cloudflare 6.0.0 → 6.2.0

package/src/resources/radar/bgp/rpki/roas.ts

@@ -0,0 +1,120 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+import { APIResource } from '../../../../resource';
+import { isRequestOptions } from '../../../../core';
+import * as Core from '../../../../core';
+
+export class Roas extends APIResource {
+  /**
+   * Retrieves RPKI ROA (Route Origin Authorization) validation ratios over time.
+   * Returns the selected metric as a time series. Supports filtering by ASN or
+   * location (country code) — multiple values of the same filter type produce one
+   * series per value. If no ASN or location is specified, returns the global
+   * aggregate.
+   *
+   * @example
+   * ```ts
+   * const response =
+   *   await client.radar.bgp.rpki.roas.timeseries();
+   * ```
+   */
+  timeseries(
+    query?: RoaTimeseriesParams,
+    options?: Core.RequestOptions,
+  ): Core.APIPromise<RoaTimeseriesResponse>;
+  timeseries(options?: Core.RequestOptions): Core.APIPromise<RoaTimeseriesResponse>;
+  timeseries(
+    query: RoaTimeseriesParams | Core.RequestOptions = {},
+    options?: Core.RequestOptions,
+  ): Core.APIPromise<RoaTimeseriesResponse> {
+    if (isRequestOptions(query)) {
+      return this.timeseries({}, query);
+    }
+    return (
+      this._client.get('/radar/bgp/rpki/roas/timeseries', { query, ...options }) as Core.APIPromise<{
+        result: RoaTimeseriesResponse;
+      }>
+    )._thenUnwrap((obj) => obj.result);
+  }
+}
+
+export interface RoaTimeseriesResponse {
+  meta: RoaTimeseriesResponse.Meta;
+
+  serie_0: RoaTimeseriesResponse.Serie0;
+}
+
+export namespace RoaTimeseriesResponse {
+  export interface Meta {
+    /**
+     * Timestamp of the underlying data.
+     */
+    dataTime: string;
+
+    /**
+     * Timestamp when the query was executed.
+     */
+    queryTime: string;
+  }
+
+  export interface Serie0 {
+    timestamps: Array<string>;
+
+    values: Array<string>;
+  }
+}
+
+export interface RoaTimeseriesParams {
+  /**
+   * Filters results by Autonomous System Number. Specify one or more ASNs. Multiple
+   * values generate one series per ASN.
+   */
+  asn?: Array<string>;
+
+  /**
+   * End of the date range (inclusive).
+   */
+  dateEnd?: string;
+
+  /**
+   * Start of the date range (inclusive).
+   */
+  dateStart?: string;
+
+  /**
+   * Format in which results will be returned.
+   */
+  format?: 'JSON' | 'CSV';
+
+  /**
+   * Filters results by location. Specify a comma-separated list of alpha-2 location
+   * codes.
+   */
+  location?: Array<string>;
+
+  /**
+   * Which RPKI ROA validation metric to return. validPfxsRatio = ratio of RPKI-valid
+   * prefixes (IPv4+IPv6 combined). validPfxsV4Ratio / validPfxsV6Ratio = same, split
+   * by IP version. validIpsRatio = ratio of RPKI-valid address space (IPv4 /24s +
+   * IPv6 /48s). validIpsV4Ratio / validIpsV6Ratio = same, split by IP version.
+   */
+  metric?:
+    | 'validPfxsRatio'
+    | 'validPfxsV4Ratio'
+    | 'validPfxsV6Ratio'
+    | 'validIpsRatio'
+    | 'validIpsV4Ratio'
+    | 'validIpsV6Ratio';
+
+  /**
+   * Array of names used to label the series in the response.
+   */
+  name?: Array<string>;
+}
+
+export declare namespace Roas {
+  export {
+    type RoaTimeseriesResponse as RoaTimeseriesResponse,
+    type RoaTimeseriesParams as RoaTimeseriesParams,
+  };
+}

package/src/resources/radar/bgp/rpki/rpki.ts

@@ -11,12 +11,16 @@ import {
   ASPATimeseriesParams,
   ASPATimeseriesResponse,
 } from './aspa';
+import * as RoasAPI from './roas';
+import { RoaTimeseriesParams, RoaTimeseriesResponse, Roas } from './roas';
 
 export class RPKI extends APIResource {
   aspa: ASPAAPI.ASPA = new ASPAAPI.ASPA(this._client);
+  roas: RoasAPI.Roas = new RoasAPI.Roas(this._client);
 }
 
