auth0 5.10.0 → 5.12.0

package/dist/esm/management/api/resources/users/resources/effectivePermissions/resources/sources/resources/roles/index.d.mts

@@ -0,0 +1 @@
+export * from "./client/index.mjs";

package/dist/esm/management/api/resources/users/resources/effectivePermissions/resources/sources/resources/roles/index.mjs

@@ -0,0 +1 @@
+export * from "./client/index.mjs";

package/dist/esm/management/api/resources/users/resources/effectiveRoles/client/Client.d.mts

@@ -0,0 +1,36 @@
+import type { BaseClientOptions, BaseRequestOptions } from "../../../../../../BaseClient.mjs";
+import { type NormalizedClientOptionsWithAuth } from "../../../../../../BaseClient.mjs";
+import * as core from "../../../../../../core/index.mjs";
+import * as Management from "../../../../../index.mjs";
+import { SourcesClient } from "../resources/sources/client/Client.mjs";
+export declare namespace EffectiveRolesClient {
+    type Options = BaseClientOptions;
+    interface RequestOptions extends BaseRequestOptions {
+    }
+}
+export declare class EffectiveRolesClient {
+    protected readonly _options: NormalizedClientOptionsWithAuth<EffectiveRolesClient.Options>;
+    protected _sources: SourcesClient | undefined;
+    constructor(options: EffectiveRolesClient.Options);
+    get sources(): SourcesClient;
+    /**
+     * Retrieve detailed list of effective roles for a user, including roles assigned directly and through group memberships.
+     *
+     * @param {string} id - ID of the user to list effective roles for.
+     * @param {Management.ListUserEffectiveRolesRequestParameters} request
+     * @param {EffectiveRolesClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link Management.BadRequestError}
+     * @throws {@link Management.UnauthorizedError}
+     * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
+     * @throws {@link Management.TooManyRequestsError}
+     *
+     * @example
+     *     await client.users.effectiveRoles.list("id", {
+     *         from: "from",
+     *         take: 1
+     *     })
+     */
+    list(id: string, request?: Management.ListUserEffectiveRolesRequestParameters, requestOptions?: EffectiveRolesClient.RequestOptions): Promise<core.Page<Management.UserEffectiveRole, Management.ListUserEffectiveRolesResponseContent>>;
+}

package/dist/esm/management/api/resources/users/resources/effectiveRoles/client/Client.mjs

