cloudflare 6.0.0 → 6.1.0

package/src/resources/aisearch/namespaces/instances/instances.ts

@@ -325,6 +325,13 @@ export interface InstanceCreateResponse {
 
   cache_threshold?: 'super_strict_match' | 'close_enough' | 'flexible_friend' | 'anything_goes';
 
+  /**
+   * Cache entry TTL in seconds. Allowed values: 600 (10min), 1800 (30min), 3600
+   * (1h), 7200 (2h), 21600 (6h), 43200 (12h), 86400 (24h), 172800 (48h), 259200
+   * (72h), 518400 (6d).
+   */
+  cache_ttl?: 600 | 1800 | 3600 | 7200 | 21600 | 43200 | 86400 | 172800 | 259200 | 518400;
+
   chunk_overlap?: number;
 
   chunk_size?: number;
@@ -705,6 +712,13 @@ export interface InstanceUpdateResponse {
 
   cache_threshold?: 'super_strict_match' | 'close_enough' | 'flexible_friend' | 'anything_goes';
 
+  /**
+   * Cache entry TTL in seconds. Allowed values: 600 (10min), 1800 (30min), 3600
+   * (1h), 7200 (2h), 21600 (6h), 43200 (12h), 86400 (24h), 172800 (48h), 259200
+   * (72h), 518400 (6d).
+   */
+  cache_ttl?: 600 | 1800 | 3600 | 7200 | 21600 | 43200 | 86400 | 172800 | 259200 | 518400;
+
   chunk_overlap?: number;
 
   chunk_size?: number;
@@ -1085,6 +1099,13 @@ export interface InstanceListResponse {
 
   cache_threshold?: 'super_strict_match' | 'close_enough' | 'flexible_friend' | 'anything_goes';
 
+  /**
+   * Cache entry TTL in seconds. Allowed values: 600 (10min), 1800 (30min), 3600
+   * (1h), 7200 (2h), 21600 (6h), 43200 (12h), 86400 (24h), 172800 (48h), 259200
+   * (72h), 518400 (6d).
+   */
+  cache_ttl?: 600 | 1800 | 3600 | 7200 | 21600 | 43200 | 86400 | 172800 | 259200 | 518400;
+
   chunk_overlap?: number;
 
   chunk_size?: number;
@@ -1465,6 +1486,13 @@ export interface InstanceDeleteResponse {
 
   cache_threshold?: 'super_strict_match' | 'close_enough' | 'flexible_friend' | 'anything_goes';
 
+  /**
+   * Cache entry TTL in seconds. Allowed values: 600 (10min), 1800 (30min), 3600
+   * (1h), 7200 (2h), 21600 (6h), 43200 (12h), 86400 (24h), 172800 (48h), 259200
+   * (72h), 518400 (6d).
+   */
+  cache_ttl?: 600 | 1800 | 3600 | 7200 | 21600 | 43200 | 86400 | 172800 | 259200 | 518400;
+
   chunk_overlap?: number;
 
   chunk_size?: number;
@@ -1915,6 +1943,13 @@ export interface InstanceReadResponse {
 
   cache_threshold?: 'super_strict_match' | 'close_enough' | 'flexible_friend' | 'anything_goes';
 
+  /**
+   * Cache entry TTL in seconds. Allowed values: 600 (10min), 1800 (30min), 3600
+   * (1h), 7200 (2h), 21600 (6h), 43200 (12h), 86400 (24h), 172800 (48h), 259200
+   * (72h), 518400 (6d).
+   */
+  cache_ttl?: 600 | 1800 | 3600 | 7200 | 21600 | 43200 | 86400 | 172800 | 259200 | 518400;
+
   chunk_overlap?: number;
 
   chunk_size?: number;
@@ -2419,6 +2454,13 @@ export interface InstanceCreateParams {
    */
   cache_threshold?: 'super_strict_match' | 'close_enough' | 'flexible_friend' | 'anything_goes';
 
