@descope/node-sdk 2.10.0 → 2.12.0

package/dist/index.d.ts

@@ -315,6 +315,9 @@ declare type SSOApplication = {
     oidcSettings: SSOApplicationOIDCSettings;
     wsfedSettings?: SSOApplicationWSFedSettings;
 };
+declare type SSOApplicationSecretResponse = {
+    cleartext: string;
+};
 /** Represents a permission in a project. It has a name and optionally a description.
  * It also has a flag indicating whether it is system default or not.
  */
@@ -659,6 +662,44 @@ declare type AuditRecord = {
     tenants: string[];
     data: Record<string, any>;
 };
+/** Response for the searchAll audit method, including the total number of matching records. */
+declare type AuditSearchAllResponse = {
+    audits: AuditRecord[];
+    total: number;
+};
+/** Basic authentication for an HTTP connector. */
+declare type ConnectorHTTPBasicAuthentication = {
+    username?: string;
+    password?: string;
+};
+/** API key authentication for an HTTP connector. */
+declare type ConnectorHTTPAPIKeyAuthentication = {
+    key?: string;
+    token?: string;
+};
+/** Authentication configuration for an HTTP connector. */
+declare type ConnectorHTTPAuthentication = {
+    bearerToken?: string;
+    basic?: ConnectorHTTPBasicAuthentication;
+    apiKey?: ConnectorHTTPAPIKeyAuthentication;
+};
+/** Filters that determine which audit events are streamed by an audit webhook. */
+declare type AuditFilters = {
+    key?: string;
+    operator?: string;
+    values?: string[];
+};
+/** Configuration for an audit webhook connector. */
+declare type AuditWebhook = {
+    name: string;
+    description?: string;
+    url?: string;
+    authentication?: ConnectorHTTPAuthentication;
+    hmacSecret?: string;
+    headers?: Record<string, string>;
+    insecure?: boolean;
+    filters?: AuditFilters[];
+};
 declare type UserStatus = 'enabled' | 'disabled' | 'invited' | 'expired';
 declare type AuthzNodeExpressionType = 'self' | 'targetSet' | 'relationLeft' | 'relationRight';
 /**
@@ -837,6 +878,31 @@ interface FGAResourceDetails {
     resourceType: string;
     displayName: string;
 }
+declare type FGASchemaDryRunResponse = {
+    deletesPreview?: {
+        hasDeletes: boolean;
+        relations?: string[];
+        types?: string[];
+    };
+};
+declare type FGAMappableResource = {
+    resource: string;
+};
+declare type FGAMappableResources = {
+    type: string;
+    resources: FGAMappableResource[];
+};
+declare type FGAMappableSchema = {
+    schema?: AuthzSchema | null;
+    mappableResources?: FGAMappableResources[];
+};
+declare type FGAMappableResourcesQuery = {
+    type: string;
+    queries: string[];
+};
+declare type FGAMappableResourcesOptions = {
+    resourcesLimit?: number;
+};
 /**
  * Configuration for FGA cache proxy support.
  * When fgaCacheUrl is provided along with managementKey, certain FGA operations
@@ -932,6 +998,11 @@ declare type InboundApplicationConsentDeleteOptions = {
     appId?: string;
     userIds?: string[];
 };
+declare type InboundApplicationTenantConsentDeleteOptions = {
+    consentIds?: string[];
+    appId?: string;
+    tenantId?: string;
+};
 declare type PromptType = 'none' | 'login' | 'consent' | 'select_account';
 declare type AccessType = 'offline' | 'online';
 declare type OutboundApplication = {
@@ -1161,6 +1232,173 @@ declare type MgmtKeyCreateResponse = {
 declare type License = {
     rateLimitTier: string;
 };
+/** Represents an engine in a project. `secret` is populated only on create and
+ * rotateSecret; it is always empty on load/loadAll. */
+declare type Engine = {
+    id: string;
+    name: string;
+    secret?: string;
+    createdTime?: number;
+};
+/** Response of an engine secret rotation. */
+declare type EngineSecretResponse = {
+    secret: string;
+};
+/** A single option for a custom attribute of type "select". */
+declare type CustomAttributeOption = {
+    value?: string;
+    label?: string;
+};
+/** Represents a custom attribute definition in the project schema. */
+declare type CustomAttribute = {
+    name?: string;
+    type?: number;
+    options?: CustomAttributeOption[];
+    displayName?: string;
+    defaultValue?: any;
+    viewPermissions?: string[];
+    editPermissions?: string[];
+};
+/** A registered passkey (WebAuthn credential) for a user. */
+declare type UserPasskey = {
+    id?: string;
+    rpId?: string;
+    kind?: string;
+    displayName?: string;
+    createdTime?: number;
