auth0 5.9.1 → 5.11.0

package/dist/esm/management/api/resources/organizations/resources/groups/resources/roles/client/Client.mjs

@@ -0,0 +1,236 @@
+// This file was auto-generated by Fern from our API Definition.
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { normalizeClientOptionsWithAuth, } from "../../../../../../../../BaseClient.mjs";
+import * as core from "../../../../../../../../core/index.mjs";
+import { mergeHeaders } from "../../../../../../../../core/headers.mjs";
+import * as environments from "../../../../../../../../environments.mjs";
+import { handleNonStatusCodeError } from "../../../../../../../../errors/handleNonStatusCodeError.mjs";
+import * as errors from "../../../../../../../../errors/index.mjs";
+import * as Management from "../../../../../../../index.mjs";
+export class RolesClient {
+    constructor(options) {
+        this._options = normalizeClientOptionsWithAuth(options);
+    }
+    /**
+     * Lists the roles assigned to the specified group in the context of an organization.
+     *
+     * @param {string} organization_id - ID of the organization
+     * @param {string} group_id - ID of the group
+     * @param {Management.ListOrganizationGroupRolesRequestParameters} request
+     * @param {RolesClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link Management.BadRequestError}
+     * @throws {@link Management.UnauthorizedError}
+     * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.TooManyRequestsError}
+     *
+     * @example
+     *     await client.organizations.groups.roles.list("organization_id", "group_id", {
+     *         from: "from",
+     *         take: 1
+     *     })
+     */
+    list(organization_id_1, group_id_1) {
+        return __awaiter(this, arguments, void 0, function* (organization_id, group_id, request = {}, requestOptions) {
+            const list = core.HttpResponsePromise.interceptFunction((request) => __awaiter(this, void 0, void 0, function* () {
+                var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k;
+                const { from: from_, take = 50 } = request;
+                const _queryParams = {
+                    from: from_,
+                    take,
+                };
+                const _authRequest = yield this._options.authProvider.getAuthRequest();
+                let _headers = mergeHeaders(_authRequest.headers, (_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
+                const _response = yield ((_b = this._options.fetcher) !== null && _b !== void 0 ? _b : core.fetcher)({
+                    url: core.url.join((_d = (_c = (yield core.Supplier.get(this._options.baseUrl))) !== null && _c !== void 0 ? _c : (yield core.Supplier.get(this._options.environment))) !== null && _d !== void 0 ? _d : environments.ManagementEnvironment.Default, `organizations/${core.url.encodePathParam(organization_id)}/groups/${core.url.encodePathParam(group_id)}/roles`),
+                    method: "GET",
+                    headers: _headers,
+                    queryString: core.url
+                        .queryBuilder()
+                        .addMany(_queryParams)
+                        .mergeAdditional(requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.queryParams)
+                        .build(),
+                    timeoutMs: ((_g = (_e = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.timeoutInSeconds) !== null && _e !== void 0 ? _e : (_f = this._options) === null || _f === void 0 ? void 0 : _f.timeoutInSeconds) !== null && _g !== void 0 ? _g : 60) * 1000,
+                    maxRetries: (_h = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.maxRetries) !== null && _h !== void 0 ? _h : (_j = this._options) === null || _j === void 0 ? void 0 : _j.maxRetries,
+                    abortSignal: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.abortSignal,
+                    fetchFn: (_k = this._options) === null || _k === void 0 ? void 0 : _k.fetch,
+                    logging: this._options.logging,
+                });
+                if (_response.ok) {
+                    return {
+                        data: _response.body,
+                        rawResponse: _response.rawResponse,
+                    };
+                }
+                if (_response.error.reason === "status-code") {
+                    switch (_response.error.statusCode) {
+                        case 400:
+                            throw new Management.BadRequestError(_response.error.body, _response.rawResponse);
+                        case 401:
+                            throw new Management.UnauthorizedError(_response.error.body, _response.rawResponse);
+                        case 403:
+                            throw new Management.ForbiddenError(_response.error.body, _response.rawResponse);
+                        case 429:
+                            throw new Management.TooManyRequestsError(_response.error.body, _response.rawResponse);
+                        default:
+                            throw new errors.ManagementError({
+                                statusCode: _response.error.statusCode,
+                                body: _response.error.body,
+                                rawResponse: _response.rawResponse,
+                            });
+                    }
+                }
+                return handleNonStatusCodeError(_response.error, _response.rawResponse, "GET", "/organizations/{organization_id}/groups/{group_id}/roles");
+            }));
+            const dataWithRawResponse = yield list(request).withRawResponse();
+            return new core.Page({
+                response: dataWithRawResponse.data,
+                rawResponse: dataWithRawResponse.rawResponse,
+                hasNextPage: (response) => (response === null || response === void 0 ? void 0 : response.next) != null && !(typeof (response === null || response === void 0 ? void 0 : response.next) === "string" && (response === null || response === void 0 ? void 0 : response.next) === ""),
+                getItems: (response) => { var _a; return (_a = response === null || response === void 0 ? void 0 : response.roles) !== null && _a !== void 0 ? _a : []; },
+                loadPage: (response) => {
+                    return list(core.setObjectProperty(request, "from", response === null || response === void 0 ? void 0 : response.next));
+                },
+            });
+        });
+    }
+    /**
+     * Assign one or more roles to a specified group in the context of an organization.
+     *
+     * @param {string} organization_id - ID of the organization
+     * @param {string} group_id - ID of the group
+     * @param {Management.CreateOrganizationGroupRolesRequestContent} request
+     * @param {RolesClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link Management.BadRequestError}
+     * @throws {@link Management.UnauthorizedError}
+     * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.ConflictError}
+     * @throws {@link Management.TooManyRequestsError}
+     *
+     * @example
+     *     await client.organizations.groups.roles.create("organization_id", "group_id", {
+     *         roles: ["roles"]
+     *     })
+     */
+    create(organization_id, group_id, request, requestOptions) {
+        return core.HttpResponsePromise.fromPromise(this.__create(organization_id, group_id, request, requestOptions));
+    }
