auth0 5.5.0 → 5.6.0

package/dist/esm/management/api/types/types.mjs

@@ -297,6 +297,9 @@ export const OauthScope = {
     /**
      * Read Groups */
     ReadGroups: "read:groups",
+    /**
+     * Delete Groups */
+    DeleteGroups: "delete:groups",
     /**
      * Create Guardian Enrollment Tickets */
     CreateGuardianEnrollmentTickets: "create:guardian_enrollment_tickets",
@@ -687,6 +690,23 @@ export const ActionExecutionStatusEnum = {
     Canceled: "canceled",
     Suspended: "suspended",
 };
+/** An actions extensibility point. */
+export const ActionTriggerTypeEnum = {
+    PostLogin: "post-login",
+    CredentialsExchange: "credentials-exchange",
+    PreUserRegistration: "pre-user-registration",
+    PostUserRegistration: "post-user-registration",
+    PostChangePassword: "post-change-password",
+    SendPhoneMessage: "send-phone-message",
+    CustomPhoneProvider: "custom-phone-provider",
+    CustomEmailProvider: "custom-email-provider",
+    PasswordResetPostChallenge: "password-reset-post-challenge",
+    CustomTokenExchange: "custom-token-exchange",
+    EventStream: "event-stream",
+    PasswordHashMigration: "password-hash-migration",
+    LoginPostIdentifier: "login-post-identifier",
+    SignupPostIdentifier: "signup-post-identifier",
+};
 /** The build status of this specific version. */
 export const ActionVersionBuildStatusEnum = {
     Pending: "pending",
@@ -926,6 +946,15 @@ export const ClientCredentialTypeEnum = {
 export const ClientDefaultOrganizationFlowsEnum = {
     ClientCredentials: "client_credentials",
 };
+/** Indicates who created the external metadata client. The value <code>admin</code> indicates the client was registered via the Management API. The value <code>client</code> indicates the client was registered dynamically. This field is only present when external_metadata_type is set. */
+export const ClientExternalMetadataCreatedByEnum = {
+    Admin: "admin",
+    Client: "client",
+};
+/** Indicates the type of external metadata used to register the client. This field is omitted for regular clients. The value <code>cimd</code> identifies clients registered via a Client ID Metadata Document. */
+export const ClientExternalMetadataTypeEnum = {
+    Cimd: "cimd",
+};
 /** Controls how organizations may be used with this grant */
 export const ClientGrantOrganizationNullableUsageEnum = {
     Deny: "deny",
@@ -1036,11 +1065,6 @@ export const ConnectionDigestAlgorithmEnumSaml = {
     Sha1: "sha1",
     Sha256: "sha256",
 };
-/** Algorithm used for DPoP proof JWT signing. */
-export const ConnectionDpopSigningAlgEnum = {
-    Es256: "ES256",
-    Ed25519: "Ed25519",
-};
 export var ConnectionEmailEmail;
 (function (ConnectionEmailEmail) {
     /** Email template syntax type */
@@ -1077,7 +1101,6 @@ export const ConnectionIdentityProviderEnum = {
     Apple: "apple",
     Dropbox: "dropbox",
     Bitbucket: "bitbucket",
-    Aol: "aol",
     Auth0Oidc: "auth0-oidc",
     Auth0: "auth0",
     Baidu: "baidu",
@@ -1092,7 +1115,6 @@ export const ConnectionIdentityProviderEnum = {
     Exact: "exact",
     Facebook: "facebook",
     Fitbit: "fitbit",
-    Flickr: "flickr",
     Github: "github",
     GoogleApps: "google-apps",
     GoogleOauth2: "google-oauth2",
@@ -1100,7 +1122,6 @@ export const ConnectionIdentityProviderEnum = {
     Ip: "ip",
     Line: "line",
     Linkedin: "linkedin",
-    Miicard: "miicard",
     Oauth1: "oauth1",
     Oauth2: "oauth2",
     Office365: "office365",
@@ -1110,7 +1131,6 @@ export const ConnectionIdentityProviderEnum = {
     PaypalSandbox: "paypal-sandbox",
     Pingfederate: "pingfederate",
     Planningcenter: "planningcenter",
-    Renren: "renren",
     SalesforceCommunity: "salesforce-community",
     SalesforceSandbox: "salesforce-sandbox",
