feat(api): api update

stainless-app[bot] · stainless-app[bot] · commit 4ed10d942594 · 2025-05-19T15:16:24.000Z
diff --git a/.stats.yml b/.stats.yml
@@ -1,4 +1,4 @@
 configured_endpoints: 1739
-openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/cloudflare%2Fcloudflare-2ce6ed58989278dcccbfe7c717fcbbb3c8be830ac0d0de20f2e255ccda719a16.yml
-openapi_spec_hash: dd4866fddb7b30cf5643495c95614ca3
+openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/cloudflare%2Fcloudflare-d91abfd9ef1b873fc9f31227f8dfe6130806a3a92d9dc841aa14064607690a7b.yml
+openapi_spec_hash: 119fefce95d937345b6694bbbb0d5d1e
 config_hash: 7e270b3449efce600e3469937a344c2d
diff --git a/api.md b/api.md
@@ -6702,7 +6702,7 @@ Methods:
 
 Methods:
 
-- <code title="get /accounts/{account_id}/gateway/configuration/custom_certificate">client.zero_trust.gateway.configurations.custom_certificate.<a href="./src/cloudflare/resources/zero_trust/gateway/configurations/custom_certificate.py">get</a>(\*, account_id) -> <a href="./src/cloudflare/types/zero_trust/gateway/custom_certificate_settings.py">CustomCertificateSettings</a></code>
+- <code title="get /accounts/{account_id}/gateway/configuration/custom_certificate">client.zero_trust.gateway.configurations.custom_certificate.<a href="./src/cloudflare/resources/zero_trust/gateway/configurations/custom_certificate.py">get</a>(\*, account_id) -> <a href="./src/cloudflare/types/zero_trust/gateway/custom_certificate_settings.py">Optional[CustomCertificateSettings]</a></code>
 
 ### Lists
 
diff --git a/src/cloudflare/resources/logs/control/cmb/config.py b/src/cloudflare/resources/logs/control/cmb/config.py
@@ -62,7 +62,7 @@ def create(
         Args:
           account_id: Identifier.
 
-          regions: Comma-separated list of regions.
+          regions: Name of the region.
 
           extra_headers: Send extra headers
 
@@ -204,7 +204,7 @@ async def create(
         Args:
           account_id: Identifier.
 
-          regions: Comma-separated list of regions.
+          regions: Name of the region.
 
           extra_headers: Send extra headers
 
diff --git a/src/cloudflare/resources/zero_trust/gateway/configurations/custom_certificate.py b/src/cloudflare/resources/zero_trust/gateway/configurations/custom_certificate.py
@@ -2,6 +2,8 @@
 
 from __future__ import annotations
 
+from typing import Optional
+
 import httpx
 
 from ....._types import NOT_GIVEN, Body, Query, Headers, NotGiven
@@ -49,7 +51,7 @@ def get(
         extra_query: Query | None = None,
         extra_body: Body | None = None,
         timeout: float | httpx.Timeout | None | NotGiven = NOT_GIVEN,
-    ) -> CustomCertificateSettings:
+    ) -> Optional[CustomCertificateSettings]:
         """
         Fetches the current Zero Trust certificate configuration.
 
@@ -103,7 +105,7 @@ async def get(
         extra_query: Query | None = None,
         extra_body: Body | None = None,
         timeout: float | httpx.Timeout | None | NotGiven = NOT_GIVEN,
-    ) -> CustomCertificateSettings:
+    ) -> Optional[CustomCertificateSettings]:
         """
         Fetches the current Zero Trust certificate configuration.
 
