auth0 7.0.0 → 7.1.0

package/dist/cjs/management/api/types/types.js

@@ -19,9 +19,9 @@ exports.FlowActionFlowDelayFlowParams = exports.FlowActionFlowDelayFlow = export
 exports.FlowsVaultConnectioSetupTypeApiKeyEnum = exports.FlowsVaultConnectioSetupJwtAlgorithmEnum = exports.FlowActionZapierTriggerWebhookParams = exports.FlowActionZapierTriggerWebhook = exports.FlowActionXmlSerializeXml = exports.FlowActionXmlParseXml = exports.FlowActionWhatsappSendMessageParams = exports.FlowActionWhatsappSendMessage = exports.FlowActionTwilioSendSms = exports.FlowActionTwilioMakeCall = exports.FlowActionTelegramSendMessage = exports.FlowActionStripeUpdateCustomer = exports.FlowActionStripeGetCustomer = exports.FlowActionStripeFindCustomers = exports.FlowActionStripeDeleteTaxId = exports.FlowActionStripeCreatePortalSession = exports.FlowActionStripeCreateCustomer = exports.FlowActionStripeAddTaxId = exports.FlowActionSlackPostMessageParamsAttachment = exports.FlowActionSlackPostMessage = exports.FlowActionSendgridSendEmail = exports.FlowActionSalesforceUpdateLead = exports.FlowActionSalesforceSearchLeadsParams = exports.FlowActionSalesforceSearchLeads = exports.FlowActionSalesforceGetLead = exports.FlowActionSalesforceCreateLead = exports.FlowActionPipedriveAddPerson = exports.FlowActionPipedriveAddOrganization = exports.FlowActionPipedriveAddDeal = exports.FlowActionOtpVerifyCode = exports.FlowActionOtpGenerateCode = exports.FlowActionMailjetSendEmail = exports.FlowActionMailchimpUpsertMember = exports.FlowActionJwtVerifyJwt = exports.FlowActionJwtSignJwt = exports.FlowActionJwtDecodeJwt = exports.FlowActionJsonSerializeJson = exports.FlowActionJsonParseJson = exports.FlowActionJsonCreateJson = exports.FlowActionHubspotUpsertContact = exports.FlowActionHubspotGetContact = exports.FlowActionHubspotEnrollContact = exports.FlowActionHttpSendRequestParams = exports.FlowActionHttpSendRequest = exports.FlowActionGoogleSheetsAddRow = exports.FlowActionFlowStoreVars = exports.FlowActionFlowReturnJson = exports.FlowActionFlowMapValue = exports.FlowActionFlowErrorMessage = exports.FlowActionFlowDoNothing = void 0;
 exports.FormFieldFileConfigCategoryEnum = exports.FormFieldDateConfigFormatEnum = exports.FormEndingNodeId = exports.FormComponentCategoryWidgetConst = exports.FormComponentCategoryFieldConst = exports.FormComponentCategoryBlockConst = exports.FormBlockTypeRichTextConst = exports.FormBlockTypeResendButtonConst = exports.FormBlockTypePreviousButtonConst = exports.FormBlockTypeNextButtonConst = exports.FormBlockTypeJumpButtonConst = exports.FormBlockTypeImageConst = exports.FormBlockTypeHtmlConst = exports.FormBlockTypeDividerConst = exports.FormBlockResendButtonConfigTextAlignmentEnum = exports.FormBlockImageConfigPositionEnum = exports.ForbiddenSchema = exports.FlowsVaultConnectionSetupTypeOauthClientCredentialsEnum = exports.FlowsVaultConnectionSetupTypeBasicAuthEnum = exports.FlowsVaultConnectionSetupTypeApiKeyEnum = exports.FlowsVaultConnectionHttpApiKeySetupInEnum = exports.FlowsVaultConnectionAppIdZapierEnum = exports.FlowsVaultConnectionAppIdWhatsappEnum = exports.FlowsVaultConnectionAppIdTwilioEnum = exports.FlowsVaultConnectionAppIdTelegramEnum = exports.FlowsVaultConnectionAppIdStripeEnum = exports.FlowsVaultConnectionAppIdSlackEnum = exports.FlowsVaultConnectionAppIdSendgridEnum = exports.FlowsVaultConnectionAppIdSalesforceEnum = exports.FlowsVaultConnectionAppIdPipedriveEnum = exports.FlowsVaultConnectionAppIdMailjetEnum = exports.FlowsVaultConnectionAppIdMailchimpEnum = exports.FlowsVaultConnectionAppIdJwtEnum = exports.FlowsVaultConnectionAppIdHubspotEnum = exports.FlowsVaultConnectionAppIdHttpEnum = exports.FlowsVaultConnectionAppIdGoogleSheetsEnum = exports.FlowsVaultConnectionAppIdDocusignEnum = exports.FlowsVaultConnectionAppIdClearbitEnum = exports.FlowsVaultConnectionAppIdBigqueryEnum = exports.FlowsVaultConnectionAppIdAuth0Enum = exports.FlowsVaultConnectionAppIdAirtableEnum = exports.FlowsVaultConnectionAppIdActivecampaignEnum = exports.FlowsVaultConnectioSetupTypeWebhookEnum = exports.FlowsVaultConnectioSetupTypeTokenEnum = exports.FlowsVaultConnectioSetupTypeOauthJwtEnum = exports.FlowsVaultConnectioSetupTypeOauthCodeEnum = exports.FlowsVaultConnectioSetupTypeOauthAppEnum = exports.FlowsVaultConnectioSetupTypeKeyPairEnum = exports.FlowsVaultConnectioSetupTypeJwtEnum = exports.FlowsVaultConnectioSetupTypeBearerEnum = void 0;
 exports.LogStreamEventBridgeSinkRegionEnum = exports.LogStreamEventBridgeEnum = exports.LogStreamDatadogRegionEnum = exports.LogStreamDatadogEnum = exports.ListFlowsRequestParametersHydrateEnum = exports.JobFileFormatEnum = exports.IntegrationRequiredParamTypeEnum = exports.IntegrationFeatureTypeEnum = exports.IdentityProviderOnlyAuth0Enum = exports.IdentityProviderEnum = exports.HookTriggerIdEnum = exports.GuardianFactorsProviderSmsProviderEnum = exports.GuardianFactorsProviderPushNotificationProviderDataEnum = exports.GuardianFactorPhoneFactorMessageTypeEnum = exports.GuardianFactorNameEnum = exports.GuardianEnrollmentStatus = exports.GuardianEnrollmentFactorEnum = exports.GroupTypeEnum = exports.GroupMemberTypeEnum = exports.GetFlowRequestParametersHydrateEnum = exports.GetFlowExecutionRequestParametersHydrateEnum = exports.FormsRequestParametersHydrateEnum = exports.FormWidgetTypeRecaptchaConst = exports.FormWidgetTypeGMapsAddressConst = exports.FormWidgetTypeAuth0VerifiableCredentialsConst = exports.FormNodeTypeStepConst = exports.FormNodeTypeRouterConst = exports.FormNodeTypeFlowConst = exports.FormFieldTypeUrlConst = exports.FormFieldTypeTextConst = exports.FormFieldTypeTelConst = exports.FormFieldTypeSocialConst = exports.FormFieldTypePaymentConst = exports.FormFieldTypePasswordConst = exports.FormFieldTypeNumberConst = exports.FormFieldTypeLegalConst = exports.FormFieldTypeFileConst = exports.FormFieldTypeEmailConst = exports.FormFieldTypeDropdownConst = exports.FormFieldTypeDateConst = exports.FormFieldTypeCustomConst = exports.FormFieldTypeChoiceConst = exports.FormFieldTypeCardsConst = exports.FormFieldTypeBooleanConst = exports.FormFieldPaymentConfigProviderEnum = exports.FormFieldPaymentConfigChargeTypeSubscriptionConst = exports.FormFieldPaymentConfigChargeTypeOneOffConst = exports.FormFieldPaymentConfigChargeOneOffCurrencyEnum = exports.FormFieldPasswordConfigHashEnum = exports.FormFieldFileConfigStorageTypeEnum = void 0;
