cloudflare 6.4.0 → 6.5.0

package/src/resources/origin-tls-compliance-modes/origin-tls-compliance-modes.ts

@@ -1,5 +1,289 @@
 // File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
 
 import { APIResource } from '../../resource';
+import * as Core from '../../core';
 
-export class OriginTLSComplianceModes extends APIResource {}
+export class OriginTLSComplianceModes extends APIResource {
+  /**
+   * Replace the entire set of TLS compliance modes for the zone with the list
+   * provided in the request body. PUT performs a full replace, not a merge — any
+   * modes not present in the request body are removed. The request body must be of
+   * the form `{"value": ["fips", "pqh"]}`. Currently supported modes are `fips` and
+   * `pqh`; an empty list clears the constraint. Future modes (e.g. `cnsa2`) may be
+   * added; clients should treat unknown values as opaque strings. Invalid mode
+   * values are rejected with a 4xx response.
+   *
+   * @example
+   * ```ts
+   * const originTLSComplianceMode =
+   *   await client.originTLSComplianceModes.update({
+   *     zone_id: '023e105f4ecef8ad9ca31a8372d0c353',
+   *     value: ['fips', 'pqh'],
+   *   });
+   * ```
+   */
+  update(
+    params: OriginTLSComplianceModeUpdateParams,
+    options?: Core.RequestOptions,
+  ): Core.APIPromise<OriginTLSComplianceModeUpdateResponse> {
+    const { zone_id, ...body } = params;
+    return (
+      this._client.put(`/zones/${zone_id}/settings/origin_tls_compliance_modes`, {
+        body,
+        ...options,
+      }) as Core.APIPromise<{ result: OriginTLSComplianceModeUpdateResponse }>
+    )._thenUnwrap((obj) => obj.result);
+  }
+
+  /**
+   * Delete the Origin TLS Compliance Modes setting for the zone, removing any
+   * configured compliance constraint. After deletion, Cloudflare's default behavior
+   * applies (no compliance filtering of the key-exchange algorithm list sent to the
+   * origin).
+   *
+   * @example
+   * ```ts
+   * const originTLSComplianceMode =
+   *   await client.originTLSComplianceModes.delete({
+   *     zone_id: '023e105f4ecef8ad9ca31a8372d0c353',
+   *   });
+   * ```
+   */
+  delete(
+    params: OriginTLSComplianceModeDeleteParams,
+    options?: Core.RequestOptions,
+  ): Core.APIPromise<OriginTLSComplianceModeDeleteResponse> {
+    const { zone_id } = params;
+    return (
+      this._client.delete(
+        `/zones/${zone_id}/settings/origin_tls_compliance_modes`,
+        options,
+      ) as Core.APIPromise<{ result: OriginTLSComplianceModeDeleteResponse }>
+    )._thenUnwrap((obj) => obj.result);
+  }
+
+  /**
+   * Update the set of TLS compliance modes for the zone. PATCH performs a full
+   * replace of the modes list, not a merge — the request body is treated as the
+   * complete new list, and any modes not present in it are removed. (To remove a
+   * single mode from an existing configuration, send the updated list without it.)
+   * The request body must be of the form `{"value": ["fips", "pqh"]}`. Currently
+   * supported modes are `fips` and `pqh`; an empty list clears the constraint.
+   * Future modes (e.g. `cnsa2`) may be added; clients should treat unknown values as
+   * opaque strings. Invalid mode values are rejected with a 4xx response.
+   *
+   * @example
+   * ```ts
+   * const response = await client.originTLSComplianceModes.edit(
+   *   {
+   *     zone_id: '023e105f4ecef8ad9ca31a8372d0c353',
+   *     value: ['fips', 'pqh'],
+   *   },
+   * );
+   * ```
+   */
+  edit(
+    params: OriginTLSComplianceModeEditParams,
+    options?: Core.RequestOptions,
+  ): Core.APIPromise<OriginTLSComplianceModeEditResponse> {
+    const { zone_id, ...body } = params;
+    return (
+      this._client.patch(`/zones/${zone_id}/settings/origin_tls_compliance_modes`, {
+        body,
+        ...options,
+      }) as Core.APIPromise<{ result: OriginTLSComplianceModeEditResponse }>
+    )._thenUnwrap((obj) => obj.result);
+  }
+
+  /**
+   * Origin TLS Compliance Modes constrains the set of TLS key-exchange algorithms
+   * Cloudflare may use when establishing the TLS connection to the zone's origin.
+   * The value is a list of named compliance modes (currently `fips` and `pqh`).
+   * Multiple modes are combined as the intersection of their permitted algorithm
+   * lists. An empty list (or no rule configured) means no compliance constraint is
+   * applied.
+   *
+   * @example
+   * ```ts
+   * const originTLSComplianceMode =
+   *   await client.originTLSComplianceModes.get({
+   *     zone_id: '023e105f4ecef8ad9ca31a8372d0c353',
+   *   });
+   * ```
+   */
+  get(
+    params: OriginTLSComplianceModeGetParams,
+    options?: Core.RequestOptions,
+  ): Core.APIPromise<OriginTLSComplianceModeGetResponse> {
+    const { zone_id } = params;
+    return (
+      this._client.get(`/zones/${zone_id}/settings/origin_tls_compliance_modes`, options) as Core.APIPromise<{
+        result: OriginTLSComplianceModeGetResponse;
+      }>
+    )._thenUnwrap((obj) => obj.result);
+  }
+}
+
+export interface OriginTLSComplianceModeUpdateResponse {
+  /**
+   * The identifier of the caching setting.
+   */
+  id: 'origin_tls_compliance_modes';
+
+  /**
+   * Whether the setting is editable.
+   */
+  editable: boolean;
+
+  /**