@@ -0,0 +1,112 @@
+// This file was auto-generated by Fern from our API Definition.
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { normalizeClientOptionsWithAuth } from "../../../../../../BaseClient.mjs";
+import * as core from "../../../../../../core/index.mjs";
+import { mergeHeaders } from "../../../../../../core/headers.mjs";
+import * as environments from "../../../../../../environments.mjs";
+import { handleNonStatusCodeError } from "../../../../../../errors/handleNonStatusCodeError.mjs";
+import * as errors from "../../../../../../errors/index.mjs";
+import * as Management from "../../../../../index.mjs";
+import { SourcesClient } from "../resources/sources/client/Client.mjs";
+export class EffectiveRolesClient {
+    constructor(options) {
+        this._options = normalizeClientOptionsWithAuth(options);
+    }
+    get sources() {
+        var _a;
+        return ((_a = this._sources) !== null && _a !== void 0 ? _a : (this._sources = new SourcesClient(this._options)));
+    }
+    /**
+     * Retrieve detailed list of effective roles for a user, including roles assigned directly and through group memberships.
+     *
+     * @param {string} id - ID of the user to list effective roles for.
+     * @param {Management.ListUserEffectiveRolesRequestParameters} request
+     * @param {EffectiveRolesClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link Management.BadRequestError}
+     * @throws {@link Management.UnauthorizedError}
+     * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
+     * @throws {@link Management.TooManyRequestsError}
+     *
+     * @example
+     *     await client.users.effectiveRoles.list("id", {
+     *         from: "from",
+     *         take: 1
+     *     })
+     */
+    list(id_1) {
+        return __awaiter(this, arguments, void 0, function* (id, request = {}, requestOptions) {
+            const list = core.HttpResponsePromise.interceptFunction((request) => __awaiter(this, void 0, void 0, function* () {
+                var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k;
+                const { from: from_, take = 50 } = request;
+                const _queryParams = {
+                    from: from_,
+                    take,
+                };
+                const _authRequest = yield this._options.authProvider.getAuthRequest();
+                let _headers = mergeHeaders(_authRequest.headers, (_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
+                const _response = yield ((_b = this._options.fetcher) !== null && _b !== void 0 ? _b : core.fetcher)({
+                    url: core.url.join((_d = (_c = (yield core.Supplier.get(this._options.baseUrl))) !== null && _c !== void 0 ? _c : (yield core.Supplier.get(this._options.environment))) !== null && _d !== void 0 ? _d : environments.ManagementEnvironment.Default, `users/${core.url.encodePathParam(id)}/effective-roles`),
+                    method: "GET",
+                    headers: _headers,
+                    queryString: core.url
+                        .queryBuilder()
+                        .addMany(_queryParams)
+                        .mergeAdditional(requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.queryParams)
+                        .build(),
+                    timeoutMs: ((_g = (_e = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.timeoutInSeconds) !== null && _e !== void 0 ? _e : (_f = this._options) === null || _f === void 0 ? void 0 : _f.timeoutInSeconds) !== null && _g !== void 0 ? _g : 60) * 1000,
+                    maxRetries: (_h = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.maxRetries) !== null && _h !== void 0 ? _h : (_j = this._options) === null || _j === void 0 ? void 0 : _j.maxRetries,
+                    abortSignal: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.abortSignal,
+                    fetchFn: (_k = this._options) === null || _k === void 0 ? void 0 : _k.fetch,
+                    logging: this._options.logging,
+                });
+                if (_response.ok) {
+                    return {
+                        data: _response.body,
+                        rawResponse: _response.rawResponse,
+                    };
+                }
+                if (_response.error.reason === "status-code") {
+                    switch (_response.error.statusCode) {
+                        case 400:
+                            throw new Management.BadRequestError(_response.error.body, _response.rawResponse);
+                        case 401:
+                            throw new Management.UnauthorizedError(_response.error.body, _response.rawResponse);
+                        case 403:
+                            throw new Management.ForbiddenError(_response.error.body, _response.rawResponse);
+                        case 404:
+                            throw new Management.NotFoundError(_response.error.body, _response.rawResponse);
+                        case 429:
+                            throw new Management.TooManyRequestsError(_response.error.body, _response.rawResponse);
+                        default:
+                            throw new errors.ManagementError({
+                                statusCode: _response.error.statusCode,
+                                body: _response.error.body,
+                                rawResponse: _response.rawResponse,
+                            });
+                    }
+                }
+                return handleNonStatusCodeError(_response.error, _response.rawResponse, "GET", "/users/{id}/effective-roles");
+            }));
+            const dataWithRawResponse = yield list(request).withRawResponse();
+            return new core.Page({
+                response: dataWithRawResponse.data,
+                rawResponse: dataWithRawResponse.rawResponse,
+                hasNextPage: (response) => (response === null || response === void 0 ? void 0 : response.next) != null && !(typeof (response === null || response === void 0 ? void 0 : response.next) === "string" && (response === null || response === void 0 ? void 0 : response.next) === ""),
+                getItems: (response) => { var _a; return (_a = response === null || response === void 0 ? void 0 : response.roles) !== null && _a !== void 0 ? _a : []; },
+                loadPage: (response) => {
+                    return list(core.setObjectProperty(request, "from", response === null || response === void 0 ? void 0 : response.next));
+                },
+            });
+        });
+    }
+}

package/dist/esm/management/api/resources/users/resources/effectiveRoles/client/index.d.mts

@@ -0,0 +1 @@
+export {};

package/dist/esm/management/api/resources/users/resources/effectiveRoles/client/index.mjs

@@ -0,0 +1 @@
+export {};

package/dist/esm/management/api/resources/users/resources/effectiveRoles/index.d.mts

@@ -0,0 +1,2 @@
+export * from "./client/index.mjs";
+export * from "./resources/index.mjs";

package/dist/esm/management/api/resources/users/resources/effectiveRoles/index.mjs

