cloudflare 6.4.0 → 6.5.0

package/src/resources/email-security/investigate/bulk/cancel.ts

@@ -0,0 +1,162 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+import { APIResource } from '../../../../resource';
+import * as Core from '../../../../core';
+
+export class Cancel extends APIResource {
+  /**
+   * Marks the job as cancelled and stops any pending message processing. The job
+   * record remains visible in list and detail endpoints.
+   *
+   * @example
+   * ```ts
+   * const cancel =
+   *   await client.emailSecurity.investigate.bulk.cancel.create(
+   *     '182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e',
+   *     { account_id: '023e105f4ecef8ad9ca31a8372d0c353' },
+   *   );
+   * ```
+   */
+  create(
+    jobId: string,
+    params: CancelCreateParams,
+    options?: Core.RequestOptions,
+  ): Core.APIPromise<CancelCreateResponse> {
+    const { account_id } = params;
+    return (
+      this._client.post(
+        `/accounts/${account_id}/email-security/investigate/bulk/${jobId}/cancel`,
+        options,
+      ) as Core.APIPromise<{ result: CancelCreateResponse }>
+    )._thenUnwrap((obj) => obj.result);
+  }
+}
+
+export interface CancelCreateResponse {
+  action_params: CancelCreateResponse.Move | CancelCreateResponse.Release;
+
+  action_type: 'MOVE' | 'RELEASE';
+
+  created_at: string;
+
+  job_id: string;
+
+  messages_failed: number;
+
+  messages_pending: number;
+
+  messages_successful: number;
+
+  search_params: CancelCreateResponse.SearchParams;
+
+  status: 'PENDING' | 'DISCOVERING' | 'PROCESSING' | 'COMPLETED' | 'FAILED' | 'CANCELLED' | 'SKIPPED';
+
+  total_messages_discovered: number;
+
+  comment?: string | null;
+
+  completed_at?: string | null;
+
+  started_at?: string | null;
+
+  status_message?: string | null;
+}
+
+export namespace CancelCreateResponse {
+  export interface Move {
+    destination:
+      | 'Inbox'
+      | 'JunkEmail'
+      | 'DeletedItems'
+      | 'RecoverableItemsDeletions'
+      | 'RecoverableItemsPurges';
+
+    type: 'MOVE';
+
+    expected_disposition?:
+      | 'MALICIOUS'
+      | 'MALICIOUS-BEC'
+      | 'SUSPICIOUS'
+      | 'SPOOF'
+      | 'SPAM'
+      | 'BULK'
+      | 'ENCRYPTED'
+      | 'EXTERNAL'
+      | 'UNKNOWN'
+      | 'NONE';
+  }
+
+  export interface Release {
+    type: 'RELEASE';
+  }
+
+  export interface SearchParams {
+    /**
+     * @deprecated Deprecated, use `GET /investigate/{investigate_id}/action_log`
+     * instead. End of life: November 1, 2026.
+     */
+    action_log?: boolean;
+
+    alert_id?: string | null;
+
+    /**
+     * Delivery status of the message.
+     */
+    delivery_status?: 'delivered' | 'moved' | 'quarantined' | 'rejected' | 'deferred' | 'bounced' | 'queued';
+
+    detections_only?: boolean;
+
+    domain?: string | null;
+
+    /**
+     * End of search date range
+     */
+    end?: string;
+
+    exact_subject?: string | null;
+
+    final_disposition?:
+      | 'MALICIOUS'
+      | 'MALICIOUS-BEC'
+      | 'SUSPICIOUS'
+      | 'SPOOF'
+      | 'SPAM'
+      | 'BULK'
+      | 'ENCRYPTED'
+      | 'EXTERNAL'
+      | 'UNKNOWN'
+      | 'NONE';
+
+    message_action?: 'PREVIEW' | 'QUARANTINE_RELEASED' | 'MOVED' | null;
+
+    message_id?: string | null;
+
+    metric?: string | null;
+
+    query?: string | null;
+
+    recipient?: string | null;
+
+    sender?: string | null;
+
+    /**
+     * Beginning of search date range
+     */
+    start?: string;
+
+    subject?: string | null;
+
+    submissions?: boolean;
+  }
+}
+
+export interface CancelCreateParams {
+  /**
+   * Identifier.
+   */
+  account_id: string;
+}
+
+export declare namespace Cancel {
+  export { type CancelCreateResponse as CancelCreateResponse, type CancelCreateParams as CancelCreateParams };
+}