+   * List of TLS compliance modes that constrain the key-exchange algorithms
+   * Cloudflare may use when establishing the TLS connection to the zone's origin.
+   * Currently supported values are `fips` (FIPS-approved curves) and `pqh`
+   * (post-quantum hybrid). Future modes (e.g. `cnsa2`) may be added; clients should
+   * treat unknown values as opaque strings. Multiple modes are combined as the
+   * intersection of their permitted algorithm lists; selections whose intersection
+   * is empty are rejected. An empty list clears the constraint.
+   */
+  value: Array<string>;
+
+  /**
+   * Last time this setting was modified.
+   */
+  modified_on?: string | null;
+}
+
+export interface OriginTLSComplianceModeDeleteResponse {
+  /**
+   * The identifier of the caching setting.
+   */
+  id: 'origin_tls_compliance_modes';
+
+  /**
+   * Whether the setting is editable.
+   */
+  editable: boolean;
+
+  /**
+   * Last time this setting was modified.
+   */
+  modified_on?: string | null;
+}
+
+export interface OriginTLSComplianceModeEditResponse {
+  /**
+   * The identifier of the caching setting.
+   */
+  id: 'origin_tls_compliance_modes';
+
+  /**
+   * Whether the setting is editable.
+   */
+  editable: boolean;
+
+  /**
+   * List of TLS compliance modes that constrain the key-exchange algorithms
+   * Cloudflare may use when establishing the TLS connection to the zone's origin.
+   * Currently supported values are `fips` (FIPS-approved curves) and `pqh`
+   * (post-quantum hybrid). Future modes (e.g. `cnsa2`) may be added; clients should
+   * treat unknown values as opaque strings. Multiple modes are combined as the
+   * intersection of their permitted algorithm lists; selections whose intersection
+   * is empty are rejected. An empty list clears the constraint.
+   */
+  value: Array<string>;
+
+  /**
+   * Last time this setting was modified.
+   */
+  modified_on?: string | null;
+}
+
+export interface OriginTLSComplianceModeGetResponse {
+  /**
+   * The identifier of the caching setting.
+   */
+  id: 'origin_tls_compliance_modes';
+
+  /**
+   * Whether the setting is editable.
+   */
+  editable: boolean;
+
+  /**
+   * List of TLS compliance modes that constrain the key-exchange algorithms
+   * Cloudflare may use when establishing the TLS connection to the zone's origin.
+   * Currently supported values are `fips` (FIPS-approved curves) and `pqh`
+   * (post-quantum hybrid). Future modes (e.g. `cnsa2`) may be added; clients should
+   * treat unknown values as opaque strings. Multiple modes are combined as the
+   * intersection of their permitted algorithm lists; selections whose intersection
+   * is empty are rejected. An empty list clears the constraint.
+   */
+  value: Array<string>;
+
+  /**
+   * Last time this setting was modified.
+   */
+  modified_on?: string | null;
+}
+
+export interface OriginTLSComplianceModeUpdateParams {
+  /**
+   * Path param: Identifier.
+   */
+  zone_id: string;
+
+  /**
+   * Body param: List of TLS compliance modes that constrain the key-exchange
+   * algorithms Cloudflare may use when establishing the TLS connection to the zone's
+   * origin. Currently supported values are `fips` (FIPS-approved curves) and `pqh`
+   * (post-quantum hybrid). Future modes (e.g. `cnsa2`) may be added; clients should
+   * treat unknown values as opaque strings. Multiple modes are combined as the
+   * intersection of their permitted algorithm lists; selections whose intersection
+   * is empty are rejected. An empty list clears the constraint.
+   */
+  value: Array<string>;
+}
+
+export interface OriginTLSComplianceModeDeleteParams {
+  /**
+   * Identifier.
+   */
+  zone_id: string;
+}
+
+export interface OriginTLSComplianceModeEditParams {
+  /**
+   * Path param: Identifier.
+   */
+  zone_id: string;
+
+  /**
+   * Body param: List of TLS compliance modes that constrain the key-exchange
+   * algorithms Cloudflare may use when establishing the TLS connection to the zone's
+   * origin. Currently supported values are `fips` (FIPS-approved curves) and `pqh`
+   * (post-quantum hybrid). Future modes (e.g. `cnsa2`) may be added; clients should
+   * treat unknown values as opaque strings. Multiple modes are combined as the
+   * intersection of their permitted algorithm lists; selections whose intersection
+   * is empty are rejected. An empty list clears the constraint.
+   */
+  value: Array<string>;
+}
+
+export interface OriginTLSComplianceModeGetParams {
+  /**
+   * Identifier.
+   */
+  zone_id: string;
+}
+
+export declare namespace OriginTLSComplianceModes {
+  export {
+    type OriginTLSComplianceModeUpdateResponse as OriginTLSComplianceModeUpdateResponse,
+    type OriginTLSComplianceModeDeleteResponse as OriginTLSComplianceModeDeleteResponse,
+    type OriginTLSComplianceModeEditResponse as OriginTLSComplianceModeEditResponse,
+    type OriginTLSComplianceModeGetResponse as OriginTLSComplianceModeGetResponse,
+    type OriginTLSComplianceModeUpdateParams as OriginTLSComplianceModeUpdateParams,
+    type OriginTLSComplianceModeDeleteParams as OriginTLSComplianceModeDeleteParams,
+    type OriginTLSComplianceModeEditParams as OriginTLSComplianceModeEditParams,
+    type OriginTLSComplianceModeGetParams as OriginTLSComplianceModeGetParams,
+  };
+}

