auth0 5.5.0 → 5.6.0

package/dist/cjs/management/Client.d.ts

@@ -43,6 +43,7 @@ import { UsersClient } from "./api/resources/users/client/Client.js";
 import { VerifiableCredentialsClient } from "./api/resources/verifiableCredentials/client/Client.js";
 import type { BaseClientOptions, BaseRequestOptions } from "./BaseClient.js";
 import { type NormalizedClientOptionsWithAuth } from "./BaseClient.js";
+import * as core from "./core/index.js";
 export declare namespace ManagementClient {
     type Options = BaseClientOptions;
     interface RequestOptions extends BaseRequestOptions {
@@ -137,4 +138,15 @@ export declare class ManagementClient {
     get riskAssessments(): RiskAssessmentsClient;
     get tenants(): TenantsClient;
     get verifiableCredentials(): VerifiableCredentialsClient;
+    /**
+     * Make a passthrough request using the SDK's configured auth, retry, logging, etc.
+     * This is useful for making requests to endpoints not yet supported in the SDK.
+     * The input can be a URL string, URL object, or Request object. Relative paths are resolved against the configured base URL.
+     *
+     * @param {Request | string | URL} input - The URL, path, or Request object.
+     * @param {RequestInit} init - Standard fetch RequestInit options.
+     * @param {core.PassthroughRequest.RequestOptions} requestOptions - Per-request overrides (timeout, retries, headers, abort signal).
+     * @returns {Promise<Response>} A standard Response object.
+     */
+    fetch(input: Request | string | URL, init?: RequestInit, requestOptions?: core.PassthroughRequest.RequestOptions): Promise<Response>;
 }

package/dist/cjs/management/Client.js

@@ -1,5 +1,47 @@
 "use strict";
 // This file was auto-generated by Fern from our API Definition.
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ManagementClient = void 0;
 const Client_js_1 = require("./api/resources/actions/client/Client.js");
@@ -46,6 +88,7 @@ const Client_js_41 = require("./api/resources/userGrants/client/Client.js");
 const Client_js_42 = require("./api/resources/users/client/Client.js");
 const Client_js_43 = require("./api/resources/verifiableCredentials/client/Client.js");
 const BaseClient_js_1 = require("./BaseClient.js");
+const core = __importStar(require("./core/index.js"));
 class ManagementClient {
     constructor(options) {
         this._options = (0, BaseClient_js_1.normalizeClientOptionsWithAuth)(options);
@@ -222,5 +265,29 @@ class ManagementClient {
         var _a;
         return ((_a = this._verifiableCredentials) !== null && _a !== void 0 ? _a : (this._verifiableCredentials = new Client_js_43.VerifiableCredentialsClient(this._options)));
     }
+    /**
+     * Make a passthrough request using the SDK's configured auth, retry, logging, etc.
+     * This is useful for making requests to endpoints not yet supported in the SDK.
+     * The input can be a URL string, URL object, or Request object. Relative paths are resolved against the configured base URL.
+     *
+     * @param {Request | string | URL} input - The URL, path, or Request object.
+     * @param {RequestInit} init - Standard fetch RequestInit options.
+     * @param {core.PassthroughRequest.RequestOptions} requestOptions - Per-request overrides (timeout, retries, headers, abort signal).
+     * @returns {Promise<Response>} A standard Response object.
+     */
+    fetch(input, init, requestOptions) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a;
+            return core.makePassthroughRequest(input, init, {
+                baseUrl: (_a = this._options.baseUrl) !== null && _a !== void 0 ? _a : this._options.environment,
+                headers: this._options.headers,
+                timeoutInSeconds: this._options.timeoutInSeconds,
+                maxRetries: this._options.maxRetries,
+                fetch: this._options.fetch,
+                logging: this._options.logging,
+                getAuthHeaders: () => __awaiter(this, void 0, void 0, function* () { return (yield this._options.authProvider.getAuthRequest()).headers; }),
+            }, requestOptions);
+        });
+    }
 }
 exports.ManagementClient = ManagementClient;