     Salesforce: "salesforce",
@@ -1120,8 +1140,6 @@ export const ConnectionIdentityProviderEnum = {
     Shop: "shop",
     Sms: "sms",
     Soundcloud: "soundcloud",
-    ThecitySandbox: "thecity-sandbox",
-    Thecity: "thecity",
     Thirtysevensignals: "thirtysevensignals",
     Twitter: "twitter",
     Untappd: "untappd",
@@ -1131,7 +1149,6 @@ export const ConnectionIdentityProviderEnum = {
     Windowslive: "windowslive",
     Wordpress: "wordpress",
     Yahoo: "yahoo",
-    Yammer: "yammer",
     Yandex: "yandex",
 };
 /** Signing key use, whether for encryption or signing */
@@ -1208,12 +1225,6 @@ export var ConnectionResponseContentAdfs;
         Adfs: "adfs",
     };
 })(ConnectionResponseContentAdfs || (ConnectionResponseContentAdfs = {}));
-export var ConnectionResponseContentAol;
-(function (ConnectionResponseContentAol) {
-    ConnectionResponseContentAol.Strategy = {
-        Aol: "aol",
-    };
-})(ConnectionResponseContentAol || (ConnectionResponseContentAol = {}));
 export var ConnectionResponseContentAmazon;
 (function (ConnectionResponseContentAmazon) {
     ConnectionResponseContentAmazon.Strategy = {
@@ -1328,12 +1339,6 @@ export var ConnectionResponseContentFitbit;
         Fitbit: "fitbit",
     };
 })(ConnectionResponseContentFitbit || (ConnectionResponseContentFitbit = {}));
-export var ConnectionResponseContentFlickr;
-(function (ConnectionResponseContentFlickr) {
-    ConnectionResponseContentFlickr.Strategy = {
-        Flickr: "flickr",
-    };
-})(ConnectionResponseContentFlickr || (ConnectionResponseContentFlickr = {}));
 export var ConnectionResponseContentGitHub;
 (function (ConnectionResponseContentGitHub) {
     ConnectionResponseContentGitHub.Strategy = {
@@ -1376,12 +1381,6 @@ export var ConnectionResponseContentLinkedin;
         Linkedin: "linkedin",
     };
 })(ConnectionResponseContentLinkedin || (ConnectionResponseContentLinkedin = {}));
-export var ConnectionResponseContentMiicard;
-(function (ConnectionResponseContentMiicard) {
-    ConnectionResponseContentMiicard.Strategy = {
-        Miicard: "miicard",
-    };
-})(ConnectionResponseContentMiicard || (ConnectionResponseContentMiicard = {}));
 export var ConnectionResponseContentOAuth1;
 (function (ConnectionResponseContentOAuth1) {
     ConnectionResponseContentOAuth1.Strategy = {
@@ -1436,12 +1435,6 @@ export var ConnectionResponseContentPlanningCenter;
         Planningcenter: "planningcenter",
     };
 })(ConnectionResponseContentPlanningCenter || (ConnectionResponseContentPlanningCenter = {}));
-export var ConnectionResponseContentRenren;
-(function (ConnectionResponseContentRenren) {
-    ConnectionResponseContentRenren.Strategy = {
-        Renren: "renren",
-    };
-})(ConnectionResponseContentRenren || (ConnectionResponseContentRenren = {}));
 export var ConnectionResponseContentSaml;
 (function (ConnectionResponseContentSaml) {
     ConnectionResponseContentSaml.Strategy = {
@@ -1544,12 +1537,6 @@ export var ConnectionResponseContentYahoo;
         Yahoo: "yahoo",
     };
 })(ConnectionResponseContentYahoo || (ConnectionResponseContentYahoo = {}));
-export var ConnectionResponseContentYammer;
-(function (ConnectionResponseContentYammer) {
-    ConnectionResponseContentYammer.Strategy = {
-        Yammer: "yammer",
-    };
-})(ConnectionResponseContentYammer || (ConnectionResponseContentYammer = {}));
 export var ConnectionResponseContentYandex;
 (function (ConnectionResponseContentYandex) {
     ConnectionResponseContentYandex.Strategy = {
@@ -1588,7 +1575,6 @@ export const ConnectionStrategyEnum = {
     Apple: "apple",
     Dropbox: "dropbox",
     Bitbucket: "bitbucket",
-    Aol: "aol",
     Auth0Oidc: "auth0-oidc",
     Auth0: "auth0",
     Baidu: "baidu",
@@ -1603,7 +1589,6 @@ export const ConnectionStrategyEnum = {