package/src/resources/email-security/investigate/bulk/index.ts

@@ -0,0 +1,21 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+export {
+  BulkListResponsesV4PagePaginationArray,
+  Bulk,
+  type BulkCreateResponse,
+  type BulkListResponse,
+  type BulkDeleteResponse,
+  type BulkGetResponse,
+  type BulkCreateParams,
+  type BulkListParams,
+  type BulkDeleteParams,
+  type BulkGetParams,
+} from './bulk';
+export { Cancel, type CancelCreateResponse, type CancelCreateParams } from './cancel';
+export {
+  MessageListResponsesV4PagePaginationArray,
+  Messages,
+  type MessageListResponse,
+  type MessageListParams,
+} from './messages';

package/src/resources/email-security/investigate/bulk/messages.ts

@@ -0,0 +1,120 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+import { APIResource } from '../../../../resource';
+import * as Core from '../../../../core';
+import { V4PagePaginationArray, type V4PagePaginationArrayParams } from '../../../../pagination';
+
+export class Messages extends APIResource {
+  /**
+   * List messages for a bulk action job
+   *
+   * @example
+   * ```ts
+   * // Automatically fetches more pages as needed.
+   * for await (const messageListResponse of client.emailSecurity.investigate.bulk.messages.list(
+   *   '182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e',
+   *   { account_id: '023e105f4ecef8ad9ca31a8372d0c353' },
+   * )) {
+   *   // ...
+   * }
+   * ```
+   */
+  list(
+    jobId: string,
+    params: MessageListParams,
+    options?: Core.RequestOptions,
+  ): Core.PagePromise<MessageListResponsesV4PagePaginationArray, MessageListResponse> {
+    const { account_id, ...query } = params;
+    return this._client.getAPIList(
+      `/accounts/${account_id}/email-security/investigate/bulk/${jobId}/messages`,
+      MessageListResponsesV4PagePaginationArray,
+      { query, ...options },
+    );
+  }
+}
+
+export class MessageListResponsesV4PagePaginationArray extends V4PagePaginationArray<MessageListResponse> {}
+
+export interface MessageListResponse {
+  action_params: MessageListResponse.Move | MessageListResponse.Release;
+
+  action_type: 'MOVE' | 'RELEASE';
+
+  created_at: string;
+
+  message_id: string;
+
+  postfix_id: string;
+
+  retry_count: number;
+
+  status: 'PENDING' | 'DISCOVERING' | 'PROCESSING' | 'COMPLETED' | 'FAILED' | 'CANCELLED' | 'SKIPPED';
+
+  alert_id?: string | null;
+
+  email_message_id?: string | null;
+
+  processed_at?: string | null;
+
+  /**
+   * When to retry the action if it failed
+   */
+  retry_after?: string | null;
+
+  status_message?: string | null;
+}
+
+export namespace MessageListResponse {
+  export interface Move {
+    client_recipient: string;
+
+    destination:
+      | 'Inbox'
+      | 'JunkEmail'
+      | 'DeletedItems'
+      | 'RecoverableItemsDeletions'
+      | 'RecoverableItemsPurges';
+
+    type: 'MOVE';
+
+    expected_disposition?:
+      | 'MALICIOUS'
+      | 'MALICIOUS-BEC'
+      | 'SUSPICIOUS'
+      | 'SPOOF'
+      | 'SPAM'
+      | 'BULK'
+      | 'ENCRYPTED'
+      | 'EXTERNAL'
+      | 'UNKNOWN'
+      | 'NONE';
+  }
+
+  export interface Release {
+    client_recipient: string;
+
+    type: 'RELEASE';
+  }
+}
+
+export interface MessageListParams extends V4PagePaginationArrayParams {
+  /**
+   * Path param: Identifier.
+   */
+  account_id: string;
+
+  /**
+   * Query param
+   */
+  status?: 'PENDING' | 'DISCOVERING' | 'PROCESSING' | 'COMPLETED' | 'FAILED' | 'CANCELLED' | 'SKIPPED';
+}
+
+Messages.MessageListResponsesV4PagePaginationArray = MessageListResponsesV4PagePaginationArray;
+
+export declare namespace Messages {
+  export {
+    type MessageListResponse as MessageListResponse,
+    MessageListResponsesV4PagePaginationArray as MessageListResponsesV4PagePaginationArray,
+    type MessageListParams as MessageListParams,
+  };
+}

package/src/resources/email-security/investigate/bulk.ts

@@ -0,0 +1,3 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+export * from './bulk/index';

