auth0 5.10.0 → 5.11.0

package/dist/cjs/management/api/resources/clients/client/Client.d.ts

@@ -130,10 +130,19 @@ export declare class ClientsClient {
     previewCimdMetadata(request: Management.PreviewCimdMetadataRequestContent, requestOptions?: ClientsClient.RequestOptions): core.HttpResponsePromise<Management.PreviewCimdMetadataResponseContent>;
     private __previewCimdMetadata;
     /**
+     * Idempotent registration for Client ID Metadata Document (CIMD) clients.
+     * Uses external_client_id as the unique identifier for upsert operations.
      *
-     *       Idempotent registration for Client ID Metadata Document (CIMD) clients.
-     *       Uses external_client_id as the unique identifier for upsert operations.
-     *       **Create:** Returns 201 when a new client is created (requires \
+     * <strong>Create:</strong> Returns 201 when a new client is created (requires <code>create:clients</code> scope).
+     * <strong>Update:</strong> Returns 200 when an existing client is updated (requires <code>update:clients</code> scope).
+     *
+     * This endpoint automatically:
+     * <ul>
+     *   <li>Fetches and validates the metadata document</li>
+     *   <li>Maps CIMD fields to Auth0 client configuration</li>
+     *   <li>Creates/rotates credentials from the JWKS</li>
+     *   <li>Enforces CIMD security policies (HTTPS-only, no shared secrets)</li>
+     * </ul>
      *
      * @param {Management.RegisterCimdClientRequestContent} request
      * @param {ClientsClient.RequestOptions} requestOptions - Request-specific configuration.

package/dist/cjs/management/api/resources/clients/client/Client.js

@@ -350,10 +350,19 @@ class ClientsClient {
         });
     }
     /**
+     * Idempotent registration for Client ID Metadata Document (CIMD) clients.
+     * Uses external_client_id as the unique identifier for upsert operations.
      *
-     *       Idempotent registration for Client ID Metadata Document (CIMD) clients.
-     *       Uses external_client_id as the unique identifier for upsert operations.
-     *       **Create:** Returns 201 when a new client is created (requires \
+     * <strong>Create:</strong> Returns 201 when a new client is created (requires <code>create:clients</code> scope).
+     * <strong>Update:</strong> Returns 200 when an existing client is updated (requires <code>update:clients</code> scope).
+     *
+     * This endpoint automatically:
+     * <ul>
+     *   <li>Fetches and validates the metadata document</li>
+     *   <li>Maps CIMD fields to Auth0 client configuration</li>
+     *   <li>Creates/rotates credentials from the JWKS</li>
+     *   <li>Enforces CIMD security policies (HTTPS-only, no shared secrets)</li>
+     * </ul>
      *
      * @param {Management.RegisterCimdClientRequestContent} request
      * @param {ClientsClient.RequestOptions} requestOptions - Request-specific configuration.

