@cboxdk/id-js 0.18.0 → 0.19.0

package/dist/management.cjs

@@ -610,12 +610,16 @@ var environmentOperations = {
   "branding.whitelabel.set": { action: "branding.whitelabel.set", operationId: "branding_whitelabel_set", method: "PUT", path: "/branding/whitelabel", pathParams: [], scope: "branding:write", danger: "write", approval: true, body: true, pagination: null },
   "directories.connect": { action: "directories.connect", operationId: "directories_connect", method: "POST", path: "/directories/connect", pathParams: [], scope: "directory_sync:write", danger: "critical", approval: true, body: true, pagination: null },
   "directories.create": { action: "directories.create", operationId: "directories_create", method: "POST", path: "/directories", pathParams: [], scope: "directory_sync:write", danger: "critical", approval: true, body: true, pagination: null },
+  "directories.credentials.replace": { action: "directories.credentials.replace", operationId: "directories_credentials_replace", method: "PUT", path: "/directories/{id}/credentials", pathParams: ["id"], scope: "directory_sync:write", danger: "critical", approval: true, body: true, pagination: null },
   "directories.delete": { action: "directories.delete", operationId: "directories_delete", method: "DELETE", path: "/directories/{id}", pathParams: ["id"], scope: "directory_sync:write", danger: "destructive", approval: true, body: true, pagination: null },
   "directories.get": { action: "directories.get", operationId: "directories_get", method: "GET", path: "/directories/{id}", pathParams: ["id"], scope: "directory_sync:read", danger: "read", approval: true, body: false, pagination: null },
   "directories.groups.list": { action: "directories.groups.list", operationId: "directories_groups_list", method: "GET", path: "/directories/{id}/groups", pathParams: ["id"], scope: "directory_sync:read", danger: "read", approval: true, body: false, pagination: "cursor" },
   "directories.groups.map": { action: "directories.groups.map", operationId: "directories_groups_map", method: "POST", path: "/directories/{id}/group-roles", pathParams: ["id"], scope: "directory_sync:write", danger: "write", approval: true, body: true, pagination: null },
+  "directories.hris.connect": { action: "directories.hris.connect", operationId: "directories_hris_connect", method: "POST", path: "/directories/hris", pathParams: [], scope: "directory_sync:write", danger: "critical", approval: true, body: true, pagination: null },
   "directories.list": { action: "directories.list", operationId: "directories_list", method: "GET", path: "/directories", pathParams: [], scope: "directory_sync:read", danger: "read", approval: true, body: false, pagination: "cursor" },
   "directories.status.set": { action: "directories.status.set", operationId: "directories_status_set", method: "POST", path: "/directories/{id}/status", pathParams: ["id"], scope: "directory_sync:write", danger: "write", approval: true, body: true, pagination: null },
+  "directories.sync": { action: "directories.sync", operationId: "directories_sync", method: "POST", path: "/directories/{id}/sync", pathParams: ["id"], scope: "directory_sync:write", danger: "write", approval: true, body: true, pagination: null },
+  "directories.sync_settings.update": { action: "directories.sync_settings.update", operationId: "directories_sync_settings_update", method: "PATCH", path: "/directories/{id}/sync-settings", pathParams: ["id"], scope: "directory_sync:write", danger: "write", approval: true, body: true, pagination: null },
   "directories.token.rotate": { action: "directories.token.rotate", operationId: "directories_token_rotate", method: "POST", path: "/directories/{id}/rotate", pathParams: ["id"], scope: "directory_sync:write", danger: "critical", approval: true, body: true, pagination: null },
   "directories.update": { action: "directories.update", operationId: "directories_update", method: "PATCH", path: "/directories/{id}", pathParams: ["id"], scope: "directory_sync:write", danger: "write", approval: true, body: true, pagination: null },
   "domains.add": { action: "domains.add", operationId: "domains_add", method: "POST", path: "/domains", pathParams: [], scope: "domains:write", danger: "write", approval: true, body: true, pagination: null },
@@ -623,6 +627,22 @@ var environmentOperations = {
   "domains.remove": { action: "domains.remove", operationId: "domains_remove", method: "DELETE", path: "/domains", pathParams: [], scope: "domains:write", danger: "destructive", approval: true, body: false, pagination: null },
   "domains.verify": { action: "domains.verify", operationId: "domains_verify", method: "POST", path: "/domains/verify", pathParams: [], scope: "domains:write", danger: "write", approval: true, body: false, pagination: null },
   "events.list": { action: "events.list", operationId: "events_list", method: "GET", path: "/events", pathParams: [], scope: "events:read", danger: "read", approval: true, body: false, pagination: "cursor" },
+  "feature_flags.create": { action: "feature_flags.create", operationId: "feature_flags_create", method: "POST", path: "/feature-flags", pathParams: [], scope: "feature_flags:write", danger: "write", approval: true, body: true, pagination: null },
+  "feature_flags.delete": { action: "feature_flags.delete", operationId: "feature_flags_delete", method: "DELETE", path: "/feature-flags/{id}", pathParams: ["id"], scope: "feature_flags:write", danger: "destructive", approval: true, body: false, pagination: null },
+  "feature_flags.evaluate": { action: "feature_flags.evaluate", operationId: "feature_flags_evaluate", method: "GET", path: "/feature-flags/evaluate", pathParams: [], scope: "feature_flags:read", danger: "read", approval: true, body: false, pagination: null },
+  "feature_flags.get": { action: "feature_flags.get", operationId: "feature_flags_get", method: "GET", path: "/feature-flags/{id}", pathParams: ["id"], scope: "feature_flags:read", danger: "read", approval: true, body: false, pagination: null },
+  "feature_flags.list": { action: "feature_flags.list", operationId: "feature_flags_list", method: "GET", path: "/feature-flags", pathParams: [], scope: "feature_flags:read", danger: "read", approval: true, body: false, pagination: "cursor" },
+  "feature_flags.update": { action: "feature_flags.update", operationId: "feature_flags_update", method: "PATCH", path: "/feature-flags/{id}", pathParams: ["id"], scope: "feature_flags:write", danger: "write", approval: true, body: true, pagination: null },
+  "fga.check": { action: "fga.check", operationId: "fga_check", method: "GET", path: "/fga/check", pathParams: [], scope: "fga:read", danger: "read", approval: true, body: false, pagination: null },
+  "fga.check_batch": { action: "fga.check_batch", operationId: "fga_check_batch", method: "GET", path: "/fga/check/batch", pathParams: [], scope: "fga:read", danger: "read", approval: true, body: false, pagination: null },
+  "fga.resources.list": { action: "fga.resources.list", operationId: "fga_resources_list", method: "GET", path: "/fga/resources", pathParams: [], scope: "fga:read", danger: "read", approval: true, body: false, pagination: "cursor" },
+  "fga.schema.get": { action: "fga.schema.get", operationId: "fga_schema_get", method: "GET", path: "/fga/schema", pathParams: [], scope: "fga:read", danger: "read", approval: true, body: false, pagination: null },
+  "fga.schema.update": { action: "fga.schema.update", operationId: "fga_schema_update", method: "PUT", path: "/fga/schema", pathParams: [], scope: "fga:schema", danger: "critical", approval: true, body: true, pagination: null },
+  "fga.schema.validate": { action: "fga.schema.validate", operationId: "fga_schema_validate", method: "GET", path: "/fga/schema/validate", pathParams: [], scope: "fga:read", danger: "read", approval: true, body: false, pagination: null },
+  "fga.subjects.list": { action: "fga.subjects.list", operationId: "fga_subjects_list", method: "GET", path: "/fga/subjects", pathParams: [], scope: "fga:read", danger: "read", approval: true, body: false, pagination: "cursor" },