+    __create(organization_id, group_id, request, requestOptions) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k;
+            const _authRequest = yield this._options.authProvider.getAuthRequest();
+            let _headers = mergeHeaders(_authRequest.headers, (_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
+            const _response = yield ((_b = this._options.fetcher) !== null && _b !== void 0 ? _b : core.fetcher)({
+                url: core.url.join((_d = (_c = (yield core.Supplier.get(this._options.baseUrl))) !== null && _c !== void 0 ? _c : (yield core.Supplier.get(this._options.environment))) !== null && _d !== void 0 ? _d : environments.ManagementEnvironment.Default, `organizations/${core.url.encodePathParam(organization_id)}/groups/${core.url.encodePathParam(group_id)}/roles`),
+                method: "POST",
+                headers: _headers,
+                contentType: "application/json",
+                queryString: core.url.queryBuilder().mergeAdditional(requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.queryParams).build(),
+                requestType: "json",
+                body: request,
+                timeoutMs: ((_g = (_e = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.timeoutInSeconds) !== null && _e !== void 0 ? _e : (_f = this._options) === null || _f === void 0 ? void 0 : _f.timeoutInSeconds) !== null && _g !== void 0 ? _g : 60) * 1000,
+                maxRetries: (_h = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.maxRetries) !== null && _h !== void 0 ? _h : (_j = this._options) === null || _j === void 0 ? void 0 : _j.maxRetries,
+                abortSignal: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.abortSignal,
+                fetchFn: (_k = this._options) === null || _k === void 0 ? void 0 : _k.fetch,
+                logging: this._options.logging,
+            });
+            if (_response.ok) {
+                return { data: undefined, rawResponse: _response.rawResponse };
+            }
+            if (_response.error.reason === "status-code") {
+                switch (_response.error.statusCode) {
+                    case 400:
+                        throw new Management.BadRequestError(_response.error.body, _response.rawResponse);
+                    case 401:
+                        throw new Management.UnauthorizedError(_response.error.body, _response.rawResponse);
+                    case 403:
+                        throw new Management.ForbiddenError(_response.error.body, _response.rawResponse);
+                    case 409:
+                        throw new Management.ConflictError(_response.error.body, _response.rawResponse);
+                    case 429:
+                        throw new Management.TooManyRequestsError(_response.error.body, _response.rawResponse);
+                    default:
+                        throw new errors.ManagementError({
+                            statusCode: _response.error.statusCode,
+                            body: _response.error.body,
+                            rawResponse: _response.rawResponse,
+                        });
+                }
+            }
+            return handleNonStatusCodeError(_response.error, _response.rawResponse, "POST", "/organizations/{organization_id}/groups/{group_id}/roles");
+        });
+    }
+    /**
+     * Unassign one or more roles from a specified group in the context of an organization.
+     *
+     * @param {string} organization_id - ID of the organization
+     * @param {string} group_id - ID of the group
+     * @param {Management.DeleteOrganizationGroupRolesRequestContent} request
+     * @param {RolesClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link Management.BadRequestError}
+     * @throws {@link Management.UnauthorizedError}
+     * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.TooManyRequestsError}
+     *
+     * @example
+     *     await client.organizations.groups.roles.delete("organization_id", "group_id", {
+     *         roles: ["roles"]
+     *     })
+     */
+    delete(organization_id, group_id, request, requestOptions) {
+        return core.HttpResponsePromise.fromPromise(this.__delete(organization_id, group_id, request, requestOptions));
+    }
+    __delete(organization_id, group_id, request, requestOptions) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k;
+            const _authRequest = yield this._options.authProvider.getAuthRequest();
+            let _headers = mergeHeaders(_authRequest.headers, (_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
+            const _response = yield ((_b = this._options.fetcher) !== null && _b !== void 0 ? _b : core.fetcher)({
+                url: core.url.join((_d = (_c = (yield core.Supplier.get(this._options.baseUrl))) !== null && _c !== void 0 ? _c : (yield core.Supplier.get(this._options.environment))) !== null && _d !== void 0 ? _d : environments.ManagementEnvironment.Default, `organizations/${core.url.encodePathParam(organization_id)}/groups/${core.url.encodePathParam(group_id)}/roles`),
+                method: "DELETE",
+                headers: _headers,
+                contentType: "application/json",
+                queryString: core.url.queryBuilder().mergeAdditional(requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.queryParams).build(),
+                requestType: "json",
+                body: request,
+                timeoutMs: ((_g = (_e = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.timeoutInSeconds) !== null && _e !== void 0 ? _e : (_f = this._options) === null || _f === void 0 ? void 0 : _f.timeoutInSeconds) !== null && _g !== void 0 ? _g : 60) * 1000,
+                maxRetries: (_h = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.maxRetries) !== null && _h !== void 0 ? _h : (_j = this._options) === null || _j === void 0 ? void 0 : _j.maxRetries,
+                abortSignal: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.abortSignal,
+                fetchFn: (_k = this._options) === null || _k === void 0 ? void 0 : _k.fetch,
+                logging: this._options.logging,
+            });
+            if (_response.ok) {
+                return { data: undefined, rawResponse: _response.rawResponse };
+            }
+            if (_response.error.reason === "status-code") {
+                switch (_response.error.statusCode) {
+                    case 400:
+                        throw new Management.BadRequestError(_response.error.body, _response.rawResponse);
+                    case 401:
+                        throw new Management.UnauthorizedError(_response.error.body, _response.rawResponse);
+                    case 403:
+                        throw new Management.ForbiddenError(_response.error.body, _response.rawResponse);
+                    case 429:
+                        throw new Management.TooManyRequestsError(_response.error.body, _response.rawResponse);
+                    default:
+                        throw new errors.ManagementError({
+                            statusCode: _response.error.statusCode,
+                            body: _response.error.body,
+                            rawResponse: _response.rawResponse,
+                        });
+                }
+            }
+            return handleNonStatusCodeError(_response.error, _response.rawResponse, "DELETE", "/organizations/{organization_id}/groups/{group_id}/roles");
+        });
+    }
+}

