auth0 7.0.0 → 7.1.0

package/dist/cjs/management/Client.d.ts

@@ -13,6 +13,7 @@ import { EmailsClient } from "./api/resources/emails/client/Client.js";
 import { EmailTemplatesClient } from "./api/resources/emailTemplates/client/Client.js";
 import { EventsClient } from "./api/resources/events/client/Client.js";
 import { EventStreamsClient } from "./api/resources/eventStreams/client/Client.js";
+import { ExperimentationClient } from "./api/resources/experimentation/client/Client.js";
 import { FlowsClient } from "./api/resources/flows/client/Client.js";
 import { FormsClient } from "./api/resources/forms/client/Client.js";
 import { GroupsClient } from "./api/resources/groups/client/Client.js";
@@ -24,7 +25,6 @@ import { LogsClient } from "./api/resources/logs/client/Client.js";
 import { LogStreamsClient } from "./api/resources/logStreams/client/Client.js";
 import { NetworkAclsClient } from "./api/resources/networkAcls/client/Client.js";
 import { OrganizationsClient } from "./api/resources/organizations/client/Client.js";
-import { OrganizationTemplatesClient } from "./api/resources/organizationTemplates/client/Client.js";
 import { PromptsClient } from "./api/resources/prompts/client/Client.js";
 import { RateLimitPoliciesClient } from "./api/resources/rateLimitPolicies/client/Client.js";
 import { RefreshTokensClient } from "./api/resources/refreshTokens/client/Client.js";
@@ -71,12 +71,12 @@ export declare class ManagementClient {
     protected _forms: FormsClient | undefined;
     protected _userGrants: UserGrantsClient | undefined;
     protected _groups: GroupsClient | undefined;
+    protected _guardian: GuardianClient | undefined;
     protected _hooks: HooksClient | undefined;
     protected _jobs: JobsClient | undefined;
     protected _logStreams: LogStreamsClient | undefined;
     protected _logs: LogsClient | undefined;
     protected _networkAcls: NetworkAclsClient | undefined;
-    protected _organizationTemplates: OrganizationTemplatesClient | undefined;
     protected _organizations: OrganizationsClient | undefined;
     protected _prompts: PromptsClient | undefined;
     protected _rateLimitPolicies: RateLimitPoliciesClient | undefined;
@@ -97,7 +97,7 @@ export declare class ManagementClient {
     protected _anomaly: AnomalyClient | undefined;
     protected _attackProtection: AttackProtectionClient | undefined;
     protected _emails: EmailsClient | undefined;
-    protected _guardian: GuardianClient | undefined;
+    protected _experimentation: ExperimentationClient | undefined;
     protected _keys: KeysClient | undefined;
     protected _riskAssessments: RiskAssessmentsClient | undefined;
     protected _tenants: TenantsClient | undefined;
@@ -119,12 +119,12 @@ export declare class ManagementClient {
     get forms(): FormsClient;
     get userGrants(): UserGrantsClient;
     get groups(): GroupsClient;
+    get guardian(): GuardianClient;
     get hooks(): HooksClient;
     get jobs(): JobsClient;
     get logStreams(): LogStreamsClient;
     get logs(): LogsClient;
     get networkAcls(): NetworkAclsClient;
-    get organizationTemplates(): OrganizationTemplatesClient;
     get organizations(): OrganizationsClient;
     get prompts(): PromptsClient;
     get rateLimitPolicies(): RateLimitPoliciesClient;
@@ -145,7 +145,7 @@ export declare class ManagementClient {
     get anomaly(): AnomalyClient;
     get attackProtection(): AttackProtectionClient;
     get emails(): EmailsClient;
-    get guardian(): GuardianClient;
+    get experimentation(): ExperimentationClient;
     get keys(): KeysClient;
     get riskAssessments(): RiskAssessmentsClient;
     get tenants(): TenantsClient;