+  "fga.tuples.delete": { action: "fga.tuples.delete", operationId: "fga_tuples_delete", method: "POST", path: "/fga/tuples/delete", pathParams: [], scope: "fga:write", danger: "destructive", approval: true, body: true, pagination: null },
+  "fga.tuples.list": { action: "fga.tuples.list", operationId: "fga_tuples_list", method: "GET", path: "/fga/tuples", pathParams: [], scope: "fga:read", danger: "read", approval: true, body: false, pagination: "cursor" },
+  "fga.tuples.write": { action: "fga.tuples.write", operationId: "fga_tuples_write", method: "POST", path: "/fga/tuples", pathParams: [], scope: "fga:write", danger: "write", approval: true, body: true, pagination: null },
   "frontend_keys.create": { action: "frontend_keys.create", operationId: "frontend_keys_create", method: "POST", path: "/frontend-keys", pathParams: [], scope: "frontend_keys:write", danger: "write", approval: true, body: true, pagination: null },
   "frontend_keys.list": { action: "frontend_keys.list", operationId: "frontend_keys_list", method: "GET", path: "/frontend-keys", pathParams: [], scope: "frontend_keys:read", danger: "read", approval: true, body: false, pagination: "cursor" },
   "frontend_keys.revoke": { action: "frontend_keys.revoke", operationId: "frontend_keys_revoke", method: "DELETE", path: "/frontend-keys/{id}", pathParams: ["id"], scope: "frontend_keys:write", danger: "destructive", approval: true, body: false, pagination: null },
@@ -677,11 +697,34 @@ var environmentOperations = {
   "permissions.delete": { action: "permissions.delete", operationId: "permissions_delete", method: "DELETE", path: "/permissions/{id}", pathParams: ["id"], scope: "role_definitions:write", danger: "destructive", approval: true, body: false, pagination: null },
   "permissions.list": { action: "permissions.list", operationId: "permissions_list", method: "GET", path: "/permissions", pathParams: [], scope: "roles:read", danger: "read", approval: true, body: false, pagination: "cursor" },
   "permissions.update": { action: "permissions.update", operationId: "permissions_update", method: "PATCH", path: "/permissions/{id}", pathParams: ["id"], scope: "role_definitions:write", danger: "write", approval: true, body: true, pagination: null },
+  "pipes.connections.delete": { action: "pipes.connections.delete", operationId: "pipes_connections_delete", method: "DELETE", path: "/pipes/{id}/connections/{connection_id}", pathParams: ["id", "connection_id"], scope: "pipes:write", danger: "destructive", approval: true, body: false, pagination: null },
+  "pipes.connections.list": { action: "pipes.connections.list", operationId: "pipes_connections_list", method: "GET", path: "/pipes/{id}/connections", pathParams: ["id"], scope: "pipes:read", danger: "read", approval: true, body: false, pagination: "cursor" },
+  "pipes.create": { action: "pipes.create", operationId: "pipes_create", method: "POST", path: "/pipes", pathParams: [], scope: "pipes:write", danger: "write", approval: true, body: true, pagination: null },
+  "pipes.delete": { action: "pipes.delete", operationId: "pipes_delete", method: "DELETE", path: "/pipes/{id}", pathParams: ["id"], scope: "pipes:write", danger: "destructive", approval: true, body: false, pagination: null },
+  "pipes.get": { action: "pipes.get", operationId: "pipes_get", method: "GET", path: "/pipes/{id}", pathParams: ["id"], scope: "pipes:read", danger: "read", approval: true, body: false, pagination: null },
+  "pipes.grants.create": { action: "pipes.grants.create", operationId: "pipes_grants_create", method: "POST", path: "/pipes/{id}/grants", pathParams: ["id"], scope: "pipes:write", danger: "critical", approval: true, body: true, pagination: null },
+  "pipes.grants.delete": { action: "pipes.grants.delete", operationId: "pipes_grants_delete", method: "DELETE", path: "/pipes/{id}/grants/{client_id}", pathParams: ["id", "client_id"], scope: "pipes:write", danger: "destructive", approval: true, body: false, pagination: null },
+  "pipes.list": { action: "pipes.list", operationId: "pipes_list", method: "GET", path: "/pipes", pathParams: [], scope: "pipes:read", danger: "read", approval: true, body: false, pagination: "cursor" },
+  "pipes.update": { action: "pipes.update", operationId: "pipes_update", method: "PATCH", path: "/pipes/{id}", pathParams: ["id"], scope: "pipes:write", danger: "write", approval: true, body: true, pagination: null },
   "provisioning.targets.create": { action: "provisioning.targets.create", operationId: "provisioning_targets_create", method: "POST", path: "/provisioning-targets", pathParams: [], scope: "provisioning:write", danger: "critical", approval: true, body: true, pagination: null },
   "provisioning.targets.delete": { action: "provisioning.targets.delete", operationId: "provisioning_targets_delete", method: "DELETE", path: "/provisioning-targets/{id}", pathParams: ["id"], scope: "provisioning:write", danger: "destructive", approval: true, body: true, pagination: null },
   "provisioning.targets.get": { action: "provisioning.targets.get", operationId: "provisioning_targets_get", method: "GET", path: "/provisioning-targets/{id}", pathParams: ["id"], scope: "provisioning:read", danger: "read", approval: true, body: false, pagination: null },
   "provisioning.targets.list": { action: "provisioning.targets.list", operationId: "provisioning_targets_list", method: "GET", path: "/provisioning-targets", pathParams: [], scope: "provisioning:read", danger: "read", approval: true, body: false, pagination: "cursor" },
   "provisioning.targets.status.set": { action: "provisioning.targets.status.set", operationId: "provisioning_targets_status_set", method: "POST", path: "/provisioning-targets/{id}/status", pathParams: ["id"], scope: "provisioning:write", danger: "write", approval: true, body: true, pagination: null },
+  "radar.decisions.get": { action: "radar.decisions.get", operationId: "radar_decisions_get", method: "GET", path: "/radar/decisions/{id}", pathParams: ["id"], scope: "radar:read", danger: "read", approval: true, body: false, pagination: null },
+  "radar.decisions.list": { action: "radar.decisions.list", operationId: "radar_decisions_list", method: "GET", path: "/radar/decisions", pathParams: [], scope: "radar:read", danger: "read", approval: true, body: false, pagination: "cursor" },
+  "radar.lists.add": { action: "radar.lists.add", operationId: "radar_lists_add", method: "POST", path: "/radar/lists", pathParams: [], scope: "radar:write", danger: "write", approval: true, body: true, pagination: null },
+  "radar.lists.list": { action: "radar.lists.list", operationId: "radar_lists_list", method: "GET", path: "/radar/lists", pathParams: [], scope: "radar:read", danger: "read", approval: true, body: false, pagination: "cursor" },
+  "radar.lists.remove": { action: "radar.lists.remove", operationId: "radar_lists_remove", method: "DELETE", path: "/radar/lists/{id}", pathParams: ["id"], scope: "radar:write", danger: "destructive", approval: true, body: false, pagination: null },
+  "radar.mode.set": { action: "radar.mode.set", operationId: "radar_mode_set", method: "PUT", path: "/radar/mode", pathParams: [], scope: "radar:manage", danger: "critical", approval: true, body: true, pagination: null },
+  "radar.rules.create": { action: "radar.rules.create", operationId: "radar_rules_create", method: "POST", path: "/radar/rules", pathParams: [], scope: "radar:write", danger: "write", approval: true, body: true, pagination: null },
+  "radar.rules.delete": { action: "radar.rules.delete", operationId: "radar_rules_delete", method: "DELETE", path: "/radar/rules/{id}", pathParams: ["id"], scope: "radar:write", danger: "destructive", approval: true, body: false, pagination: null },
+  "radar.rules.get": { action: "radar.rules.get", operationId: "radar_rules_get", method: "GET", path: "/radar/rules/{id}", pathParams: ["id"], scope: "radar:read", danger: "read", approval: true, body: false, pagination: null },
