auth0 7.0.0 → 7.2.0

package/dist/esm/management/api/requests/requests.d.mts

@@ -340,6 +340,7 @@ export interface CreateClientRequestContent {
     /** The identifier of the resource server that this client is linked to. */
     resource_server_identifier?: string;
     identity_assertion_authorization_grant?: Management.CreateIdentityAssertionAuthorizationGrant;
+    anonymous_sessions?: Management.CreateAnonymousSessions;
     third_party_security_mode?: Management.ClientThirdPartySecurityModeEnum;
     redirection_policy?: Management.ClientRedirectionPolicyEnum;
     express_configuration?: Management.ExpressConfiguration;
@@ -438,6 +439,7 @@ export interface UpdateClientRequestContent {
     custom_login_page_preview?: string;
     token_quota?: Management.UpdateTokenQuota | null;
     identity_assertion_authorization_grant?: Management.UpdateIdentityAssertionAuthorizationGrant | null;
+    anonymous_sessions?: Management.UpdateAnonymousSessions | null;
     /** Form template for WS-Federation protocol */
     form_template?: string;
     addons?: Management.ClientAddons;
@@ -699,7 +701,7 @@ export interface ListDeviceCredentialsRequestParameters {
     user_id?: string | null;
     /** client_id of the devices to retrieve. */
     client_id?: string | null;
-    /** Type of credentials to retrieve. Must be `public_key`, `refresh_token` or `rotating_refresh_token`. The property will default to `refresh_token` when paging is requested */
+    /** Type of credentials to retrieve. Must be `public_key`, `refresh_token` or `rotating_refresh_token`. If none is provided a combined list of `refresh_tokens` and `public_keys` will be returned (and no `rotating_refresh_token`), in this case `page`, `per_page` and `include_totals` will be ignored. */
     type?: Management.DeviceCredentialTypeEnum | null;
 }
 /**
@@ -1024,6 +1026,25 @@ export interface ListGroupsRequestParameters {
     /** Number of results per page. Defaults to 50. */
     take?: number | null;
 }
+/**
+ * @example
+ *     {
+ *         display_remember_me_checkbox: true,
+ *         remember_me_default_value: true,
+ *         mfa_session_inactivity_timeout: 1,
+ *         mfa_session_overall_timeout: 1
+ *     }
+ */
+export interface SetGuardianSettingsRequestContent {
+    /** Determines whether to display the "Remember Me" checkbox on the MFA prompt in Universal Login. */
+    display_remember_me_checkbox: boolean;
+    /** Determines the default state of the "Remember Me" checkbox on the MFA prompt in Universal Login. */
+    remember_me_default_value: boolean;
+    /** Duration of inactivity after which the user will be prompted for MFA. Represented as seconds. Minimum duration is 1 hour, maximum is 30 days, and cannot exceed the overall timeout. */
+    mfa_session_inactivity_timeout: number;
+    /** Maximum duration after which the user will be prompted for MFA regardless of activity. Represented as seconds. Minimum duration is 1 hour, maximum is 90 days. */
+    mfa_session_overall_timeout: number;
+}
 /**
  * @example
  *     {
@@ -1204,93 +1225,6 @@ export interface UpdateNetworkAclRequestContent {
     priority?: number;
     rule?: Management.NetworkAclRule;
 }
-/**
- * @example
- *     {
- *         from: "from",
- *         take: 1
- *     }
- */
-export interface ListOrganizationTemplatesRequestParameters {
-    /** Optional Id from which to start selection. */
-    from?: string | null;
-    /** Number of results per page. Defaults to 5. Values greater than 10 are capped at 10. */
-    take?: number | null;
-}
-/**
- * @example
- *     {
- *         name: "name",
- *         organization_deletion_behavior: "allow",
- *         enforce_permission_ceiling: true,
- *         enforce_self_assignment_restriction: true
- *     }
- */
-export interface CreateOrganizationTemplateRequestContent {
-    /** The name of the organization template. */
-    name: string;
-    /** Whether this is the default template applied to new organizations. */
-    is_default?: boolean;
-    organization_deletion_behavior: Management.OrganizationDeletionBehaviorEnum;
