feat(zero_trust): update generated types and methods

Author: musa-cf

src/cloudflare/resources/zero_trust/access/logs/access_requests.py

@@ -57,7 +57,7 @@ def list(
         direction: Literal["desc", "asc"] | Omit = omit,
         email: str | Omit = omit,
         email_exact: bool | Omit = omit,
-        email_op: Literal["eq", "neq"] | Omit = omit,
+        email_op: Literal["eq", "neq", "contains"] | Omit = omit,
         fields: str | Omit = omit,
         idp_op: Literal["eq", "neq"] | Omit = omit,
         limit: int | Omit = omit,
@@ -92,14 +92,23 @@ def list(
 
           direction: The chronological sorting order for the logs.
 
-          email: Filter by user email. Defaults to substring matching. To force exact matching,
-              set `email_exact=true`. Example (default): `email=@example.com` returns all
-              events with that domain. Example (exact):
-              `email=user@example.com&email_exact=true` returns only that user.
+          email: Filter by user email. Match mode is controlled by `emailOp` (preferred) or the
+              legacy `email_exact` flag.
+
+              - Default (no `emailOp`, `email_exact=false` or unset): substring match —
+                `email=@example.com` returns all events with that domain.
+              - Exact match: set `emailOp=eq` (preferred) or `email_exact=true` — e.g.
+                `email=user@example.com&email_exact=true` returns only that user.
+              - Explicit substring match: set `emailOp=contains` (without `email_exact=true`).
+                When both are set, `email_exact=true` takes precedence and the match is exact.
+              - Exclusion: set `emailOp=neq`. With `email_exact=true` this is an exact-value
+                exclusion; without it, a fuzzy substring exclusion.
 
           email_exact: When true, `email` is matched exactly instead of substring matching.
 
-          email_op: Operator for the `email` filter.
+          email_op: Operator for the `email` filter. `contains` performs a substring
+              (case-sensitive) match. When `email_exact=true` is also set, `email_exact` takes
+              precedence and `contains` is ignored.
 
           fields: Comma-separated list of fields to include in the response. When omitted, all
               fields are returned.
@@ -120,9 +129,11 @@ def list(
 
           until: The latest event timestamp to query.
 
-          user_id: Filter by user UUID.
+          user_id: Deprecated. Accepted for backward compatibility but no longer applied as a
+              filter. Use `email` instead.
 
-          user_id_op: Operator for the `user_id` filter.
+          user_id_op: Deprecated. Accepted for backward compatibility but no longer applied as a
+              filter (the `user_id` parameter is itself deprecated).
 
           extra_headers: Send extra headers
 
@@ -202,7 +213,7 @@ async def list(
         direction: Literal["desc", "asc"] | Omit = omit,
         email: str | Omit = omit,
         email_exact: bool | Omit = omit,
-        email_op: Literal["eq", "neq"] | Omit = omit,
+        email_op: Literal["eq", "neq", "contains"] | Omit = omit,
         fields: str | Omit = omit,
         idp_op: Literal["eq", "neq"] | Omit = omit,
         limit: int | Omit = omit,
@@ -237,14 +248,23 @@ async def list(
 
           direction: The chronological sorting order for the logs.
 
-          email: Filter by user email. Defaults to substring matching. To force exact matching,
-              set `email_exact=true`. Example (default): `email=@example.com` returns all
-              events with that domain. Example (exact):
-              `email=user@example.com&email_exact=true` returns only that user.
+          email: Filter by user email. Match mode is controlled by `emailOp` (preferred) or the
+              legacy `email_exact` flag.
+
+              - Default (no `emailOp`, `email_exact=false` or unset): substring match —
+                `email=@example.com` returns all events with that domain.
+              - Exact match: set `emailOp=eq` (preferred) or `email_exact=true` — e.g.
+                `email=user@example.com&email_exact=true` returns only that user.
+              - Explicit substring match: set `emailOp=contains` (without `email_exact=true`).
+                When both are set, `email_exact=true` takes precedence and the match is exact.
+              - Exclusion: set `emailOp=neq`. With `email_exact=true` this is an exact-value
+                exclusion; without it, a fuzzy substring exclusion.
 
           email_exact: When true, `email` is matched exactly instead of substring matching.
 