+  "radar.rules.list": { action: "radar.rules.list", operationId: "radar_rules_list", method: "GET", path: "/radar/rules", pathParams: [], scope: "radar:read", danger: "read", approval: true, body: false, pagination: "cursor" },
+  "radar.rules.reorder": { action: "radar.rules.reorder", operationId: "radar_rules_reorder", method: "PUT", path: "/radar/rules/order", pathParams: [], scope: "radar:write", danger: "write", approval: true, body: true, pagination: null },
+  "radar.rules.update": { action: "radar.rules.update", operationId: "radar_rules_update", method: "PATCH", path: "/radar/rules/{id}", pathParams: ["id"], scope: "radar:write", danger: "write", approval: true, body: true, pagination: null },
+  "radar.settings.get": { action: "radar.settings.get", operationId: "radar_settings_get", method: "GET", path: "/radar/settings", pathParams: [], scope: "radar:read", danger: "read", approval: true, body: false, pagination: null },
+  "radar.settings.update": { action: "radar.settings.update", operationId: "radar_settings_update", method: "PATCH", path: "/radar/settings", pathParams: [], scope: "radar:write", danger: "write", approval: true, body: true, pagination: null },
   "roles.create": { action: "roles.create", operationId: "roles_create", method: "POST", path: "/roles", pathParams: [], scope: "role_definitions:write", danger: "write", approval: true, body: true, pagination: null },
   "roles.delete": { action: "roles.delete", operationId: "roles_delete", method: "DELETE", path: "/roles/{id}", pathParams: ["id"], scope: "role_definitions:write", danger: "destructive", approval: true, body: false, pagination: null },
   "roles.get": { action: "roles.get", operationId: "roles_get", method: "GET", path: "/roles/{id}", pathParams: ["id"], scope: "roles:read", danger: "read", approval: true, body: false, pagination: null },
@@ -698,9 +741,16 @@ var environmentOperations = {
   "signin.policy.inherit": { action: "signin.policy.inherit", operationId: "signin_policy_inherit", method: "DELETE", path: "/sign-in/policy/organizations/{organization_id}", pathParams: ["organization_id"], scope: "signin:write", danger: "critical", approval: true, body: false, pagination: null },
   "signin.policy.update": { action: "signin.policy.update", operationId: "signin_policy_update", method: "PATCH", path: "/sign-in/policy", pathParams: [], scope: "signin:write", danger: "critical", approval: true, body: true, pagination: null },
   "signin.self_service_signup.set": { action: "signin.self_service_signup.set", operationId: "signin_self_service_signup_set", method: "PUT", path: "/sign-in/self-service-signup", pathParams: [], scope: "signin:write", danger: "critical", approval: true, body: true, pagination: null },
+  "signin.sms.get": { action: "signin.sms.get", operationId: "signin_sms_get", method: "GET", path: "/sign-in/sms", pathParams: [], scope: "signin:read", danger: "read", approval: true, body: false, pagination: null },
+  "signin.sms.update": { action: "signin.sms.update", operationId: "signin_sms_update", method: "PATCH", path: "/sign-in/sms", pathParams: [], scope: "signin:write", danger: "critical", approval: true, body: true, pagination: null },
   "signin.social.delete": { action: "signin.social.delete", operationId: "signin_social_delete", method: "DELETE", path: "/sign-in/social-providers/{id}", pathParams: ["id"], scope: "signin:write", danger: "critical", approval: true, body: true, pagination: null },
+  "signin.social.disable": { action: "signin.social.disable", operationId: "signin_social_disable", method: "POST", path: "/sign-in/social-providers/{id}/disable", pathParams: ["id"], scope: "signin:write", danger: "critical", approval: true, body: true, pagination: null },
+  "signin.social.enable": { action: "signin.social.enable", operationId: "signin_social_enable", method: "POST", path: "/sign-in/social-providers/{id}/enable", pathParams: ["id"], scope: "signin:write", danger: "write", approval: true, body: true, pagination: null },
+  "signin.social.inherit": { action: "signin.social.inherit", operationId: "signin_social_inherit", method: "PUT", path: "/sign-in/social-providers/inherited/{provider}", pathParams: ["provider"], scope: "signin:write", danger: "write", approval: true, body: true, pagination: null },
   "signin.social.list": { action: "signin.social.list", operationId: "signin_social_list", method: "GET", path: "/sign-in/social-providers", pathParams: [], scope: "signin:read", danger: "read", approval: true, body: false, pagination: "cursor" },
+  "signin.social.offered": { action: "signin.social.offered", operationId: "signin_social_offered", method: "GET", path: "/sign-in/social-providers/offered", pathParams: [], scope: "signin:read", danger: "read", approval: true, body: false, pagination: null },
   "signin.social.set": { action: "signin.social.set", operationId: "signin_social_set", method: "POST", path: "/sign-in/social-providers", pathParams: [], scope: "signin:write", danger: "critical", approval: true, body: true, pagination: null },
+  "signin.social.update": { action: "signin.social.update", operationId: "signin_social_update", method: "PATCH", path: "/sign-in/social-providers/{id}", pathParams: ["id"], scope: "signin:write", danger: "critical", approval: true, body: true, pagination: null },
   "sod_policies.create": { action: "sod_policies.create", operationId: "sod_policies_create", method: "POST", path: "/sod-policies", pathParams: [], scope: "governance:write", danger: "write", approval: true, body: true, pagination: null },
   "sod_policies.delete": { action: "sod_policies.delete", operationId: "sod_policies_delete", method: "DELETE", path: "/sod-policies/{id}", pathParams: ["id"], scope: "governance:write", danger: "critical", approval: true, body: true, pagination: null },
   "sod_policies.get": { action: "sod_policies.get", operationId: "sod_policies_get", method: "GET", path: "/sod-policies/{id}", pathParams: ["id"], scope: "governance:read", danger: "read", approval: true, body: false, pagination: null },
@@ -742,6 +792,7 @@ var environmentOperations = {
   "users.get": { action: "users.get", operationId: "users_get", method: "GET", path: "/users/{id}", pathParams: ["id"], scope: "users:read", danger: "read", approval: true, body: false, pagination: null },
   "users.list": { action: "users.list", operationId: "users_list", method: "GET", path: "/users", pathParams: [], scope: "users:read", danger: "read", approval: true, body: false, pagination: "cursor" },
   "users.mfa.reset": { action: "users.mfa.reset", operationId: "users_mfa_reset", method: "DELETE", path: "/users/{id}/mfa", pathParams: ["id"], scope: "users:write", danger: "critical", approval: true, body: false, pagination: null },
+  "users.mfa.sms.remove": { action: "users.mfa.sms.remove", operationId: "users_mfa_sms_remove", method: "DELETE", path: "/users/{id}/mfa/sms", pathParams: ["id"], scope: "users:write", danger: "critical", approval: true, body: false, pagination: null },
   "users.password_reset.send": { action: "users.password_reset.send", operationId: "users_password_reset_send", method: "POST", path: "/users/{id}/password-reset", pathParams: ["id"], scope: "users:write", danger: "write", approval: true, body: false, pagination: null },
   "users.password.set": { action: "users.password.set", operationId: "users_password_set", method: "POST", path: "/users/{id}/password", pathParams: ["id"], scope: "users:write", danger: "critical", approval: true, body: true, pagination: null },
   "users.reactivate": { action: "users.reactivate", operationId: "users_reactivate", method: "POST", path: "/users/{id}/reactivate", pathParams: ["id"], scope: "users:write", danger: "write", approval: true, body: false, pagination: null },
@@ -1399,7 +1450,7 @@ var EnvironmentClient = class {
        */
       get: (query, options) => this.transport.call(environmentOperations["branding.appearance.get"], [], query, options),
       /**
-       * Set the hosted sign-in theme (preset, colours, corners, type, logo) for the environment default or one organization.
