cloudflare 6.2.0 → 6.4.0

package/src/resources/iam/oauth-scopes.ts

@@ -0,0 +1,63 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+import { APIResource } from '../../resource';
+import * as Core from '../../core';
+import { SinglePage } from '../../pagination';
+
+export class OAuthScopes extends APIResource {
+  /**
+   * List all available OAuth scopes. This endpoint requires authentication but has
+   * no authorization role requirements.
+   *
+   * @example
+   * ```ts
+   * // Automatically fetches more pages as needed.
+   * for await (const oauthScopeListResponse of client.iam.oauthScopes.list()) {
+   *   // ...
+   * }
+   * ```
+   */
+  list(
+    options?: Core.RequestOptions,
+  ): Core.PagePromise<OAuthScopeListResponsesSinglePage, OAuthScopeListResponse> {
+    return this._client.getAPIList('/oauth/scopes', OAuthScopeListResponsesSinglePage, options);
+  }
+}
+
+export class OAuthScopeListResponsesSinglePage extends SinglePage<OAuthScopeListResponse> {}
+
+/**
+ * An available OAuth scope that can be assigned to an OAuth client.
+ */
+export interface OAuthScopeListResponse {
+  /**
+   * The scope label to use in the scopes array when creating or updating an OAuth
+   * client.
+   */
+  id: string;
+
+  /**
+   * Human-readable name of the OAuth scope.
+   */
+  name: string;
+
+  /**
+   * Category for grouping scopes in the UI.
+   */
+  category?: string;
+
+  /**
+   * The underlying resource scopes (Bach scopes) that define which resources this
+   * OAuth scope can act upon.
+   */
+  scopes?: Array<string>;
+}
+
+OAuthScopes.OAuthScopeListResponsesSinglePage = OAuthScopeListResponsesSinglePage;
+
+export declare namespace OAuthScopes {
+  export {
+    type OAuthScopeListResponse as OAuthScopeListResponse,
+    OAuthScopeListResponsesSinglePage as OAuthScopeListResponsesSinglePage,
+  };
+}

package/src/resources/index.ts

@@ -3,6 +3,7 @@
 export * from './shared';
 export { ACM } from './acm/acm';
 export { AI } from './ai/ai';
+export { AIAudit } from './ai-audit/ai-audit';
 export { AIGateway } from './ai-gateway/ai-gateway';
 export { AISearch } from './aisearch/aisearch';
 export { AISecurity } from './ai-security/ai-security';
@@ -26,13 +27,16 @@ export { CloudConnector } from './cloud-connector/cloud-connector';
 export { CloudforceOne } from './cloudforce-one/cloudforce-one';
 export { Connectivity } from './connectivity/connectivity';
 export { ContentScanning } from './content-scanning/content-scanning';
+export { CsamScanner } from './csam-scanner';
 export { CustomCertificates } from './custom-certificates/custom-certificates';
+export { CustomCsrs } from './custom-csrs';
 export { CustomHostnames } from './custom-hostnames/custom-hostnames';
 export { CustomNameservers } from './custom-nameservers';
 export { CustomPages } from './custom-pages/custom-pages';
 export { D1Resource } from './d1/d1';
 export { DCVDelegation } from './dcv-delegation';
 export { DDoSProtection } from './ddos-protection/ddos-protection';
+export { DLS } from './dls/dls';
 export { DNS } from './dns/dns';
 export { DNSFirewall } from './dns-firewall/dns-firewall';
 export { Diagnostics } from './diagnostics/diagnostics';
@@ -42,6 +46,7 @@ export { EmailSecurity } from './email-security/email-security';
 export { EmailSending } from './email-sending/email-sending';
 export { Filters } from './filters';
 export { Firewall } from './firewall/firewall';
+export { Flagship } from './flagship/flagship';
 export { Fraud } from './fraud';
 export { GoogleTagGateway } from './google-tag-gateway/google-tag-gateway';
 export { Healthchecks } from './healthchecks/healthchecks';
@@ -68,6 +73,7 @@ export { Organizations } from './organizations/organizations';
 export { OriginCACertificates } from './origin-ca-certificates';
 export { OriginPostQuantumEncryption } from './origin-post-quantum-encryption';
 export { OriginTLSClientAuth } from './origin-tls-client-auth/origin-tls-client-auth';
+export { OriginTLSComplianceModes } from './origin-tls-compliance-modes';
 export { PageRules } from './page-rules';
 export { PageShield } from './page-shield/page-shield';
 export { Pages } from './pages/pages';
@@ -94,6 +100,7 @@ export { Snippets } from './snippets/snippets';
 export { Spectrum } from './spectrum/spectrum';
 export { Speed } from './speed/speed';
 export { Stream } from './stream/stream';
+export { TenantCustomNameservers } from './tenant-custom-nameservers';
 export { TokenValidation } from './token-validation/token-validation';
 export { Turnstile } from './turnstile/turnstile';
 export { URLNormalization } from './url-normalization';

