Add app platform edge controls (#1037)

* Add edge controls

* Update disable_edge_cache documentation

* clarify description

Co-authored-by: Elan Hasson <234704+ElanHasson@users.noreply.github.com>

---------

Co-authored-by: Elan Hasson <234704+ElanHasson@users.noreply.github.com>

Author: thearyanahmed

specification/resources/apps/apps_create.yml

@@ -22,6 +22,9 @@ requestBody:
         spec:
           name: web-app
           region: nyc
+          disable_edge_cache: true
+          disable_email_obfuscation: false
+          enhanced_threat_control_enabled: true
           services:
             - name: api
               github:

specification/resources/apps/models/app_spec.yml

@@ -27,6 +27,28 @@ properties:
     - syd
     example: nyc
 
+  disable_edge_cache:
+    description: |-
+      If set to `true`, the app will **not** be cached at the edge (CDN). Enable this option if you want to manage CDN configuration yourself—whether by using an external CDN provider or by handling static content and caching within your app. This setting is also recommended for apps that require real-time data or serve dynamic content, such as those using Server-Sent Events (SSE) over GET, or hosting an MCP (Model Context Protocol) Server that utilizes SSE.  
+      **Note:** This feature is not available for static site components.  
+      For more information, see [Disable CDN Cache](https://docs.digitalocean.com/products/app-platform/how-to/cache-content/#disable-cdn-cache).
+
+    type: boolean
+    default: false
+
+  disable_email_obfuscation:
+    description: |-
+      If set to `true`, email addresses in the app will not be obfuscated. This is
+      useful for apps that require email addresses to be visible (in the HTML markup).
+    type: boolean
+    default: false
+
+  enhanced_threat_control_enabled:
+    description: |-
+      If set to `true`, suspicious requests will go through additional security checks to help mitigate layer 7 DDoS attacks.
+    type: boolean
+    default: false
+
   domains:
     description: A set of hostnames where the application will be available.
     type: array

specification/resources/apps/models/apps_deployment.yml

@@ -51,7 +51,7 @@ properties:
     readOnly: true
     title: The current pricing tier slug of the deployment
     type: string
-    example: basic 
+    example: basic
   updated_at:
     format: date-time
     title: When the deployment was last updated

specification/resources/apps/responses/examples.yml

@@ -212,6 +212,8 @@ app:
       owner_uuid: a4e16f25-cdd1-4483-b246-d77f283c9209
       spec:
         name: sample-golang
+        disable_edge_cache: true
+        enhanced_threat_control_enabled: true
         services:
         - name: web
           github:
@@ -436,6 +438,9 @@ deployments:
       - id: b6bdf840-2854-4f87-a36c-5f231c617c84
         spec:
           name: sample-golang
+          disable_edge_cache: true
+          disable_email_obfuscation: true
+          enhanced_threat_control_enabled: true
           services:
             - name: web
               github:
@@ -507,6 +512,9 @@ deployment:
       id: b6bdf840-2854-4f87-a36c-5f231c617c84
       spec:
         name: sample-golang
+        disable_edge_cache: true
+        disable_email_obfuscation: true
+        enhanced_threat_control_enabled: true
         services:
           - name: web
             github: