auth0 7.4.0-beta.2 → 7.4.0

package/dist/cjs/management/api/types/types.d.ts

@@ -1920,10 +1920,10 @@ export interface BreachedPasswordDetectionStage {
     "pre-user-registration"?: Management.BreachedPasswordDetectionPreUserRegistrationStage | undefined;
     "pre-change-password"?: Management.BreachedPasswordDetectionPreChangePasswordStage | undefined;
 }
-/** Controls whether the BFP unblock form is submitted automatically or requires manual interaction. Canonical field; deprecated alias normalized upstream. */
+/** Controls whether the unblock form is submitted automatically when the link is opened or must be submitted manually by the user. */
 export declare const BruteForceProtectionFormSubmissionModeEnum: {
-    readonly Manual: "manual";
     readonly Auto: "auto";
+    readonly Manual: "manual";
 };
 export type BruteForceProtectionFormSubmissionModeEnum = (typeof BruteForceProtectionFormSubmissionModeEnum)[keyof typeof BruteForceProtectionFormSubmissionModeEnum];
 /**
@@ -2138,6 +2138,7 @@ export interface Client {
     my_organization_configuration?: Management.ClientMyOrganizationResponseConfiguration | undefined;
     identity_assertion_authorization_grant?: Management.IdentityAssertionAuthorizationGrant | undefined;
     anonymous_sessions?: Management.AnonymousSessions | undefined;
+    enforce_anon_session_transfer_network_binding?: Management.ClientAnonymousSessionTransferNetworkBindingEnum | undefined;
     third_party_security_mode?: Management.ClientThirdPartySecurityModeEnum | undefined;
     redirection_policy?: Management.ClientRedirectionPolicyEnum | undefined;
     /** The identifier of the resource server that this client is linked to. */
@@ -2525,6 +2526,13 @@ export interface ClientAddons {
     sso_integration?: Management.ClientAddonSsoIntegration | undefined;
     oag?: (Management.ClientAddonOag | null) | undefined;
 }
+/** Indicates whether network binding should be enforced when consuming an anonymous session transfer token. If set to 'ip', consumption must happen from the same IP as the issuer. If set to 'asn', consumption must happen from the same ASN as the issuer. If set to 'none', binding is not enforced. Default value is `ip`. */
+export declare const ClientAnonymousSessionTransferNetworkBindingEnum: {
+    readonly Ip: "ip";
+    readonly Asn: "asn";
+    readonly None: "none";
+};
+export type ClientAnonymousSessionTransferNetworkBindingEnum = (typeof ClientAnonymousSessionTransferNetworkBindingEnum)[keyof typeof ClientAnonymousSessionTransferNetworkBindingEnum];
 /** The type of application this client represents */
 export declare const ClientAppTypeEnum: {
     readonly Native: "native";
@@ -3137,6 +3145,7 @@ export interface ClientSearchResponse {
     my_organization_configuration?: Management.ClientMyOrganizationResponseConfiguration | undefined;
     identity_assertion_authorization_grant?: Management.IdentityAssertionAuthorizationGrant | undefined;
     anonymous_sessions?: Management.AnonymousSessions | undefined;
+    enforce_anon_session_transfer_network_binding?: Management.ClientAnonymousSessionTransferNetworkBindingEnum | undefined;
     third_party_security_mode?: Management.ClientThirdPartySecurityModeEnum | undefined;
     redirection_policy?: Management.ClientRedirectionPolicyEnum | undefined;
     /** The identifier of the resource server that this client is linked to. */
@@ -5847,7 +5856,18 @@ export type ConnectionProfileOrganizationShowAsButtonEnum = (typeof ConnectionPr
  */
 export interface ConnectionProfileProvisioning {
     scim?: Management.ConnectionProfileProvisioningScim | undefined;
+    google_workspace?: Management.ConnectionProfileProvisioningGoogleWorkspace | undefined;
 }
+/**
+ * Google Workspace provisioning settings.
+ */
+export interface ConnectionProfileProvisioningGoogleWorkspace {
+    sync_users: Management.ConnectionProfileProvisioningGoogleWorkspaceSyncUsers;
+}
+/**
+ * Whether the connection is authorized to run Google Workspace user provisioning.
+ */
+export type ConnectionProfileProvisioningGoogleWorkspaceSyncUsers = boolean;
 /**
  * SCIM provisioning settings.
  */
@@ -5918,6 +5938,7 @@ export type ConnectionProfileStrategyOverridesEnabledFeatures = Management.Enabl
  */
 export interface ConnectionProfileStrategyOverridesProvisioning {
     scim?: Management.ConnectionProfileProvisioningScim | undefined;
+    google_workspace?: Management.ConnectionProfileProvisioningGoogleWorkspace | undefined;
 }
 /**
  * The structure of the template, which can be used as the payload for creating or updating a Connection Profile.
@@ -6086,9 +6107,15 @@ export type ConnectionRequireRequestUriRegistration = boolean;
  * Indicates whether the user is required to provide a username in addition to an email address.
