cloudflare 6.2.0 → 6.4.0

package/src/resources/cache/smart-tiered-cache.ts

@@ -4,6 +4,36 @@ import { APIResource } from '../../resource';
 import * as Core from '../../core';
 
 export class SmartTieredCache extends APIResource {
+  /**
+   * Smart Tiered Cache dynamically selects the single closest upper tier for each of
+   * your website's origins with no configuration required, using our in-house
+   * performance and routing data. Cloudflare collects latency data for each request
+   * to an origin, and uses the latency data to determine how well any upper-tier
+   * data center is connected with an origin. As a result, Cloudflare can select the
+   * data center with the lowest latency to be the upper-tier for an origin.
+   *
+   * @example
+   * ```ts
+   * const smartTieredCache =
+   *   await client.cache.smartTieredCache.create({
+   *     zone_id: '023e105f4ecef8ad9ca31a8372d0c353',
+   *     value: 'on',
+   *   });
+   * ```
+   */
+  create(
+    params: SmartTieredCacheCreateParams,
+    options?: Core.RequestOptions,
+  ): Core.APIPromise<SmartTieredCacheCreateResponse> {
+    const { zone_id, ...body } = params;
+    return (
+      this._client.post(`/zones/${zone_id}/cache/tiered_cache_smart_topology_enable`, {
+        body,
+        ...options,
+      }) as Core.APIPromise<{ result: SmartTieredCacheCreateResponse }>
+    )._thenUnwrap((obj) => obj.result);
+  }
+
   /**
    * Smart Tiered Cache dynamically selects the single closest upper tier for each of
    * your website’s origins with no configuration required, using our in-house
@@ -92,6 +122,28 @@ export class SmartTieredCache extends APIResource {
   }
 }
 
+export interface SmartTieredCacheCreateResponse {
+  /**
+   * The identifier of the caching setting.
+   */
+  id: 'tiered_cache_smart_topology_enable';
+
+  /**
+   * Whether the setting is editable.
+   */
+  editable: boolean;
+
+  /**
+   * Value of the Smart Tiered Cache zone setting.
+   */
+  value: 'on' | 'off';
+
+  /**
+   * Last time this setting was modified.
+   */
+  modified_on?: string | null;
+}
+
 export interface SmartTieredCacheDeleteResponse {
   /**
    * The identifier of the caching setting.
@@ -153,6 +205,18 @@ export interface SmartTieredCacheGetResponse {
   modified_on?: string | null;
 }
 
+export interface SmartTieredCacheCreateParams {
+  /**
+   * Path param: Identifier.
+   */
+  zone_id: string;
+
+  /**
+   * Body param: Enable or disable the Smart Tiered Cache.
+   */
+  value: 'on' | 'off';
+}
+
 export interface SmartTieredCacheDeleteParams {
   /**
    * Identifier.
@@ -181,9 +245,11 @@ export interface SmartTieredCacheGetParams {
 
 export declare namespace SmartTieredCache {
   export {
+    type SmartTieredCacheCreateResponse as SmartTieredCacheCreateResponse,
     type SmartTieredCacheDeleteResponse as SmartTieredCacheDeleteResponse,
     type SmartTieredCacheEditResponse as SmartTieredCacheEditResponse,
     type SmartTieredCacheGetResponse as SmartTieredCacheGetResponse,
+    type SmartTieredCacheCreateParams as SmartTieredCacheCreateParams,
     type SmartTieredCacheDeleteParams as SmartTieredCacheDeleteParams,
     type SmartTieredCacheEditParams as SmartTieredCacheEditParams,
     type SmartTieredCacheGetParams as SmartTieredCacheGetParams,

package/src/resources/certificate-authorities/hostname-associations.ts

@@ -5,7 +5,7 @@ import * as Core from '../../core';
 
 export class HostnameAssociations extends APIResource {
   /**
-   * Replace Hostname Associations
+   * Replace Hostname Associations.
    */
   update(
     params: HostnameAssociationUpdateParams,
@@ -21,7 +21,7 @@ export class HostnameAssociations extends APIResource {
   }
 
