cloudflare 6.3.0 → 6.4.0

package/resources/zones/holds.mjs

@@ -3,7 +3,7 @@ import { APIResource } from "../../resource.mjs";
 export class Holds extends APIResource {
     /**
      * Enforce a zone hold on the zone, blocking the creation and activation of zones
-     * with this zone's hostname.
+     * with this zone's hostname. Zone holds cannot be enabled on CDN-only zones.
      *
      * @example
      * ```ts
@@ -22,6 +22,9 @@ export class Holds extends APIResource {
     /**
      * Stop enforcement of a zone hold on the zone, permanently or temporarily,
      * allowing the creation and activation of zones with this zone's hostname.
+     * Existing zone holds can be removed from CDN-only zones when `hold_after` is not
+     * provided. Active holds are automatically disabled when a zone transitions to
+     * CDN-only mode.
      *
      * @example
      * ```ts
@@ -40,6 +43,9 @@ export class Holds extends APIResource {
     /**
      * Update the `hold_after` and/or `include_subdomains` values on an existing zone
      * hold. The hold is enabled if the `hold_after` date-time value is in the past.
+     * Existing zone holds can be removed from CDN-only zones by setting `hold_after`
+     * to `null`. Other zone hold updates cannot be made on CDN-only zones. Active
+     * holds are automatically disabled when a zone transitions to CDN-only mode.
      *
      * @example
      * ```ts

package/resources/zones/holds.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"holds.mjs","sourceRoot":"","sources":["../../src/resources/zones/holds.ts"],"names":[],"mappings":"AAAA,sFAAsF;OAE/E,EAAE,WAAW,EAAE;AAGtB,MAAM,OAAO,KAAM,SAAQ,WAAW;IACpC;;;;;;;;;;OAUG;IACH,MAAM,CAAC,MAAwB,EAAE,OAA6B;QAC5D,MAAM,EAAE,OAAO,EAAE,kBAAkB,EAAE,GAAG,MAAM,CAAC;QAC/C,OACE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,OAAO,OAAO,EAAE;YAC1C,KAAK,EAAE,EAAE,kBAAkB,EAAE;YAC7B,GAAG,OAAO;SACX,CACF,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED;;;;;;;;;;OAUG;IACH,MAAM,CAAC,MAAwB,EAAE,OAA6B;QAC5D,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;QACvC,OACE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,OAAO,OAAO,EAAE;YAC5C,KAAK,EAAE,EAAE,UAAU,EAAE;YACrB,GAAG,OAAO;SACX,CACF,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED;;;;;;;;;;OAUG;IACH,IAAI,CAAC,MAAsB,EAAE,OAA6B;QACxD,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;QACpC,OACE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,OAAO,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,CAGlE,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED;;;;;;;;;;OAUG;IACH,GAAG,CAAC,MAAqB,EAAE,OAA6B;QACtD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;QAC3B,OACE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,OAAO,OAAO,EAAE,OAAO,CACnD,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;CACF"}
+{"version":3,"file":"holds.mjs","sourceRoot":"","sources":["../../src/resources/zones/holds.ts"],"names":[],"mappings":"AAAA,sFAAsF;OAE/E,EAAE,WAAW,EAAE;AAGtB,MAAM,OAAO,KAAM,SAAQ,WAAW;IACpC;;;;;;;;;;OAUG;IACH,MAAM,CAAC,MAAwB,EAAE,OAA6B;QAC5D,MAAM,EAAE,OAAO,EAAE,kBAAkB,EAAE,GAAG,MAAM,CAAC;QAC/C,OACE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,OAAO,OAAO,EAAE;YAC1C,KAAK,EAAE,EAAE,kBAAkB,EAAE;YAC7B,GAAG,OAAO;SACX,CACF,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,MAAM,CAAC,MAAwB,EAAE,OAA6B;QAC5D,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;QACvC,OACE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,OAAO,OAAO,EAAE;YAC5C,KAAK,EAAE,EAAE,UAAU,EAAE;YACrB,GAAG,OAAO;SACX,CACF,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,IAAI,CAAC,MAAsB,EAAE,OAA6B;QACxD,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;QACpC,OACE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,OAAO,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,CAGlE,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED;;;;;;;;;;OAUG;IACH,GAAG,CAAC,MAAqB,EAAE,OAA6B;QACtD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;QAC3B,OACE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,OAAO,OAAO,EAAE,OAAO,CACnD,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;CACF"}

