cloudflare 6.2.0 → 6.4.0

package/resources/zones/holds.d.ts

@@ -3,7 +3,7 @@ import * as Core from "../../core.js";
 export declare class Holds extends APIResource {
     /**
      * Enforce a zone hold on the zone, blocking the creation and activation of zones
-     * with this zone's hostname.
+     * with this zone's hostname. Zone holds cannot be enabled on CDN-only zones.
      *
      * @example
      * ```ts
@@ -16,6 +16,9 @@ export declare class Holds extends APIResource {
     /**
      * Stop enforcement of a zone hold on the zone, permanently or temporarily,
      * allowing the creation and activation of zones with this zone's hostname.
+     * Existing zone holds can be removed from CDN-only zones when `hold_after` is not
+     * provided. Active holds are automatically disabled when a zone transitions to
+     * CDN-only mode.
      *
      * @example
      * ```ts
@@ -28,6 +31,9 @@ export declare class Holds extends APIResource {
     /**
      * Update the `hold_after` and/or `include_subdomains` values on an existing zone
      * hold. The hold is enabled if the `hold_after` date-time value is in the past.
+     * Existing zone holds can be removed from CDN-only zones by setting `hold_after`
+     * to `null`. Other zone hold updates cannot be made on CDN-only zones. Active
+     * holds are automatically disabled when a zone transitions to CDN-only mode.
      *
      * @example
      * ```ts
@@ -77,6 +83,7 @@ export interface HoldDeleteParams {
      * Query param: If `hold_after` is provided, the hold will be temporarily disabled,
      * then automatically re-enabled by the system at the time specified in this
      * RFC3339-formatted timestamp. Otherwise, the hold will be disabled indefinitely.
+     * `hold_after` cannot be provided for CDN-only zones.
      */
     hold_after?: string;
 }
@@ -90,9 +97,10 @@ export interface HoldEditParams {
      * temporarily disabled, then automatically re-enabled by the system at the time
      * specified in this RFC3339-formatted timestamp. A past-dated `hold_after` value
      * will have no effect on an existing, enabled hold. Providing an empty string will
-     * set its value to the current time.
+     * set its value to the current time. Providing `null` will disable the hold
+     * indefinitely.
      */
-    hold_after?: string;
+    hold_after?: string | null;
     /**
      * Body param: If `true`, the zone hold will extend to block any subdomain of the
      * given zone, as well as SSL4SaaS Custom Hostnames. For example, a zone hold on a

package/resources/zones/holds.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"holds.d.ts","sourceRoot":"","sources":["../../src/resources/zones/holds.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,KAAK,IAAI,MAAM,YAAY,CAAC;AAEnC,qBAAa,KAAM,SAAQ,WAAW;IACpC;;;;;;;;;;OAUG;IACH,MAAM,CAAC,MAAM,EAAE,gBAAgB,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;IAU1F;;;;;;;;;;OAUG;IACH,MAAM,CAAC,MAAM,EAAE,gBAAgB,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;IAU1F;;;;;;;;;;OAUG;IACH,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;IAStF;;;;;;;;;;OAUG;IACH,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;CAMrF;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,CAAC,EAAE,OAAO,CAAC;IAEf,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,gBAAgB;IAC/B;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAEhB;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,MAAM,WAAW,gBAAgB;IAC/B;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAEhB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAEhB;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,MAAM,WAAW,aAAa;IAC5B;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,CAAC,OAAO,WAAW,KAAK,CAAC;IAC7B,OAAO,EACL,KAAK,QAAQ,IAAI,QAAQ,EACzB,KAAK,gBAAgB,IAAI,gBAAgB,EACzC,KAAK,gBAAgB,IAAI,gBAAgB,EACzC,KAAK,cAAc,IAAI,cAAc,EACrC,KAAK,aAAa,IAAI,aAAa,GACpC,CAAC;CACH"}
+{"version":3,"file":"holds.d.ts","sourceRoot":"","sources":["../../src/resources/zones/holds.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,KAAK,IAAI,MAAM,YAAY,CAAC;AAEnC,qBAAa,KAAM,SAAQ,WAAW;IACpC;;;;;;;;;;OAUG;IACH,MAAM,CAAC,MAAM,EAAE,gBAAgB,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;IAU1F;;;;;;;;;;;;;OAaG;IACH,MAAM,CAAC,MAAM,EAAE,gBAAgB,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;IAU1F;;;;;;;;;;;;;OAaG;IACH,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;IAStF;;;;;;;;;;OAUG;IACH,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;CAMrF;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,CAAC,EAAE,OAAO,CAAC;IAEf,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,gBAAgB;IAC/B;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAEhB;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,MAAM,WAAW,gBAAgB;IAC/B;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAEhB;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAEhB;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAE3B;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,MAAM,WAAW,aAAa;IAC5B;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,CAAC,OAAO,WAAW,KAAK,CAAC;IAC7B,OAAO,EACL,KAAK,QAAQ,IAAI,QAAQ,EACzB,KAAK,gBAAgB,IAAI,gBAAgB,EACzC,KAAK,gBAAgB,IAAI,gBAAgB,EACzC,KAAK,cAAc,IAAI,cAAc,EACrC,KAAK,aAAa,IAAI,aAAa,GACpC,CAAC;CACH"}