+  /**
+   * Body param: Cache entry TTL in seconds. Allowed values: 600 (10min), 1800
+   * (30min), 3600 (1h), 7200 (2h), 21600 (6h), 43200 (12h), 86400 (24h), 172800
+   * (48h), 259200 (72h), 518400 (6d).
+   */
+  cache_ttl?: 600 | 1800 | 3600 | 7200 | 21600 | 43200 | 86400 | 172800 | 259200 | 518400;
+
   /**
    * Body param
    */
@@ -2852,6 +2894,13 @@ export interface InstanceUpdateParams {
    */
   cache_threshold?: 'super_strict_match' | 'close_enough' | 'flexible_friend' | 'anything_goes';
 
+  /**
+   * Body param: Cache entry TTL in seconds. Allowed values: 600 (10min), 1800
+   * (30min), 3600 (1h), 7200 (2h), 21600 (6h), 43200 (12h), 86400 (24h), 172800
+   * (48h), 259200 (72h), 518400 (6d).
+   */
+  cache_ttl?: 600 | 1800 | 3600 | 7200 | 21600 | 43200 | 86400 | 172800 | 259200 | 518400;
+
   /**
    * Body param
    */

package/src/resources/billing/usage.ts

@@ -57,7 +57,9 @@ export namespace UsagePaygoResponse {
     ConsumedQuantity: number;
 
     /**
-     * Specifies the unit of measurement for consumed quantity.
+     * A display name for the unit of measurement used for the product (for example,
+     * "GB-months", "GB-seconds"). May be empty when the unit is implicit in the
+     * service name.
      */
     ConsumedUnit: string;
 

package/src/resources/email-security/submissions.ts

@@ -96,6 +96,13 @@ export interface SubmissionListParams extends V4PagePaginationArrayParams {
    */
   end?: string;
 
+  /**
+   * Query param: When true, return only submissions that were escalated by an end
+   * user (vs. by the security team). When false, return only submissions that were
+   * not escalated by an end user. When omitted, no filter is applied.
+   */
+  escalated_from_user?: boolean;
+
   /**
    * Query param
    */

package/src/resources/intel/indicator-feeds/indicator-feeds.ts

@@ -307,6 +307,16 @@ export interface IndicatorFeedGetResponse {
    */
   is_public?: boolean;
 
+  /**
+   * Summary of indicator counts from the last successful upload to this feed.
+   * Populated by the custom-threat-feeds loader at the end of each successful load.
+   * Absent (omitted) when no upload has completed successfully or the upload errored
+   * before the summary write. Surfaces silent-failure paths so operators can see
+   * when their indicators were dropped (popularity allowlist, expired valid_until,
+   * etc.) without reading loader logs.
+   */
+  last_upload_summary?: IndicatorFeedGetResponse.LastUploadSummary;
+
   /**
    * Status of the latest snapshot uploaded
    */
@@ -325,7 +335,7 @@ export interface IndicatorFeedGetResponse {
   /**
    * The unique identifier for the provider
    */
-  provider_id?: string;
+  provider_id?: number;
 
   /**
    * The provider of the indicator feed
@@ -333,6 +343,102 @@ export interface IndicatorFeedGetResponse {
   provider_name?: string;
 }
 