-exports.RefreshTokenExpirationTypeEnum = exports.RateLimitPolicyResourceEnum = exports.RateLimitPolicyConsumerEnum = exports.PublicKeyCredentialTypeEnum = exports.PublicKeyCredentialAlgorithmEnum = exports.PromptLanguageEnum = exports.PromptGroupNameEnum = exports.PreferredAuthenticationMethodEnum = exports.PostConnectionKeysAlgEnum = exports.PhoneTemplateNotificationTypeEnum = exports.PhoneProviderProtectionBackoffStrategyEnum = exports.PhoneProviderNameEnum = exports.PhoneProviderDeliveryMethodEnum = exports.PhoneProviderChannelEnum = exports.PasswordSequentialCharactersPolicyEnum = exports.PasswordMaxLengthExceededPolicyEnum = exports.PasswordIdenticalCharactersPolicyEnum = exports.PasswordDefaultDictionariesEnum = exports.PasswordCharacterTypeRulePolicyEnum = exports.PasswordCharacterTypeEnum = exports.PartialGroupsEnum = exports.OrganizationUsageEnum = exports.OrganizationThirdPartyClientAccessEnum = exports.OrganizationTemplateRoleVisibilityEnum = exports.OrganizationTemplateAllowedStrategyEnum = exports.OrganizationMemberEffectiveRoleSource = exports.OrganizationDiscoveryDomainStatus = exports.OrganizationDeletionBehaviorEnum = exports.OrganizationClientMetadataOrganizationUsageEnum = exports.OrganizationAccessLevelEnumWithNull = exports.OrganizationAccessLevelEnum = exports.NotFoundSchema = exports.NetworkAclRuleScopeEnum = exports.NetworkAclKeyAlgorithmEnum = exports.MfaPolicyEnum = exports.LogStreamSumoEnum = exports.LogStreamStatusEnum = exports.LogStreamSplunkEnum = exports.LogStreamSegmentEnum = exports.LogStreamPiiMethodEnum = exports.LogStreamPiiLogFieldsEnum = exports.LogStreamPiiAlgorithmEnum = exports.LogStreamMixpanelRegionEnum = exports.LogStreamMixpanelEnum = exports.LogStreamHttpEnum = exports.LogStreamHttpContentFormatEnum = exports.LogStreamFilterTypeEnum = exports.LogStreamFilterGroupNameEnum = exports.LogStreamEventGridRegionEnum = exports.LogStreamEventGridEnum = void 0;
-exports.X509CertificateCredentialTypeEnum = exports.VerificationMethodEnum = exports.UserMultifactorProviderEnum = exports.UserIdentityProviderEnum = exports.UserEnrollmentStatusEnum = exports.UserEnrollmentAuthMethodEnum = exports.UserEffectiveRoleSource = exports.UserEffectivePermissionSourceEnum = exports.UserEffectivePermissionRoleSourceEnum = exports.UserAuthenticationMethodPropertiesEnum = exports.UserAttributeProfileUserIdOidcStrategyOverrideMapping = exports.UserAttributeProfileUserIdOidcMappingEnum = exports.UniversalLoginExperienceEnum = exports.UnauthorizedSchema = exports.TwilioProviderDeliveryMethodEnum = exports.TooManyRequestsSchema = exports.TokenExchangeProfileTypeEnum = exports.TenantSettingsSupportedLocalesEnum = exports.TenantSettingsResourceParameterProfile = exports.TenantSettingsDynamicClientRegistrationSecurityMode = exports.TenantSettingsDeviceFlowCharset = exports.TenantSettingsCountryCodesModeResponse = exports.TenantSettingsCountryCodesMode = exports.SynchronizeGroupsEnum = exports.SuspiciousIpThrottlingShieldsEnum = exports.SupportedLocales = exports.SignupStatusEnum = exports.SigningAlgorithmEnum = exports.SessionCookieModeEnum = exports.SessionCookieMetadataModeEnum = exports.SelfServiceProfileSsoTicketProvisioningScopeEnum = exports.SelfServiceProfileSsoTicketIdpInitiatedClientProtocolEnum = exports.SelfServiceProfileSsoTicketDomainVerificationEnum = exports.SelfServiceProfileCustomTextPageEnum = exports.SelfServiceProfileCustomTextLanguageEnum = exports.SelfServiceProfileAllowedStrategyEnum = exports.SearchEngineVersionsEnum = exports.ScreenGroupNameEnum = exports.RotateConnectionKeysSigningAlgEnum = exports.RoleTypeEnum = exports.ResourceServerTokenEncryptionFormatEnum = exports.ResourceServerTokenEncryptionAlgorithmEnum = exports.ResourceServerTokenDialectSchemaEnum = exports.ResourceServerTokenDialectResponseEnum = exports.ResourceServerSubjectTypeAuthorizationUserPolicyEnum = exports.ResourceServerSubjectTypeAuthorizationClientPolicyEnum = exports.ResourceServerProofOfPossessionRequiredForEnum = exports.ResourceServerProofOfPossessionMechanismEnum = exports.ResourceServerConsentPolicyEnum = exports.RefreshTokenRotationTypeEnum = void 0;
-exports.XssProtectionMode = void 0;
+exports.RateLimitPolicyResourceEnum = exports.RateLimitPolicyConsumerEnum = exports.PublicKeyCredentialTypeEnum = exports.PublicKeyCredentialAlgorithmEnum = exports.PromptLanguageEnum = exports.PromptGroupNameEnum = exports.PreferredAuthenticationMethodEnum = exports.PostConnectionKeysAlgEnum = exports.PhoneTemplateNotificationTypeEnum = exports.PhoneProviderProtectionBackoffStrategyEnum = exports.PhoneProviderNameEnum = exports.PhoneProviderDeliveryMethodEnum = exports.PhoneProviderChannelEnum = exports.PasswordSequentialCharactersPolicyEnum = exports.PasswordMaxLengthExceededPolicyEnum = exports.PasswordIdenticalCharactersPolicyEnum = exports.PasswordDefaultDictionariesEnum = exports.PasswordCharacterTypeRulePolicyEnum = exports.PasswordCharacterTypeEnum = exports.PartialGroupsEnum = exports.OrganizationUsageEnum = exports.OrganizationThirdPartyClientAccessEnum = exports.OrganizationTemplateRoleVisibilityEnum = exports.OrganizationTemplateAllowedStrategyEnum = exports.OrganizationSortFieldEnum = exports.OrganizationMemberEffectiveRoleSource = exports.OrganizationDiscoveryDomainStatus = exports.OrganizationDeletionBehaviorEnum = exports.OrganizationClientMetadataOrganizationUsageEnum = exports.OrganizationAccessLevelEnumWithNull = exports.OrganizationAccessLevelEnum = exports.NotFoundSchema = exports.NetworkAclRuleScopeEnum = exports.NetworkAclKeyAlgorithmEnum = exports.MfaPolicyEnum = exports.LogStreamSumoEnum = exports.LogStreamStatusEnum = exports.LogStreamSplunkEnum = exports.LogStreamSegmentEnum = exports.LogStreamPiiMethodEnum = exports.LogStreamPiiLogFieldsEnum = exports.LogStreamPiiAlgorithmEnum = exports.LogStreamMixpanelRegionEnum = exports.LogStreamMixpanelEnum = exports.LogStreamHttpEnum = exports.LogStreamHttpContentFormatEnum = exports.LogStreamFilterTypeEnum = exports.LogStreamFilterGroupNameEnum = exports.LogStreamEventGridRegionEnum = exports.LogStreamEventGridEnum = void 0;