+       * Set the hosted sign-in theme (preset, colours, corners, type, uploaded logo and favicon) for the environment default or one organization.
        *
        * Requires scope `branding:write`. Danger: write.
        *
@@ -1493,6 +1544,17 @@ var EnvironmentClient = class {
     list: (query, options) => this.transport.call(environmentOperations["directories.list"], [], query, options),
     /** Every item of `directories.list`, fetching pages as the iteration reaches them. */
     listAll: (query, options) => this.transport.paginate(environmentOperations["directories.list"], [], query, options),
+    /**
+     * Pull a Google Workspace, Microsoft Entra or HR-system directory now, on a worker. `full` asks an HR system for everybody rather than what changed.
+     *
+     * Requires scope `directory_sync:write`. Danger: write.
+     *
+     * `POST /directories/{id}/sync` · action `directories.sync`
+     * @scope `directory_sync:write`
+     * @danger write
+     * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+     */
+    sync: (id, body, options) => this.transport.call(environmentOperations["directories.sync"], [id], body, options),
     /**
      * Rename an inbound directory.
      *
@@ -1504,6 +1566,19 @@ var EnvironmentClient = class {
      * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
      */
     update: (id, body, options) => this.transport.call(environmentOperations["directories.update"], [id], body, options),
+    credentials: {
+      /**
+       * Replace a pull directory's provider credentials, verifying the new ones first. Write-only; never returned.
+       *
+       * Requires scope `directory_sync:write`. Danger: critical.
+       *
+       * `PUT /directories/{id}/credentials` · action `directories.credentials.replace`
+       * @scope `directory_sync:write`
+       * @danger critical
+       * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+       */
+      replace: (id, body, options) => this.transport.call(environmentOperations["directories.credentials.replace"], [id], body, options)
+    },
     groups: {
       /**
        * List the groups a directory has synced, with the role ids each group is mapped onto.
@@ -1530,6 +1605,19 @@ var EnvironmentClient = class {
        */
       map: (id, body, options) => this.transport.call(environmentOperations["directories.groups.map"], [id], body, options)
     },
+    hris: {
+      /**
+       * Connect an HR system (Workday, BambooHR, Rippling, HiBob or Personio) to sync an organization's people from, verifying the credentials first. The first sync is queued.
+       *
+       * Requires scope `directory_sync:write`. Danger: critical.
+       *
+       * `POST /directories/hris` · action `directories.hris.connect`
+       * @scope `directory_sync:write`
+       * @danger critical
+       * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+       */
+      connect: (body, options) => this.transport.call(environmentOperations["directories.hris.connect"], [], body, options)
+    },
     status: {
       /**
        * Pause or resume an inbound directory's provisioning.
@@ -1543,6 +1631,19 @@ var EnvironmentClient = class {
        */
       set: (id, body, options) => this.transport.call(environmentOperations["directories.status.set"], [id], body, options)
     },
+    syncSettings: {
+      /**
+       * Set how often a pull directory syncs, and for an HR system which of its fields pass through onto people.
+       *
+       * Requires scope `directory_sync:write`. Danger: write.
+       *
+       * `PATCH /directories/{id}/sync-settings` · action `directories.sync_settings.update`
+       * @scope `directory_sync:write`
+       * @danger write
+       * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+       */
+      update: (id, body, options) => this.transport.call(environmentOperations["directories.sync_settings.update"], [id], body, options)
+    },
     token: {
       /**
        * Issue a new bearer token for a SCIM directory, returned once. The old token stops working immediately.
@@ -1618,6 +1719,202 @@ var EnvironmentClient = class {
     /** Every item of `events.list`, fetching pages as the iteration reaches them. */
     listAll: (query, options) => this.transport.paginate(environmentOperations["events.list"], [], query, options)
   };
+  featureFlags = {
+    /**
+     * Define a feature flag: a key apps ask about, its default, and who it is on for — named users, named organizations, a rollout percentage.
+     *
+     * Requires scope `feature_flags:write`. Danger: write.
+     *
+     * `POST /feature-flags` · action `feature_flags.create`
+     * @scope `feature_flags:write`
+     * @danger write
+     * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+     */
+    create: (body, options) => this.transport.call(environmentOperations["feature_flags.create"], [], body, options),
+    /**
+     * Delete a feature flag and its rules. Its key evaluates to off from now on; tokens already minted keep it until they expire.
+     *
+     * Requires scope `feature_flags:write`. Danger: destructive.
+     *
+     * `DELETE /feature-flags/{id}` · action `feature_flags.delete`
+     * @scope `feature_flags:write`
+     * @danger destructive
+     * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+     */
+    delete: (id, options) => this.transport.call(environmentOperations["feature_flags.delete"], [id], void 0, options),
+    /**
+     * Evaluate every feature flag for a user in an organization: whether each is on, and the rule that decided. For app backends without a token in hand.
+     *
+     * Requires scope `feature_flags:read`. Danger: read.
+     *
+     * `GET /feature-flags/evaluate` · action `feature_flags.evaluate`
+     * @scope `feature_flags:read`
+     * @danger read
+     * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+     */
+    evaluate: (query, options) => this.transport.call(environmentOperations["feature_flags.evaluate"], [], query, options),
+    /**
+     * Read one feature flag: its default, whether it is switched on, and every user, organization and rollout rule.
+     *
+     * Requires scope `feature_flags:read`. Danger: read.
+     *
+     * `GET /feature-flags/{id}` · action `feature_flags.get`
+     * @scope `feature_flags:read`
+     * @danger read
+     * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+     */
+    get: (id, options) => this.transport.call(environmentOperations["feature_flags.get"], [id], void 0, options),
+    /**
+     * List this environment's feature flags with their default, kill switch and targeting rules.
+     *
+     * Requires scope `feature_flags:read`. Danger: read.
+     *
+     * `GET /feature-flags` · action `feature_flags.list`
+     * @scope `feature_flags:read`
+     * @danger read
+     * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+     */
+    list: (query, options) => this.transport.call(environmentOperations["feature_flags.list"], [], query, options),
+    /** Every item of `feature_flags.list`, fetching pages as the iteration reaches them. */
+    listAll: (query, options) => this.transport.paginate(environmentOperations["feature_flags.list"], [], query, options),
+    /**
+     * Change a feature flag: switch it on or off for everyone, change its default, or replace its user rules, organization rules or rollout percentage.
+     *
+     * Requires scope `feature_flags:write`. Danger: write.
+     *
+     * `PATCH /feature-flags/{id}` · action `feature_flags.update`
+     * @scope `feature_flags:write`
+     * @danger write
+     * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+     */
+    update: (id, body, options) => this.transport.call(environmentOperations["feature_flags.update"], [id], body, options)
+  };
+  fga = {
+    /**
+     * Check whether a subject has a relation on a resource — directly, through computed relations, parents or nested groups. Optionally at least as fresh as a consistency_token.
+     *
+     * Requires scope `fga:read`. Danger: read.
+     *
+     * `GET /fga/check` · action `fga.check`
+     * @scope `fga:read`
+     * @danger read
+     * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+     */
+    check: (query, options) => this.transport.call(environmentOperations["fga.check"], [], query, options),
+    /**
+     * Run 1–100 checks in one round trip, each written resource#relation@subject (document:readme#viewer@user:alice), all at the same revision, answered in order.