package/dist/cjs/management/api/resources/connections/client/Client.d.ts

@@ -26,25 +26,23 @@ export declare class ConnectionsClient {
     get keys(): KeysClient;
     get users(): UsersClient;
     /**
-     * Retrieves detailed list of all <a href="https://auth0.com/docs/authenticate/identity-providers">connections</a> that match the specified strategy. If no strategy is provided, all connections within your tenant are retrieved. This action can accept a list of fields to include or exclude from the resulting list of connections.
+     * Retrieves detailed list of all [connections](https://auth0.com/docs/authenticate/identity-providers) that match the specified strategy. If no strategy is provided, all connections within your tenant are retrieved. This action can accept a list of fields to include or exclude from the resulting list of connections.
      *
      * This endpoint supports two types of pagination:
-     * <ul>
-     * <li>Offset pagination</li>
-     * <li>Checkpoint pagination</li>
-     * </ul>
+     *
+     * - Offset pagination
+     * - Checkpoint pagination
      *
      * Checkpoint pagination must be used if you need to retrieve more than 1000 connections.
      *
-     * <h2>Checkpoint Pagination</h2>
+     * **Checkpoint Pagination**
      *
      * To search by checkpoint, use the following parameters:
-     * <ul>
-     * <li><code>from</code>: Optional id from which to start selection.</li>
-     * <li><code>take</code>: The total amount of entries to retrieve when using the from parameter. Defaults to 50.</li>
-     * </ul>
      *
-     * <b>Note</b>: The first time you call this endpoint using checkpoint pagination, omit the <code>from</code> parameter. If there are more results, a <code>next</code> value is included in the response. You can use this for subsequent API calls. When <code>next</code> is no longer included in the response, no pages are remaining.
+     * - `from`: Optional id from which to start selection.
+     * - `take`: The total amount of entries to retrieve when using the from parameter. Defaults to 50.
+     *
+     * **Note**: The first time you call this endpoint using checkpoint pagination, omit the `from` parameter. If there are more results, a `next` value is included in the response. You can use this for subsequent API calls. When `next` is no longer included in the response, no pages are remaining.
      *
      * @param {Management.ListConnectionsQueryParameters} request
      * @param {ConnectionsClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -66,9 +64,9 @@ export declare class ConnectionsClient {
      */
     list(request?: Management.ListConnectionsQueryParameters, requestOptions?: ConnectionsClient.RequestOptions): Promise<core.Page<Management.ConnectionForList, Management.ListConnectionsCheckpointPaginatedResponseContent>>;
     /**
-     * Creates a new connection according to the JSON object received in <code>body</code>.
+     * Creates a new connection according to the JSON object received in `body`.
      *
-     * <b>Note:</b> If a connection with the same name was recently deleted and had a large number of associated users, the deletion may still be processing. Creating a new connection with that name before the deletion completes may fail or produce unexpected results.
+     * **Note:** If a connection with the same name was recently deleted and had a large number of associated users, the deletion may still be processing. Creating a new connection with that name before the deletion completes may fail or produce unexpected results.
      *
      * @param {Management.CreateConnectionRequestContent} request
      * @param {ConnectionsClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -88,7 +86,7 @@ export declare class ConnectionsClient {
     create(request: Management.CreateConnectionRequestContent, requestOptions?: ConnectionsClient.RequestOptions): core.HttpResponsePromise<Management.CreateConnectionResponseContent>;
     private __create;
     /**
-     * Retrieve details for a specified <a href="https://auth0.com/docs/authenticate/identity-providers">connection</a> along with options that can be used for identity provider configuration.
+     * Retrieve details for a specified [connection](https://auth0.com/docs/authenticate/identity-providers) along with options that can be used for identity provider configuration.
      *
      * @param {string} id - The id of the connection to retrieve
      * @param {Management.GetConnectionRequestParameters} request
@@ -109,9 +107,9 @@ export declare class ConnectionsClient {
     get(id: string, request?: Management.GetConnectionRequestParameters, requestOptions?: ConnectionsClient.RequestOptions): core.HttpResponsePromise<Management.GetConnectionResponseContent>;
     private __get;
     /**
-     * Removes a specific <a href="https://auth0.com/docs/authenticate/identity-providers">connection</a> from your tenant. This action cannot be undone. Once removed, users can no longer use this connection to authenticate.
+     * Removes a specific [connection](https://auth0.com/docs/authenticate/identity-providers) from your tenant. This action cannot be undone. Once removed, users can no longer use this connection to authenticate.
      *
-     * <b>Note:</b> If your connection has a large amount of users associated with it, please be aware that this operation can be long running after the response is returned and may impact concurrent <a href="https://auth0.com/docs/api/management/v2/connections/post-connections">create connection</a> requests, if they use an identical connection name.
+     * **Note:** If your connection has a large amount of users associated with it, please be aware that this operation can be long running after the response is returned and may impact concurrent [create connection](https://auth0.com/docs/api/management/v2/connections/post-connections) requests, if they use an identical connection name.
      *
      * @param {string} id - The id of the connection to delete
      * @param {ConnectionsClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -127,9 +125,9 @@ export declare class ConnectionsClient {
     delete(id: string, requestOptions?: ConnectionsClient.RequestOptions): core.HttpResponsePromise<void>;
     private __delete;
     /**
-     * Update details for a specific <a href="https://auth0.com/docs/authenticate/identity-providers">connection</a>, including option properties for identity provider configuration.
+     * Update details for a specific [connection](https://auth0.com/docs/authenticate/identity-providers), including option properties for identity provider configuration.
      *
-     * <b>Note</b>: If you use the <code>options</code> parameter, the entire <code>options</code> object is overriden. To avoid partial data or other issues, ensure all parameters are present when using this option.
+     * **Note**: If you use the `options` parameter, the entire `options` object is overridden. To avoid partial data or other issues, ensure all parameters are present when using this option.
      *
      * @param {string} id - The id of the connection to update
      * @param {Management.UpdateConnectionRequestContent} request
@@ -148,7 +146,7 @@ export declare class ConnectionsClient {
     update(id: string, request?: Management.UpdateConnectionRequestContent, requestOptions?: ConnectionsClient.RequestOptions): core.HttpResponsePromise<Management.UpdateConnectionResponseContent>;
     private __update;
     /**
-     * Retrieves the status of an ad/ldap connection referenced by its <code>ID</code>. <code>200 OK</code> http status code response is returned  when the connection is online, otherwise a <code>404</code> status code is returned along with an error message
+     * Retrieves the status of an ad/ldap connection referenced by its `ID`. `200 OK` http status code response is returned  when the connection is online, otherwise a `404` status code is returned along with an error message
      *
      * @param {string} id - ID of the connection to check
      * @param {ConnectionsClient.RequestOptions} requestOptions - Request-specific configuration.

