Driftwatch

Cloudflare / Cloudflare API /

Breakingdirection flip: their tools call this safe

keyboard can now return "enable_read_only_actions"

What changed

Producer-side tools call this additive. It breaks exhaustive switches, strict parsers and generated client enums.

Affects biso_admin_controls.keyboard on zero-trust-gateway_rule-settings reachable from 8 operations.

New value: enable_read_only_actions.

can now return "enable_read_only_actions"

Who is affected

Code that reads Cloudflare's zero-trust-gateway_rule-settings objects, used by 8 Cloudflare operations.

Before and after

WhereBeforeAfter
zero-trust-gateway_rule-settings.biso_admin_controls.keyboard"disabled", "enabled""disabled", "enable_read_only_actions", "enabled"

Code that breaks

switch (response.biso_admin_controls.keyboard) {
  // existing branches …
  // no branch for "enable_read_only_actions"
  default:
    throw new Error("unexpected keyboard");
}

Based on Cloudflare’s published API specification. How severity is decided.