package/dist/cjs/management/api/requests/requests.d.ts

@@ -3,7 +3,7 @@ import * as Management from "../index.js";
 /**
  * @example
  *     {
- *         triggerId: "triggerId",
+ *         triggerId: "post-login",
  *         actionName: "actionName",
  *         deployed: true,
  *         page: 1,
@@ -30,7 +30,7 @@ export interface ListActionsRequestParameters {
  *     {
  *         name: "name",
  *         supported_triggers: [{
- *                 id: "id"
+ *                 id: "post-login"
  *             }]
  *     }
  */
@@ -133,13 +133,12 @@ export interface ListClientGrantsRequestParameters {
 /**
  * @example
  *     {
- *         client_id: "client_id",
  *         audience: "audience"
  *     }
  */
 export interface CreateClientGrantRequestContent {
     /** ID of the client. */
-    client_id: string;
+    client_id?: string;
     /** The audience (API identifier) of this client grant */
     audience: string;
     organization_usage?: Management.ClientGrantOrganizationUsageEnum;
@@ -159,7 +158,7 @@ export interface CreateClientGrantRequestContent {
  */
 export interface UpdateClientGrantRequestContent {
     /** Scopes allowed for this client grant. */
-    scope?: string[];
+    scope?: string[] | null;
     organization_usage?: Management.ClientGrantOrganizationNullableUsageEnum | null;
     /** Controls allowing any organization to be used with this grant */
     allow_any_organization?: boolean | null;
@@ -179,6 +178,7 @@ export interface UpdateClientGrantRequestContent {
  *         is_global: true,
  *         is_first_party: true,
  *         app_type: "app_type",
+ *         external_client_id: "external_client_id",
  *         q: "q"
  *     }
  */
@@ -199,7 +199,9 @@ export interface ListClientsRequestParameters {
     is_first_party?: boolean | null;
     /** Optional filter by a comma-separated list of application types. */
     app_type?: string | null;
-    /** Advanced Query in <a href="http://www.lucenetutorial.com/lucene-query-syntax.html">Lucene</a> syntax.<br /><b>Permitted Queries</b>:<br /><ul><li><i>client_grant.organization_id:{organization_id}</i></li><li><i>client_grant.allow_any_organization:true</i></li></ul><b>Additional Restrictions</b>:<br /><ul><li>Cannot be used in combination with other filters</li><li>Requires use of the <i>from</i> and <i>take</i> paging parameters (checkpoint paginatinon)</li><li>Reduced rate limits apply. See <a href="https://auth0.com/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/enterprise-public">Rate Limit Configurations</a></li></ul><i><b>Note</b>: Recent updates may not be immediately reflected in query results</i> */
+    /** Optional filter by the <a href="https://www.ietf.org/archive/id/draft-ietf-oauth-client-id-metadata-document-04.html">Client ID Metadata Document</a> URI for CIMD-registered clients. */
+    external_client_id?: string | null;
+    /** Advanced Query in <a href="https://lucene.apache.org/core/2_9_4/queryparsersyntax.html">Lucene</a> syntax.<br /><b>Permitted Queries</b>:<br /><ul><li><i>client_grant.organization_id:{organization_id}</i></li><li><i>client_grant.allow_any_organization:true</i></li></ul><b>Additional Restrictions</b>:<br /><ul><li>Cannot be used in combination with other filters</li><li>Requires use of the <i>from</i> and <i>take</i> paging parameters (checkpoint paginatinon)</li><li>Reduced rate limits apply. See <a href="https://auth0.com/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/enterprise-public">Rate Limit Configurations</a></li></ul><i><b>Note</b>: Recent updates may not be immediately reflected in query results</i> */
     q?: string | null;
 }
 /**
@@ -293,6 +295,26 @@ export interface CreateClientRequestContent {
     express_configuration?: Management.ExpressConfiguration;
     async_approval_notification_channels?: Management.ClientAsyncApprovalNotificationsChannelsApiPostConfiguration;
 }
+/**
+ * @example
+ *     {
+ *         external_client_id: "external_client_id"
+ *     }
+ */
+export interface PreviewCimdMetadataRequestContent {
+    /** URL to the Client ID Metadata Document */
+    external_client_id: string;
+}
+/**
+ * @example
+ *     {
+ *         external_client_id: "external_client_id"
+ *     }
+ */
+export interface RegisterCimdClientRequestContent {
+    /** URL to the Client ID Metadata Document. Acts as the unique identifier for upsert operations. */
+    external_client_id: string;
+}
 /**
  * @example
  *     {
@@ -377,7 +399,7 @@ export interface UpdateClientRequestContent {
     organization_usage?: Management.ClientOrganizationUsagePatchEnum | null;
     organization_require_behavior?: Management.ClientOrganizationRequireBehaviorPatchEnum | null;
     /** Defines the available methods for organization discovery during the `pre_login_prompt`. Users can discover their organization either by `email`, `organization_name` or both. */