package/dist/esm/management/api/resources/organizations/resources/groups/resources/roles/client/index.d.mts

@@ -0,0 +1 @@
+export {};

package/dist/esm/management/api/resources/organizations/resources/groups/resources/roles/client/index.mjs

@@ -0,0 +1 @@
+export {};

package/dist/esm/management/api/resources/organizations/resources/groups/resources/roles/index.d.mts

@@ -0,0 +1 @@
+export * from "./client/index.mjs";

package/dist/esm/management/api/resources/organizations/resources/groups/resources/roles/index.mjs

@@ -0,0 +1 @@
+export * from "./client/index.mjs";

package/dist/esm/management/api/resources/organizations/resources/index.d.mts

@@ -2,5 +2,6 @@ export * as clientGrants from "./clientGrants/index.mjs";
 export * as connections from "./connections/index.mjs";
 export * as discoveryDomains from "./discoveryDomains/index.mjs";
 export * as enabledConnections from "./enabledConnections/index.mjs";
+export * as groups from "./groups/index.mjs";
 export * as invitations from "./invitations/index.mjs";
 export * as members from "./members/index.mjs";

package/dist/esm/management/api/resources/organizations/resources/index.mjs

@@ -2,5 +2,6 @@ export * as clientGrants from "./clientGrants/index.mjs";
 export * as connections from "./connections/index.mjs";
 export * as discoveryDomains from "./discoveryDomains/index.mjs";
 export * as enabledConnections from "./enabledConnections/index.mjs";
+export * as groups from "./groups/index.mjs";
 export * as invitations from "./invitations/index.mjs";
 export * as members from "./members/index.mjs";

package/dist/esm/management/api/resources/organizations/resources/invitations/client/Client.d.mts