  */
 export type ConnectionRequiresUsername = boolean;
-export interface ConnectionResponseCommon extends Management.CreateConnectionCommon {
+export interface ConnectionResponseCommon {
+    display_name: Management.ConnectionDisplayName;
     id: Management.ConnectionId;
     realms?: Management.ConnectionRealms | undefined;
+    name: Management.ConnectionName;
+    /** Use of this property is NOT RECOMMENDED. Use the PATCH /v2/connections/{id}/clients endpoint to enable the connection for a set of clients. */
+    enabled_clients?: string[] | undefined;
+    is_domain_connection?: Management.ConnectionIsDomainConnection | undefined;
+    metadata?: Management.ConnectionsMetadata | undefined;
 }
 /**
  * Response for connections with strategy=ad
@@ -7668,6 +7695,7 @@ export interface CreateClientResponseContent {
     my_organization_configuration?: Management.ClientMyOrganizationResponseConfiguration | undefined;
     identity_assertion_authorization_grant?: Management.IdentityAssertionAuthorizationGrant | undefined;
     anonymous_sessions?: Management.AnonymousSessions | undefined;
+    enforce_anon_session_transfer_network_binding?: Management.ClientAnonymousSessionTransferNetworkBindingEnum | undefined;
     third_party_security_mode?: Management.ClientThirdPartySecurityModeEnum | undefined;
     redirection_policy?: Management.ClientRedirectionPolicyEnum | undefined;
     /** The identifier of the resource server that this client is linked to. */
@@ -9375,8 +9403,7 @@ export interface CreateRoleResponseContent {
     /** Description of this role. */
     description?: string | undefined;
     type?: Management.RoleTypeEnum | undefined;
-    /** The id of the entity that owns this role, such as an organization id. */
-    owner_id?: string | undefined;
+    owner_id?: Management.RoleOwnerId | undefined;
 }
 export interface CreateRuleResponseContent {
     /** Name of this rule. */
@@ -9433,6 +9460,7 @@ export interface CreateSegmentResponseContent {
     name: string;
     description?: string | undefined;
     type: Management.SegmentTypeEnum;
+    status: Management.SegmentStatusEnum;
     rules: Management.SegmentRule[];
     created_at: string;
     updated_at: string;
@@ -10237,6 +10265,7 @@ export type EmailTemplateNameEnum = (typeof EmailTemplateNameEnum)[keyof typeof
 export declare const EnabledFeaturesEnum: {
     readonly Scim: "scim";
     readonly UniversalLogout: "universal_logout";
+    readonly DirectorySync: "directory_sync";
 };
 export type EnabledFeaturesEnum = (typeof EnabledFeaturesEnum)[keyof typeof EnabledFeaturesEnum];
 /**
@@ -10353,8 +10382,12 @@ export interface EventStreamCloudEventConnectionCreatedCloudEvent {
     data: Management.EventStreamCloudEventConnectionCreatedData;
     /** The auth0 tenant ID to which the event is associated. */
     a0tenant: string;
-    /** The auth0 event stream ID of the stream the event was delivered on. */
-    a0stream: string;
+    /**
+     * The auth0 event stream ID of the stream the event was delivered on.
+     * Present when the event is delivered via an event stream; omitted when
+     * events are retrieved via the Events API (GET /api/v2/events).
+     */
+    a0stream?: string | undefined;
     a0purpose?: Management.EventStreamCloudEventA0PurposeEnum | undefined;
 }
 /** The type of the event which has happened. */
@@ -13208,8 +13241,12 @@ export interface EventStreamCloudEventConnectionDeletedCloudEvent {
     data: Management.EventStreamCloudEventConnectionDeletedData;
     /** The auth0 tenant ID to which the event is associated. */
     a0tenant: string;
-    /** The auth0 event stream ID of the stream the event was delivered on. */
-    a0stream: string;
+    /**
+     * The auth0 event stream ID of the stream the event was delivered on.
+     * Present when the event is delivered via an event stream; omitted when
+     * events are retrieved via the Events API (GET /api/v2/events).
+     */
+    a0stream?: string | undefined;
     a0purpose?: Management.EventStreamCloudEventA0PurposeEnum | undefined;
 }
 /** The type of the event which has happened. */
@@ -16063,8 +16100,12 @@ export interface EventStreamCloudEventConnectionUpdatedCloudEvent {
     data: Management.EventStreamCloudEventConnectionUpdatedData;
     /** The auth0 tenant ID to which the event is associated. */
     a0tenant: string;
-    /** The auth0 event stream ID of the stream the event was delivered on. */
-    a0stream: string;
+    /**
+     * The auth0 event stream ID of the stream the event was delivered on.
+     * Present when the event is delivered via an event stream; omitted when
+     * events are retrieved via the Events API (GET /api/v2/events).
+     */
+    a0stream?: string | undefined;
     a0purpose?: Management.EventStreamCloudEventA0PurposeEnum | undefined;
 }
 /** The type of the event which has happened. */
@@ -19037,8 +19078,12 @@ export interface EventStreamCloudEventGroupCreatedCloudEvent {
     data: Management.EventStreamCloudEventGroupCreatedData;
     /** The auth0 tenant ID to which the event is associated. */
     a0tenant: string;
-    /** The auth0 event stream ID of the stream the event was delivered on. */
-    a0stream: string;
+    /**
+     * The auth0 event stream ID of the stream the event was delivered on.
+     * Present when the event is delivered via an event stream; omitted when
+     * events are retrieved via the Events API (GET /api/v2/events).
+     */
+    a0stream?: string | undefined;
     a0purpose?: Management.EventStreamCloudEventA0PurposeEnum | undefined;
 }
 /** The type of the event which has happened. */
@@ -19212,8 +19257,12 @@ export interface EventStreamCloudEventGroupDeletedCloudEvent {
     data: Management.EventStreamCloudEventGroupDeletedData;
     /** The auth0 tenant ID to which the event is associated. */
     a0tenant: string;
-    /** The auth0 event stream ID of the stream the event was delivered on. */
-    a0stream: string;
+    /**
+     * The auth0 event stream ID of the stream the event was delivered on.
+     * Present when the event is delivered via an event stream; omitted when
+     * events are retrieved via the Events API (GET /api/v2/events).
+     */
+    a0stream?: string | undefined;
     a0purpose?: Management.EventStreamCloudEventA0PurposeEnum | undefined;
 }
 /** The type of the event which has happened. */
@@ -19399,8 +19448,12 @@ export interface EventStreamCloudEventGroupMemberAddedCloudEvent {
     data: Management.EventStreamCloudEventGroupMemberAddedData;
     /** The auth0 tenant ID to which the event is associated. */
     a0tenant: string;
-    /** The auth0 event stream ID of the stream the event was delivered on. */
-    a0stream: string;
+    /**
+     * The auth0 event stream ID of the stream the event was delivered on.