-    organization_discovery_methods?: Management.ClientOrganizationDiscoveryEnum[];
+    organization_discovery_methods?: Management.ClientOrganizationDiscoveryEnum[] | null;
     client_authentication_methods?: Management.ClientAuthenticationMethod | null;
     /** Makes the use of Pushed Authorization Requests mandatory for this client */
     require_pushed_authorization_requests?: boolean;
@@ -395,7 +417,7 @@ export interface UpdateClientRequestContent {
     /** Specifies how long, in seconds, a Pushed Authorization Request URI remains valid */
     par_request_expiry?: number | null;
     express_configuration?: Management.ExpressConfigurationOrNull | null;
-    async_approval_notification_channels?: Management.ClientAsyncApprovalNotificationsChannelsApiPatchConfiguration;
+    async_approval_notification_channels?: (Management.ClientAsyncApprovalNotificationsChannelsApiPatchConfiguration | undefined) | null;
 }
 /**
  * @example
@@ -474,7 +496,7 @@ export interface CreateConnectionRequestContent {
     display_name?: string;
     strategy: Management.ConnectionIdentityProviderEnum;
     options?: Management.ConnectionPropertiesOptions;
-    /** DEPRECATED property. Use the PATCH /v2/connections/{id}/clients endpoint to enable the connection for a set of clients. */
+    /** Use of this property is NOT RECOMMENDED. Use the PATCH /v2/connections/{id}/clients endpoint to enable the connection for a set of clients. */
     enabled_clients?: string[];
     /** <code>true</code> promotes to a domain-level connection so that third-party applications can use it. <code>false</code> does not promote the connection, so only first-party applications with the connection enabled can use it. (Defaults to <code>false</code>.) */
     is_domain_connection?: boolean;
@@ -508,7 +530,7 @@ export interface UpdateConnectionRequestContent {
     display_name?: string;
     options?: Management.UpdateConnectionOptions | null;
     /** DEPRECATED property. Use the PATCH /v2/connections/{id}/clients endpoint to enable or disable the connection for any clients. */
-    enabled_clients?: string[];
+    enabled_clients?: string[] | null;
     /** <code>true</code> promotes to a domain-level connection so that third-party applications can use it. <code>false</code> does not promote the connection, so only first-party applications with the connection enabled can use it. (Defaults to <code>false</code>.) */
     is_domain_connection?: boolean;
     /** Enables showing a button for the connection in the login page (new experience only). If false, it will be usable only by HRD. (Defaults to <code>false</code>.) */
@@ -529,7 +551,7 @@ export interface UpdateConnectionRequestContent {
  *     }
  */
 export interface ListCustomDomainsRequestParameters {
-    /** Query in <a href ="http://www.lucenetutorial.com/lucene-query-syntax.html">Lucene query string syntax</a>. */
+    /** Query in <a href ="https://lucene.apache.org/core/2_9_4/queryparsersyntax.html">Lucene query string syntax</a>. */
     q?: string | null;
     /** Comma-separated list of fields to include or exclude (based on value provided for include_fields) in the result. Leave empty to retrieve all fields. */
     fields?: string | null;
@@ -556,6 +578,16 @@ export interface CreateCustomDomainRequestContent {
     /** Relying Party ID (rpId) to be used for Passkeys on this custom domain. If not provided, the full domain will be used. */
     relying_party_identifier?: string;
 }
+/**
+ * @example
+ *     {
+ *         domain: "domain"
+ *     }
+ */
+export interface SetDefaultCustomDomainRequestContent {
+    /** The domain to set as the default custom domain. Must be a verified custom domain or the canonical domain. */
+    domain: string;
+}
 /**
  * @example
  *     {}
@@ -772,7 +804,7 @@ export interface GetFlowRequestParameters {
  */
 export interface UpdateFlowRequestContent {
     name?: string;
-    actions?: Management.FlowAction[];
+    actions?: Management.FlowAction[] | null;
 }
 /**
  * @example
@@ -1028,7 +1060,6 @@ export interface ListNetworkAclsRequestParameters {
  *     {
  *         description: "description",
  *         active: true,
- *         priority: 1.1,
  *         rule: {
  *             action: {},
  *             scope: "management"
@@ -1040,7 +1071,7 @@ export interface CreateNetworkAclRequestContent {
     /** Indicates whether or not this access control list is actively being used */
     active: boolean;
     /** Indicates the order in which the ACL will be evaluated relative to other ACL rules. */
-    priority: number;
+    priority?: number;
     rule: Management.NetworkAclRule;
 }
 /**
@@ -1048,7 +1079,6 @@ export interface CreateNetworkAclRequestContent {
  *     {
  *         description: "description",
  *         active: true,
- *         priority: 1.1,
  *         rule: {
  *             action: {},
  *             scope: "management"
