplicationSCIMConfig",
-    "BrowserRdpApplicationSCIMConfigAuthentication",
-    "BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken",
-    "BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigMultiAuthentication",
-    "BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigMultiAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken",
 ]
 
 
@@ -2230,355 +2217,6 @@ class InfrastructureApplicationPolicy(TypedDict, total=False):
     """
 
 
-class BrowserRdpApplication(TypedDict, total=False):
-    domain: Required[str]
-    """The primary hostname and path secured by Access.
-
-    This domain will be displayed if the app is visible in the App Launcher.
-    """
-
-    target_criteria: Required[Iterable[BrowserRdpApplicationTargetCriterion]]
-
-    type: Required[str]
-    """The application type."""
-
-    account_id: str
-    """The Account ID to use for this endpoint. Mutually exclusive with the Zone ID."""
-
-    zone_id: str
-    """The Zone ID to use for this endpoint. Mutually exclusive with the Account ID."""
-
-    allow_authenticate_via_warp: bool
-    """
-    When set to true, users can authenticate to this application using their WARP
-    session. When set to false this application will always require direct IdP
-    authentication. This setting always overrides the organization setting for WARP
-    authentication.
-    """
-
-    allowed_idps: List[AllowedIdPs]
-    """The identity providers your users can select when connecting to this
-    application.
-
-    Defaults to all IdPs configured in your account.
-    """
-
-    app_launcher_visible: bool
-    """Displays the application in the App Launcher."""
-
-    auto_redirect_to_identity: bool
-    """When set to `true`, users skip the identity provider selection step during
-    login.
-
-    You must specify only one identity provider in allowed_idps.
-    """
-
-    cors_headers: CORSHeadersParam
-
-    custom_deny_message: str
-    """
-    The custom error message shown to a user when they are denied access to the
-    application.
-    """
-
-    custom_deny_url: str
-    """
-    The custom URL a user is redirected to when they are denied access to the
-    application when failing identity-based rules.
-    """
-
-    custom_non_identity_deny_url: str
-    """
-    The custom URL a user is redirected to when they are denied access to the
-    application when failing non-identity rules.
-    """
-
-    custom_pages: List[str]
-    """The custom pages that will be displayed when applicable for this application"""
-
-    destinations: Iterable[BrowserRdpApplicationDestination]
-    """List of destinations secured by Access.
-
-    This supersedes `self_hosted_domains` to allow for more flexibility in defining
-    different types of domains. If `destinations` are provided, then
-    `self_hosted_domains` will be ignored.
-    """
-
-    enable_binding_cookie: bool
-    """
-    Enables the binding cookie, which increases security against compromised
-    authorization tokens and CSRF attacks.
-    """
-
-    http_only_cookie_attribute: bool
-    """
-    Enables the HttpOnly cookie attribute, which increases security against XSS
-    attacks.
-    """
-
-    logo_url: str
-    """The image URL for the logo shown in the App Launcher dashboard."""
-
-    name: str
-    """The name of the application."""
-
-    options_preflight_bypass: bool
-    """
-    Allows options preflight requests to bypass Access authentication and go
-    directly to the origin. Cannot turn on if cors_headers is set.
-    """
-
-    path_cookie_attribute: bool
-    """Enables cookie paths to scope an application's JWT to the application path.
-
-    If disabled, the JWT will scope to the hostname by default
-    """
-
-    policies: List[BrowserRdpApplicationPolicy]
-    """
-    The policies that Access applies to the application, in ascending order of
-    precedence. Items can reference existing policies or create new policies