package/src/resources/intel/indicator-feeds/snapshots.ts

@@ -7,6 +7,14 @@ export class Snapshots extends APIResource {
   /**
    * Revises the raw data entries in a custom threat indicator feed.
    *
+   * Accepts both plain and gzipped STIX2/CRDF bodies. Gzip is detected by RFC 1952
+   * magic bytes (`0x1f 0x8b`) and/or a `.gz` filename suffix (case-insensitive) —
+   * either signal alone is sufficient to trigger the gzip path; if the body is not
+   * valid gzip, the upload fails fast. Customers are encouraged to gzip larger
+   * uploads — the api-gateway 500 MB body cap applies to the on-the-wire
+   * (compressed) size, so gzip lets a single upload carry several GiB of
+   * decompressed STIX.
+   *
    * @example
    * ```ts
    * const snapshot =
@@ -54,7 +62,8 @@ export interface SnapshotUpdateParams {
   account_id: string;
 
   /**
-   * Body param: The file to upload
+   * Body param: The file to upload. Either a plain STIX2/CRDF body or a gzipped one
+   * (recognised by `0x1f 0x8b` magic bytes or a `.gz` filename suffix).
    */
   source?: string;
 }

package/src/resources/intel/sinkholes.ts

@@ -6,7 +6,7 @@ import { SinglePage } from '../../pagination';
 
 export class Sinkholes extends APIResource {
   /**
-   * List sinkholes owned by this account
+   * Lists sinkholes owned by the account for redirecting malicious traffic.
    *
    * @example
    * ```ts
@@ -31,44 +31,44 @@ export class SinkholesSinglePage extends SinglePage<Sinkhole> {}
 
 export interface Sinkhole {
   /**
-   * The unique identifier for the sinkhole
+   * The unique identifier for the sinkhole.
    */
-  id?: number;
+  id?: string;
 
   /**
-   * The account tag that owns this sinkhole
+   * The account tag that owns this sinkhole.
    */
   account_tag?: string;
 
   /**
-   * The date and time when the sinkhole was created
+   * The date and time when the sinkhole was created.
    */
   created_on?: string;
 
   /**
-   * The date and time when the sinkhole was last modified
+   * The date and time when the sinkhole was last modified.
    */
   modified_on?: string;
 
   /**
-   * The name of the sinkhole
+   * The name of the sinkhole.
    */
   name?: string;
 
   /**
-   * The name of the R2 bucket to store results
+   * The name of the R2 bucket to store results.
    */
   r2_bucket?: string;
 
   /**
-   * The id of the R2 instance
+   * The id of the R2 instance.
    */
   r2_id?: string;
 }
 
 export interface SinkholeListParams {
   /**
-   * Identifier
+   * Identifier.
    */
   account_id: string;
 }

package/src/resources/keyless-certificates/keyless-certificates.ts

@@ -191,37 +191,37 @@ export interface KeylessCertificate {
   status: 'active' | 'deleted';
 
   /**
-   * Configuration for using Keyless SSL through a Cloudflare Tunnel
+   * Configuration for using Keyless SSL through a Cloudflare Tunnel.
    */
   tunnel?: Tunnel;
 }
 
 /**
- * Configuration for using Keyless SSL through a Cloudflare Tunnel
+ * Configuration for using Keyless SSL through a Cloudflare Tunnel.
  */
 export interface Tunnel {
   /**
-   * Private IP of the Key Server Host
+   * Private IP of the Key Server Host.
    */
   private_ip: string;
 
   /**
-   * Cloudflare Tunnel Virtual Network ID
+   * Cloudflare Tunnel Virtual Network ID.
    */
   vnet_id: string;
 }
 
 /**
- * Configuration for using Keyless SSL through a Cloudflare Tunnel
+ * Configuration for using Keyless SSL through a Cloudflare Tunnel.
  */
 export interface TunnelParam {
   /**
-   * Private IP of the Key Server Host
+   * Private IP of the Key Server Host.
    */
   private_ip: string;
 
   /**
-   * Cloudflare Tunnel Virtual Network ID
+   * Cloudflare Tunnel Virtual Network ID.
    */
   vnet_id: string;
 }
@@ -269,7 +269,7 @@ export interface KeylessCertificateCreateParams {
   name?: string;
 