+exports.UserEnrollmentStatusEnum = exports.UserEnrollmentAuthMethodEnum = exports.UserEffectiveRoleSource = exports.UserEffectivePermissionSourceEnum = exports.UserEffectivePermissionRoleSourceEnum = exports.UserAuthenticationMethodPropertiesEnum = exports.UserAttributeProfileUserIdOidcStrategyOverrideMapping = exports.UserAttributeProfileUserIdOidcMappingEnum = exports.UniversalLoginExperienceEnum = exports.UnauthorizedSchema = exports.TwilioProviderDeliveryMethodEnum = exports.TooManyRequestsSchema = exports.TokenExchangeProfileTypeEnum = exports.TenantSettingsSupportedLocalesEnum = exports.TenantSettingsResourceParameterProfile = exports.TenantSettingsDynamicClientRegistrationSecurityMode = exports.TenantSettingsDeviceFlowCharset = exports.TenantSettingsCountryCodesModeResponse = exports.TenantSettingsCountryCodesMode = exports.SynchronizeGroupsEnum = exports.SuspiciousIpThrottlingShieldsEnum = exports.SupportedLocales = exports.SignupStatusEnum = exports.SigningAlgorithmEnum = exports.SessionCookieModeEnum = exports.SessionCookieMetadataModeEnum = exports.SelfServiceProfileSsoTicketProvisioningScopeEnum = exports.SelfServiceProfileSsoTicketIdpInitiatedClientProtocolEnum = exports.SelfServiceProfileSsoTicketDomainVerificationEnum = exports.SelfServiceProfileCustomTextPageEnum = exports.SelfServiceProfileCustomTextLanguageEnum = exports.SelfServiceProfileAllowedStrategyEnum = exports.SearchParserEnum = exports.SearchEngineVersionsEnum = exports.ScreenGroupNameEnum = exports.RotateConnectionKeysSigningAlgEnum = exports.RoleTypeEnum = exports.ResourceServerTokenEncryptionFormatEnum = exports.ResourceServerTokenEncryptionAlgorithmEnum = exports.ResourceServerTokenDialectSchemaEnum = exports.ResourceServerTokenDialectResponseEnum = exports.ResourceServerSubjectTypeAuthorizationUserPolicyEnum = exports.ResourceServerSubjectTypeAuthorizationClientPolicyEnum = exports.ResourceServerSubjectTypeAuthorizationAnonymousUserPolicyEnum = exports.ResourceServerSortFieldEnum = exports.ResourceServerProofOfPossessionRequiredForEnum = exports.ResourceServerProofOfPossessionMechanismEnum = exports.ResourceServerConsentPolicyEnum = exports.RefreshTokenRotationTypeEnum = exports.RefreshTokenExpirationTypeEnum = void 0;
+exports.XssProtectionMode = exports.X509CertificateCredentialTypeEnum = exports.VerificationMethodEnum = exports.UserMultifactorProviderEnum = exports.UserIdentityProviderEnum = void 0;
 exports.OauthScope = {
     /**
      * Create Actions */
@@ -275,6 +275,9 @@ exports.OauthScope = {
     /**
      * Read Events */
     ReadEvents: "read:events",
+    /**
+     * Update Experimentation */
+    UpdateExperimentation: "update:experimentation",
     /**
      * Create Flows */
     CreateFlows: "create:flows",
@@ -755,15 +758,9 @@ exports.OauthScope = {
     /**
      * Delete Organization Client Associations */
     DeleteOrganizationClients: "delete:organization_clients",
-    /**
-     * Create Organization Templates */
-    CreateOrganizationTemplates: "create:organization_templates",
     /**
      * Read Organization Templates */
     ReadOrganizationTemplates: "read:organization_templates",
-    /**
-     * Update Organization Templates */
-    UpdateOrganizationTemplates: "update:organization_templates",
     /**
      * Create Network ACL Keys */
     CreateNetworkAclKeys: "create:network_acl_keys",
@@ -1379,23 +1376,14 @@ exports.ConnectionIdentityProviderEnum = {
     Yahoo: "yahoo",
     Yandex: "yandex",
     NotionMcp: "notion-mcp",
-    AsanaMcp: "asana-mcp",
-    AtlassianMcp: "atlassian-mcp",
+    Asana: "asana",
+    Atlassian: "atlassian",
     CloudflareMcp: "cloudflare-mcp",
-    DocusignMcp: "docusign-mcp",
-    FigmaMcp: "figma-mcp",
-    GitlabMcp: "gitlab-mcp",
-    GustoMcp: "gusto-mcp",
-    HerokuMcp: "heroku-mcp",
+    Gitlab: "gitlab",
     HubspotMcp: "hubspot-mcp",
-    IntercomMcp: "intercom-mcp",
     LinearMcp: "linear-mcp",
-    PagerdutyMcp: "pagerduty-mcp",
     SentryMcp: "sentry-mcp",
-    SlackMcp: "slack-mcp",
-    SupabaseMcp: "supabase-mcp",
-    VercelMcp: "vercel-mcp",
-    XeroMcp: "xero-mcp",
+    Slack: "slack",
 };
 /** Signing key use, whether for encryption or signing */
 exports.ConnectionKeyUseEnum = {
@@ -1889,23 +1877,14 @@ exports.ConnectionStrategyEnum = {
     Yahoo: "yahoo",
     Yandex: "yandex",
     NotionMcp: "notion-mcp",
-    AsanaMcp: "asana-mcp",
-    AtlassianMcp: "atlassian-mcp",
+    Asana: "asana",
+    Atlassian: "atlassian",
     CloudflareMcp: "cloudflare-mcp",
-    DocusignMcp: "docusign-mcp",
-    FigmaMcp: "figma-mcp",
-    GitlabMcp: "gitlab-mcp",
-    GustoMcp: "gusto-mcp",
-    HerokuMcp: "heroku-mcp",
+    Gitlab: "gitlab",
     HubspotMcp: "hubspot-mcp",
-    IntercomMcp: "intercom-mcp",
     LinearMcp: "linear-mcp",
-    PagerdutyMcp: "pagerduty-mcp",
     SentryMcp: "sentry-mcp",
-    SlackMcp: "slack-mcp",
-    SupabaseMcp: "supabase-mcp",
-    VercelMcp: "vercel-mcp",
-    XeroMcp: "xero-mcp",
+    Slack: "slack",
     Auth0Adldap: "auth0-adldap",
 };
 /** SMS template syntax type. Set to 'md_with_macros' to enable macro processing in templates. */
@@ -2413,7 +2392,7 @@ exports.DefaultMethodPhoneNumberIdentifierEnum = {
 exports.DeviceCredentialPublicKeyTypeEnum = {
     PublicKey: "public_key",
 };
-/** Type of credentials to retrieve. Must be `public_key`, `refresh_token` or `rotating_refresh_token`. The property will default to `refresh_token` when paging is requested */
+/** Type of credentials to retrieve. Must be `public_key`, `refresh_token` or `rotating_refresh_token`. If none is provided a combined list of `refresh_tokens` and `public_keys` will be returned (and no `rotating_refresh_token`), in this case `page`, `per_page` and `include_totals` will be ignored. */
 exports.DeviceCredentialTypeEnum = {
     PublicKey: "public_key",
     RefreshToken: "refresh_token",
@@ -6546,6 +6525,12 @@ exports.OrganizationMemberEffectiveRoleSource = {
     Direct: "direct",
     Groups: "groups",
 };
+/** Field name to sort results by in ascending order only. Defaults to insertion order (oldest first) if not provided. */
+exports.OrganizationSortFieldEnum = {
+    Name: "name",
+    DisplayName: "display_name",
+    CreatedAt: "created_at",
+};
 /** An allowed enterprise connection strategy. */
 exports.OrganizationTemplateAllowedStrategyEnum = {
     Adfs: "adfs",
@@ -6824,6 +6809,17 @@ exports.ResourceServerProofOfPossessionRequiredForEnum = {
     PublicClients: "public_clients",
     AllClients: "all_clients",
 };
+/** Field name to sort results by in ascending order only. Defaults to insertion order (oldest first) if not provided. */
+exports.ResourceServerSortFieldEnum = {
+    Identifier: "identifier",
+    Name: "name",
+    UpdatedAt: "updated_at",
+};
+/** Defines the anonymous user flows policy for the resource server */
+exports.ResourceServerSubjectTypeAuthorizationAnonymousUserPolicyEnum = {
+    DenyAll: "deny_all",
+    RequireClientGrant: "require_client_grant",
+};
 /** Defines the client flows policy for the resource server */
 exports.ResourceServerSubjectTypeAuthorizationClientPolicyEnum = {
     DenyAll: "deny_all",
@@ -6974,6 +6970,11 @@ exports.SearchEngineVersionsEnum = {
     V2: "v2",
     V3: "v3",
 };
+/** Query parser to use for the filter expression. Use "scim" for SCIM filter syntax or "lucene" for Lucene query syntax (default). */
+exports.SearchParserEnum = {
+    Scim: "scim",
+    Lucene: "lucene",
+};
 exports.SelfServiceProfileAllowedStrategyEnum = {
     Oidc: "oidc",
     Samlp: "samlp",