package/dist/cjs/management/api/resources/connections/client/Client.js

@@ -81,25 +81,23 @@ class ConnectionsClient {
         return ((_a = this._users) !== null && _a !== void 0 ? _a : (this._users = new Client_js_5.UsersClient(this._options)));
     }
     /**
-     * Retrieves detailed list of all <a href="https://auth0.com/docs/authenticate/identity-providers">connections</a> that match the specified strategy. If no strategy is provided, all connections within your tenant are retrieved. This action can accept a list of fields to include or exclude from the resulting list of connections.
+     * Retrieves detailed list of all [connections](https://auth0.com/docs/authenticate/identity-providers) that match the specified strategy. If no strategy is provided, all connections within your tenant are retrieved. This action can accept a list of fields to include or exclude from the resulting list of connections.
      *
      * This endpoint supports two types of pagination:
-     * <ul>
-     * <li>Offset pagination</li>
-     * <li>Checkpoint pagination</li>
-     * </ul>
+     *
+     * - Offset pagination
+     * - Checkpoint pagination
      *
      * Checkpoint pagination must be used if you need to retrieve more than 1000 connections.
      *
-     * <h2>Checkpoint Pagination</h2>
+     * **Checkpoint Pagination**
      *
      * To search by checkpoint, use the following parameters:
-     * <ul>
-     * <li><code>from</code>: Optional id from which to start selection.</li>
-     * <li><code>take</code>: The total amount of entries to retrieve when using the from parameter. Defaults to 50.</li>
-     * </ul>
      *
-     * <b>Note</b>: The first time you call this endpoint using checkpoint pagination, omit the <code>from</code> parameter. If there are more results, a <code>next</code> value is included in the response. You can use this for subsequent API calls. When <code>next</code> is no longer included in the response, no pages are remaining.
+     * - `from`: Optional id from which to start selection.
+     * - `take`: The total amount of entries to retrieve when using the from parameter. Defaults to 50.
+     *
+     * **Note**: The first time you call this endpoint using checkpoint pagination, omit the `from` parameter. If there are more results, a `next` value is included in the response. You can use this for subsequent API calls. When `next` is no longer included in the response, no pages are remaining.
      *
      * @param {Management.ListConnectionsQueryParameters} request
      * @param {ConnectionsClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -192,9 +190,9 @@ class ConnectionsClient {
         });
     }
     /**
-     * Creates a new connection according to the JSON object received in <code>body</code>.
+     * Creates a new connection according to the JSON object received in `body`.
      *
-     * <b>Note:</b> If a connection with the same name was recently deleted and had a large number of associated users, the deletion may still be processing. Creating a new connection with that name before the deletion completes may fail or produce unexpected results.
+     * **Note:** If a connection with the same name was recently deleted and had a large number of associated users, the deletion may still be processing. Creating a new connection with that name before the deletion completes may fail or produce unexpected results.
      *
      * @param {Management.CreateConnectionRequestContent} request
      * @param {ConnectionsClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -263,7 +261,7 @@ class ConnectionsClient {
         });
     }
     /**
-     * Retrieve details for a specified <a href="https://auth0.com/docs/authenticate/identity-providers">connection</a> along with options that can be used for identity provider configuration.
+     * Retrieve details for a specified [connection](https://auth0.com/docs/authenticate/identity-providers) along with options that can be used for identity provider configuration.
      *
      * @param {string} id - The id of the connection to retrieve
      * @param {Management.GetConnectionRequestParameters} request
@@ -339,9 +337,9 @@ class ConnectionsClient {
         });
     }
     /**
-     * Removes a specific <a href="https://auth0.com/docs/authenticate/identity-providers">connection</a> from your tenant. This action cannot be undone. Once removed, users can no longer use this connection to authenticate.
+     * Removes a specific [connection](https://auth0.com/docs/authenticate/identity-providers) from your tenant. This action cannot be undone. Once removed, users can no longer use this connection to authenticate.
      *
-     * <b>Note:</b> If your connection has a large amount of users associated with it, please be aware that this operation can be long running after the response is returned and may impact concurrent <a href="https://auth0.com/docs/api/management/v2/connections/post-connections">create connection</a> requests, if they use an identical connection name.
+     * **Note:** If your connection has a large amount of users associated with it, please be aware that this operation can be long running after the response is returned and may impact concurrent [create connection](https://auth0.com/docs/api/management/v2/connections/post-connections) requests, if they use an identical connection name.
      *
      * @param {string} id - The id of the connection to delete
      * @param {ConnectionsClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -398,9 +396,9 @@ class ConnectionsClient {
         });
     }
     /**
-     * Update details for a specific <a href="https://auth0.com/docs/authenticate/identity-providers">connection</a>, including option properties for identity provider configuration.
+     * Update details for a specific [connection](https://auth0.com/docs/authenticate/identity-providers), including option properties for identity provider configuration.
      *
-     * <b>Note</b>: If you use the <code>options</code> parameter, the entire <code>options</code> object is overriden. To avoid partial data or other issues, ensure all parameters are present when using this option.
+     * **Note**: If you use the `options` parameter, the entire `options` object is overridden. To avoid partial data or other issues, ensure all parameters are present when using this option.
      *
      * @param {string} id - The id of the connection to update
      * @param {Management.UpdateConnectionRequestContent} request
@@ -470,7 +468,7 @@ class ConnectionsClient {
         });
     }
     /**
-     * Retrieves the status of an ad/ldap connection referenced by its <code>ID</code>. <code>200 OK</code> http status code response is returned  when the connection is online, otherwise a <code>404</code> status code is returned along with an error message
+     * Retrieves the status of an ad/ldap connection referenced by its `ID`. `200 OK` http status code response is returned  when the connection is online, otherwise a `404` status code is returned along with an error message
      *
      * @param {string} id - ID of the connection to check
      * @param {ConnectionsClient.RequestOptions} requestOptions - Request-specific configuration.