   /**
-   * List Hostname Associations
+   * List Hostname Associations.
    */
   get(
     params: HostnameAssociationGetParams,

package/src/resources/client-certificates/client-certificates.ts

@@ -7,7 +7,7 @@ import { V4PagePaginationArray, type V4PagePaginationArrayParams } from '../../p
 
 export class ClientCertificates extends APIResource {
   /**
-   * Create a new API Shield mTLS Client Certificate
+   * Create a new API Shield mTLS Client Certificate.
    *
    * @example
    * ```ts
@@ -33,7 +33,7 @@ export class ClientCertificates extends APIResource {
 
   /**
    * List all of your Zone's API Shield mTLS Client Certificates by Status and/or
-   * using Pagination
+   * using Pagination.
    *
    * @example
    * ```ts
@@ -112,7 +112,7 @@ export class ClientCertificates extends APIResource {
   }
 
   /**
-   * Get Details for a single mTLS API Shield Client Certificate
+   * Get Details for a single mTLS API Shield Client Certificate.
    *
    * @example
    * ```ts
@@ -147,22 +147,22 @@ export interface ClientCertificate {
   id?: string;
 
   /**
-   * The Client Certificate PEM
+   * The Client Certificate PEM.
    */
   certificate?: string;
 
   /**
-   * Certificate Authority used to issue the Client Certificate
+   * Certificate Authority used to issue the Client Certificate.
    */
   certificate_authority?: ClientCertificate.CertificateAuthority;
 
   /**
-   * Common Name of the Client Certificate
+   * Common Name of the Client Certificate.
    */
   common_name?: string;
 
   /**
-   * Country, provided by the CSR
+   * Country, provided by the CSR.
    */
   country?: string;
 
@@ -172,32 +172,32 @@ export interface ClientCertificate {
   csr?: string;
 
   /**
-   * Date that the Client Certificate expires
+   * Date that the Client Certificate expires.
    */
   expires_on?: string;
 
   /**
-   * Unique identifier of the Client Certificate
+   * Unique identifier of the Client Certificate.
    */
   fingerprint_sha256?: string;
 
   /**
-   * Date that the Client Certificate was issued by the Certificate Authority
+   * Date that the Client Certificate was issued by the Certificate Authority.
    */
   issued_on?: string;
 
   /**
-   * Location, provided by the CSR
+   * Location, provided by the CSR.
    */
   location?: string;
 
   /**
-   * Organization, provided by the CSR
+   * Organization, provided by the CSR.
    */
   organization?: string;
 
   /**
-   * Organizational Unit, provided by the CSR
+   * Organizational Unit, provided by the CSR.
    */
   organizational_unit?: string;
 
@@ -212,30 +212,31 @@ export interface ClientCertificate {
   signature?: string;
 
   /**
-   * Subject Key Identifier
+   * Subject Key Identifier.
    */
   ski?: string;
 
   /**
-   * State, provided by the CSR
+   * State, provided by the CSR.
    */
   state?: string;
 
   /**
    * Client Certificates may be active or revoked, and the pending_reactivation or
-   * pending_revocation represent in-progress asynchronous transitions
+   * pending_revocation represent in-progress asynchronous transitions.
    */
   status?: CustomCertificatesAPI.Status;
 
   /**
-   * The number of days the Client Certificate will be valid after the issued_on date
+   * The number of days the Client Certificate will be valid after the issued_on
+   * date.
    */
   validity_days?: number;
 }
 
 export namespace ClientCertificate {
   /**
-   * Certificate Authority used to issue the Client Certificate
+   * Certificate Authority used to issue the Client Certificate.
    */
   export interface CertificateAuthority {
     id?: string;
@@ -257,7 +258,7 @@ export interface ClientCertificateCreateParams {
 
   /**
    * Body param: The number of days the Client Certificate will be valid after the
-   * issued_on date
+   * issued_on date.
    */
   validity_days: number;
 }
@@ -274,7 +275,7 @@ export interface ClientCertificateListParams extends V4PagePaginationArrayParams
   limit?: number;
 