     Exact: "exact",
     Facebook: "facebook",
     Fitbit: "fitbit",
-    Flickr: "flickr",
     Github: "github",
     GoogleApps: "google-apps",
     GoogleOauth2: "google-oauth2",
@@ -1611,7 +1596,6 @@ export const ConnectionStrategyEnum = {
     Ip: "ip",
     Line: "line",
     Linkedin: "linkedin",
-    Miicard: "miicard",
     Oauth1: "oauth1",
     Oauth2: "oauth2",
     Office365: "office365",
@@ -1621,7 +1605,6 @@ export const ConnectionStrategyEnum = {
     PaypalSandbox: "paypal-sandbox",
     Pingfederate: "pingfederate",
     Planningcenter: "planningcenter",
-    Renren: "renren",
     SalesforceCommunity: "salesforce-community",
     SalesforceSandbox: "salesforce-sandbox",
     Salesforce: "salesforce",
@@ -1631,8 +1614,6 @@ export const ConnectionStrategyEnum = {
     Shop: "shop",
     Sms: "sms",
     Soundcloud: "soundcloud",
-    ThecitySandbox: "thecity-sandbox",
-    Thecity: "thecity",
     Thirtysevensignals: "thirtysevensignals",
     Twitter: "twitter",
     Untappd: "untappd",
@@ -1642,7 +1623,6 @@ export const ConnectionStrategyEnum = {
     Windowslive: "windowslive",
     Wordpress: "wordpress",
     Yahoo: "yahoo",
-    Yammer: "yammer",
     Yandex: "yandex",
     Auth0Adldap: "auth0-adldap",
 };
@@ -1711,12 +1691,6 @@ export var CreateConnectionRequestContentAdfs;
         Adfs: "adfs",
     };
 })(CreateConnectionRequestContentAdfs || (CreateConnectionRequestContentAdfs = {}));
-export var CreateConnectionRequestContentAol;
-(function (CreateConnectionRequestContentAol) {
-    CreateConnectionRequestContentAol.Strategy = {
-        Aol: "aol",
-    };
-})(CreateConnectionRequestContentAol || (CreateConnectionRequestContentAol = {}));
 export var CreateConnectionRequestContentAmazon;
 (function (CreateConnectionRequestContentAmazon) {
     CreateConnectionRequestContentAmazon.Strategy = {
@@ -1831,12 +1805,6 @@ export var CreateConnectionRequestContentFitbit;
         Fitbit: "fitbit",
     };
 })(CreateConnectionRequestContentFitbit || (CreateConnectionRequestContentFitbit = {}));
-export var CreateConnectionRequestContentFlickr;
-(function (CreateConnectionRequestContentFlickr) {
-    CreateConnectionRequestContentFlickr.Strategy = {
-        Flickr: "flickr",
-    };
-})(CreateConnectionRequestContentFlickr || (CreateConnectionRequestContentFlickr = {}));
 export var CreateConnectionRequestContentGitHub;
 (function (CreateConnectionRequestContentGitHub) {
     CreateConnectionRequestContentGitHub.Strategy = {
@@ -1879,12 +1847,6 @@ export var CreateConnectionRequestContentLinkedin;
         Linkedin: "linkedin",
     };
 })(CreateConnectionRequestContentLinkedin || (CreateConnectionRequestContentLinkedin = {}));
-export var CreateConnectionRequestContentMiicard;
-(function (CreateConnectionRequestContentMiicard) {
-    CreateConnectionRequestContentMiicard.Strategy = {
-        Miicard: "miicard",
-    };
-})(CreateConnectionRequestContentMiicard || (CreateConnectionRequestContentMiicard = {}));
 export var CreateConnectionRequestContentOAuth1;
 (function (CreateConnectionRequestContentOAuth1) {
     CreateConnectionRequestContentOAuth1.Strategy = {
@@ -1939,12 +1901,6 @@ export var CreateConnectionRequestContentPlanningCenter;
         Planningcenter: "planningcenter",
     };
 })(CreateConnectionRequestContentPlanningCenter || (CreateConnectionRequestContentPlanningCenter = {}));
-export var CreateConnectionRequestContentRenren;
-(function (CreateConnectionRequestContentRenren) {
-    CreateConnectionRequestContentRenren.Strategy = {
-        Renren: "renren",
-    };
-})(CreateConnectionRequestContentRenren || (CreateConnectionRequestContentRenren = {}));
 export var CreateConnectionRequestContentSaml;
 (function (CreateConnectionRequestContentSaml) {