package/src/index.ts

@@ -24,6 +24,7 @@ import { AbuseReports } from './resources/abuse-reports/abuse-reports';
 import { Accounts } from './resources/accounts/accounts';
 import { ACM } from './resources/acm/acm';
 import { Addressing } from './resources/addressing/addressing';
+import { AIAudit } from './resources/ai-audit/ai-audit';
 import { AIGateway } from './resources/ai-gateway/ai-gateway';
 import { AISecurity } from './resources/ai-security/ai-security';
 import { AI } from './resources/ai/ai';
@@ -45,7 +46,9 @@ import { CloudConnector } from './resources/cloud-connector/cloud-connector';
 import { CloudforceOne } from './resources/cloudforce-one/cloudforce-one';
 import { Connectivity } from './resources/connectivity/connectivity';
 import { ContentScanning } from './resources/content-scanning/content-scanning';
+import { CsamScanner } from './resources/csam-scanner/csam-scanner';
 import { CustomCertificates } from './resources/custom-certificates/custom-certificates';
+import { CustomCsrs } from './resources/custom-csrs/custom-csrs';
 import { CustomHostnames } from './resources/custom-hostnames/custom-hostnames';
 import { CustomNameservers } from './resources/custom-nameservers/custom-nameservers';
 import { CustomPages } from './resources/custom-pages/custom-pages';
@@ -62,6 +65,7 @@ import { EmailSecurity } from './resources/email-security/email-security';
 import { EmailSending } from './resources/email-sending/email-sending';
 import { Filters } from './resources/filters/filters';
 import { Firewall } from './resources/firewall/firewall';
+import { Flagship } from './resources/flagship/flagship';
 import { Fraud } from './resources/fraud/fraud';
 import { GoogleTagGateway } from './resources/google-tag-gateway/google-tag-gateway';
 import { Healthchecks } from './resources/healthchecks/healthchecks';
@@ -88,6 +92,7 @@ import { Organizations } from './resources/organizations/organizations';
 import { OriginCACertificates } from './resources/origin-ca-certificates/origin-ca-certificates';
 import { OriginPostQuantumEncryption } from './resources/origin-post-quantum-encryption/origin-post-quantum-encryption';
 import { OriginTLSClientAuth } from './resources/origin-tls-client-auth/origin-tls-client-auth';
+import { OriginTLSComplianceModes } from './resources/origin-tls-compliance-modes/origin-tls-compliance-modes';
 import { PageRules } from './resources/page-rules/page-rules';
 import { PageShield } from './resources/page-shield/page-shield';
 import { Pages } from './resources/pages/pages';
@@ -114,6 +119,7 @@ import { Spectrum } from './resources/spectrum/spectrum';
 import { Speed } from './resources/speed/speed';
 import { SSL } from './resources/ssl/ssl';
 import { Stream } from './resources/stream/stream';
+import { TenantCustomNameservers } from './resources/tenant-custom-nameservers/tenant-custom-nameservers';
 import { TokenValidation } from './resources/token-validation/token-validation';
 import { Turnstile } from './resources/turnstile/turnstile';
 import { URLNormalization } from './resources/url-normalization/url-normalization';
@@ -271,6 +277,18 @@ export class Cloudflare extends Core.APIClient {
       fetch: options.fetch,
     });
 
+    const customHeadersEnv = Core.readEnv('CLOUDFLARE_CUSTOM_HEADERS');
+    if (customHeadersEnv) {
+      const parsed: Record<string, string> = {};
+      for (const line of customHeadersEnv.split('\n')) {
+        const colon = line.indexOf(':');
+        if (colon >= 0) {
+          parsed[line.substring(0, colon).trim()] = line.substring(colon + 1).trim();
+        }
+      }
+      options.defaultHeaders = { ...parsed, ...options.defaultHeaders };
+    }
+
     this._options = options;
 