-    connection_deletion_behavior?: Management.ConnectionDeletionBehaviorEnum;
-    /** Whether to enforce permission ceiling for organizations using this template. */
-    enforce_permission_ceiling: boolean;
-    /** Whether to enforce self-assignment restrictions for organizations using this template. */
-    enforce_self_assignment_restriction: boolean;
-    /** The connection profile to apply to new connections. */
-    connection_profile_id?: string | null;
-    /** The user attribute profile to apply to organizations. */
-    user_attribute_profile_id?: string | null;
-    /** List of allowed connection strategies for this template. */
-    allowed_strategies?: Management.OrganizationTemplateAllowedStrategyEnum[] | null;
-    /** The client ID for the invitation landing page. */
-    invitation_landing_client_id?: string | null;
-    /** Default admin roles to assign to organization creators. */
-    admin_roles_assignment?: string[] | null;
-    use_for_organization_discovery?: Management.OrganizationTemplateUseForOrganizationDiscovery | null;
-    role_visibility_policy?: Management.OrganizationTemplateRoleVisibilityPolicy | null;
-}
-/**
- * @example
- *     {}
- */
-export interface UpdateOrganizationTemplateRequestContent {
-    /** The name of the organization template. */
-    name?: string;
-    /** Whether this is the default template applied to new organizations. */
-    is_default?: boolean;
-    organization_deletion_behavior?: Management.OrganizationDeletionBehaviorEnum;
-    connection_deletion_behavior?: Management.ConnectionDeletionBehaviorEnum;
-    /** Whether to enforce permission ceiling for organizations using this template. */
-    enforce_permission_ceiling?: boolean;
-    /** Whether to enforce self-assignment restrictions for organizations using this template. */
-    enforce_self_assignment_restriction?: boolean;
-    /** The connection profile to apply to new connections. */
-    connection_profile_id?: string | null;
-    /** The user attribute profile to apply to organizations. */
-    user_attribute_profile_id?: string | null;
-    /** List of allowed connection strategies for this template. */
-    allowed_strategies?: Management.OrganizationTemplateAllowedStrategyEnum[] | null;
-    /** The client ID for the invitation landing page. */
-    invitation_landing_client_id?: string | null;
-    /** Default admin roles to assign to organization creators. */
-    admin_roles_assignment?: string[] | null;
-    use_for_organization_discovery?: Management.OrganizationTemplateUseForOrganizationDiscovery | null;
-    role_visibility_policy?: Management.OrganizationTemplateRoleVisibilityPolicy | null;
-}
-/**
- * @example
- *     {
- *         from: "from",
- *         take: 1
- *     }
- */
-export interface ListTemplateOrganizationsRequestParameters {
-    /** Optional Id from which to start selection. */
-    from?: string | null;
-    /** Number of results per page. Defaults to 5. Values greater than 10 are capped at 10. */
-    take?: number | null;
-}
 /**
  * @example
  *     {
@@ -1333,6 +1267,28 @@ export interface CreateOrganizationRequestContent {
     /** Whether app entitlement is active for this organization. */
     is_app_entitlement_active?: boolean;
 }
+/**
+ * @example
+ *     {
+ *         q: "q",
+ *         parser: "scim",
+ *         take: 1,
+ *         from: "from",
+ *         sort: "name"
+ *     }
+ */
+export interface SearchOrganizationsRequestParameters {
+    /** Filter expression in SCIM or Lucene syntax (depending on parser parameter, default: Lucene). Lucene examples: `name:acme*`, `display_name:*auth*`. SCIM examples: `name eq "Auth0"`, `display_name sw "auth" and created_at gt "2024-01-01"`. SCIM operators: eq, ne, sw, ew, co, pr, gt, ge, lt, le, and, or. <br /><br /><b>Supported Fields</b>:<ul><li><i>id</i> - Organization ID (case-sensitive, exact match)</li><li><i>name</i> - Organization name (supports contains, starts-with, ends-with operators; sortable)</li><li><i>display_name</i> - Organization display name (supports contains, starts-with, ends-with operators; sortable)</li><li><i>created_at</i> - Creation timestamp (supports date range operators; sortable)</li><li><i>metadata.{key}</i> - Filter by organization metadata key-value pairs</li></ul>Maximum 5 filter operations per query. Results are eventually consistent and may not reflect recent updates. */
