chore(api): update composite API spec

Author: stainless-app[bot]

.stats.yml

@@ -1,4 +1,4 @@
 configured_endpoints: 1802
-openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/cloudflare%2Fcloudflare-e581e5f97f2de43098da4d30544af20d8a4bcd418981435b48ee862c14317273.yml
-openapi_spec_hash: 04daf40bd8b3e63b6caa81de24e765dc
+openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/cloudflare%2Fcloudflare-9deae24d13b0c6ab1dee39ca28bfcc3075482843b369d47510976bd2e7c33172.yml
+openapi_spec_hash: b494277f0af559cde1530dde36a00371
 config_hash: 7f7d0989caf43ee0fc1a934907e4db8a

src/cloudflare/resources/zero_trust/gateway/rules.py

@@ -109,7 +109,7 @@ def create(
 
           expiration: Defines the expiration time stamp and default duration of a DNS policy. Takes
               precedence over the policy's `schedule` configuration, if any. This does not
-              apply to HTTP or network policies.
+              apply to HTTP or network policies. Settable only for `dns` rules.
 
           filters: Specify the protocol or layer to evaluate the traffic, identity, and device
               posture expressions.
@@ -125,10 +125,15 @@ def create(
               [Order of enforcement](http://developers.cloudflare.com/learning-paths/secure-internet-traffic/understand-policies/order-of-enforcement/#manage-precedence-with-terraform)
               to manage precedence via Terraform.
 
-          rule_settings: Set settings related to this rule.
+          rule_settings: Set settings related to this rule. Each setting is only valid for specific rule
+              types and can only be used with the appropriate selectors. If Terraform drift is
+              observed in these setting values, verify that the setting is supported for the
+              given rule type and that the API response reflects the requested value. If the
+              API response returns sanitized or modified values that differ from the request,
+              use the API-provided values in Terraform to ensure consistency.
 
-          schedule: Defines the schedule for activating DNS policies. (HTTP/Egress or L4
-              unsupported).
+          schedule: Defines the schedule for activating DNS policies. Settable only for `dns` and
+              `dns_resolver` rules.
 
           traffic: Specify the wirefilter expression used for traffic matching. The API
               automatically formats and sanitizes expressions before storing them. To prevent
@@ -237,7 +242,7 @@ def update(
 
           expiration: Defines the expiration time stamp and default duration of a DNS policy. Takes
               precedence over the policy's `schedule` configuration, if any. This does not
-              apply to HTTP or network policies.
+              apply to HTTP or network policies. Settable only for `dns` rules.
 
           filters: Specify the protocol or layer to evaluate the traffic, identity, and device
               posture expressions.
@@ -253,10 +258,15 @@ def update(
               [Order of enforcement](http://developers.cloudflare.com/learning-paths/secure-internet-traffic/understand-policies/order-of-enforcement/#manage-precedence-with-terraform)
               to manage precedence via Terraform.
 
-          rule_settings: Set settings related to this rule.
+          rule_settings: Set settings related to this rule. Each setting is only valid for specific rule
+              types and can only be used with the appropriate selectors. If Terraform drift is
+              observed in these setting values, verify that the setting is supported for the
+              given rule type and that the API response reflects the requested value. If the
+              API response returns sanitized or modified values that differ from the request,
+              use the API-provided values in Terraform to ensure consistency.
 
-          schedule: Defines the schedule for activating DNS policies. (HTTP/Egress or L4
-              unsupported).
+          schedule: Defines the schedule for activating DNS policies. Settable only for `dns` and
+              `dns_resolver` rules.
 
           traffic: Specify the wirefilter expression used for traffic matching. The API
               automatically formats and sanitizes expressions before storing them. To prevent
@@ -547,7 +557,7 @@ async def create(
 
           expiration: Defines the expiration time stamp and default duration of a DNS policy. Takes
               precedence over the policy's `schedule` configuration, if any. This does not
-              apply to HTTP or network policies.
+              apply to HTTP or network policies. Settable only for `dns` rules.
 
           filters: Specify the protocol or layer to evaluate the traffic, identity, and device
               posture expressions.
@@ -563,10 +573,15 @@ async def create(
               [Order of enforcement](http://developers.cloudflare.com/learning-paths/secure-internet-traffic/understand-policies/order-of-enforcement/#manage-precedence-with-terraform)
               to manage precedence via Terraform.
 
-          rule_settings: Set settings related to this rule.
+          rule_settings: Set settings related to this rule. Each setting is only valid for specific rule
+              types and can only be used with the appropriate selectors. If Terraform drift is
+              observed in these setting values, verify that the setting is supported for the
+              given rule type and that the API response reflects the requested value. If the
+              API response returns sanitized or modified values that differ from the request,
+              use the API-provided values in Terraform to ensure consistency.
 
-          schedule: Defines the schedule for activating DNS policies. (HTTP/Egress or L4
-              unsupported).
+          schedule: Defines the schedule for activating DNS policies. Settable only for `dns` and
+              `dns_resolver` rules.
 
           traffic: Specify the wirefilter expression used for traffic matching. The API
               automatically formats and sanitizes expressions before storing them. To prevent
@@ -675,7 +690,7 @@ async def update(
 
           expiration: Defines the expiration time stamp and default duration of a DNS policy. Takes
               precedence over the policy's `schedule` configuration, if any. This does not
-              apply to HTTP or network policies.
+              apply to HTTP or network policies. Settable only for `dns` rules.
 
           filters: Specify the protocol or layer to evaluate the traffic, identity, and device
               posture expressions.
@@ -691,10 +706,15 @@ async def update(
               [Order of enforcement](http://developers.cloudflare.com/learning-paths/secure-internet-traffic/understand-policies/order-of-enforcement/#manage-precedence-with-terraform)
               to manage precedence via Terraform.
 