package/resources/zones/holds.js

@@ -6,7 +6,7 @@ const resource_1 = require("../../resource.js");
 class Holds extends resource_1.APIResource {
     /**
      * Enforce a zone hold on the zone, blocking the creation and activation of zones
-     * with this zone's hostname.
+     * with this zone's hostname. Zone holds cannot be enabled on CDN-only zones.
      *
      * @example
      * ```ts
@@ -25,6 +25,9 @@ class Holds extends resource_1.APIResource {
     /**
      * Stop enforcement of a zone hold on the zone, permanently or temporarily,
      * allowing the creation and activation of zones with this zone's hostname.
+     * Existing zone holds can be removed from CDN-only zones when `hold_after` is not
+     * provided. Active holds are automatically disabled when a zone transitions to
+     * CDN-only mode.
      *
      * @example
      * ```ts
@@ -43,6 +46,9 @@ class Holds extends resource_1.APIResource {
     /**
      * Update the `hold_after` and/or `include_subdomains` values on an existing zone
      * hold. The hold is enabled if the `hold_after` date-time value is in the past.
+     * Existing zone holds can be removed from CDN-only zones by setting `hold_after`
+     * to `null`. Other zone hold updates cannot be made on CDN-only zones. Active
+     * holds are automatically disabled when a zone transitions to CDN-only mode.
      *
      * @example
      * ```ts

package/resources/zones/holds.js.map

@@ -1 +1 @@
-{"version":3,"file":"holds.js","sourceRoot":"","sources":["../../src/resources/zones/holds.ts"],"names":[],"mappings":";AAAA,sFAAsF;;;AAEtF,gDAA6C;AAG7C,MAAa,KAAM,SAAQ,sBAAW;IACpC;;;;;;;;;;OAUG;IACH,MAAM,CAAC,MAAwB,EAAE,OAA6B;QAC5D,MAAM,EAAE,OAAO,EAAE,kBAAkB,EAAE,GAAG,MAAM,CAAC;QAC/C,OACE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,OAAO,OAAO,EAAE;YAC1C,KAAK,EAAE,EAAE,kBAAkB,EAAE;YAC7B,GAAG,OAAO;SACX,CACF,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED;;;;;;;;;;OAUG;IACH,MAAM,CAAC,MAAwB,EAAE,OAA6B;QAC5D,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;QACvC,OACE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,OAAO,OAAO,EAAE;YAC5C,KAAK,EAAE,EAAE,UAAU,EAAE;YACrB,GAAG,OAAO;SACX,CACF,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED;;;;;;;;;;OAUG;IACH,IAAI,CAAC,MAAsB,EAAE,OAA6B;QACxD,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;QACpC,OACE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,OAAO,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,CAGlE,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED;;;;;;;;;;OAUG;IACH,GAAG,CAAC,MAAqB,EAAE,OAA6B;QACtD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;QAC3B,OACE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,OAAO,OAAO,EAAE,OAAO,CACnD,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;CACF;AAhFD,sBAgFC"}
+{"version":3,"file":"holds.js","sourceRoot":"","sources":["../../src/resources/zones/holds.ts"],"names":[],"mappings":";AAAA,sFAAsF;;;AAEtF,gDAA6C;AAG7C,MAAa,KAAM,SAAQ,sBAAW;IACpC;;;;;;;;;;OAUG;IACH,MAAM,CAAC,MAAwB,EAAE,OAA6B;QAC5D,MAAM,EAAE,OAAO,EAAE,kBAAkB,EAAE,GAAG,MAAM,CAAC;QAC/C,OACE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,OAAO,OAAO,EAAE;YAC1C,KAAK,EAAE,EAAE,kBAAkB,EAAE;YAC7B,GAAG,OAAO;SACX,CACF,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,MAAM,CAAC,MAAwB,EAAE,OAA6B;QAC5D,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;QACvC,OACE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,OAAO,OAAO,EAAE;YAC5C,KAAK,EAAE,EAAE,UAAU,EAAE;YACrB,GAAG,OAAO;SACX,CACF,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,IAAI,CAAC,MAAsB,EAAE,OAA6B;QACxD,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;QACpC,OACE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,OAAO,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,CAGlE,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED;;;;;;;;;;OAUG;IACH,GAAG,CAAC,MAAqB,EAAE,OAA6B;QACtD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;QAC3B,OACE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,OAAO,OAAO,EAAE,OAAO,CACnD,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;CACF;AAtFD,sBAsFC"}