@@ -0,0 +1,2 @@
+export * from "./client/index.mjs";
+export * from "./resources/index.mjs";

package/dist/esm/management/api/resources/users/resources/effectiveRoles/resources/index.d.mts

@@ -0,0 +1 @@
+export * as sources from "./sources/index.mjs";

package/dist/esm/management/api/resources/users/resources/effectiveRoles/resources/index.mjs

@@ -0,0 +1 @@
+export * as sources from "./sources/index.mjs";

package/dist/esm/management/api/resources/users/resources/effectiveRoles/resources/sources/client/Client.d.mts

@@ -0,0 +1,12 @@
+import type { BaseClientOptions } from "../../../../../../../../BaseClient.mjs";
+import { type NormalizedClientOptionsWithAuth } from "../../../../../../../../BaseClient.mjs";
+import { GroupsClient } from "../resources/groups/client/Client.mjs";
+export declare namespace SourcesClient {
+    type Options = BaseClientOptions;
+}
+export declare class SourcesClient {
+    protected readonly _options: NormalizedClientOptionsWithAuth<SourcesClient.Options>;
+    protected _groups: GroupsClient | undefined;
+    constructor(options: SourcesClient.Options);
+    get groups(): GroupsClient;
+}

package/dist/esm/management/api/resources/users/resources/effectiveRoles/resources/sources/client/Client.mjs

@@ -0,0 +1,12 @@
+// This file was auto-generated by Fern from our API Definition.
+import { normalizeClientOptionsWithAuth, } from "../../../../../../../../BaseClient.mjs";
+import { GroupsClient } from "../resources/groups/client/Client.mjs";
+export class SourcesClient {
+    constructor(options) {
+        this._options = normalizeClientOptionsWithAuth(options);
+    }
+    get groups() {
+        var _a;
+        return ((_a = this._groups) !== null && _a !== void 0 ? _a : (this._groups = new GroupsClient(this._options)));
+    }
+}

package/dist/esm/management/api/resources/users/resources/effectiveRoles/resources/sources/client/index.d.mts

@@ -0,0 +1 @@
+export {};

package/dist/esm/management/api/resources/users/resources/effectiveRoles/resources/sources/client/index.mjs

@@ -0,0 +1 @@
+export {};

package/dist/esm/management/api/resources/users/resources/effectiveRoles/resources/sources/index.d.mts

@@ -0,0 +1,2 @@
+export * from "./client/index.mjs";
+export * from "./resources/index.mjs";

package/dist/esm/management/api/resources/users/resources/effectiveRoles/resources/sources/index.mjs

@@ -0,0 +1,2 @@
+export * from "./client/index.mjs";
+export * from "./resources/index.mjs";

package/dist/esm/management/api/resources/users/resources/effectiveRoles/resources/sources/resources/groups/client/Client.d.mts

@@ -0,0 +1,34 @@
+import type { BaseClientOptions, BaseRequestOptions } from "../../../../../../../../../../BaseClient.mjs";
+import { type NormalizedClientOptionsWithAuth } from "../../../../../../../../../../BaseClient.mjs";
+import * as core from "../../../../../../../../../../core/index.mjs";
+import * as Management from "../../../../../../../../../index.mjs";
+export declare namespace GroupsClient {
+    type Options = BaseClientOptions;
+    interface RequestOptions extends BaseRequestOptions {
+    }
+}
+export declare class GroupsClient {
+    protected readonly _options: NormalizedClientOptionsWithAuth<GroupsClient.Options>;
+    constructor(options: GroupsClient.Options);
+    /**
+     * Lists the groups that grant a user a specific role.
+     *
+     * @param {string} id - ID of the user to list role source groups for.
+     * @param {Management.ListUserRoleSourceGroupsRequestParameters} request
+     * @param {GroupsClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link Management.BadRequestError}
+     * @throws {@link Management.UnauthorizedError}
+     * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
+     * @throws {@link Management.TooManyRequestsError}
+     *
+     * @example
+     *     await client.users.effectiveRoles.sources.groups.list("id", {
+     *         role_id: "role_id",
+     *         from: "from",
+     *         take: 1
+     *     })
+     */
+    list(id: string, request: Management.ListUserRoleSourceGroupsRequestParameters, requestOptions?: GroupsClient.RequestOptions): Promise<core.Page<Management.Group, Management.ListUserRoleSourceGroupsResponseContent>>;
+}

package/dist/esm/management/api/resources/users/resources/effectiveRoles/resources/sources/resources/groups/client/Client.mjs