@@ -1060,7 +1090,7 @@ export interface SetNetworkAclRequestContent {
     /** Indicates whether or not this access control list is actively being used */
     active: boolean;
     /** Indicates the order in which the ACL will be evaluated relative to other ACL rules. */
-    priority: number;
+    priority?: number;
     rule: Management.NetworkAclRule;
 }
 /**
@@ -1132,6 +1162,31 @@ export interface UpdateSettingsRequestContent {
     /** Use WebAuthn with Device Biometrics as the first authentication factor */
     webauthn_platform_first_factor?: boolean | null;
 }
+/**
+ * @example
+ *     {
+ *         user_id: "user_id",
+ *         client_id: "client_id",
+ *         from: "from",
+ *         take: 1,
+ *         fields: "fields",
+ *         include_fields: true
+ *     }
+ */
+export interface GetRefreshTokensRequestParameters {
+    /** ID of the user whose refresh tokens to retrieve. Required. */
+    user_id: string;
+    /** Filter results by client ID. Only valid when user_id is provided. */
+    client_id?: string | null;
+    /** An opaque cursor from which to start the selection (exclusive). Expires after 24 hours. Obtained from the next property of a previous response. */
+    from?: string | null;
+    /** Number of results per page. Defaults to 50. */
+    take?: number | null;
+    /** Comma-separated list of fields to include or exclude (based on value provided for include_fields) in the result. Leave empty to retrieve all fields. */
+    fields?: string | null;
+    /** Whether specified fields are to be included (true) or excluded (false). */
+    include_fields?: boolean | null;
+}
 /**
  * @example
  *     {}
@@ -1179,6 +1234,8 @@ export interface CreateResourceServerRequestContent {
     signing_secret?: string;
     /** Whether refresh tokens can be issued for this API (true) or not (false). */
     allow_offline_access?: boolean;
+    /** Whether Online Refresh Tokens can be issued for this API (true) or not (false). */
+    allow_online_access?: boolean;
     /** Expiration value (in seconds) for access tokens issued for this API from the token endpoint. */
     token_lifetime?: number;
     token_dialect?: Management.ResourceServerTokenDialectSchemaEnum;
@@ -1188,7 +1245,7 @@ export interface CreateResourceServerRequestContent {
     enforce_policies?: boolean;
     token_encryption?: Management.ResourceServerTokenEncryption | null;
     consent_policy?: Management.ResourceServerConsentPolicyEnum | null;
-    authorization_details?: unknown[];
+    authorization_details?: unknown[] | null;
     proof_of_possession?: Management.ResourceServerProofOfPossession | null;
     subject_type_authorization?: Management.ResourceServerSubjectTypeAuthorization;
 }
@@ -1218,6 +1275,8 @@ export interface UpdateResourceServerRequestContent {
     skip_consent_for_verifiable_first_party_clients?: boolean;
     /** Whether refresh tokens can be issued for this API (true) or not (false). */
     allow_offline_access?: boolean;
+    /** Whether Online Refresh Tokens can be issued for this API (true) or not (false). */
+    allow_online_access?: boolean;
     /** Expiration value (in seconds) for access tokens issued for this API from the token endpoint. */
     token_lifetime?: number;
     token_dialect?: Management.ResourceServerTokenDialectSchemaEnum;
@@ -1225,7 +1284,7 @@ export interface UpdateResourceServerRequestContent {
     enforce_policies?: boolean;
     token_encryption?: Management.ResourceServerTokenEncryption | null;
     consent_policy?: Management.ResourceServerConsentPolicyEnum | null;
-    authorization_details?: unknown[];
+    authorization_details?: unknown[] | null;
     proof_of_possession?: Management.ResourceServerProofOfPossession | null;
     subject_type_authorization?: Management.ResourceServerSubjectTypeAuthorization;
 }
@@ -1629,7 +1688,7 @@ export interface ListUsersRequestParameters {
     fields?: string | null;
     /** Whether specified fields are to be included (true) or excluded (false). */
     include_fields?: boolean | null;
-    /** Query in <a target='_new' href ='http://www.lucenetutorial.com/lucene-query-syntax.html'>Lucene query string syntax</a>. Some query types cannot be used on metadata fields, for details see <a href='https://auth0.com/docs/users/search/v3/query-syntax#searchable-fields'>Searchable Fields</a>. */
+    /** Query in <a target='_new' href ='https://lucene.apache.org/core/2_9_4/queryparsersyntax.html'>Lucene query string syntax</a>. Some query types cannot be used on metadata fields, for details see <a href='https://auth0.com/docs/users/search/v3/query-syntax#searchable-fields'>Searchable Fields</a>. */
     q?: string | null;
     /** The version of the search engine */
     search_engine?: Management.SearchEngineVersionsEnum | null;
@@ -2241,6 +2300,8 @@ export interface PostClientCredentialRequestContent {
