chore(api): update composite API spec

stainless-app[bot] · stainless-app[bot] · commit 0018f1226a82 · 2025-09-18T18:11:58.000Z
diff --git a/.stats.yml b/.stats.yml
@@ -1,4 +1,4 @@
 configured_endpoints: 1802
-openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/cloudflare%2Fcloudflare-e581e5f97f2de43098da4d30544af20d8a4bcd418981435b48ee862c14317273.yml
-openapi_spec_hash: 04daf40bd8b3e63b6caa81de24e765dc
+openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/cloudflare%2Fcloudflare-9deae24d13b0c6ab1dee39ca28bfcc3075482843b369d47510976bd2e7c33172.yml
+openapi_spec_hash: b494277f0af559cde1530dde36a00371
 config_hash: 7f7d0989caf43ee0fc1a934907e4db8a
diff --git a/zero_trust/gatewayconfiguration.go b/zero_trust/gatewayconfiguration.go
@@ -439,7 +439,12 @@ func (r CustomCertificateSettingsParam) MarshalJSON() (data []byte, err error) {
 	return apijson.MarshalRoot(r)
 }
 
-// Specify user emails settings for the firewall policies.
+// Specify user email settings for the firewall policies. When this is enabled, we
+// standardize the email addresses in the identity part of the rule, so that they
+// match the extended email variants in the firewall policies. When this setting is
+// turned off, the email addresses in the identity part of the rule will be matched
+// exactly as provided. If your email has `.` or `+` modifiers, you should enable
+// this setting.
 type ExtendedEmailMatching struct {
 	// Specify whether to match all variants of user emails (with + or . modifiers)
 	// used as criteria in Firewall policies.
@@ -473,7 +478,12 @@ func (r extendedEmailMatchingJSON) RawJSON() string {
 	return r.raw
 }
 
-// Specify user emails settings for the firewall policies.
+// Specify user email settings for the firewall policies. When this is enabled, we
+// standardize the email addresses in the identity part of the rule, so that they
+// match the extended email variants in the firewall policies. When this setting is
+// turned off, the email addresses in the identity part of the rule will be matched
+// exactly as provided. If your email has `.` or `+` modifiers, you should enable
+// this setting.
 type ExtendedEmailMatchingParam struct {
 	// Specify whether to match all variants of user emails (with + or . modifiers)
 	// used as criteria in Firewall policies.
@@ -536,7 +546,12 @@ type GatewayConfigurationSettings struct {
 	//
 	// Deprecated: deprecated
 	CustomCertificate CustomCertificateSettings `json:"custom_certificate,nullable"`
-	// Specify user emails settings for the firewall policies.
+	// Specify user email settings for the firewall policies. When this is enabled, we
+	// standardize the email addresses in the identity part of the rule, so that they
+	// match the extended email variants in the firewall policies. When this setting is
+	// turned off, the email addresses in the identity part of the rule will be matched
+	// exactly as provided. If your email has `.` or `+` modifiers, you should enable
+	// this setting.
 	ExtendedEmailMatching ExtendedEmailMatching `json:"extended_email_matching,nullable"`
 	// Specify FIPS settings.
 	Fips FipsSettings `json:"fips,nullable"`
@@ -740,7 +755,12 @@ type GatewayConfigurationSettingsParam struct {
 	//
 	// Deprecated: deprecated
 	CustomCertificate param.Field[CustomCertificateSettingsParam] `json:"custom_certificate"`
-	// Specify user emails settings for the firewall policies.
+	// Specify user email settings for the firewall policies. When this is enabled, we
+	// standardize the email addresses in the identity part of the rule, so that they
+	// match the extended email variants in the firewall policies. When this setting is
+	// turned off, the email addresses in the identity part of the rule will be matched
+	// exactly as provided. If your email has `.` or `+` modifiers, you should enable
+	// this setting.
 	ExtendedEmailMatching param.Field[ExtendedEmailMatchingParam] `json:"extended_email_matching"`
 	// Specify FIPS settings.
 	Fips param.Field[FipsSettingsParam] `json:"fips"`
diff --git a/zero_trust/gatewayrule.go b/zero_trust/gatewayrule.go