@@ -11,7 +11,7 @@ export declare class InvitationsClient {
     protected readonly _options: NormalizedClientOptionsWithAuth<InvitationsClient.Options>;
     constructor(options: InvitationsClient.Options);
     /**
-     * Retrieve a detailed list of invitations sent to users for a specific Organization. The list includes details such as inviter and invitee information, invitation URLs, and dates of creation and expiration. To learn more about Organization invitations, review <a href="https://auth0.com/docs/manage-users/organizations/configure-organizations/invite-members">Invite Organization Members</a>.
+     * Retrieve a detailed list of invitations sent to users for a specific Organization. The list includes details such as inviter and invitee information, invitation URLs, and dates of creation and expiration. To learn more about Organization invitations, review [Invite Organization Members](https://auth0.com/docs/manage-users/organizations/configure-organizations/invite-members).
      *
      * @param {string} id - Organization identifier.
      * @param {Management.ListOrganizationInvitationsRequestParameters} request
@@ -35,7 +35,7 @@ export declare class InvitationsClient {
      */
     list(id: string, request?: Management.ListOrganizationInvitationsRequestParameters, requestOptions?: InvitationsClient.RequestOptions): Promise<core.Page<Management.OrganizationInvitation, Management.ListOrganizationInvitationsOffsetPaginatedResponseContent>>;
     /**
-     * Create a user invitation for a specific Organization. Upon creation, the listed user receives an email inviting them to join the Organization. To learn more about Organization invitations, review <a href="https://auth0.com/docs/manage-users/organizations/configure-organizations/invite-members">Invite Organization Members</a>.
+     * Create a user invitation for a specific Organization. Upon creation, the listed user receives an email inviting them to join the Organization. To learn more about Organization invitations, review [Invite Organization Members](https://auth0.com/docs/manage-users/organizations/configure-organizations/invite-members).
      *
      * @param {string} id - Organization identifier.
      * @param {Management.CreateOrganizationInvitationRequestContent} request

package/dist/esm/management/api/resources/organizations/resources/invitations/client/Client.mjs

@@ -20,7 +20,7 @@ export class InvitationsClient {
         this._options = normalizeClientOptionsWithAuth(options);
     }
     /**
-     * Retrieve a detailed list of invitations sent to users for a specific Organization. The list includes details such as inviter and invitee information, invitation URLs, and dates of creation and expiration. To learn more about Organization invitations, review <a href="https://auth0.com/docs/manage-users/organizations/configure-organizations/invite-members">Invite Organization Members</a>.
+     * Retrieve a detailed list of invitations sent to users for a specific Organization. The list includes details such as inviter and invitee information, invitation URLs, and dates of creation and expiration. To learn more about Organization invitations, review [Invite Organization Members](https://auth0.com/docs/manage-users/organizations/configure-organizations/invite-members).
      *
      * @param {string} id - Organization identifier.
      * @param {Management.ListOrganizationInvitationsRequestParameters} request
@@ -115,7 +115,7 @@ export class InvitationsClient {
         });
     }
     /**
-     * Create a user invitation for a specific Organization. Upon creation, the listed user receives an email inviting them to join the Organization. To learn more about Organization invitations, review <a href="https://auth0.com/docs/manage-users/organizations/configure-organizations/invite-members">Invite Organization Members</a>.
+     * Create a user invitation for a specific Organization. Upon creation, the listed user receives an email inviting them to join the Organization. To learn more about Organization invitations, review [Invite Organization Members](https://auth0.com/docs/manage-users/organizations/configure-organizations/invite-members).
      *
      * @param {string} id - Organization identifier.
      * @param {Management.CreateOrganizationInvitationRequestContent} request

package/dist/esm/management/api/resources/organizations/resources/members/client/Client.d.mts