package/dist/cjs/management/version.d.ts

@@ -1 +1 @@
-export declare const SDK_VERSION = "7.0.0";
+export declare const SDK_VERSION = "7.1.0";

package/dist/cjs/management/version.js

@@ -1,4 +1,4 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.SDK_VERSION = void 0;
-exports.SDK_VERSION = "7.0.0";
+exports.SDK_VERSION = "7.1.0";

package/dist/esm/management/Client.d.mts

@@ -13,6 +13,7 @@ import { EmailsClient } from "./api/resources/emails/client/Client.mjs";
 import { EmailTemplatesClient } from "./api/resources/emailTemplates/client/Client.mjs";
 import { EventsClient } from "./api/resources/events/client/Client.mjs";
 import { EventStreamsClient } from "./api/resources/eventStreams/client/Client.mjs";
+import { ExperimentationClient } from "./api/resources/experimentation/client/Client.mjs";
 import { FlowsClient } from "./api/resources/flows/client/Client.mjs";
 import { FormsClient } from "./api/resources/forms/client/Client.mjs";
 import { GroupsClient } from "./api/resources/groups/client/Client.mjs";
@@ -24,7 +25,6 @@ import { LogsClient } from "./api/resources/logs/client/Client.mjs";
 import { LogStreamsClient } from "./api/resources/logStreams/client/Client.mjs";
 import { NetworkAclsClient } from "./api/resources/networkAcls/client/Client.mjs";
 import { OrganizationsClient } from "./api/resources/organizations/client/Client.mjs";
-import { OrganizationTemplatesClient } from "./api/resources/organizationTemplates/client/Client.mjs";
 import { PromptsClient } from "./api/resources/prompts/client/Client.mjs";
 import { RateLimitPoliciesClient } from "./api/resources/rateLimitPolicies/client/Client.mjs";
 import { RefreshTokensClient } from "./api/resources/refreshTokens/client/Client.mjs";
@@ -71,12 +71,12 @@ export declare class ManagementClient {
     protected _forms: FormsClient | undefined;
     protected _userGrants: UserGrantsClient | undefined;
     protected _groups: GroupsClient | undefined;
+    protected _guardian: GuardianClient | undefined;
     protected _hooks: HooksClient | undefined;
     protected _jobs: JobsClient | undefined;
     protected _logStreams: LogStreamsClient | undefined;
     protected _logs: LogsClient | undefined;
     protected _networkAcls: NetworkAclsClient | undefined;
-    protected _organizationTemplates: OrganizationTemplatesClient | undefined;
     protected _organizations: OrganizationsClient | undefined;
     protected _prompts: PromptsClient | undefined;
     protected _rateLimitPolicies: RateLimitPoliciesClient | undefined;
@@ -97,7 +97,7 @@ export declare class ManagementClient {
     protected _anomaly: AnomalyClient | undefined;
     protected _attackProtection: AttackProtectionClient | undefined;
     protected _emails: EmailsClient | undefined;
-    protected _guardian: GuardianClient | undefined;
+    protected _experimentation: ExperimentationClient | undefined;
     protected _keys: KeysClient | undefined;
     protected _riskAssessments: RiskAssessmentsClient | undefined;
     protected _tenants: TenantsClient | undefined;
@@ -119,12 +119,12 @@ export declare class ManagementClient {
     get forms(): FormsClient;
     get userGrants(): UserGrantsClient;
     get groups(): GroupsClient;
+    get guardian(): GuardianClient;
     get hooks(): HooksClient;
     get jobs(): JobsClient;
     get logStreams(): LogStreamsClient;
     get logs(): LogsClient;
     get networkAcls(): NetworkAclsClient;
-    get organizationTemplates(): OrganizationTemplatesClient;
     get organizations(): OrganizationsClient;
     get prompts(): PromptsClient;
     get rateLimitPolicies(): RateLimitPoliciesClient;
@@ -145,7 +145,7 @@ export declare class ManagementClient {
     get anomaly(): AnomalyClient;
     get attackProtection(): AttackProtectionClient;
     get emails(): EmailsClient;
-    get guardian(): GuardianClient;
+    get experimentation(): ExperimentationClient;
     get keys(): KeysClient;
     get riskAssessments(): RiskAssessmentsClient;
     get tenants(): TenantsClient;

package/dist/esm/management/Client.mjs

@@ -23,6 +23,7 @@ import { EmailsClient } from "./api/resources/emails/client/Client.mjs";
 import { EmailTemplatesClient } from "./api/resources/emailTemplates/client/Client.mjs";
 import { EventsClient } from "./api/resources/events/client/Client.mjs";
 import { EventStreamsClient } from "./api/resources/eventStreams/client/Client.mjs";
+import { ExperimentationClient } from "./api/resources/experimentation/client/Client.mjs";
 import { FlowsClient } from "./api/resources/flows/client/Client.mjs";
 import { FormsClient } from "./api/resources/forms/client/Client.mjs";
 import { GroupsClient } from "./api/resources/groups/client/Client.mjs";
@@ -34,7 +35,6 @@ import { LogsClient } from "./api/resources/logs/client/Client.mjs";
 import { LogStreamsClient } from "./api/resources/logStreams/client/Client.mjs";
 import { NetworkAclsClient } from "./api/resources/networkAcls/client/Client.mjs";
 import { OrganizationsClient } from "./api/resources/organizations/client/Client.mjs";
-import { OrganizationTemplatesClient } from "./api/resources/organizationTemplates/client/Client.mjs";
 import { PromptsClient } from "./api/resources/prompts/client/Client.mjs";
 import { RateLimitPoliciesClient } from "./api/resources/rateLimitPolicies/client/Client.mjs";
 import { RefreshTokensClient } from "./api/resources/refreshTokens/client/Client.mjs";
@@ -125,6 +125,10 @@ export class ManagementClient {
         var _a;
         return ((_a = this._groups) !== null && _a !== void 0 ? _a : (this._groups = new GroupsClient(this._options)));
     }
+    get guardian() {
+        var _a;
+        return ((_a = this._guardian) !== null && _a !== void 0 ? _a : (this._guardian = new GuardianClient(this._options)));
+    }
     get hooks() {
         var _a;
         return ((_a = this._hooks) !== null && _a !== void 0 ? _a : (this._hooks = new HooksClient(this._options)));
@@ -145,10 +149,6 @@ export class ManagementClient {
         var _a;
         return ((_a = this._networkAcls) !== null && _a !== void 0 ? _a : (this._networkAcls = new NetworkAclsClient(this._options)));
     }
-    get organizationTemplates() {
-        var _a;
-        return ((_a = this._organizationTemplates) !== null && _a !== void 0 ? _a : (this._organizationTemplates = new OrganizationTemplatesClient(this._options)));
-    }
     get organizations() {
         var _a;
         return ((_a = this._organizations) !== null && _a !== void 0 ? _a : (this._organizations = new OrganizationsClient(this._options)));
@@ -229,9 +229,9 @@ export class ManagementClient {
         var _a;
         return ((_a = this._emails) !== null && _a !== void 0 ? _a : (this._emails = new EmailsClient(this._options)));
     }
-    get guardian() {
+    get experimentation() {
         var _a;
-        return ((_a = this._guardian) !== null && _a !== void 0 ? _a : (this._guardian = new GuardianClient(this._options)));
+        return ((_a = this._experimentation) !== null && _a !== void 0 ? _a : (this._experimentation = new ExperimentationClient(this._options)));
     }
     get keys() {
         var _a;