+     * Present when the event is delivered via an event stream; omitted when
+     * events are retrieved via the Events API (GET /api/v2/events).
+     */
+    a0stream?: string | undefined;
     a0purpose?: Management.EventStreamCloudEventA0PurposeEnum | undefined;
 }
 /** The type of the event which has happened. */
@@ -19632,8 +19685,12 @@ export interface EventStreamCloudEventGroupMemberDeletedCloudEvent {
     data: Management.EventStreamCloudEventGroupMemberDeletedData;
     /** The auth0 tenant ID to which the event is associated. */
     a0tenant: string;
-    /** The auth0 event stream ID of the stream the event was delivered on. */
-    a0stream: string;
+    /**
+     * The auth0 event stream ID of the stream the event was delivered on.
+     * Present when the event is delivered via an event stream; omitted when
+     * events are retrieved via the Events API (GET /api/v2/events).
+     */
+    a0stream?: string | undefined;
     a0purpose?: Management.EventStreamCloudEventA0PurposeEnum | undefined;
 }
 /** The type of the event which has happened. */
@@ -19865,8 +19922,12 @@ export interface EventStreamCloudEventGroupRoleAssignedCloudEvent {
     data: Management.EventStreamCloudEventGroupRoleAssignedData;
     /** The auth0 tenant ID to which the event is associated. */
     a0tenant: string;
-    /** The auth0 event stream ID of the stream the event was delivered on. */
-    a0stream: string;
+    /**
+     * The auth0 event stream ID of the stream the event was delivered on.
+     * Present when the event is delivered via an event stream; omitted when
+     * events are retrieved via the Events API (GET /api/v2/events).
+     */
+    a0stream?: string | undefined;
     a0purpose?: Management.EventStreamCloudEventA0PurposeEnum | undefined;
 }
 /** The type of the event which has happened. */
@@ -20052,8 +20113,12 @@ export interface EventStreamCloudEventGroupRoleDeletedCloudEvent {
     data: Management.EventStreamCloudEventGroupRoleDeletedData;
     /** The auth0 tenant ID to which the event is associated. */
     a0tenant: string;
-    /** The auth0 event stream ID of the stream the event was delivered on. */
-    a0stream: string;
+    /**
+     * The auth0 event stream ID of the stream the event was delivered on.
+     * Present when the event is delivered via an event stream; omitted when
+     * events are retrieved via the Events API (GET /api/v2/events).
+     */
+    a0stream?: string | undefined;
     a0purpose?: Management.EventStreamCloudEventA0PurposeEnum | undefined;
 }
 /** The type of the event which has happened. */
@@ -20237,8 +20302,12 @@ export interface EventStreamCloudEventGroupUpdatedCloudEvent {
     data: Management.EventStreamCloudEventGroupUpdatedData;
     /** The auth0 tenant ID to which the event is associated. */
     a0tenant: string;
-    /** The auth0 event stream ID of the stream the event was delivered on. */
-    a0stream: string;
+    /**
+     * The auth0 event stream ID of the stream the event was delivered on.
+     * Present when the event is delivered via an event stream; omitted when
+     * events are retrieved via the Events API (GET /api/v2/events).
+     */
+    a0stream?: string | undefined;
     a0purpose?: Management.EventStreamCloudEventA0PurposeEnum | undefined;
 }
 /** The type of the event which has happened. */
@@ -20436,8 +20505,12 @@ export interface EventStreamCloudEventOrgConnectionAddedCloudEvent {
     data: Management.EventStreamCloudEventOrgConnectionAddedData;
     /** The auth0 tenant ID to which the event is associated. */
     a0tenant: string;
-    /** The auth0 event stream ID of the stream the event was delivered on. */
-    a0stream: string;
+    /**
+     * The auth0 event stream ID of the stream the event was delivered on.
+     * Present when the event is delivered via an event stream; omitted when
+     * events are retrieved via the Events API (GET /api/v2/events).
+     */
+    a0stream?: string | undefined;
     a0purpose?: Management.EventStreamCloudEventA0PurposeEnum | undefined;
 }
 /** The type of the event which has happened. */
@@ -20478,6 +20551,7 @@ export interface EventStreamCloudEventOrgConnectionAddedObject {
     /** Determines whether the connection is enabled for the organization. */
     is_enabled?: boolean | undefined;
     organization_access_level?: Management.EventStreamCloudEventOrgConnectionAddedObjectOrganizationAccessLevel | undefined;
+    organization_member_access_level?: Management.EventStreamCloudEventOrgConnectionAddedObjectOrganizationMemberAccessLevel | undefined;
 }
 export interface EventStreamCloudEventOrgConnectionAddedObjectConnection {
     /** The ID of the connection. */
@@ -20512,6 +20586,26 @@ export declare const EventStreamCloudEventOrgConnectionAddedObjectOrganizationAc
     readonly Full: "full";
 };
 export type EventStreamCloudEventOrgConnectionAddedObjectOrganizationAccessLevel3Enum = (typeof EventStreamCloudEventOrgConnectionAddedObjectOrganizationAccessLevel3Enum)[keyof typeof EventStreamCloudEventOrgConnectionAddedObjectOrganizationAccessLevel3Enum];
+/**
+ * The organization member access level granted to the connection for an organization.