   /**
-   * Body param: Configuration for using Keyless SSL through a Cloudflare Tunnel
+   * Body param: Configuration for using Keyless SSL through a Cloudflare Tunnel.
    */
   tunnel?: TunnelParam;
 }
@@ -316,7 +316,7 @@ export interface KeylessCertificateEditParams {
   port?: number;
 
   /**
-   * Body param: Configuration for using Keyless SSL through a Cloudflare Tunnel
+   * Body param: Configuration for using Keyless SSL through a Cloudflare Tunnel.
    */
   tunnel?: TunnelParam;
 }

package/src/resources/logpush/datasets/fields.ts

@@ -41,14 +41,17 @@ export class Fields extends APIResource {
       | 'ipsec_logs'
       | 'magic_ids_detections'
       | 'mcp_portal_logs'
+      | 'mnm_flow_logs'
       | 'nel_reports'
       | 'network_analytics_logs'
       | 'page_shield_events'
       | 'sinkhole_http_logs'
       | 'spectrum_events'
       | 'ssh_logs'
+      | 'turnstile_events'
       | 'warp_config_changes'
       | 'warp_toggle_changes'
+      | 'websocket_analytics'
       | 'workers_trace_events'
       | 'zaraz_events'
       | 'zero_trust_network_sessions',
@@ -78,14 +81,17 @@ export class Fields extends APIResource {
       | 'ipsec_logs'
       | 'magic_ids_detections'
       | 'mcp_portal_logs'
+      | 'mnm_flow_logs'
       | 'nel_reports'
       | 'network_analytics_logs'
       | 'page_shield_events'
       | 'sinkhole_http_logs'
       | 'spectrum_events'
       | 'ssh_logs'
+      | 'turnstile_events'
       | 'warp_config_changes'
       | 'warp_toggle_changes'
+      | 'websocket_analytics'
       | 'workers_trace_events'
       | 'zaraz_events'
       | 'zero_trust_network_sessions',
@@ -114,14 +120,17 @@ export class Fields extends APIResource {
       | 'ipsec_logs'
       | 'magic_ids_detections'
       | 'mcp_portal_logs'
+      | 'mnm_flow_logs'
       | 'nel_reports'
       | 'network_analytics_logs'
       | 'page_shield_events'
       | 'sinkhole_http_logs'
       | 'spectrum_events'
       | 'ssh_logs'
+      | 'turnstile_events'
       | 'warp_config_changes'
       | 'warp_toggle_changes'
+      | 'websocket_analytics'
       | 'workers_trace_events'
       | 'zaraz_events'
       | 'zero_trust_network_sessions',

package/src/resources/logpush/datasets/jobs.ts

@@ -45,14 +45,17 @@ export class Jobs extends APIResource {
       | 'ipsec_logs'
       | 'magic_ids_detections'
       | 'mcp_portal_logs'
+      | 'mnm_flow_logs'
       | 'nel_reports'
       | 'network_analytics_logs'
       | 'page_shield_events'
       | 'sinkhole_http_logs'
       | 'spectrum_events'
       | 'ssh_logs'
+      | 'turnstile_events'
       | 'warp_config_changes'
       | 'warp_toggle_changes'
+      | 'websocket_analytics'
       | 'workers_trace_events'
       | 'zaraz_events'
       | 'zero_trust_network_sessions',
@@ -82,14 +85,17 @@ export class Jobs extends APIResource {
       | 'ipsec_logs'
       | 'magic_ids_detections'
       | 'mcp_portal_logs'
+      | 'mnm_flow_logs'
       | 'nel_reports'
       | 'network_analytics_logs'
       | 'page_shield_events'
       | 'sinkhole_http_logs'
       | 'spectrum_events'
       | 'ssh_logs'
+      | 'turnstile_events'
       | 'warp_config_changes'
       | 'warp_toggle_changes'
+      | 'websocket_analytics'
       | 'workers_trace_events'
       | 'zaraz_events'
       | 'zero_trust_network_sessions',
@@ -118,14 +124,17 @@ export class Jobs extends APIResource {
       | 'ipsec_logs'
       | 'magic_ids_detections'
       | 'mcp_portal_logs'
+      | 'mnm_flow_logs'
       | 'nel_reports'
       | 'network_analytics_logs'
       | 'page_shield_events'
       | 'sinkhole_http_logs'
       | 'spectrum_events'
       | 'ssh_logs'
+      | 'turnstile_events'
       | 'warp_config_changes'
       | 'warp_toggle_changes'
+      | 'websocket_analytics'
       | 'workers_trace_events'
       | 'zaraz_events'
       | 'zero_trust_network_sessions',