+};
+/** A trusted device associated with a user. */
+declare type UserTrustedDevice = {
+    id?: string;
+    name?: string;
+    deviceType?: string;
+    lastLoginTime?: number;
+    expirationTime?: number;
+    lastLocation?: string;
+};
+/** A single failure entry returned from a user import. */
+declare type UserImportFailure = {
+    user: string;
+    reason: string;
+};
+/** Response of a user import operation. */
+declare type UserImportResponse = {
+    users?: UserResponse[];
+    failures?: UserImportFailure[];
+};
+/** Request to update an existing permission by its ID as part of a batch update. */
+declare type PermissionUpdateRequest = {
+    id: string;
+    newName: string;
+    description?: string;
+};
+/** Request to update an existing role by its ID as part of a batch update. */
+declare type RoleUpdateRequest = {
+    id: string;
+    newName: string;
+    description?: string;
+    permissionNames?: string[];
+    tenantId?: string;
+    default?: boolean;
+};
+/** The type of a project list (currently "ip" or "text"). */
+declare type ListType = string;
+/** Represents a project list of IPs or texts. */
+declare type List = {
+    id?: string;
+    name?: string;
+    description?: string;
+    type?: ListType;
+    data?: any;
+};
+/** Request payload for creating or updating a list. */
+declare type ListRequest = {
+    name: string;
+    description?: string;
+    type: ListType;
+    data?: any;
+};
+/** Represents a JWT template configuration. */
+declare type JWTTemplate = {
+    id?: string;
+    name?: string;
+    description?: string;
+    template?: Record<string, any>;
+    source?: string;
+    tags?: string[];
+    authSchema?: string;
+    type?: string;
+    conformanceIssuer?: boolean;
+    autoDCT?: boolean;
+    enforceIssuer?: boolean;
+    emptyClaimPolicy?: string;
+    overrideSubject?: boolean;
+    issuerType?: string;
+    omitCustomClaimsFromDSR?: boolean;
+    addJti?: boolean;
+    excludePermissions?: boolean;
+};
+/** A single validation issue found while validating a JWT template. */
+declare type JWTTemplateValidationIssue = {
+    message?: string;
+    severity?: string;
+    path?: string;
+};
+/** Result of validating a JWT template. */
+declare type JWTTemplateValidationResult = {
+    valid: boolean;
+    issues?: JWTTemplateValidationIssue[];
+};
+/** A JWT template entry available in the shared template library. */
+declare type JWTTemplateLibraryEntry = JWTTemplate & {
+    experimental?: boolean;
+    logoLight?: string;
+    logoDark?: string;
+};
+/** Request payload for applying a JWT template from the library. */
+declare type ApplyJWTTemplateFromLibraryRequest = {
+    libraryEntryId: string;
+    nameOverride?: string;
+    descriptionOverride?: string;
+    tagsOverride?: string[];
+    templateOverride?: Record<string, any>;
+};
+/** A single scope-to-claims mapping entry. */
+declare type ScopeClaimMappingEntry = {
+    scope?: string;
+    claims?: Record<string, string>;
+    description?: string;
+};
+/** Options for searching analytics records. Time fields are epoch milliseconds. */
+declare type AnalyticsSearchOptions = {
+    actions?: string[];
+    excludedActions?: string[];
+    from?: number;
+    to?: number;
+    devices?: string[];
+    methods?: string[];
+    geos?: string[];
+    tenants?: string[];
+    groupByAction?: boolean;
+    groupByDevice?: boolean;
+    groupByMethod?: boolean;
+    groupByGeo?: boolean;
+    groupByTenant?: boolean;
+    groupByReferrer?: boolean;
+    groupByCreated?: string;
+};
+/** A single analytics record returned from an analytics search. */
+declare type AnalyticRecord = {
+    projectId?: string;
+    action?: string;
+    created?: string;
+    device?: string;
+    method?: string;
+    geo?: string;
+    tenant?: string;
+    referrer?: string;
+    cnt?: string;
+};
 
 interface PatchUserOptions {
     email?: string;
@@ -1350,10 +1588,22 @@ declare const nodeSdk: {
                 removeAllPasskeys: (loginId: string) => Promise<SdkResponse<never>>;
                 removeTOTPSeed: (loginId: string) => Promise<SdkResponse<never>>;
                 history: (userIds: string[]) => Promise<SdkResponse<_descope_core_js_sdk.UserHistoryResponse[]>>;
+                import: (source: string, users?: string | Uint8Array, hashes?: string | Uint8Array, dryrun?: boolean) => Promise<SdkResponse<UserImportResponse>>;