package/resources/zones/holds.mjs

@@ -3,7 +3,7 @@ import { APIResource } from "../../resource.mjs";
 export class Holds extends APIResource {
     /**
      * Enforce a zone hold on the zone, blocking the creation and activation of zones
-     * with this zone's hostname.
+     * with this zone's hostname. Zone holds cannot be enabled on CDN-only zones.
      *
      * @example
      * ```ts
@@ -22,6 +22,9 @@ export class Holds extends APIResource {
     /**
      * Stop enforcement of a zone hold on the zone, permanently or temporarily,
      * allowing the creation and activation of zones with this zone's hostname.
+     * Existing zone holds can be removed from CDN-only zones when `hold_after` is not
+     * provided. Active holds are automatically disabled when a zone transitions to
+     * CDN-only mode.
      *
      * @example
      * ```ts
@@ -40,6 +43,9 @@ export class Holds extends APIResource {
     /**
      * Update the `hold_after` and/or `include_subdomains` values on an existing zone
      * hold. The hold is enabled if the `hold_after` date-time value is in the past.
+     * Existing zone holds can be removed from CDN-only zones by setting `hold_after`
+     * to `null`. Other zone hold updates cannot be made on CDN-only zones. Active
+     * holds are automatically disabled when a zone transitions to CDN-only mode.
      *
      * @example
      * ```ts

package/resources/zones/holds.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"holds.mjs","sourceRoot":"","sources":["../../src/resources/zones/holds.ts"],"names":[],"mappings":"AAAA,sFAAsF;OAE/E,EAAE,WAAW,EAAE;AAGtB,MAAM,OAAO,KAAM,SAAQ,WAAW;IACpC;;;;;;;;;;OAUG;IACH,MAAM,CAAC,MAAwB,EAAE,OAA6B;QAC5D,MAAM,EAAE,OAAO,EAAE,kBAAkB,EAAE,GAAG,MAAM,CAAC;QAC/C,OACE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,OAAO,OAAO,EAAE;YAC1C,KAAK,EAAE,EAAE,kBAAkB,EAAE;YAC7B,GAAG,OAAO;SACX,CACF,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED;;;;;;;;;;OAUG;IACH,MAAM,CAAC,MAAwB,EAAE,OAA6B;QAC5D,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;QACvC,OACE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,OAAO,OAAO,EAAE;YAC5C,KAAK,EAAE,EAAE,UAAU,EAAE;YACrB,GAAG,OAAO;SACX,CACF,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED;;;;;;;;;;OAUG;IACH,IAAI,CAAC,MAAsB,EAAE,OAA6B;QACxD,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;QACpC,OACE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,OAAO,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,CAGlE,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED;;;;;;;;;;OAUG;IACH,GAAG,CAAC,MAAqB,EAAE,OAA6B;QACtD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;QAC3B,OACE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,OAAO,OAAO,EAAE,OAAO,CACnD,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;CACF"}
+{"version":3,"file":"holds.mjs","sourceRoot":"","sources":["../../src/resources/zones/holds.ts"],"names":[],"mappings":"AAAA,sFAAsF;OAE/E,EAAE,WAAW,EAAE;AAGtB,MAAM,OAAO,KAAM,SAAQ,WAAW;IACpC;;;;;;;;;;OAUG;IACH,MAAM,CAAC,MAAwB,EAAE,OAA6B;QAC5D,MAAM,EAAE,OAAO,EAAE,kBAAkB,EAAE,GAAG,MAAM,CAAC;QAC/C,OACE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,OAAO,OAAO,EAAE;YAC1C,KAAK,EAAE,EAAE,kBAAkB,EAAE;YAC7B,GAAG,OAAO;SACX,CACF,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,MAAM,CAAC,MAAwB,EAAE,OAA6B;QAC5D,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;QACvC,OACE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,OAAO,OAAO,EAAE;YAC5C,KAAK,EAAE,EAAE,UAAU,EAAE;YACrB,GAAG,OAAO;SACX,CACF,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,IAAI,CAAC,MAAsB,EAAE,OAA6B;QACxD,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;QACpC,OACE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,OAAO,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,CAGlE,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED;;;;;;;;;;OAUG;IACH,GAAG,CAAC,MAAqB,EAAE,OAA6B;QACtD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;QAC3B,OACE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,OAAO,OAAO,EAAE,OAAO,CACnD,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;CACF"}