@@ -0,0 +1,109 @@
+// This file was auto-generated by Fern from our API Definition.
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { normalizeClientOptionsWithAuth, } from "../../../../../../../../../../BaseClient.mjs";
+import * as core from "../../../../../../../../../../core/index.mjs";
+import { mergeHeaders } from "../../../../../../../../../../core/headers.mjs";
+import * as environments from "../../../../../../../../../../environments.mjs";
+import { handleNonStatusCodeError } from "../../../../../../../../../../errors/handleNonStatusCodeError.mjs";
+import * as errors from "../../../../../../../../../../errors/index.mjs";
+import * as Management from "../../../../../../../../../index.mjs";
+export class GroupsClient {
+    constructor(options) {
+        this._options = normalizeClientOptionsWithAuth(options);
+    }
+    /**
+     * Lists the groups that grant a user a specific role.
+     *
+     * @param {string} id - ID of the user to list role source groups for.
+     * @param {Management.ListUserRoleSourceGroupsRequestParameters} request
+     * @param {GroupsClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link Management.BadRequestError}
+     * @throws {@link Management.UnauthorizedError}
+     * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
+     * @throws {@link Management.TooManyRequestsError}
+     *
+     * @example
+     *     await client.users.effectiveRoles.sources.groups.list("id", {
+     *         role_id: "role_id",
+     *         from: "from",
+     *         take: 1
+     *     })
+     */
+    list(id, request, requestOptions) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const list = core.HttpResponsePromise.interceptFunction((request) => __awaiter(this, void 0, void 0, function* () {
+                var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k;
+                const { role_id: roleId, from: from_, take = 50 } = request;
+                const _queryParams = {
+                    role_id: roleId,
+                    from: from_,
+                    take,
+                };
+                const _authRequest = yield this._options.authProvider.getAuthRequest();
+                let _headers = mergeHeaders(_authRequest.headers, (_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
+                const _response = yield ((_b = this._options.fetcher) !== null && _b !== void 0 ? _b : core.fetcher)({
+                    url: core.url.join((_d = (_c = (yield core.Supplier.get(this._options.baseUrl))) !== null && _c !== void 0 ? _c : (yield core.Supplier.get(this._options.environment))) !== null && _d !== void 0 ? _d : environments.ManagementEnvironment.Default, `users/${core.url.encodePathParam(id)}/effective-roles/sources/groups`),
+                    method: "GET",
+                    headers: _headers,
+                    queryString: core.url
+                        .queryBuilder()
+                        .addMany(_queryParams)
+                        .mergeAdditional(requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.queryParams)
+                        .build(),
+                    timeoutMs: ((_g = (_e = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.timeoutInSeconds) !== null && _e !== void 0 ? _e : (_f = this._options) === null || _f === void 0 ? void 0 : _f.timeoutInSeconds) !== null && _g !== void 0 ? _g : 60) * 1000,
+                    maxRetries: (_h = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.maxRetries) !== null && _h !== void 0 ? _h : (_j = this._options) === null || _j === void 0 ? void 0 : _j.maxRetries,
+                    abortSignal: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.abortSignal,
+                    fetchFn: (_k = this._options) === null || _k === void 0 ? void 0 : _k.fetch,
+                    logging: this._options.logging,
+                });
+                if (_response.ok) {
+                    return {
+                        data: _response.body,
+                        rawResponse: _response.rawResponse,
+                    };
+                }
+                if (_response.error.reason === "status-code") {
+                    switch (_response.error.statusCode) {
+                        case 400:
+                            throw new Management.BadRequestError(_response.error.body, _response.rawResponse);
+                        case 401:
+                            throw new Management.UnauthorizedError(_response.error.body, _response.rawResponse);
+                        case 403:
+                            throw new Management.ForbiddenError(_response.error.body, _response.rawResponse);
+                        case 404:
+                            throw new Management.NotFoundError(_response.error.body, _response.rawResponse);
+                        case 429:
+                            throw new Management.TooManyRequestsError(_response.error.body, _response.rawResponse);
+                        default:
+                            throw new errors.ManagementError({
+                                statusCode: _response.error.statusCode,
+                                body: _response.error.body,
+                                rawResponse: _response.rawResponse,
+                            });
+                    }
+                }
+                return handleNonStatusCodeError(_response.error, _response.rawResponse, "GET", "/users/{id}/effective-roles/sources/groups");
+            }));
+            const dataWithRawResponse = yield list(request).withRawResponse();
+            return new core.Page({
+                response: dataWithRawResponse.data,
+                rawResponse: dataWithRawResponse.rawResponse,
+                hasNextPage: (response) => (response === null || response === void 0 ? void 0 : response.next) != null && !(typeof (response === null || response === void 0 ? void 0 : response.next) === "string" && (response === null || response === void 0 ? void 0 : response.next) === ""),
+                getItems: (response) => { var _a; return (_a = response === null || response === void 0 ? void 0 : response.groups) !== null && _a !== void 0 ? _a : []; },
+                loadPage: (response) => {
+                    return list(core.setObjectProperty(request, "from", response === null || response === void 0 ? void 0 : response.next));
+                },
+            });
+        });
+    }
+}