+                updateRecoveryEmail: (loginIdOrUserId: string, email: string, isVerified?: boolean) => Promise<SdkResponse<_descope_core_js_sdk.UserResponse>>;
+                updateRecoveryPhone: (loginIdOrUserId: string, phone: string, isVerified?: boolean) => Promise<SdkResponse<_descope_core_js_sdk.UserResponse>>;
+                updateUserNames: (loginIdOrUserId: string, givenName?: string, middleName?: string, familyName?: string) => Promise<SdkResponse<_descope_core_js_sdk.UserResponse>>;
+                getCustomAttributes: () => Promise<SdkResponse<CustomAttribute[]>>;
+                createCustomAttributes: (attributes: CustomAttribute[]) => Promise<SdkResponse<CustomAttribute[]>>;
+                deleteCustomAttributes: (names: string[]) => Promise<SdkResponse<CustomAttribute[]>>;
+                removePasskey: (loginId: string, credentialId: string) => Promise<SdkResponse<never>>;
+                listPasskeys: (loginId: string) => Promise<SdkResponse<UserPasskey[]>>;
+                listTrustedDevices: (loginIdsOrUserIds: string[]) => Promise<SdkResponse<UserTrustedDevice[]>>;
+                removeTrustedDevices: (loginIdOrUserId: string, deviceIds: string[]) => Promise<SdkResponse<never>>;
             };
             project: {
                 updateName: (name: string) => Promise<SdkResponse<never>>;
                 updateTags: (tags: string[]) => Promise<SdkResponse<never>>;
+                delete: () => Promise<SdkResponse<never>>;
                 clone: (name: string, environment?: "production", tags?: string[]) => Promise<SdkResponse<CloneProjectResponse>>;
                 listProjects: () => Promise<SdkResponse<Project[]>>;
                 exportSnapshot: () => Promise<SdkResponse<ExportSnapshotResponse>>;
@@ -1368,8 +1618,12 @@ declare const nodeSdk: {
                 searchAll: (tenantIds?: string[], boundUserId?: string, creatingUser?: string, customAttributes?: Record<string, any>) => Promise<SdkResponse<AccessKey[]>>;
                 update: (id: string, name: string, description?: string, roles?: string[], tenants?: AssociatedTenant[], customClaims?: Record<string, any>, permittedIps?: string[], customAttributes?: Record<string, any>) => Promise<SdkResponse<AccessKey>>;
                 deactivate: (id: string) => Promise<SdkResponse<never>>;
+                deactivateBatch: (ids: string[]) => Promise<SdkResponse<never>>;
                 activate: (id: string) => Promise<SdkResponse<never>>;
+                activateBatch: (ids: string[]) => Promise<SdkResponse<never>>;
                 delete: (id: string) => Promise<SdkResponse<never>>;
+                deleteBatch: (ids: string[]) => Promise<SdkResponse<never>>;
+                rotate: (id: string) => Promise<SdkResponse<CreatedAccessKeyResponse>>;
             };
             tenant: {
                 create: (name: string, selfProvisioningDomains?: string[], customAttributes?: Record<string, AttributesTypes>, enforceSSO?: boolean, disabled?: boolean, parent?: string, roleInheritance?: "" | "none" | "userOnly") => Promise<SdkResponse<CreateTenantResponse>>;
@@ -1383,6 +1637,7 @@ declare const nodeSdk: {
                 getSettings: (tenantId: string) => Promise<SdkResponse<TenantSettings>>;
                 configureSettings: (tenantId: string, settings: TenantSettings) => Promise<SdkResponse<never>>;
                 generateSSOConfigurationLink: (tenantId: string, expireDuration: number, ssoId?: string, email?: string, templateId?: string, actorId?: string) => Promise<SdkResponse<GenerateSSOConfigurationLinkResponse>>;
+                revokeSSOConfigurationLink: (tenantId: string, ssoId?: string) => Promise<SdkResponse<never>>;
             };
             ssoApplication: {
                 createOidcApplication: (options: OidcApplicationOptions) => Promise<SdkResponse<CreateSSOApplicationResponse>>;
@@ -1400,6 +1655,8 @@ declare const nodeSdk: {
                 delete: (id: string) => Promise<SdkResponse<never>>;
                 load: (id: string) => Promise<SdkResponse<SSOApplication>>;
                 loadAll: () => Promise<SdkResponse<SSOApplication[]>>;
+                getApplicationSecret: (id: string) => Promise<SdkResponse<SSOApplicationSecretResponse>>;
+                rotateApplicationSecret: (id: string) => Promise<SdkResponse<SSOApplicationSecretResponse>>;
             };
             inboundApplication: {