     CreateConnectionRequestContentSaml.Strategy = {
@@ -2047,12 +2003,6 @@ export var CreateConnectionRequestContentYahoo;
         Yahoo: "yahoo",
     };
 })(CreateConnectionRequestContentYahoo || (CreateConnectionRequestContentYahoo = {}));
-export var CreateConnectionRequestContentYammer;
-(function (CreateConnectionRequestContentYammer) {
-    CreateConnectionRequestContentYammer.Strategy = {
-        Yammer: "yammer",
-    };
-})(CreateConnectionRequestContentYammer || (CreateConnectionRequestContentYammer = {}));
 export var CreateConnectionRequestContentYandex;
 (function (CreateConnectionRequestContentYandex) {
     CreateConnectionRequestContentYandex.Strategy = {
@@ -2364,6 +2314,10 @@ export const EventStreamWebhookBasicAuthMethodEnum = {
 export const EventStreamWebhookBearerAuthMethodEnum = {
     Bearer: "bearer",
 };
+/** Type of authorization. */
+export const EventStreamWebhookCustomHeaderAuthMethodEnum = {
+    CustomHeader: "custom_header",
+};
 export const EventStreamWebhookDestinationTypeEnum = {
     Webhook: "webhook",
 };
@@ -3358,7 +3312,6 @@ export const IdentityProviderEnum = {
     Apple: "apple",
     Dropbox: "dropbox",
     Bitbucket: "bitbucket",
-    Aol: "aol",
     Auth0Oidc: "auth0-oidc",
     Auth0: "auth0",
     Baidu: "baidu",
@@ -3373,7 +3326,6 @@ export const IdentityProviderEnum = {
     Exact: "exact",
     Facebook: "facebook",
     Fitbit: "fitbit",
-    Flickr: "flickr",
     Github: "github",
     GoogleApps: "google-apps",
     GoogleOauth2: "google-oauth2",
@@ -3381,7 +3333,6 @@ export const IdentityProviderEnum = {
     Ip: "ip",
     Line: "line",
     Linkedin: "linkedin",
-    Miicard: "miicard",
     Oauth1: "oauth1",
     Oauth2: "oauth2",
     Office365: "office365",
@@ -3391,7 +3342,6 @@ export const IdentityProviderEnum = {
     PaypalSandbox: "paypal-sandbox",
     Pingfederate: "pingfederate",
     Planningcenter: "planningcenter",
-    Renren: "renren",
     SalesforceCommunity: "salesforce-community",
     SalesforceSandbox: "salesforce-sandbox",
     Salesforce: "salesforce",
@@ -3401,8 +3351,6 @@ export const IdentityProviderEnum = {
     Shop: "shop",
     Sms: "sms",
     Soundcloud: "soundcloud",
-    ThecitySandbox: "thecity-sandbox",
-    Thecity: "thecity",
     Thirtysevensignals: "thirtysevensignals",
     Twitter: "twitter",
     Untappd: "untappd",
@@ -3412,7 +3360,6 @@ export const IdentityProviderEnum = {
     Windowslive: "windowslive",
     Wordpress: "wordpress",
     Yahoo: "yahoo",
-    Yammer: "yammer",
     Yandex: "yandex",
 };
 /** Identity provider name of the identity. Only `auth0` is supported */
@@ -3618,6 +3565,20 @@ export const NetworkAclRuleScopeEnum = {
     Tenant: "tenant",
     DynamicClientRegistration: "dynamic_client_registration",
 };
+/** Access level for the organization (e.g., "none", "full"). */
+export const OrganizationAccessLevelEnum = {
+    None: "none",
+    Readonly: "readonly",
+    Limited: "limited",
+    Full: "full",
+};
+/** Access level for the organization (e.g., "none", "full"). */
+export const OrganizationAccessLevelEnumWithNull = {
+    None: "none",
+    Readonly: "readonly",
+    Limited: "limited",
+    Full: "full",
+};
 /** The verification status of the discovery domain. */
 export const OrganizationDiscoveryDomainStatus = {
     Pending: "pending",
@@ -3641,6 +3602,37 @@ export const PartialGroupsEnum = {
     CustomizedConsent: "customized-consent",
     Passkeys: "passkeys",
 };
+export const PasswordCharacterTypeEnum = {
+    Uppercase: "uppercase",
+    Lowercase: "lowercase",
+    Number: "number",
+    Special: "special",
+};
+/** When enabled, passwords must contain at least 3 out of 4 character types. Can only be enabled when all 4 character types are specified */
+export const PasswordCharacterTypeRulePolicyEnum = {
