chore(api): update composite API spec

Author: stainless-app[bot]

.stats.yml

@@ -1,4 +1,4 @@
 configured_endpoints: 2409
-openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/cloudflare/cloudflare-c4a28c454f80a442d6fe13dc6727fb51eef746adf2266ea644e78273a086c71a.yml
-openapi_spec_hash: daebb36576d7be6faedb17ac5aa55024
+openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/cloudflare/cloudflare-26b407db284a9e5c2ae968d8134f1682fd10ffd1dc4a79aa3b2c6fe10f2251db.yml
+openapi_spec_hash: c0570ee25e7fd6eea844983b22b042fd
 config_hash: 517f3639f0355eae78476ce617456698

src/cloudflare/resources/zero_trust/organizations/organizations.py

@@ -76,8 +76,8 @@ def create(
         is_ui_read_only: bool | Omit = omit,
         login_design: LoginDesignParam | Omit = omit,
         mfa_config: organization_create_params.MfaConfig | Omit = omit,
+        mfa_piv_key_requirements: organization_create_params.MfaPivKeyRequirements | Omit = omit,
         mfa_required_for_all_apps: bool | Omit = omit,
-        mfa_ssh_piv_key_requirements: organization_create_params.MfaSSHPivKeyRequirements | Omit = omit,
         session_duration: str | Omit = omit,
         ui_read_only_toggle_reason: str | Omit = omit,
         user_seat_expiration_inactive_time: str | Omit = omit,
@@ -123,13 +123,13 @@ def create(
 
           mfa_config: Configures multi-factor authentication (MFA) settings for an organization.
 
+          mfa_piv_key_requirements: Configures PIV key requirements for MFA using hardware security keys.
+
           mfa_required_for_all_apps: Determines whether global MFA settings apply to applications by default. The
               organization must have MFA enabled with at least one authentication method and a
               session duration configured. Note: 'allowed_authenticators' cannot only contain
-              'ssh_piv_key' if the organization has any non-infrastructure applications
-              because PIV keys are only compatible with infrastructure apps.
-
-          mfa_ssh_piv_key_requirements: Configures SSH PIV key requirements for MFA using hardware security keys.
+              'piv_key' if the organization has any non-infrastructure applications because
+              PIV keys are only compatible with infrastructure apps.
 
           session_duration: The amount of time that tokens issued for applications will be valid. Must be in
               the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m,
@@ -183,8 +183,8 @@ def create(
                     "is_ui_read_only": is_ui_read_only,
                     "login_design": login_design,
                     "mfa_config": mfa_config,
+                    "mfa_piv_key_requirements": mfa_piv_key_requirements,
                     "mfa_required_for_all_apps": mfa_required_for_all_apps,
-                    "mfa_ssh_piv_key_requirements": mfa_ssh_piv_key_requirements,
                     "session_duration": session_duration,
                     "ui_read_only_toggle_reason": ui_read_only_toggle_reason,
                     "user_seat_expiration_inactive_time": user_seat_expiration_inactive_time,
@@ -216,8 +216,8 @@ def update(
         is_ui_read_only: bool | Omit = omit,
         login_design: LoginDesignParam | Omit = omit,
         mfa_config: organization_update_params.MfaConfig | Omit = omit,
+        mfa_piv_key_requirements: organization_update_params.MfaPivKeyRequirements | Omit = omit,
         mfa_required_for_all_apps: bool | Omit = omit,
-        mfa_ssh_piv_key_requirements: organization_update_params.MfaSSHPivKeyRequirements | Omit = omit,
         name: str | Omit = omit,
         session_duration: str | Omit = omit,
         ui_read_only_toggle_reason: str | Omit = omit,
@@ -262,13 +262,13 @@ def update(
 
           mfa_config: Configures multi-factor authentication (MFA) settings for an organization.
 