                 createApplication: (options: InboundApplicationOptions) => Promise<SdkResponse<CreateInboundApplicationResponse>>;
@@ -1410,12 +1667,14 @@ declare const nodeSdk: {
                     id: string;
                 }) => Promise<SdkResponse<never>>;
                 deleteApplication: (id: string) => Promise<SdkResponse<never>>;
+                deleteApplicationBatch: (ids: string[]) => Promise<SdkResponse<never>>;
                 loadApplication: (id: string) => Promise<SdkResponse<InboundApplication>>;
                 loadAllApplications: () => Promise<SdkResponse<InboundApplication[]>>;
                 getApplicationSecret: (id: string) => Promise<SdkResponse<InboundApplicationSecretResponse>>;
                 rotateApplicationSecret: (id: string) => Promise<SdkResponse<never>>;
                 searchConsents: (options?: InboundApplicationConsentSearchOptions) => Promise<SdkResponse<InboundApplicationConsent[]>>;
                 deleteConsents: (options: InboundApplicationConsentDeleteOptions) => Promise<SdkResponse<never>>;
+                deleteTenantConsents: (options: InboundApplicationTenantConsentDeleteOptions) => Promise<SdkResponse<never>>;
             };
             outboundApplication: {
                 createApplication: (app: Omit<OutboundApplication, "id"> & Partial<Pick<OutboundApplication, "id">> & {
@@ -1452,12 +1711,15 @@ declare const nodeSdk: {
                 configureOIDCSettings: (tenantId: string, settings: SSOOIDCSettings, domains?: string[], ssoId?: string) => Promise<SdkResponse<never>>;
                 configureSAMLSettings: (tenantId: string, settings: SSOSAMLSettings, redirectUrl?: string, domains?: string[], ssoId?: string) => Promise<SdkResponse<never>>;
                 configureSAMLByMetadata: (tenantId: string, settings: SSOSAMLByMetadataSettings, redirectUrl?: string, domains?: string[], ssoId?: string) => Promise<SdkResponse<never>>;
+                configureSSORedirectURL: (tenantId: string, samlRedirectUrl?: string, oauthRedirectUrl?: string, ssoId?: string) => Promise<SdkResponse<never>>;
+                recalculateSSOMappings: (tenantId: string, ssoId?: string) => Promise<SdkResponse<never>>;
                 loadSettings: (tenantId: string, ssoId?: string) => Promise<SdkResponse<SSOSettings>>;
                 loadAllSettings: (tenantId: string) => Promise<SdkResponse<SSOSettings[]>>;
             };
             jwt: {
                 update: (jwt: string, customClaims?: Record<string, any>, refreshDuration?: number) => Promise<SdkResponse<UpdateJWTResponse>>;
                 impersonate: (impersonatorId: string, loginId: string, validateConsent: boolean, customClaims?: Record<string, any>, selectedTenant?: string, refreshDuration?: number) => Promise<SdkResponse<UpdateJWTResponse>>;
+                impersonateStepup: (impersonatorId: string, loginId: string, validateConsent: boolean, customClaims?: Record<string, any>, selectedTenant?: string, refreshDuration?: number) => Promise<SdkResponse<UpdateJWTResponse>>;
                 stopImpersonation: (jwt: string, customClaims?: Record<string, any>, selectedTenant?: string, refreshDuration?: number) => Promise<SdkResponse<UpdateJWTResponse>>;
                 signIn: (loginId: string, loginOptions?: MgmtLoginOptions) => Promise<SdkResponse<JWTResponse>>;
                 signUp: (loginId: string, user?: MgmtUserOptions, signUpOptions?: MgmtSignUpOptions) => Promise<SdkResponse<JWTResponse>>;
@@ -1479,8 +1741,13 @@ declare const nodeSdk: {
             };
             permission: {
                 create: (name: string, description?: string) => Promise<SdkResponse<never>>;
+                createBatch: (permissions: Permission[]) => Promise<SdkResponse<never>>;
                 update: (name: string, newName: string, description?: string) => Promise<SdkResponse<never>>;
+                updateWithId: (id: string, newName: string, description?: string) => Promise<SdkResponse<never>>;
+                updateBatch: (permissions: PermissionUpdateRequest[]) => Promise<SdkResponse<never>>;
                 delete: (name: string) => Promise<SdkResponse<never>>;
+                deleteWithId: (id: string) => Promise<SdkResponse<never>>;
+                deleteBatch: (names?: string[], ids?: string[]) => Promise<SdkResponse<never>>;
                 loadAll: () => Promise<SdkResponse<Permission[]>>;
             };