diff --git a/src/cloudflare/resources/zero_trust/gateway/rules.py b/src/cloudflare/resources/zero_trust/gateway/rules.py
@@ -75,12 +75,12 @@ def create(
         description: str | NotGiven = NOT_GIVEN,
         device_posture: str | NotGiven = NOT_GIVEN,
         enabled: bool | NotGiven = NOT_GIVEN,
-        expiration: rule_create_params.Expiration | NotGiven = NOT_GIVEN,
+        expiration: Optional[rule_create_params.Expiration] | NotGiven = NOT_GIVEN,
         filters: List[GatewayFilter] | NotGiven = NOT_GIVEN,
         identity: str | NotGiven = NOT_GIVEN,
         precedence: int | NotGiven = NOT_GIVEN,
         rule_settings: RuleSettingParam | NotGiven = NOT_GIVEN,
-        schedule: ScheduleParam | NotGiven = NOT_GIVEN,
+        schedule: Optional[ScheduleParam] | NotGiven = NOT_GIVEN,
         traffic: str | NotGiven = NOT_GIVEN,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
         # The extra values given here take precedence over values defined on the client or passed to this method.
@@ -193,12 +193,12 @@ def update(
         description: str | NotGiven = NOT_GIVEN,
         device_posture: str | NotGiven = NOT_GIVEN,
         enabled: bool | NotGiven = NOT_GIVEN,
-        expiration: rule_update_params.Expiration | NotGiven = NOT_GIVEN,
+        expiration: Optional[rule_update_params.Expiration] | NotGiven = NOT_GIVEN,
         filters: List[GatewayFilter] | NotGiven = NOT_GIVEN,
         identity: str | NotGiven = NOT_GIVEN,
         precedence: int | NotGiven = NOT_GIVEN,
         rule_settings: RuleSettingParam | NotGiven = NOT_GIVEN,
-        schedule: ScheduleParam | NotGiven = NOT_GIVEN,
+        schedule: Optional[ScheduleParam] | NotGiven = NOT_GIVEN,
         traffic: str | NotGiven = NOT_GIVEN,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
         # The extra values given here take precedence over values defined on the client or passed to this method.
@@ -499,12 +499,12 @@ async def create(
         description: str | NotGiven = NOT_GIVEN,
         device_posture: str | NotGiven = NOT_GIVEN,
         enabled: bool | NotGiven = NOT_GIVEN,
-        expiration: rule_create_params.Expiration | NotGiven = NOT_GIVEN,
+        expiration: Optional[rule_create_params.Expiration] | NotGiven = NOT_GIVEN,
         filters: List[GatewayFilter] | NotGiven = NOT_GIVEN,
         identity: str | NotGiven = NOT_GIVEN,
         precedence: int | NotGiven = NOT_GIVEN,
         rule_settings: RuleSettingParam | NotGiven = NOT_GIVEN,
-        schedule: ScheduleParam | NotGiven = NOT_GIVEN,
+        schedule: Optional[ScheduleParam] | NotGiven = NOT_GIVEN,
         traffic: str | NotGiven = NOT_GIVEN,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
         # The extra values given here take precedence over values defined on the client or passed to this method.
@@ -617,12 +617,12 @@ async def update(
         description: str | NotGiven = NOT_GIVEN,
         device_posture: str | NotGiven = NOT_GIVEN,
         enabled: bool | NotGiven = NOT_GIVEN,
-        expiration: rule_update_params.Expiration | NotGiven = NOT_GIVEN,
+        expiration: Optional[rule_update_params.Expiration] | NotGiven = NOT_GIVEN,
         filters: List[GatewayFilter] | NotGiven = NOT_GIVEN,
         identity: str | NotGiven = NOT_GIVEN,
         precedence: int | NotGiven = NOT_GIVEN,
         rule_settings: RuleSettingParam | NotGiven = NOT_GIVEN,
-        schedule: ScheduleParam | NotGiven = NOT_GIVEN,
+        schedule: Optional[ScheduleParam] | NotGiven = NOT_GIVEN,
         traffic: str | NotGiven = NOT_GIVEN,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
         # The extra values given here take precedence over values defined on the client or passed to this method.
diff --git a/src/cloudflare/types/logs/control/cmb/cmb_config.py b/src/cloudflare/types/logs/control/cmb/cmb_config.py
@@ -9,4 +9,4 @@
 
 class CmbConfig(BaseModel):
     regions: Optional[str] = None
-    """Comma-separated list of regions."""
+    """Name of the region."""
diff --git a/src/cloudflare/types/logs/control/cmb/config_create_params.py b/src/cloudflare/types/logs/control/cmb/config_create_params.py
@@ -12,4 +12,4 @@ class ConfigCreateParams(TypedDict, total=False):
     """Identifier."""
 
     regions: str
-    """Comma-separated list of regions."""
+    """Name of the region."""
diff --git a/src/cloudflare/types/zero_trust/gateway/anti_virus_settings_param.py b/src/cloudflare/types/zero_trust/gateway/anti_virus_settings_param.py
@@ -2,6 +2,7 @@
 
 from __future__ import annotations
 
+from typing import Optional
 from typing_extensions import TypedDict
 
 from .notification_settings_param import NotificationSettingsParam
@@ -19,7 +20,7 @@ class AntiVirusSettingsParam(TypedDict, total=False):
     fail_closed: bool
     """Block requests for files that cannot be scanned."""
 