package/src/index.ts

@@ -24,6 +24,7 @@ import { AbuseReports } from './resources/abuse-reports/abuse-reports';
 import { Accounts } from './resources/accounts/accounts';
 import { ACM } from './resources/acm/acm';
 import { Addressing } from './resources/addressing/addressing';
+import { AIAudit } from './resources/ai-audit/ai-audit';
 import { AIGateway } from './resources/ai-gateway/ai-gateway';
 import { AISecurity } from './resources/ai-security/ai-security';
 import { AI } from './resources/ai/ai';
@@ -45,7 +46,9 @@ import { CloudConnector } from './resources/cloud-connector/cloud-connector';
 import { CloudforceOne } from './resources/cloudforce-one/cloudforce-one';
 import { Connectivity } from './resources/connectivity/connectivity';
 import { ContentScanning } from './resources/content-scanning/content-scanning';
+import { CsamScanner } from './resources/csam-scanner/csam-scanner';
 import { CustomCertificates } from './resources/custom-certificates/custom-certificates';
+import { CustomCsrs } from './resources/custom-csrs/custom-csrs';
 import { CustomHostnames } from './resources/custom-hostnames/custom-hostnames';
 import { CustomNameservers } from './resources/custom-nameservers/custom-nameservers';
 import { CustomPages } from './resources/custom-pages/custom-pages';
@@ -53,6 +56,7 @@ import { D1Resource } from './resources/d1/d1';
 import { DCVDelegation } from './resources/dcv-delegation/dcv-delegation';
 import { DDoSProtection } from './resources/ddos-protection/ddos-protection';
 import { Diagnostics } from './resources/diagnostics/diagnostics';
+import { DLS } from './resources/dls/dls';
 import { DNSFirewall } from './resources/dns-firewall/dns-firewall';
 import { DNS } from './resources/dns/dns';
 import { DurableObjects } from './resources/durable-objects/durable-objects';
@@ -61,6 +65,7 @@ import { EmailSecurity } from './resources/email-security/email-security';
 import { EmailSending } from './resources/email-sending/email-sending';
 import { Filters } from './resources/filters/filters';
 import { Firewall } from './resources/firewall/firewall';
+import { Flagship } from './resources/flagship/flagship';
 import { Fraud } from './resources/fraud/fraud';
 import { GoogleTagGateway } from './resources/google-tag-gateway/google-tag-gateway';
 import { Healthchecks } from './resources/healthchecks/healthchecks';
@@ -87,6 +92,7 @@ import { Organizations } from './resources/organizations/organizations';
 import { OriginCACertificates } from './resources/origin-ca-certificates/origin-ca-certificates';
 import { OriginPostQuantumEncryption } from './resources/origin-post-quantum-encryption/origin-post-quantum-encryption';
 import { OriginTLSClientAuth } from './resources/origin-tls-client-auth/origin-tls-client-auth';
+import { OriginTLSComplianceModes } from './resources/origin-tls-compliance-modes/origin-tls-compliance-modes';
 import { PageRules } from './resources/page-rules/page-rules';
 import { PageShield } from './resources/page-shield/page-shield';
 import { Pages } from './resources/pages/pages';
@@ -113,6 +119,7 @@ import { Spectrum } from './resources/spectrum/spectrum';
 import { Speed } from './resources/speed/speed';
 import { SSL } from './resources/ssl/ssl';
 import { Stream } from './resources/stream/stream';
+import { TenantCustomNameservers } from './resources/tenant-custom-nameservers/tenant-custom-nameservers';
 import { TokenValidation } from './resources/token-validation/token-validation';
 import { Turnstile } from './resources/turnstile/turnstile';
 import { URLNormalization } from './resources/url-normalization/url-normalization';
@@ -270,6 +277,18 @@ export class Cloudflare extends Core.APIClient {
       fetch: options.fetch,
     });
 