+     *
+     * Requires scope `fga:read`. Danger: read.
+     *
+     * `GET /fga/check/batch` · action `fga.check_batch`
+     * @scope `fga:read`
+     * @danger read
+     * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+     */
+    checkBatch: (query, options) => this.transport.call(environmentOperations["fga.check_batch"], [], query, options),
+    resources: {
+      /**
+       * List the resources of one type a subject has a relation on (e.g. every document alice can view), through all inheritance; sorted ids, paged with after.
+       *
+       * Requires scope `fga:read`. Danger: read.
+       *
+       * `GET /fga/resources` · action `fga.resources.list`
+       * @scope `fga:read`
+       * @danger read
+       * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+       */
+      list: (query, options) => this.transport.call(environmentOperations["fga.resources.list"], [], query, options),
+      /** Every item of `fga.resources.list`, fetching pages as the iteration reaches them. */
+      listAll: (query, options) => this.transport.paginate(environmentOperations["fga.resources.list"], [], query, options)
+    },
+    schema: {
+      /**
+       * Read this environment's fine-grained authorization schema: the source text, its parsed types and relations, its version, and the current consistency token.
+       *
+       * Requires scope `fga:read`. Danger: read.
+       *
+       * `GET /fga/schema` · action `fga.schema.get`
+       * @scope `fga:read`
+       * @danger read
+       * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+       */
+      get: (options) => this.transport.call(environmentOperations["fga.schema.get"], [], void 0, options),
+      /**
+       * Replace this environment's fine-grained authorization schema (types, relations and how each is decided). Changes the answer to every check at once; refused if invalid or if existing tuples would no longer fit.
+       *
+       * Requires scope `fga:schema`. Danger: critical.
+       *
+       * `PUT /fga/schema` · action `fga.schema.update`
+       * @scope `fga:schema`
+       * @danger critical
+       * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+       */
+      update: (body, options) => this.transport.call(environmentOperations["fga.schema.update"], [], body, options),
+      /**
+       * Check a fine-grained authorization schema without saving it: every error by line, or the parsed types and canonical text.
+       *
+       * Requires scope `fga:read`. Danger: read.
+       *
+       * `GET /fga/schema/validate` · action `fga.schema.validate`
+       * @scope `fga:read`
+       * @danger read
+       * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+       */
+      validate: (query, options) => this.transport.call(environmentOperations["fga.schema.validate"], [], query, options)
+    },
+    subjects: {
+      /**
+       * List the subjects of one type that have a relation on a resource (e.g. every user who can view the readme), groups and inheritance expanded; sorted ids, paged with after.
+       *
+       * Requires scope `fga:read`. Danger: read.
+       *
+       * `GET /fga/subjects` · action `fga.subjects.list`
+       * @scope `fga:read`
+       * @danger read
+       * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+       */
+      list: (query, options) => this.transport.call(environmentOperations["fga.subjects.list"], [], query, options),
+      /** Every item of `fga.subjects.list`, fetching pages as the iteration reaches them. */
+      listAll: (query, options) => this.transport.paginate(environmentOperations["fga.subjects.list"], [], query, options)
+    },
+    tuples: {
+      /**
+       * Delete 1–100 relationship tuples in one atomic batch. Revokes the access they granted, and everything inherited through them, at once.
+       *
+       * Requires scope `fga:write`. Danger: destructive.
+       *
+       * `POST /fga/tuples/delete` · action `fga.tuples.delete`
+       * @scope `fga:write`
+       * @danger destructive
+       * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+       */
+      delete: (body, options) => this.transport.call(environmentOperations["fga.tuples.delete"], [], body, options),
+      /**
+       * List stored relationship tuples oldest first, filtered by resource type and id, relation and subject; pass next_cursor as after to page.
+       *
+       * Requires scope `fga:read`. Danger: read.
+       *
+       * `GET /fga/tuples` · action `fga.tuples.list`
+       * @scope `fga:read`
+       * @danger read
+       * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+       */
+      list: (query, options) => this.transport.call(environmentOperations["fga.tuples.list"], [], query, options),
+      /** Every item of `fga.tuples.list`, fetching pages as the iteration reaches them. */
+      listAll: (query, options) => this.transport.paginate(environmentOperations["fga.tuples.list"], [], query, options),
+      /**
+       * Write 1–100 relationship tuples (resource#relation@subject) in one atomic batch, each checked against the schema. Grants access at once; returns a consistency_token for checks that must see it.
+       *
+       * Requires scope `fga:write`. Danger: write.
+       *
+       * `POST /fga/tuples` · action `fga.tuples.write`
+       * @scope `fga:write`
+       * @danger write
+       * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+       */
+      write: (body, options) => this.transport.call(environmentOperations["fga.tuples.write"], [], body, options)
+    }
+  };
   frontendKeys = {
     /**
      * Create a publishable frontend key for a browser app, usable only from the origins listed. The key is public by design.
@@ -2326,6 +2623,115 @@ var EnvironmentClient = class {
      */
     update: (id, body, options) => this.transport.call(environmentOperations["permissions.update"], [id], body, options)
   };
+  pipes = {
+    /**
+     * Configure a pipe: the environment's OAuth app at a third-party provider (GitHub, Google, Microsoft 365, Slack, Salesforce, HubSpot, Linear, Notion), so people can connect their accounts. The client secret is sealed and never returned.
+     *
+     * Requires scope `pipes:write`. Danger: write.
+     *
+     * `POST /pipes` · action `pipes.create`
+     * @scope `pipes:write`
+     * @danger write
+     * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+     */
+    create: (body, options) => this.transport.call(environmentOperations["pipes.create"], [], body, options),
+    /**
+     * Remove a pipe and every connection through it. Their tokens are revoked here, not at the provider — disconnect people first if that matters.
+     *
+     * Requires scope `pipes:write`. Danger: destructive.
+     *
+     * `DELETE /pipes/{id}` · action `pipes.delete`
+     * @scope `pipes:write`
+     * @danger destructive
+     * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+     */
+    delete: (id, options) => this.transport.call(environmentOperations["pipes.delete"], [id], void 0, options),
+    /**
+     * Show one pipe: its provider, OAuth client id, scopes, the redirect URI to register at the provider, and the apps granted its tokens.
+     *
+     * Requires scope `pipes:read`. Danger: read.
+     *
+     * `GET /pipes/{id}` · action `pipes.get`
+     * @scope `pipes:read`
+     * @danger read
+     * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+     */
+    get: (id, options) => this.transport.call(environmentOperations["pipes.get"], [id], void 0, options),
+    /**
+     * List the pipes — the third-party providers people can connect their accounts to — with their scopes and the apps granted their tokens. Never a client secret.
+     *
+     * Requires scope `pipes:read`. Danger: read.
+     *
+     * `GET /pipes` · action `pipes.list`
+     * @scope `pipes:read`
+     * @danger read
+     * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+     */
+    list: (query, options) => this.transport.call(environmentOperations["pipes.list"], [], query, options),
+    /** Every item of `pipes.list`, fetching pages as the iteration reaches them. */
+    listAll: (query, options) => this.transport.paginate(environmentOperations["pipes.list"], [], query, options),
+    /**
+     * Change a pipe — client id, client secret (sealed), scopes, parameters, or whether it is enabled. Only what is sent changes.
+     *
+     * Requires scope `pipes:write`. Danger: write.
+     *
+     * `PATCH /pipes/{id}` · action `pipes.update`
+     * @scope `pipes:write`
+     * @danger write
+     * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+     */
+    update: (id, body, options) => this.transport.call(environmentOperations["pipes.update"], [id], body, options),
+    connections: {
+      /**
+       * Disconnect a person's connected account: revoke it at the provider where supported, revoke its tokens here, and forget it.