-    notification_settings: NotificationSettingsParam
+    notification_settings: Optional[NotificationSettingsParam]
     """
     Configure a message to display on the user's device when an antivirus search is
     performed.
diff --git a/src/cloudflare/types/zero_trust/gateway/gateway_configuration_settings_param.py b/src/cloudflare/types/zero_trust/gateway/gateway_configuration_settings_param.py
@@ -2,6 +2,7 @@
 
 from __future__ import annotations
 
+from typing import Optional
 from typing_extensions import Literal, Required, TypedDict
 
 from .tls_settings_param import TLSSettingsParam
@@ -41,47 +42,47 @@ class Sandbox(TypedDict, total=False):
 
 
 class GatewayConfigurationSettingsParam(TypedDict, total=False):
-    activity_log: ActivityLogSettingsParam
+    activity_log: Optional[ActivityLogSettingsParam]
     """Activity log settings."""
 
-    antivirus: AntiVirusSettingsParam
+    antivirus: Optional[AntiVirusSettingsParam]
     """Anti-virus settings."""
 
-    block_page: BlockPageSettingsParam
+    block_page: Optional[BlockPageSettingsParam]
     """Block page layout settings."""
 
-    body_scanning: BodyScanningSettingsParam
+    body_scanning: Optional[BodyScanningSettingsParam]
     """DLP body scanning settings."""
 
-    browser_isolation: BrowserIsolationSettingsParam
+    browser_isolation: Optional[BrowserIsolationSettingsParam]
     """Browser isolation settings."""
 
-    certificate: Certificate
+    certificate: Optional[Certificate]
     """Certificate settings for Gateway TLS interception.
 
     If not specified, the Cloudflare Root CA will be used.
     """
 
-    custom_certificate: CustomCertificateSettingsParam
+    custom_certificate: Optional[CustomCertificateSettingsParam]
     """Custom certificate settings for BYO-PKI.
 
     (deprecated and replaced by `certificate`)
     """
 
-    extended_email_matching: ExtendedEmailMatchingParam
+    extended_email_matching: Optional[ExtendedEmailMatchingParam]
     """Extended e-mail matching settings."""
 
-    fips: FipsSettingsParam
+    fips: Optional[FipsSettingsParam]
     """FIPS settings."""
 
-    host_selector: HostSelector
+    host_selector: Optional[HostSelector]
     """Setting to enable host selector in egress policies."""
 
-    protocol_detection: ProtocolDetectionParam
+    protocol_detection: Optional[ProtocolDetectionParam]
     """Protocol Detection settings."""
 
-    sandbox: Sandbox
+    sandbox: Optional[Sandbox]
     """Sandbox settings."""
 
-    tls_decrypt: TLSSettingsParam
+    tls_decrypt: Optional[TLSSettingsParam]
     """TLS interception settings."""
diff --git a/src/cloudflare/types/zero_trust/gateway/rule_create_params.py b/src/cloudflare/types/zero_trust/gateway/rule_create_params.py
@@ -2,7 +2,7 @@
 
 from __future__ import annotations
 
-from typing import List, Union
+from typing import List, Union, Optional
 from datetime import datetime
 from typing_extensions import Literal, Required, Annotated, TypedDict
 
@@ -54,7 +54,7 @@ class RuleCreateParams(TypedDict, total=False):
     enabled: bool
     """True if the rule is enabled."""
 
-    expiration: Expiration
+    expiration: Optional[Expiration]
     """The expiration time stamp and default duration of a DNS policy.
 
     Takes precedence over the policy's `schedule` configuration, if any.
@@ -83,7 +83,7 @@ class RuleCreateParams(TypedDict, total=False):
     rule_settings: RuleSettingParam
     """Additional settings that modify the rule's action."""
 
-    schedule: ScheduleParam
+    schedule: Optional[ScheduleParam]
     """The schedule for activating DNS policies.
 
     This does not apply to HTTP or network policies.
diff --git a/src/cloudflare/types/zero_trust/gateway/rule_setting_param.py b/src/cloudflare/types/zero_trust/gateway/rule_setting_param.py
@@ -200,7 +200,7 @@ class UntrustedCERT(TypedDict, total=False):
 
 
 class RuleSettingParam(TypedDict, total=False):
-    add_headers: Dict[str, str]
+    add_headers: Optional[Dict[str, str]]
     """Add custom headers to allowed requests, in the form of key-value pairs.
 
     Keys are header names, pointing to an array with its header value(s).
@@ -209,13 +209,13 @@ class RuleSettingParam(TypedDict, total=False):
     allow_child_bypass: Optional[bool]
     """Set by parent MSP accounts to enable their children to bypass this rule."""
 
-    audit_ssh: AuditSSH
+    audit_ssh: Optional[AuditSSH]
     """Settings for the Audit SSH action."""
 