+    const customHeadersEnv = Core.readEnv('CLOUDFLARE_CUSTOM_HEADERS');
+    if (customHeadersEnv) {
+      const parsed: Record<string, string> = {};
+      for (const line of customHeadersEnv.split('\n')) {
+        const colon = line.indexOf(':');
+        if (colon >= 0) {
+          parsed[line.substring(0, colon).trim()] = line.substring(colon + 1).trim();
+        }
+      }
+      options.defaultHeaders = { ...parsed, ...options.defaultHeaders };
+    }
+
     this._options = options;
 
     this.apiToken = apiToken;
@@ -293,8 +312,10 @@ export class Cloudflare extends Core.APIClient {
   certificateAuthorities: API.CertificateAuthorities = new API.CertificateAuthorities(this);
   clientCertificates: API.ClientCertificates = new API.ClientCertificates(this);
   customCertificates: API.CustomCertificates = new API.CustomCertificates(this);
+  customCsrs: API.CustomCsrs = new API.CustomCsrs(this);
   customHostnames: API.CustomHostnames = new API.CustomHostnames(this);
   customNameservers: API.CustomNameservers = new API.CustomNameservers(this);
+  tenantCustomNameservers: API.TenantCustomNameservers = new API.TenantCustomNameservers(this);
   dnsFirewall: API.DNSFirewall = new API.DNSFirewall(this);
   dns: API.DNS = new API.DNS(this);
   emailSecurity: API.EmailSecurity = new API.EmailSecurity(this);
@@ -322,6 +343,7 @@ export class Cloudflare extends Core.APIClient {
   urlNormalization: API.URLNormalization = new API.URLNormalization(this);
   spectrum: API.Spectrum = new API.Spectrum(this);
   addressing: API.Addressing = new API.Addressing(this);
+  dls: API.DLS = new API.DLS(this);
   auditLogs: API.AuditLogs = new API.AuditLogs(this);
   billing: API.Billing = new API.Billing(this);
   brandProtection: API.BrandProtection = new API.BrandProtection(this);
@@ -356,6 +378,7 @@ export class Cloudflare extends Core.APIClient {
   botManagement: API.BotManagement = new API.BotManagement(this);
   fraud: API.Fraud = new API.Fraud(this);
   originPostQuantumEncryption: API.OriginPostQuantumEncryption = new API.OriginPostQuantumEncryption(this);
+  originTLSComplianceModes: API.OriginTLSComplianceModes = new API.OriginTLSComplianceModes(this);
   googleTagGateway: API.GoogleTagGateway = new API.GoogleTagGateway(this);
   zaraz: API.Zaraz = new API.Zaraz(this);
   speed: API.Speed = new API.Speed(this);
@@ -366,6 +389,7 @@ export class Cloudflare extends Core.APIClient {
   calls: API.Calls = new API.Calls(this);
   cloudforceOne: API.CloudforceOne = new API.CloudforceOne(this);
   aiGateway: API.AIGateway = new API.AIGateway(this);
+  flagship: API.Flagship = new API.Flagship(this);
   iam: API.IAM = new API.IAM(this);
   cloudConnector: API.CloudConnector = new API.CloudConnector(this);
   botnetFeed: API.BotnetFeed = new API.BotnetFeed(this);
@@ -376,8 +400,10 @@ export class Cloudflare extends Core.APIClient {