   /**
-   * Query param: Offset the results
+   * Query param: Offset the results.
    */
   offset?: number;
 

package/src/resources/cloudforce-one/binary-storage.ts

@@ -5,7 +5,8 @@ import * as Core from '../../core';
 
 export class BinaryStorage extends APIResource {
   /**
-   * Posts a file to Binary Storage
+   * Uploads a binary file to Cloudforce One's binary database for malware analysis
+   * and threat intelligence correlation.
    *
    * @example
    * ```ts
@@ -28,7 +29,7 @@ export class BinaryStorage extends APIResource {
   }
 
   /**
-   * Retrieves a file from Binary Storage
+   * Retrieves a binary file from the Cloudforce One binary storage for analysis.
    *
    * @example
    * ```ts

package/src/resources/cloudforce-one/threat-events/countries.ts

@@ -32,6 +32,8 @@ export namespace CountryListResponse {
 
   export namespace CountryListResponseItem {
     export interface Result {
+      alpha2: string;
+
       alpha3: string;
 
       name: string;

package/src/resources/csam-scanner/api.md

@@ -0,0 +1,11 @@
+# CsamScanner
+
+Types:
+
+- <code><a href="./src/resources/csam-scanner.ts">CsamScannerEditResponse</a></code>
+- <code><a href="./src/resources/csam-scanner.ts">CsamScannerGetResponse</a></code>
+
+Methods:
+
+- <code title="patch /zones/{zone_id}/settings/csam_scanner_third_party">client.csamScanner.<a href="./src/resources/csam-scanner.ts">edit</a>({ ...params }) -> CsamScannerEditResponse</code>
+- <code title="get /zones/{zone_id}/settings/csam_scanner_third_party">client.csamScanner.<a href="./src/resources/csam-scanner.ts">get</a>({ ...params }) -> CsamScannerGetResponse</code>