-          rule_settings: Set settings related to this rule.
+          rule_settings: Set settings related to this rule. Each setting is only valid for specific rule
+              types and can only be used with the appropriate selectors. If Terraform drift is
+              observed in these setting values, verify that the setting is supported for the
+              given rule type and that the API response reflects the requested value. If the
+              API response returns sanitized or modified values that differ from the request,
+              use the API-provided values in Terraform to ensure consistency.
 
-          schedule: Defines the schedule for activating DNS policies. (HTTP/Egress or L4
-              unsupported).
+          schedule: Defines the schedule for activating DNS policies. Settable only for `dns` and
+              `dns_resolver` rules.
 
           traffic: Specify the wirefilter expression used for traffic matching. The API
               automatically formats and sanitizes expressions before storing them. To prevent

src/cloudflare/types/zero_trust/gateway/gateway_configuration_settings.py

@@ -80,7 +80,14 @@ class GatewayConfigurationSettings(BaseModel):
     """
 
     extended_email_matching: Optional[ExtendedEmailMatching] = None
-    """Specify user emails settings for the firewall policies."""
+    """Specify user email settings for the firewall policies.
+
+    When this is enabled, we standardize the email addresses in the identity part of
+    the rule, so that they match the extended email variants in the firewall
+    policies. When this setting is turned off, the email addresses in the identity
+    part of the rule will be matched exactly as provided. If your email has `.` or
+    `+` modifiers, you should enable this setting.
+    """
 
     fips: Optional[FipsSettings] = None
     """Specify FIPS settings."""

src/cloudflare/types/zero_trust/gateway/gateway_configuration_settings_param.py

@@ -81,7 +81,14 @@ class GatewayConfigurationSettingsParam(TypedDict, total=False):
     """
 
     extended_email_matching: Optional[ExtendedEmailMatchingParam]
-    """Specify user emails settings for the firewall policies."""
+    """Specify user email settings for the firewall policies.
+
+    When this is enabled, we standardize the email addresses in the identity part of
+    the rule, so that they match the extended email variants in the firewall
+    policies. When this setting is turned off, the email addresses in the identity
+    part of the rule will be matched exactly as provided. If your email has `.` or
+    `+` modifiers, you should enable this setting.
+    """
 
     fips: Optional[FipsSettingsParam]
     """Specify FIPS settings."""

src/cloudflare/types/zero_trust/gateway/gateway_rule.py

@@ -108,7 +108,7 @@ class GatewayRule(BaseModel):
     """Defines the expiration time stamp and default duration of a DNS policy.
 
     Takes precedence over the policy's `schedule` configuration, if any. This does
-    not apply to HTTP or network policies.
+    not apply to HTTP or network policies. Settable only for `dns` rules.
     """
 
     identity: Optional[str] = None
@@ -123,12 +123,20 @@ class GatewayRule(BaseModel):
     """Indicate that this rule is shared via the Orgs API and read only."""
 
     rule_settings: Optional[RuleSetting] = None
-    """Set settings related to this rule."""
+    """Set settings related to this rule.
+
+    Each setting is only valid for specific rule types and can only be used with the
+    appropriate selectors. If Terraform drift is observed in these setting values,
+    verify that the setting is supported for the given rule type and that the API
+    response reflects the requested value. If the API response returns sanitized or
+    modified values that differ from the request, use the API-provided values in
+    Terraform to ensure consistency.
+    """
 
     schedule: Optional[Schedule] = None
     """Defines the schedule for activating DNS policies.
 
-    (HTTP/Egress or L4 unsupported).
+    Settable only for `dns` and `dns_resolver` rules.
     """
 
     sharable: Optional[bool] = None

src/cloudflare/types/zero_trust/gateway/rule_create_params.py

@@ -63,7 +63,7 @@ class RuleCreateParams(TypedDict, total=False):
     """Defines the expiration time stamp and default duration of a DNS policy.
 
     Takes precedence over the policy's `schedule` configuration, if any. This does
-    not apply to HTTP or network policies.
+    not apply to HTTP or network policies. Settable only for `dns` rules.
     """
 
     filters: List[GatewayFilter]
@@ -90,12 +90,20 @@ class RuleCreateParams(TypedDict, total=False):
     """
 
     rule_settings: RuleSettingParam
-    """Set settings related to this rule."""
+    """Set settings related to this rule.
+
+    Each setting is only valid for specific rule types and can only be used with the
+    appropriate selectors. If Terraform drift is observed in these setting values,
+    verify that the setting is supported for the given rule type and that the API
+    response reflects the requested value. If the API response returns sanitized or
+    modified values that differ from the request, use the API-provided values in
+    Terraform to ensure consistency.
+    """
 
     schedule: Optional[ScheduleParam]
     """Defines the schedule for activating DNS policies.
 
-    (HTTP/Egress or L4 unsupported).
+    Settable only for `dns` and `dns_resolver` rules.
     """
 
     traffic: str