-    exclusive to the application.
-    """
-
-    same_site_cookie_attribute: str
-    """
-    Sets the SameSite cookie setting, which provides increased security against CSRF
-    attacks.
-    """
-
-    scim_config: BrowserRdpApplicationSCIMConfig
-    """Configuration for provisioning to this application via SCIM.
-
-    This is currently in closed beta.
-    """
-
-    self_hosted_domains: List[SelfHostedDomains]
-    """List of public domains that Access will secure.
-
-    This field is deprecated in favor of `destinations` and will be supported until
-    **November 21, 2025.** If `destinations` are provided, then
-    `self_hosted_domains` will be ignored.
-    """
-
-    service_auth_401_redirect: bool
-    """Returns a 401 status code when the request is blocked by a Service Auth policy."""
-
-    session_duration: str
-    """The amount of time that tokens issued for this application will be valid.
-
-    Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs),
-    ms, s, m, h.
-    """
-
-    skip_interstitial: bool
-    """Enables automatic authentication through cloudflared."""
-
-    tags: List[str]
-    """The tags you want assigned to an application.
-
-    Tags are used to filter applications in the App Launcher dashboard.
-    """
-
-
-class BrowserRdpApplicationTargetCriterion(TypedDict, total=False):
-    port: Required[int]
-    """The port that the targets use for the chosen communication protocol.
-
-    A port cannot be assigned to multiple protocols.
-    """
-
-    protocol: Required[Literal["ssh"]]
-    """The communication protocol your application secures."""
-
-    target_attributes: Required[Dict[str, List[str]]]
-    """Contains a map of target attribute keys to target attribute values."""
-
-
-class BrowserRdpApplicationDestinationPublicDestination(TypedDict, total=False):
-    type: Literal["public"]
-
-    uri: str
-    """The URI of the destination.
-
-    Public destinations' URIs can include a domain and path with
-    [wildcards](https://developers.cloudflare.com/cloudflare-one/policies/access/app-paths/).
-    """
-
-
-class BrowserRdpApplicationDestinationPrivateDestination(TypedDict, total=False):
-    cidr: str
-    """The CIDR range of the destination. Single IPs will be computed as /32."""
-
-    hostname: str
-    """The hostname of the destination. Matches a valid SNI served by an HTTPS origin."""
-
-    l4_protocol: Literal["tcp", "udp"]
-    """The L4 protocol of the destination.
-
-    When omitted, both UDP and TCP traffic will match.
-    """
-
-    port_range: str
-    """The port range of the destination.
-
-    Can be a single port or a range of ports. When omitted, all ports will match.
-    """
-
-    type: Literal["private"]
-
-    vnet_id: str
-    """The VNET ID to match the destination. When omitted, all VNETs will match."""
-
-
-BrowserRdpApplicationDestination: TypeAlias = Union[
-    BrowserRdpApplicationDestinationPublicDestination, BrowserRdpApplicationDestinationPrivateDestination
-]
-
-
-class BrowserRdpApplicationPolicyAccessAppPolicyLink(TypedDict, total=False):
-    id: str
-    """The UUID of the policy"""
-
-    precedence: int
-    """The order of execution for this policy.
-
-    Must be unique for each policy within an app.
-    """
-
-
-class BrowserRdpApplicationPolicyUnionMember2(TypedDict, total=False):
-    id: str
-    """The UUID of the policy"""
-
-    approval_groups: Iterable[ApprovalGroupParam]
-    """Administrators who can approve a temporary authentication request."""
-
-    approval_required: bool
-    """
-    Requires the user to request access from an administrator at the start of each
-    session.
-    """
-
-    isolation_required: bool
-    """
-    Require this application to be served in an isolated browser for users matching
-    this policy. 'Client Web Isolation' must be on for the account in order to use
-    this feature.
-    """
-
-    precedence: int
-    """The order of execution for this policy.