             password: {
@@ -1489,8 +1756,14 @@ declare const nodeSdk: {
             };
             role: {
                 create: (name: string, description?: string, permissionNames?: string[], tenantId?: string, defaultRole?: boolean) => Promise<SdkResponse<never>>;
+                createBatch: (roles: Role[]) => Promise<SdkResponse<Role[]>>;
+                /** Configuration arguments which include the Descope core SDK args and an optional management key */
                 update: (name: string, newName: string, description?: string, permissionNames?: string[], tenantId?: string, defaultRole?: boolean) => Promise<SdkResponse<never>>;
+                updateWithId: (id: string, newName: string, description?: string, permissionNames?: string[], tenantId?: string, defaultRole?: boolean) => Promise<SdkResponse<never>>;
+                updateBatch: (roles: RoleUpdateRequest[]) => Promise<SdkResponse<Role[]>>;
                 delete: (name: string, tenantId?: string) => Promise<SdkResponse<never>>;
+                deleteWithId: (id: string, tenantId?: string) => Promise<SdkResponse<never>>;
+                deleteBatch: (roleNames?: string[], tenantId?: string, roleIds?: string[]) => Promise<SdkResponse<never>>;
                 loadAll: () => Promise<SdkResponse<Role[]>>;
                 search: (options: RoleSearchOptions) => Promise<SdkResponse<Role[]>>;
             };
@@ -1512,7 +1785,9 @@ declare const nodeSdk: {
             };
             audit: {
                 search: (searchOptions: AuditSearchOptions) => Promise<SdkResponse<AuditRecord[]>>;
+                searchAll: (searchOptions: AuditSearchOptions) => Promise<SdkResponse<AuditSearchAllResponse>>;
                 createEvent: (createOptions: AuditCreateOptions) => Promise<SdkResponse<never>>;
+                createAuditWebhook: (options: AuditWebhook) => Promise<SdkResponse<never>>;
             };
             authz: {
                 saveSchema: (schema: AuthzSchema, upgrade: boolean) => Promise<SdkResponse<never>>;
@@ -1530,19 +1805,26 @@ declare const nodeSdk: {
                 hasRelations: (relationQueries: AuthzRelationQuery[]) => Promise<SdkResponse<AuthzRelationQuery[]>>;
                 whoCanAccess: (resource: string, relationDefinition: string, namespace: string) => Promise<SdkResponse<string[]>>;
                 resourceRelations: (resource: string, ignoreTargetSetRelations?: boolean) => Promise<SdkResponse<AuthzRelation[]>>;
+                resourceRelationsWithTargetSetsFilter: (resource: string, includeTargetSetRelations?: boolean) => Promise<SdkResponse<AuthzRelation[]>>;
                 targetsRelations: (targets: string[], includeTargetSetRelations?: boolean) => Promise<SdkResponse<AuthzRelation[]>>;
+                targetsRelationsWithTargetSetsFilter: (targets: string[], includeTargetSetRelations?: boolean) => Promise<SdkResponse<AuthzRelation[]>>;
                 whatCanTargetAccess: (target: string) => Promise<SdkResponse<AuthzRelation[]>>;
                 whatCanTargetAccessWithRelation: (target: string, relationDefinition: string, namespace: string) => Promise<SdkResponse<AuthzResource[]>>;
                 getModified: (since: Date) => Promise<SdkResponse<AuthzModified>>;
             };
             fga: {
                 saveSchema: (schema: FGASchema) => Promise<SdkResponse<never>>;
+                loadSchema: () => Promise<SdkResponse<FGASchema>>;
+                dryRunSchema: (schema: FGASchema) => Promise<SdkResponse<FGASchemaDryRunResponse>>;
                 deleteSchema: () => Promise<SdkResponse<never>>;
                 createRelations: (relations: FGARelation[]) => Promise<SdkResponse<never>>;
                 deleteRelations: (relations: FGARelation[]) => Promise<SdkResponse<never>>;
                 check: (relations: FGARelation[]) => Promise<SdkResponse<CheckResponseRelation[]>>;
+                checkWithContext: (relations: FGARelation[], context?: Record<string, any>) => Promise<SdkResponse<CheckResponseRelation[]>>;
                 loadResourcesDetails: (resourceIdentifiers: FGAResourceIdentifier[]) => Promise<SdkResponse<FGAResourceDetails[]>>;
                 saveResourcesDetails: (resourcesDetails: FGAResourceDetails[]) => Promise<SdkResponse<never>>;
+                loadMappableSchema: (tenantId: string, options?: FGAMappableResourcesOptions) => Promise<SdkResponse<FGAMappableSchema>>;