package/dist/cjs/management/api/resources/connections/resources/clients/client/Client.d.ts

@@ -11,9 +11,9 @@ export declare class ClientsClient {
     protected readonly _options: NormalizedClientOptionsWithAuth<ClientsClient.Options>;
     constructor(options: ClientsClient.Options);
     /**
-     * Retrieve all clients that have the specified <a href="https://auth0.com/docs/authenticate/identity-providers">connection</a> enabled.
+     * Retrieve all clients that have the specified [connection](https://auth0.com/docs/authenticate/identity-providers) enabled.
      *
-     * <b>Note</b>: The first time you call this endpoint, omit the <code>from</code> parameter. If there are more results, a <code>next</code> value is included in the response. You can use this for subsequent API calls. When <code>next</code> is no longer included in the response, no further results are remaining.
+     * **Note**: The first time you call this endpoint, omit the `from` parameter. If there are more results, a `next` value is included in the response. You can use this for subsequent API calls. When `next` is no longer included in the response, no further results are remaining.
      *
      * @param {string} id - The id of the connection for which enabled clients are to be retrieved
      * @param {Management.GetConnectionEnabledClientsRequestParameters} request

package/dist/cjs/management/api/resources/connections/resources/clients/client/Client.js

@@ -56,9 +56,9 @@ class ClientsClient {
         this._options = (0, BaseClient_js_1.normalizeClientOptionsWithAuth)(options);
     }
     /**
-     * Retrieve all clients that have the specified <a href="https://auth0.com/docs/authenticate/identity-providers">connection</a> enabled.
+     * Retrieve all clients that have the specified [connection](https://auth0.com/docs/authenticate/identity-providers) enabled.
      *
-     * <b>Note</b>: The first time you call this endpoint, omit the <code>from</code> parameter. If there are more results, a <code>next</code> value is included in the response. You can use this for subsequent API calls. When <code>next</code> is no longer included in the response, no further results are remaining.
+     * **Note**: The first time you call this endpoint, omit the `from` parameter. If there are more results, a `next` value is included in the response. You can use this for subsequent API calls. When `next` is no longer included in the response, no further results are remaining.
      *
      * @param {string} id - The id of the connection for which enabled clients are to be retrieved
      * @param {Management.GetConnectionEnabledClientsRequestParameters} request

package/dist/cjs/management/api/resources/connections/resources/scimConfiguration/client/Client.d.ts

@@ -32,7 +32,7 @@ export declare class ScimConfigurationClient {
      */
     list(request?: Management.ListScimConfigurationsRequestParameters, requestOptions?: ScimConfigurationClient.RequestOptions): Promise<core.Page<Management.ScimConfiguration, Management.ListScimConfigurationsResponseContent>>;
     /**
-     * Retrieves a scim configuration by its <code>connectionId</code>.
+     * Retrieves a scim configuration by its `connectionId`.
      *
      * @param {string} id - The id of the connection to retrieve its SCIM configuration
      * @param {ScimConfigurationClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -61,7 +61,7 @@ export declare class ScimConfigurationClient {
     create(id: string, request?: Management.CreateScimConfigurationRequestContent | null, requestOptions?: ScimConfigurationClient.RequestOptions): core.HttpResponsePromise<Management.CreateScimConfigurationResponseContent>;
     private __create;
     /**
-     * Deletes a scim configuration by its <code>connectionId</code>.
+     * Deletes a scim configuration by its `connectionId`.
      *
      * @param {string} id - The id of the connection to delete its SCIM configuration
      * @param {ScimConfigurationClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -75,7 +75,7 @@ export declare class ScimConfigurationClient {
     delete(id: string, requestOptions?: ScimConfigurationClient.RequestOptions): core.HttpResponsePromise<void>;
     private __delete;
     /**
-     * Update a scim configuration by its <code>connectionId</code>.
+     * Update a scim configuration by its `connectionId`.
      *
      * @param {string} id - The id of the connection to update its SCIM configuration
      * @param {Management.UpdateScimConfigurationRequestContent} request
@@ -93,7 +93,7 @@ export declare class ScimConfigurationClient {
     update(id: string, request: Management.UpdateScimConfigurationRequestContent, requestOptions?: ScimConfigurationClient.RequestOptions): core.HttpResponsePromise<Management.UpdateScimConfigurationResponseContent>;
     private __update;
     /**
-     * Retrieves a scim configuration's default mapping by its <code>connectionId</code>.
+     * Retrieves a scim configuration's default mapping by its `connectionId`.
      *
      * @param {string} id - The id of the connection to retrieve its default SCIM mapping
      * @param {ScimConfigurationClient.RequestOptions} requestOptions - Request-specific configuration.