     this.apiToken = apiToken;
@@ -294,8 +312,10 @@ export class Cloudflare extends Core.APIClient {
   certificateAuthorities: API.CertificateAuthorities = new API.CertificateAuthorities(this);
   clientCertificates: API.ClientCertificates = new API.ClientCertificates(this);
   customCertificates: API.CustomCertificates = new API.CustomCertificates(this);
+  customCsrs: API.CustomCsrs = new API.CustomCsrs(this);
   customHostnames: API.CustomHostnames = new API.CustomHostnames(this);
   customNameservers: API.CustomNameservers = new API.CustomNameservers(this);
+  tenantCustomNameservers: API.TenantCustomNameservers = new API.TenantCustomNameservers(this);
   dnsFirewall: API.DNSFirewall = new API.DNSFirewall(this);
   dns: API.DNS = new API.DNS(this);
   emailSecurity: API.EmailSecurity = new API.EmailSecurity(this);
@@ -358,6 +378,7 @@ export class Cloudflare extends Core.APIClient {
   botManagement: API.BotManagement = new API.BotManagement(this);
   fraud: API.Fraud = new API.Fraud(this);
   originPostQuantumEncryption: API.OriginPostQuantumEncryption = new API.OriginPostQuantumEncryption(this);
+  originTLSComplianceModes: API.OriginTLSComplianceModes = new API.OriginTLSComplianceModes(this);
   googleTagGateway: API.GoogleTagGateway = new API.GoogleTagGateway(this);
   zaraz: API.Zaraz = new API.Zaraz(this);
   speed: API.Speed = new API.Speed(this);
@@ -368,6 +389,7 @@ export class Cloudflare extends Core.APIClient {
   calls: API.Calls = new API.Calls(this);
   cloudforceOne: API.CloudforceOne = new API.CloudforceOne(this);
   aiGateway: API.AIGateway = new API.AIGateway(this);
+  flagship: API.Flagship = new API.Flagship(this);
   iam: API.IAM = new API.IAM(this);
   cloudConnector: API.CloudConnector = new API.CloudConnector(this);
   botnetFeed: API.BotnetFeed = new API.BotnetFeed(this);
@@ -378,8 +400,10 @@ export class Cloudflare extends Core.APIClient {
   leakedCredentialChecks: API.LeakedCredentialChecks = new API.LeakedCredentialChecks(this);
   contentScanning: API.ContentScanning = new API.ContentScanning(this);
   aiSecurity: API.AISecurity = new API.AISecurity(this);
+  csamScanner: API.CsamScanner = new API.CsamScanner(this);
   abuseReports: API.AbuseReports = new API.AbuseReports(this);
   ai: API.AI = new API.AI(this);
+  aiAudit: API.AIAudit = new API.AIAudit(this);
   aiSearch: API.AISearch = new API.AISearch(this);
   securityCenter: API.SecurityCenter = new API.SecurityCenter(this);
   browserRendering: API.BrowserRendering = new API.BrowserRendering(this);
@@ -545,8 +569,10 @@ Cloudflare.Argo = Argo;
 Cloudflare.CertificateAuthorities = CertificateAuthorities;
 Cloudflare.ClientCertificates = ClientCertificates;
 Cloudflare.CustomCertificates = CustomCertificates;
+Cloudflare.CustomCsrs = CustomCsrs;
 Cloudflare.CustomHostnames = CustomHostnames;
 Cloudflare.CustomNameservers = CustomNameservers;
+Cloudflare.TenantCustomNameservers = TenantCustomNameservers;
 Cloudflare.DNSFirewall = DNSFirewall;
 Cloudflare.DNS = DNS;
 Cloudflare.EmailSecurity = EmailSecurity;
@@ -609,6 +635,7 @@ Cloudflare.Radar = Radar;
 Cloudflare.BotManagement = BotManagement;
 Cloudflare.Fraud = Fraud;
 Cloudflare.OriginPostQuantumEncryption = OriginPostQuantumEncryption;
+Cloudflare.OriginTLSComplianceModes = OriginTLSComplianceModes;
 Cloudflare.GoogleTagGateway = GoogleTagGateway;
 Cloudflare.Zaraz = Zaraz;
 Cloudflare.Speed = Speed;
@@ -619,6 +646,7 @@ Cloudflare.RealtimeKit = RealtimeKit;
 Cloudflare.Calls = Calls;
 Cloudflare.CloudforceOne = CloudforceOne;
 Cloudflare.AIGateway = AIGateway;
+Cloudflare.Flagship = Flagship;
 Cloudflare.IAM = IAM;
 Cloudflare.CloudConnector = CloudConnector;
 Cloudflare.BotnetFeed = BotnetFeed;
@@ -629,8 +657,10 @@ Cloudflare.ResourceTagging = ResourceTagging;
 Cloudflare.LeakedCredentialChecks = LeakedCredentialChecks;
 Cloudflare.ContentScanning = ContentScanning;
 Cloudflare.AISecurity = AISecurity;
+Cloudflare.CsamScanner = CsamScanner;
 Cloudflare.AbuseReports = AbuseReports;
 Cloudflare.AI = AI;
+Cloudflare.AIAudit = AIAudit;
 Cloudflare.AISearch = AISearch;
 Cloudflare.SecurityCenter = SecurityCenter;
 Cloudflare.BrowserRendering = BrowserRendering;
@@ -706,10 +736,14 @@ export declare namespace Cloudflare {
 
   export { CustomCertificates as CustomCertificates };
 