package/src/resources/csam-scanner/csam-scanner.ts

@@ -0,0 +1,244 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+import { APIResource } from '../../resource';
+import * as Core from '../../core';
+
+export class CsamScanner extends APIResource {
+  /**
+   * Update the CSAM Scanner configuration for a zone. Allows enabling or disabling
+   * CSAM scanning, updating the notification email, and configuring scanning
+   * sources.
+   *
+   * When a new email is provided, email verification is triggered automatically. The
+   * `enabled` field is a toggle; the server may adjust it based on whether the
+   * notification email is verified.
+   *
+   * Returns 403 if the zone or account is locked by Trust & Safety.
+   *
+   * @example
+   * ```ts
+   * const response = await client.csamScanner.edit({
+   *   zone_id: '023e105f4ecef8ad9ca31a8372d0c353',
+   * });
+   * ```
+   */
+  edit(
+    params: CsamScannerEditParams,
+    options?: Core.RequestOptions,
+  ): Core.APIPromise<CsamScannerEditResponse> {
+    const { zone_id, ...body } = params;
+    return (
+      this._client.patch(`/zones/${zone_id}/settings/csam_scanner_third_party`, {
+        body,
+        ...options,
+      }) as Core.APIPromise<{ result: CsamScannerEditResponse }>
+    )._thenUnwrap((obj) => obj.result);
+  }
+
+  /**
+   * Retrieve the current CSAM Scanner configuration for a zone.
+   *
+   * The notification email is masked by default in responses.
+   *
+   * @example
+   * ```ts
+   * const csamScanner = await client.csamScanner.get({
+   *   zone_id: '023e105f4ecef8ad9ca31a8372d0c353',
+   * });
+   * ```
+   */
+  get(params: CsamScannerGetParams, options?: Core.RequestOptions): Core.APIPromise<CsamScannerGetResponse> {
+    const { zone_id } = params;
+    return (
+      this._client.get(`/zones/${zone_id}/settings/csam_scanner_third_party`, options) as Core.APIPromise<{
+        result: CsamScannerGetResponse;
+      }>
+    )._thenUnwrap((obj) => obj.result);
+  }
+}
+
+/**
+ * CSAM Scanner configuration for a zone.
+ */
+export interface CsamScannerEditResponse {
+  /**
+   * The feature identifier.
+   */
+  id?: 'csam_scanner';
+
+  /**
+   * Whether the feature state can be changed. When false, the zone or account may be
+   * locked by Trust & Safety.
+   */
+  editable?: boolean;
+
+  /**
+   * When the setting was last modified. Currently always null as the server does not
+   * populate this field.
+   */
+  modified_on?: string | null;
+
+  /**
+   * The CSAM Scanner feature configuration values. Contains the notification email
+   * and scanning enablement settings.
+   */
+  value?: CsamScannerEditResponse.Value;
+}
+
+export namespace CsamScannerEditResponse {
+  /**
+   * The CSAM Scanner feature configuration values. Contains the notification email
+   * and scanning enablement settings.
+   */
+  export interface Value {
+    /**
+     * Notification email address for CSAM scan results. Masked in responses unless
+     * explicitly unmasked via admin endpoint.
+     */
+    email?: string;
+
+    /**
+     * Current verification state of the notification email.
+     */
+    email_state?: 'valid' | 'pending' | 'unverified';
+
+    /**
+     * Whether CSAM scanning is enabled for this zone.
+     */
+    enabled?: boolean;
+
+    /**
+     * Map of scanning sources and their enabled state.
+     */
+    sources?: { [key: string]: boolean };
+
+    /**
+     * The zone's plan level.
+     */
+    zone_plan?: string;
+  }
+}
+
+/**
+ * CSAM Scanner configuration for a zone.
+ */
+export interface CsamScannerGetResponse {
+  /**
+   * The feature identifier.
+   */
+  id?: 'csam_scanner';
+
+  /**
+   * Whether the feature state can be changed. When false, the zone or account may be
+   * locked by Trust & Safety.
+   */
+  editable?: boolean;
+
+  /**
+   * When the setting was last modified. Currently always null as the server does not
+   * populate this field.
+   */
+  modified_on?: string | null;
+
+  /**
+   * The CSAM Scanner feature configuration values. Contains the notification email
+   * and scanning enablement settings.
+   */
+  value?: CsamScannerGetResponse.Value;
+}
+
+export namespace CsamScannerGetResponse {
+  /**
+   * The CSAM Scanner feature configuration values. Contains the notification email
+   * and scanning enablement settings.
+   */
+  export interface Value {
+    /**
+     * Notification email address for CSAM scan results. Masked in responses unless
+     * explicitly unmasked via admin endpoint.
+     */
+    email?: string;
+
+    /**
+     * Current verification state of the notification email.
+     */
+    email_state?: 'valid' | 'pending' | 'unverified';
+
+    /**
+     * Whether CSAM scanning is enabled for this zone.
+     */
+    enabled?: boolean;
+
+    /**
+     * Map of scanning sources and their enabled state.
+     */
+    sources?: { [key: string]: boolean };
+
+    /**
+     * The zone's plan level.
+     */
+    zone_plan?: string;
+  }
+}
+
+export interface CsamScannerEditParams {
+  /**
+   * Path param: Identifier for the zone.
+   */
+  zone_id: string;
+
+  /**
+   * Body param: The feature identifier.
+   */
+  id?: 'csam_scanner';
+
+  /**
+   * Body param: Writable CSAM Scanner feature configuration values.
+   */
+  value?: CsamScannerEditParams.Value;
+}
+
+export namespace CsamScannerEditParams {
+  /**
+   * Writable CSAM Scanner feature configuration values.
+   */
+  export interface Value {
+    /**
+     * Notification email address for CSAM scan results. When changed, email
+     * verification is triggered automatically.
+     */
+    email?: string;
+
+    /**
+     * Whether CSAM scanning is enabled for this zone.
+     */
+    enabled?: boolean;
+
+    /**
+     * Set to true to trigger re-sending the email verification. Write-only; never
+     * appears in responses (omitted when false).
+     */
+    resend_email?: boolean;
+
+    /**
+     * Map of scanning sources and their enabled state.
+     */
+    sources?: { [key: string]: boolean };
+  }
+}
+
+export interface CsamScannerGetParams {
+  /**
+   * Identifier for the zone.
+   */
+  zone_id: string;
+}
+
+export declare namespace CsamScanner {
+  export {
+    type CsamScannerEditResponse as CsamScannerEditResponse,
+    type CsamScannerGetResponse as CsamScannerGetResponse,
+    type CsamScannerEditParams as CsamScannerEditParams,
+    type CsamScannerGetParams as CsamScannerGetParams,
+  };
+}