package/dist/cjs/management/api/resources/connections/resources/scimConfiguration/client/Client.js

@@ -142,7 +142,7 @@ class ScimConfigurationClient {
         });
     }
     /**
-     * Retrieves a scim configuration by its <code>connectionId</code>.
+     * Retrieves a scim configuration by its `connectionId`.
      *
      * @param {string} id - The id of the connection to retrieve its SCIM configuration
      * @param {ScimConfigurationClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -254,7 +254,7 @@ class ScimConfigurationClient {
         });
     }
     /**
-     * Deletes a scim configuration by its <code>connectionId</code>.
+     * Deletes a scim configuration by its `connectionId`.
      *
      * @param {string} id - The id of the connection to delete its SCIM configuration
      * @param {ScimConfigurationClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -305,7 +305,7 @@ class ScimConfigurationClient {
         });
     }
     /**
-     * Update a scim configuration by its <code>connectionId</code>.
+     * Update a scim configuration by its `connectionId`.
      *
      * @param {string} id - The id of the connection to update its SCIM configuration
      * @param {Management.UpdateScimConfigurationRequestContent} request
@@ -366,7 +366,7 @@ class ScimConfigurationClient {
         });
     }
     /**
-     * Retrieves a scim configuration's default mapping by its <code>connectionId</code>.
+     * Retrieves a scim configuration's default mapping by its `connectionId`.
      *
      * @param {string} id - The id of the connection to retrieve its default SCIM mapping
      * @param {ScimConfigurationClient.RequestOptions} requestOptions - Request-specific configuration.

package/dist/cjs/management/api/resources/connections/resources/scimConfiguration/resources/tokens/client/Client.d.ts

@@ -11,7 +11,7 @@ export declare class TokensClient {
     protected readonly _options: NormalizedClientOptionsWithAuth<TokensClient.Options>;
     constructor(options: TokensClient.Options);
     /**
-     * Retrieves all scim tokens by its connection <code>id</code>.
+     * Retrieves all scim tokens by its connection `id`.
      *
      * @param {string} id - The id of the connection to retrieve its SCIM configuration
      * @param {TokensClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -41,7 +41,7 @@ export declare class TokensClient {
     create(id: string, request?: Management.CreateScimTokenRequestContent, requestOptions?: TokensClient.RequestOptions): core.HttpResponsePromise<Management.CreateScimTokenResponseContent>;
     private __create;
     /**
-     * Deletes a scim token by its connection <code>id</code> and <code>tokenId</code>.
+     * Deletes a scim token by its connection `id` and `tokenId`.
      *
      * @param {string} id - The connection id that owns the SCIM token to delete
      * @param {string} tokenId - The id of the scim token to delete

package/dist/cjs/management/api/resources/connections/resources/scimConfiguration/resources/tokens/client/Client.js

@@ -56,7 +56,7 @@ class TokensClient {
         this._options = (0, BaseClient_js_1.normalizeClientOptionsWithAuth)(options);
     }
     /**
-     * Retrieves all scim tokens by its connection <code>id</code>.
+     * Retrieves all scim tokens by its connection `id`.
      *
      * @param {string} id - The id of the connection to retrieve its SCIM configuration
      * @param {TokensClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -171,7 +171,7 @@ class TokensClient {
         });
     }
     /**
-     * Deletes a scim token by its connection <code>id</code> and <code>tokenId</code>.
+     * Deletes a scim token by its connection `id` and `tokenId`.
      *
      * @param {string} id - The connection id that owns the SCIM token to delete
      * @param {string} tokenId - The id of the scim token to delete