package/dist/cjs/management/Client.js

@@ -59,18 +59,18 @@ const Client_js_12 = require("./api/resources/emails/client/Client.js");
 const Client_js_13 = require("./api/resources/emailTemplates/client/Client.js");
 const Client_js_14 = require("./api/resources/events/client/Client.js");
 const Client_js_15 = require("./api/resources/eventStreams/client/Client.js");
-const Client_js_16 = require("./api/resources/flows/client/Client.js");
-const Client_js_17 = require("./api/resources/forms/client/Client.js");
-const Client_js_18 = require("./api/resources/groups/client/Client.js");
-const Client_js_19 = require("./api/resources/guardian/client/Client.js");
-const Client_js_20 = require("./api/resources/hooks/client/Client.js");
-const Client_js_21 = require("./api/resources/jobs/client/Client.js");
-const Client_js_22 = require("./api/resources/keys/client/Client.js");
-const Client_js_23 = require("./api/resources/logs/client/Client.js");
-const Client_js_24 = require("./api/resources/logStreams/client/Client.js");
-const Client_js_25 = require("./api/resources/networkAcls/client/Client.js");
-const Client_js_26 = require("./api/resources/organizations/client/Client.js");
-const Client_js_27 = require("./api/resources/organizationTemplates/client/Client.js");
+const Client_js_16 = require("./api/resources/experimentation/client/Client.js");
+const Client_js_17 = require("./api/resources/flows/client/Client.js");
+const Client_js_18 = require("./api/resources/forms/client/Client.js");
+const Client_js_19 = require("./api/resources/groups/client/Client.js");
+const Client_js_20 = require("./api/resources/guardian/client/Client.js");
+const Client_js_21 = require("./api/resources/hooks/client/Client.js");
+const Client_js_22 = require("./api/resources/jobs/client/Client.js");
+const Client_js_23 = require("./api/resources/keys/client/Client.js");
+const Client_js_24 = require("./api/resources/logs/client/Client.js");
+const Client_js_25 = require("./api/resources/logStreams/client/Client.js");
+const Client_js_26 = require("./api/resources/networkAcls/client/Client.js");
+const Client_js_27 = require("./api/resources/organizations/client/Client.js");
 const Client_js_28 = require("./api/resources/prompts/client/Client.js");
 const Client_js_29 = require("./api/resources/rateLimitPolicies/client/Client.js");
 const Client_js_30 = require("./api/resources/refreshTokens/client/Client.js");
@@ -147,11 +147,11 @@ class ManagementClient {
     }
     get flows() {
         var _a;
-        return ((_a = this._flows) !== null && _a !== void 0 ? _a : (this._flows = new Client_js_16.FlowsClient(this._options)));
+        return ((_a = this._flows) !== null && _a !== void 0 ? _a : (this._flows = new Client_js_17.FlowsClient(this._options)));
     }
     get forms() {
         var _a;
-        return ((_a = this._forms) !== null && _a !== void 0 ? _a : (this._forms = new Client_js_17.FormsClient(this._options)));
+        return ((_a = this._forms) !== null && _a !== void 0 ? _a : (this._forms = new Client_js_18.FormsClient(this._options)));
     }
     get userGrants() {
         var _a;
@@ -159,35 +159,35 @@ class ManagementClient {
     }
     get groups() {
         var _a;
-        return ((_a = this._groups) !== null && _a !== void 0 ? _a : (this._groups = new Client_js_18.GroupsClient(this._options)));