+ */
+export type EventStreamCloudEventOrgConnectionAddedObjectOrganizationMemberAccessLevel = Management.EventStreamCloudEventOrgConnectionAddedObjectOrganizationMemberAccessLevel0Enum | Management.EventStreamCloudEventOrgConnectionAddedObjectOrganizationMemberAccessLevel1Enum | Management.EventStreamCloudEventOrgConnectionAddedObjectOrganizationMemberAccessLevel2Enum | Management.EventStreamCloudEventOrgConnectionAddedObjectOrganizationMemberAccessLevel3Enum;
+export declare const EventStreamCloudEventOrgConnectionAddedObjectOrganizationMemberAccessLevel0Enum: {
+    readonly None: "none";
+};
+export type EventStreamCloudEventOrgConnectionAddedObjectOrganizationMemberAccessLevel0Enum = (typeof EventStreamCloudEventOrgConnectionAddedObjectOrganizationMemberAccessLevel0Enum)[keyof typeof EventStreamCloudEventOrgConnectionAddedObjectOrganizationMemberAccessLevel0Enum];
+export declare const EventStreamCloudEventOrgConnectionAddedObjectOrganizationMemberAccessLevel1Enum: {
+    readonly Readonly: "readonly";
+};
+export type EventStreamCloudEventOrgConnectionAddedObjectOrganizationMemberAccessLevel1Enum = (typeof EventStreamCloudEventOrgConnectionAddedObjectOrganizationMemberAccessLevel1Enum)[keyof typeof EventStreamCloudEventOrgConnectionAddedObjectOrganizationMemberAccessLevel1Enum];
+export declare const EventStreamCloudEventOrgConnectionAddedObjectOrganizationMemberAccessLevel2Enum: {
+    readonly Limited: "limited";
+};
+export type EventStreamCloudEventOrgConnectionAddedObjectOrganizationMemberAccessLevel2Enum = (typeof EventStreamCloudEventOrgConnectionAddedObjectOrganizationMemberAccessLevel2Enum)[keyof typeof EventStreamCloudEventOrgConnectionAddedObjectOrganizationMemberAccessLevel2Enum];
+export declare const EventStreamCloudEventOrgConnectionAddedObjectOrganizationMemberAccessLevel3Enum: {
+    readonly Full: "full";
+};
+export type EventStreamCloudEventOrgConnectionAddedObjectOrganizationMemberAccessLevel3Enum = (typeof EventStreamCloudEventOrgConnectionAddedObjectOrganizationMemberAccessLevel3Enum)[keyof typeof EventStreamCloudEventOrgConnectionAddedObjectOrganizationMemberAccessLevel3Enum];
 /**
  * The event content as it was prior to the change described by this event, when applicable.
  */
@@ -20537,6 +20631,7 @@ export interface EventStreamCloudEventOrgConnectionAddedPreviousObject {
     /** Determines whether the connection is enabled for the organization. */
     is_enabled?: boolean | undefined;
     organization_access_level?: Management.EventStreamCloudEventOrgConnectionAddedPreviousObjectOrganizationAccessLevel | undefined;
+    organization_member_access_level?: Management.EventStreamCloudEventOrgConnectionAddedPreviousObjectOrganizationMemberAccessLevel | undefined;
 }
 export interface EventStreamCloudEventOrgConnectionAddedPreviousObjectConnection {
     /** The ID of the connection. */
@@ -20571,6 +20666,26 @@ export declare const EventStreamCloudEventOrgConnectionAddedPreviousObjectOrgani
     readonly Full: "full";
 };
 export type EventStreamCloudEventOrgConnectionAddedPreviousObjectOrganizationAccessLevel3Enum = (typeof EventStreamCloudEventOrgConnectionAddedPreviousObjectOrganizationAccessLevel3Enum)[keyof typeof EventStreamCloudEventOrgConnectionAddedPreviousObjectOrganizationAccessLevel3Enum];
+/**
+ * The organization member access level granted to the connection for an organization.
+ */
+export type EventStreamCloudEventOrgConnectionAddedPreviousObjectOrganizationMemberAccessLevel = Management.EventStreamCloudEventOrgConnectionAddedPreviousObjectOrganizationMemberAccessLevel0Enum | Management.EventStreamCloudEventOrgConnectionAddedPreviousObjectOrganizationMemberAccessLevel1Enum | Management.EventStreamCloudEventOrgConnectionAddedPreviousObjectOrganizationMemberAccessLevel2Enum | Management.EventStreamCloudEventOrgConnectionAddedPreviousObjectOrganizationMemberAccessLevel3Enum;
+export declare const EventStreamCloudEventOrgConnectionAddedPreviousObjectOrganizationMemberAccessLevel0Enum: {
+    readonly None: "none";
+};
+export type EventStreamCloudEventOrgConnectionAddedPreviousObjectOrganizationMemberAccessLevel0Enum = (typeof EventStreamCloudEventOrgConnectionAddedPreviousObjectOrganizationMemberAccessLevel0Enum)[keyof typeof EventStreamCloudEventOrgConnectionAddedPreviousObjectOrganizationMemberAccessLevel0Enum];
+export declare const EventStreamCloudEventOrgConnectionAddedPreviousObjectOrganizationMemberAccessLevel1Enum: {
+    readonly Readonly: "readonly";
+};
+export type EventStreamCloudEventOrgConnectionAddedPreviousObjectOrganizationMemberAccessLevel1Enum = (typeof EventStreamCloudEventOrgConnectionAddedPreviousObjectOrganizationMemberAccessLevel1Enum)[keyof typeof EventStreamCloudEventOrgConnectionAddedPreviousObjectOrganizationMemberAccessLevel1Enum];
+export declare const EventStreamCloudEventOrgConnectionAddedPreviousObjectOrganizationMemberAccessLevel2Enum: {
+    readonly Limited: "limited";
+};
+export type EventStreamCloudEventOrgConnectionAddedPreviousObjectOrganizationMemberAccessLevel2Enum = (typeof EventStreamCloudEventOrgConnectionAddedPreviousObjectOrganizationMemberAccessLevel2Enum)[keyof typeof EventStreamCloudEventOrgConnectionAddedPreviousObjectOrganizationMemberAccessLevel2Enum];
+export declare const EventStreamCloudEventOrgConnectionAddedPreviousObjectOrganizationMemberAccessLevel3Enum: {
+    readonly Full: "full";
+};
+export type EventStreamCloudEventOrgConnectionAddedPreviousObjectOrganizationMemberAccessLevel3Enum = (typeof EventStreamCloudEventOrgConnectionAddedPreviousObjectOrganizationMemberAccessLevel3Enum)[keyof typeof EventStreamCloudEventOrgConnectionAddedPreviousObjectOrganizationMemberAccessLevel3Enum];
 /** The event type (injected from the SSE event field). */
 export declare const EventStreamCloudEventOrgConnectionAddedTypeEnum: {
     readonly OrganizationConnectionAdded: "organization.connection.added";
@@ -20599,8 +20714,12 @@ export interface EventStreamCloudEventOrgConnectionRemovedCloudEvent {
     data: Management.EventStreamCloudEventOrgConnectionRemovedData;
     /** The auth0 tenant ID to which the event is associated. */
     a0tenant: string;
-    /** The auth0 event stream ID of the stream the event was delivered on. */
-    a0stream: string;
+    /**
+     * The auth0 event stream ID of the stream the event was delivered on.