package/dist/cjs/management/api/resources/customDomains/client/Client.d.ts

@@ -11,7 +11,7 @@ export declare class CustomDomainsClient {
     protected readonly _options: NormalizedClientOptionsWithAuth<CustomDomainsClient.Options>;
     constructor(options: CustomDomainsClient.Options);
     /**
-     * Retrieve details on <a href="https://auth0.com/docs/custom-domains">custom domains</a>.
+     * Retrieve details on [custom domains](https://auth0.com/docs/custom-domains).
      *
      * @param {Management.ListCustomDomainsRequestParameters} request
      * @param {CustomDomainsClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -41,7 +41,6 @@ export declare class CustomDomainsClient {
      * - custom_client_ip_header
      * - tls_policy
      *
-     *
      * TLS Policies:
      *
      * - recommended - for modern usage this includes TLS 1.2 only
@@ -134,23 +133,31 @@ export declare class CustomDomainsClient {
      * - custom_client_ip_header
      * - tls_policy
      *
-     * <h5>Updating CUSTOM_CLIENT_IP_HEADER for a custom domain</h5>To update the <code>custom_client_ip_header</code> for a domain, the body to
+     * **Updating CUSTOM_CLIENT_IP_HEADER for a custom domain**
+     *
+     * To update the `custom_client_ip_header` for a domain, the body to
      * send should be:
-     * <pre><code>{ "custom_client_ip_header": "cf-connecting-ip" }</code></pre>
      *
-     * <h5>Updating TLS_POLICY for a custom domain</h5>To update the <code>tls_policy</code> for a domain, the body to send should be:
-     * <pre><code>{ "tls_policy": "recommended" }</code></pre>
+     * ```json
+     * { "custom_client_ip_header": "cf-connecting-ip" }
+     * ```
+     *
+     * **Updating TLS_POLICY for a custom domain**
      *
+     * To update the `tls_policy` for a domain, the body to send should be:
+     *
+     * ```json
+     * { "tls_policy": "recommended" }
+     * ```
      *
      * TLS Policies:
      *
      * - recommended - for modern usage this includes TLS 1.2 only
      *
-     *
      * Some considerations:
      *
      * - The TLS ciphers and protocols available in each TLS policy follow industry recommendations, and may be updated occasionally.
-     * - The <code>compatible</code> TLS policy is no longer supported.
+     * - The `compatible` TLS policy is no longer supported.
      *
      * @param {string} id - The id of the custom domain to update
      * @param {Management.UpdateCustomDomainRequestContent} request
@@ -186,12 +193,12 @@ export declare class CustomDomainsClient {
     /**
      * Run the verification process on a custom domain.
      *
-     * Note: Check the <code>status</code> field to see its verification status. Once verification is complete, it may take up to 10 minutes before the custom domain can start accepting requests.
+     * Note: Check the `status` field to see its verification status. Once verification is complete, it may take up to 10 minutes before the custom domain can start accepting requests.
      *
-     * For <code>self_managed_certs</code>, when the custom domain is verified for the first time, the response will also include the <code>cname_api_key</code> which you will need to configure your proxy. This key must be kept secret, and is used to validate the proxy requests.
+     * For `self_managed_certs`, when the custom domain is verified for the first time, the response will also include the `cname_api_key` which you will need to configure your proxy. This key must be kept secret, and is used to validate the proxy requests.
      *
-     * <a href="https://auth0.com/docs/custom-domains#step-2-verify-ownership">Learn more</a> about verifying custom domains that use Auth0 Managed certificates.
-     * <a href="https://auth0.com/docs/custom-domains/self-managed-certificates#step-2-verify-ownership">Learn more</a> about verifying custom domains that use Self Managed certificates.
+     * [Learn more](https://auth0.com/docs/custom-domains#step-2-verify-ownership) about verifying custom domains that use Auth0 Managed certificates.
+     * [Learn more](https://auth0.com/docs/custom-domains/self-managed-certificates#step-2-verify-ownership) about verifying custom domains that use Self Managed certificates.
      *
      * @param {string} id - ID of the custom domain to verify.
      * @param {CustomDomainsClient.RequestOptions} requestOptions - Request-specific configuration.