     parse_expiry_from_cert?: boolean;
     /** The ISO 8601 formatted date representing the expiration of the credential. If not specified (not recommended), the credential never expires. Applies to `public_key` credential type. */
     expires_at?: string;
+    /** Optional kid (Key ID), used to uniquely identify the credential. If not specified, a kid value will be auto-generated. The kid header parameter in JWTs sent by your client should match this value. Valid format is [0-9a-zA-Z-_]{10,64} */
+    kid?: string;
 }
 /**
  * @example
@@ -2824,6 +2885,63 @@ export interface AssociateOrganizationClientGrantRequestContent {
     /** A Client Grant ID to add to the organization. */
     grant_id: string;
 }
+/**
+ * @example
+ *     {
+ *         page: 1,
+ *         per_page: 1,
+ *         include_totals: true,
+ *         is_enabled: true
+ *     }
+ */
+export interface ListOrganizationAllConnectionsRequestParameters {
+    /** Page index of the results to return. First page is 0. */
+    page?: number | null;
+    /** Number of results per page. Defaults to 50. */
+    per_page?: number | null;
+    /** Return results inside an object that contains the total result count (true) or as a direct array of results (false, default). */
+    include_totals?: boolean | null;
+    /** Filter connections by enabled status. */
+    is_enabled?: boolean | null;
+}
+/**
+ * @example
+ *     {
+ *         connection_id: "connection_id"
+ *     }
+ */
+export interface CreateOrganizationAllConnectionRequestParameters {
+    /** Name of the connection in the scope of this organization. */
+    organization_connection_name?: string;
+    /** When true, all users that log in with this connection will be automatically granted membership in the organization. When false, users must be granted membership in the organization before logging in with this connection. */
+    assign_membership_on_login?: boolean;
+    /** Determines whether a connection should be displayed on this organization’s login prompt. Only applicable for enterprise connections. Default: true. */
+    show_as_button?: boolean;
+    /** Determines whether organization signup should be enabled for this organization connection. Only applicable for database connections. Default: false. */
+    is_signup_enabled?: boolean;
+    organization_access_level?: Management.OrganizationAccessLevelEnum;
+    /** Whether the connection is enabled for the organization. */
+    is_enabled?: boolean;
+    /** Connection identifier. */
+    connection_id: string;
+}
+/**
+ * @example
+ *     {}
+ */
+export interface UpdateOrganizationConnectionRequestParameters {
+    /** Name of the connection in the scope of this organization. */
+    organization_connection_name?: string | null;
+    /** When true, all users that log in with this connection will be automatically granted membership in the organization. When false, users must be granted membership in the organization before logging in with this connection. */
+    assign_membership_on_login?: boolean;
+    /** Determines whether a connection should be displayed on this organization’s login prompt. Only applicable for enterprise connections. Default: true. */
+    show_as_button?: boolean;
+    /** Determines whether organization signup should be enabled for this organization connection. Only applicable for database connections. Default: false. */
+    is_signup_enabled?: boolean;
+    organization_access_level?: Management.OrganizationAccessLevelEnumWithNull | null;
+    /** Whether the connection is enabled for the organization. */
+    is_enabled?: boolean | null;
+}
 /**
  * @example
  *     {
@@ -3094,13 +3212,13 @@ export interface BulkUpdateAculRequestContent {
 export interface UpdateAculRequestContent {
     /** Rendering mode */
     rendering_mode?: Management.AculRenderingModeEnum;
-    context_configuration?: Management.AculContextConfiguration;
+    context_configuration?: (Management.AculContextConfiguration | undefined) | null;
     /** Override Universal Login default head tags */
     default_head_tags_disabled?: boolean | null;
     /** Use page template with ACUL */
     use_page_template?: boolean | null;
     /** An array of head tags */
-    head_tags?: Management.AculHeadTag[];
+    head_tags?: Management.AculHeadTag[] | null;
     filters?: Management.AculFilters | null;
 }
 /**
@@ -3270,7 +3388,7 @@ export interface UpdateTenantSettingsRequestContent {
     /** Whether to accept an organization name instead of an ID on auth endpoints */
     allow_organization_name_in_authentication_api?: boolean | null;
     /** Supported ACR values */
-    acr_values_supported?: string[];
+    acr_values_supported?: string[] | null;
     mtls?: Management.TenantSettingsMtls | null;
     /** Enables the use of Pushed Authorization Requests */
     pushed_authorization_requests_supported?: boolean | null;