+  export { CustomCsrs as CustomCsrs };
+
   export { CustomHostnames as CustomHostnames };
 
   export { CustomNameservers as CustomNameservers };
 
+  export { TenantCustomNameservers as TenantCustomNameservers };
+
   export { DNSFirewall as DNSFirewall };
 
   export { DNS as DNS };
@@ -834,6 +868,8 @@ export declare namespace Cloudflare {
 
   export { OriginPostQuantumEncryption as OriginPostQuantumEncryption };
 
+  export { OriginTLSComplianceModes as OriginTLSComplianceModes };
+
   export { GoogleTagGateway as GoogleTagGateway };
 
   export { Zaraz as Zaraz };
@@ -854,6 +890,8 @@ export declare namespace Cloudflare {
 
   export { AIGateway as AIGateway };
 
+  export { Flagship as Flagship };
+
   export { IAM as IAM };
 
   export { CloudConnector as CloudConnector };
@@ -874,10 +912,14 @@ export declare namespace Cloudflare {
 
   export { AISecurity as AISecurity };
 
+  export { CsamScanner as CsamScanner };
+
   export { AbuseReports as AbuseReports };
 
   export { AI as AI };
 
+  export { AIAudit as AIAudit };
+
   export { AISearch as AISearch };
 
   export { SecurityCenter as SecurityCenter };

package/src/resources/abuse-reports/mitigations.ts

@@ -61,6 +61,9 @@ export namespace MitigationListResponse {
 
     entity_id: string;
 
+    /**
+     * The type of entity targeted by a mitigation.
+     */
     entity_type: 'url_pattern' | 'account' | 'zone';
 
     /**
@@ -69,16 +72,28 @@ export namespace MitigationListResponse {
     status: 'pending' | 'active' | 'in_review' | 'cancelled' | 'removed';
 
     /**
-     * The type of mitigation
+     * The type of mitigation applied to a reported entity.
      */
     type:
+      | 'account_suspend'
+      | 'copyright_interstitial'
+      | 'geo_block'
       | 'legal_block'
+      | 'malware_interstitial'
       | 'misleading_interstitial'
-      | 'phishing_interstitial'
       | 'network_block'
+      | 'phishing_interstitial'
+      | 'playfairite_enforce'
+      | 'r2_takedown_account'
+      | 'r2_takedown_bucket'
+      | 'r2_takedown_object'
       | 'rate_limit_cache'
-      | 'account_suspend'
-      | 'redirect_video_stream';
+      | 'redirect_video_stream'
+      | 'registrar_freeze'
+      | 'registrar_parking'
+      | 'stream_block_account'
+      | 'user_suspend'
+      | 'workers_takedown_by_zone_id';
   }
 }
 
@@ -96,6 +111,9 @@ export interface MitigationReviewResponse {
 
   entity_id: string;
 
+  /**
+   * The type of entity targeted by a mitigation.
+   */
   entity_type: 'url_pattern' | 'account' | 'zone';
 
   /**
@@ -104,16 +122,28 @@ export interface MitigationReviewResponse {
   status: 'pending' | 'active' | 'in_review' | 'cancelled' | 'removed';
 
   /**
-   * The type of mitigation
+   * The type of mitigation applied to a reported entity.
    */
   type:
+    | 'account_suspend'
+    | 'copyright_interstitial'
+    | 'geo_block'
     | 'legal_block'
+    | 'malware_interstitial'
     | 'misleading_interstitial'
-    | 'phishing_interstitial'
     | 'network_block'
+    | 'phishing_interstitial'
+    | 'playfairite_enforce'
+    | 'r2_takedown_account'
+    | 'r2_takedown_bucket'
+    | 'r2_takedown_object'
     | 'rate_limit_cache'
-    | 'account_suspend'
-    | 'redirect_video_stream';
+    | 'redirect_video_stream'
+    | 'registrar_freeze'
+    | 'registrar_parking'
+    | 'stream_block_account'
+    | 'user_suspend'
+    | 'workers_takedown_by_zone_id';
 }
 