 RPKI.ASPA = ASPA;
+RPKI.Roas = Roas;
 
 export declare namespace RPKI {
   export {
@@ -28,4 +32,10 @@ export declare namespace RPKI {
     type ASPASnapshotParams as ASPASnapshotParams,
     type ASPATimeseriesParams as ASPATimeseriesParams,
   };
+
+  export {
+    Roas as Roas,
+    type RoaTimeseriesResponse as RoaTimeseriesResponse,
+    type RoaTimeseriesParams as RoaTimeseriesParams,
+  };
 }

package/src/resources/radar/dns/dns.ts

@@ -186,7 +186,8 @@ export class DNS extends APIResource {
       | 'QUERY_TYPE'
       | 'RESPONSE_CODE'
       | 'RESPONSE_TTL'
-      | 'TLD',
+      | 'TLD'
+      | 'TLD_DNS_MAGNITUDE',
     query?: DNSTimeseriesGroupsV2Params,
     options?: Core.RequestOptions,
   ): Core.APIPromise<DNSTimeseriesGroupsV2Response>;
@@ -204,7 +205,8 @@ export class DNS extends APIResource {
       | 'QUERY_TYPE'
       | 'RESPONSE_CODE'
       | 'RESPONSE_TTL'
-      | 'TLD',
+      | 'TLD'
+      | 'TLD_DNS_MAGNITUDE',
     options?: Core.RequestOptions,
   ): Core.APIPromise<DNSTimeseriesGroupsV2Response>;
   timeseriesGroupsV2(
@@ -221,7 +223,8 @@ export class DNS extends APIResource {
       | 'QUERY_TYPE'
       | 'RESPONSE_CODE'
       | 'RESPONSE_TTL'
-      | 'TLD',
+      | 'TLD'
+      | 'TLD_DNS_MAGNITUDE',
     query: DNSTimeseriesGroupsV2Params | Core.RequestOptions = {},
     options?: Core.RequestOptions,
   ): Core.APIPromise<DNSTimeseriesGroupsV2Response> {
@@ -1213,7 +1216,7 @@ export interface DNSTimeseriesGroupsV2Params {
    * Normalization method applied to the results. Refer to
    * [Normalization methods](https://developers.cloudflare.com/radar/concepts/normalization/).
    */
-  normalization?: 'PERCENTAGE' | 'MIN0_MAX';
+  normalization?: 'PERCENTAGE' | 'MIN0_MAX' | 'RANK';
 
   /**
    * Filters results by DNS transport protocol.

package/src/resources/radar/http/http.ts

@@ -80,6 +80,7 @@ export class HTTP extends APIResource {
   summaryV2(
     dimension:
       | 'ADM1'
+      | 'API_TRAFFIC'
       | 'AS'
       | 'BOT_CLASS'
       | 'BROWSER'
@@ -98,6 +99,7 @@ export class HTTP extends APIResource {
   summaryV2(
     dimension:
       | 'ADM1'
+      | 'API_TRAFFIC'
       | 'AS'
       | 'BOT_CLASS'
       | 'BROWSER'
@@ -115,6 +117,7 @@ export class HTTP extends APIResource {
   summaryV2(
     dimension:
       | 'ADM1'
+      | 'API_TRAFFIC'
       | 'AS'
       | 'BOT_CLASS'
       | 'BROWSER'
@@ -180,6 +183,7 @@ export class HTTP extends APIResource {
   timeseriesGroupsV2(
     dimension:
       | 'ADM1'
+      | 'API_TRAFFIC'
       | 'AS'
       | 'BOT_CLASS'
       | 'BROWSER'
@@ -198,6 +202,7 @@ export class HTTP extends APIResource {
   timeseriesGroupsV2(
     dimension:
       | 'ADM1'
+      | 'API_TRAFFIC'
       | 'AS'
       | 'BOT_CLASS'
       | 'BROWSER'
@@ -215,6 +220,7 @@ export class HTTP extends APIResource {
   timeseriesGroupsV2(
     dimension:
       | 'ADM1'
+      | 'API_TRAFFIC'
       | 'AS'
       | 'BOT_CLASS'
       | 'BROWSER'
@@ -656,6 +662,12 @@ export namespace HTTPTimeseriesGroupsV2Response {
 }
 
 export interface HTTPSummaryV2Params {
+  /**
+   * Filters results by API traffic classification. API traffic is identified by JSON
+   * or XML response content types on dynamic (non-cacheable) HTTP requests.
+   */
+  apiTraffic?: Array<'API' | 'NON_API'>;
+
   /**
    * Filters results by Autonomous System. Specify one or more Autonomous System
    * Numbers (ASNs) as a comma-separated list. Prefix with `-` to exclude ASNs from
@@ -765,6 +777,12 @@ export interface HTTPTimeseriesParams {
    */
   aggInterval?: '15m' | '1h' | '1d' | '1w';
 