+        return ((_a = this._groups) !== null && _a !== void 0 ? _a : (this._groups = new Client_js_19.GroupsClient(this._options)));
+    }
+    get guardian() {
+        var _a;
+        return ((_a = this._guardian) !== null && _a !== void 0 ? _a : (this._guardian = new Client_js_20.GuardianClient(this._options)));
     }
     get hooks() {
         var _a;
-        return ((_a = this._hooks) !== null && _a !== void 0 ? _a : (this._hooks = new Client_js_20.HooksClient(this._options)));
+        return ((_a = this._hooks) !== null && _a !== void 0 ? _a : (this._hooks = new Client_js_21.HooksClient(this._options)));
     }
     get jobs() {
         var _a;
-        return ((_a = this._jobs) !== null && _a !== void 0 ? _a : (this._jobs = new Client_js_21.JobsClient(this._options)));
+        return ((_a = this._jobs) !== null && _a !== void 0 ? _a : (this._jobs = new Client_js_22.JobsClient(this._options)));
     }
     get logStreams() {
         var _a;
-        return ((_a = this._logStreams) !== null && _a !== void 0 ? _a : (this._logStreams = new Client_js_24.LogStreamsClient(this._options)));
+        return ((_a = this._logStreams) !== null && _a !== void 0 ? _a : (this._logStreams = new Client_js_25.LogStreamsClient(this._options)));
     }
     get logs() {
         var _a;
-        return ((_a = this._logs) !== null && _a !== void 0 ? _a : (this._logs = new Client_js_23.LogsClient(this._options)));
+        return ((_a = this._logs) !== null && _a !== void 0 ? _a : (this._logs = new Client_js_24.LogsClient(this._options)));
     }
     get networkAcls() {
         var _a;
-        return ((_a = this._networkAcls) !== null && _a !== void 0 ? _a : (this._networkAcls = new Client_js_25.NetworkAclsClient(this._options)));
-    }
-    get organizationTemplates() {
-        var _a;
-        return ((_a = this._organizationTemplates) !== null && _a !== void 0 ? _a : (this._organizationTemplates = new Client_js_27.OrganizationTemplatesClient(this._options)));
+        return ((_a = this._networkAcls) !== null && _a !== void 0 ? _a : (this._networkAcls = new Client_js_26.NetworkAclsClient(this._options)));
     }
     get organizations() {
         var _a;
-        return ((_a = this._organizations) !== null && _a !== void 0 ? _a : (this._organizations = new Client_js_26.OrganizationsClient(this._options)));
+        return ((_a = this._organizations) !== null && _a !== void 0 ? _a : (this._organizations = new Client_js_27.OrganizationsClient(this._options)));
     }
     get prompts() {
         var _a;
@@ -265,13 +265,13 @@ class ManagementClient {
         var _a;
         return ((_a = this._emails) !== null && _a !== void 0 ? _a : (this._emails = new Client_js_12.EmailsClient(this._options)));
     }
-    get guardian() {
+    get experimentation() {
         var _a;
-        return ((_a = this._guardian) !== null && _a !== void 0 ? _a : (this._guardian = new Client_js_19.GuardianClient(this._options)));
+        return ((_a = this._experimentation) !== null && _a !== void 0 ? _a : (this._experimentation = new Client_js_16.ExperimentationClient(this._options)));
     }
     get keys() {
         var _a;
-        return ((_a = this._keys) !== null && _a !== void 0 ? _a : (this._keys = new Client_js_22.KeysClient(this._options)));
+        return ((_a = this._keys) !== null && _a !== void 0 ? _a : (this._keys = new Client_js_23.KeysClient(this._options)));
     }
     get riskAssessments() {
         var _a;