+       *
+       * Requires scope `pipes:write`. Danger: destructive.
+       *
+       * `DELETE /pipes/{id}/connections/{connection_id}` · action `pipes.connections.delete`
+       * @scope `pipes:write`
+       * @danger destructive
+       * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+       */
+      delete: (id, connectionId, options) => this.transport.call(environmentOperations["pipes.connections.delete"], [id, connectionId], void 0, options),
+      /**
+       * List the accounts people connected through a pipe: who, which account, granted scopes, status (active / needs_reauth) and when the token expires. Never a token.
+       *
+       * Requires scope `pipes:read`. Danger: read.
+       *
+       * `GET /pipes/{id}/connections` · action `pipes.connections.list`
+       * @scope `pipes:read`
+       * @danger read
+       * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+       */
+      list: (id, query, options) => this.transport.call(environmentOperations["pipes.connections.list"], [id], query, options),
+      /** Every item of `pipes.connections.list`, fetching pages as the iteration reaches them. */
+      listAll: (id, query, options) => this.transport.paginate(environmentOperations["pipes.connections.list"], [id], query, options)
+    },
+    grants: {
+      /**
+       * Grant an app (by OAuth client id) the right to lease fresh access tokens for the accounts people connected through this pipe.
+       *
+       * Requires scope `pipes:write`. Danger: critical.
+       *
+       * `POST /pipes/{id}/grants` · action `pipes.grants.create`
+       * @scope `pipes:write`
+       * @danger critical
+       * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+       */
+      create: (id, body, options) => this.transport.call(environmentOperations["pipes.grants.create"], [id], body, options),
+      /**
+       * Withdraw an app's right to lease the tokens people connected through this pipe.
+       *
+       * Requires scope `pipes:write`. Danger: destructive.
+       *
+       * `DELETE /pipes/{id}/grants/{client_id}` · action `pipes.grants.delete`
+       * @scope `pipes:write`
+       * @danger destructive
+       * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+       */
+      delete: (id, clientId, options) => this.transport.call(environmentOperations["pipes.grants.delete"], [id, clientId], void 0, options)
+    }
+  };
   provisioning = {
     targets: {
       /**
@@ -2389,6 +2795,178 @@ var EnvironmentClient = class {
       }
     }
   };
+  radar = {
+    decisions: {
+      /**
+       * Read one Radar decision: the verdict, whether it was enforced, the deciding rule, every rule that fired, the reasons, the risk score and the facts it was decided on.
+       *
+       * Requires scope `radar:read`. Danger: read.
+       *
+       * `GET /radar/decisions/{id}` · action `radar.decisions.get`
+       * @scope `radar:read`
+       * @danger read
+       * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+       */
+      get: (id, options) => this.transport.call(environmentOperations["radar.decisions.get"], [id], void 0, options),
+      /**
+       * List this environment's Radar decisions newest first — verdict, deciding rule, every rule that fired, reasons and facts — filtered by verdict, flow, rule, country, email, IP, device or time; pass `next_cursor` as `after` to page. Email and IP are matched by keyed pseudonym and never returned.
+       *
+       * Requires scope `radar:read`. Danger: read.
+       *
+       * `GET /radar/decisions` · action `radar.decisions.list`
+       * @scope `radar:read`
+       * @danger read
+       * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+       */
+      list: (query, options) => this.transport.call(environmentOperations["radar.decisions.list"], [], query, options),
+      /** Every item of `radar.decisions.list`, fetching pages as the iteration reaches them. */
+      listAll: (query, options) => this.transport.paginate(environmentOperations["radar.decisions.list"], [], query, options)
+    },
+    lists: {
+      /**
+       * Add an entry to this environment's Radar allow or deny list: an IP or CIDR range, an email address, a mail domain (and its subdomains), or a device id from the decisions explorer. Deny blocks before every rule; allow skips every rule.
+       *
+       * Requires scope `radar:write`. Danger: write.
+       *
+       * `POST /radar/lists` · action `radar.lists.add`
+       * @scope `radar:write`
+       * @danger write
+       * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+       */
+      add: (body, options) => this.transport.call(environmentOperations["radar.lists.add"], [], body, options),
+      /**
+       * List this environment's Radar allow and deny entries — IPs and CIDR ranges, addresses, mail domains, devices — optionally one list or one kind.
+       *
+       * Requires scope `radar:read`. Danger: read.
+       *
+       * `GET /radar/lists` · action `radar.lists.list`
+       * @scope `radar:read`
+       * @danger read
+       * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+       */
+      list: (query, options) => this.transport.call(environmentOperations["radar.lists.list"], [], query, options),
+      /** Every item of `radar.lists.list`, fetching pages as the iteration reaches them. */
+      listAll: (query, options) => this.transport.paginate(environmentOperations["radar.lists.list"], [], query, options),
+      /**
+       * Remove an entry from this environment's Radar allow or deny list.
+       *
+       * Requires scope `radar:write`. Danger: destructive.
+       *
+       * `DELETE /radar/lists/{id}` · action `radar.lists.remove`
+       * @scope `radar:write`
+       * @danger destructive
+       * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+       */
+      remove: (id, options) => this.transport.call(environmentOperations["radar.lists.remove"], [id], void 0, options)
+    },
+    mode: {
+      /**
+       * Switch this environment's Radar between `monitor` (verdicts recorded, never acted on) and `enforce` (blocks refuse sign-ins and sign-ups, challenges demand a second factor). Changes the environment's security posture.
+       *
+       * Requires scope `radar:manage`. Danger: critical.
+       *
+       * `PUT /radar/mode` · action `radar.mode.set`
+       * @scope `radar:manage`
+       * @danger critical
+       * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+       */
+      set: (body, options) => this.transport.call(environmentOperations["radar.mode.set"], [], body, options)
+    },
+    rules: {
+      /**
+       * Add a Radar rule: when EVERY condition (field, operator, value) holds, allow, challenge or block. Rules run in order after the allow/deny lists and before the built-in rules; the first match decides. Example: country not_in [DK, SE] → challenge.
+       *
+       * Requires scope `radar:write`. Danger: write.
+       *
+       * `POST /radar/rules` · action `radar.rules.create`
+       * @scope `radar:write`
+       * @danger write
+       * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+       */
+      create: (body, options) => this.transport.call(environmentOperations["radar.rules.create"], [], body, options),
+      /**
+       * Delete a Radar rule. Attempts it decided are decided by the next matching rule, or the built-in rules, from then on.
+       *
+       * Requires scope `radar:write`. Danger: destructive.
+       *
+       * `DELETE /radar/rules/{id}` · action `radar.rules.delete`
+       * @scope `radar:write`
+       * @danger destructive
+       * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+       */
+      delete: (id, options) => this.transport.call(environmentOperations["radar.rules.delete"], [id], void 0, options),
+      /**
+       * Read one Radar rule: its action, the flows it applies to, its position and its conditions.
+       *
+       * Requires scope `radar:read`. Danger: read.
+       *
+       * `GET /radar/rules/{id}` · action `radar.rules.get`
+       * @scope `radar:read`
+       * @danger read
+       * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+       */
+      get: (id, options) => this.transport.call(environmentOperations["radar.rules.get"], [id], void 0, options),
+      /**
+       * List this environment's own Radar rules in evaluation order (the first whose conditions all hold decides), with their conditions and a readable summary of each.
+       *
+       * Requires scope `radar:read`. Danger: read.