-
-    Must be unique for each policy within an app.
-    """
-
-    purpose_justification_prompt: str
-    """A custom message that will appear on the purpose justification screen."""
-
-    purpose_justification_required: bool
-    """Require users to enter a justification when they log in to the application."""
-
-    session_duration: str
-    """The amount of time that tokens issued for the application will be valid.
-
-    Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs),
-    ms, s, m, h.
-    """
-
-
-BrowserRdpApplicationPolicy: TypeAlias = Union[
-    BrowserRdpApplicationPolicyAccessAppPolicyLink, str, BrowserRdpApplicationPolicyUnionMember2
-]
-
-
-class BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken(
-    TypedDict, total=False
-):
-    client_id: Required[str]
-    """
-    Client ID of the Access service token used to authenticate with the remote
-    service.
-    """
-
-    client_secret: Required[str]
-    """
-    Client secret of the Access service token used to authenticate with the remote
-    service.
-    """
-
-    scheme: Required[Literal["access_service_token"]]
-    """The authentication scheme to use when making SCIM requests to this application."""
-
-
-class BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigMultiAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken(
-    TypedDict, total=False
-):
-    client_id: Required[str]
-    """
-    Client ID of the Access service token used to authenticate with the remote
-    service.
-    """
-
-    client_secret: Required[str]
-    """
-    Client secret of the Access service token used to authenticate with the remote
-    service.
-    """
-
-    scheme: Required[Literal["access_service_token"]]
-    """The authentication scheme to use when making SCIM requests to this application."""
-
-
-BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigMultiAuthentication: TypeAlias = Union[
-    SCIMConfigAuthenticationHTTPBasicParam,
-    SCIMConfigAuthenticationOAuthBearerTokenParam,
-    SCIMConfigAuthenticationOauth2Param,
-    BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigMultiAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken,
-]
-
-BrowserRdpApplicationSCIMConfigAuthentication: TypeAlias = Union[
-    SCIMConfigAuthenticationHTTPBasicParam,
-    SCIMConfigAuthenticationOAuthBearerTokenParam,
-    SCIMConfigAuthenticationOauth2Param,
-    BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken,
-    Iterable[BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigMultiAuthentication],
-]
-
-
-class BrowserRdpApplicationSCIMConfig(TypedDict, total=False):
-    idp_uid: Required[str]
-    """
-    The UID of the IdP to use as the source for SCIM resources to provision to this
-    application.
-    """
-
-    remote_uri: Required[str]
-    """The base URI for the application's SCIM-compatible API."""
-
-    authentication: BrowserRdpApplicationSCIMConfigAuthentication
-    """
-    Attributes for configuring HTTP Basic authentication scheme for SCIM
-    provisioning to an application.
-    """
-
-    deactivate_on_delete: bool
-    """
-    If false, propagates DELETE requests to the target application for SCIM
-    resources. If true, sets 'active' to false on the SCIM resource. Note: Some
-    targets do not support DELETE operations.
-    """
-
-    enabled: bool
-    """Whether SCIM provisioning is turned on for this application."""
-
-    mappings: Iterable[SCIMConfigMappingParam]
-    """
-    A list of mappings to apply to SCIM resources before provisioning them in this
-    application. These can transform or filter the resources to be provisioned.
-    """
-
-
 ApplicationUpdateParams: TypeAlias = Union[
     SelfHostedApplication,
     SaaSApplication,
@@ -2589,5 +2227,4 @@ class BrowserRdpApplicationSCIMConfig(TypedDict, total=False):
     BrowserIsolationPermissionsApplication,
     BookmarkApplication,
     InfrastructureApplication,
-    BrowserRdpApplication,
 ]