+    q?: string | null;
+    /** Query parser to use for the filter expression. Use "scim" for SCIM filter syntax or "lucene" for Lucene query syntax (default). */
+    parser?: Management.SearchParserEnum | null;
+    /** Maximum number of results to return per page (1-100). Defaults to 50. */
+    take?: number | null;
+    /** Cursor for the next page of results. Use the value from the next field in the previous response. */
+    from?: string | null;
+    /** Field name to sort results by in ascending order only. Defaults to insertion order (oldest first) if not provided. */
+    sort?: Management.OrganizationSortFieldEnum | null;
+}
 /**
  * @example
  *     {}
@@ -1504,11 +1460,14 @@ export interface CreateResourceServerRequestContent {
     allow_online_access_with_ephemeral_sessions?: boolean;
     /** Expiration value (in seconds) for access tokens issued for this API from the token endpoint. */
     token_lifetime?: number;
+    /** Expiration value (in seconds) for anonymous-session access tokens issued for this API. */
+    token_lifetime_for_anonymous_access_tokens?: number | null;
     token_dialect?: Management.ResourceServerTokenDialectSchemaEnum;
     /** Whether to skip user consent for applications flagged as first party (true) or not (false). */
     skip_consent_for_verifiable_first_party_clients?: boolean;
     /** Whether to enforce authorization policies (true) or to ignore them (false). */
     enforce_policies?: boolean;
+    access_token?: Management.ResourceServerAccessToken | null;
     token_encryption?: Management.ResourceServerTokenEncryption | null;
     consent_policy?: Management.ResourceServerConsentPolicyEnum | null;
     authorization_details?: unknown[] | null;
@@ -1516,6 +1475,34 @@ export interface CreateResourceServerRequestContent {
     subject_type_authorization?: Management.ResourceServerSubjectTypeAuthorization;
     authorization_policy?: Management.ResourceServerAuthorizationPolicy | null;
 }
+/**
+ * @example
+ *     {
+ *         q: "q",
+ *         parser: "scim",
+ *         fields: "fields",
+ *         include_fields: true,
+ *         take: 1,
+ *         from: "from",
+ *         sort: "identifier"
+ *     }
+ */
+export interface SearchResourceServersRequestParameters {
+    /** Filter expression in SCIM or Lucene syntax (depending on parser parameter). SCIM examples: `name eq "My API"`, `identifier sw "https://"`. SCIM operators: eq, ne, sw, ew, co, pr, gt, ge, lt, le, and, or. <br /><br /><b>Supported Fields</b>:<ul><li><i>id</i> - Filter by resource server ID</li><li><i>identifier</i> - Filter by resource server identifier</li><li><i>name</i> - Filter by resource server name</li><li><i>updated_at</i> - Filter by last update date</li></ul>Maximum 5 filter operations per query. Results are eventually consistent and may not reflect recent updates. */
+    q?: string | null;
+    /** Query parser to use for the filter expression. Use "scim" for SCIM filter syntax or "lucene" for Lucene query syntax (default). */
+    parser?: Management.SearchParserEnum | null;
+    /** Comma-separated list of fields to include or exclude in the response. Works with the include_fields parameter to control projection mode. */
+    fields?: string | null;
+    /** Controls field projection mode. Set to true to include only fields specified in the fields parameter. Set to false to exclude fields specified in the fields parameter. Defaults to true if not specified. */
+    include_fields?: boolean | null;
+    /** Maximum number of results to return per page (1-100). Defaults to 50. */
+    take?: number | null;
+    /** Cursor for the next page of results. Use the value from the next field in the previous response. */
+    from?: string | null;
+    /** Field name to sort results by in ascending order only. Defaults to insertion order (oldest first) if not provided. */
+    sort?: Management.ResourceServerSortFieldEnum | null;