+       *
+       * `GET /radar/rules` · action `radar.rules.list`
+       * @scope `radar:read`
+       * @danger read
+       * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+       */
+      list: (query, options) => this.transport.call(environmentOperations["radar.rules.list"], [], query, options),
+      /** Every item of `radar.rules.list`, fetching pages as the iteration reaches them. */
+      listAll: (query, options) => this.transport.paginate(environmentOperations["radar.rules.list"], [], query, options),
+      /**
+       * Set the order Radar rules are evaluated in: `rule_ids` lists every rule of the environment exactly once, first evaluated first.
+       *
+       * Requires scope `radar:write`. Danger: write.
+       *
+       * `PUT /radar/rules/order` · action `radar.rules.reorder`
+       * @scope `radar:write`
+       * @danger write
+       * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+       */
+      reorder: (body, options) => this.transport.call(environmentOperations["radar.rules.reorder"], [], body, options),
+      /**
+       * Change a Radar rule: its name, description, action, flows, enabled state, position, or (replaced whole) its conditions.
+       *
+       * Requires scope `radar:write`. Danger: write.
+       *
+       * `PATCH /radar/rules/{id}` · action `radar.rules.update`
+       * @scope `radar:write`
+       * @danger write
+       * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+       */
+      update: (id, body, options) => this.transport.call(environmentOperations["radar.rules.update"], [id], body, options)
+    },
+    settings: {
+      /**
+       * Read this environment's Radar settings: the mode (monitor or enforce, and whether it is inherited from the deployment), the IP intelligence source, and every built-in rule with its action and threshold.
+       *
+       * Requires scope `radar:read`. Danger: read.
+       *
+       * `GET /radar/settings` · action `radar.settings.get`
+       * @scope `radar:read`
+       * @danger read
+       * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+       */
+      get: (options) => this.transport.call(environmentOperations["radar.settings.get"], [], void 0, options),
+      /**
+       * Tune this environment's built-in Radar rules: `builtin_rules` maps a rule key (credential_stuffing, bot_velocity, account_attack, impossible_travel, new_device, anonymous_network, hosting_network, disposable_email, risk_score_reject, risk_score_elevated) to any of enabled, action and threshold.
+       *
+       * Requires scope `radar:write`. Danger: write.
+       *
+       * `PATCH /radar/settings` · action `radar.settings.update`
+       * @scope `radar:write`
+       * @danger write
+       * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+       */
+      update: (body, options) => this.transport.call(environmentOperations["radar.settings.update"], [], body, options)
+    }
+  };
   roles = {
     /**
      * Define a role for one organization, or (organization_id null) for the whole environment, optionally scoped to one app, with its opening permissions.
@@ -2556,7 +3134,7 @@ var EnvironmentClient = class {
        */
       inherit: (organizationId, options) => this.transport.call(environmentOperations["signin.policy.inherit"], [organizationId], void 0, options),
       /**
-       * Change the authentication policy of the environment baseline, or tighten one organization's override. Requiring SSO signs out password sessions.
+       * Change the authentication policy of the environment baseline — including whether passkeys and magic links are offered and how long sessions last — or tighten one organization's override. Requiring SSO signs out password sessions.
        *
        * Requires scope `signin:write`. Danger: critical.
        *
@@ -2580,6 +3158,30 @@ var EnvironmentClient = class {
        */
       set: (body, options) => this.transport.call(environmentOperations["signin.self_service_signup.set"], [], body, options)
     },
+    sms: {
+      /**
+       * Read the SMS second-factor policy: whether text-message codes are accepted, for which countries, and the administrator rule.
+       *
+       * Requires scope `signin:read`. Danger: read.
+       *
+       * `GET /sign-in/sms` · action `signin.sms.get`
+       * @scope `signin:read`
+       * @danger read
+       * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+       */
+      get: (options) => this.transport.call(environmentOperations["signin.sms.get"], [], void 0, options),
+      /**
+       * Change the SMS second-factor policy: accept text-message codes or not, the countries they may go to, and whether SMS may be an administrator's only factor.
+       *
+       * Requires scope `signin:write`. Danger: critical.
+       *
+       * `PATCH /sign-in/sms` · action `signin.sms.update`
+       * @scope `signin:write`
+       * @danger critical
+       * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+       */
+      update: (body, options) => this.transport.call(environmentOperations["signin.sms.update"], [], body, options)
+    },
     social: {
       /**
        * Stop offering a social login provider. People who used it keep their accounts.
@@ -2593,7 +3195,40 @@ var EnvironmentClient = class {
        */
       delete: (id, body, options) => this.transport.call(environmentOperations["signin.social.delete"], [id], body, options),
       /**
-       * List the social login providers (Google, GitHub, Apple…) enabled in this environment, optionally for one organization.
+       * Turn a social login provider off without removing it. People who used it keep their accounts.
+       *
+       * Requires scope `signin:write`. Danger: critical.
+       *
+       * `POST /sign-in/social-providers/{id}/disable` · action `signin.social.disable`
+       * @scope `signin:write`
+       * @danger critical
+       * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+       */
+      disable: (id, body, options) => this.transport.call(environmentOperations["signin.social.disable"], [id], body, options),
+      /**
+       * Turn a social login provider that was turned off back on, with the credentials it already has.
+       *
+       * Requires scope `signin:write`. Danger: write.
+       *
+       * `POST /sign-in/social-providers/{id}/enable` · action `signin.social.enable`
+       * @scope `signin:write`
+       * @danger write
+       * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+       */
+      enable: (id, body, options) => this.transport.call(environmentOperations["signin.social.enable"], [id], body, options),
+      /**
+       * Turn one of the environment's social login providers off (or back on) for one organization's sign-in page.
+       *
+       * Requires scope `signin:write`. Danger: write.
+       *
+       * `PUT /sign-in/social-providers/inherited/{provider}` · action `signin.social.inherit`
+       * @scope `signin:write`
+       * @danger write
+       * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+       */
+      inherit: (provider, body, options) => this.transport.call(environmentOperations["signin.social.inherit"], [provider], body, options),
+      /**
+       * List the social login providers (Google, GitHub, Apple…) set up in this environment — the environment's own and organizations' — optionally for one organization.
        *
        * Requires scope `signin:read`. Danger: read.
        *
@@ -2606,7 +3241,18 @@ var EnvironmentClient = class {
       /** Every item of `signin.social.list`, fetching pages as the iteration reaches them. */
       listAll: (query, options) => this.transport.paginate(environmentOperations["signin.social.list"], [], query, options),
       /**
-       * Enable a social login provider (Google, GitHub, Apple…) for one organization with its client credentials. The secret is never returned.
+       * The social login buttons one organization's sign-in page shows (or the plain sign-in page's), after inheritance from the environment, with where each comes from.
+       *
+       * Requires scope `signin:read`. Danger: read.
+       *
+       * `GET /sign-in/social-providers/offered` · action `signin.social.offered`
+       * @scope `signin:read`
+       * @danger read
+       * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+       */
+      offered: (query, options) => this.transport.call(environmentOperations["signin.social.offered"], [], query, options),
+      /**
+       * Enable a social login provider (Google, GitHub, Apple…) for the whole environment or for one organization, with its client credentials. The secret is never returned.
        *
        * Requires scope `signin:write`. Danger: critical.
        *
@@ -2615,7 +3261,18 @@ var EnvironmentClient = class {
        * @danger critical
        * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
        */
-      set: (body, options) => this.transport.call(environmentOperations["signin.social.set"], [], body, options)
+      set: (body, options) => this.transport.call(environmentOperations["signin.social.set"], [], body, options),
+      /**
+       * Change a social login provider's client credentials, provider values or extra scopes. Secrets left out keep the ones on file.
+       *
+       * Requires scope `signin:write`. Danger: critical.