package/src/resources/email-security/investigate/index.ts

@@ -1,5 +1,17 @@
 // File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
 
+export {
+  BulkListResponsesV4PagePaginationArray,
+  Bulk,
+  type BulkCreateResponse,
+  type BulkListResponse,
+  type BulkDeleteResponse,
+  type BulkGetResponse,
+  type BulkCreateParams,
+  type BulkListParams,
+  type BulkDeleteParams,
+  type BulkGetParams,
+} from './bulk/index';
 export { Detections, type DetectionGetResponse, type DetectionGetParams } from './detections';
 export {
   InvestigateListResponsesV4PagePaginationArray,

package/src/resources/email-security/investigate/investigate.ts

@@ -30,6 +30,19 @@ import * as ReleaseAPI from './release';
 import { Release, ReleaseBulkParams, ReleaseBulkResponse, ReleaseBulkResponsesSinglePage } from './release';
 import * as TraceAPI from './trace';
 import { Trace, TraceGetParams, TraceGetResponse } from './trace';
+import * as BulkAPI from './bulk/bulk';
+import {
+  Bulk,
+  BulkCreateParams,
+  BulkCreateResponse,
+  BulkDeleteParams,
+  BulkDeleteResponse,
+  BulkGetParams,
+  BulkGetResponse,
+  BulkListParams,
+  BulkListResponse,
+  BulkListResponsesV4PagePaginationArray,
+} from './bulk/bulk';
 import { V4PagePaginationArray, type V4PagePaginationArrayParams } from '../../../pagination';
 
 export class Investigate extends APIResource {
@@ -40,6 +53,7 @@ export class Investigate extends APIResource {
   move: MoveAPI.Move = new MoveAPI.Move(this._client);
   reclassify: ReclassifyAPI.Reclassify = new ReclassifyAPI.Reclassify(this._client);
   release: ReleaseAPI.Release = new ReleaseAPI.Release(this._client);
+  bulk: BulkAPI.Bulk = new BulkAPI.Bulk(this._client);
 
   /**
    * Returns information for each email that matches the search parameter(s).
@@ -724,6 +738,8 @@ Investigate.MoveBulkResponsesSinglePage = MoveBulkResponsesSinglePage;
 Investigate.Reclassify = Reclassify;
 Investigate.Release = Release;
 Investigate.ReleaseBulkResponsesSinglePage = ReleaseBulkResponsesSinglePage;
+Investigate.Bulk = Bulk;
+Investigate.BulkListResponsesV4PagePaginationArray = BulkListResponsesV4PagePaginationArray;
 
 export declare namespace Investigate {
   export {
@@ -774,4 +790,17 @@ export declare namespace Investigate {
     ReleaseBulkResponsesSinglePage as ReleaseBulkResponsesSinglePage,
     type ReleaseBulkParams as ReleaseBulkParams,
   };
+
+  export {
+    Bulk as Bulk,
+    type BulkCreateResponse as BulkCreateResponse,
+    type BulkListResponse as BulkListResponse,
+    type BulkDeleteResponse as BulkDeleteResponse,
+    type BulkGetResponse as BulkGetResponse,
+    BulkListResponsesV4PagePaginationArray as BulkListResponsesV4PagePaginationArray,
+    type BulkCreateParams as BulkCreateParams,
+    type BulkListParams as BulkListParams,
+    type BulkDeleteParams as BulkDeleteParams,
+    type BulkGetParams as BulkGetParams,
+  };
 }

package/src/resources/email-security/investigate/move.ts

@@ -183,6 +183,21 @@ export interface MoveCreateParams {
     | 'DeletedItems'
     | 'RecoverableItemsDeletions'
     | 'RecoverableItemsPurges';
+
+  /**
+   * Body param
+   */
+  expected_disposition?:
+    | 'MALICIOUS'
+    | 'MALICIOUS-BEC'
+    | 'SUSPICIOUS'
+    | 'SPOOF'
+    | 'SPAM'
+    | 'BULK'
+    | 'ENCRYPTED'
+    | 'EXTERNAL'
+    | 'UNKNOWN'
+    | 'NONE';
 }
 
 export interface MoveBulkParams {
@@ -201,6 +216,21 @@ export interface MoveBulkParams {
     | 'RecoverableItemsDeletions'
     | 'RecoverableItemsPurges';
 