package/dist/esm/management/api/resources/users/resources/effectiveRoles/resources/sources/resources/groups/client/index.d.mts

@@ -0,0 +1 @@
+export {};

package/dist/esm/management/api/resources/users/resources/effectiveRoles/resources/sources/resources/groups/client/index.mjs

@@ -0,0 +1 @@
+export {};

package/dist/esm/management/api/resources/users/resources/effectiveRoles/resources/sources/resources/groups/index.d.mts

@@ -0,0 +1 @@
+export * from "./client/index.mjs";

package/dist/esm/management/api/resources/users/resources/effectiveRoles/resources/sources/resources/groups/index.mjs

@@ -0,0 +1 @@
+export * from "./client/index.mjs";

package/dist/esm/management/api/resources/users/resources/effectiveRoles/resources/sources/resources/index.d.mts

@@ -0,0 +1 @@
+export * as groups from "./groups/index.mjs";

package/dist/esm/management/api/resources/users/resources/effectiveRoles/resources/sources/resources/index.mjs

@@ -0,0 +1 @@
+export * as groups from "./groups/index.mjs";

package/dist/esm/management/api/resources/users/resources/enrollments/client/Client.d.mts

@@ -11,7 +11,7 @@ export declare class EnrollmentsClient {
     protected readonly _options: NormalizedClientOptionsWithAuth<EnrollmentsClient.Options>;
     constructor(options: EnrollmentsClient.Options);
     /**
-     * Retrieve the first <a href="https://auth0.com/docs/secure/multi-factor-authentication/multi-factor-authentication-factors">multi-factor authentication</a> enrollment that a specific user has confirmed.
+     * Retrieve the first [multi-factor authentication](https://auth0.com/docs/secure/multi-factor-authentication/multi-factor-authentication-factors) enrollment that a specific user has confirmed.
      *
      * @param {string} id - ID of the user to list enrollments for.
      * @param {EnrollmentsClient.RequestOptions} requestOptions - Request-specific configuration.

package/dist/esm/management/api/resources/users/resources/enrollments/client/Client.mjs

@@ -20,7 +20,7 @@ export class EnrollmentsClient {
         this._options = normalizeClientOptionsWithAuth(options);
     }
     /**
-     * Retrieve the first <a href="https://auth0.com/docs/secure/multi-factor-authentication/multi-factor-authentication-factors">multi-factor authentication</a> enrollment that a specific user has confirmed.
+     * Retrieve the first [multi-factor authentication](https://auth0.com/docs/secure/multi-factor-authentication/multi-factor-authentication-factors) enrollment that a specific user has confirmed.
      *
      * @param {string} id - ID of the user to list enrollments for.
      * @param {EnrollmentsClient.RequestOptions} requestOptions - Request-specific configuration.