+     * Present when the event is delivered via an event stream; omitted when
+     * events are retrieved via the Events API (GET /api/v2/events).
+     */
+    a0stream?: string | undefined;
     a0purpose?: Management.EventStreamCloudEventA0PurposeEnum | undefined;
 }
 /** The type of the event which has happened. */
@@ -20684,8 +20803,12 @@ export interface EventStreamCloudEventOrgConnectionUpdatedCloudEvent {
     data: Management.EventStreamCloudEventOrgConnectionUpdatedData;
     /** The auth0 tenant ID to which the event is associated. */
     a0tenant: string;
-    /** The auth0 event stream ID of the stream the event was delivered on. */
-    a0stream: string;
+    /**
+     * The auth0 event stream ID of the stream the event was delivered on.
+     * Present when the event is delivered via an event stream; omitted when
+     * events are retrieved via the Events API (GET /api/v2/events).
+     */
+    a0stream?: string | undefined;
     a0purpose?: Management.EventStreamCloudEventA0PurposeEnum | undefined;
 }
 /** The type of the event which has happened. */
@@ -20726,6 +20849,7 @@ export interface EventStreamCloudEventOrgConnectionUpdatedObject {
     /** Determines whether the connection is enabled for the organization. */
     is_enabled?: boolean | undefined;
     organization_access_level?: Management.EventStreamCloudEventOrgConnectionUpdatedObjectOrganizationAccessLevel | undefined;
+    organization_member_access_level?: Management.EventStreamCloudEventOrgConnectionUpdatedObjectOrganizationMemberAccessLevel | undefined;
 }
 export interface EventStreamCloudEventOrgConnectionUpdatedObjectConnection {
     /** The ID of the connection. */
@@ -20760,6 +20884,26 @@ export declare const EventStreamCloudEventOrgConnectionUpdatedObjectOrganization
     readonly Full: "full";
 };
 export type EventStreamCloudEventOrgConnectionUpdatedObjectOrganizationAccessLevel3Enum = (typeof EventStreamCloudEventOrgConnectionUpdatedObjectOrganizationAccessLevel3Enum)[keyof typeof EventStreamCloudEventOrgConnectionUpdatedObjectOrganizationAccessLevel3Enum];
+/**
+ * The organization member access level granted to the connection for an organization.
+ */
+export type EventStreamCloudEventOrgConnectionUpdatedObjectOrganizationMemberAccessLevel = Management.EventStreamCloudEventOrgConnectionUpdatedObjectOrganizationMemberAccessLevel0Enum | Management.EventStreamCloudEventOrgConnectionUpdatedObjectOrganizationMemberAccessLevel1Enum | Management.EventStreamCloudEventOrgConnectionUpdatedObjectOrganizationMemberAccessLevel2Enum | Management.EventStreamCloudEventOrgConnectionUpdatedObjectOrganizationMemberAccessLevel3Enum;
+export declare const EventStreamCloudEventOrgConnectionUpdatedObjectOrganizationMemberAccessLevel0Enum: {
+    readonly None: "none";
+};
+export type EventStreamCloudEventOrgConnectionUpdatedObjectOrganizationMemberAccessLevel0Enum = (typeof EventStreamCloudEventOrgConnectionUpdatedObjectOrganizationMemberAccessLevel0Enum)[keyof typeof EventStreamCloudEventOrgConnectionUpdatedObjectOrganizationMemberAccessLevel0Enum];
+export declare const EventStreamCloudEventOrgConnectionUpdatedObjectOrganizationMemberAccessLevel1Enum: {
+    readonly Readonly: "readonly";
+};
+export type EventStreamCloudEventOrgConnectionUpdatedObjectOrganizationMemberAccessLevel1Enum = (typeof EventStreamCloudEventOrgConnectionUpdatedObjectOrganizationMemberAccessLevel1Enum)[keyof typeof EventStreamCloudEventOrgConnectionUpdatedObjectOrganizationMemberAccessLevel1Enum];
+export declare const EventStreamCloudEventOrgConnectionUpdatedObjectOrganizationMemberAccessLevel2Enum: {
+    readonly Limited: "limited";
+};
+export type EventStreamCloudEventOrgConnectionUpdatedObjectOrganizationMemberAccessLevel2Enum = (typeof EventStreamCloudEventOrgConnectionUpdatedObjectOrganizationMemberAccessLevel2Enum)[keyof typeof EventStreamCloudEventOrgConnectionUpdatedObjectOrganizationMemberAccessLevel2Enum];
+export declare const EventStreamCloudEventOrgConnectionUpdatedObjectOrganizationMemberAccessLevel3Enum: {
+    readonly Full: "full";
+};
+export type EventStreamCloudEventOrgConnectionUpdatedObjectOrganizationMemberAccessLevel3Enum = (typeof EventStreamCloudEventOrgConnectionUpdatedObjectOrganizationMemberAccessLevel3Enum)[keyof typeof EventStreamCloudEventOrgConnectionUpdatedObjectOrganizationMemberAccessLevel3Enum];
 /**
  * The event content as it was prior to the change described by this event, when applicable.