+export namespace IndicatorFeedGetResponse {
+  /**
+   * Summary of indicator counts from the last successful upload to this feed.
+   * Populated by the custom-threat-feeds loader at the end of each successful load.
+   * Absent (omitted) when no upload has completed successfully or the upload errored
+   * before the summary write. Surfaces silent-failure paths so operators can see
+   * when their indicators were dropped (popularity allowlist, expired valid_until,
+   * etc.) without reading loader logs.
+   */
+  export interface LastUploadSummary {
+    /**
+     * Net delta applied to feed indicators by this upload. Snapshot uploads emit both
+     * _\_added and _\_removed; delta-add emits only _\_added; delta-remove emits only
+     * _\_removed.
+     */
+    persisted?: LastUploadSummary.Persisted;
+
+    /**
+     * Counts of indicators that were uploaded but did not reach QuickSilver, broken
+     * down by reason.
+     */
+    skipped?: LastUploadSummary.Skipped;
+
+    /**
+     * Indicator counts from the unified file the loader received
+     */
+    uploaded?: LastUploadSummary.Uploaded;
+  }
+
+  export namespace LastUploadSummary {
+    /**
+     * Net delta applied to feed indicators by this upload. Snapshot uploads emit both
+     * _\_added and _\_removed; delta-add emits only _\_added; delta-remove emits only
+     * _\_removed.
+     */
+    export interface Persisted {
+      domains_added?: number;
+
+      domains_removed?: number;
+
+      ips_added?: number;
+
+      ips_removed?: number;
+
+      urls_added?: number;
+
+      urls_removed?: number;
+    }
+
+    /**
+     * Counts of indicators that were uploaded but did not reach QuickSilver, broken
+     * down by reason.
+     */
+    export interface Skipped {
+      /**
+       * Domains filtered by the global popularity allowlist at QS provisioning time.
+       * Popular domains (bing.com, naver.com, etc.) are protected from
+       * custom-threat-feed enforcement.
+       */
+      allowlisted_domains?: number;
+
+      /**
+       * Indicators in the upload whose valid_until is already in the past. These are not
+       * added to QS; the expiration cron handles cleanup.
+       */
+      expired_indicators?: number;
+
+      /**
+       * Reserved for future use. Currently always 0 — the unifier aborts the entire
+       * upload on a single bad indicator.
+       */
+      invalid_indicators?: number;
+    }
+
+    /**
+     * Indicator counts from the unified file the loader received
+     */
+    export interface Uploaded {
+      /**
+       * Number of domain indicators in the upload
+       */
+      domains?: number;
+
+      /**
+       * Number of IP indicators in the upload
+       */
+      ips?: number;
+
+      /**
+       * Number of URL indicators in the upload
+       */
+      urls?: number;
+    }
+  }
+}
+
 export interface IndicatorFeedCreateParams {
   /**
    * Path param: Identifier

package/src/resources/radar/dns/dns.ts

@@ -186,7 +186,8 @@ export class DNS extends APIResource {
       | 'QUERY_TYPE'
       | 'RESPONSE_CODE'
       | 'RESPONSE_TTL'
-      | 'TLD',
+      | 'TLD'
+      | 'TLD_DNS_MAGNITUDE',
     query?: DNSTimeseriesGroupsV2Params,
     options?: Core.RequestOptions,
   ): Core.APIPromise<DNSTimeseriesGroupsV2Response>;
@@ -204,7 +205,8 @@ export class DNS extends APIResource {
       | 'QUERY_TYPE'
       | 'RESPONSE_CODE'
       | 'RESPONSE_TTL'
-      | 'TLD',
+      | 'TLD'
+      | 'TLD_DNS_MAGNITUDE',
     options?: Core.RequestOptions,
   ): Core.APIPromise<DNSTimeseriesGroupsV2Response>;
   timeseriesGroupsV2(
@@ -221,7 +223,8 @@ export class DNS extends APIResource {
       | 'QUERY_TYPE'
       | 'RESPONSE_CODE'
       | 'RESPONSE_TTL'
-      | 'TLD',
+      | 'TLD'
+      | 'TLD_DNS_MAGNITUDE',
     query: DNSTimeseriesGroupsV2Params | Core.RequestOptions = {},
     options?: Core.RequestOptions,
   ): Core.APIPromise<DNSTimeseriesGroupsV2Response> {
@@ -1213,7 +1216,7 @@ export interface DNSTimeseriesGroupsV2Params {
    * Normalization method applied to the results. Refer to
    * [Normalization methods](https://developers.cloudflare.com/radar/concepts/normalization/).
    */
-  normalization?: 'PERCENTAGE' | 'MIN0_MAX';
+  normalization?: 'PERCENTAGE' | 'MIN0_MAX' | 'RANK';
 
   /**
    * Filters results by DNS transport protocol.

package/src/resources/security-center/api.md

@@ -41,3 +41,35 @@ Types:
 Methods:
 