package/dist/esm/management/api/resources/users/resources/groups/client/Client.d.mts

@@ -20,6 +20,7 @@ export declare class GroupsClient {
      * @throws {@link Management.BadRequestError}
      * @throws {@link Management.UnauthorizedError}
      * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
      * @throws {@link Management.TooManyRequestsError}
      *
      * @example

package/dist/esm/management/api/resources/users/resources/groups/client/Client.mjs

@@ -29,6 +29,7 @@ export class GroupsClient {
      * @throws {@link Management.BadRequestError}
      * @throws {@link Management.UnauthorizedError}
      * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
      * @throws {@link Management.TooManyRequestsError}
      *
      * @example
@@ -81,6 +82,8 @@ export class GroupsClient {
                             throw new Management.UnauthorizedError(_response.error.body, _response.rawResponse);
                         case 403:
                             throw new Management.ForbiddenError(_response.error.body, _response.rawResponse);
+                        case 404:
+                            throw new Management.NotFoundError(_response.error.body, _response.rawResponse);
                         case 429:
                             throw new Management.TooManyRequestsError(_response.error.body, _response.rawResponse);
                         default:

package/dist/esm/management/api/resources/users/resources/identities/client/Client.d.mts

@@ -15,30 +15,31 @@ export declare class IdentitiesClient {
      *
      * Note: There are two ways of invoking the endpoint:
      *
-     * <ul>
-     *   <li>With the authenticated primary account's JWT in the Authorization header, which has the <code>update:current_user_identities</code> scope:
-     *     <pre>
-     *       POST /api/v2/users/PRIMARY_ACCOUNT_USER_ID/identities
-     *       Authorization: "Bearer PRIMARY_ACCOUNT_JWT"
-     *       {
-     *         "link_with": "SECONDARY_ACCOUNT_JWT"
-     *       }
-     *     </pre>
-     *     In this case, only the <code>link_with</code> param is required in the body, which also contains the JWT obtained upon the secondary account's authentication.
-     *   </li>
-     *   <li>With a token generated by the API V2 containing the <code>update:users</code> scope:
-     *     <pre>
-     *     POST /api/v2/users/PRIMARY_ACCOUNT_USER_ID/identities
-     *     Authorization: "Bearer YOUR_API_V2_TOKEN"
-     *     {
-     *       "provider": "SECONDARY_ACCOUNT_PROVIDER",
-     *       "connection_id": "SECONDARY_ACCOUNT_CONNECTION_ID(OPTIONAL)",
-     *       "user_id": "SECONDARY_ACCOUNT_USER_ID"
-     *     }
-     *     </pre>
-     *     In this case you need to send <code>provider</code> and <code>user_id</code> in the body. Optionally you can also send the <code>connection_id</code> param which is suitable for identifying a particular database connection for the 'auth0' provider.
-     *   </li>
-     * </ul>
+     * - With the authenticated primary account's JWT in the Authorization header, which has the `update:current_user_identities` scope:
+     *
+     *   ```http
+     *   POST /api/v2/users/PRIMARY_ACCOUNT_USER_ID/identities
+     *   Authorization: "Bearer PRIMARY_ACCOUNT_JWT"
+     *   {
+     *     "link_with": "SECONDARY_ACCOUNT_JWT"
+     *   }
+     *   ```
+     *
+     *   In this case, only the `link_with` param is required in the body, which also contains the JWT obtained upon the secondary account's authentication.
+     *
+     * - With a token generated by the API V2 containing the `update:users` scope:
+     *
+     *   ```http
+     *   POST /api/v2/users/PRIMARY_ACCOUNT_USER_ID/identities
+     *   Authorization: "Bearer YOUR_API_V2_TOKEN"
+     *   {
+     *     "provider": "SECONDARY_ACCOUNT_PROVIDER",
+     *     "connection_id": "SECONDARY_ACCOUNT_CONNECTION_ID(OPTIONAL)",
+     *     "user_id": "SECONDARY_ACCOUNT_USER_ID"
+     *   }
+     *   ```
+     *
+     *   In this case you need to send `provider` and `user_id` in the body. Optionally you can also send the `connection_id` param which is suitable for identifying a particular database connection for the 'auth0' provider.
      *
      * @param {string} id - ID of the primary user account to link a second user account to.
      * @param {Management.LinkUserIdentityRequestContent} request
@@ -58,7 +59,7 @@ export declare class IdentitiesClient {
     /**
      * Unlink a specific secondary account from a target user. This action requires the ID of both the target user and the secondary account.
      *
-     * Unlinking the secondary account removes it from the identities array of the target user and creates a new standalone profile for the secondary account. To learn more, review <a href="https://auth0.com/docs/manage-users/user-accounts/user-account-linking/unlink-user-accounts">Unlink User Accounts</a>.
+     * Unlinking the secondary account removes it from the identities array of the target user and creates a new standalone profile for the secondary account. To learn more, review [Unlink User Accounts](https://auth0.com/docs/manage-users/user-accounts/user-account-linking/unlink-user-accounts).
      *
      * @param {string} id - ID of the primary user account.
      * @param {Management.UserIdentityProviderEnum} provider - Identity provider name of the secondary linked account (e.g. `google-oauth2`).

