chore(api): update composite API spec

Author: stainless-app[bot]

.stats.yml

@@ -1,4 +1,4 @@
 configured_endpoints: 2184
-openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/cloudflare%2Fcloudflare-f6c736e0222af704b2e8f761b885e1e9bf09fd76ef40b575f420fb2f45495ea7.yml
-openapi_spec_hash: cd80e4c5d8c0fa27bd23f8238d7e13d2
+openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/cloudflare%2Fcloudflare-8d1ce6c5608563d8f7c974108d59033116d234666eb72d8d1227af2994a4fef7.yml
+openapi_spec_hash: 00d82a3a7a91eeb2f55dc0654dfe22ff
 config_hash: 02fbdebd82a78d34dd6d005f1d2ad28c

src/cloudflare/resources/zero_trust/gateway/lists/lists.py

@@ -64,7 +64,7 @@ def create(
         *,
         account_id: str | None = None,
         name: str,
-        type: Literal["SERIAL", "URL", "DOMAIN", "EMAIL", "IP", "CATEGORY", "LOCATION", "DEVICE"],
+        type: Literal["SERIAL", "URL", "DOMAIN", "EMAIL", "IP", "CATEGORY", "LOCATION", "DEVICE", "AAGUID"],
         description: str | Omit = omit,
         items: Iterable[list_create_params.Item] | Omit = omit,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
@@ -186,7 +186,8 @@ def list(
         self,
         *,
         account_id: str | None = None,
-        type: Literal["SERIAL", "URL", "DOMAIN", "EMAIL", "IP", "CATEGORY", "LOCATION", "DEVICE"] | Omit = omit,
+        type: Literal["SERIAL", "URL", "DOMAIN", "EMAIL", "IP", "CATEGORY", "LOCATION", "DEVICE", "AAGUID"]
+        | Omit = omit,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
         # The extra values given here take precedence over values defined on the client or passed to this method.
         extra_headers: Headers | None = None,
@@ -400,7 +401,7 @@ async def create(
         *,
         account_id: str | None = None,
         name: str,
-        type: Literal["SERIAL", "URL", "DOMAIN", "EMAIL", "IP", "CATEGORY", "LOCATION", "DEVICE"],
+        type: Literal["SERIAL", "URL", "DOMAIN", "EMAIL", "IP", "CATEGORY", "LOCATION", "DEVICE", "AAGUID"],
         description: str | Omit = omit,
         items: Iterable[list_create_params.Item] | Omit = omit,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
@@ -522,7 +523,8 @@ def list(
         self,
         *,
         account_id: str | None = None,
-        type: Literal["SERIAL", "URL", "DOMAIN", "EMAIL", "IP", "CATEGORY", "LOCATION", "DEVICE"] | Omit = omit,
+        type: Literal["SERIAL", "URL", "DOMAIN", "EMAIL", "IP", "CATEGORY", "LOCATION", "DEVICE", "AAGUID"]
+        | Omit = omit,
         # Use the following arguments if you need to pass additional parameters to the API that aren't available via kwargs.
         # The extra values given here take precedence over values defined on the client or passed to this method.
         extra_headers: Headers | None = None,

src/cloudflare/types/zero_trust/gateway/gateway_list.py

@@ -28,7 +28,7 @@ class GatewayList(BaseModel):
     name: Optional[str] = None
     """Specify the list name."""
 
-    type: Optional[Literal["SERIAL", "URL", "DOMAIN", "EMAIL", "IP", "CATEGORY", "LOCATION", "DEVICE"]] = None
+    type: Optional[Literal["SERIAL", "URL", "DOMAIN", "EMAIL", "IP", "CATEGORY", "LOCATION", "DEVICE", "AAGUID"]] = None
     """Specify the list type."""
 
     updated_at: Optional[datetime] = None

src/cloudflare/types/zero_trust/gateway/list_create_params.py

@@ -14,7 +14,7 @@ class ListCreateParams(TypedDict, total=False):
     name: Required[str]
     """Specify the list name."""
 
-    type: Required[Literal["SERIAL", "URL", "DOMAIN", "EMAIL", "IP", "CATEGORY", "LOCATION", "DEVICE"]]
+    type: Required[Literal["SERIAL", "URL", "DOMAIN", "EMAIL", "IP", "CATEGORY", "LOCATION", "DEVICE", "AAGUID"]]
     """Specify the list type."""
 
     description: str

src/cloudflare/types/zero_trust/gateway/list_create_response.py

@@ -25,7 +25,7 @@ class ListCreateResponse(BaseModel):
     name: Optional[str] = None
     """Specify the list name."""
 