src/cloudflare/types/zero_trust/access/application_update_params.py

@@ -102,17 +102,6 @@
     "InfrastructureApplicationSCIMConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken",
     "InfrastructureApplicationSCIMConfigAuthenticationAccessSCIMConfigMultiAuthentication",
     "InfrastructureApplicationSCIMConfigAuthenticationAccessSCIMConfigMultiAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken",
-    "BrowserRdpApplication",
-    "BrowserRdpApplicationTargetCriterion",
-    "BrowserRdpApplicationDestination",
-    "BrowserRdpApplicationDestinationPublicDestination",
-    "BrowserRdpApplicationDestinationPrivateDestination",
-    "BrowserRdpApplicationPolicy",
-    "BrowserRdpApplicationSCIMConfig",
-    "BrowserRdpApplicationSCIMConfigAuthentication",
-    "BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken",
-    "BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigMultiAuthentication",
-    "BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigMultiAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken",
 ]
 
 
@@ -1995,304 +1984,6 @@ class InfrastructureApplication(BaseModel):
     updated_at: Optional[datetime] = None
 
 
-class BrowserRdpApplicationTargetCriterion(BaseModel):
-    port: int
-    """The port that the targets use for the chosen communication protocol.
-
-    A port cannot be assigned to multiple protocols.
-    """
-
-    protocol: Literal["ssh"]
-    """The communication protocol your application secures."""
-
-    target_attributes: Dict[str, List[str]]
-    """Contains a map of target attribute keys to target attribute values."""
-
-
-class BrowserRdpApplicationDestinationPublicDestination(BaseModel):
-    type: Optional[Literal["public"]] = None
-
-    uri: Optional[str] = None
-    """The URI of the destination.
-
-    Public destinations' URIs can include a domain and path with
-    [wildcards](https://developers.cloudflare.com/cloudflare-one/policies/access/app-paths/).
-    """
-
-
-class BrowserRdpApplicationDestinationPrivateDestination(BaseModel):
-    cidr: Optional[str] = None
-    """The CIDR range of the destination. Single IPs will be computed as /32."""
-
-    hostname: Optional[str] = None
-    """The hostname of the destination. Matches a valid SNI served by an HTTPS origin."""
-
-    l4_protocol: Optional[Literal["tcp", "udp"]] = None
-    """The L4 protocol of the destination.
-
-    When omitted, both UDP and TCP traffic will match.
-    """
-
-    port_range: Optional[str] = None
-    """The port range of the destination.
-
-    Can be a single port or a range of ports. When omitted, all ports will match.
-    """
-
-    type: Optional[Literal["private"]] = None
-
-    vnet_id: Optional[str] = None
-    """The VNET ID to match the destination. When omitted, all VNETs will match."""
-
-
-BrowserRdpApplicationDestination: TypeAlias = Union[
-    BrowserRdpApplicationDestinationPublicDestination, BrowserRdpApplicationDestinationPrivateDestination
-]
-
-
-class BrowserRdpApplicationPolicy(ApplicationPolicy):
-    precedence: Optional[int] = None
-    """The order of execution for this policy.
-
-    Must be unique for each policy within an app.
-    """
-
-
-class BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken(BaseModel):
-    client_id: str
-    """
-    Client ID of the Access service token used to authenticate with the remote
-    service.
-    """
-
-    client_secret: str
-    """
-    Client secret of the Access service token used to authenticate with the remote
-    service.
-    """
-
-    scheme: Literal["access_service_token"]
-    """The authentication scheme to use when making SCIM requests to this application."""
-
-
-class BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigMultiAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken(
-    BaseModel
-):
-    client_id: str
-    """
-    Client ID of the Access service token used to authenticate with the remote
-    service.
-    """
-
-    client_secret: str
-    """
-    Client secret of the Access service token used to authenticate with the remote
-    service.
-    """
-
-    scheme: Literal["access_service_token"]
-    """The authentication scheme to use when making SCIM requests to this application."""
-
-
-BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigMultiAuthentication: TypeAlias = Union[
-    SCIMConfigAuthenticationHTTPBasic,
-    SCIMConfigAuthenticationOAuthBearerToken,
-    SCIMConfigAuthenticationOauth2,
-    BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigMultiAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken,
-]
-
-BrowserRdpApplicationSCIMConfigAuthentication: TypeAlias = Union[
-    SCIMConfigAuthenticationHTTPBasic,
-    SCIMConfigAuthenticationOAuthBearerToken,
-    SCIMConfigAuthenticationOauth2,
-    BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigAuthenticationAccessServiceToken,
-    List[BrowserRdpApplicationSCIMConfigAuthenticationAccessSCIMConfigMultiAuthentication],
-]
-
-
-class BrowserRdpApplicationSCIMConfig(BaseModel):
-    idp_uid: str
-    """
-    The UID of the IdP to use as the source for SCIM resources to provision to this
-    application.
-    """
-
-    remote_uri: str
-    """The base URI for the application's SCIM-compatible API."""
-
-    authentication: Optional[BrowserRdpApplicationSCIMConfigAuthentication] = None
-    """
-    Attributes for configuring HTTP Basic authentication scheme for SCIM
-    provisioning to an application.
-    """
-
-    deactivate_on_delete: Optional[bool] = None
-    """
-    If false, propagates DELETE requests to the target application for SCIM