package/dist/cjs/management/api/resources/customDomains/client/Client.js

@@ -56,7 +56,7 @@ class CustomDomainsClient {
         this._options = (0, BaseClient_js_1.normalizeClientOptionsWithAuth)(options);
     }
     /**
-     * Retrieve details on <a href="https://auth0.com/docs/custom-domains">custom domains</a>.
+     * Retrieve details on [custom domains](https://auth0.com/docs/custom-domains).
      *
      * @param {Management.ListCustomDomainsRequestParameters} request
      * @param {CustomDomainsClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -139,7 +139,6 @@ class CustomDomainsClient {
      * - custom_client_ip_header
      * - tls_policy
      *
-     *
      * TLS Policies:
      *
      * - recommended - for modern usage this includes TLS 1.2 only
@@ -453,23 +452,31 @@ class CustomDomainsClient {
      * - custom_client_ip_header
      * - tls_policy
      *
-     * <h5>Updating CUSTOM_CLIENT_IP_HEADER for a custom domain</h5>To update the <code>custom_client_ip_header</code> for a domain, the body to
+     * **Updating CUSTOM_CLIENT_IP_HEADER for a custom domain**
+     *
+     * To update the `custom_client_ip_header` for a domain, the body to
      * send should be:
-     * <pre><code>{ "custom_client_ip_header": "cf-connecting-ip" }</code></pre>
      *
-     * <h5>Updating TLS_POLICY for a custom domain</h5>To update the <code>tls_policy</code> for a domain, the body to send should be:
-     * <pre><code>{ "tls_policy": "recommended" }</code></pre>
+     * ```json
+     * { "custom_client_ip_header": "cf-connecting-ip" }
+     * ```
+     *
+     * **Updating TLS_POLICY for a custom domain**
      *
+     * To update the `tls_policy` for a domain, the body to send should be:
+     *
+     * ```json
+     * { "tls_policy": "recommended" }
+     * ```
      *
      * TLS Policies:
      *
      * - recommended - for modern usage this includes TLS 1.2 only
      *
-     *
      * Some considerations:
      *
      * - The TLS ciphers and protocols available in each TLS policy follow industry recommendations, and may be updated occasionally.
-     * - The <code>compatible</code> TLS policy is no longer supported.
+     * - The `compatible` TLS policy is no longer supported.
      *
      * @param {string} id - The id of the custom domain to update
      * @param {Management.UpdateCustomDomainRequestContent} request
@@ -598,12 +605,12 @@ class CustomDomainsClient {
     /**
      * Run the verification process on a custom domain.
      *
-     * Note: Check the <code>status</code> field to see its verification status. Once verification is complete, it may take up to 10 minutes before the custom domain can start accepting requests.
+     * Note: Check the `status` field to see its verification status. Once verification is complete, it may take up to 10 minutes before the custom domain can start accepting requests.
      *
-     * For <code>self_managed_certs</code>, when the custom domain is verified for the first time, the response will also include the <code>cname_api_key</code> which you will need to configure your proxy. This key must be kept secret, and is used to validate the proxy requests.
+     * For `self_managed_certs`, when the custom domain is verified for the first time, the response will also include the `cname_api_key` which you will need to configure your proxy. This key must be kept secret, and is used to validate the proxy requests.
      *
-     * <a href="https://auth0.com/docs/custom-domains#step-2-verify-ownership">Learn more</a> about verifying custom domains that use Auth0 Managed certificates.
-     * <a href="https://auth0.com/docs/custom-domains/self-managed-certificates#step-2-verify-ownership">Learn more</a> about verifying custom domains that use Self Managed certificates.
+     * [Learn more](https://auth0.com/docs/custom-domains#step-2-verify-ownership) about verifying custom domains that use Auth0 Managed certificates.
+     * [Learn more](https://auth0.com/docs/custom-domains/self-managed-certificates#step-2-verify-ownership) about verifying custom domains that use Self Managed certificates.
      *
      * @param {string} id - ID of the custom domain to verify.
      * @param {CustomDomainsClient.RequestOptions} requestOptions - Request-specific configuration.

package/dist/cjs/management/api/resources/deviceCredentials/client/Client.d.ts

@@ -11,7 +11,7 @@ export declare class DeviceCredentialsClient {
     protected readonly _options: NormalizedClientOptionsWithAuth<DeviceCredentialsClient.Options>;
     constructor(options: DeviceCredentialsClient.Options);
     /**
-     * Retrieve device credential information (<code>public_key</code>, <code>refresh_token</code>, or <code>rotating_refresh_token</code>) associated with a specific user.
+     * Retrieve device credential information (`public_key`, `refresh_token`, or `rotating_refresh_token`) associated with a specific user.
      *
      * @param {Management.ListDeviceCredentialsRequestParameters} request
      * @param {DeviceCredentialsClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -35,9 +35,9 @@ export declare class DeviceCredentialsClient {
      */
     list(request?: Management.ListDeviceCredentialsRequestParameters, requestOptions?: DeviceCredentialsClient.RequestOptions): Promise<core.Page<Management.DeviceCredential, Management.ListDeviceCredentialsOffsetPaginatedResponseContent>>;
     /**
-     * Create a device credential public key to manage refresh token rotation for a given <code>user_id</code>. Device Credentials APIs are designed for ad-hoc administrative use only and paging is by default enabled for GET requests.
+     * Create a device credential public key to manage refresh token rotation for a given `user_id`. Device Credentials APIs are designed for ad-hoc administrative use only and paging is by default enabled for GET requests.
      *
-     * When refresh token rotation is enabled, the endpoint becomes consistent. For more information, read <a href="https://auth0.com/docs/get-started/tenant-settings/signing-keys"> Signing Keys</a>.
+     * When refresh token rotation is enabled, the endpoint becomes consistent. For more information, read [Signing Keys](https://auth0.com/docs/get-started/tenant-settings/signing-keys).
      *
      * @param {Management.CreatePublicKeyDeviceCredentialRequestContent} request
      * @param {DeviceCredentialsClient.RequestOptions} requestOptions - Request-specific configuration.