+}
 /**
  * @example
  *     {
@@ -1548,9 +1535,12 @@ export interface UpdateResourceServerRequestContent {
     allow_online_access_with_ephemeral_sessions?: boolean;
     /** Expiration value (in seconds) for access tokens issued for this API from the token endpoint. */
     token_lifetime?: number;
+    /** Expiration value (in seconds) for anonymous-session access tokens issued for this API. */
+    token_lifetime_for_anonymous_access_tokens?: number | null;
     token_dialect?: Management.ResourceServerTokenDialectSchemaEnum;
     /** Whether authorization policies are enforced (true) or not enforced (false). */
     enforce_policies?: boolean;
+    access_token?: Management.ResourceServerAccessToken | null;
     token_encryption?: Management.ResourceServerTokenEncryption | null;
     consent_policy?: Management.ResourceServerConsentPolicyEnum | null;
     authorization_details?: unknown[] | null;
@@ -2834,6 +2824,16 @@ export interface CreateEventStreamRedeliveryRequestContent {
     /** Filter by event type */
     event_types?: Management.EventStreamEventTypeEnum[];
 }
+/**
+ * @example
+ *     {
+ *         target_level: 1
+ *     }
+ */
+export interface AdvanceRampRequestContent {
+    /** The target percentage level from the experiment schedule. Must be the immediate next level. */
+    target_level: number;
+}
 /**
  * @example
  *     {
@@ -2966,6 +2966,19 @@ export interface SetGuardianFactorRequestContent {
     /** Whether this factor is enabled (true) or disabled (false). */
     enabled: boolean;
 }
+/**
+ * @example
+ *     {
+ *         otp_length: 1,
+ *         otp_expiration_time: 1
+ *     }
+ */
+export interface SetEmailFactorSettingsRequestContent {
+    /** The length of the OTP code. */
+    otp_length: number;
+    /** The OTP expiration time in seconds. */
+    otp_expiration_time: number;
+}
 /**
  * @example
  *     {
@@ -2999,6 +3012,19 @@ export interface SetGuardianFactorsProviderPhoneTwilioRequestContent {
 export interface SetGuardianFactorsProviderPhoneRequestContent {
     provider: Management.GuardianFactorsProviderSmsProviderEnum;
 }
+/**
+ * @example
+ *     {
+ *         otp_length: 1,
+ *         otp_expiration_time: 1
+ *     }
+ */
+export interface SetPhoneFactorSettingsRequestContent {
+    /** The length of the OTP code. */
+    otp_length: number;
+    /** The OTP expiration time in seconds. */
+    otp_expiration_time: number;
+}
 /**
  * @example
  *     {
@@ -3365,6 +3391,7 @@ export interface CreateOrganizationAllConnectionRequestParameters {
     /** Determines whether organization signup should be enabled for this organization connection. Only applicable for database connections. Default: false. */
     is_signup_enabled?: boolean;
     organization_access_level?: Management.OrganizationAccessLevelEnum;
+    organization_member_access_level?: Management.OrganizationMemberAccessLevelEnum;
     /** Whether the connection is enabled for the organization. */
     is_enabled?: boolean;
     /** Connection identifier. */
@@ -3384,6 +3411,7 @@ export interface UpdateOrganizationConnectionRequestParameters {
     /** Determines whether organization signup should be enabled for this organization connection. Only applicable for database connections. Default: false. */
     is_signup_enabled?: boolean;
     organization_access_level?: Management.OrganizationAccessLevelEnumWithNull | null;
+    organization_member_access_level?: Management.OrganizationMemberAccessLevelEnumWithNull | null;
     /** Whether the connection is enabled for the organization. */
     is_enabled?: boolean | null;
 }
@@ -3981,6 +4009,7 @@ export interface UpdateTenantSettingsRequestContent {
     default_redirection_uri?: string;
     /** Supported locales for the user interface */
     enabled_locales?: Management.TenantSettingsSupportedLocalesEnum[];
+    access_token?: Management.ResourceServerAccessToken | null;
     security_headers?: Management.TenantSettingsNullableSecurityHeaders | null;
     session_cookie?: Management.SessionCookieSchema | null;
     sessions?: Management.TenantSettingsSessions | null;