+                searchMappableResources: (tenantId: string, resourcesQueries: FGAMappableResourcesQuery[], options?: FGAMappableResourcesOptions) => Promise<SdkResponse<FGAMappableResources[]>>;
                 deleteAllRelations: () => Promise<SdkResponse<never>>;
             };
             descoper: {
@@ -1565,6 +1847,49 @@ declare const nodeSdk: {
                 load: (id: string) => Promise<SdkResponse<MgmtKey>>;
                 search: () => Promise<SdkResponse<MgmtKey[]>>;
             };
+            engine: {
+                create: (name: string) => Promise<SdkResponse<Engine>>;
+                update: (id: string, name: string) => Promise<SdkResponse<Engine>>;
+                delete: (id: string) => Promise<SdkResponse<never>>;
+                load: (id: string) => Promise<SdkResponse<Engine>>;
+                loadAll: () => Promise<SdkResponse<Engine[]>>;
+                rotateSecret: (id: string) => Promise<SdkResponse<EngineSecretResponse>>;
+            };
+            list: {
+                create: (request: ListRequest) => Promise<SdkResponse<List>>;
+                update: (id: string, request: ListRequest) => Promise<SdkResponse<List>>;
+                delete: (id: string) => Promise<SdkResponse<never>>;
+                load: (id: string) => Promise<SdkResponse<List>>;
+                loadByName: (name: string) => Promise<SdkResponse<List>>;
+                loadAll: () => Promise<SdkResponse<List[]>>;
+                import: (lists: List[]) => Promise<SdkResponse<never>>;
+                addIPs: (id: string, ips: string[]) => Promise<SdkResponse<never>>;
+                removeIPs: (id: string, ips: string[]) => Promise<SdkResponse<never>>;
+                checkIP: (id: string, ip: string) => Promise<SdkResponse<any>>;
+                addTexts: (id: string, texts: string[]) => Promise<SdkResponse<never>>;
+                removeTexts: (id: string, texts: string[]) => Promise<SdkResponse<never>>;
+                checkText: (id: string, text: string) => Promise<SdkResponse<any>>;
+                clear: (id: string) => Promise<SdkResponse<never>>;
+            };
+            jwtTemplate: {
+                create: (template: JWTTemplate) => Promise<SdkResponse<JWTTemplate>>;
+                update: (template: JWTTemplate) => Promise<SdkResponse<JWTTemplate>>;
+                delete: (id: string) => Promise<SdkResponse<never>>;
+                list: () => Promise<SdkResponse<JWTTemplate[]>>;
+                load: (id: string) => Promise<SdkResponse<JWTTemplate>>;
+                validate: (id: string, template?: JWTTemplate) => Promise<SdkResponse<JWTTemplateValidationResult>>;
+                listLibrary: () => Promise<SdkResponse<JWTTemplateLibraryEntry[]>>;
+                loadLibraryEntry: (id: string) => Promise<SdkResponse<JWTTemplateLibraryEntry>>;
+                applyFromLibrary: (request: ApplyJWTTemplateFromLibraryRequest) => Promise<SdkResponse<JWTTemplate>>;
+            };
+            scopeClaimMapping: {
+                get: () => Promise<SdkResponse<ScopeClaimMappingEntry[]>>;
+                set: (mappings: ScopeClaimMappingEntry[]) => Promise<SdkResponse<never>>;
+                delete: () => Promise<SdkResponse<never>>;
+            };
+            analytics: {
+                search: (options: AnalyticsSearchOptions) => Promise<SdkResponse<AnalyticRecord[]>>;
+            };
         };
         getKey: (header: JWTHeaderParameters) => Promise<KeyLike | Uint8Array>;
         validateJwt: (jwt: string, options?: VerifyOptions) => Promise<AuthenticationInfo>;
@@ -2114,6 +2439,10 @@ declare const nodeSdk: {
                 externalIdentifier?: string;
             }, token?: string) => Promise<SdkResponse<_descope_core_js_sdk.URLResponse>>;
         };
+        sso: {
+            start: (tenantIdOrEmail: string, redirectUrl?: string, loginOptions?: _descope_core_js_sdk.LoginOptions, token?: string, ssoId?: string, forceAuthn?: boolean, loginHint?: string, enforceInitiatedEmail?: boolean) => Promise<SdkResponse<_descope_core_js_sdk.URLResponse>>;
+            exchange: (code: string) => Promise<SdkResponse<JWTResponse>>;
+        };
         saml: {
             start: (tenantIdOrEmail: string, redirectUrl?: string, loginOptions?: _descope_core_js_sdk.LoginOptions, token?: string, ssoId?: string, forceAuthn?: boolean, loginHint?: string, enforceInitiatedEmail?: boolean) => Promise<SdkResponse<_descope_core_js_sdk.URLResponse>>;