package/dist/cjs/management/api/resources/actions/client/Client.d.ts

@@ -35,7 +35,7 @@ export declare class ActionsClient {
      *
      * @example
      *     await client.actions.list({
-     *         triggerId: "triggerId",
+     *         triggerId: "post-login",
      *         actionName: "actionName",
      *         deployed: true,
      *         page: 1,
@@ -59,7 +59,7 @@ export declare class ActionsClient {
      *     await client.actions.create({
      *         name: "name",
      *         supported_triggers: [{
-     *                 id: "id"
+     *                 id: "post-login"
      *             }]
      *     })
      */

package/dist/cjs/management/api/resources/actions/client/Client.js

@@ -88,7 +88,7 @@ class ActionsClient {
      *
      * @example
      *     await client.actions.list({
-     *         triggerId: "triggerId",
+     *         triggerId: "post-login",
      *         actionName: "actionName",
      *         deployed: true,
      *         page: 1,
@@ -102,7 +102,7 @@ class ActionsClient {
                 var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k;
                 const { triggerId, actionName, deployed, page = 0, per_page: perPage = 50, installed } = request;
                 const _queryParams = {
-                    triggerId,
+                    triggerId: triggerId !== undefined ? triggerId : undefined,
                     actionName,
                     deployed,
                     page,
@@ -177,7 +177,7 @@ class ActionsClient {
      *     await client.actions.create({
      *         name: "name",
      *         supported_triggers: [{
-     *                 id: "id"
+     *                 id: "post-login"
      *             }]
      *     })
      */

package/dist/cjs/management/api/resources/actions/resources/triggers/resources/bindings/client/Client.d.ts

@@ -23,7 +23,7 @@ export declare class BindingsClient {
      * @throws {@link Management.TooManyRequestsError}
      *
      * @example
-     *     await client.actions.triggers.bindings.list("triggerId", {
+     *     await client.actions.triggers.bindings.list("post-login", {
      *         page: 1,
      *         per_page: 1
      *     })
@@ -42,7 +42,7 @@ export declare class BindingsClient {
      * @throws {@link Management.TooManyRequestsError}
      *
      * @example
-     *     await client.actions.triggers.bindings.updateMany("triggerId")
+     *     await client.actions.triggers.bindings.updateMany("post-login")
      */
     updateMany(triggerId: Management.ActionTriggerTypeEnum, request?: Management.UpdateActionBindingsRequestContent, requestOptions?: BindingsClient.RequestOptions): core.HttpResponsePromise<Management.UpdateActionBindingsResponseContent>;
     private __updateMany;

package/dist/cjs/management/api/resources/actions/resources/triggers/resources/bindings/client/Client.js