package/src/resources/csam-scanner/index.ts

@@ -0,0 +1,3 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+export { CsamScanner } from './csam-scanner';

package/src/resources/csam-scanner.ts

@@ -0,0 +1,3 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+export * from './csam-scanner/index';

package/src/resources/custom-certificates/custom-certificates.ts

@@ -21,8 +21,6 @@ export class CustomCertificates extends APIResource {
    *     zone_id: '023e105f4ecef8ad9ca31a8372d0c353',
    *     certificate:
    *       '-----BEGIN CERTIFICATE-----\nMIIDtTCCAp2gAwIBAgIJAMHAwfXZ5/PWMA0GCSqGSIb3DQEBCwUAMEUxCzAJBgNV\nBAYTAkFVMRMwEQYDVQQIEwpTb21lLVN0YXRlMSEwHwYDVQQKExhJbnRlcm5ldCBX\naWRnaXRzIFB0eSBMdGQwHhcNMTYwODI0MTY0MzAxWhcNMTYxMTIyMTY0MzAxWjBF\nMQswCQYDVQQGEwJBVTETMBEGA1UECBMKU29tZS1TdGF0ZTEhMB8GA1UEChMYSW50\nZXJuZXQgV2lkZ2l0cyBQdHkgTHRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB\nCgKCAQEAwQHoetcl9+5ikGzV6cMzWtWPJHqXT3wpbEkRU9Yz7lgvddmGdtcGbg/1\nCGZu0jJGkMoppoUo4c3dts3iwqRYmBikUP77wwY2QGmDZw2FvkJCJlKnabIRuGvB\nKwzESIXgKk2016aTP6/dAjEHyo6SeoK8lkIySUvK0fyOVlsiEsCmOpidtnKX/a+5\n0GjB79CJH4ER2lLVZnhePFR/zUOyPxZQQ4naHf7yu/b5jhO0f8fwt+pyFxIXjbEI\ndZliWRkRMtzrHOJIhrmJ2A1J7iOrirbbwillwjjNVUWPf3IJ3M12S9pEewooaeO2\nizNTERcG9HzAacbVRn2Y2SWIyT/18QIDAQABo4GnMIGkMB0GA1UdDgQWBBT/LbE4\n9rWf288N6sJA5BRb6FJIGDB1BgNVHSMEbjBsgBT/LbE49rWf288N6sJA5BRb6FJI\nGKFJpEcwRTELMAkGA1UEBhMCQVUxEzARBgNVBAgTClNvbWUtU3RhdGUxITAfBgNV\nBAoTGEludGVybmV0IFdpZGdpdHMgUHR5IEx0ZIIJAMHAwfXZ5/PWMAwGA1UdEwQF\nMAMBAf8wDQYJKoZIhvcNAQELBQADggEBAHHFwl0tH0quUYZYO0dZYt4R7SJ0pCm2\n2satiyzHl4OnXcHDpekAo7/a09c6Lz6AU83cKy/+x3/djYHXWba7HpEu0dR3ugQP\nMlr4zrhd9xKZ0KZKiYmtJH+ak4OM4L3FbT0owUZPyjLSlhMtJVcoRp5CJsjAMBUG\nSvD8RX+T01wzox/Qb+lnnNnOlaWpqu8eoOenybxKp1a9ULzIVvN/LAcc+14vioFq\n2swRWtmocBAs8QR9n4uvbpiYvS8eYueDCWMM4fvFfBhaDZ3N9IbtySh3SpFdQDhw\nYbjM2rxXiyLGxB4Bol7QTv4zHif7Zt89FReT/NBy4rzaskDJY5L6xmY=\n-----END CERTIFICATE-----\n',
-   *     private_key:
-   *       '-----BEGIN RSA PRIVATE KEY-----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\nlv6XTQaMyf6n1yjzL+fzDrH3qXMxHMO/b13EePXpDMpY7HQpoLDi\n-----END RSA PRIVATE KEY-----\n',
    *   });
    * ```
    */
@@ -269,7 +267,7 @@ export interface GeoRestrictionsParam {
 