-    biso_admin_controls: BISOAdminControls
+    biso_admin_controls: Optional[BISOAdminControls]
     """Configure how browser isolation behaves."""
 
-    block_page: BlockPage
+    block_page: Optional[BlockPage]
     """Custom block page settings.
 
     If missing/null, blocking will use the the account settings.
@@ -233,18 +233,18 @@ class RuleSettingParam(TypedDict, total=False):
     bypass_parent_rule: Optional[bool]
     """Set by children MSP accounts to bypass their parent's rules."""
 
-    check_session: CheckSession
+    check_session: Optional[CheckSession]
     """Configure how session check behaves."""
 
-    dns_resolvers: DNSResolvers
+    dns_resolvers: Optional[DNSResolvers]
     """Add your own custom resolvers to route queries that match the resolver policy.
 
     Cannot be used when 'resolve_dns_through_cloudflare' or 'resolve_dns_internally'
     are set. DNS queries will route to the address closest to their origin. Only
     valid when a rule's action is set to 'resolve'.
     """
 
-    egress: Egress
+    egress: Optional[Egress]
     """Configure how Gateway Proxy traffic egresses.
 
     You can enable this setting for rules with Egress actions and filters, or omit
@@ -273,10 +273,10 @@ class RuleSettingParam(TypedDict, total=False):
     By default indicator feeds only block based on domain names.
     """
 
-    l4override: L4override
+    l4override: Optional[L4override]
     """Send matching traffic to the supplied destination IP address and port."""
 
-    notification_settings: NotificationSettings
+    notification_settings: Optional[NotificationSettings]
     """
     Configure a notification to display on the user's device when this rule is
     matched.
@@ -285,33 +285,33 @@ class RuleSettingParam(TypedDict, total=False):
     override_host: str
     """Override matching DNS queries with a hostname."""
 
-    override_ips: List[str]
+    override_ips: Optional[List[str]]
     """Override matching DNS queries with an IP or set of IPs."""
 
-    payload_log: PayloadLog
+    payload_log: Optional[PayloadLog]
     """Configure DLP payload logging."""
 
-    quarantine: Quarantine
+    quarantine: Optional[Quarantine]
     """Settings that apply to quarantine rules"""
 
-    redirect: Redirect
+    redirect: Optional[Redirect]
     """Settings that apply to redirect rules"""
 
-    resolve_dns_internally: ResolveDNSInternally
+    resolve_dns_internally: Optional[ResolveDNSInternally]
     """
     Configure to forward the query to the internal DNS service, passing the
     specified 'view_id' as input. Cannot be set when 'dns_resolvers' are specified
     or 'resolve_dns_through_cloudflare' is set. Only valid when a rule's action is
     set to 'resolve'.
     """
 
-    resolve_dns_through_cloudflare: bool
+    resolve_dns_through_cloudflare: Optional[bool]
     """
     Enable to send queries that match the policy to Cloudflare's default 1.1.1.1 DNS
     resolver. Cannot be set when 'dns_resolvers' are specified or
     'resolve_dns_internally' is set. Only valid when a rule's action is set to
     'resolve'.
     """
 
-    untrusted_cert: UntrustedCERT
+    untrusted_cert: Optional[UntrustedCERT]
     """Configure behavior when an upstream cert is invalid or an SSL error occurs."""
diff --git a/src/cloudflare/types/zero_trust/gateway/rule_update_params.py b/src/cloudflare/types/zero_trust/gateway/rule_update_params.py
@@ -2,7 +2,7 @@
 
 from __future__ import annotations
 
-from typing import List, Union
+from typing import List, Union, Optional
 from datetime import datetime
 from typing_extensions import Literal, Required, Annotated, TypedDict
 
@@ -54,7 +54,7 @@ class RuleUpdateParams(TypedDict, total=False):
     enabled: bool
     """True if the rule is enabled."""
 
-    expiration: Expiration
+    expiration: Optional[Expiration]
     """The expiration time stamp and default duration of a DNS policy.
 
     Takes precedence over the policy's `schedule` configuration, if any.
@@ -83,7 +83,7 @@ class RuleUpdateParams(TypedDict, total=False):
     rule_settings: RuleSettingParam
     """Additional settings that modify the rule's action."""
 
-    schedule: ScheduleParam
+    schedule: Optional[ScheduleParam]
     """The schedule for activating DNS policies.
 
     This does not apply to HTTP or network policies.
diff --git a/tests/api_resources/zero_trust/gateway/configurations/test_custom_certificate.py b/tests/api_resources/zero_trust/gateway/configurations/test_custom_certificate.py