package/dist/esm/management/api/resources/experimentation/client/Client.d.mts

@@ -0,0 +1,12 @@
+import type { BaseClientOptions } from "../../../../BaseClient.mjs";
+import { type NormalizedClientOptionsWithAuth } from "../../../../BaseClient.mjs";
+import { ExperimentsClient } from "../resources/experiments/client/Client.mjs";
+export declare namespace ExperimentationClient {
+    type Options = BaseClientOptions;
+}
+export declare class ExperimentationClient {
+    protected readonly _options: NormalizedClientOptionsWithAuth<ExperimentationClient.Options>;
+    protected _experiments: ExperimentsClient | undefined;
+    constructor(options: ExperimentationClient.Options);
+    get experiments(): ExperimentsClient;
+}

package/dist/esm/management/api/resources/experimentation/client/Client.mjs

@@ -0,0 +1,12 @@
+// This file was auto-generated by Fern from our API Definition.
+import { normalizeClientOptionsWithAuth } from "../../../../BaseClient.mjs";
+import { ExperimentsClient } from "../resources/experiments/client/Client.mjs";
+export class ExperimentationClient {
+    constructor(options) {
+        this._options = normalizeClientOptionsWithAuth(options);
+    }
+    get experiments() {
+        var _a;
+        return ((_a = this._experiments) !== null && _a !== void 0 ? _a : (this._experiments = new ExperimentsClient(this._options)));
+    }
+}

package/dist/esm/management/api/resources/experimentation/client/index.d.mts

@@ -0,0 +1 @@
+export {};

package/dist/esm/management/api/resources/experimentation/client/index.mjs

@@ -0,0 +1 @@
+export {};

package/dist/esm/management/api/resources/experimentation/exports.d.mts

@@ -0,0 +1,3 @@
+export { ExperimentationClient } from "./client/Client.mjs";
+export * from "./client/index.mjs";
+export * from "./resources/index.mjs";

package/dist/esm/management/api/resources/experimentation/exports.mjs

@@ -0,0 +1,4 @@
+// This file was auto-generated by Fern from our API Definition.
+export { ExperimentationClient } from "./client/Client.mjs";
+export * from "./client/index.mjs";
+export * from "./resources/index.mjs";

package/dist/esm/management/api/resources/experimentation/index.d.mts

@@ -0,0 +1,2 @@
+export * from "./client/index.mjs";
+export * from "./resources/index.mjs";

package/dist/esm/management/api/resources/experimentation/index.mjs

@@ -0,0 +1,2 @@
+export * from "./client/index.mjs";
+export * from "./resources/index.mjs";

package/dist/esm/management/api/resources/experimentation/resources/experiments/client/Client.d.mts

@@ -0,0 +1,34 @@
+import type { BaseClientOptions, BaseRequestOptions } from "../../../../../../BaseClient.mjs";
+import { type NormalizedClientOptionsWithAuth } from "../../../../../../BaseClient.mjs";
+import * as core from "../../../../../../core/index.mjs";
+import * as Management from "../../../../../index.mjs";
+export declare namespace ExperimentsClient {
+    type Options = BaseClientOptions;
+    interface RequestOptions extends BaseRequestOptions {
+    }
+}
+export declare class ExperimentsClient {
+    protected readonly _options: NormalizedClientOptionsWithAuth<ExperimentsClient.Options>;
+    constructor(options: ExperimentsClient.Options);
+    /**
+     * Increments the current ramp index to the requested target level. Up-only: the target must be the immediate next level in the schedule. Idempotent: calling with the current level returns success without writing anything.
+     *
+     * @param {string} id - The ID of the experiment to advance.
+     * @param {Management.AdvanceRampRequestContent} request
+     * @param {ExperimentsClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link Management.BadRequestError}
+     * @throws {@link Management.UnauthorizedError}
+     * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
+     * @throws {@link Management.ConflictError}
+     * @throws {@link Management.TooManyRequestsError}
+     *
+     * @example
+     *     await client.experimentation.experiments.advanceRamp("id", {
+     *         target_level: 1
+     *     })
+     */
+    advanceRamp(id: string, request: Management.AdvanceRampRequestContent, requestOptions?: ExperimentsClient.RequestOptions): core.HttpResponsePromise<Management.AdvanceRampResponseContent>;
+    private __advanceRamp;
+}

package/dist/esm/management/api/resources/experimentation/resources/experiments/client/Client.mjs