+          mfa_piv_key_requirements: Configures PIV key requirements for MFA using hardware security keys.
+
           mfa_required_for_all_apps: Determines whether global MFA settings apply to applications by default. The
               organization must have MFA enabled with at least one authentication method and a
               session duration configured. Note: 'allowed_authenticators' cannot only contain
-              'ssh_piv_key' if the organization has any non-infrastructure applications
-              because PIV keys are only compatible with infrastructure apps.
-
-          mfa_ssh_piv_key_requirements: Configures SSH PIV key requirements for MFA using hardware security keys.
+              'piv_key' if the organization has any non-infrastructure applications because
+              PIV keys are only compatible with infrastructure apps.
 
           name: The name of your Zero Trust organization.
 
@@ -324,8 +324,8 @@ def update(
                     "is_ui_read_only": is_ui_read_only,
                     "login_design": login_design,
                     "mfa_config": mfa_config,
+                    "mfa_piv_key_requirements": mfa_piv_key_requirements,
                     "mfa_required_for_all_apps": mfa_required_for_all_apps,
-                    "mfa_ssh_piv_key_requirements": mfa_ssh_piv_key_requirements,
                     "name": name,
                     "session_duration": session_duration,
                     "ui_read_only_toggle_reason": ui_read_only_toggle_reason,
@@ -526,8 +526,8 @@ async def create(
         is_ui_read_only: bool | Omit = omit,
         login_design: LoginDesignParam | Omit = omit,
         mfa_config: organization_create_params.MfaConfig | Omit = omit,
+        mfa_piv_key_requirements: organization_create_params.MfaPivKeyRequirements | Omit = omit,
         mfa_required_for_all_apps: bool | Omit = omit,
-        mfa_ssh_piv_key_requirements: organization_create_params.MfaSSHPivKeyRequirements | Omit = omit,
         session_duration: str | Omit = omit,
         ui_read_only_toggle_reason: str | Omit = omit,
         user_seat_expiration_inactive_time: str | Omit = omit,
@@ -573,13 +573,13 @@ async def create(
 
           mfa_config: Configures multi-factor authentication (MFA) settings for an organization.
 
+          mfa_piv_key_requirements: Configures PIV key requirements for MFA using hardware security keys.
+
           mfa_required_for_all_apps: Determines whether global MFA settings apply to applications by default. The
               organization must have MFA enabled with at least one authentication method and a
               session duration configured. Note: 'allowed_authenticators' cannot only contain
-              'ssh_piv_key' if the organization has any non-infrastructure applications
-              because PIV keys are only compatible with infrastructure apps.
-
-          mfa_ssh_piv_key_requirements: Configures SSH PIV key requirements for MFA using hardware security keys.
+              'piv_key' if the organization has any non-infrastructure applications because
+              PIV keys are only compatible with infrastructure apps.
 
           session_duration: The amount of time that tokens issued for applications will be valid. Must be in
               the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m,
@@ -633,8 +633,8 @@ async def create(
                     "is_ui_read_only": is_ui_read_only,
                     "login_design": login_design,
                     "mfa_config": mfa_config,
+                    "mfa_piv_key_requirements": mfa_piv_key_requirements,
                     "mfa_required_for_all_apps": mfa_required_for_all_apps,
-                    "mfa_ssh_piv_key_requirements": mfa_ssh_piv_key_requirements,
                     "session_duration": session_duration,
                     "ui_read_only_toggle_reason": ui_read_only_toggle_reason,
                     "user_seat_expiration_inactive_time": user_seat_expiration_inactive_time,
@@ -666,8 +666,8 @@ async def update(
         is_ui_read_only: bool | Omit = omit,
         login_design: LoginDesignParam | Omit = omit,
         mfa_config: organization_update_params.MfaConfig | Omit = omit,
+        mfa_piv_key_requirements: organization_update_params.MfaPivKeyRequirements | Omit = omit,
         mfa_required_for_all_apps: bool | Omit = omit,
-        mfa_ssh_piv_key_requirements: organization_update_params.MfaSSHPivKeyRequirements | Omit = omit,
         name: str | Omit = omit,
         session_duration: str | Omit = omit,
         ui_read_only_toggle_reason: str | Omit = omit,
@@ -712,13 +712,13 @@ async def update(
 
           mfa_config: Configures multi-factor authentication (MFA) settings for an organization.
 