+  /**
+   * Filters results by API traffic classification. API traffic is identified by JSON
+   * or XML response content types on dynamic (non-cacheable) HTTP requests.
+   */
+  apiTraffic?: Array<'API' | 'NON_API'>;
+
   /**
    * Filters results by Autonomous System. Specify one or more Autonomous System
    * Numbers (ASNs) as a comma-separated list. Prefix with `-` to exclude ASNs from
@@ -878,6 +896,12 @@ export interface HTTPTimeseriesGroupsV2Params {
    */
   aggInterval?: '15m' | '1h' | '1d' | '1w';
 
+  /**
+   * Filters results by API traffic classification. API traffic is identified by JSON
+   * or XML response content types on dynamic (non-cacheable) HTTP requests.
+   */
+  apiTraffic?: Array<'API' | 'NON_API'>;
+
   /**
    * Filters results by Autonomous System. Specify one or more Autonomous System
    * Numbers (ASNs) as a comma-separated list. Prefix with `-` to exclude ASNs from

package/src/resources/radar/post-quantum/tls.ts

@@ -6,8 +6,9 @@ import * as Core from '../../../core';
 export class TLS extends APIResource {
   /**
    * Tests whether a hostname or IP address supports Post-Quantum (PQ) TLS key
-   * exchange. Returns information about the negotiated key exchange algorithm and
-   * whether it uses PQ cryptography.
+   * exchange. Returns information about the negotiated key exchange algorithm,
+   * whether it uses PQ cryptography, and any detected TLS implementation bugs (Split
+   * ClientHello, HRR failure, etc.).
    *
    * @example
    * ```ts
@@ -26,6 +27,8 @@ export class TLS extends APIResource {
 }
 
 export interface TLSSupportResponse {
+  bugs: TLSSupportResponse.Bugs;
+
   /**
    * The host that was tested
    */
@@ -42,11 +45,37 @@ export interface TLSSupportResponse {
   kexName: string;
 
   /**
-   * Whether the negotiated key exchange uses Post-Quantum cryptography
+   * Whether the negotiated key exchange uses Post-Quantum cryptography (specifically
+   * X25519MLKEM768)
    */
   pq: boolean;
 }
 
+export namespace TLSSupportResponse {
+  export interface Bugs {
+    /**
+     * Server sends a HelloRetryRequest but fails to complete the handshake after the
+     * client sends the second ClientHello. Often caused by non-compliant TLS 1.3
+     * implementations on shared hosting providers.
+     */
+    hrrFailure: boolean;
+
+    /**
+     * Server rejects fragmented ClientHello caused by large PQ keyshare, but accepts
+     * classical (non-PQ) handshakes. Typically caused by middleboxes or firewalls that
+     * cannot reassemble split TLS ClientHello messages.
+     */
+    splitClientHello: boolean;
+
+    /**
+     * Server cannot handle an unknown key exchange algorithm in the ClientHello
+     * keyshare extension. Compliant servers should respond with HelloRetryRequest for
+     * a supported algorithm.
+     */
+    unknownKeyshare: boolean;
+  }
+}
+
 export interface TLSSupportParams {
   /**
    * Hostname or IP address to test for Post-Quantum TLS support, optionally with

package/src/resources/radar/quality/iqi.ts

@@ -318,13 +318,9 @@ export namespace IQITimeseriesGroupsResponse {
   }
 
   export interface Serie0 {
-    p25: Array<string>;
-
-    p50: Array<string>;
-
-    p75: Array<string>;
-
     timestamps: Array<string>;
+
+    [k: string]: Array<string> | Array<string> | undefined;
   }
 }
 

package/src/resources/resource-sharing/resource-sharing.ts

@@ -291,7 +291,8 @@ export namespace ResourceSharingCreateResponse {
       | 'gateway-policy'
       | 'gateway-destination-ip'
       | 'gateway-block-page-settings'
-      | 'gateway-extended-email-matching';
+      | 'gateway-extended-email-matching'
+      | 'idp-federation-grant';
 
     /**
      * Resource Version.
@@ -418,7 +419,8 @@ export namespace ResourceSharingUpdateResponse {
       | 'gateway-policy'
       | 'gateway-destination-ip'
       | 'gateway-block-page-settings'
-      | 'gateway-extended-email-matching';
+      | 'gateway-extended-email-matching'
+      | 'idp-federation-grant';
 