   leakedCredentialChecks: API.LeakedCredentialChecks = new API.LeakedCredentialChecks(this);
   contentScanning: API.ContentScanning = new API.ContentScanning(this);
   aiSecurity: API.AISecurity = new API.AISecurity(this);
+  csamScanner: API.CsamScanner = new API.CsamScanner(this);
   abuseReports: API.AbuseReports = new API.AbuseReports(this);
   ai: API.AI = new API.AI(this);
+  aiAudit: API.AIAudit = new API.AIAudit(this);
   aiSearch: API.AISearch = new API.AISearch(this);
   securityCenter: API.SecurityCenter = new API.SecurityCenter(this);
   browserRendering: API.BrowserRendering = new API.BrowserRendering(this);
@@ -543,8 +569,10 @@ Cloudflare.Argo = Argo;
 Cloudflare.CertificateAuthorities = CertificateAuthorities;
 Cloudflare.ClientCertificates = ClientCertificates;
 Cloudflare.CustomCertificates = CustomCertificates;
+Cloudflare.CustomCsrs = CustomCsrs;
 Cloudflare.CustomHostnames = CustomHostnames;
 Cloudflare.CustomNameservers = CustomNameservers;
+Cloudflare.TenantCustomNameservers = TenantCustomNameservers;
 Cloudflare.DNSFirewall = DNSFirewall;
 Cloudflare.DNS = DNS;
 Cloudflare.EmailSecurity = EmailSecurity;
@@ -572,6 +600,7 @@ Cloudflare.Rulesets = Rulesets;
 Cloudflare.URLNormalization = URLNormalization;
 Cloudflare.Spectrum = Spectrum;
 Cloudflare.Addressing = Addressing;
+Cloudflare.DLS = DLS;
 Cloudflare.AuditLogs = AuditLogs;
 Cloudflare.Billing = Billing;
 Cloudflare.BrandProtection = BrandProtection;
@@ -606,6 +635,7 @@ Cloudflare.Radar = Radar;
 Cloudflare.BotManagement = BotManagement;
 Cloudflare.Fraud = Fraud;
 Cloudflare.OriginPostQuantumEncryption = OriginPostQuantumEncryption;
+Cloudflare.OriginTLSComplianceModes = OriginTLSComplianceModes;
 Cloudflare.GoogleTagGateway = GoogleTagGateway;
 Cloudflare.Zaraz = Zaraz;
 Cloudflare.Speed = Speed;
@@ -616,6 +646,7 @@ Cloudflare.RealtimeKit = RealtimeKit;
 Cloudflare.Calls = Calls;
 Cloudflare.CloudforceOne = CloudforceOne;
 Cloudflare.AIGateway = AIGateway;
+Cloudflare.Flagship = Flagship;
 Cloudflare.IAM = IAM;
 Cloudflare.CloudConnector = CloudConnector;
 Cloudflare.BotnetFeed = BotnetFeed;
@@ -626,8 +657,10 @@ Cloudflare.ResourceTagging = ResourceTagging;
 Cloudflare.LeakedCredentialChecks = LeakedCredentialChecks;
 Cloudflare.ContentScanning = ContentScanning;
 Cloudflare.AISecurity = AISecurity;
+Cloudflare.CsamScanner = CsamScanner;
 Cloudflare.AbuseReports = AbuseReports;
 Cloudflare.AI = AI;
+Cloudflare.AIAudit = AIAudit;
 Cloudflare.AISearch = AISearch;
 Cloudflare.SecurityCenter = SecurityCenter;
 Cloudflare.BrowserRendering = BrowserRendering;
@@ -703,10 +736,14 @@ export declare namespace Cloudflare {
 
   export { CustomCertificates as CustomCertificates };
 
+  export { CustomCsrs as CustomCsrs };
+
   export { CustomHostnames as CustomHostnames };
 
   export { CustomNameservers as CustomNameservers };
 