package/dist/cjs/management/api/resources/deviceCredentials/client/Client.js

@@ -56,7 +56,7 @@ class DeviceCredentialsClient {
         this._options = (0, BaseClient_js_1.normalizeClientOptionsWithAuth)(options);
     }
     /**
-     * Retrieve device credential information (<code>public_key</code>, <code>refresh_token</code>, or <code>rotating_refresh_token</code>) associated with a specific user.
+     * Retrieve device credential information (`public_key`, `refresh_token`, or `rotating_refresh_token`) associated with a specific user.
      *
      * @param {Management.ListDeviceCredentialsRequestParameters} request
      * @param {DeviceCredentialsClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -151,9 +151,9 @@ class DeviceCredentialsClient {
         });
     }
     /**
-     * Create a device credential public key to manage refresh token rotation for a given <code>user_id</code>. Device Credentials APIs are designed for ad-hoc administrative use only and paging is by default enabled for GET requests.
+     * Create a device credential public key to manage refresh token rotation for a given `user_id`. Device Credentials APIs are designed for ad-hoc administrative use only and paging is by default enabled for GET requests.
      *
-     * When refresh token rotation is enabled, the endpoint becomes consistent. For more information, read <a href="https://auth0.com/docs/get-started/tenant-settings/signing-keys"> Signing Keys</a>.
+     * When refresh token rotation is enabled, the endpoint becomes consistent. For more information, read [Signing Keys](https://auth0.com/docs/get-started/tenant-settings/signing-keys).
      *
      * @param {Management.CreatePublicKeyDeviceCredentialRequestContent} request
      * @param {DeviceCredentialsClient.RequestOptions} requestOptions - Request-specific configuration.

package/dist/cjs/management/api/resources/groups/client/Client.d.ts

@@ -3,6 +3,7 @@ import { type NormalizedClientOptionsWithAuth } from "../../../../BaseClient.js"
 import * as core from "../../../../core/index.js";
 import * as Management from "../../../index.js";
 import { MembersClient } from "../resources/members/client/Client.js";
+import { RolesClient } from "../resources/roles/client/Client.js";
 export declare namespace GroupsClient {
     type Options = BaseClientOptions;
     interface RequestOptions extends BaseRequestOptions {
@@ -11,8 +12,10 @@ export declare namespace GroupsClient {
 export declare class GroupsClient {
     protected readonly _options: NormalizedClientOptionsWithAuth<GroupsClient.Options>;
     protected _members: MembersClient | undefined;
+    protected _roles: RolesClient | undefined;
     constructor(options: GroupsClient.Options);
     get members(): MembersClient;
+    get roles(): RolesClient;
     /**
      * List all groups in your tenant.
      *

package/dist/cjs/management/api/resources/groups/client/Client.js

@@ -52,6 +52,7 @@ const handleNonStatusCodeError_js_1 = require("../../../../errors/handleNonStatu
 const errors = __importStar(require("../../../../errors/index.js"));
 const Management = __importStar(require("../../../index.js"));
 const Client_js_1 = require("../resources/members/client/Client.js");
+const Client_js_2 = require("../resources/roles/client/Client.js");
 class GroupsClient {
     constructor(options) {
         this._options = (0, BaseClient_js_1.normalizeClientOptionsWithAuth)(options);
@@ -60,6 +61,10 @@ class GroupsClient {
         var _a;
         return ((_a = this._members) !== null && _a !== void 0 ? _a : (this._members = new Client_js_1.MembersClient(this._options)));
     }
+    get roles() {
+        var _a;
+        return ((_a = this._roles) !== null && _a !== void 0 ? _a : (this._roles = new Client_js_2.RolesClient(this._options)));
+    }
     /**
      * List all groups in your tenant.
      *

package/dist/cjs/management/api/resources/groups/resources/index.d.ts

@@ -1 +1,2 @@
 export * as members from "./members/index.js";
+export * as roles from "./roles/index.js";

package/dist/cjs/management/api/resources/groups/resources/index.js

@@ -33,5 +33,6 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.members = void 0;
+exports.roles = exports.members = void 0;
 exports.members = __importStar(require("./members/index.js"));
+exports.roles = __importStar(require("./roles/index.js"));