@@ -0,0 +1,94 @@
+// This file was auto-generated by Fern from our API Definition.
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { normalizeClientOptionsWithAuth } from "../../../../../../BaseClient.mjs";
+import * as core from "../../../../../../core/index.mjs";
+import { mergeHeaders } from "../../../../../../core/headers.mjs";
+import * as environments from "../../../../../../environments.mjs";
+import { handleNonStatusCodeError } from "../../../../../../errors/handleNonStatusCodeError.mjs";
+import * as errors from "../../../../../../errors/index.mjs";
+import * as Management from "../../../../../index.mjs";
+export class ExperimentsClient {
+    constructor(options) {
+        this._options = normalizeClientOptionsWithAuth(options);
+    }
+    /**
+     * Increments the current ramp index to the requested target level. Up-only: the target must be the immediate next level in the schedule. Idempotent: calling with the current level returns success without writing anything.
+     *
+     * @param {string} id - The ID of the experiment to advance.
+     * @param {Management.AdvanceRampRequestContent} request
+     * @param {ExperimentsClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link Management.BadRequestError}
+     * @throws {@link Management.UnauthorizedError}
+     * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.NotFoundError}
+     * @throws {@link Management.ConflictError}
+     * @throws {@link Management.TooManyRequestsError}
+     *
+     * @example
+     *     await client.experimentation.experiments.advanceRamp("id", {
+     *         target_level: 1
+     *     })
+     */
+    advanceRamp(id, request, requestOptions) {
+        return core.HttpResponsePromise.fromPromise(this.__advanceRamp(id, request, requestOptions));
+    }
+    __advanceRamp(id, request, requestOptions) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k;
+            const _authRequest = yield this._options.authProvider.getAuthRequest();
+            let _headers = mergeHeaders(_authRequest.headers, (_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
+            const _response = yield ((_b = this._options.fetcher) !== null && _b !== void 0 ? _b : core.fetcher)({
+                url: core.url.join((_d = (_c = (yield core.Supplier.get(this._options.baseUrl))) !== null && _c !== void 0 ? _c : (yield core.Supplier.get(this._options.environment))) !== null && _d !== void 0 ? _d : environments.ManagementEnvironment.Default, `experimentation/experiments/${core.url.encodePathParam(id)}/advance-ramp`),
+                method: "POST",
+                headers: _headers,
+                contentType: "application/json",
+                queryString: core.url.queryBuilder().mergeAdditional(requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.queryParams).build(),
+                requestType: "json",
+                body: request,
+                timeoutMs: ((_g = (_e = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.timeoutInSeconds) !== null && _e !== void 0 ? _e : (_f = this._options) === null || _f === void 0 ? void 0 : _f.timeoutInSeconds) !== null && _g !== void 0 ? _g : 60) * 1000,
+                maxRetries: (_h = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.maxRetries) !== null && _h !== void 0 ? _h : (_j = this._options) === null || _j === void 0 ? void 0 : _j.maxRetries,
+                abortSignal: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.abortSignal,
+                fetchFn: (_k = this._options) === null || _k === void 0 ? void 0 : _k.fetch,
+                logging: this._options.logging,
+            });
+            if (_response.ok) {
+                return {
+                    data: _response.body,
+                    rawResponse: _response.rawResponse,
+                };
+            }
+            if (_response.error.reason === "status-code") {
+                switch (_response.error.statusCode) {
+                    case 400:
+                        throw new Management.BadRequestError(_response.error.body, _response.rawResponse);
+                    case 401:
+                        throw new Management.UnauthorizedError(_response.error.body, _response.rawResponse);
+                    case 403:
+                        throw new Management.ForbiddenError(_response.error.body, _response.rawResponse);
+                    case 404:
+                        throw new Management.NotFoundError(_response.error.body, _response.rawResponse);
+                    case 409:
+                        throw new Management.ConflictError(_response.error.body, _response.rawResponse);
+                    case 429:
+                        throw new Management.TooManyRequestsError(_response.error.body, _response.rawResponse);
+                    default:
+                        throw new errors.ManagementError({
+                            statusCode: _response.error.statusCode,
+                            body: _response.error.body,
+                            rawResponse: _response.rawResponse,
+                        });
+                }
+            }
+            return handleNonStatusCodeError(_response.error, _response.rawResponse, "POST", "/experimentation/experiments/{id}/advance-ramp");
+        });
+    }
+}

package/dist/esm/management/api/resources/experimentation/resources/experiments/client/index.d.mts