+  /**
+   * Body param
+   */
+  expected_disposition?:
+    | 'MALICIOUS'
+    | 'MALICIOUS-BEC'
+    | 'SUSPICIOUS'
+    | 'SPOOF'
+    | 'SPAM'
+    | 'BULK'
+    | 'ENCRYPTED'
+    | 'EXTERNAL'
+    | 'UNKNOWN'
+    | 'NONE';
+
   /**
    * Body param: List of message IDs to move
    */

package/src/resources/iam/sso.ts

@@ -6,7 +6,8 @@ import { SinglePage } from '../../pagination';
 
 export class SSO extends APIResource {
   /**
-   * Initialize new SSO connector
+   * Creates a new SSO connector for logging into Cloudflare through an identity
+   * provider.
    *
    * @example
    * ```ts
@@ -26,7 +27,7 @@ export class SSO extends APIResource {
   }
 
   /**
-   * Update SSO connector state
+   * Updates the state or configuration of an SSO connector.
    *
    * @example
    * ```ts
@@ -51,7 +52,7 @@ export class SSO extends APIResource {
   }
 
   /**
-   * Get all SSO connectors
+   * Lists all SSO connectors configured for the account.
    *
    * @example
    * ```ts
@@ -76,7 +77,7 @@ export class SSO extends APIResource {
   }
 
   /**
-   * Delete SSO connector
+   * Deletes an SSO connector from the account.
    *
    * @example
    * ```ts
@@ -101,7 +102,8 @@ export class SSO extends APIResource {
   }
 
   /**
-   * Begin SSO connector verification
+   * Validates the user has added the DNS TXT record required for validating
+   * ownership of the domain they are trying to set up a connector for.
    *
    * @example
    * ```ts
@@ -124,7 +126,7 @@ export class SSO extends APIResource {
   }
 
   /**
-   * Get single SSO connector
+   * Retrieves details for a specific SSO connector.
    *
    * @example
    * ```ts

package/src/resources/index.ts

@@ -41,6 +41,7 @@ export { DNS } from './dns/dns';
 export { DNSFirewall } from './dns-firewall/dns-firewall';
 export { Diagnostics } from './diagnostics/diagnostics';
 export { DurableObjects } from './durable-objects/durable-objects';
+export { EmailAuth } from './email-auth/email-auth';
 export { EmailRouting } from './email-routing/email-routing';
 export { EmailSecurity } from './email-security/email-security';
 export { EmailSending } from './email-sending/email-sending';
@@ -68,6 +69,7 @@ export { MagicNetworkMonitoring } from './magic-network-monitoring/magic-network
 export { MagicTransit } from './magic-transit/magic-transit';
 export { ManagedTransforms } from './managed-transforms';
 export { Memberships } from './memberships';
+export { MoQ } from './moq/moq';
 export { NetworkInterconnects } from './network-interconnects/network-interconnects';
 export { Organizations } from './organizations/organizations';
 export { OriginCACertificates } from './origin-ca-certificates';
@@ -101,6 +103,7 @@ export { Spectrum } from './spectrum/spectrum';
 export { Speed } from './speed/speed';
 export { Stream } from './stream/stream';
 export { TenantCustomNameservers } from './tenant-custom-nameservers';
+export { Tenants } from './tenants/tenants';
 export { TokenValidation } from './token-validation/token-validation';
 export { Turnstile } from './turnstile/turnstile';
 export { URLNormalization } from './url-normalization';

package/src/resources/intel/domains/bulks.ts

@@ -5,7 +5,15 @@ import * as Core from '../../../core';
 
 export class Bulks extends APIResource {
   /**
-   * Same as summary.
+   * Returns security details and statistics about multiple domains in a single
+   * request.
+   *
+   * **Behavior change — domain ranking is becoming opt-in.** This endpoint
+   * previously included domain ranking data in every response and accepted a
+   * `skip_ranking=true` query parameter to opt out. That parameter is being
+   * deprecated and ranking will no longer be returned by default. Callers that want
+   * ranking data must pass `include_ranking=true`. The `skip_ranking` parameter will
+   * be silently ignored once the change ships.
    *
    * @example
    * ```ts
@@ -136,6 +144,23 @@ export interface BulkGetParams {
    * `?domain=cloudflare.com&domain=example.com`.
    */
   domain?: Array<string>;
+
+  /**
+   * Query param: Whether to include domain ranking data in the response. Defaults to
+   * `false` — ranking lookups are expensive at bulk scale and most callers do not
+   * need them. Set to `true` to opt in. This parameter replaces the deprecated
+   * `skip_ranking` (see below).
+   */
+  include_ranking?: boolean;
+
+  /**
+   * Query param: **Deprecated.** Previously controlled whether the ranking lookup
+   * was skipped (defaulted to `false`, meaning ranking ran). The endpoint's default
+   * behavior is being flipped — ranking is now opt-in via `include_ranking=true` —
+   * and this parameter will be silently ignored. Remove it from your callers and use
+   * `include_ranking` instead.
+   */
+  skip_ranking?: boolean;
 }
 