package/src/resources/radar/ai/bots/bots.ts

@@ -254,6 +254,8 @@ export namespace BotSummaryV2Response {
         linkedUrl: string;
 
         startDate: string;
+
+        tags?: Array<string>;
       }
     }
 
@@ -392,6 +394,8 @@ export namespace BotTimeseriesResponse {
         linkedUrl: string;
 
         startDate: string;
+
+        tags?: Array<string>;
       }
     }
 
@@ -533,6 +537,8 @@ export namespace BotTimeseriesGroupsResponse {
         linkedUrl: string;
 
         startDate: string;
+
+        tags?: Array<string>;
       }
     }
 

package/src/resources/radar/ai/bots/summary.ts

@@ -135,6 +135,8 @@ export namespace SummaryUserAgentResponse {
         linkedUrl: string;
 
         startDate: string;
+
+        tags?: Array<string>;
       }
     }
 

package/src/resources/radar/ai/inference/inference.ts

@@ -21,7 +21,7 @@ export class Inference extends APIResource {
   );
 
   /**
-   * Retrieves an aggregated summary of unique accounts using Workers AI inference
+   * Retrieves an aggregated summary of the number of inferences run on Workers AI,
    * grouped by the specified dimension.
    *
    * @example
@@ -56,7 +56,7 @@ export class Inference extends APIResource {
   }
 