@@ -2,6 +2,7 @@ import type { BaseClientOptions, BaseRequestOptions } from "../../../../../../Ba
 import { type NormalizedClientOptionsWithAuth } from "../../../../../../BaseClient.mjs";
 import * as core from "../../../../../../core/index.mjs";
 import * as Management from "../../../../../index.mjs";
+import { EffectiveRolesClient } from "../resources/effectiveRoles/client/Client.mjs";
 import { RolesClient } from "../resources/roles/client/Client.mjs";
 export declare namespace MembersClient {
     type Options = BaseClientOptions;
@@ -10,21 +11,17 @@ export declare namespace MembersClient {
 }
 export declare class MembersClient {
     protected readonly _options: NormalizedClientOptionsWithAuth<MembersClient.Options>;
+    protected _effectiveRoles: EffectiveRolesClient | undefined;
     protected _roles: RolesClient | undefined;
     constructor(options: MembersClient.Options);
+    get effectiveRoles(): EffectiveRolesClient;
     get roles(): RolesClient;
     /**
      * List organization members.
      * This endpoint is subject to eventual consistency. New users may not be immediately included in the response and deleted users may not be immediately removed from it.
      *
-     * <ul>
-     *   <li>
-     *     Use the <code>fields</code> parameter to optionally define the specific member details retrieved. If <code>fields</code> is left blank, all fields (except roles) are returned.
-     *   </li>
-     *   <li>
-     *     Member roles are not sent by default. Use <code>fields=roles</code> to retrieve the roles assigned to each listed member. To use this parameter, you must include the <code>read:organization_member_roles</code> scope in the token.
-     *   </li>
-     * </ul>
+     * - Use the `fields` parameter to optionally define the specific member details retrieved. If `fields` is left blank, all fields (except roles) are returned.
+     * - Member roles are not sent by default. Use `fields=roles` to retrieve the roles assigned to each listed member. To use this parameter, you must include the `read:organization_member_roles` scope in the token.
      *
      * This endpoint supports two types of pagination:
      *
@@ -33,9 +30,9 @@ export declare class MembersClient {
      *
      * Checkpoint pagination must be used if you need to retrieve more than 1000 organization members.
      *
-     * <h2>Checkpoint Pagination</h2>
+     * **Checkpoint Pagination**
      *
-     * To search by checkpoint, use the following parameters: - from: Optional id from which to start selection. - take: The total amount of entries to retrieve when using the from parameter. Defaults to 50. Note: The first time you call this endpoint using Checkpoint Pagination, you should omit the <code>from</code> parameter. If there are more results, a <code>next</code> value will be included in the response. You can use this for subsequent API calls. When <code>next</code> is no longer included in the response, this indicates there are no more pages remaining.
+     * To search by checkpoint, use the following parameters: - from: Optional id from which to start selection. - take: The total amount of entries to retrieve when using the from parameter. Defaults to 50. Note: The first time you call this endpoint using Checkpoint Pagination, you should omit the `from` parameter. If there are more results, a `next` value will be included in the response. You can use this for subsequent API calls. When `next` is no longer included in the response, this indicates there are no more pages remaining.
      *
      * @param {string} id - Organization identifier.
      * @param {Management.ListOrganizationMembersRequestParameters} request
@@ -56,9 +53,9 @@ export declare class MembersClient {
      */
     list(id: string, request?: Management.ListOrganizationMembersRequestParameters, requestOptions?: MembersClient.RequestOptions): Promise<core.Page<Management.OrganizationMember, Management.ListOrganizationMembersPaginatedResponseContent>>;
     /**
-     * Set one or more existing users as members of a specific <a href="https://auth0.com/docs/manage-users/organizations">Organization</a>.
+     * Set one or more existing users as members of a specific [Organization](https://auth0.com/docs/manage-users/organizations).
      *
-     * To add a user to an Organization through this action, the user must already exist in your tenant. If a user does not yet exist, you can <a href="https://auth0.com/docs/manage-users/organizations/configure-organizations/invite-members">invite them to create an account</a>, manually create them through the Auth0 Dashboard, or use the Management API.
+     * To add a user to an Organization through this action, the user must already exist in your tenant. If a user does not yet exist, you can [invite them to create an account](https://auth0.com/docs/manage-users/organizations/configure-organizations/invite-members), manually create them through the Auth0 Dashboard, or use the Management API.
      *
      * @param {string} id - Organization identifier.
      * @param {Management.CreateOrganizationMemberRequestContent} request

package/dist/esm/management/api/resources/organizations/resources/members/client/Client.mjs