package/src/resources/logpush/jobs.ts

@@ -307,14 +307,17 @@ export interface LogpushJob {
     | 'ipsec_logs'
     | 'magic_ids_detections'
     | 'mcp_portal_logs'
+    | 'mnm_flow_logs'
     | 'nel_reports'
     | 'network_analytics_logs'
     | 'page_shield_events'
     | 'sinkhole_http_logs'
     | 'spectrum_events'
     | 'ssh_logs'
+    | 'turnstile_events'
     | 'warp_config_changes'
     | 'warp_toggle_changes'
+    | 'websocket_analytics'
     | 'workers_trace_events'
     | 'zaraz_events'
     | 'zero_trust_network_sessions'
@@ -635,14 +638,17 @@ export interface JobCreateParams {
     | 'ipsec_logs'
     | 'magic_ids_detections'
     | 'mcp_portal_logs'
+    | 'mnm_flow_logs'
     | 'nel_reports'
     | 'network_analytics_logs'
     | 'page_shield_events'
     | 'sinkhole_http_logs'
     | 'spectrum_events'
     | 'ssh_logs'
+    | 'turnstile_events'
     | 'warp_config_changes'
     | 'warp_toggle_changes'
+    | 'websocket_analytics'
     | 'workers_trace_events'
     | 'zaraz_events'
     | 'zero_trust_network_sessions'

package/src/resources/magic-transit/connectors/events/events.ts

@@ -121,7 +121,12 @@ export interface EventGetResponse {
     | EventGetResponse.FinishUpgradeSuccess
     | EventGetResponse.FinishUpgradeFailure
     | EventGetResponse.Reconcile
-    | EventGetResponse.ConfigureCloudflaredTunnel;
+    | EventGetResponse.ConfigureCloudflaredTunnel
+    | EventGetResponse.RekeyInstallBoth
+    | EventGetResponse.RekeyStart
+    | EventGetResponse.RekeyAdvance
+    | EventGetResponse.RekeyComplete
+    | EventGetResponse.RekeyReset;
 
   /**
    * Sequence number, used to order events with the same timestamp
@@ -256,6 +261,66 @@ export namespace EventGetResponse {
      */
     k: 'ConfigureCloudflaredTunnel';
   }
+
+  export interface RekeyInstallBoth {
+    /**
+     * Installed initial inbound and outbound keys
+     */
+    k: 'RekeyInstallBoth';
+
+    /**
+     * Tunnel identifier
+     */
+    tunnel_id: string;
+  }
+
+  export interface RekeyStart {
+    /**
+     * Installed new inbound key, kept old outbound
+     */
+    k: 'RekeyStart';
+
+    /**
+     * Tunnel identifier
+     */
+    tunnel_id: string;
+  }
+
+  export interface RekeyAdvance {
+    /**
+     * Confirmed traffic on new inbound key, swapped outbound to new
+     */
+    k: 'RekeyAdvance';
+
+    /**
+     * Tunnel identifier
+     */
+    tunnel_id: string;
+  }
+
+  export interface RekeyComplete {
+    /**
+     * Deleted old keys
+     */
+    k: 'RekeyComplete';
+
+    /**
+     * Tunnel identifier
+     */
+    tunnel_id: string;
+  }
+
+  export interface RekeyReset {
+    /**
+     * Deleted all keys after receiving an unexpected key
+     */
+    k: 'RekeyReset';
+
+    /**
+     * Tunnel identifier
+     */
+    tunnel_id: string;
+  }
 }
 
 export interface EventListParams {

package/src/resources/magic-transit/connectors/events/latest.ts

@@ -58,7 +58,12 @@ export namespace LatestListResponse {
       | Item.FinishUpgradeSuccess
       | Item.FinishUpgradeFailure
       | Item.Reconcile
-      | Item.ConfigureCloudflaredTunnel;
+      | Item.ConfigureCloudflaredTunnel
+      | Item.RekeyInstallBoth
+      | Item.RekeyStart
+      | Item.RekeyAdvance
+      | Item.RekeyComplete
+      | Item.RekeyReset;
 