package/dist/cjs/management/api/errors/GatewayTimeoutError.d.ts

@@ -0,0 +1,5 @@
+import * as core from "../../core/index.js";
+import * as errors from "../../errors/index.js";
+export declare class GatewayTimeoutError extends errors.ManagementError {
+    constructor(body?: unknown, rawResponse?: core.RawResponse);
+}

package/dist/cjs/management/api/errors/GatewayTimeoutError.js

@@ -0,0 +1,54 @@
+"use strict";
+// This file was auto-generated by Fern from our API Definition.
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GatewayTimeoutError = void 0;
+const errors = __importStar(require("../../errors/index.js"));
+class GatewayTimeoutError extends errors.ManagementError {
+    constructor(body, rawResponse) {
+        super({
+            message: "GatewayTimeoutError",
+            statusCode: 504,
+            body: body,
+            rawResponse: rawResponse,
+        });
+        Object.setPrototypeOf(this, new.target.prototype);
+        if (Error.captureStackTrace) {
+            Error.captureStackTrace(this, this.constructor);
+        }
+        this.name = "GatewayTimeoutError";
+    }
+}
+exports.GatewayTimeoutError = GatewayTimeoutError;

package/dist/cjs/management/api/errors/index.d.ts

@@ -2,6 +2,7 @@ export * from "./BadRequestError.js";
 export * from "./ConflictError.js";
 export * from "./ContentTooLargeError.js";
 export * from "./ForbiddenError.js";
+export * from "./GatewayTimeoutError.js";
 export * from "./GoneError.js";
 export * from "./InternalServerError.js";
 export * from "./NotFoundError.js";

package/dist/cjs/management/api/errors/index.js

@@ -18,6 +18,7 @@ __exportStar(require("./BadRequestError.js"), exports);
 __exportStar(require("./ConflictError.js"), exports);
 __exportStar(require("./ContentTooLargeError.js"), exports);
 __exportStar(require("./ForbiddenError.js"), exports);
+__exportStar(require("./GatewayTimeoutError.js"), exports);
 __exportStar(require("./GoneError.js"), exports);
 __exportStar(require("./InternalServerError.js"), exports);
 __exportStar(require("./NotFoundError.js"), exports);