 - <code title="get /{accounts_or_zones}/{account_or_zone_id}/security-center/insights/type">client.securityCenter.insights.type.<a href="./src/resources/security-center/insights/type.ts">get</a>({ ...params }) -> TypeGetResponse</code>
+
+### AuditLogs
+
+Types:
+
+- <code><a href="./src/resources/security-center/insights/audit-logs.ts">AuditLogListResponse</a></code>
+- <code><a href="./src/resources/security-center/insights/audit-logs.ts">AuditLogListByInsightResponse</a></code>
+
+Methods:
+
+- <code title="get /{accounts_or_zones}/{account_or_zone_id}/security-center/insights/audit-log">client.securityCenter.insights.auditLogs.<a href="./src/resources/security-center/insights/audit-logs.ts">list</a>({ ...params }) -> AuditLogListResponsesCursorPagination</code>
+- <code title="get /{accounts_or_zones}/{account_or_zone_id}/security-center/insights/{issue_id}/audit-log">client.securityCenter.insights.auditLogs.<a href="./src/resources/security-center/insights/audit-logs.ts">listByInsight</a>(issueId, { ...params }) -> AuditLogListByInsightResponsesCursorPagination</code>
+
+### Classification
+
+Types:
+
+- <code><a href="./src/resources/security-center/insights/classification.ts">ClassificationUpdateResponse</a></code>
+
+Methods:
+
+- <code title="patch /{accounts_or_zones}/{account_or_zone_id}/security-center/insights/{issue_id}/classification">client.securityCenter.insights.classification.<a href="./src/resources/security-center/insights/classification.ts">update</a>(issueId, { ...params }) -> ClassificationUpdateResponse</code>
+
+### Context
+
+Types:
+
+- <code><a href="./src/resources/security-center/insights/context.ts">ContextGetResponse</a></code>
+
+Methods:
+
+- <code title="get /accounts/{account_id}/security-center/insights/{issue_id}/context">client.securityCenter.insights.context.<a href="./src/resources/security-center/insights/context.ts">get</a>(issueId, { ...params }) -> ContextGetResponse</code>