  */
@@ -20785,6 +20929,7 @@ export interface EventStreamCloudEventOrgConnectionUpdatedPreviousObject {
     /** Determines whether the connection is enabled for the organization. */
     is_enabled?: boolean | undefined;
     organization_access_level?: Management.EventStreamCloudEventOrgConnectionUpdatedPreviousObjectOrganizationAccessLevel | undefined;
+    organization_member_access_level?: Management.EventStreamCloudEventOrgConnectionUpdatedPreviousObjectOrganizationMemberAccessLevel | undefined;
 }
 export interface EventStreamCloudEventOrgConnectionUpdatedPreviousObjectConnection {
     /** The ID of the connection. */
@@ -20819,6 +20964,26 @@ export declare const EventStreamCloudEventOrgConnectionUpdatedPreviousObjectOrga
     readonly Full: "full";
 };
 export type EventStreamCloudEventOrgConnectionUpdatedPreviousObjectOrganizationAccessLevel3Enum = (typeof EventStreamCloudEventOrgConnectionUpdatedPreviousObjectOrganizationAccessLevel3Enum)[keyof typeof EventStreamCloudEventOrgConnectionUpdatedPreviousObjectOrganizationAccessLevel3Enum];
+/**
+ * The organization member access level granted to the connection for an organization.
+ */
+export type EventStreamCloudEventOrgConnectionUpdatedPreviousObjectOrganizationMemberAccessLevel = Management.EventStreamCloudEventOrgConnectionUpdatedPreviousObjectOrganizationMemberAccessLevel0Enum | Management.EventStreamCloudEventOrgConnectionUpdatedPreviousObjectOrganizationMemberAccessLevel1Enum | Management.EventStreamCloudEventOrgConnectionUpdatedPreviousObjectOrganizationMemberAccessLevel2Enum | Management.EventStreamCloudEventOrgConnectionUpdatedPreviousObjectOrganizationMemberAccessLevel3Enum;
+export declare const EventStreamCloudEventOrgConnectionUpdatedPreviousObjectOrganizationMemberAccessLevel0Enum: {
+    readonly None: "none";
+};
+export type EventStreamCloudEventOrgConnectionUpdatedPreviousObjectOrganizationMemberAccessLevel0Enum = (typeof EventStreamCloudEventOrgConnectionUpdatedPreviousObjectOrganizationMemberAccessLevel0Enum)[keyof typeof EventStreamCloudEventOrgConnectionUpdatedPreviousObjectOrganizationMemberAccessLevel0Enum];
+export declare const EventStreamCloudEventOrgConnectionUpdatedPreviousObjectOrganizationMemberAccessLevel1Enum: {
+    readonly Readonly: "readonly";
+};
+export type EventStreamCloudEventOrgConnectionUpdatedPreviousObjectOrganizationMemberAccessLevel1Enum = (typeof EventStreamCloudEventOrgConnectionUpdatedPreviousObjectOrganizationMemberAccessLevel1Enum)[keyof typeof EventStreamCloudEventOrgConnectionUpdatedPreviousObjectOrganizationMemberAccessLevel1Enum];
+export declare const EventStreamCloudEventOrgConnectionUpdatedPreviousObjectOrganizationMemberAccessLevel2Enum: {
+    readonly Limited: "limited";
+};
+export type EventStreamCloudEventOrgConnectionUpdatedPreviousObjectOrganizationMemberAccessLevel2Enum = (typeof EventStreamCloudEventOrgConnectionUpdatedPreviousObjectOrganizationMemberAccessLevel2Enum)[keyof typeof EventStreamCloudEventOrgConnectionUpdatedPreviousObjectOrganizationMemberAccessLevel2Enum];
+export declare const EventStreamCloudEventOrgConnectionUpdatedPreviousObjectOrganizationMemberAccessLevel3Enum: {
+    readonly Full: "full";
+};
+export type EventStreamCloudEventOrgConnectionUpdatedPreviousObjectOrganizationMemberAccessLevel3Enum = (typeof EventStreamCloudEventOrgConnectionUpdatedPreviousObjectOrganizationMemberAccessLevel3Enum)[keyof typeof EventStreamCloudEventOrgConnectionUpdatedPreviousObjectOrganizationMemberAccessLevel3Enum];
 /** The event type (injected from the SSE event field). */
 export declare const EventStreamCloudEventOrgConnectionUpdatedTypeEnum: {
     readonly OrganizationConnectionUpdated: "organization.connection.updated";
@@ -20847,8 +21012,12 @@ export interface EventStreamCloudEventOrgCreatedCloudEvent {
     data: Management.EventStreamCloudEventOrgCreatedData;
     /** The auth0 tenant ID to which the event is associated. */
     a0tenant: string;
-    /** The auth0 event stream ID of the stream the event was delivered on. */
-    a0stream: string;
+    /**
+     * The auth0 event stream ID of the stream the event was delivered on.
+     * Present when the event is delivered via an event stream; omitted when
+     * events are retrieved via the Events API (GET /api/v2/events).
+     */
+    a0stream?: string | undefined;
     a0purpose?: Management.EventStreamCloudEventA0PurposeEnum | undefined;
 }
 /** The type of the event which has happened. */
@@ -20960,8 +21129,12 @@ export interface EventStreamCloudEventOrgDeletedCloudEvent {
     data: Management.EventStreamCloudEventOrgDeletedData;
     /** The auth0 tenant ID to which the event is associated. */
     a0tenant: string;
-    /** The auth0 event stream ID of the stream the event was delivered on. */
-    a0stream: string;
+    /**
+     * The auth0 event stream ID of the stream the event was delivered on.
+     * Present when the event is delivered via an event stream; omitted when
+     * events are retrieved via the Events API (GET /api/v2/events).
+     */
+    a0stream?: string | undefined;
     a0purpose?: Management.EventStreamCloudEventA0PurposeEnum | undefined;
 }
 /** The type of the event which has happened. */
@@ -21037,8 +21210,12 @@ export interface EventStreamCloudEventOrgGroupRoleAssignedCloudEvent {
     data: Management.EventStreamCloudEventOrgGroupRoleAssignedData;
     /** The auth0 tenant ID to which the event is associated. */
     a0tenant: string;
-    /** The auth0 event stream ID of the stream the event was delivered on. */
-    a0stream: string;
+    /**
+     * The auth0 event stream ID of the stream the event was delivered on.