package/dist/cjs/management/api/requests/requests.d.ts

@@ -340,6 +340,7 @@ export interface CreateClientRequestContent {
     /** The identifier of the resource server that this client is linked to. */
     resource_server_identifier?: string;
     identity_assertion_authorization_grant?: Management.CreateIdentityAssertionAuthorizationGrant;
+    anonymous_sessions?: Management.CreateAnonymousSessions;
     third_party_security_mode?: Management.ClientThirdPartySecurityModeEnum;
     redirection_policy?: Management.ClientRedirectionPolicyEnum;
     express_configuration?: Management.ExpressConfiguration;
@@ -438,6 +439,7 @@ export interface UpdateClientRequestContent {
     custom_login_page_preview?: string;
     token_quota?: Management.UpdateTokenQuota | null;
     identity_assertion_authorization_grant?: Management.UpdateIdentityAssertionAuthorizationGrant | null;
+    anonymous_sessions?: Management.UpdateAnonymousSessions | null;
     /** Form template for WS-Federation protocol */
     form_template?: string;
     addons?: Management.ClientAddons;
@@ -699,7 +701,7 @@ export interface ListDeviceCredentialsRequestParameters {
     user_id?: string | null;
     /** client_id of the devices to retrieve. */
     client_id?: string | null;
-    /** Type of credentials to retrieve. Must be `public_key`, `refresh_token` or `rotating_refresh_token`. The property will default to `refresh_token` when paging is requested */
+    /** Type of credentials to retrieve. Must be `public_key`, `refresh_token` or `rotating_refresh_token`. If none is provided a combined list of `refresh_tokens` and `public_keys` will be returned (and no `rotating_refresh_token`), in this case `page`, `per_page` and `include_totals` will be ignored. */
     type?: Management.DeviceCredentialTypeEnum | null;
 }
 /**
@@ -1024,6 +1026,25 @@ export interface ListGroupsRequestParameters {
     /** Number of results per page. Defaults to 50. */
     take?: number | null;
 }
+/**
+ * @example
+ *     {
+ *         display_remember_me_checkbox: true,
+ *         remember_me_default_value: true,
+ *         mfa_session_inactivity_timeout: 1,
+ *         mfa_session_overall_timeout: 1
+ *     }
+ */
+export interface SetGuardianSettingsRequestContent {
+    /** Determines whether to display the "Remember Me" checkbox on the MFA prompt in Universal Login. */
+    display_remember_me_checkbox: boolean;
+    /** Determines the default state of the "Remember Me" checkbox on the MFA prompt in Universal Login. */
+    remember_me_default_value: boolean;
+    /** Duration of inactivity after which the user will be prompted for MFA. Represented as seconds. Minimum duration is 1 hour, maximum is 30 days, and cannot exceed the overall timeout. */
+    mfa_session_inactivity_timeout: number;
+    /** Maximum duration after which the user will be prompted for MFA regardless of activity. Represented as seconds. Minimum duration is 1 hour, maximum is 90 days. */
+    mfa_session_overall_timeout: number;
+}
 /**
  * @example
  *     {
@@ -1204,93 +1225,6 @@ export interface UpdateNetworkAclRequestContent {
     priority?: number;
     rule?: Management.NetworkAclRule;
 }
-/**
- * @example
- *     {
- *         from: "from",
- *         take: 1
- *     }
- */
-export interface ListOrganizationTemplatesRequestParameters {
-    /** Optional Id from which to start selection. */
-    from?: string | null;
-    /** Number of results per page. Defaults to 5. Values greater than 10 are capped at 10. */
-    take?: number | null;
-}
-/**
- * @example
- *     {
- *         name: "name",
- *         organization_deletion_behavior: "allow",
- *         enforce_permission_ceiling: true,
- *         enforce_self_assignment_restriction: true
- *     }
- */
-export interface CreateOrganizationTemplateRequestContent {
-    /** The name of the organization template. */
-    name: string;
-    /** Whether this is the default template applied to new organizations. */
-    is_default?: boolean;
-    organization_deletion_behavior: Management.OrganizationDeletionBehaviorEnum;
-    connection_deletion_behavior?: Management.ConnectionDeletionBehaviorEnum;
-    /** Whether to enforce permission ceiling for organizations using this template. */
-    enforce_permission_ceiling: boolean;
-    /** Whether to enforce self-assignment restrictions for organizations using this template. */
-    enforce_self_assignment_restriction: boolean;
-    /** The connection profile to apply to new connections. */
-    connection_profile_id?: string | null;
-    /** The user attribute profile to apply to organizations. */
-    user_attribute_profile_id?: string | null;
-    /** List of allowed connection strategies for this template. */