package/dist/esm/management/api/resources/users/resources/identities/client/Client.mjs

@@ -24,30 +24,31 @@ export class IdentitiesClient {
      *
      * Note: There are two ways of invoking the endpoint:
      *
-     * <ul>
-     *   <li>With the authenticated primary account's JWT in the Authorization header, which has the <code>update:current_user_identities</code> scope:
-     *     <pre>
-     *       POST /api/v2/users/PRIMARY_ACCOUNT_USER_ID/identities
-     *       Authorization: "Bearer PRIMARY_ACCOUNT_JWT"
-     *       {
-     *         "link_with": "SECONDARY_ACCOUNT_JWT"
-     *       }
-     *     </pre>
-     *     In this case, only the <code>link_with</code> param is required in the body, which also contains the JWT obtained upon the secondary account's authentication.
-     *   </li>
-     *   <li>With a token generated by the API V2 containing the <code>update:users</code> scope:
-     *     <pre>
-     *     POST /api/v2/users/PRIMARY_ACCOUNT_USER_ID/identities
-     *     Authorization: "Bearer YOUR_API_V2_TOKEN"
-     *     {
-     *       "provider": "SECONDARY_ACCOUNT_PROVIDER",
-     *       "connection_id": "SECONDARY_ACCOUNT_CONNECTION_ID(OPTIONAL)",
-     *       "user_id": "SECONDARY_ACCOUNT_USER_ID"
-     *     }
-     *     </pre>
-     *     In this case you need to send <code>provider</code> and <code>user_id</code> in the body. Optionally you can also send the <code>connection_id</code> param which is suitable for identifying a particular database connection for the 'auth0' provider.
-     *   </li>
-     * </ul>
+     * - With the authenticated primary account's JWT in the Authorization header, which has the `update:current_user_identities` scope:
+     *
+     *   ```http
+     *   POST /api/v2/users/PRIMARY_ACCOUNT_USER_ID/identities
+     *   Authorization: "Bearer PRIMARY_ACCOUNT_JWT"
+     *   {
+     *     "link_with": "SECONDARY_ACCOUNT_JWT"
+     *   }
+     *   ```
+     *
+     *   In this case, only the `link_with` param is required in the body, which also contains the JWT obtained upon the secondary account's authentication.
+     *
+     * - With a token generated by the API V2 containing the `update:users` scope:
+     *
+     *   ```http
+     *   POST /api/v2/users/PRIMARY_ACCOUNT_USER_ID/identities
+     *   Authorization: "Bearer YOUR_API_V2_TOKEN"
+     *   {
+     *     "provider": "SECONDARY_ACCOUNT_PROVIDER",
+     *     "connection_id": "SECONDARY_ACCOUNT_CONNECTION_ID(OPTIONAL)",
+     *     "user_id": "SECONDARY_ACCOUNT_USER_ID"
+     *   }
+     *   ```
+     *
+     *   In this case you need to send `provider` and `user_id` in the body. Optionally you can also send the `connection_id` param which is suitable for identifying a particular database connection for the 'auth0' provider.
      *
      * @param {string} id - ID of the primary user account to link a second user account to.
      * @param {Management.LinkUserIdentityRequestContent} request
@@ -113,7 +114,7 @@ export class IdentitiesClient {
     /**
      * Unlink a specific secondary account from a target user. This action requires the ID of both the target user and the secondary account.
      *
-     * Unlinking the secondary account removes it from the identities array of the target user and creates a new standalone profile for the secondary account. To learn more, review <a href="https://auth0.com/docs/manage-users/user-accounts/user-account-linking/unlink-user-accounts">Unlink User Accounts</a>.
+     * Unlinking the secondary account removes it from the identities array of the target user and creates a new standalone profile for the secondary account. To learn more, review [Unlink User Accounts](https://auth0.com/docs/manage-users/user-accounts/user-account-linking/unlink-user-accounts).
      *
      * @param {string} id - ID of the primary user account.
      * @param {Management.UserIdentityProviderEnum} provider - Identity provider name of the secondary linked account (e.g. `google-oauth2`).