 /**
  * Client Certificates may be active or revoked, and the pending_reactivation or
- * pending_revocation represent in-progress asynchronous transitions
+ * pending_revocation represent in-progress asynchronous transitions.
  */
 export type Status = 'active' | 'pending_reactivation' | 'pending_revocation' | 'revoked';
 
@@ -291,11 +289,6 @@ export interface CustomCertificateCreateParams {
    */
   certificate: string;
 
-  /**
-   * Body param: The zone's private key.
-   */
-  private_key: string;
-
   /**
    * Body param: A ubiquitous bundle has the highest probability of being verified
    * everywhere, even by clients using outdated or unusual trust stores. An optimal
@@ -310,7 +303,8 @@ export interface CustomCertificateCreateParams {
   custom_csr_id?: string;
 
   /**
-   * Body param: The environment to deploy the certificate to, defaults to production
+   * Body param: The environment to deploy the certificate to, defaults to
+   * production.
    */
   deploy?: 'staging' | 'production';
 
@@ -340,6 +334,13 @@ export interface CustomCertificateCreateParams {
    */
   policy?: string;
 
+  /**
+   * Body param: The zone's private key. Not required if custom_csr_id is provided,
+   * in which case the private key is retrieved from the CSR record held by
+   * Cloudflare.
+   */
+  private_key?: string;
+
   /**
    * Body param: The type 'legacy_custom' enables support for legacy clients which do
    * not include SNI in the TLS handshake.
@@ -396,7 +397,8 @@ export interface CustomCertificateEditParams {
   custom_csr_id?: string;
 
   /**
-   * Body param: The environment to deploy the certificate to, defaults to production
+   * Body param: The environment to deploy the certificate to, defaults to
+   * production.
    */
   deploy?: 'staging' | 'production';
 
@@ -427,7 +429,9 @@ export interface CustomCertificateEditParams {
   policy?: string;
 
   /**
-   * Body param: The zone's private key.
+   * Body param: The zone's private key. Not required if custom_csr_id is provided,
+   * in which case the private key is retrieved from the CSR record held by
+   * Cloudflare.
    */
   private_key?: string;
 }

package/src/resources/custom-csrs/api.md

@@ -0,0 +1,16 @@
+# CustomCsrs
+
+Types:
+
+- <code><a href="./src/resources/custom-csrs.ts">CustomCsr</a></code>
+- <code><a href="./src/resources/custom-csrs.ts">CustomCsrCreateResponse</a></code>
+- <code><a href="./src/resources/custom-csrs.ts">CustomCsrListResponse</a></code>
+- <code><a href="./src/resources/custom-csrs.ts">CustomCsrDeleteResponse</a></code>
+- <code><a href="./src/resources/custom-csrs.ts">CustomCsrGetResponse</a></code>
+
+Methods:
+
+- <code title="post /{accounts_or_zones}/{account_or_zone_id}/custom_csrs">client.customCsrs.<a href="./src/resources/custom-csrs.ts">create</a>({ ...params }) -> CustomCsrCreateResponse</code>
+- <code title="get /{accounts_or_zones}/{account_or_zone_id}/custom_csrs">client.customCsrs.<a href="./src/resources/custom-csrs.ts">list</a>({ ...params }) -> CustomCsrListResponsesV4PagePaginationArray</code>
+- <code title="delete /{accounts_or_zones}/{account_or_zone_id}/custom_csrs/{custom_csr_id}">client.customCsrs.<a href="./src/resources/custom-csrs.ts">delete</a>(customCsrId, { ...params }) -> CustomCsrDeleteResponse</code>
+- <code title="get /{accounts_or_zones}/{account_or_zone_id}/custom_csrs/{custom_csr_id}">client.customCsrs.<a href="./src/resources/custom-csrs.ts">get</a>(customCsrId, { ...params }) -> CustomCsrGetResponse</code>