-    type: Optional[Literal["SERIAL", "URL", "DOMAIN", "EMAIL", "IP", "CATEGORY", "LOCATION", "DEVICE"]] = None
+    type: Optional[Literal["SERIAL", "URL", "DOMAIN", "EMAIL", "IP", "CATEGORY", "LOCATION", "DEVICE", "AAGUID"]] = None
     """Specify the list type."""
 
     updated_at: Optional[datetime] = None

src/cloudflare/types/zero_trust/gateway/list_list_params.py

@@ -10,5 +10,5 @@
 class ListListParams(TypedDict, total=False):
     account_id: str
 
-    type: Literal["SERIAL", "URL", "DOMAIN", "EMAIL", "IP", "CATEGORY", "LOCATION", "DEVICE"]
+    type: Literal["SERIAL", "URL", "DOMAIN", "EMAIL", "IP", "CATEGORY", "LOCATION", "DEVICE", "AAGUID"]
     """Specify the list type."""

src/cloudflare/types/zero_trust/gateway/rule_setting.py

@@ -64,8 +64,8 @@ class BISOAdminControls(BaseModel):
     download: Optional[Literal["enabled", "disabled", "remote_only"]] = None
     """Configure download behavior.
 
-    When set to remote_only, users can view downloads but cannot save them. Applies
-    only when version == "v2".
+    When set to remote_only, users can view downloads but cannot save them. If this
+    field is absent, downloading remains enabled. Applies only when version == "v2".
     """
 
     dp: Optional[bool] = None
@@ -105,6 +105,12 @@ class BISOAdminControls(BaseModel):
     version: Optional[Literal["v1", "v2"]] = None
     """Indicate which version of the browser isolation controls should apply."""
 
+    wm_id: Optional[str] = None
+    """Specify the watermark ID (UUID) to apply to the isolated browser session.
+
+    When present, enables watermark rendering in the isolated browser.
+    """
+
 
 class BlockPage(BaseModel):
     """Configure custom block page settings.

src/cloudflare/types/zero_trust/gateway/rule_setting_param.py

@@ -64,8 +64,8 @@ class BISOAdminControls(TypedDict, total=False):
     download: Literal["enabled", "disabled", "remote_only"]
     """Configure download behavior.
 
-    When set to remote_only, users can view downloads but cannot save them. Applies
-    only when version == "v2".
+    When set to remote_only, users can view downloads but cannot save them. If this
+    field is absent, downloading remains enabled. Applies only when version == "v2".
     """
 
     dp: bool
@@ -105,6 +105,12 @@ class BISOAdminControls(TypedDict, total=False):
     version: Literal["v1", "v2"]
     """Indicate which version of the browser isolation controls should apply."""
 
+    wm_id: str
+    """Specify the watermark ID (UUID) to apply to the isolated browser session.
+
+    When present, enables watermark rendering in the isolated browser.
+    """
+
 
 class BlockPage(TypedDict, total=False):
     """Configure custom block page settings.

tests/api_resources/zero_trust/gateway/test_rules.py

@@ -66,6 +66,7 @@ def test_method_create_with_all_params(self, client: Cloudflare) -> None:
                     "printing": "enabled",
                     "upload": "enabled",
                     "version": "v1",
+                    "wm_id": "475345dc-5299-4b6e-8f6a-3d3e4c8e9f1a",
                 },
                 "block_page": {
                     "target_uri": "https://example.com",
@@ -230,6 +231,7 @@ def test_method_update_with_all_params(self, client: Cloudflare) -> None:
                     "printing": "enabled",
                     "upload": "enabled",
                     "version": "v1",
+                    "wm_id": "475345dc-5299-4b6e-8f6a-3d3e4c8e9f1a",
                 },
                 "block_page": {
                     "target_uri": "https://example.com",
@@ -629,6 +631,7 @@ async def test_method_create_with_all_params(self, async_client: AsyncCloudflare
                     "printing": "enabled",
                     "upload": "enabled",
                     "version": "v1",
+                    "wm_id": "475345dc-5299-4b6e-8f6a-3d3e4c8e9f1a",
                 },
                 "block_page": {
                     "target_uri": "https://example.com",
@@ -793,6 +796,7 @@ async def test_method_update_with_all_params(self, async_client: AsyncCloudflare
                     "printing": "enabled",
                     "upload": "enabled",
                     "version": "v1",
+                    "wm_id": "475345dc-5299-4b6e-8f6a-3d3e4c8e9f1a",
                 },
                 "block_page": {
                     "target_uri": "https://example.com",