 export declare namespace Bulks {

package/src/resources/intel/domains/domains.ts

@@ -158,6 +158,15 @@ export interface DomainGetParams {
    * Query param: Skip DNS resolution lookups for faster response.
    */
   skip_dns?: boolean;
+
+  /**
+   * Query param: Skip the domain ranking lookup for faster responses. Defaults to
+   * `false` (ranking is included). Set to `true` to opt out — primarily used by
+   * callers like Cloudflare Radar that need to avoid a circular dependency when
+   * building the domain details page. Note: the bulk endpoint (`/intel/domain/bulk`)
+   * uses opposite defaults — see `include_ranking` there.
+   */
+  skip_ranking?: boolean;
 }
 
 Domains.Bulks = Bulks;

package/src/resources/logs/api.md

@@ -1,5 +1,44 @@
 # Logs
 
+## LogExplorer
+
+### Query
+
+Types:
+
+- <code><a href="./src/resources/logs/log-explorer/query.ts">QuerySqlResponse</a></code>
+
+Methods:
+
+- <code title="post /{accounts_or_zones}/{account_or_zone_id}/logs/explorer/query/sql">client.logs.logExplorer.query.<a href="./src/resources/logs/log-explorer/query.ts">sql</a>(body, { ...params }) -> QuerySqlResponsesSinglePage</code>
+
+### Datasets
+
+Types:
+
+- <code><a href="./src/resources/logs/log-explorer/datasets/datasets.ts">CreateRequest</a></code>
+- <code><a href="./src/resources/logs/log-explorer/datasets/datasets.ts">Dataset</a></code>
+- <code><a href="./src/resources/logs/log-explorer/datasets/datasets.ts">DatasetSummary</a></code>
+- <code><a href="./src/resources/logs/log-explorer/datasets/datasets.ts">UpdateRequest</a></code>
+
+Methods:
+
+- <code title="post /{accounts_or_zones}/{account_or_zone_id}/logs/explorer/datasets">client.logs.logExplorer.datasets.<a href="./src/resources/logs/log-explorer/datasets/datasets.ts">create</a>({ ...params }) -> Dataset</code>
+- <code title="put /{accounts_or_zones}/{account_or_zone_id}/logs/explorer/datasets/{dataset_id}">client.logs.logExplorer.datasets.<a href="./src/resources/logs/log-explorer/datasets/datasets.ts">update</a>(datasetId, { ...params }) -> Dataset</code>
+- <code title="get /{accounts_or_zones}/{account_or_zone_id}/logs/explorer/datasets">client.logs.logExplorer.datasets.<a href="./src/resources/logs/log-explorer/datasets/datasets.ts">list</a>({ ...params }) -> DatasetSummariesSinglePage</code>
+- <code title="get /{accounts_or_zones}/{account_or_zone_id}/logs/explorer/datasets/{dataset_id}">client.logs.logExplorer.datasets.<a href="./src/resources/logs/log-explorer/datasets/datasets.ts">get</a>(datasetId, { ...params }) -> Dataset</code>
+
+#### Available
+
+Types:
+
+- <code><a href="./src/resources/logs/log-explorer/datasets/available.ts">AvailableDataset</a></code>
+- <code><a href="./src/resources/logs/log-explorer/datasets/available.ts">AvailableList</a></code>
+
+Methods:
+
+- <code title="get /{accounts_or_zones}/{account_or_zone_id}/logs/explorer/datasets/available">client.logs.logExplorer.datasets.available.<a href="./src/resources/logs/log-explorer/datasets/available.ts">list</a>({ ...params }) -> AvailableDatasetsSinglePage</code>
+
 ## Control
 
 ### Retention

package/src/resources/logs/index.ts

@@ -1,6 +1,7 @@
 // File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
 
 export { Control } from './control/index';
+export { LogExplorer } from './log-explorer/index';
 export { Logs } from './logs';
 export { RayID, type RayIDGetResponse, type RayIDGetParams } from './rayid';
 export { Received, type ReceivedGetResponse, type ReceivedGetParams } from './received/index';