   /**
-   * Retrieves the distribution of unique accounts using Workers AI inference,
+   * Retrieves the distribution of the number of inferences run on Workers AI,
    * grouped by the specified dimension over time.
    *
    * @example
@@ -198,6 +198,8 @@ export namespace InferenceSummaryV2Response {
         linkedUrl: string;
 
         startDate: string;
+
+        tags?: Array<string>;
       }
     }
 
@@ -333,6 +335,8 @@ export namespace InferenceTimeseriesGroupsV2Response {
         linkedUrl: string;
 
         startDate: string;
+
+        tags?: Array<string>;
       }
     }
 

package/src/resources/radar/ai/inference/summary.ts

@@ -6,7 +6,7 @@ import * as Core from '../../../../core';
 
 export class Summary extends APIResource {
   /**
-   * Retrieves the distribution of unique accounts by model.
+   * Retrieves the distribution of the number of inferences by model.
    *
    * @deprecated Use [Radar AI Inference Summary By Dimension](https://developers.cloudflare.com/api/resources/radar/subresources/ai/subresources/inference/methods/summary_v2/) instead.
    */
@@ -27,7 +27,7 @@ export class Summary extends APIResource {
   }
 
   /**
-   * Retrieves the distribution of unique accounts by task.
+   * Retrieves the distribution of the number of inferences by task.
    *
    * @deprecated Use [Radar AI Inference Summary By Dimension](https://developers.cloudflare.com/api/resources/radar/subresources/ai/subresources/inference/methods/summary_v2/) instead.
    */
@@ -153,6 +153,8 @@ export namespace SummaryModelResponse {
         linkedUrl: string;
 
         startDate: string;
+
+        tags?: Array<string>;
       }
     }
 
@@ -281,6 +283,8 @@ export namespace SummaryTaskResponse {
         linkedUrl: string;
 
         startDate: string;
+
+        tags?: Array<string>;
       }
     }
 

package/src/resources/radar/ai/inference/timeseries-groups/summary.ts

@@ -6,7 +6,7 @@ import * as Core from '../../../../../core';
 
 export class Summary extends APIResource {
   /**
-   * Retrieves the distribution of unique accounts by model over time.
+   * Retrieves the distribution of the number of inferences by model over time.
    *
    * @deprecated Use [Radar AI Inference Timeseries Groups By Dimension](https://developers.cloudflare.com/api/resources/radar/subresources/ai/subresources/inference/methods/timeseries_groups_v2/) instead.
    */
@@ -28,7 +28,7 @@ export class Summary extends APIResource {
   }
 
   /**
-   * Retrieves the distribution of unique accounts by task over time.
+   * Retrieves the distribution of the number of inferences by task over time.
    *
    * @deprecated Use [Radar AI Inference Timeseries Groups By Dimension](https://developers.cloudflare.com/api/resources/radar/subresources/ai/subresources/inference/methods/timeseries_groups_v2/) instead.
    */
@@ -162,6 +162,8 @@ export namespace SummaryModelResponse {
         linkedUrl: string;
 
         startDate: string;
+
+        tags?: Array<string>;
       }
     }
 
@@ -303,6 +305,8 @@ export namespace SummaryTaskResponse {
         linkedUrl: string;
 
         startDate: string;
+
+        tags?: Array<string>;
       }
     }
 

package/src/resources/radar/ai/markdown-for-agents.ts

@@ -169,6 +169,8 @@ export namespace MarkdownForAgentSummaryResponse {
         linkedUrl: string;
 
         startDate: string;
+
+        tags?: Array<string>;
       }
     }
 
@@ -314,6 +316,8 @@ export namespace MarkdownForAgentTimeseriesResponse {
         linkedUrl: string;
 
         startDate: string;
+
+        tags?: Array<string>;
       }
     }
 

package/src/resources/radar/ai/timeseries-groups.ts

@@ -263,6 +263,8 @@ export namespace TimeseriesGroupSummaryResponse {
         linkedUrl: string;
 
         startDate: string;
+
+        tags?: Array<string>;
       }
     }
 
@@ -401,6 +403,8 @@ export namespace TimeseriesGroupTimeseriesResponse {
         linkedUrl: string;
 
         startDate: string;
+
+        tags?: Array<string>;
       }
     }
 
@@ -542,6 +546,8 @@ export namespace TimeseriesGroupTimeseriesGroupsResponse {
         linkedUrl: string;
 
         startDate: string;
+
+        tags?: Array<string>;
       }
     }
 
@@ -683,6 +689,8 @@ export namespace TimeseriesGroupUserAgentResponse {
         linkedUrl: string;
 
         startDate: string;
+
+        tags?: Array<string>;
       }
     }
 

package/src/resources/radar/as112/as112.ts

@@ -256,6 +256,8 @@ export namespace AS112SummaryV2Response {
         linkedUrl: string;
 