+    All: "all",
+    ThreeOfFour: "three_of_four",
+};
+/** Default dictionary to use for password validation. Options: "en_10k" (10,000 common words) or "en_100k" (100,000 common words) */
+export const PasswordDefaultDictionariesEnum = {
+    En10K: "en_10k",
+    En100K: "en_100k",
+};
+/** Controls whether identical consecutive characters are allowed in passwords */
+export const PasswordIdenticalCharactersPolicyEnum = {
+    Allow: "allow",
+    Block: "block",
+};
+/** Controls whether passwords that exceed the maximum length are truncated or rejected */
+export const PasswordMaxLengthExceededPolicyEnum = {
+    Truncate: "truncate",
+    Error: "error",
+};
+/** Controls whether sequential characters are allowed in passwords */
+export const PasswordSequentialCharactersPolicyEnum = {
+    Allow: "allow",
+    Block: "block",
+};
 /** This depicts the type of notifications this provider can receive. */
 export const PhoneProviderChannelEnum = {
     Phone: "phone",
@@ -3798,6 +3790,7 @@ export const PromptLanguageEnum = {
     Zgh: "zgh",
     ZhCn: "zh-CN",
     ZhHk: "zh-HK",
+    ZhMo: "zh-MO",
     ZhTw: "zh-TW",
 };
 /** Algorithm which will be used with the credential. Can be one of RS256, RS384, PS256. If not specified, RS256 will be used. Applies to `public_key` credential type. */
@@ -4123,12 +4116,18 @@ export const SupportedLocales = {
     Zgh: "zgh",
     ZhCn: "zh-CN",
     ZhHk: "zh-HK",
+    ZhMo: "zh-MO",
     ZhTw: "zh-TW",
 };
 export const SuspiciousIpThrottlingShieldsEnum = {
     Block: "block",
     AdminNotification: "admin_notification",
 };
+/** Group synchronization configuration */
+export const SynchronizeGroupsEnum = {
+    All: "all",
+    Off: "off",
+};
 /** Character set used to generate a User Code. Can be `base20` or `digits`. */
 export const TenantSettingsDeviceFlowCharset = {
     Base20: "base20",
@@ -4220,6 +4219,7 @@ export const TenantSettingsSupportedLocalesEnum = {
     Zgh: "zgh",
     ZhCn: "zh-CN",
     ZhHk: "zh-HK",
+    ZhMo: "zh-MO",
     ZhTw: "zh-TW",
 };
 /** The type of the profile, which controls how the profile will be executed when receiving a token exchange request. */
@@ -4272,7 +4272,6 @@ export const UserIdentityProviderEnum = {
     Apple: "apple",
     Dropbox: "dropbox",
     Bitbucket: "bitbucket",
-    Aol: "aol",
     Auth0Oidc: "auth0-oidc",
     Auth0: "auth0",
     Baidu: "baidu",
@@ -4287,7 +4286,6 @@ export const UserIdentityProviderEnum = {
     Exact: "exact",
     Facebook: "facebook",
     Fitbit: "fitbit",
-    Flickr: "flickr",
     Github: "github",
     GoogleApps: "google-apps",
     GoogleOauth2: "google-oauth2",
@@ -4295,7 +4293,6 @@ export const UserIdentityProviderEnum = {
     Ip: "ip",
     Line: "line",
     Linkedin: "linkedin",
-    Miicard: "miicard",
     Oauth1: "oauth1",
     Oauth2: "oauth2",
     Office365: "office365",
@@ -4305,7 +4302,6 @@ export const UserIdentityProviderEnum = {
     PaypalSandbox: "paypal-sandbox",
     Pingfederate: "pingfederate",
     Planningcenter: "planningcenter",
-    Renren: "renren",
     SalesforceCommunity: "salesforce-community",
     SalesforceSandbox: "salesforce-sandbox",
     Salesforce: "salesforce",
@@ -4315,8 +4311,6 @@ export const UserIdentityProviderEnum = {
     Shop: "shop",
     Sms: "sms",
     Soundcloud: "soundcloud",
-    ThecitySandbox: "thecity-sandbox",
-    Thecity: "thecity",
     Thirtysevensignals: "thirtysevensignals",
     Twitter: "twitter",
     Untappd: "untappd",
@@ -4326,7 +4320,6 @@ export const UserIdentityProviderEnum = {
     Windowslive: "windowslive",
     Wordpress: "wordpress",
     Yahoo: "yahoo",
-    Yammer: "yammer",
     Yandex: "yandex",
 };
 /** The multi-factor provider. Supported values 'duo' or 'google-authenticator' */