-    allowed_strategies?: Management.OrganizationTemplateAllowedStrategyEnum[] | null;
-    /** The client ID for the invitation landing page. */
-    invitation_landing_client_id?: string | null;
-    /** Default admin roles to assign to organization creators. */
-    admin_roles_assignment?: string[] | null;
-    use_for_organization_discovery?: Management.OrganizationTemplateUseForOrganizationDiscovery | null;
-    role_visibility_policy?: Management.OrganizationTemplateRoleVisibilityPolicy | null;
-}
-/**
- * @example
- *     {}
- */
-export interface UpdateOrganizationTemplateRequestContent {
-    /** The name of the organization template. */
-    name?: string;
-    /** Whether this is the default template applied to new organizations. */
-    is_default?: boolean;
-    organization_deletion_behavior?: Management.OrganizationDeletionBehaviorEnum;
-    connection_deletion_behavior?: Management.ConnectionDeletionBehaviorEnum;
-    /** Whether to enforce permission ceiling for organizations using this template. */
-    enforce_permission_ceiling?: boolean;
-    /** Whether to enforce self-assignment restrictions for organizations using this template. */
-    enforce_self_assignment_restriction?: boolean;
-    /** The connection profile to apply to new connections. */
-    connection_profile_id?: string | null;
-    /** The user attribute profile to apply to organizations. */
-    user_attribute_profile_id?: string | null;
-    /** List of allowed connection strategies for this template. */
-    allowed_strategies?: Management.OrganizationTemplateAllowedStrategyEnum[] | null;
-    /** The client ID for the invitation landing page. */
-    invitation_landing_client_id?: string | null;
-    /** Default admin roles to assign to organization creators. */
-    admin_roles_assignment?: string[] | null;
-    use_for_organization_discovery?: Management.OrganizationTemplateUseForOrganizationDiscovery | null;
-    role_visibility_policy?: Management.OrganizationTemplateRoleVisibilityPolicy | null;
-}
-/**
- * @example
- *     {
- *         from: "from",
- *         take: 1
- *     }
- */
-export interface ListTemplateOrganizationsRequestParameters {
-    /** Optional Id from which to start selection. */
-    from?: string | null;
-    /** Number of results per page. Defaults to 5. Values greater than 10 are capped at 10. */
-    take?: number | null;
-}
 /**
  * @example
  *     {
@@ -1333,6 +1267,28 @@ export interface CreateOrganizationRequestContent {
     /** Whether app entitlement is active for this organization. */
     is_app_entitlement_active?: boolean;
 }
+/**
+ * @example
+ *     {
+ *         q: "q",
+ *         parser: "scim",
+ *         take: 1,
+ *         from: "from",
+ *         sort: "name"
+ *     }
+ */
+export interface SearchOrganizationsRequestParameters {
+    /** Filter expression in SCIM or Lucene syntax (depending on parser parameter, default: Lucene). Lucene examples: `name:acme*`, `display_name:*auth*`. SCIM examples: `name eq "Auth0"`, `display_name sw "auth" and created_at gt "2024-01-01"`. SCIM operators: eq, ne, sw, ew, co, pr, gt, ge, lt, le, and, or. <br /><br /><b>Supported Fields</b>:<ul><li><i>id</i> - Organization ID (case-sensitive, exact match)</li><li><i>name</i> - Organization name (supports contains, starts-with, ends-with operators; sortable)</li><li><i>display_name</i> - Organization display name (supports contains, starts-with, ends-with operators; sortable)</li><li><i>created_at</i> - Creation timestamp (supports date range operators; sortable)</li><li><i>metadata.{key}</i> - Filter by organization metadata key-value pairs</li></ul>Maximum 5 filter operations per query. Results are eventually consistent and may not reflect recent updates. */
+    q?: string | null;
+    /** Query parser to use for the filter expression. Use "scim" for SCIM filter syntax or "lucene" for Lucene query syntax (default). */
+    parser?: Management.SearchParserEnum | null;
+    /** Maximum number of results to return per page (1-100). Defaults to 50. */
+    take?: number | null;
+    /** Cursor for the next page of results. Use the value from the next field in the previous response. */
+    from?: string | null;
+    /** Field name to sort results by in ascending order only. Defaults to insertion order (oldest first) if not provided. */
+    sort?: Management.OrganizationSortFieldEnum | null;
+}
 /**
  * @example
  *     {}
@@ -1504,6 +1460,8 @@ export interface CreateResourceServerRequestContent {
     allow_online_access_with_ephemeral_sessions?: boolean;
     /** Expiration value (in seconds) for access tokens issued for this API from the token endpoint. */
     token_lifetime?: number;
+    /** Expiration value (in seconds) for anonymous-session access tokens issued for this API. */