package/src/resources/security-center/insights/audit-logs.ts

@@ -0,0 +1,313 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+import { APIResource } from '../../../resource';
+import { isRequestOptions } from '../../../core';
+import * as Core from '../../../core';
+import { CloudflareError } from '../../../error';
+import { CursorPagination, type CursorPaginationParams } from '../../../pagination';
+
+export class AuditLogs extends APIResource {
+  /**
+   * Lists audit log entries for all Security Center insights in the account or zone,
+   * showing changes to insight status and classification.
+   *
+   * @example
+   * ```ts
+   * // Automatically fetches more pages as needed.
+   * for await (const auditLogListResponse of client.securityCenter.insights.auditLogs.list(
+   *   { account_id: 'account_id' },
+   * )) {
+   *   // ...
+   * }
+   * ```
+   */
+  list(
+    params?: AuditLogListParams,
+    options?: Core.RequestOptions,
+  ): Core.PagePromise<AuditLogListResponsesCursorPagination, AuditLogListResponse>;
+  list(
+    options?: Core.RequestOptions,
+  ): Core.PagePromise<AuditLogListResponsesCursorPagination, AuditLogListResponse>;
+  list(
+    params: AuditLogListParams | Core.RequestOptions = {},
+    options?: Core.RequestOptions,
+  ): Core.PagePromise<AuditLogListResponsesCursorPagination, AuditLogListResponse> {
+    if (isRequestOptions(params)) {
+      return this.list({}, params);
+    }
+    const { account_id, zone_id, ...query } = params;
+    if (!account_id && !zone_id) {
+      throw new CloudflareError('You must provide either account_id or zone_id.');
+    }
+    if (account_id && zone_id) {
+      throw new CloudflareError('You cannot provide both account_id and zone_id.');
+    }
+    const { accountOrZone, accountOrZoneId } =
+      account_id ?
+        {
+          accountOrZone: 'accounts',
+          accountOrZoneId: account_id,
+        }
+      : {
+          accountOrZone: 'zones',
+          accountOrZoneId: zone_id,
+        };
+    return this._client.getAPIList(
+      `/${accountOrZone}/${accountOrZoneId}/security-center/insights/audit-log`,
+      AuditLogListResponsesCursorPagination,
+      { query, ...options },
+    );
+  }
+
+  /**
+   * Lists audit log entries for a specific Security Center insight, showing changes
+   * to its status and classification over time.
+   *
+   * @example
+   * ```ts
+   * // Automatically fetches more pages as needed.
+   * for await (const auditLogListByInsightResponse of client.securityCenter.insights.auditLogs.listByInsight(
+   *   'issue_id',
+   *   { account_id: 'account_id' },
+   * )) {
+   *   // ...
+   * }
+   * ```
+   */
+  listByInsight(
+    issueId: string,
+    params?: AuditLogListByInsightParams,
+    options?: Core.RequestOptions,
+  ): Core.PagePromise<AuditLogListByInsightResponsesCursorPagination, AuditLogListByInsightResponse>;
+  listByInsight(
+    issueId: string,
+    options?: Core.RequestOptions,
+  ): Core.PagePromise<AuditLogListByInsightResponsesCursorPagination, AuditLogListByInsightResponse>;
+  listByInsight(
+    issueId: string,
+    params: AuditLogListByInsightParams | Core.RequestOptions = {},
+    options?: Core.RequestOptions,
+  ): Core.PagePromise<AuditLogListByInsightResponsesCursorPagination, AuditLogListByInsightResponse> {
+    if (isRequestOptions(params)) {
+      return this.listByInsight(issueId, {}, params);
+    }
+    const { account_id, zone_id, ...query } = params;
+    if (!account_id && !zone_id) {
+      throw new CloudflareError('You must provide either account_id or zone_id.');
+    }
+    if (account_id && zone_id) {
+      throw new CloudflareError('You cannot provide both account_id and zone_id.');
+    }
+    const { accountOrZone, accountOrZoneId } =
+      account_id ?
+        {
+          accountOrZone: 'accounts',
+          accountOrZoneId: account_id,
+        }
+      : {
+          accountOrZone: 'zones',
+          accountOrZoneId: zone_id,
+        };
+    return this._client.getAPIList(
+      `/${accountOrZone}/${accountOrZoneId}/security-center/insights/${issueId}/audit-log`,
+      AuditLogListByInsightResponsesCursorPagination,
+      { query, ...options },
+    );
+  }
+}
+
+export class AuditLogListResponsesCursorPagination extends CursorPagination<AuditLogListResponse> {}
+
+export class AuditLogListByInsightResponsesCursorPagination extends CursorPagination<AuditLogListByInsightResponse> {}
+
+export interface AuditLogListResponse {
+  /**
+   * UUIDv7 identifier for the audit log entry, time-ordered.
+   */
+  id?: string;
+
+  /**
+   * The timestamp when the change occurred.
+   */
+  changed_at?: string;
+
+  /**
+   * The actor that made the change. 'system' for automated changes, or a user
+   * identifier.
+   */
+  changed_by?: string;
+
+  /**
+   * The value of the field after the change. Null if the field was cleared.