+     * Present when the event is delivered via an event stream; omitted when
+     * events are retrieved via the Events API (GET /api/v2/events).
+     */
+    a0stream?: string | undefined;
     a0purpose?: Management.EventStreamCloudEventA0PurposeEnum | undefined;
 }
 /** The type of the event which has happened. */
@@ -21240,8 +21417,12 @@ export interface EventStreamCloudEventOrgGroupRoleDeletedCloudEvent {
     data: Management.EventStreamCloudEventOrgGroupRoleDeletedData;
     /** The auth0 tenant ID to which the event is associated. */
     a0tenant: string;
-    /** The auth0 event stream ID of the stream the event was delivered on. */
-    a0stream: string;
+    /**
+     * The auth0 event stream ID of the stream the event was delivered on.
+     * Present when the event is delivered via an event stream; omitted when
+     * events are retrieved via the Events API (GET /api/v2/events).
+     */
+    a0stream?: string | undefined;
     a0purpose?: Management.EventStreamCloudEventA0PurposeEnum | undefined;
 }
 /** The type of the event which has happened. */
@@ -21441,8 +21622,12 @@ export interface EventStreamCloudEventOrgMemberAddedCloudEvent {
     data: Management.EventStreamCloudEventOrgMemberAddedData;
     /** The auth0 tenant ID to which the event is associated. */
     a0tenant: string;
-    /** The auth0 event stream ID of the stream the event was delivered on. */
-    a0stream: string;
+    /**
+     * The auth0 event stream ID of the stream the event was delivered on.
+     * Present when the event is delivered via an event stream; omitted when
+     * events are retrieved via the Events API (GET /api/v2/events).
+     */
+    a0stream?: string | undefined;
     a0purpose?: Management.EventStreamCloudEventA0PurposeEnum | undefined;
 }
 /** The type of the event which has happened. */
@@ -21536,8 +21721,12 @@ export interface EventStreamCloudEventOrgMemberDeletedCloudEvent {
     data: Management.EventStreamCloudEventOrgMemberDeletedData;
     /** The auth0 tenant ID to which the event is associated. */
     a0tenant: string;
-    /** The auth0 event stream ID of the stream the event was delivered on. */
-    a0stream: string;
+    /**
+     * The auth0 event stream ID of the stream the event was delivered on.
+     * Present when the event is delivered via an event stream; omitted when
+     * events are retrieved via the Events API (GET /api/v2/events).
+     */
+    a0stream?: string | undefined;
     a0purpose?: Management.EventStreamCloudEventA0PurposeEnum | undefined;
 }
 /** The type of the event which has happened. */
@@ -21631,8 +21820,12 @@ export interface EventStreamCloudEventOrgMemberRoleAssignedCloudEvent {
     data: Management.EventStreamCloudEventOrgMemberRoleAssignedData;
     /** The auth0 tenant ID to which the event is associated. */
     a0tenant: string;
-    /** The auth0 event stream ID of the stream the event was delivered on. */
-    a0stream: string;
+    /**
+     * The auth0 event stream ID of the stream the event was delivered on.
+     * Present when the event is delivered via an event stream; omitted when
+     * events are retrieved via the Events API (GET /api/v2/events).
+     */
+    a0stream?: string | undefined;
     a0purpose?: Management.EventStreamCloudEventA0PurposeEnum | undefined;
 }
 /** The type of the event which has happened. */
@@ -21742,8 +21935,12 @@ export interface EventStreamCloudEventOrgMemberRoleDeletedCloudEvent {
     data: Management.EventStreamCloudEventOrgMemberRoleDeletedData;
     /** The auth0 tenant ID to which the event is associated. */
     a0tenant: string;
-    /** The auth0 event stream ID of the stream the event was delivered on. */
-    a0stream: string;
+    /**
+     * The auth0 event stream ID of the stream the event was delivered on.
+     * Present when the event is delivered via an event stream; omitted when
+     * events are retrieved via the Events API (GET /api/v2/events).
+     */
+    a0stream?: string | undefined;
     a0purpose?: Management.EventStreamCloudEventA0PurposeEnum | undefined;
 }
 /** The type of the event which has happened. */
@@ -21853,8 +22050,12 @@ export interface EventStreamCloudEventOrgUpdatedCloudEvent {
     data: Management.EventStreamCloudEventOrgUpdatedData;
     /** The auth0 tenant ID to which the event is associated. */
     a0tenant: string;
-    /** The auth0 event stream ID of the stream the event was delivered on. */
-    a0stream: string;
+    /**
+     * The auth0 event stream ID of the stream the event was delivered on.
+     * Present when the event is delivered via an event stream; omitted when
+     * events are retrieved via the Events API (GET /api/v2/events).
+     */
+    a0stream?: string | undefined;
     a0purpose?: Management.EventStreamCloudEventA0PurposeEnum | undefined;
 }
 /** The type of the event which has happened. */
@@ -21971,8 +22172,12 @@ export interface EventStreamCloudEventUserCreatedCloudEvent {
     data: Management.EventStreamCloudEventUserCreatedData;
     /** The auth0 tenant ID to which the event is associated. */
     a0tenant: string;
-    /** The auth0 event stream ID of the stream the event was delivered on. */
-    a0stream: string;
+    /**
+     * The auth0 event stream ID of the stream the event was delivered on.
+     * Present when the event is delivered via an event stream; omitted when
+     * events are retrieved via the Events API (GET /api/v2/events).
+     */
+    a0stream?: string | undefined;
     a0purpose?: Management.EventStreamCloudEventA0PurposeEnum | undefined;
 }
 /** The type of the event which has happened. */
@@ -22672,8 +22877,12 @@ export interface EventStreamCloudEventUserDeletedCloudEvent {
     data: Management.EventStreamCloudEventUserDeletedData;
     /** The auth0 tenant ID to which the event is associated. */
     a0tenant: string;
-    /** The auth0 event stream ID of the stream the event was delivered on. */
-    a0stream: string;
+    /**
+     * The auth0 event stream ID of the stream the event was delivered on.