+          mfa_piv_key_requirements: Configures PIV key requirements for MFA using hardware security keys.
+
           mfa_required_for_all_apps: Determines whether global MFA settings apply to applications by default. The
               organization must have MFA enabled with at least one authentication method and a
               session duration configured. Note: 'allowed_authenticators' cannot only contain
-              'ssh_piv_key' if the organization has any non-infrastructure applications
-              because PIV keys are only compatible with infrastructure apps.
-
-          mfa_ssh_piv_key_requirements: Configures SSH PIV key requirements for MFA using hardware security keys.
+              'piv_key' if the organization has any non-infrastructure applications because
+              PIV keys are only compatible with infrastructure apps.
 
           name: The name of your Zero Trust organization.
 
@@ -774,8 +774,8 @@ async def update(
                     "is_ui_read_only": is_ui_read_only,
                     "login_design": login_design,
                     "mfa_config": mfa_config,
+                    "mfa_piv_key_requirements": mfa_piv_key_requirements,
                     "mfa_required_for_all_apps": mfa_required_for_all_apps,
-                    "mfa_ssh_piv_key_requirements": mfa_ssh_piv_key_requirements,
                     "name": name,
                     "session_duration": session_duration,
                     "ui_read_only_toggle_reason": ui_read_only_toggle_reason,

src/cloudflare/types/zero_trust/access/application_create_params.py

@@ -3039,10 +3039,10 @@ class InfrastructureApplicationPolicyMfaConfig(TypedDict, total=False):
     Configures multi-factor authentication (MFA) settings for infrastructure applications.
     """
 
-    allowed_authenticators: List[Literal["ssh_piv_key"]]
+    allowed_authenticators: List[Literal["piv_key"]]
     """Lists the MFA methods that users can authenticate with.
 
-    For infrastructure applications, only `ssh_piv_key` is supported.
+    For infrastructure applications, only `piv_key` is supported.
     """
 
     mfa_disabled: bool

src/cloudflare/types/zero_trust/access/application_create_response.py

@@ -3068,10 +3068,10 @@ class InfrastructureApplicationPolicyMfaConfig(BaseModel):
     Configures multi-factor authentication (MFA) settings for infrastructure applications.
     """
 
-    allowed_authenticators: Optional[List[Literal["ssh_piv_key"]]] = None
+    allowed_authenticators: Optional[List[Literal["piv_key"]]] = None
     """Lists the MFA methods that users can authenticate with.
 
-    For infrastructure applications, only `ssh_piv_key` is supported.
+    For infrastructure applications, only `piv_key` is supported.
     """
 
     mfa_disabled: Optional[bool] = None

src/cloudflare/types/zero_trust/access/application_get_response.py

@@ -3068,10 +3068,10 @@ class InfrastructureApplicationPolicyMfaConfig(BaseModel):
     Configures multi-factor authentication (MFA) settings for infrastructure applications.
     """
 
-    allowed_authenticators: Optional[List[Literal["ssh_piv_key"]]] = None
+    allowed_authenticators: Optional[List[Literal["piv_key"]]] = None
     """Lists the MFA methods that users can authenticate with.
 
-    For infrastructure applications, only `ssh_piv_key` is supported.
+    For infrastructure applications, only `piv_key` is supported.
     """
 
     mfa_disabled: Optional[bool] = None

src/cloudflare/types/zero_trust/access/application_list_response.py

@@ -3068,10 +3068,10 @@ class InfrastructureApplicationPolicyMfaConfig(BaseModel):
     Configures multi-factor authentication (MFA) settings for infrastructure applications.
     """
 
-    allowed_authenticators: Optional[List[Literal["ssh_piv_key"]]] = None
+    allowed_authenticators: Optional[List[Literal["piv_key"]]] = None
     """Lists the MFA methods that users can authenticate with.
 