+   */
+  current_value?: string | null;
+
+  /**
+   * The field that was changed.
+   */
+  field_changed?: 'status' | 'user_classification';
+
+  /**
+   * The ID of the insight this audit log entry relates to.
+   */
+  issue_id?: string;
+
+  /**
+   * The value of the field before the change. Null if the field was not previously
+   * set.
+   */
+  previous_value?: string | null;
+
+  /**
+   * Optional rationale provided for the change.
+   */
+  rationale?: string | null;
+
+  /**
+   * The zone ID associated with the insight. Only present for zone-level insights.
+   */
+  zone_id?: number;
+}
+
+export interface AuditLogListByInsightResponse {
+  /**
+   * UUIDv7 identifier for the audit log entry, time-ordered.
+   */
+  id?: string;
+
+  /**
+   * The timestamp when the change occurred.
+   */
+  changed_at?: string;
+
+  /**
+   * The actor that made the change. 'system' for automated changes, or a user
+   * identifier.
+   */
+  changed_by?: string;
+
+  /**
+   * The value of the field after the change. Null if the field was cleared.
+   */
+  current_value?: string | null;
+
+  /**
+   * The field that was changed.
+   */
+  field_changed?: 'status' | 'user_classification';
+
+  /**
+   * The ID of the insight this audit log entry relates to.
+   */
+  issue_id?: string;
+
+  /**
+   * The value of the field before the change. Null if the field was not previously
+   * set.
+   */
+  previous_value?: string | null;
+
+  /**
+   * Optional rationale provided for the change.
+   */
+  rationale?: string | null;
+
+  /**
+   * The zone ID associated with the insight. Only present for zone-level insights.
+   */
+  zone_id?: number;
+}
+
+export interface AuditLogListParams extends CursorPaginationParams {
+  /**
+   * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+   * Zone ID.
+   */
+  account_id?: string;
+
+  /**
+   * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+   * Account ID.
+   */
+  zone_id?: string;
+
+  /**
+   * Query param: Filter entries changed before this timestamp (RFC 3339).
+   */
+  before?: string;
+
+  /**
+   * Query param: Filter by the actor that made the change.
+   */
+  changed_by?: string;
+
+  /**
+   * Query param: Filter by the field that was changed.
+   */
+  field_changed?: 'status' | 'user_classification';
+
+  /**
+   * Query param: Sort order for results. Use 'asc' for oldest first or 'desc' for
+   * newest first.
+   */
+  order?: 'asc' | 'desc';
+
+  /**
+   * Query param: Filter entries changed at or after this timestamp (RFC 3339).
+   */
+  since?: string;
+}
+
+export interface AuditLogListByInsightParams extends CursorPaginationParams {
+  /**
+   * Path param: The Account ID to use for this endpoint. Mutually exclusive with the
+   * Zone ID.
+   */
+  account_id?: string;
+
+  /**
+   * Path param: The Zone ID to use for this endpoint. Mutually exclusive with the
+   * Account ID.
+   */
+  zone_id?: string;
+
+  /**
+   * Query param: Filter entries changed before this timestamp (RFC 3339).
+   */
+  before?: string;
+
+  /**
+   * Query param: Filter by the actor that made the change.
+   */
+  changed_by?: string;
+
+  /**
+   * Query param: Filter by the field that was changed.
+   */
+  field_changed?: 'status' | 'user_classification';
+
+  /**
+   * Query param: Sort order for results. Use 'asc' for oldest first or 'desc' for
+   * newest first.
+   */
+  order?: 'asc' | 'desc';
+
+  /**
+   * Query param: Filter entries changed at or after this timestamp (RFC 3339).
+   */
+  since?: string;
+}
+
+AuditLogs.AuditLogListResponsesCursorPagination = AuditLogListResponsesCursorPagination;
+AuditLogs.AuditLogListByInsightResponsesCursorPagination = AuditLogListByInsightResponsesCursorPagination;
+
+export declare namespace AuditLogs {
+  export {
+    type AuditLogListResponse as AuditLogListResponse,
+    type AuditLogListByInsightResponse as AuditLogListByInsightResponse,
+    AuditLogListResponsesCursorPagination as AuditLogListResponsesCursorPagination,
+    AuditLogListByInsightResponsesCursorPagination as AuditLogListByInsightResponsesCursorPagination,
+    type AuditLogListParams as AuditLogListParams,
+    type AuditLogListByInsightParams as AuditLogListByInsightParams,
+  };
+}

package/src/resources/security-center/insights/class.ts

@@ -9,6 +9,14 @@ import { CloudflareError } from '../../../error';
 export class Class extends APIResource {
   /**
    * Retrieves Security Center insight counts aggregated by classification class.
+   *
+   * @example
+   * ```ts
+   * const classes =
+   *   await client.securityCenter.insights.class.get({
+   *     account_id: 'account_id',
+   *   });
+   * ```
    */
   get(params?: ClassGetParams, options?: Core.RequestOptions): Core.APIPromise<ClassGetResponse>;
   get(options?: Core.RequestOptions): Core.APIPromise<ClassGetResponse>;