         startDate: string;
+
+        tags?: Array<string>;
       }
     }
 
@@ -394,6 +396,8 @@ export namespace AS112TimeseriesResponse {
         linkedUrl: string;
 
         startDate: string;
+
+        tags?: Array<string>;
       }
     }
 
@@ -535,6 +539,8 @@ export namespace AS112TimeseriesGroupsV2Response {
         linkedUrl: string;
 
         startDate: string;
+
+        tags?: Array<string>;
       }
     }
 

package/src/resources/radar/as112/summary.ts

@@ -251,6 +251,8 @@ export namespace SummaryDNSSECResponse {
         linkedUrl: string;
 
         startDate: string;
+
+        tags?: Array<string>;
       }
     }
 
@@ -391,6 +393,8 @@ export namespace SummaryEdnsResponse {
         linkedUrl: string;
 
         startDate: string;
+
+        tags?: Array<string>;
       }
     }
 
@@ -531,6 +535,8 @@ export namespace SummaryIPVersionResponse {
         linkedUrl: string;
 
         startDate: string;
+
+        tags?: Array<string>;
       }
     }
 
@@ -671,6 +677,8 @@ export namespace SummaryProtocolResponse {
         linkedUrl: string;
 
         startDate: string;
+
+        tags?: Array<string>;
       }
     }
 
@@ -821,6 +829,8 @@ export namespace SummaryQueryTypeResponse {
         linkedUrl: string;
 
         startDate: string;
+
+        tags?: Array<string>;
       }
     }
 
@@ -949,6 +959,8 @@ export namespace SummaryResponseCodesResponse {
         linkedUrl: string;
 
         startDate: string;
+
+        tags?: Array<string>;
       }
     }
 

package/src/resources/radar/as112/timeseries-groups.ts

@@ -269,6 +269,8 @@ export namespace TimeseriesGroupDNSSECResponse {
         linkedUrl: string;
 
         startDate: string;
+
+        tags?: Array<string>;
       }
     }
 
@@ -410,6 +412,8 @@ export namespace TimeseriesGroupEdnsResponse {
         linkedUrl: string;
 
         startDate: string;
+
+        tags?: Array<string>;
       }
     }
 
@@ -551,6 +555,8 @@ export namespace TimeseriesGroupIPVersionResponse {
         linkedUrl: string;
 
         startDate: string;
+
+        tags?: Array<string>;
       }
     }
 
@@ -692,6 +698,8 @@ export namespace TimeseriesGroupProtocolResponse {
         linkedUrl: string;
 
         startDate: string;
+
+        tags?: Array<string>;
       }
     }
 
@@ -837,6 +845,8 @@ export namespace TimeseriesGroupQueryTypeResponse {
         linkedUrl: string;
 
         startDate: string;
+
+        tags?: Array<string>;
       }
     }
 
@@ -978,6 +988,8 @@ export namespace TimeseriesGroupResponseCodesResponse {
         linkedUrl: string;
 
         startDate: string;
+
+        tags?: Array<string>;
       }
     }
 

package/src/resources/radar/as112/top.ts

@@ -235,6 +235,8 @@ export namespace TopDNSSECResponse {
         linkedUrl: string;
 
         startDate: string;
+
+        tags?: Array<string>;
       }
     }
 
@@ -374,6 +376,8 @@ export namespace TopEdnsResponse {
         linkedUrl: string;
 
         startDate: string;
+
+        tags?: Array<string>;
       }
     }
 
@@ -513,6 +517,8 @@ export namespace TopIPVersionResponse {
         linkedUrl: string;
 
         startDate: string;
+
+        tags?: Array<string>;
       }
     }
 
@@ -652,6 +658,8 @@ export namespace TopLocationsResponse {
         linkedUrl: string;
 
         startDate: string;
+
+        tags?: Array<string>;
       }
     }
 

package/src/resources/radar/attacks/layer3/layer3.ts

@@ -261,6 +261,8 @@ export namespace Layer3SummaryV2Response {
         linkedUrl: string;
 
         startDate: string;
+
+        tags?: Array<string>;
       }
     }
 
@@ -399,6 +401,8 @@ export namespace Layer3TimeseriesResponse {
         linkedUrl: string;
 
         startDate: string;
+
+        tags?: Array<string>;
       }
     }
 
@@ -540,6 +544,8 @@ export namespace Layer3TimeseriesGroupsV2Response {
         linkedUrl: string;
 
         startDate: string;
+
+        tags?: Array<string>;
       }
     }