package/dist/esm/management/core/auth/BasicAuth.d.mts

@@ -1,6 +1,6 @@
 export interface BasicAuth {
-    username: string;
-    password: string;
+    username?: string;
+    password?: string;
 }
 export declare const BasicAuth: {
     toAuthorizationHeader: (basicAuth: BasicAuth | undefined) => string | undefined;

package/dist/esm/management/core/auth/BasicAuth.mjs

@@ -2,10 +2,16 @@ import { base64Decode, base64Encode } from "../base64.mjs";
 const BASIC_AUTH_HEADER_PREFIX = /^Basic /i;
 export const BasicAuth = {
     toAuthorizationHeader: (basicAuth) => {
+        var _a, _b;
         if (basicAuth == null) {
             return undefined;
         }
-        const token = base64Encode(`${basicAuth.username}:${basicAuth.password}`);
+        const username = (_a = basicAuth.username) !== null && _a !== void 0 ? _a : "";
+        const password = (_b = basicAuth.password) !== null && _b !== void 0 ? _b : "";
+        if (username === "" && password === "") {
+            return undefined;
+        }
+        const token = base64Encode(`${username}:${password}`);
         return `Basic ${token}`;
     },
     fromAuthorizationHeader: (header) => {

package/dist/esm/management/core/fetcher/BinaryResponse.d.mts

@@ -14,6 +14,6 @@ export type BinaryResponse = {
      * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Request/bytes)
      * Some versions of the Fetch API may not support this method.
      */
-    bytes?(): ReturnType<Response["bytes"]>;
+    bytes?(): Promise<Uint8Array>;
 };
 export declare function getBinaryResponse(response: Response): BinaryResponse;

package/dist/esm/management/core/fetcher/Fetcher.d.mts

@@ -38,10 +38,12 @@ export declare namespace Fetcher {
     }
     interface TimeoutError {
         reason: "timeout";
+        cause?: unknown;
     }
     interface UnknownError {
         reason: "unknown";
         errorMessage: string;
+        cause?: unknown;
     }
 }
 export declare function fetcherImpl<R = unknown>(args: Fetcher.Args): Promise<APIResponse<R, Fetcher.Error>>;

package/dist/esm/management/core/fetcher/Fetcher.mjs

@@ -202,7 +202,7 @@ export function fetcherImpl(args) {
         }
         try {
             const response = yield requestWithRetries(() => __awaiter(this, void 0, void 0, function* () {
-                return makeRequest(fetchFn, url, args.method, headers, requestBody, args.timeoutMs, args.abortSignal, args.withCredentials, args.duplex);
+                return makeRequest(fetchFn, url, args.method, headers, requestBody, args.timeoutMs, args.abortSignal, args.withCredentials, args.duplex, args.responseType === "streaming" || args.responseType === "sse");
             }), args.maxRetries);
             if (response.status >= 200 && response.status < 400) {
                 if (logger.isDebug()) {
@@ -257,6 +257,7 @@ export function fetcherImpl(args) {
                     error: {
                         reason: "unknown",
                         errorMessage: "The user aborted a request",
+                        cause: error,
                     },
                     rawResponse: abortRawResponse,
                 };
@@ -274,6 +275,7 @@ export function fetcherImpl(args) {
                     ok: false,
                     error: {
                         reason: "timeout",
+                        cause: error,
                     },
                     rawResponse: abortRawResponse,
                 };
@@ -292,6 +294,7 @@ export function fetcherImpl(args) {
                     error: {
                         reason: "unknown",
                         errorMessage: error.message,
+                        cause: error,
                     },
                     rawResponse: unknownRawResponse,
                 };
@@ -309,6 +312,7 @@ export function fetcherImpl(args) {
                 error: {
                     reason: "unknown",
                     errorMessage: toJson(error),
+                    cause: error,
                 },
                 rawResponse: unknownRawResponse,
             };