package/dist/esm/management/api/errors/GatewayTimeoutError.d.mts

@@ -0,0 +1,5 @@
+import * as core from "../../core/index.mjs";
+import * as errors from "../../errors/index.mjs";
+export declare class GatewayTimeoutError extends errors.ManagementError {
+    constructor(body?: unknown, rawResponse?: core.RawResponse);
+}

package/dist/esm/management/api/errors/GatewayTimeoutError.mjs

@@ -0,0 +1,17 @@
+// This file was auto-generated by Fern from our API Definition.
+import * as errors from "../../errors/index.mjs";
+export class GatewayTimeoutError extends errors.ManagementError {
+    constructor(body, rawResponse) {
+        super({
+            message: "GatewayTimeoutError",
+            statusCode: 504,
+            body: body,
+            rawResponse: rawResponse,
+        });
+        Object.setPrototypeOf(this, new.target.prototype);
+        if (Error.captureStackTrace) {
+            Error.captureStackTrace(this, this.constructor);
+        }
+        this.name = "GatewayTimeoutError";
+    }
+}

package/dist/esm/management/api/errors/index.d.mts

@@ -2,6 +2,7 @@ export * from "./BadRequestError.mjs";
 export * from "./ConflictError.mjs";
 export * from "./ContentTooLargeError.mjs";
 export * from "./ForbiddenError.mjs";
+export * from "./GatewayTimeoutError.mjs";
 export * from "./GoneError.mjs";
 export * from "./InternalServerError.mjs";
 export * from "./NotFoundError.mjs";

package/dist/esm/management/api/errors/index.mjs

@@ -2,6 +2,7 @@ export * from "./BadRequestError.mjs";
 export * from "./ConflictError.mjs";
 export * from "./ContentTooLargeError.mjs";
 export * from "./ForbiddenError.mjs";
+export * from "./GatewayTimeoutError.mjs";
 export * from "./GoneError.mjs";
 export * from "./InternalServerError.mjs";
 export * from "./NotFoundError.mjs";