package/dist/esm/management/api/resources/users/resources/index.d.mts

@@ -1,6 +1,8 @@
 export * as authenticationMethods from "./authenticationMethods/index.mjs";
 export * as authenticators from "./authenticators/index.mjs";
 export * as connectedAccounts from "./connectedAccounts/index.mjs";
+export * as effectivePermissions from "./effectivePermissions/index.mjs";
+export * as effectiveRoles from "./effectiveRoles/index.mjs";
 export * as enrollments from "./enrollments/index.mjs";
 export * as federatedConnectionsTokensets from "./federatedConnectionsTokensets/index.mjs";
 export * as groups from "./groups/index.mjs";

package/dist/esm/management/api/resources/users/resources/index.mjs

@@ -1,6 +1,8 @@
 export * as authenticationMethods from "./authenticationMethods/index.mjs";
 export * as authenticators from "./authenticators/index.mjs";
 export * as connectedAccounts from "./connectedAccounts/index.mjs";
+export * as effectivePermissions from "./effectivePermissions/index.mjs";
+export * as effectiveRoles from "./effectiveRoles/index.mjs";
 export * as enrollments from "./enrollments/index.mjs";
 export * as federatedConnectionsTokensets from "./federatedConnectionsTokensets/index.mjs";
 export * as groups from "./groups/index.mjs";

package/dist/esm/management/api/resources/users/resources/multifactor/client/Client.d.mts

@@ -11,7 +11,7 @@ export declare class MultifactorClient {
     protected readonly _options: NormalizedClientOptionsWithAuth<MultifactorClient.Options>;
     constructor(options: MultifactorClient.Options);
     /**
-     * Invalidate all remembered browsers across all <a href="https://auth0.com/docs/multifactor-authentication">authentication factors</a> for a user.
+     * Invalidate all remembered browsers across all [authentication factors](https://auth0.com/docs/multifactor-authentication) for a user.
      *
      * @param {string} id - ID of the user to invalidate all remembered browsers and authentication factors for.
      * @param {MultifactorClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -26,7 +26,7 @@ export declare class MultifactorClient {
     invalidateRememberBrowser(id: string, requestOptions?: MultifactorClient.RequestOptions): core.HttpResponsePromise<void>;
     private __invalidateRememberBrowser;
     /**
-     * Remove a <a href="https://auth0.com/docs/multifactor-authentication">multifactor</a> authentication configuration from a user's account. This forces the user to manually reconfigure the multi-factor provider.
+     * Remove a [multifactor](https://auth0.com/docs/multifactor-authentication) authentication configuration from a user's account. This forces the user to manually reconfigure the multi-factor provider.
      *
      * @param {string} id - ID of the user to remove a multifactor configuration from.
      * @param {Management.UserMultifactorProviderEnum} provider - The multi-factor provider. Supported values 'duo' or 'google-authenticator'