+  export { TenantCustomNameservers as TenantCustomNameservers };
+
   export { DNSFirewall as DNSFirewall };
 
   export { DNS as DNS };
@@ -761,6 +798,8 @@ export declare namespace Cloudflare {
 
   export { Addressing as Addressing };
 
+  export { DLS as DLS };
+
   export { AuditLogs as AuditLogs };
 
   export { Billing as Billing };
@@ -829,6 +868,8 @@ export declare namespace Cloudflare {
 
   export { OriginPostQuantumEncryption as OriginPostQuantumEncryption };
 
+  export { OriginTLSComplianceModes as OriginTLSComplianceModes };
+
   export { GoogleTagGateway as GoogleTagGateway };
 
   export { Zaraz as Zaraz };
@@ -849,6 +890,8 @@ export declare namespace Cloudflare {
 
   export { AIGateway as AIGateway };
 
+  export { Flagship as Flagship };
+
   export { IAM as IAM };
 
   export { CloudConnector as CloudConnector };
@@ -869,10 +912,14 @@ export declare namespace Cloudflare {
 
   export { AISecurity as AISecurity };
 
+  export { CsamScanner as CsamScanner };
+
   export { AbuseReports as AbuseReports };
 
   export { AI as AI };
 
+  export { AIAudit as AIAudit };
+
   export { AISearch as AISearch };
 
   export { SecurityCenter as SecurityCenter };

package/src/resources/abuse-reports/mitigations.ts

@@ -61,6 +61,9 @@ export namespace MitigationListResponse {
 
     entity_id: string;
 
+    /**
+     * The type of entity targeted by a mitigation.
+     */
     entity_type: 'url_pattern' | 'account' | 'zone';
 
     /**
@@ -69,16 +72,28 @@ export namespace MitigationListResponse {
     status: 'pending' | 'active' | 'in_review' | 'cancelled' | 'removed';
 
     /**
-     * The type of mitigation
+     * The type of mitigation applied to a reported entity.
      */
     type:
+      | 'account_suspend'
+      | 'copyright_interstitial'
+      | 'geo_block'
       | 'legal_block'
+      | 'malware_interstitial'
       | 'misleading_interstitial'
-      | 'phishing_interstitial'
       | 'network_block'
+      | 'phishing_interstitial'
+      | 'playfairite_enforce'
+      | 'r2_takedown_account'
+      | 'r2_takedown_bucket'
+      | 'r2_takedown_object'
       | 'rate_limit_cache'
-      | 'account_suspend'
-      | 'redirect_video_stream';
+      | 'redirect_video_stream'
+      | 'registrar_freeze'
+      | 'registrar_parking'
+      | 'stream_block_account'
+      | 'user_suspend'
+      | 'workers_takedown_by_zone_id';
   }
 }
 
@@ -96,6 +111,9 @@ export interface MitigationReviewResponse {
 
   entity_id: string;
 
+  /**
+   * The type of entity targeted by a mitigation.
+   */
   entity_type: 'url_pattern' | 'account' | 'zone';
 
   /**
@@ -104,16 +122,28 @@ export interface MitigationReviewResponse {
   status: 'pending' | 'active' | 'in_review' | 'cancelled' | 'removed';
 
   /**
-   * The type of mitigation
+   * The type of mitigation applied to a reported entity.
    */
   type:
+    | 'account_suspend'
+    | 'copyright_interstitial'
+    | 'geo_block'
     | 'legal_block'
+    | 'malware_interstitial'
     | 'misleading_interstitial'
-    | 'phishing_interstitial'
     | 'network_block'
+    | 'phishing_interstitial'
+    | 'playfairite_enforce'
+    | 'r2_takedown_account'
+    | 'r2_takedown_bucket'
+    | 'r2_takedown_object'
     | 'rate_limit_cache'
-    | 'account_suspend'
-    | 'redirect_video_stream';
+    | 'redirect_video_stream'
+    | 'registrar_freeze'
+    | 'registrar_parking'
+    | 'stream_block_account'
+    | 'user_suspend'
+    | 'workers_takedown_by_zone_id';
 }
 