-    For infrastructure applications, only `ssh_piv_key` is supported.
+    For infrastructure applications, only `piv_key` is supported.
     """
 
     mfa_disabled: Optional[bool] = None

src/cloudflare/types/zero_trust/access/application_update_params.py

@@ -3039,10 +3039,10 @@ class InfrastructureApplicationPolicyMfaConfig(TypedDict, total=False):
     Configures multi-factor authentication (MFA) settings for infrastructure applications.
     """
 
-    allowed_authenticators: List[Literal["ssh_piv_key"]]
+    allowed_authenticators: List[Literal["piv_key"]]
     """Lists the MFA methods that users can authenticate with.
 
-    For infrastructure applications, only `ssh_piv_key` is supported.
+    For infrastructure applications, only `piv_key` is supported.
     """
 
     mfa_disabled: bool

src/cloudflare/types/zero_trust/access/application_update_response.py

@@ -3068,10 +3068,10 @@ class InfrastructureApplicationPolicyMfaConfig(BaseModel):
     Configures multi-factor authentication (MFA) settings for infrastructure applications.
     """
 
-    allowed_authenticators: Optional[List[Literal["ssh_piv_key"]]] = None
+    allowed_authenticators: Optional[List[Literal["piv_key"]]] = None
     """Lists the MFA methods that users can authenticate with.
 
-    For infrastructure applications, only `ssh_piv_key` is supported.
+    For infrastructure applications, only `piv_key` is supported.
     """
 
     mfa_disabled: Optional[bool] = None

src/cloudflare/types/zero_trust/organization.py

@@ -6,7 +6,7 @@
 from ..._models import BaseModel
 from .login_design import LoginDesign
 
-__all__ = ["Organization", "CustomPages", "MfaConfig", "MfaSSHPivKeyRequirements"]
+__all__ = ["Organization", "CustomPages", "MfaConfig", "MfaPivKeyRequirements"]
 
 
 class CustomPages(BaseModel):
@@ -23,7 +23,7 @@ class CustomPages(BaseModel):
 class MfaConfig(BaseModel):
     """Configures multi-factor authentication (MFA) settings for an organization."""
 
-    allowed_authenticators: Optional[List[Literal["totp", "biometrics", "security_key", "ssh_piv_key"]]] = None
+    allowed_authenticators: Optional[List[Literal["totp", "biometrics", "security_key", "piv_key"]]] = None
     """Lists the MFA methods that users can authenticate with."""
 
     amr_matching_session_duration: Optional[str] = None
@@ -45,8 +45,8 @@ class MfaConfig(BaseModel):
     """
 
 
-class MfaSSHPivKeyRequirements(BaseModel):
-    """Configures SSH PIV key requirements for MFA using hardware security keys."""
+class MfaPivKeyRequirements(BaseModel):
+    """Configures PIV key requirements for MFA using hardware security keys."""
 
     pin_policy: Optional[Literal["never", "once", "always"]] = None
     """Defines when a PIN is required to use the SSH key.
@@ -57,8 +57,8 @@ class MfaSSHPivKeyRequirements(BaseModel):
 
     require_fips_device: Optional[bool] = None
     """
-    Requires the SSH PIV key to be stored on a FIPS 140-2 Level 1 or higher
-    validated device.
+    Requires the PIV key to be stored on a FIPS 140-2 Level 1 or higher validated
+    device.
     """
 
     ssh_key_size: Optional[List[Literal[256, 384, 521, 2048, 3072, 4096]]] = None
@@ -128,18 +128,18 @@ class Organization(BaseModel):
     mfa_config: Optional[MfaConfig] = None
     """Configures multi-factor authentication (MFA) settings for an organization."""
 