     /**
      * Sequence number, used to order events with the same timestamp
@@ -193,6 +198,66 @@ export namespace LatestListResponse {
        */
       k: 'ConfigureCloudflaredTunnel';
     }
+
+    export interface RekeyInstallBoth {
+      /**
+       * Installed initial inbound and outbound keys
+       */
+      k: 'RekeyInstallBoth';
+
+      /**
+       * Tunnel identifier
+       */
+      tunnel_id: string;
+    }
+
+    export interface RekeyStart {
+      /**
+       * Installed new inbound key, kept old outbound
+       */
+      k: 'RekeyStart';
+
+      /**
+       * Tunnel identifier
+       */
+      tunnel_id: string;
+    }
+
+    export interface RekeyAdvance {
+      /**
+       * Confirmed traffic on new inbound key, swapped outbound to new
+       */
+      k: 'RekeyAdvance';
+
+      /**
+       * Tunnel identifier
+       */
+      tunnel_id: string;
+    }
+
+    export interface RekeyComplete {
+      /**
+       * Deleted old keys
+       */
+      k: 'RekeyComplete';
+
+      /**
+       * Tunnel identifier
+       */
+      tunnel_id: string;
+    }
+
+    export interface RekeyReset {
+      /**
+       * Deleted all keys after receiving an unexpected key
+       */
+      k: 'RekeyReset';
+
+      /**
+       * Tunnel identifier
+       */
+      tunnel_id: string;
+    }
   }
 }
 

package/src/resources/magic-transit/ipsec-tunnels.ts

@@ -207,10 +207,10 @@ export class IPSECTunnels extends APIResource {
   }
 
   /**
-   * Generates a Pre Shared Key for a specific IPsec tunnel used in the IKE session.
+   * Generates a Pre-Shared Key for a specific IPsec tunnel used in the IKE session.
    * Use `?validate_only=true` as an optional query parameter to only run validation
    * without persisting changes. After a PSK is generated, the PSK is immediately
-   * persisted to Cloudflare's edge and cannot be retrieved later. Note the PSK in a
+   * persisted to Cloudflare's edge and cannot be retrieved later. Store the PSK in a
    * safe place.
    *
    * @example

package/src/resources/managed-transforms/managed-transforms.ts

@@ -207,12 +207,12 @@ export interface ManagedTransformEditParams {
   /**
    * Body param: The list of Managed Request Transforms.
    */
-  managed_request_headers: Array<ManagedTransformEditParams.ManagedRequestHeader>;
+  managed_request_headers?: Array<ManagedTransformEditParams.ManagedRequestHeader>;
 
   /**
    * Body param: The list of Managed Response Transforms.
    */
-  managed_response_headers: Array<ManagedTransformEditParams.ManagedResponseHeader>;
+  managed_response_headers?: Array<ManagedTransformEditParams.ManagedResponseHeader>;
 }
 
 export namespace ManagedTransformEditParams {

package/src/resources/organizations/api.md

@@ -22,7 +22,7 @@ Types:
 Methods:
 
 - <code title="put /organizations/{organization_id}/profile">client.organizations.organizationProfile.<a href="./src/resources/organizations/organization-profile.ts">update</a>(organizationId, { ...params }) -> void</code>
-- <code title="get /organizations/{organization_id}/profile">client.organizations.organizationProfile.<a href="./src/resources/organizations/organization-profile.ts">get</a>(organizationId) -> organizations_api_ProfileResponse.Result</code>
+- <code title="get /organizations/{organization_id}/profile">client.organizations.organizationProfile.<a href="./src/resources/organizations/organization-profile.ts">get</a>(organizationId) -> OrganizationProfile</code>
 
 ## Logs
 
@@ -35,3 +35,15 @@ Types:
 Methods:
 
 - <code title="get /organizations/{organization_id}/logs/audit">client.organizations.logs.audit.<a href="./src/resources/organizations/logs/audit.ts">list</a>(organizationId, { ...params }) -> AuditListResponsesCursorPaginationAfter</code>
+
+## Billing
+
+### Usage
+
+Types:
+
+- <code><a href="./src/resources/organizations/billing/usage.ts">UsageGetResponse</a></code>
+
+Methods:
+
+- <code title="get /organizations/{organization_id}/billable/usage">client.organizations.billing.usage.<a href="./src/resources/organizations/billing/usage.ts">get</a>(organizationId, { ...params }) -> UsageGetResponse</code>

package/src/resources/organizations/billing/billing.ts

@@ -0,0 +1,15 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+import { APIResource } from '../../../resource';
+import * as UsageAPI from './usage';
+import { Usage, UsageGetParams, UsageGetResponse } from './usage';
+
+export class Billing extends APIResource {
+  usage: UsageAPI.Usage = new UsageAPI.Usage(this._client);
+}
+
+Billing.Usage = Usage;
+
+export declare namespace Billing {
+  export { Usage as Usage, type UsageGetResponse as UsageGetResponse, type UsageGetParams as UsageGetParams };
+}

package/src/resources/organizations/billing/index.ts

@@ -0,0 +1,4 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+export { Billing } from './billing';
+export { Usage, type UsageGetResponse, type UsageGetParams } from './usage';