             exchange: (code: string) => Promise<SdkResponse<JWTResponse & {
@@ -2218,12 +2547,14 @@ declare const nodeSdk: {
                 }>>;
             };
             update: {
-                start: (loginId: string, origin: string, token?: string, passkeyOptions?: _descope_core_js_sdk.PasskeyOptions) => Promise<SdkResponse<{
+                start: (loginId: string, origin: string, token?: string, passkeyOptions?: _descope_core_js_sdk.PasskeyOptions, mfa?: boolean) => Promise<SdkResponse<{
                     transactionId: string;
                     options: string;
                     create: boolean;
                 }>>;
-                finish: (transactionId: string, response: string) => Promise<SdkResponse<_descope_core_js_sdk.ResponseData>>;
+                finish: (transactionId: string, response: string) => Promise<SdkResponse<{
+                    jwt?: JWTResponse;
+                }>>;
             };
         };
         password: {
@@ -2283,7 +2614,7 @@ declare const nodeSdk: {
                     webAuthnSupport?: boolean;
                 };
                 lastAuth?: {
-                    authMethod?: "saml" | "otp" | "oauth" | "totp" | "webauthn" | "magiclink" | "enchantedlink";
+                    authMethod?: "saml" | "otp" | "oauth" | "sso" | "totp" | "webauthn" | "magiclink" | "enchantedlink";
                     oauthProvider?: string;
                     name?: string;
                     loginId?: string;
@@ -2377,4 +2708,4 @@ declare const nodeSdk: {
     };
 };
 
-export { AccessKey, AccessType, AssociatedTenant, AttributeMapping, AttributesTypes, AuditCreateOptions, AuditRecord, AuditSearchOptions, AuditType, AuthenticationInfo, AuthzModified, AuthzNamespace, AuthzNode, AuthzNodeExpression, AuthzNodeExpressionType, AuthzNodeType, AuthzRelation, AuthzRelationDefinition, AuthzRelationQuery, AuthzResource, AuthzSchema, AuthzUserQuery, BatchUploadOutboundAppTokensResponse, CheckResponseRelation, ClientAssertionResponse, CloneProjectResponse, CreateInboundApplicationResponse, CreateOrInviteBatchResponse, CreateOutboundAppByTemplateOptions, CreateSSOApplicationResponse, CreateTenantResponse, CreatedAccessKeyResponse, Descoper, DescoperAttributes, DescoperCreate, DescoperProjectRole, DescoperRBAC, DescoperRole, DescoperTagRole, ExpirationUnit, ExportSnapshotResponse, FGAConfig, FGARelation, FGAResourceDetails, FGAResourceIdentifier, FGASchema, FetchLatestOutboundAppTenantTokenRequest, FetchLatestOutboundAppUserTokenRequest, FetchOutboundAppTenantTokenRequest, FetchOutboundAppTokenOptions, FetchOutboundAppUserTokenRequest, Flow, FlowMetadata, FlowResponse, FlowsResponse, GenerateEmbeddedLinkResponse, GenerateEnchantedLinkForTestResponse, GenerateMagicLinkForTestResponse, GenerateOTPForTestResponse, GenerateSSOConfigurationLinkResponse, Group, GroupMember, GroupsMapping, IDPResponse, ImportSnapshotRequest, InboundApplication, InboundApplicationConsent, InboundApplicationConsentDeleteOptions, InboundApplicationConsentSearchOptions, InboundApplicationOptions, InboundApplicationScope, InboundApplicationSecretResponse, License, ManagementFlowOptions, MgmtKey, MgmtKeyCreateResponse, MgmtKeyProjectRole, MgmtKeyReBac, MgmtKeyStatus, MgmtKeyTagRole, MgmtLoginOptions, MgmtSignUpOptions, MgmtUserOptions, OIDCAttributeMapping, OIDCRoleMapping, OidcApplicationOptions, OutboundAppTemplateOverrides, OutboundAppTenantTokenToUpload, OutboundAppToken, OutboundAppTokenResponse, OutboundAppTokenUploadFailure, OutboundAppUserTokenToUpload, OutboundApplication, PasswordSettings, PatchUserBatchResponse, PatchUserOptions, Permission, Project, ProjectEnvironment, Prompt, PromptType, ProviderTokenOptions, ProviderTokenResponse, RefreshAuthenticationInfo, Role, RoleItem, RoleMapping, RoleMappings, RoleSearchOptions, RunManagementFlowResponse, SAMLIDPRoleGroupMappingInfo, SSOApplication, SSOApplicationOIDCSettings, SSOApplicationSAMLSettings, SSOApplicationWSFedSettings, SSOOIDCSettings, SSOSAMLByMetadataSettings, SSOSAMLSettings, SSOSAMLSettingsResponse, SSOSettings, SSOSettingsResponse, SSOSetupSuiteSettings, SSOSetupSuiteSettingsDisabledFeatures, SamlApplicationOptions, SamlIdpAttributeMappingInfo, SamlIdpGroupsMappingInfo, Screen, SnapshotSecret, SnapshotSecrets, TemplateOptions, Tenant, TenantSettings, Theme, ThemeResponse, URLParam, UpdateJWTResponse, UploadOutboundAppTenantTokenRequest, UploadOutboundAppUserTokenRequest, User, UserFailedResponse, UserMapping, UserOptions, UserPasswordBcrypt, UserPasswordDjango, UserPasswordFirebase, UserPasswordHashed, UserPasswordMd5, UserPasswordPbkdf2, UserPasswordPhpass, UserSearchResponse, UserStatus, ValidateSnapshotRequest, ValidateSnapshotResponse, VerifyOptions, WsFedApplicationOptions, nodeSdk as default };