+    mfa_piv_key_requirements: Optional[MfaPivKeyRequirements] = None
+    """Configures PIV key requirements for MFA using hardware security keys."""
+
     mfa_required_for_all_apps: Optional[bool] = None
     """Determines whether global MFA settings apply to applications by default.
 
     The organization must have MFA enabled with at least one authentication method
     and a session duration configured. Note: 'allowed_authenticators' cannot only
-    contain 'ssh_piv_key' if the organization has any non-infrastructure
-    applications because PIV keys are only compatible with infrastructure apps.
+    contain 'piv_key' if the organization has any non-infrastructure applications
+    because PIV keys are only compatible with infrastructure apps.
     """
 
-    mfa_ssh_piv_key_requirements: Optional[MfaSSHPivKeyRequirements] = None
-    """Configures SSH PIV key requirements for MFA using hardware security keys."""
-
     name: Optional[str] = None
     """The name of your Zero Trust organization."""
 

src/cloudflare/types/zero_trust/organization_create_params.py

@@ -8,7 +8,7 @@
 from ..._types import SequenceNotStr
 from .login_design_param import LoginDesignParam
 
-__all__ = ["OrganizationCreateParams", "MfaConfig", "MfaSSHPivKeyRequirements"]
+__all__ = ["OrganizationCreateParams", "MfaConfig", "MfaPivKeyRequirements"]
 
 
 class OrganizationCreateParams(TypedDict, total=False):
@@ -64,18 +64,18 @@ class OrganizationCreateParams(TypedDict, total=False):
     mfa_config: MfaConfig
     """Configures multi-factor authentication (MFA) settings for an organization."""
 
+    mfa_piv_key_requirements: MfaPivKeyRequirements
+    """Configures PIV key requirements for MFA using hardware security keys."""
+
     mfa_required_for_all_apps: bool
     """Determines whether global MFA settings apply to applications by default.
 
     The organization must have MFA enabled with at least one authentication method
     and a session duration configured. Note: 'allowed_authenticators' cannot only
-    contain 'ssh_piv_key' if the organization has any non-infrastructure
-    applications because PIV keys are only compatible with infrastructure apps.
+    contain 'piv_key' if the organization has any non-infrastructure applications
+    because PIV keys are only compatible with infrastructure apps.
     """
 
-    mfa_ssh_piv_key_requirements: MfaSSHPivKeyRequirements
-    """Configures SSH PIV key requirements for MFA using hardware security keys."""
-
     session_duration: str
     """The amount of time that tokens issued for applications will be valid.
 
@@ -105,7 +105,7 @@ class OrganizationCreateParams(TypedDict, total=False):
 class MfaConfig(TypedDict, total=False):
     """Configures multi-factor authentication (MFA) settings for an organization."""
 
-    allowed_authenticators: List[Literal["totp", "biometrics", "security_key", "ssh_piv_key"]]
+    allowed_authenticators: List[Literal["totp", "biometrics", "security_key", "piv_key"]]
     """Lists the MFA methods that users can authenticate with."""
 
     amr_matching_session_duration: str
@@ -127,8 +127,8 @@ class MfaConfig(TypedDict, total=False):
     """
 
 
-class MfaSSHPivKeyRequirements(TypedDict, total=False):
-    """Configures SSH PIV key requirements for MFA using hardware security keys."""
+class MfaPivKeyRequirements(TypedDict, total=False):
+    """Configures PIV key requirements for MFA using hardware security keys."""
 
     pin_policy: Literal["never", "once", "always"]
     """Defines when a PIN is required to use the SSH key.
@@ -139,8 +139,8 @@ class MfaSSHPivKeyRequirements(TypedDict, total=False):
 
     require_fips_device: bool
     """
-    Requires the SSH PIV key to be stored on a FIPS 140-2 Level 1 or higher
-    validated device.
+    Requires the PIV key to be stored on a FIPS 140-2 Level 1 or higher validated
+    device.
     """
 
     ssh_key_size: Iterable[Literal[256, 384, 521, 2048, 3072, 4096]]