package/dist/esm/management/api/requests/requests.d.mts

@@ -340,6 +340,7 @@ export interface CreateClientRequestContent {
     /** The identifier of the resource server that this client is linked to. */
     resource_server_identifier?: string;
     identity_assertion_authorization_grant?: Management.CreateIdentityAssertionAuthorizationGrant;
+    anonymous_sessions?: Management.CreateAnonymousSessions;
     third_party_security_mode?: Management.ClientThirdPartySecurityModeEnum;
     redirection_policy?: Management.ClientRedirectionPolicyEnum;
     express_configuration?: Management.ExpressConfiguration;
@@ -438,6 +439,7 @@ export interface UpdateClientRequestContent {
     custom_login_page_preview?: string;
     token_quota?: Management.UpdateTokenQuota | null;
     identity_assertion_authorization_grant?: Management.UpdateIdentityAssertionAuthorizationGrant | null;
+    anonymous_sessions?: Management.UpdateAnonymousSessions | null;
     /** Form template for WS-Federation protocol */
     form_template?: string;
     addons?: Management.ClientAddons;
@@ -699,7 +701,7 @@ export interface ListDeviceCredentialsRequestParameters {
     user_id?: string | null;
     /** client_id of the devices to retrieve. */
     client_id?: string | null;
-    /** Type of credentials to retrieve. Must be `public_key`, `refresh_token` or `rotating_refresh_token`. The property will default to `refresh_token` when paging is requested */
+    /** Type of credentials to retrieve. Must be `public_key`, `refresh_token` or `rotating_refresh_token`. If none is provided a combined list of `refresh_tokens` and `public_keys` will be returned (and no `rotating_refresh_token`), in this case `page`, `per_page` and `include_totals` will be ignored. */
     type?: Management.DeviceCredentialTypeEnum | null;
 }
 /**
@@ -1024,6 +1026,25 @@ export interface ListGroupsRequestParameters {
     /** Number of results per page. Defaults to 50. */
     take?: number | null;
 }
+/**
+ * @example
+ *     {
+ *         display_remember_me_checkbox: true,
+ *         remember_me_default_value: true,
+ *         mfa_session_inactivity_timeout: 1,
+ *         mfa_session_overall_timeout: 1
+ *     }
+ */
+export interface SetGuardianSettingsRequestContent {
+    /** Determines whether to display the "Remember Me" checkbox on the MFA prompt in Universal Login. */
+    display_remember_me_checkbox: boolean;
+    /** Determines the default state of the "Remember Me" checkbox on the MFA prompt in Universal Login. */
+    remember_me_default_value: boolean;
+    /** Duration of inactivity after which the user will be prompted for MFA. Represented as seconds. Minimum duration is 1 hour, maximum is 30 days, and cannot exceed the overall timeout. */
+    mfa_session_inactivity_timeout: number;
+    /** Maximum duration after which the user will be prompted for MFA regardless of activity. Represented as seconds. Minimum duration is 1 hour, maximum is 90 days. */
+    mfa_session_overall_timeout: number;
+}
 /**
  * @example
  *     {
@@ -1204,93 +1225,6 @@ export interface UpdateNetworkAclRequestContent {
     priority?: number;
     rule?: Management.NetworkAclRule;
 }
-/**
- * @example
- *     {
- *         from: "from",
- *         take: 1
- *     }
- */
-export interface ListOrganizationTemplatesRequestParameters {
-    /** Optional Id from which to start selection. */
-    from?: string | null;
-    /** Number of results per page. Defaults to 5. Values greater than 10 are capped at 10. */
-    take?: number | null;
-}
-/**
- * @example
- *     {
- *         name: "name",
- *         organization_deletion_behavior: "allow",
- *         enforce_permission_ceiling: true,
- *         enforce_self_assignment_restriction: true
- *     }
- */
-export interface CreateOrganizationTemplateRequestContent {
-    /** The name of the organization template. */
-    name: string;
-    /** Whether this is the default template applied to new organizations. */
-    is_default?: boolean;
-    organization_deletion_behavior: Management.OrganizationDeletionBehaviorEnum;
-    connection_deletion_behavior?: Management.ConnectionDeletionBehaviorEnum;
-    /** Whether to enforce permission ceiling for organizations using this template. */
-    enforce_permission_ceiling: boolean;
-    /** Whether to enforce self-assignment restrictions for organizations using this template. */
-    enforce_self_assignment_restriction: boolean;
-    /** The connection profile to apply to new connections. */
-    connection_profile_id?: string | null;
-    /** The user attribute profile to apply to organizations. */
-    user_attribute_profile_id?: string | null;
-    /** List of allowed connection strategies for this template. */
-    allowed_strategies?: Management.OrganizationTemplateAllowedStrategyEnum[] | null;
-    /** The client ID for the invitation landing page. */
-    invitation_landing_client_id?: string | null;
-    /** Default admin roles to assign to organization creators. */
-    admin_roles_assignment?: string[] | null;
-    use_for_organization_discovery?: Management.OrganizationTemplateUseForOrganizationDiscovery | null;
-    role_visibility_policy?: Management.OrganizationTemplateRoleVisibilityPolicy | null;
-}
-/**
- * @example
- *     {}
- */
-export interface UpdateOrganizationTemplateRequestContent {
-    /** The name of the organization template. */
-    name?: string;
-    /** Whether this is the default template applied to new organizations. */
-    is_default?: boolean;
-    organization_deletion_behavior?: Management.OrganizationDeletionBehaviorEnum;
-    connection_deletion_behavior?: Management.ConnectionDeletionBehaviorEnum;
-    /** Whether to enforce permission ceiling for organizations using this template. */
-    enforce_permission_ceiling?: boolean;
-    /** Whether to enforce self-assignment restrictions for organizations using this template. */
-    enforce_self_assignment_restriction?: boolean;
-    /** The connection profile to apply to new connections. */
-    connection_profile_id?: string | null;
-    /** The user attribute profile to apply to organizations. */
-    user_attribute_profile_id?: string | null;
-    /** List of allowed connection strategies for this template. */
-    allowed_strategies?: Management.OrganizationTemplateAllowedStrategyEnum[] | null;
-    /** The client ID for the invitation landing page. */
-    invitation_landing_client_id?: string | null;
-    /** Default admin roles to assign to organization creators. */
-    admin_roles_assignment?: string[] | null;
-    use_for_organization_discovery?: Management.OrganizationTemplateUseForOrganizationDiscovery | null;
-    role_visibility_policy?: Management.OrganizationTemplateRoleVisibilityPolicy | null;
-}
-/**
- * @example
- *     {
- *         from: "from",
- *         take: 1
- *     }
- */
-export interface ListTemplateOrganizationsRequestParameters {
-    /** Optional Id from which to start selection. */
-    from?: string | null;
-    /** Number of results per page. Defaults to 5. Values greater than 10 are capped at 10. */
-    take?: number | null;
-}