package/dist/esm/management/core/fetcher/index.d.mts

@@ -6,6 +6,8 @@ export type { Fetcher, FetchFunction } from "./Fetcher.mjs";
 export { fetcher } from "./Fetcher.mjs";
 export { getHeader } from "./getHeader.mjs";
 export { HttpResponsePromise } from "./HttpResponsePromise.mjs";
+export type { PassthroughRequest } from "./makePassthroughRequest.mjs";
+export { makePassthroughRequest } from "./makePassthroughRequest.mjs";
 export type { RawResponse, WithRawResponse } from "./RawResponse.mjs";
 export { abortRawResponse, toRawResponse, unknownRawResponse } from "./RawResponse.mjs";
 export { Supplier } from "./Supplier.mjs";

package/dist/esm/management/core/fetcher/index.mjs

@@ -2,5 +2,6 @@ export { EndpointSupplier } from "./EndpointSupplier.mjs";
 export { fetcher } from "./Fetcher.mjs";
 export { getHeader } from "./getHeader.mjs";
 export { HttpResponsePromise } from "./HttpResponsePromise.mjs";
+export { makePassthroughRequest } from "./makePassthroughRequest.mjs";
 export { abortRawResponse, toRawResponse, unknownRawResponse } from "./RawResponse.mjs";
 export { Supplier } from "./Supplier.mjs";

package/dist/esm/management/core/fetcher/makePassthroughRequest.d.mts

@@ -0,0 +1,49 @@
+import { type LogConfig, type Logger } from "../logging/logger.mjs";
+import { Supplier } from "./Supplier.mjs";
+export declare namespace PassthroughRequest {
+    /**
+     * Per-request options that can override the SDK client defaults.
+     */
+    interface RequestOptions {
+        /** Override the default timeout for this request (in seconds). */
+        timeoutInSeconds?: number;
+        /** Override the default number of retries for this request. */
+        maxRetries?: number;
+        /** Additional headers to include in this request. */
+        headers?: Record<string, string>;
+        /** Abort signal for this request. */
+        abortSignal?: AbortSignal;
+    }
+    /**
+     * SDK client configuration used by the passthrough fetch method.
+     */
+    interface ClientOptions {
+        /** The base URL or environment for the client. */
+        environment?: Supplier<string>;
+        /** Override the base URL. */
+        baseUrl?: Supplier<string>;
+        /** Default headers to include in requests. */
+        headers?: Record<string, unknown>;
+        /** Default maximum time to wait for a response in seconds. */
+        timeoutInSeconds?: number;
+        /** Default number of times to retry the request. Defaults to 2. */
+        maxRetries?: number;
+        /** A custom fetch function. */
+        fetch?: typeof fetch;
+        /** Logging configuration. */
+        logging?: LogConfig | Logger;
+        /** A function that returns auth headers. */
+        getAuthHeaders?: () => Promise<Record<string, string>>;
+    }
+}
+/**
+ * Makes a passthrough HTTP request using the SDK's configuration (auth, retry, logging, etc.)
+ * while mimicking the standard `fetch` API.
+ *
+ * @param input - The URL, path, or Request object. If a relative path, it will be resolved against the configured base URL.
+ * @param init - Standard RequestInit options (method, headers, body, signal, etc.)
+ * @param clientOptions - SDK client options (auth, default headers, logging, etc.)
+ * @param requestOptions - Per-request overrides (timeout, retries, extra headers, abort signal).
+ * @returns A standard Response object.
+ */
+export declare function makePassthroughRequest(input: Request | string | URL, init: RequestInit | undefined, clientOptions: PassthroughRequest.ClientOptions, requestOptions?: PassthroughRequest.RequestOptions): Promise<Response>;