-          email_op: Operator for the `email` filter.
+          email_op: Operator for the `email` filter. `contains` performs a substring
+              (case-sensitive) match. When `email_exact=true` is also set, `email_exact` takes
+              precedence and `contains` is ignored.
 
           fields: Comma-separated list of fields to include in the response. When omitted, all
               fields are returned.
@@ -265,9 +285,11 @@ async def list(
 
           until: The latest event timestamp to query.
 
-          user_id: Filter by user UUID.
+          user_id: Deprecated. Accepted for backward compatibility but no longer applied as a
+              filter. Use `email` instead.
 
-          user_id_op: Operator for the `user_id` filter.
+          user_id_op: Deprecated. Accepted for backward compatibility but no longer applied as a
+              filter (the `user_id` parameter is itself deprecated).
 
           extra_headers: Send extra headers
 

src/cloudflare/resources/zero_trust/access/logs/scim/updates.py

@@ -51,16 +51,16 @@ def list(
         *,
         account_id: str,
         idp_id: SequenceNotStr[str],
-        cf_resource_id: str | Omit = omit,
+        cf_resource_id: SequenceNotStr[str] | Omit = omit,
         direction: Literal["desc", "asc"] | Omit = omit,
-        idp_resource_id: str | Omit = omit,
+        idp_resource_id: SequenceNotStr[str] | Omit = omit,
         limit: int | Omit = omit,
         page: int | Omit = omit,
         per_page: int | Omit = omit,
         request_method: List[Literal["DELETE", "PATCH", "POST", "PUT"]] | Omit = omit,
-        resource_group_name: str | Omit = omit,
+        resource_group_name: SequenceNotStr[str] | Omit = omit,
         resource_type: List[Literal["USER", "GROUP"]] | Omit = omit,
-        resource_user_email: str | Omit = omit,
+        resource_user_email: SequenceNotStr[str] | Omit = omit,
         since: Union[str, datetime] | Omit = omit,
         status: List[Literal["FAILURE", "SUCCESS"]] | Omit = omit,
         until: Union[str, datetime] | Omit = omit,
@@ -81,11 +81,17 @@ def list(
 
           idp_id: The unique Id of the IdP that has SCIM enabled.
 
-          cf_resource_id: The unique Cloudflare-generated Id of the SCIM resource.
+          cf_resource_id: The unique Cloudflare-generated Id of the SCIM resource. Pass once for a single
+              lookup (`?cf_resource_id=A`) or repeat the parameter
+              (`?cf_resource_id=A&cf_resource_id=B`) to filter by multiple resources in one
+              request.
 
           direction: The chronological order used to sort the logs.
 
-          idp_resource_id: The IdP-generated Id of the SCIM resource.
+          idp_resource_id: The IdP-generated Id of the SCIM resource. Pass once for a single lookup
+              (`?idp_resource_id=A`) or repeat the parameter
+              (`?idp_resource_id=A&idp_resource_id=B`) to filter by multiple resources in one
+              request.
 
           limit: The maximum number of update logs to retrieve.
 
@@ -95,11 +101,17 @@ def list(
 
           request_method: The request method of the SCIM request.
 
-          resource_group_name: The display name of the SCIM Group resource.
+          resource_group_name: The display name of the SCIM Group resource. Pass once for a single lookup
+              (`?resource_group_name=A`) or repeat the parameter
+              (`?resource_group_name=A&resource_group_name=B`) to filter by multiple group
+              names in one request.
 
           resource_type: The resource type of the SCIM request.
 