+       *
+       * `PATCH /sign-in/social-providers/{id}` · action `signin.social.update`
+       * @scope `signin:write`
+       * @danger critical
+       * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+       */
+      update: (id, body, options) => this.transport.call(environmentOperations["signin.social.update"], [id], body, options)
     }
   };
   sodPolicies = {
@@ -3169,7 +3826,20 @@ var EnvironmentClient = class {
        * @danger critical
        * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
        */
-      reset: (id, options) => this.transport.call(environmentOperations["users.mfa.reset"], [id], void 0, options)
+      reset: (id, options) => this.transport.call(environmentOperations["users.mfa.reset"], [id], void 0, options),
+      sms: {
+        /**
+         * Remove a user's phone number for text-message sign-in codes. Their other factors and recovery codes stay.
+         *
+         * Requires scope `users:write`. Danger: critical.
+         *
+         * `DELETE /users/{id}/mfa/sms` · action `users.mfa.sms.remove`
+         * @scope `users:write`
+         * @danger critical
+         * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+         */
+        remove: (id, options) => this.transport.call(environmentOperations["users.mfa.sms.remove"], [id], void 0, options)
+      }
     },
     passwordReset: {
       /**
@@ -3898,8 +4568,10 @@ var accountOperations = {
   "account.api_keys.revoke": { action: "account.api_keys.revoke", operationId: "account_api_keys_revoke", method: "DELETE", path: "/me/organizations/{organization_id}/api-keys/{key_id}", pathParams: ["organization_id", "key_id"], scope: "account:api_keys:write", danger: "destructive", approval: true, body: false, pagination: null },
   "account.applications.revoke": { action: "account.applications.revoke", operationId: "account_applications_revoke", method: "DELETE", path: "/me/applications/{client_id}", pathParams: ["client_id"], scope: "account:applications:write", danger: "destructive", approval: true, body: false, pagination: null },
   "account.devices.remove": { action: "account.devices.remove", operationId: "account_devices_remove", method: "DELETE", path: "/me/devices/{device_id}", pathParams: ["device_id"], scope: "account:devices:write", danger: "destructive", approval: true, body: false, pagination: null },
+  "account.mfa.sms.remove": { action: "account.mfa.sms.remove", operationId: "account_mfa_sms_remove", method: "DELETE", path: "/me/mfa/sms", pathParams: [], scope: "account:sign_in:write", danger: "critical", approval: true, body: false, pagination: null },
   "account.organizations.leave": { action: "account.organizations.leave", operationId: "account_organizations_leave", method: "POST", path: "/me/organizations/{organization_id}/leave", pathParams: ["organization_id"], scope: "account:organizations:write", danger: "destructive", approval: true, body: false, pagination: null },
   "account.passkeys.remove": { action: "account.passkeys.remove", operationId: "account_passkeys_remove", method: "DELETE", path: "/me/passkeys/{passkey_id}", pathParams: ["passkey_id"], scope: "account:sign_in:write", danger: "critical", approval: true, body: false, pagination: null },
+  "account.pipes.disconnect": { action: "account.pipes.disconnect", operationId: "account_pipes_disconnect", method: "DELETE", path: "/me/pipes/{provider}", pathParams: ["provider"], scope: "account:pipes:write", danger: "destructive", approval: true, body: false, pagination: null },
   "account.profile.update": { action: "account.profile.update", operationId: "account_profile_update", method: "PATCH", path: "/me/profile", pathParams: [], scope: "account:profile:write", danger: "write", approval: true, body: true, pagination: null },
   "account.sessions.revoke": { action: "account.sessions.revoke", operationId: "account_sessions_revoke", method: "DELETE", path: "/me/sessions/{session_id}", pathParams: ["session_id"], scope: "account:sessions:write", danger: "destructive", approval: true, body: false, pagination: null },
   "account.sessions.revoke_others": { action: "account.sessions.revoke_others", operationId: "account_sessions_revoke_others", method: "POST", path: "/me/sessions/revoke-others", pathParams: [], scope: "account:sessions:write", danger: "critical", approval: true, body: false, pagination: null },
@@ -3975,6 +4647,21 @@ var AccountClient = class {
      */
     remove: (deviceId, options) => this.transport.call(accountOperations["account.devices.remove"], [deviceId], void 0, options)
   };
+  mfa = {
+    sms: {
+      /**
+       * Remove your phone number for text-message sign-in codes.
+       *
+       * Requires scope `account:sign_in:write` on an access token you delegated; it acts on your own account only. No management key is accepted. Danger: critical.
+       *
+       * `DELETE /me/mfa/sms` · action `account.mfa.sms.remove`
+       * @scope `account:sign_in:write`
+       * @danger critical
+       * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+       */
+      remove: (options) => this.transport.call(accountOperations["account.mfa.sms.remove"], [], void 0, options)
+    }
+  };
   organizations = {
     /**
      * Leave one of your own organizations. The last owner cannot leave — transfer ownership first.
@@ -4001,6 +4688,19 @@ var AccountClient = class {
      */
     remove: (passkeyId, options) => this.transport.call(accountOperations["account.passkeys.remove"], [passkeyId], void 0, options)
   };
+  pipes = {
+    /**
+     * Disconnect one of your connected services, revoking the access you gave it.
+     *
+     * Requires scope `account:pipes:write` on an access token you delegated; it acts on your own account only. No management key is accepted. Danger: destructive.
+     *
+     * `DELETE /me/pipes/{provider}` · action `account.pipes.disconnect`
+     * @scope `account:pipes:write`
+     * @danger destructive
+     * May be held for approval (`202 approval_required`); waited on unless `approval: 'return'`.
+     */
+    disconnect: (provider, options) => this.transport.call(accountOperations["account.pipes.disconnect"], [provider], void 0, options)
+  };
   profile = {
     /**
      * Change the display name on your own account.
@@ -4339,6 +5039,25 @@ async function verifyAuditLogChain(client, query, options = {}) {
   return verifyAuditChain(client.auditLogs.events.listAll({ ...query, order: "asc" }), options);
 }
 
+// src/management/fga.ts
+function fgaTuple(tuple) {
+  const name = (value, what) => {
+    if (value === "" || /[\s#@:]/.test(value)) {
+      throw new TypeError(`An FGA ${what} cannot be empty or contain whitespace, '#', '@' or ':': ${JSON.stringify(value)}`);
+    }
+    return value;
+  };
+  const id = (value, what) => {
+    if (value === "" || /[\s#@]/.test(value)) {
+      throw new TypeError(`An FGA ${what} cannot be empty or contain whitespace, '#' or '@': ${JSON.stringify(value)}`);
+    }
+    return value;
+  };
+  const subject = `${name(tuple.subject.type, "subject type")}:${id(tuple.subject.id, "subject id")}`;
+  const userset = tuple.subject.relation ? `#${name(tuple.subject.relation, "subject relation")}` : "";
+  return `${name(tuple.resource_type, "resource type")}:${id(tuple.resource_id, "resource id")}#${name(tuple.relation, "relation")}@${subject}${userset}`;
+}
+
 exports.AUDIT_CHAIN_GENESIS = AUDIT_CHAIN_GENESIS;
 exports.AccountClient = AccountClient;
 exports.ApprovalDeniedError = ApprovalDeniedError;
@@ -4362,6 +5081,7 @@ exports.canonicalJson = canonicalJson;
 exports.createDPoPSigner = createDPoPSigner;
 exports.environmentOperations = environmentOperations;
 exports.exportAuditLogs = exportAuditLogs;
+exports.fgaTuple = fgaTuple;
 exports.generateDPoPKeyPair = generateDPoPKeyPair;
 exports.platformOperations = platformOperations;
 exports.retryAfterMs = retryAfterMs;