@@ -15,11 +15,16 @@ import * as environments from "../../../../../../environments.mjs";
 import { handleNonStatusCodeError } from "../../../../../../errors/handleNonStatusCodeError.mjs";
 import * as errors from "../../../../../../errors/index.mjs";
 import * as Management from "../../../../../index.mjs";
+import { EffectiveRolesClient } from "../resources/effectiveRoles/client/Client.mjs";
 import { RolesClient } from "../resources/roles/client/Client.mjs";
 export class MembersClient {
     constructor(options) {
         this._options = normalizeClientOptionsWithAuth(options);
     }
+    get effectiveRoles() {
+        var _a;
+        return ((_a = this._effectiveRoles) !== null && _a !== void 0 ? _a : (this._effectiveRoles = new EffectiveRolesClient(this._options)));
+    }
     get roles() {
         var _a;
         return ((_a = this._roles) !== null && _a !== void 0 ? _a : (this._roles = new RolesClient(this._options)));
@@ -28,14 +33,8 @@ export class MembersClient {
      * List organization members.
      * This endpoint is subject to eventual consistency. New users may not be immediately included in the response and deleted users may not be immediately removed from it.
      *
-     * <ul>
-     *   <li>
-     *     Use the <code>fields</code> parameter to optionally define the specific member details retrieved. If <code>fields</code> is left blank, all fields (except roles) are returned.
-     *   </li>
-     *   <li>
-     *     Member roles are not sent by default. Use <code>fields=roles</code> to retrieve the roles assigned to each listed member. To use this parameter, you must include the <code>read:organization_member_roles</code> scope in the token.
-     *   </li>
-     * </ul>
+     * - Use the `fields` parameter to optionally define the specific member details retrieved. If `fields` is left blank, all fields (except roles) are returned.
+     * - Member roles are not sent by default. Use `fields=roles` to retrieve the roles assigned to each listed member. To use this parameter, you must include the `read:organization_member_roles` scope in the token.
      *
      * This endpoint supports two types of pagination:
      *
@@ -44,9 +43,9 @@ export class MembersClient {
      *
      * Checkpoint pagination must be used if you need to retrieve more than 1000 organization members.
      *
-     * <h2>Checkpoint Pagination</h2>
+     * **Checkpoint Pagination**
      *
-     * To search by checkpoint, use the following parameters: - from: Optional id from which to start selection. - take: The total amount of entries to retrieve when using the from parameter. Defaults to 50. Note: The first time you call this endpoint using Checkpoint Pagination, you should omit the <code>from</code> parameter. If there are more results, a <code>next</code> value will be included in the response. You can use this for subsequent API calls. When <code>next</code> is no longer included in the response, this indicates there are no more pages remaining.
+     * To search by checkpoint, use the following parameters: - from: Optional id from which to start selection. - take: The total amount of entries to retrieve when using the from parameter. Defaults to 50. Note: The first time you call this endpoint using Checkpoint Pagination, you should omit the `from` parameter. If there are more results, a `next` value will be included in the response. You can use this for subsequent API calls. When `next` is no longer included in the response, this indicates there are no more pages remaining.
      *
      * @param {string} id - Organization identifier.
      * @param {Management.ListOrganizationMembersRequestParameters} request
@@ -132,9 +131,9 @@ export class MembersClient {
         });
     }
     /**
-     * Set one or more existing users as members of a specific <a href="https://auth0.com/docs/manage-users/organizations">Organization</a>.
+     * Set one or more existing users as members of a specific [Organization](https://auth0.com/docs/manage-users/organizations).
      *
-     * To add a user to an Organization through this action, the user must already exist in your tenant. If a user does not yet exist, you can <a href="https://auth0.com/docs/manage-users/organizations/configure-organizations/invite-members">invite them to create an account</a>, manually create them through the Auth0 Dashboard, or use the Management API.
+     * To add a user to an Organization through this action, the user must already exist in your tenant. If a user does not yet exist, you can [invite them to create an account](https://auth0.com/docs/manage-users/organizations/configure-organizations/invite-members), manually create them through the Auth0 Dashboard, or use the Management API.
      *
      * @param {string} id - Organization identifier.
      * @param {Management.CreateOrganizationMemberRequestContent} request

package/dist/esm/management/api/resources/organizations/resources/members/resources/effectiveRoles/client/Client.d.mts