-          resource_user_email: The email address of the SCIM User resource.
+          resource_user_email: The email address of the SCIM User resource. Pass once for a single lookup
+              (`?resource_user_email=A`) or repeat the parameter
+              (`?resource_user_email=A&resource_user_email=B`) to filter by multiple emails in
+              one request.
 
           since: the timestamp of the earliest update log.
 
@@ -174,16 +186,16 @@ def list(
         *,
         account_id: str,
         idp_id: SequenceNotStr[str],
-        cf_resource_id: str | Omit = omit,
+        cf_resource_id: SequenceNotStr[str] | Omit = omit,
         direction: Literal["desc", "asc"] | Omit = omit,
-        idp_resource_id: str | Omit = omit,
+        idp_resource_id: SequenceNotStr[str] | Omit = omit,
         limit: int | Omit = omit,
         page: int | Omit = omit,
         per_page: int | Omit = omit,
         request_method: List[Literal["DELETE", "PATCH", "POST", "PUT"]] | Omit = omit,
-        resource_group_name: str | Omit = omit,
+        resource_group_name: SequenceNotStr[str] | Omit = omit,
         resource_type: List[Literal["USER", "GROUP"]] | Omit = omit,
-        resource_user_email: str | Omit = omit,
+        resource_user_email: SequenceNotStr[str] | Omit = omit,
         since: Union[str, datetime] | Omit = omit,
         status: List[Literal["FAILURE", "SUCCESS"]] | Omit = omit,
         until: Union[str, datetime] | Omit = omit,
@@ -204,11 +216,17 @@ def list(
 
           idp_id: The unique Id of the IdP that has SCIM enabled.
 
-          cf_resource_id: The unique Cloudflare-generated Id of the SCIM resource.
+          cf_resource_id: The unique Cloudflare-generated Id of the SCIM resource. Pass once for a single
+              lookup (`?cf_resource_id=A`) or repeat the parameter
+              (`?cf_resource_id=A&cf_resource_id=B`) to filter by multiple resources in one
+              request.
 
           direction: The chronological order used to sort the logs.
 
-          idp_resource_id: The IdP-generated Id of the SCIM resource.
+          idp_resource_id: The IdP-generated Id of the SCIM resource. Pass once for a single lookup
+              (`?idp_resource_id=A`) or repeat the parameter
+              (`?idp_resource_id=A&idp_resource_id=B`) to filter by multiple resources in one
+              request.
 
           limit: The maximum number of update logs to retrieve.
 
@@ -218,11 +236,17 @@ def list(
 
           request_method: The request method of the SCIM request.
 
-          resource_group_name: The display name of the SCIM Group resource.
+          resource_group_name: The display name of the SCIM Group resource. Pass once for a single lookup
+              (`?resource_group_name=A`) or repeat the parameter
+              (`?resource_group_name=A&resource_group_name=B`) to filter by multiple group
+              names in one request.
 
           resource_type: The resource type of the SCIM request.
 
-          resource_user_email: The email address of the SCIM User resource.
+          resource_user_email: The email address of the SCIM User resource. Pass once for a single lookup
+              (`?resource_user_email=A`) or repeat the parameter
+              (`?resource_user_email=A&resource_user_email=B`) to filter by multiple emails in
+              one request.
 
           since: the timestamp of the earliest update log.
 

src/cloudflare/resources/zero_trust/api.md

@@ -103,6 +103,22 @@ Methods:
 - <code title="delete /accounts/{account_id}/devices/ip-profiles/{profile_id}">client.zero_trust.devices.ip_profiles.<a href="./src/cloudflare/resources/zero_trust/devices/ip_profiles.py">delete</a>(profile_id, \*, account_id) -> <a href="./src/cloudflare/types/zero_trust/devices/ip_profile_delete_response.py">IPProfileDeleteResponse</a></code>
 - <code title="get /accounts/{account_id}/devices/ip-profiles/{profile_id}">client.zero_trust.devices.ip_profiles.<a href="./src/cloudflare/resources/zero_trust/devices/ip_profiles.py">get</a>(profile_id, \*, account_id) -> <a href="./src/cloudflare/types/zero_trust/devices/ip_profile.py">IPProfile</a></code>
 