     /**
      * Resource Version.
@@ -545,7 +547,8 @@ export namespace ResourceSharingListResponse {
       | 'gateway-policy'
       | 'gateway-destination-ip'
       | 'gateway-block-page-settings'
-      | 'gateway-extended-email-matching';
+      | 'gateway-extended-email-matching'
+      | 'idp-federation-grant';
 
     /**
      * Resource Version.
@@ -672,7 +675,8 @@ export namespace ResourceSharingDeleteResponse {
       | 'gateway-policy'
       | 'gateway-destination-ip'
       | 'gateway-block-page-settings'
-      | 'gateway-extended-email-matching';
+      | 'gateway-extended-email-matching'
+      | 'idp-federation-grant';
 
     /**
      * Resource Version.
@@ -799,7 +803,8 @@ export namespace ResourceSharingGetResponse {
       | 'gateway-policy'
       | 'gateway-destination-ip'
       | 'gateway-block-page-settings'
-      | 'gateway-extended-email-matching';
+      | 'gateway-extended-email-matching'
+      | 'idp-federation-grant';
 
     /**
      * Resource Version.
@@ -875,7 +880,8 @@ export namespace ResourceSharingCreateParams {
       | 'gateway-policy'
       | 'gateway-destination-ip'
       | 'gateway-block-page-settings'
-      | 'gateway-extended-email-matching';
+      | 'gateway-extended-email-matching'
+      | 'idp-federation-grant';
   }
 }
 
@@ -931,6 +937,7 @@ export interface ResourceSharingListParams extends V4PagePaginationArrayParams {
     | 'gateway-destination-ip'
     | 'gateway-block-page-settings'
     | 'gateway-extended-email-matching'
+    | 'idp-federation-grant'
   >;
 
   /**
@@ -938,6 +945,14 @@ export interface ResourceSharingListParams extends V4PagePaginationArrayParams {
    */
   status?: 'active' | 'deleting' | 'deleted';
 
+  /**
+   * Query param: Filter shares by tag. Each value is either `key=value` (matches
+   * shares whose tags contain that key/value pair) or `key` alone (matches shares
+   * that have any value for that key). May be repeated; multiple `tag` parameters
+   * are ANDed together. Maximum 20 `tag` parameters per request.
+   */
+  tag?: Array<string>;
+
   /**
    * Query param: Filter shares by target_type.
    */

package/src/resources/resource-sharing/resources.ts

@@ -195,7 +195,8 @@ export interface ResourceCreateResponse {
     | 'gateway-policy'
     | 'gateway-destination-ip'
     | 'gateway-block-page-settings'
-    | 'gateway-extended-email-matching';
+    | 'gateway-extended-email-matching'
+    | 'idp-federation-grant';
 
   /**
    * Resource Version.
@@ -247,7 +248,8 @@ export interface ResourceUpdateResponse {
     | 'gateway-policy'
     | 'gateway-destination-ip'
     | 'gateway-block-page-settings'
-    | 'gateway-extended-email-matching';
+    | 'gateway-extended-email-matching'
+    | 'idp-federation-grant';
 
   /**
    * Resource Version.
@@ -299,7 +301,8 @@ export interface ResourceListResponse {
     | 'gateway-policy'
     | 'gateway-destination-ip'
     | 'gateway-block-page-settings'
-    | 'gateway-extended-email-matching';
+    | 'gateway-extended-email-matching'
+    | 'idp-federation-grant';
 
   /**
    * Resource Version.
@@ -351,7 +354,8 @@ export interface ResourceDeleteResponse {
     | 'gateway-policy'
     | 'gateway-destination-ip'
     | 'gateway-block-page-settings'
-    | 'gateway-extended-email-matching';
+    | 'gateway-extended-email-matching'
+    | 'idp-federation-grant';
 
   /**
    * Resource Version.
@@ -403,7 +407,8 @@ export interface ResourceGetResponse {
     | 'gateway-policy'
     | 'gateway-destination-ip'
     | 'gateway-block-page-settings'
-    | 'gateway-extended-email-matching';
+    | 'gateway-extended-email-matching'
+    | 'idp-federation-grant';
 