 /**
  * @example
  *     {
@@ -1333,6 +1267,28 @@ export interface CreateOrganizationRequestContent {
     /** Whether app entitlement is active for this organization. */
     is_app_entitlement_active?: boolean;
 }
+/**
+ * @example
+ *     {
+ *         q: "q",
+ *         parser: "scim",
+ *         take: 1,
+ *         from: "from",
+ *         sort: "name"
+ *     }
+ */
+export interface SearchOrganizationsRequestParameters {
+    /** Filter expression in SCIM or Lucene syntax (depending on parser parameter, default: Lucene). Lucene examples: `name:acme*`, `display_name:*auth*`. SCIM examples: `name eq "Auth0"`, `display_name sw "auth" and created_at gt "2024-01-01"`. SCIM operators: eq, ne, sw, ew, co, pr, gt, ge, lt, le, and, or. <br /><br /><b>Supported Fields</b>:<ul><li><i>id</i> - Organization ID (case-sensitive, exact match)</li><li><i>name</i> - Organization name (supports contains, starts-with, ends-with operators; sortable)</li><li><i>display_name</i> - Organization display name (supports contains, starts-with, ends-with operators; sortable)</li><li><i>created_at</i> - Creation timestamp (supports date range operators; sortable)</li><li><i>metadata.{key}</i> - Filter by organization metadata key-value pairs</li></ul>Maximum 5 filter operations per query. Results are eventually consistent and may not reflect recent updates. */
+    q?: string | null;
+    /** Query parser to use for the filter expression. Use "scim" for SCIM filter syntax or "lucene" for Lucene query syntax (default). */
+    parser?: Management.SearchParserEnum | null;
+    /** Maximum number of results to return per page (1-100). Defaults to 50. */
+    take?: number | null;
+    /** Cursor for the next page of results. Use the value from the next field in the previous response. */
+    from?: string | null;
+    /** Field name to sort results by in ascending order only. Defaults to insertion order (oldest first) if not provided. */
+    sort?: Management.OrganizationSortFieldEnum | null;
+}
 /**
  * @example
  *     {}
@@ -1504,6 +1460,8 @@ export interface CreateResourceServerRequestContent {
     allow_online_access_with_ephemeral_sessions?: boolean;
     /** Expiration value (in seconds) for access tokens issued for this API from the token endpoint. */
     token_lifetime?: number;
+    /** Expiration value (in seconds) for anonymous-session access tokens issued for this API. */
+    token_lifetime_for_anonymous_access_tokens?: number | null;
     token_dialect?: Management.ResourceServerTokenDialectSchemaEnum;
     /** Whether to skip user consent for applications flagged as first party (true) or not (false). */
     skip_consent_for_verifiable_first_party_clients?: boolean;
@@ -1516,6 +1474,34 @@ export interface CreateResourceServerRequestContent {
     subject_type_authorization?: Management.ResourceServerSubjectTypeAuthorization;
     authorization_policy?: Management.ResourceServerAuthorizationPolicy | null;
 }
+/**
+ * @example
+ *     {
+ *         q: "q",
+ *         parser: "scim",
+ *         fields: "fields",
+ *         include_fields: true,
+ *         take: 1,
+ *         from: "from",
+ *         sort: "identifier"
+ *     }
+ */
+export interface SearchResourceServersRequestParameters {
+    /** Filter expression in SCIM or Lucene syntax (depending on parser parameter). SCIM examples: `name eq "My API"`, `identifier sw "https://"`. SCIM operators: eq, ne, sw, ew, co, pr, gt, ge, lt, le, and, or. <br /><br /><b>Supported Fields</b>:<ul><li><i>id</i> - Filter by resource server ID</li><li><i>identifier</i> - Filter by resource server identifier</li><li><i>name</i> - Filter by resource server name</li><li><i>updated_at</i> - Filter by last update date</li></ul>Maximum 5 filter operations per query. Results are eventually consistent and may not reflect recent updates. */
+    q?: string | null;
+    /** Query parser to use for the filter expression. Use "scim" for SCIM filter syntax or "lucene" for Lucene query syntax (default). */
+    parser?: Management.SearchParserEnum | null;
+    /** Comma-separated list of fields to include or exclude in the response. Works with the include_fields parameter to control projection mode. */
+    fields?: string | null;
+    /** Controls field projection mode. Set to true to include only fields specified in the fields parameter. Set to false to exclude fields specified in the fields parameter. Defaults to true if not specified. */
+    include_fields?: boolean | null;
+    /** Maximum number of results to return per page (1-100). Defaults to 50. */
+    take?: number | null;
+    /** Cursor for the next page of results. Use the value from the next field in the previous response. */
+    from?: string | null;
+    /** Field name to sort results by in ascending order only. Defaults to insertion order (oldest first) if not provided. */
+    sort?: Management.ResourceServerSortFieldEnum | null;
+}
 /**
  * @example
  *     {
@@ -1548,6 +1534,8 @@ export interface UpdateResourceServerRequestContent {
     allow_online_access_with_ephemeral_sessions?: boolean;
     /** Expiration value (in seconds) for access tokens issued for this API from the token endpoint. */
     token_lifetime?: number;
+    /** Expiration value (in seconds) for anonymous-session access tokens issued for this API. */
+    token_lifetime_for_anonymous_access_tokens?: number | null;
     token_dialect?: Management.ResourceServerTokenDialectSchemaEnum;
     /** Whether authorization policies are enforced (true) or not enforced (false). */
     enforce_policies?: boolean;
@@ -2834,6 +2822,16 @@ export interface CreateEventStreamRedeliveryRequestContent {
     /** Filter by event type */
     event_types?: Management.EventStreamEventTypeEnum[];
 }
+/**
+ * @example
+ *     {
+ *         target_level: 1
+ *     }
+ */
+export interface AdvanceRampRequestContent {
+    /** The target percentage level from the experiment schedule. Must be the immediate next level. */
+    target_level: number;
+}
 /**
  * @example
  *     {
@@ -2966,6 +2964,19 @@ export interface SetGuardianFactorRequestContent {
     /** Whether this factor is enabled (true) or disabled (false). */
     enabled: boolean;
 }
+/**
+ * @example
+ *     {
+ *         otp_length: 1,
+ *         otp_expiration_time: 1
+ *     }
+ */
+export interface SetEmailFactorSettingsRequestContent {
+    /** The length of the OTP code. */
+    otp_length: number;
+    /** The OTP expiration time in seconds. */
+    otp_expiration_time: number;
+}
 /**
  * @example
  *     {
@@ -2999,6 +3010,19 @@ export interface SetGuardianFactorsProviderPhoneTwilioRequestContent {
 export interface SetGuardianFactorsProviderPhoneRequestContent {
     provider: Management.GuardianFactorsProviderSmsProviderEnum;
 }
+/**
+ * @example
+ *     {
+ *         otp_length: 1,
+ *         otp_expiration_time: 1
+ *     }
+ */
+export interface SetPhoneFactorSettingsRequestContent {
+    /** The length of the OTP code. */
+    otp_length: number;
+    /** The OTP expiration time in seconds. */
+    otp_expiration_time: number;
+}
 /**
  * @example
  *     {