+### DeploymentGroups
+
+Types:
+
+```python
+from cloudflare.types.zero_trust.devices import DeploymentGroup, DeploymentGroupDeleteResponse
+```
+
+Methods:
+
+- <code title="post /accounts/{account_id}/devices/deployment-groups">client.zero_trust.devices.deployment_groups.<a href="./src/cloudflare/resources/zero_trust/devices/deployment_groups.py">create</a>(\*, account_id, \*\*<a href="src/cloudflare/types/zero_trust/devices/deployment_group_create_params.py">params</a>) -> <a href="./src/cloudflare/types/zero_trust/devices/deployment_group.py">DeploymentGroup</a></code>
+- <code title="get /accounts/{account_id}/devices/deployment-groups">client.zero_trust.devices.deployment_groups.<a href="./src/cloudflare/resources/zero_trust/devices/deployment_groups.py">list</a>(\*, account_id, \*\*<a href="src/cloudflare/types/zero_trust/devices/deployment_group_list_params.py">params</a>) -> <a href="./src/cloudflare/types/zero_trust/devices/deployment_group.py">SyncV4PagePaginationArray[DeploymentGroup]</a></code>
+- <code title="delete /accounts/{account_id}/devices/deployment-groups/{group_id}">client.zero_trust.devices.deployment_groups.<a href="./src/cloudflare/resources/zero_trust/devices/deployment_groups.py">delete</a>(group_id, \*, account_id) -> <a href="./src/cloudflare/types/zero_trust/devices/deployment_group_delete_response.py">DeploymentGroupDeleteResponse</a></code>
+- <code title="patch /accounts/{account_id}/devices/deployment-groups/{group_id}">client.zero_trust.devices.deployment_groups.<a href="./src/cloudflare/resources/zero_trust/devices/deployment_groups.py">edit</a>(group_id, \*, account_id, \*\*<a href="src/cloudflare/types/zero_trust/devices/deployment_group_edit_params.py">params</a>) -> <a href="./src/cloudflare/types/zero_trust/devices/deployment_group.py">DeploymentGroup</a></code>
+- <code title="get /accounts/{account_id}/devices/deployment-groups/{group_id}">client.zero_trust.devices.deployment_groups.<a href="./src/cloudflare/resources/zero_trust/devices/deployment_groups.py">get</a>(group_id, \*, account_id) -> <a href="./src/cloudflare/types/zero_trust/devices/deployment_group.py">DeploymentGroup</a></code>
+
 ### Networks
 
 Types:

src/cloudflare/resources/zero_trust/devices/__init__.py

@@ -104,6 +104,14 @@
     OverrideCodesResourceWithStreamingResponse,
     AsyncOverrideCodesResourceWithStreamingResponse,
 )
+from .deployment_groups import (
+    DeploymentGroupsResource,
+    AsyncDeploymentGroupsResource,
+    DeploymentGroupsResourceWithRawResponse,
+    AsyncDeploymentGroupsResourceWithRawResponse,
+    DeploymentGroupsResourceWithStreamingResponse,
+    AsyncDeploymentGroupsResourceWithStreamingResponse,
+)
 
 __all__ = [
     "ResilienceResource",
@@ -130,6 +138,12 @@
     "AsyncIPProfilesResourceWithRawResponse",
     "IPProfilesResourceWithStreamingResponse",
     "AsyncIPProfilesResourceWithStreamingResponse",
+    "DeploymentGroupsResource",
+    "AsyncDeploymentGroupsResource",
+    "DeploymentGroupsResourceWithRawResponse",
+    "AsyncDeploymentGroupsResourceWithRawResponse",
+    "DeploymentGroupsResourceWithStreamingResponse",
+    "AsyncDeploymentGroupsResourceWithStreamingResponse",
     "NetworksResource",
     "AsyncNetworksResource",
     "NetworksResourceWithRawResponse",