@@ -68,7 +68,7 @@ class BindingsClient {
      * @throws {@link Management.TooManyRequestsError}
      *
      * @example
-     *     await client.actions.triggers.bindings.list("triggerId", {
+     *     await client.actions.triggers.bindings.list("post-login", {
      *         page: 1,
      *         per_page: 1
      *     })
@@ -148,7 +148,7 @@ class BindingsClient {
      * @throws {@link Management.TooManyRequestsError}
      *
      * @example
-     *     await client.actions.triggers.bindings.updateMany("triggerId")
+     *     await client.actions.triggers.bindings.updateMany("post-login")
      */
     updateMany(triggerId, request = {}, requestOptions) {
         return core.HttpResponsePromise.fromPromise(this.__updateMany(triggerId, request, requestOptions));

package/dist/cjs/management/api/resources/clientGrants/client/Client.d.ts

@@ -49,7 +49,6 @@ export declare class ClientGrantsClient {
      *
      * @example
      *     await client.clientGrants.create({
-     *         client_id: "client_id",
      *         audience: "audience"
      *     })
      */

package/dist/cjs/management/api/resources/clientGrants/client/Client.js

@@ -157,7 +157,6 @@ class ClientGrantsClient {
      *
      * @example
      *     await client.clientGrants.create({
-     *         client_id: "client_id",
      *         audience: "audience"
      *     })
      */

package/dist/cjs/management/api/resources/clients/client/Client.d.ts

@@ -69,6 +69,7 @@ export declare class ClientsClient {
      *         is_global: true,
      *         is_first_party: true,
      *         app_type: "app_type",
+     *         external_client_id: "external_client_id",
      *         q: "q"
      *     })
      */
@@ -105,6 +106,51 @@ export declare class ClientsClient {
      */
     create(request: Management.CreateClientRequestContent, requestOptions?: ClientsClient.RequestOptions): core.HttpResponsePromise<Management.CreateClientResponseContent>;
     private __create;
+    /**
+     *
+     *       Fetches and validates a Client ID Metadata Document without creating a client.
+     *       Returns the raw metadata and how it would be mapped to Auth0 client fields.
+     *       This endpoint is useful for testing metadata URIs before creating CIMD clients.
+     *
+     *
+     * @param {Management.PreviewCimdMetadataRequestContent} request
+     * @param {ClientsClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link Management.BadRequestError}
+     * @throws {@link Management.UnauthorizedError}
+     * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.TooManyRequestsError}
+     * @throws {@link Management.InternalServerError}
+     *
+     * @example
+     *     await client.clients.previewCimdMetadata({
+     *         external_client_id: "external_client_id"
+     *     })
+     */
+    previewCimdMetadata(request: Management.PreviewCimdMetadataRequestContent, requestOptions?: ClientsClient.RequestOptions): core.HttpResponsePromise<Management.PreviewCimdMetadataResponseContent>;
+    private __previewCimdMetadata;
+    /**
+     *
+     *       Idempotent registration for Client ID Metadata Document (CIMD) clients.
+     *       Uses external_client_id as the unique identifier for upsert operations.
+     *       **Create:** Returns 201 when a new client is created (requires \
+     *
+     * @param {Management.RegisterCimdClientRequestContent} request
+     * @param {ClientsClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link Management.BadRequestError}
+     * @throws {@link Management.UnauthorizedError}
+     * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.TooManyRequestsError}
+     * @throws {@link Management.InternalServerError}
+     *
+     * @example
+     *     await client.clients.registerCimdClient({
+     *         external_client_id: "external_client_id"
+     *     })
+     */
+    registerCimdClient(request: Management.RegisterCimdClientRequestContent, requestOptions?: ClientsClient.RequestOptions): core.HttpResponsePromise<Management.RegisterCimdClientResponseContent>;
+    private __registerCimdClient;
     /**
      * Retrieve client details by ID. Clients are SSO connections or Applications linked with your Auth0 tenant. A list of fields to include or exclude may also be specified.
      * For more information, read <a href="https://www.auth0.com/docs/get-started/applications"> Applications in Auth0</a> and <a href="https://www.auth0.com/docs/authenticate/single-sign-on"> Single Sign-On</a>.