-    resources. If true, sets 'active' to false on the SCIM resource. Note: Some
-    targets do not support DELETE operations.
-    """
-
-    enabled: Optional[bool] = None
-    """Whether SCIM provisioning is turned on for this application."""
-
-    mappings: Optional[List[SCIMConfigMapping]] = None
-    """
-    A list of mappings to apply to SCIM resources before provisioning them in this
-    application. These can transform or filter the resources to be provisioned.
-    """
-
-
-class BrowserRdpApplication(BaseModel):
-    domain: str
-    """The primary hostname and path secured by Access.
-
-    This domain will be displayed if the app is visible in the App Launcher.
-    """
-
-    target_criteria: List[BrowserRdpApplicationTargetCriterion]
-
-    type: str
-    """The application type."""
-
-    id: Optional[str] = None
-    """UUID"""
-
-    allow_authenticate_via_warp: Optional[bool] = None
-    """
-    When set to true, users can authenticate to this application using their WARP
-    session. When set to false this application will always require direct IdP
-    authentication. This setting always overrides the organization setting for WARP
-    authentication.
-    """
-
-    allowed_idps: Optional[List[AllowedIdPs]] = None
-    """The identity providers your users can select when connecting to this
-    application.
-
-    Defaults to all IdPs configured in your account.
-    """
-
-    app_launcher_visible: Optional[bool] = None
-    """Displays the application in the App Launcher."""
-
-    aud: Optional[str] = None
-    """Audience tag."""
-
-    auto_redirect_to_identity: Optional[bool] = None
-    """When set to `true`, users skip the identity provider selection step during
-    login.
-
-    You must specify only one identity provider in allowed_idps.
-    """
-
-    cors_headers: Optional[CORSHeaders] = None
-
-    created_at: Optional[datetime] = None
-
-    custom_deny_message: Optional[str] = None
-    """
-    The custom error message shown to a user when they are denied access to the
-    application.
-    """
-
-    custom_deny_url: Optional[str] = None
-    """
-    The custom URL a user is redirected to when they are denied access to the
-    application when failing identity-based rules.
-    """
-
-    custom_non_identity_deny_url: Optional[str] = None
-    """
-    The custom URL a user is redirected to when they are denied access to the
-    application when failing non-identity rules.
-    """
-
-    custom_pages: Optional[List[str]] = None
-    """The custom pages that will be displayed when applicable for this application"""
-
-    destinations: Optional[List[BrowserRdpApplicationDestination]] = None
-    """List of destinations secured by Access.
-
-    This supersedes `self_hosted_domains` to allow for more flexibility in defining
-    different types of domains. If `destinations` are provided, then
-    `self_hosted_domains` will be ignored.
-    """
-
-    enable_binding_cookie: Optional[bool] = None
-    """
-    Enables the binding cookie, which increases security against compromised
-    authorization tokens and CSRF attacks.
-    """
-
-    http_only_cookie_attribute: Optional[bool] = None
-    """
-    Enables the HttpOnly cookie attribute, which increases security against XSS
-    attacks.
-    """
-
-    logo_url: Optional[str] = None
-    """The image URL for the logo shown in the App Launcher dashboard."""
-
-    name: Optional[str] = None
-    """The name of the application."""
-
-    options_preflight_bypass: Optional[bool] = None
-    """
-    Allows options preflight requests to bypass Access authentication and go
-    directly to the origin. Cannot turn on if cors_headers is set.
-    """
-
-    path_cookie_attribute: Optional[bool] = None
-    """Enables cookie paths to scope an application's JWT to the application path.
-
-    If disabled, the JWT will scope to the hostname by default
-    """
-
-    policies: Optional[List[BrowserRdpApplicationPolicy]] = None
-
-    same_site_cookie_attribute: Optional[str] = None
-    """
-    Sets the SameSite cookie setting, which provides increased security against CSRF
-    attacks.
-    """
-
-    scim_config: Optional[BrowserRdpApplicationSCIMConfig] = None
-    """Configuration for provisioning to this application via SCIM.
-
-    This is currently in closed beta.
-    """
-
-    self_hosted_domains: Optional[List[SelfHostedDomains]] = None
-    """List of public domains that Access will secure.
-
-    This field is deprecated in favor of `destinations` and will be supported until
-    **November 21, 2025.** If `destinations` are provided, then
-    `self_hosted_domains` will be ignored.
-    """
-
-    service_auth_401_redirect: Optional[bool] = None
-    """Returns a 401 status code when the request is blocked by a Service Auth policy."""
-
-    session_duration: Optional[str] = None
-    """The amount of time that tokens issued for this application will be valid.
-
-    Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs),
-    ms, s, m, h.
-    """
-
-    skip_interstitial: Optional[bool] = None
-    """Enables automatic authentication through cloudflared."""
-
-    tags: Optional[List[str]] = None
-    """The tags you want assigned to an application.
-
-    Tags are used to filter applications in the App Launcher dashboard.
-    """
-
-    updated_at: Optional[datetime] = None
-
-
 ApplicationUpdateResponse: TypeAlias = Union[
     SelfHostedApplication,
     SaaSApplication,
@@ -2303,5 +1994,4 @@ class BrowserRdpApplication(BaseModel):
     BrowserIsolationPermissionsApplication,
     BookmarkApplication,
     InfrastructureApplication,
-    BrowserRdpApplication,
 ]