 export interface MitigationListParams extends V4PagePaginationParams {
@@ -161,13 +191,25 @@ export interface MitigationListParams extends V4PagePaginationParams {
    * set, e.g. ?type=rate_limit_cache&type=legal_block.
    */
   type?:
+    | 'account_suspend'
+    | 'copyright_interstitial'
+    | 'geo_block'
     | 'legal_block'
+    | 'malware_interstitial'
     | 'misleading_interstitial'
-    | 'phishing_interstitial'
     | 'network_block'
+    | 'phishing_interstitial'
+    | 'playfairite_enforce'
+    | 'r2_takedown_account'
+    | 'r2_takedown_bucket'
+    | 'r2_takedown_object'
     | 'rate_limit_cache'
-    | 'account_suspend'
-    | 'redirect_video_stream';
+    | 'redirect_video_stream'
+    | 'registrar_freeze'
+    | 'registrar_parking'
+    | 'stream_block_account'
+    | 'user_suspend'
+    | 'workers_takedown_by_zone_id';
 }
 
 export interface MitigationReviewParams {

package/src/resources/acm/custom-trust-store.ts

@@ -188,7 +188,7 @@ export interface CustomTrustStoreListParams extends V4PagePaginationArrayParams
   limit?: number;
 
   /**
-   * Query param: Offset the results
+   * Query param: Offset the results.
    */
   offset?: number;
 }

package/src/resources/addressing/regional-hostnames/regional-hostnames.ts

@@ -163,7 +163,7 @@ export interface RegionalHostnameCreateResponse {
   /**
    * Configure which routing method to use for the regional hostname
    */
-  routing?: string;
+  routing: string;
 }
 
 export interface RegionalHostnameListResponse {
@@ -186,7 +186,7 @@ export interface RegionalHostnameListResponse {
   /**
    * Configure which routing method to use for the regional hostname
    */
-  routing?: string;
+  routing: string;
 }
 
 export interface RegionalHostnameDeleteResponse {
@@ -254,7 +254,7 @@ export interface RegionalHostnameEditResponse {
   /**
    * Configure which routing method to use for the regional hostname
    */
-  routing?: string;
+  routing: string;
 }
 
 export interface RegionalHostnameGetResponse {
@@ -277,7 +277,7 @@ export interface RegionalHostnameGetResponse {
   /**
    * Configure which routing method to use for the regional hostname
    */
-  routing?: string;
+  routing: string;
 }
 
 export interface RegionalHostnameCreateParams {

package/src/resources/ai/models/models.ts

@@ -40,11 +40,27 @@ export interface ModelListParams extends V4PagePaginationArrayParams {
    */
   author?: string;
 
+  /**
+   * Query param: If set, return models in the requested marketplace format instead
+   * of the default response.
+   */
+  format?: 'openrouter';
+
   /**
    * Query param: Filter to hide experimental models
    */
   hide_experimental?: boolean;
 
+  /**
+   * Query param: If true, include models whose planned_deprecation_date is in the
+   * past — but only within a three-month grace window after that date. Models whose
+   * planned_deprecation_date is more than three months in the past remain hidden
+   * regardless of this flag. Future planned-deprecation dates are always included
+   * regardless of this flag. Defaults to false, preserving the existing behavior of
+   * hiding all past-dated deprecations.
+   */
+  include_deprecated?: boolean;
+
   /**
    * Query param: Search
    */

package/src/resources/ai-audit/ai-audit.ts

@@ -0,0 +1,15 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+import { APIResource } from '../../resource';
+import * as RobotsAPI from './robots';
+import { Robots } from './robots';
+
+export class AIAudit extends APIResource {
+  robots: RobotsAPI.Robots = new RobotsAPI.Robots(this._client);
+}
+
+AIAudit.Robots = Robots;
+
+export declare namespace AIAudit {
+  export { Robots as Robots };
+}

package/src/resources/ai-audit/api.md

@@ -0,0 +1,3 @@
+# AIAudit
+
+## Robots

package/src/resources/ai-audit/index.ts

@@ -0,0 +1,4 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+export { AIAudit } from './ai-audit';
+export { Robots } from './robots';

package/src/resources/ai-audit/robots.ts

@@ -0,0 +1,5 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+import { APIResource } from '../../resource';
+
+export class Robots extends APIResource {}

package/src/resources/ai-audit.ts

@@ -0,0 +1,3 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+export * from './ai-audit/index';