@@ -0,0 +1,36 @@
+import type { BaseClientOptions, BaseRequestOptions } from "../../../../../../../../BaseClient.mjs";
+import { type NormalizedClientOptionsWithAuth } from "../../../../../../../../BaseClient.mjs";
+import * as core from "../../../../../../../../core/index.mjs";
+import * as Management from "../../../../../../../index.mjs";
+import { SourcesClient } from "../resources/sources/client/Client.mjs";
+export declare namespace EffectiveRolesClient {
+    type Options = BaseClientOptions;
+    interface RequestOptions extends BaseRequestOptions {
+    }
+}
+export declare class EffectiveRolesClient {
+    protected readonly _options: NormalizedClientOptionsWithAuth<EffectiveRolesClient.Options>;
+    protected _sources: SourcesClient | undefined;
+    constructor(options: EffectiveRolesClient.Options);
+    get sources(): SourcesClient;
+    /**
+     * Lists the roles assigned to an organization member directly or through group membership.
+     *
+     * @param {string} id - Organization identifier.
+     * @param {string} user_id - ID of the user to list effective roles for.
+     * @param {Management.ListOrganizationMemberEffectiveRolesRequestParameters} request
+     * @param {EffectiveRolesClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link Management.BadRequestError}
+     * @throws {@link Management.UnauthorizedError}
+     * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.TooManyRequestsError}
+     *
+     * @example
+     *     await client.organizations.members.effectiveRoles.list("id", "user_id", {
+     *         from: "from",
+     *         take: 1
+     *     })
+     */
+    list(id: string, user_id: string, request?: Management.ListOrganizationMemberEffectiveRolesRequestParameters, requestOptions?: EffectiveRolesClient.RequestOptions): Promise<core.Page<Management.OrganizationMemberEffectiveRole, Management.ListOrganizationMemberEffectiveRolesResponseContent>>;
+}

package/dist/esm/management/api/resources/organizations/resources/members/resources/effectiveRoles/client/Client.mjs

@@ -0,0 +1,110 @@
+// This file was auto-generated by Fern from our API Definition.
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { normalizeClientOptionsWithAuth, } from "../../../../../../../../BaseClient.mjs";
+import * as core from "../../../../../../../../core/index.mjs";
+import { mergeHeaders } from "../../../../../../../../core/headers.mjs";
+import * as environments from "../../../../../../../../environments.mjs";
+import { handleNonStatusCodeError } from "../../../../../../../../errors/handleNonStatusCodeError.mjs";
+import * as errors from "../../../../../../../../errors/index.mjs";
+import * as Management from "../../../../../../../index.mjs";
+import { SourcesClient } from "../resources/sources/client/Client.mjs";
+export class EffectiveRolesClient {
+    constructor(options) {
+        this._options = normalizeClientOptionsWithAuth(options);
+    }
+    get sources() {
+        var _a;
+        return ((_a = this._sources) !== null && _a !== void 0 ? _a : (this._sources = new SourcesClient(this._options)));
+    }
+    /**
+     * Lists the roles assigned to an organization member directly or through group membership.
+     *
+     * @param {string} id - Organization identifier.
+     * @param {string} user_id - ID of the user to list effective roles for.
+     * @param {Management.ListOrganizationMemberEffectiveRolesRequestParameters} request
+     * @param {EffectiveRolesClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link Management.BadRequestError}
+     * @throws {@link Management.UnauthorizedError}
+     * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.TooManyRequestsError}
+     *
+     * @example
+     *     await client.organizations.members.effectiveRoles.list("id", "user_id", {
+     *         from: "from",
+     *         take: 1
+     *     })
+     */
+    list(id_1, user_id_1) {
+        return __awaiter(this, arguments, void 0, function* (id, user_id, request = {}, requestOptions) {
+            const list = core.HttpResponsePromise.interceptFunction((request) => __awaiter(this, void 0, void 0, function* () {
+                var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k;
+                const { from: from_, take = 50 } = request;
+                const _queryParams = {
+                    from: from_,
+                    take,
+                };
+                const _authRequest = yield this._options.authProvider.getAuthRequest();
+                let _headers = mergeHeaders(_authRequest.headers, (_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
+                const _response = yield ((_b = this._options.fetcher) !== null && _b !== void 0 ? _b : core.fetcher)({
+                    url: core.url.join((_d = (_c = (yield core.Supplier.get(this._options.baseUrl))) !== null && _c !== void 0 ? _c : (yield core.Supplier.get(this._options.environment))) !== null && _d !== void 0 ? _d : environments.ManagementEnvironment.Default, `organizations/${core.url.encodePathParam(id)}/members/${core.url.encodePathParam(user_id)}/effective-roles`),
+                    method: "GET",
+                    headers: _headers,
+                    queryString: core.url
+                        .queryBuilder()
+                        .addMany(_queryParams)
+                        .mergeAdditional(requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.queryParams)
+                        .build(),
+                    timeoutMs: ((_g = (_e = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.timeoutInSeconds) !== null && _e !== void 0 ? _e : (_f = this._options) === null || _f === void 0 ? void 0 : _f.timeoutInSeconds) !== null && _g !== void 0 ? _g : 60) * 1000,
+                    maxRetries: (_h = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.maxRetries) !== null && _h !== void 0 ? _h : (_j = this._options) === null || _j === void 0 ? void 0 : _j.maxRetries,
+                    abortSignal: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.abortSignal,
+                    fetchFn: (_k = this._options) === null || _k === void 0 ? void 0 : _k.fetch,
+                    logging: this._options.logging,
+                });
+                if (_response.ok) {
+                    return {
+                        data: _response.body,
+                        rawResponse: _response.rawResponse,
+                    };
+                }
+                if (_response.error.reason === "status-code") {
+                    switch (_response.error.statusCode) {
+                        case 400:
+                            throw new Management.BadRequestError(_response.error.body, _response.rawResponse);
+                        case 401:
+                            throw new Management.UnauthorizedError(_response.error.body, _response.rawResponse);
+                        case 403:
+                            throw new Management.ForbiddenError(_response.error.body, _response.rawResponse);
+                        case 429:
+                            throw new Management.TooManyRequestsError(_response.error.body, _response.rawResponse);
+                        default:
+                            throw new errors.ManagementError({
+                                statusCode: _response.error.statusCode,
+                                body: _response.error.body,
+                                rawResponse: _response.rawResponse,
+                            });
+                    }
+                }
+                return handleNonStatusCodeError(_response.error, _response.rawResponse, "GET", "/organizations/{id}/members/{user_id}/effective-roles");
+            }));
+            const dataWithRawResponse = yield list(request).withRawResponse();
+            return new core.Page({
+                response: dataWithRawResponse.data,
+                rawResponse: dataWithRawResponse.rawResponse,
+                hasNextPage: (response) => (response === null || response === void 0 ? void 0 : response.next) != null && !(typeof (response === null || response === void 0 ? void 0 : response.next) === "string" && (response === null || response === void 0 ? void 0 : response.next) === ""),
+                getItems: (response) => { var _a; return (_a = response === null || response === void 0 ? void 0 : response.roles) !== null && _a !== void 0 ? _a : []; },
+                loadPage: (response) => {
+                    return list(core.setObjectProperty(request, "from", response === null || response === void 0 ? void 0 : response.next));
+                },
+            });
+        });
+    }
+}