src/cloudflare/types/zero_trust/access/application_update_response.py

@@ -27,33 +27,55 @@ class TestThreatEvents:
     @parametrize
     def test_method_create(self, client: Cloudflare) -> None:
         threat_event = client.cloudforce_one.threat_events.create(
-            account_id=0,
+            path_account_id=0,
+            attacker="Flying Yeti",
+            attacker_country="CN",
+            category="Domain Resolution",
+            date=parse_datetime("2022-04-01T00:00:00Z"),
+            event="An attacker registered the domain domain.com",
+            indicator_type="domain",
+            raw={},
+            tlp="amber",
         )
         assert_matches_type(ThreatEventCreateResponse, threat_event, path=["response"])
 
     @parametrize
     def test_method_create_with_all_params(self, client: Cloudflare) -> None:
         threat_event = client.cloudforce_one.threat_events.create(
-            account_id=0,
-            dataset_id=["7632a037-fdef-4899-9b12-148470aae772"],
-            order="asc",
-            order_by="created",
-            page=1,
-            page_size=100,
-            search=[
-                {
-                    "field": "attackerCountry",
-                    "op": "equals",
-                    "value": "usa",
-                }
-            ],
+            path_account_id=0,
+            attacker="Flying Yeti",
+            attacker_country="CN",
+            category="Domain Resolution",
+            date=parse_datetime("2022-04-01T00:00:00Z"),
+            event="An attacker registered the domain domain.com",
+            indicator_type="domain",
+            raw={
+                "data": {},
+                "source": "example.com",
+                "tlp": "amber",
+            },
+            tlp="amber",
+            body_account_id=123456,
+            dataset_id="durableObjectName",
+            indicator="domain.com",
+            tags=["malware"],
+            target_country="US",
+            target_industry="Agriculture",
         )
         assert_matches_type(ThreatEventCreateResponse, threat_event, path=["response"])
 