+export { AccessKey, AccessType, AnalyticRecord, AnalyticsSearchOptions, ApplyJWTTemplateFromLibraryRequest, AssociatedTenant, AttributeMapping, AttributesTypes, AuditCreateOptions, AuditFilters, AuditRecord, AuditSearchAllResponse, AuditSearchOptions, AuditType, AuditWebhook, AuthenticationInfo, AuthzModified, AuthzNamespace, AuthzNode, AuthzNodeExpression, AuthzNodeExpressionType, AuthzNodeType, AuthzRelation, AuthzRelationDefinition, AuthzRelationQuery, AuthzResource, AuthzSchema, AuthzUserQuery, BatchUploadOutboundAppTokensResponse, CheckResponseRelation, ClientAssertionResponse, CloneProjectResponse, ConnectorHTTPAPIKeyAuthentication, ConnectorHTTPAuthentication, ConnectorHTTPBasicAuthentication, CreateInboundApplicationResponse, CreateOrInviteBatchResponse, CreateOutboundAppByTemplateOptions, CreateSSOApplicationResponse, CreateTenantResponse, CreatedAccessKeyResponse, CustomAttribute, CustomAttributeOption, Descoper, DescoperAttributes, DescoperCreate, DescoperProjectRole, DescoperRBAC, DescoperRole, DescoperTagRole, Engine, EngineSecretResponse, ExpirationUnit, ExportSnapshotResponse, FGAConfig, FGAMappableResource, FGAMappableResources, FGAMappableResourcesOptions, FGAMappableResourcesQuery, FGAMappableSchema, FGARelation, FGAResourceDetails, FGAResourceIdentifier, FGASchema, FGASchemaDryRunResponse, FetchLatestOutboundAppTenantTokenRequest, FetchLatestOutboundAppUserTokenRequest, FetchOutboundAppTenantTokenRequest, FetchOutboundAppTokenOptions, FetchOutboundAppUserTokenRequest, Flow, FlowMetadata, FlowResponse, FlowsResponse, GenerateEmbeddedLinkResponse, GenerateEnchantedLinkForTestResponse, GenerateMagicLinkForTestResponse, GenerateOTPForTestResponse, GenerateSSOConfigurationLinkResponse, Group, GroupMember, GroupsMapping, IDPResponse, ImportSnapshotRequest, InboundApplication, InboundApplicationConsent, InboundApplicationConsentDeleteOptions, InboundApplicationConsentSearchOptions, InboundApplicationOptions, InboundApplicationScope, InboundApplicationSecretResponse, InboundApplicationTenantConsentDeleteOptions, JWTTemplate, JWTTemplateLibraryEntry, JWTTemplateValidationIssue, JWTTemplateValidationResult, License, List, ListRequest, ListType, ManagementFlowOptions, MgmtKey, MgmtKeyCreateResponse, MgmtKeyProjectRole, MgmtKeyReBac, MgmtKeyStatus, MgmtKeyTagRole, MgmtLoginOptions, MgmtSignUpOptions, MgmtUserOptions, OIDCAttributeMapping, OIDCRoleMapping, OidcApplicationOptions, OutboundAppTemplateOverrides, OutboundAppTenantTokenToUpload, OutboundAppToken, OutboundAppTokenResponse, OutboundAppTokenUploadFailure, OutboundAppUserTokenToUpload, OutboundApplication, PasswordSettings, PatchUserBatchResponse, PatchUserOptions, Permission, PermissionUpdateRequest, Project, ProjectEnvironment, Prompt, PromptType, ProviderTokenOptions, ProviderTokenResponse, RefreshAuthenticationInfo, Role, RoleItem, RoleMapping, RoleMappings, RoleSearchOptions, RoleUpdateRequest, RunManagementFlowResponse, SAMLIDPRoleGroupMappingInfo, SSOApplication, SSOApplicationOIDCSettings, SSOApplicationSAMLSettings, SSOApplicationSecretResponse, SSOApplicationWSFedSettings, SSOOIDCSettings, SSOSAMLByMetadataSettings, SSOSAMLSettings, SSOSAMLSettingsResponse, SSOSettings, SSOSettingsResponse, SSOSetupSuiteSettings, SSOSetupSuiteSettingsDisabledFeatures, SamlApplicationOptions, SamlIdpAttributeMappingInfo, SamlIdpGroupsMappingInfo, ScopeClaimMappingEntry, Screen, SnapshotSecret, SnapshotSecrets, TemplateOptions, Tenant, TenantSettings, Theme, ThemeResponse, URLParam, UpdateJWTResponse, UploadOutboundAppTenantTokenRequest, UploadOutboundAppUserTokenRequest, User, UserFailedResponse, UserImportFailure, UserImportResponse, UserMapping, UserOptions, UserPasskey, UserPasswordBcrypt, UserPasswordDjango, UserPasswordFirebase, UserPasswordHashed, UserPasswordMd5, UserPasswordPbkdf2, UserPasswordPhpass, UserSearchResponse, UserStatus, UserTrustedDevice, ValidateSnapshotRequest, ValidateSnapshotResponse, VerifyOptions, WsFedApplicationOptions, nodeSdk as default };