@@ -0,0 +1 @@
+export {};

package/dist/esm/management/api/resources/experimentation/resources/experiments/client/index.mjs

@@ -0,0 +1 @@
+export {};

package/dist/esm/management/api/resources/experimentation/resources/experiments/exports.d.mts

@@ -0,0 +1,2 @@
+export { ExperimentsClient } from "./client/Client.mjs";
+export * from "./client/index.mjs";

package/dist/esm/management/api/resources/{organizationTemplates → experimentation/resources/experiments}/exports.mjs

@@ -1,3 +1,3 @@
 // This file was auto-generated by Fern from our API Definition.
-export { OrganizationTemplatesClient } from "./client/Client.mjs";
+export { ExperimentsClient } from "./client/Client.mjs";
 export * from "./client/index.mjs";

package/dist/esm/management/api/resources/experimentation/resources/index.d.mts

@@ -0,0 +1 @@
+export * as experiments from "./experiments/index.mjs";

package/dist/esm/management/api/resources/experimentation/resources/index.mjs

@@ -0,0 +1 @@
+export * as experiments from "./experiments/index.mjs";

package/dist/esm/management/api/resources/guardian/client/Client.d.mts

@@ -1,10 +1,14 @@
-import type { BaseClientOptions } from "../../../../BaseClient.mjs";
+import type { BaseClientOptions, BaseRequestOptions } from "../../../../BaseClient.mjs";
 import { type NormalizedClientOptionsWithAuth } from "../../../../BaseClient.mjs";
+import * as core from "../../../../core/index.mjs";
+import * as Management from "../../../index.mjs";
 import { EnrollmentsClient } from "../resources/enrollments/client/Client.mjs";
 import { FactorsClient } from "../resources/factors/client/Client.mjs";
 import { PoliciesClient } from "../resources/policies/client/Client.mjs";
 export declare namespace GuardianClient {
     type Options = BaseClientOptions;
+    interface RequestOptions extends BaseRequestOptions {
+    }
 }
 export declare class GuardianClient {
     protected readonly _options: NormalizedClientOptionsWithAuth<GuardianClient.Options>;
@@ -15,4 +19,39 @@ export declare class GuardianClient {
     get enrollments(): EnrollmentsClient;
     get factors(): FactorsClient;
     get policies(): PoliciesClient;
+    /**
+     * TODO: Link this endpoint to relevant documentation when available.
+     *
+     * @param {GuardianClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link Management.UnauthorizedError}
+     * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.TooManyRequestsError}
+     *
+     * @example
+     *     await client.guardian.get()
+     */
+    get(requestOptions?: GuardianClient.RequestOptions): core.HttpResponsePromise<Management.GetGuardianSettingsResponseContent>;
+    private __get;
+    /**
+     * Update a tenant's guardian settings such as Remember Me
+     *
+     * @param {Management.SetGuardianSettingsRequestContent} request
+     * @param {GuardianClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link Management.BadRequestError}
+     * @throws {@link Management.UnauthorizedError}
+     * @throws {@link Management.ForbiddenError}
+     * @throws {@link Management.TooManyRequestsError}
+     *
+     * @example
+     *     await client.guardian.set({
+     *         display_remember_me_checkbox: true,
+     *         remember_me_default_value: true,
+     *         mfa_session_inactivity_timeout: 1,
+     *         mfa_session_overall_timeout: 1
+     *     })
+     */
+    set(request: Management.SetGuardianSettingsRequestContent, requestOptions?: GuardianClient.RequestOptions): core.HttpResponsePromise<Management.SetGuardianSettingsResponseContent>;
+    private __set;
 }