     @parametrize
     def test_raw_response_create(self, client: Cloudflare) -> None:
         response = client.cloudforce_one.threat_events.with_raw_response.create(
-            account_id=0,
+            path_account_id=0,
+            attacker="Flying Yeti",
+            attacker_country="CN",
+            category="Domain Resolution",
+            date=parse_datetime("2022-04-01T00:00:00Z"),
+            event="An attacker registered the domain domain.com",
+            indicator_type="domain",
+            raw={},
+            tlp="amber",
         )
 
         assert response.is_closed is True
@@ -64,7 +86,15 @@ def test_raw_response_create(self, client: Cloudflare) -> None:
     @parametrize
     def test_streaming_response_create(self, client: Cloudflare) -> None:
         with client.cloudforce_one.threat_events.with_streaming_response.create(
-            account_id=0,
+            path_account_id=0,
+            attacker="Flying Yeti",
+            attacker_country="CN",
+            category="Domain Resolution",
+            date=parse_datetime("2022-04-01T00:00:00Z"),
+            event="An attacker registered the domain domain.com",
+            indicator_type="domain",
+            raw={},
+            tlp="amber",
         ) as response:
             assert not response.is_closed
             assert response.http_request.headers.get("X-Stainless-Lang") == "python"
@@ -295,33 +325,55 @@ class TestAsyncThreatEvents:
     @parametrize
     async def test_method_create(self, async_client: AsyncCloudflare) -> None:
         threat_event = await async_client.cloudforce_one.threat_events.create(
-            account_id=0,
+            path_account_id=0,
+            attacker="Flying Yeti",
+            attacker_country="CN",
+            category="Domain Resolution",
+            date=parse_datetime("2022-04-01T00:00:00Z"),
+            event="An attacker registered the domain domain.com",
+            indicator_type="domain",
+            raw={},
+            tlp="amber",
         )
         assert_matches_type(ThreatEventCreateResponse, threat_event, path=["response"])
 
     @parametrize
     async def test_method_create_with_all_params(self, async_client: AsyncCloudflare) -> None:
         threat_event = await async_client.cloudforce_one.threat_events.create(
-            account_id=0,
-            dataset_id=["7632a037-fdef-4899-9b12-148470aae772"],
-            order="asc",
-            order_by="created",
-            page=1,
-            page_size=100,
-            search=[
-                {
-                    "field": "attackerCountry",
-                    "op": "equals",
-                    "value": "usa",
-                }
-            ],
+            path_account_id=0,
+            attacker="Flying Yeti",
+            attacker_country="CN",
+            category="Domain Resolution",
+            date=parse_datetime("2022-04-01T00:00:00Z"),
+            event="An attacker registered the domain domain.com",
+            indicator_type="domain",
+            raw={
+                "data": {},
+                "source": "example.com",
+                "tlp": "amber",
+            },
+            tlp="amber",
+            body_account_id=123456,
+            dataset_id="durableObjectName",
+            indicator="domain.com",
+            tags=["malware"],
+            target_country="US",
+            target_industry="Agriculture",
         )
         assert_matches_type(ThreatEventCreateResponse, threat_event, path=["response"])
 
     @parametrize
     async def test_raw_response_create(self, async_client: AsyncCloudflare) -> None:
         response = await async_client.cloudforce_one.threat_events.with_raw_response.create(
-            account_id=0,
+            path_account_id=0,
+            attacker="Flying Yeti",
+            attacker_country="CN",
+            category="Domain Resolution",
+            date=parse_datetime("2022-04-01T00:00:00Z"),
+            event="An attacker registered the domain domain.com",
+            indicator_type="domain",
+            raw={},
+            tlp="amber",
         )
 
         assert response.is_closed is True
@@ -332,7 +384,15 @@ async def test_raw_response_create(self, async_client: AsyncCloudflare) -> None:
     @parametrize
     async def test_streaming_response_create(self, async_client: AsyncCloudflare) -> None:
         async with async_client.cloudforce_one.threat_events.with_streaming_response.create(
-            account_id=0,
+            path_account_id=0,
+            attacker="Flying Yeti",
+            attacker_country="CN",
+            category="Domain Resolution",
+            date=parse_datetime("2022-04-01T00:00:00Z"),
+            event="An attacker registered the domain domain.com",
+            indicator_type="domain",
+            raw={},
+            tlp="amber",
         ) as response:
             assert not response.is_closed
             assert response.http_request.headers.get("X-Stainless-Lang") == "python"