package/dist/esm/management/api/resources/organizations/resources/members/resources/effectiveRoles/client/index.d.mts

@@ -0,0 +1 @@
+export {};

package/dist/esm/management/api/resources/organizations/resources/members/resources/effectiveRoles/client/index.mjs

@@ -0,0 +1 @@
+export {};

package/dist/esm/management/api/resources/organizations/resources/members/resources/effectiveRoles/index.d.mts

@@ -0,0 +1,2 @@
+export * from "./client/index.mjs";
+export * from "./resources/index.mjs";

package/dist/esm/management/api/resources/organizations/resources/members/resources/effectiveRoles/index.mjs

@@ -0,0 +1,2 @@
+export * from "./client/index.mjs";
+export * from "./resources/index.mjs";

package/dist/esm/management/api/resources/organizations/resources/members/resources/effectiveRoles/resources/index.d.mts

@@ -0,0 +1 @@
+export * as sources from "./sources/index.mjs";

package/dist/esm/management/api/resources/organizations/resources/members/resources/effectiveRoles/resources/index.mjs

@@ -0,0 +1 @@
+export * as sources from "./sources/index.mjs";

package/dist/esm/management/api/resources/organizations/resources/members/resources/effectiveRoles/resources/sources/client/Client.d.mts

@@ -0,0 +1,12 @@
+import type { BaseClientOptions } from "../../../../../../../../../../BaseClient.mjs";
+import { type NormalizedClientOptionsWithAuth } from "../../../../../../../../../../BaseClient.mjs";
+import { GroupsClient } from "../resources/groups/client/Client.mjs";
+export declare namespace SourcesClient {
+    type Options = BaseClientOptions;
+}
+export declare class SourcesClient {
+    protected readonly _options: NormalizedClientOptionsWithAuth<SourcesClient.Options>;
+    protected _groups: GroupsClient | undefined;
+    constructor(options: SourcesClient.Options);
+    get groups(): GroupsClient;
+}

package/dist/esm/management/api/resources/organizations/resources/members/resources/effectiveRoles/resources/sources/client/Client.mjs

@@ -0,0 +1,12 @@
+// This file was auto-generated by Fern from our API Definition.
+import { normalizeClientOptionsWithAuth, } from "../../../../../../../../../../BaseClient.mjs";
+import { GroupsClient } from "../resources/groups/client/Client.mjs";
+export class SourcesClient {
+    constructor(options) {
+        this._options = normalizeClientOptionsWithAuth(options);
+    }
+    get groups() {
+        var _a;
+        return ((_a = this._groups) !== null && _a !== void 0 ? _a : (this._groups = new GroupsClient(this._options)));
+    }
+}