 export interface MitigationListParams extends V4PagePaginationParams {
@@ -161,13 +191,25 @@ export interface MitigationListParams extends V4PagePaginationParams {
    * set, e.g. ?type=rate_limit_cache&type=legal_block.
    */
   type?:
+    | 'account_suspend'
+    | 'copyright_interstitial'
+    | 'geo_block'
     | 'legal_block'
+    | 'malware_interstitial'
     | 'misleading_interstitial'
-    | 'phishing_interstitial'
     | 'network_block'
+    | 'phishing_interstitial'
+    | 'playfairite_enforce'
+    | 'r2_takedown_account'
+    | 'r2_takedown_bucket'
+    | 'r2_takedown_object'
     | 'rate_limit_cache'
-    | 'account_suspend'
-    | 'redirect_video_stream';
+    | 'redirect_video_stream'
+    | 'registrar_freeze'
+    | 'registrar_parking'
+    | 'stream_block_account'
+    | 'user_suspend'
+    | 'workers_takedown_by_zone_id';
 }
 
 export interface MitigationReviewParams {

package/src/resources/acm/custom-trust-store.ts

@@ -188,7 +188,7 @@ export interface CustomTrustStoreListParams extends V4PagePaginationArrayParams
   limit?: number;
 
   /**
-   * Query param: Offset the results
+   * Query param: Offset the results.
    */
   offset?: number;
 }

package/src/resources/addressing/regional-hostnames/regional-hostnames.ts

@@ -163,7 +163,7 @@ export interface RegionalHostnameCreateResponse {
   /**
    * Configure which routing method to use for the regional hostname
    */
-  routing?: string;
+  routing: string;
 }
 
 export interface RegionalHostnameListResponse {
@@ -186,7 +186,7 @@ export interface RegionalHostnameListResponse {
   /**
    * Configure which routing method to use for the regional hostname
    */
-  routing?: string;
+  routing: string;
 }
 
 export interface RegionalHostnameDeleteResponse {
@@ -254,7 +254,7 @@ export interface RegionalHostnameEditResponse {
   /**
    * Configure which routing method to use for the regional hostname
    */
-  routing?: string;
+  routing: string;
 }
 
 export interface RegionalHostnameGetResponse {
@@ -277,7 +277,7 @@ export interface RegionalHostnameGetResponse {
   /**
    * Configure which routing method to use for the regional hostname
    */
-  routing?: string;
+  routing: string;
 }
 
 export interface RegionalHostnameCreateParams {

package/src/resources/ai/models/models.ts

@@ -51,6 +51,16 @@ export interface ModelListParams extends V4PagePaginationArrayParams {
    */
   hide_experimental?: boolean;
 
+  /**
+   * Query param: If true, include models whose planned_deprecation_date is in the
+   * past — but only within a three-month grace window after that date. Models whose
+   * planned_deprecation_date is more than three months in the past remain hidden
+   * regardless of this flag. Future planned-deprecation dates are always included
+   * regardless of this flag. Defaults to false, preserving the existing behavior of
+   * hiding all past-dated deprecations.
+   */
+  include_deprecated?: boolean;
+
   /**
    * Query param: Search
    */

package/src/resources/ai-audit/ai-audit.ts

@@ -0,0 +1,15 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+import { APIResource } from '../../resource';
+import * as RobotsAPI from './robots';
+import { Robots } from './robots';
+
+export class AIAudit extends APIResource {
+  robots: RobotsAPI.Robots = new RobotsAPI.Robots(this._client);
+}
+
+AIAudit.Robots = Robots;
+
+export declare namespace AIAudit {
+  export { Robots as Robots };
+}

package/src/resources/ai-audit/api.md

@@ -0,0 +1,3 @@
+# AIAudit
+
+## Robots

package/src/resources/ai-audit/index.ts

@@ -0,0 +1,4 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+export { AIAudit } from './ai-audit';
+export { Robots } from './robots';

package/src/resources/ai-audit/robots.ts

@@ -0,0 +1,5 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+import { APIResource } from '../../resource';
+
+export class Robots extends APIResource {}

package/src/resources/ai-audit.ts

@@ -0,0 +1,3 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+export * from './ai-audit/index';