+    token_lifetime_for_anonymous_access_tokens?: number | null;
     token_dialect?: Management.ResourceServerTokenDialectSchemaEnum;
     /** Whether to skip user consent for applications flagged as first party (true) or not (false). */
     skip_consent_for_verifiable_first_party_clients?: boolean;
@@ -1516,6 +1474,34 @@ export interface CreateResourceServerRequestContent {
     subject_type_authorization?: Management.ResourceServerSubjectTypeAuthorization;
     authorization_policy?: Management.ResourceServerAuthorizationPolicy | null;
 }
+/**
+ * @example
+ *     {
+ *         q: "q",
+ *         parser: "scim",
+ *         fields: "fields",
+ *         include_fields: true,
+ *         take: 1,
+ *         from: "from",
+ *         sort: "identifier"
+ *     }
+ */
+export interface SearchResourceServersRequestParameters {
+    /** Filter expression in SCIM or Lucene syntax (depending on parser parameter). SCIM examples: `name eq "My API"`, `identifier sw "https://"`. SCIM operators: eq, ne, sw, ew, co, pr, gt, ge, lt, le, and, or. <br /><br /><b>Supported Fields</b>:<ul><li><i>id</i> - Filter by resource server ID</li><li><i>identifier</i> - Filter by resource server identifier</li><li><i>name</i> - Filter by resource server name</li><li><i>updated_at</i> - Filter by last update date</li></ul>Maximum 5 filter operations per query. Results are eventually consistent and may not reflect recent updates. */
+    q?: string | null;
+    /** Query parser to use for the filter expression. Use "scim" for SCIM filter syntax or "lucene" for Lucene query syntax (default). */
+    parser?: Management.SearchParserEnum | null;
+    /** Comma-separated list of fields to include or exclude in the response. Works with the include_fields parameter to control projection mode. */
+    fields?: string | null;
+    /** Controls field projection mode. Set to true to include only fields specified in the fields parameter. Set to false to exclude fields specified in the fields parameter. Defaults to true if not specified. */
+    include_fields?: boolean | null;
+    /** Maximum number of results to return per page (1-100). Defaults to 50. */
+    take?: number | null;
+    /** Cursor for the next page of results. Use the value from the next field in the previous response. */
+    from?: string | null;
+    /** Field name to sort results by in ascending order only. Defaults to insertion order (oldest first) if not provided. */
+    sort?: Management.ResourceServerSortFieldEnum | null;
+}
 /**
  * @example
  *     {
@@ -1548,6 +1534,8 @@ export interface UpdateResourceServerRequestContent {
     allow_online_access_with_ephemeral_sessions?: boolean;
     /** Expiration value (in seconds) for access tokens issued for this API from the token endpoint. */
     token_lifetime?: number;
+    /** Expiration value (in seconds) for anonymous-session access tokens issued for this API. */
+    token_lifetime_for_anonymous_access_tokens?: number | null;
     token_dialect?: Management.ResourceServerTokenDialectSchemaEnum;
     /** Whether authorization policies are enforced (true) or not enforced (false). */
     enforce_policies?: boolean;
@@ -2834,6 +2822,16 @@ export interface CreateEventStreamRedeliveryRequestContent {
     /** Filter by event type */
     event_types?: Management.EventStreamEventTypeEnum[];
 }
+/**
+ * @example
+ *     {
+ *         target_level: 1
+ *     }
+ */
+export interface AdvanceRampRequestContent {
+    /** The target percentage level from the experiment schedule. Must be the immediate next level. */
+    target_level: number;
+}
 /**
  * @example
  *     {
@@ -2966,6 +2964,19 @@ export interface SetGuardianFactorRequestContent {
     /** Whether this factor is enabled (true) or disabled (false). */
     enabled: boolean;
 }
+/**
+ * @example
+ *     {
+ *         otp_length: 1,
+ *         otp_expiration_time: 1
+ *     }
+ */
+export interface SetEmailFactorSettingsRequestContent {
+    /** The length of the OTP code. */
+    otp_length: number;
+    /** The OTP expiration time in seconds. */
+    otp_expiration_time: number;
+}
 /**
  * @example
  *     {
@@ -2999,6 +3010,19 @@ export interface SetGuardianFactorsProviderPhoneTwilioRequestContent {
 export interface SetGuardianFactorsProviderPhoneRequestContent {
     provider: Management.GuardianFactorsProviderSmsProviderEnum;
 }
+/**
+ * @example
+ *     {
+ *         otp_length: 1,
+ *         otp_expiration_time: 1
+ *     }
+ */
+export interface SetPhoneFactorSettingsRequestContent {
+    /** The length of the OTP code. */
+    otp_length: number;
+    /** The OTP expiration time in seconds. */
+    otp_expiration_time: number;
+}
 /**
  * @example
  *     {

