ManagedTransforms

Source: src/Cloudflare/ManagedTransforms/ManagedTransforms.ts

The managed request/response header transforms of a Cloudflare zone (/zones/{zone_id}/managed_headers) — a zone-scoped singleton: every zone always carries the full catalog of managed transforms (each with an enabled flag), so there is no create or delete on the Cloudflare side.

Reconciling this resource adopts the singleton and patches only the transform ids you name in requestHeaders / responseHeaders — every other transform is left exactly as found (dashboard- or otherwise-managed toggles are never clobbered).

On destroy, the resource restores the ids it managed to the enabled states observed before its first write (the initialRequestHeaders / initialResponseHeaders snapshots). Transforms that were never named are not touched.

Some transforms are plan-gated (e.g. add_bot_protection_headers requires Bot Management) — enabling those fails server-side on unentitled zones.

Request transforms

Add visitor location headers

yield* Cloudflare.ManagedTransforms.ManagedTransforms("Transforms", {
  zoneId: zone.zoneId,
  requestHeaders: { add_visitor_location_headers: true },
});

Remove visitor IP headers

yield* Cloudflare.ManagedTransforms.ManagedTransforms("Transforms", {
  zoneId: zone.zoneId,
  requestHeaders: { remove_visitor_ip_headers: true },
});

Response transforms

yield* Cloudflare.ManagedTransforms.ManagedTransforms("Transforms", {
  zoneId: zone.zoneId,
  responseHeaders: {
    add_security_headers: true,
    "remove_x-powered-by_header": true,
  },
});

Mixed

yield* Cloudflare.ManagedTransforms.ManagedTransforms("Transforms", {
  zoneId: zone.zoneId,
  requestHeaders: { add_true_client_ip_headers: true },
  responseHeaders: { "remove_x-powered-by_header": false },
});