package/dist/esm/management/api/resources/experimentation/client/Client.d.mts

@@ -0,0 +1,12 @@
+import type { BaseClientOptions } from "../../../../BaseClient.mjs";
+import { type NormalizedClientOptionsWithAuth } from "../../../../BaseClient.mjs";
+import { ExperimentsClient } from "../resources/experiments/client/Client.mjs";
+export declare namespace ExperimentationClient {
+    type Options = BaseClientOptions;
+}
+export declare class ExperimentationClient {
+    protected readonly _options: NormalizedClientOptionsWithAuth<ExperimentationClient.Options>;
+    protected _experiments: ExperimentsClient | undefined;
+    constructor(options: ExperimentationClient.Options);
+    get experiments(): ExperimentsClient;
+}

package/dist/esm/management/api/resources/experimentation/client/Client.mjs

@@ -0,0 +1,12 @@
+// This file was auto-generated by Fern from our API Definition.
+import { normalizeClientOptionsWithAuth } from "../../../../BaseClient.mjs";
+import { ExperimentsClient } from "../resources/experiments/client/Client.mjs";
+export class ExperimentationClient {
+    constructor(options) {
+        this._options = normalizeClientOptionsWithAuth(options);
+    }
+    get experiments() {
+        var _a;
+        return ((_a = this._experiments) !== null && _a !== void 0 ? _a : (this._experiments = new ExperimentsClient(this._options)));
+    }
+}

package/dist/esm/management/api/resources/experimentation/client/index.d.mts

@@ -0,0 +1 @@
+export {};

package/dist/esm/management/api/resources/experimentation/client/index.mjs

@@ -0,0 +1 @@
+export {};