package/dist/cjs/management/api/resources/experimentation/client/Client.d.ts

@@ -0,0 +1,12 @@
+import type { BaseClientOptions } from "../../../../BaseClient.js";
+import { type NormalizedClientOptionsWithAuth } from "../../../../BaseClient.js";
+import { ExperimentsClient } from "../resources/experiments/client/Client.js";
+export declare namespace ExperimentationClient {
+    type Options = BaseClientOptions;
+}
+export declare class ExperimentationClient {
+    protected readonly _options: NormalizedClientOptionsWithAuth<ExperimentationClient.Options>;
+    protected _experiments: ExperimentsClient | undefined;
+    constructor(options: ExperimentationClient.Options);
+    get experiments(): ExperimentsClient;
+}

package/dist/cjs/management/api/resources/experimentation/client/Client.js

@@ -0,0 +1,16 @@
+"use strict";
+// This file was auto-generated by Fern from our API Definition.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ExperimentationClient = void 0;
+const BaseClient_js_1 = require("../../../../BaseClient.js");
+const Client_js_1 = require("../resources/experiments/client/Client.js");
+class ExperimentationClient {
+    constructor(options) {
+        this._options = (0, BaseClient_js_1.normalizeClientOptionsWithAuth)(options);
+    }
+    get experiments() {
+        var _a;
+        return ((_a = this._experiments) !== null && _a !== void 0 ? _a : (this._experiments = new Client_js_1.ExperimentsClient(this._options)));
+    }
+}
+exports.ExperimentationClient = ExperimentationClient;

package/dist/cjs/management/api/resources/experimentation/exports.d.ts

@@ -0,0 +1,3 @@
+export { ExperimentationClient } from "./client/Client.js";
+export * from "./client/index.js";
+export * from "./resources/index.js";

package/dist/cjs/management/api/resources/experimentation/exports.js

@@ -0,0 +1,22 @@
+"use strict";
+// This file was auto-generated by Fern from our API Definition.
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ExperimentationClient = void 0;
+var Client_js_1 = require("./client/Client.js");
+Object.defineProperty(exports, "ExperimentationClient", { enumerable: true, get: function () { return Client_js_1.ExperimentationClient; } });
+__exportStar(require("./client/index.js"), exports);
+__exportStar(require("./resources/index.js"), exports);

package/dist/cjs/management/api/resources/experimentation/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./client/index.js";
+export * from "./resources/index.js";

package/dist/cjs/management/api/resources/experimentation/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./client/index.js"), exports);
+__exportStar(require("./resources/index.js"), exports);

package/dist/cjs/management/api/resources/experimentation/resources/experiments/client/Client.d.ts

@@ -0,0 +1,34 @@
+import type { BaseClientOptions, BaseRequestOptions } from "../../../../../../BaseClient.js";
+import { type NormalizedClientOptionsWithAuth } from "../../../../../../BaseClient.js";
+import * as core from "../../../../../../core/index.js";
+import * as Management from "../../../../../index.js";
+export declare namespace ExperimentsClient {
+    type Options = BaseClientOptions;
+    interface RequestOptions extends BaseRequestOptions {
+    }
+}
+export declare class ExperimentsClient {
+    protected readonly _options: NormalizedClientOptionsWithAuth<ExperimentsClient.Options>;
+    constructor(options: ExperimentsClient.Options);
+    /**
+     * Increments the current ramp index to the requested target level. Up-only: the target must be the immediate next level in the schedule. Idempotent: calling with the current level returns success without writing anything.
+     *
+     * @param {string} id - The ID of the experiment to advance.
+     * @param {Management.AdvanceRampRequestContent} request
+     * @param {ExperimentsClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link Management.BadRequestError}
+     * @throws {@link Management.UnauthorizedError}
+     * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
+     * @throws {@link Management.ConflictError}
+     * @throws {@link Management.TooManyRequestsError}
+     *
+     * @example
+     *     await client.experimentation.experiments.advanceRamp("id", {
+     *         target_level: 1
+     *     })
+     */
+    advanceRamp(id: string, request: Management.AdvanceRampRequestContent, requestOptions?: ExperimentsClient.RequestOptions): core.HttpResponsePromise<Management.AdvanceRampResponseContent>;
+    private __advanceRamp;
+}