   /**
    * Resource Version.
@@ -445,7 +450,8 @@ export interface ResourceCreateParams {
     | 'gateway-policy'
     | 'gateway-destination-ip'
     | 'gateway-block-page-settings'
-    | 'gateway-extended-email-matching';
+    | 'gateway-extended-email-matching'
+    | 'idp-federation-grant';
 }
 
 export interface ResourceUpdateParams {
@@ -474,7 +480,8 @@ export interface ResourceListParams extends V4PagePaginationArrayParams {
     | 'gateway-policy'
     | 'gateway-destination-ip'
     | 'gateway-block-page-settings'
-    | 'gateway-extended-email-matching';
+    | 'gateway-extended-email-matching'
+    | 'idp-federation-grant';
 
   /**
    * Query param: Filter share resources by status.

package/src/resources/secrets-store/stores/stores.ts

@@ -74,7 +74,10 @@ export class Stores extends APIResource {
   }
 
   /**
-   * Deletes a single store
+   * Deletes a single store. By default, a store that still contains secrets cannot
+   * be deleted and returns HTTP 409 (Conflict) with the "store_not_empty" error.
+   * Pass `force=true` to cascade-delete all secrets in the store. Empty stores are
+   * always deleted regardless of the force parameter.
    *
    * @example
    * ```ts
@@ -89,12 +92,12 @@ export class Stores extends APIResource {
     params: StoreDeleteParams,
     options?: Core.RequestOptions,
   ): Core.APIPromise<StoreDeleteResponse | null> {
-    const { account_id } = params;
+    const { account_id, force } = params;
     return (
-      this._client.delete(
-        `/accounts/${account_id}/secrets_store/stores/${storeId}`,
-        options,
-      ) as Core.APIPromise<{ result: StoreDeleteResponse | null }>
+      this._client.delete(`/accounts/${account_id}/secrets_store/stores/${storeId}`, {
+        query: { force },
+        ...options,
+      }) as Core.APIPromise<{ result: StoreDeleteResponse | null }>
     )._thenUnwrap((obj) => obj.result);
   }
 }
@@ -191,9 +194,16 @@ export interface StoreListParams extends V4PagePaginationArrayParams {
 
 export interface StoreDeleteParams {
   /**
-   * Account Identifier
+   * Path param: Account Identifier
    */
   account_id: string;
+
+  /**
+   * Query param: When true, cascade-deletes all secrets in the store before deleting
+   * the store itself. Required when deleting a non-empty store. Without this
+   * parameter, attempting to delete a non-empty store returns 409.
+   */
+  force?: boolean;
 }
 
 Stores.StoreListResponsesV4PagePaginationArray = StoreListResponsesV4PagePaginationArray;

package/src/resources/security-center/api.md

@@ -41,3 +41,35 @@ Types:
 Methods:
 
 - <code title="get /{accounts_or_zones}/{account_or_zone_id}/security-center/insights/type">client.securityCenter.insights.type.<a href="./src/resources/security-center/insights/type.ts">get</a>({ ...params }) -> TypeGetResponse</code>
+
+### AuditLogs
+
+Types:
+
+- <code><a href="./src/resources/security-center/insights/audit-logs.ts">AuditLogListResponse</a></code>
+- <code><a href="./src/resources/security-center/insights/audit-logs.ts">AuditLogListByInsightResponse</a></code>
+
+Methods:
+
+- <code title="get /{accounts_or_zones}/{account_or_zone_id}/security-center/insights/audit-log">client.securityCenter.insights.auditLogs.<a href="./src/resources/security-center/insights/audit-logs.ts">list</a>({ ...params }) -> AuditLogListResponsesCursorPagination</code>
+- <code title="get /{accounts_or_zones}/{account_or_zone_id}/security-center/insights/{issue_id}/audit-log">client.securityCenter.insights.auditLogs.<a href="./src/resources/security-center/insights/audit-logs.ts">listByInsight</a>(issueId, { ...params }) -> AuditLogListByInsightResponsesCursorPagination</code>
+
+### Classification
+
+Types:
+
+- <code><a href="./src/resources/security-center/insights/classification.ts">ClassificationUpdateResponse</a></code>
+
+Methods:
+
+- <code title="patch /{accounts_or_zones}/{account_or_zone_id}/security-center/insights/{issue_id}/classification">client.securityCenter.insights.classification.<a href="./src/resources/security-center/insights/classification.ts">update</a>(issueId, { ...params }) -> ClassificationUpdateResponse</code>
+
+### Context
+
+Types:
+
+- <code><a href="./src/resources/security-center/insights/context.ts">ContextGetResponse</a></code>
+
+Methods:
+
+- <code title="get /accounts/{account_id}/security-center/insights/{issue_id}/context">client.securityCenter.insights.context.<a href="./src/resources/security-center/insights/context.ts">get</a>(issueId, { ...params }) -> ContextGetResponse</code>