+     * Present when the event is delivered via an event stream; omitted when
+     * events are retrieved via the Events API (GET /api/v2/events).
+     */
+    a0stream?: string | undefined;
     a0purpose?: Management.EventStreamCloudEventA0PurposeEnum | undefined;
 }
 /** The type of the event which has happened. */
@@ -23375,8 +23584,12 @@ export interface EventStreamCloudEventUserUpdatedCloudEvent {
     data: Management.EventStreamCloudEventUserUpdatedData;
     /** The auth0 tenant ID to which the event is associated. */
     a0tenant: string;
-    /** The auth0 event stream ID of the stream the event was delivered on. */
-    a0stream: string;
+    /**
+     * The auth0 event stream ID of the stream the event was delivered on.
+     * Present when the event is delivered via an event stream; omitted when
+     * events are retrieved via the Events API (GET /api/v2/events).
+     */
+    a0stream?: string | undefined;
     a0purpose?: Management.EventStreamCloudEventA0PurposeEnum | undefined;
 }
 /** The type of the event which has happened. */
@@ -24473,7 +24686,7 @@ export declare const ExperimentStatusEnum: {
     readonly Archived: "archived";
 };
 export type ExperimentStatusEnum = (typeof ExperimentStatusEnum)[keyof typeof ExperimentStatusEnum];
-/** The target status to transition the experiment to. */
+/** Target lifecycle status. Transitions the experiment through its lifecycle (draft → active, draft → archived, active → paused, paused → active, active/paused → completed, paused/completed → archived). Activation runs full readiness validation and snapshots the configuration. When combined with field edits, the edits apply first and the transition sees the updated config. */
 export declare const ExperimentTransitionStatusEnum: {
     readonly Active: "active";
     readonly Paused: "paused";
@@ -27794,6 +28007,7 @@ export interface GetClientResponseContent {
     my_organization_configuration?: Management.ClientMyOrganizationResponseConfiguration | undefined;
     identity_assertion_authorization_grant?: Management.IdentityAssertionAuthorizationGrant | undefined;
     anonymous_sessions?: Management.AnonymousSessions | undefined;
+    enforce_anon_session_transfer_network_binding?: Management.ClientAnonymousSessionTransferNetworkBindingEnum | undefined;
     third_party_security_mode?: Management.ClientThirdPartySecurityModeEnum | undefined;
     redirection_policy?: Management.ClientRedirectionPolicyEnum | undefined;
     /** The identifier of the resource server that this client is linked to. */
@@ -28622,8 +28836,7 @@ export interface GetRoleResponseContent {
     /** Description of this role. */
     description?: string | undefined;
     type?: Management.RoleTypeEnum | undefined;
-    /** The id of the entity that owns this role, such as an organization id. */
-    owner_id?: string | undefined;
+    owner_id?: Management.RoleOwnerId | undefined;
 }
 export interface GetRuleResponseContent {
     /** Name of this rule. */
@@ -28670,6 +28883,7 @@ export interface GetSegmentResponseContent {
     name: string;
     description?: string | undefined;
     type: Management.SegmentTypeEnum;
+    status: Management.SegmentStatusEnum;
     rules: Management.SegmentRule[];
     created_at: string;
     updated_at: string;
@@ -28818,6 +29032,8 @@ export interface GetTenantSettingsResponseContent {
     pushed_authorization_requests_supported?: boolean | undefined;
     /** Supports iss parameter in authorization responses */
     authorization_response_iss_parameter_supported?: (boolean | null) | undefined;
+    /** Enables strict DPoP refresh token binding per RFC 9449: all refresh tokens issued to public clients that present a DPoP proof are bound to the sender's key, and the binding is validated on every subsequent exchange. When disabled, DPoP refresh token binding may still apply for specific audiences for backwards compatibility. */
+    dpop_strict_refresh_token_binding?: (boolean | null) | undefined;
     /**
      * Controls whether a confirmation prompt is shown during login flows when the redirect URI uses non-verifiable callback URIs (for example, a custom URI schema such as `myapp://`, or `localhost`).
      * If set to true, a confirmation prompt will not be shown. We recommend that this is set to false for improved protection from malicious apps.
@@ -31688,8 +31904,7 @@ export interface Role {
     /** Description of this role. */
     description?: string | undefined;
     type?: Management.RoleTypeEnum | undefined;
-    /** The id of the entity that owns this role, such as an organization id. */
-    owner_id?: string | undefined;
+    owner_id?: Management.RoleOwnerId | undefined;
 }
 /**
  * A group assigned to a role in the context of an organization.
@@ -31724,6 +31939,14 @@ export interface RoleMember {
     /** Email address of this user. */
     email?: string | undefined;
 }
+/**
+ * The id of the entity that owns this role: an organization id, or "auth0" for Auth0-managed System Roles.
+ */
+export type RoleOwnerId = string;
+/**
+ * Filter organization-level roles by owner ID. Use an organization ID to filter that organization's roles, or "auth0" to retrieve Auth0-managed System Roles. Required when type is "organization".
+ */
+export type RoleOwnerIdFilter = string;
 /** The type of the role */
 export declare const RoleTypeEnum: {
     readonly Tenant: "tenant";
@@ -31861,6 +32084,7 @@ export interface RotateClientSecretResponseContent {
     my_organization_configuration?: Management.ClientMyOrganizationResponseConfiguration | undefined;
     identity_assertion_authorization_grant?: Management.IdentityAssertionAuthorizationGrant | undefined;
     anonymous_sessions?: Management.AnonymousSessions | undefined;
+    enforce_anon_session_transfer_network_binding?: Management.ClientAnonymousSessionTransferNetworkBindingEnum | undefined;
     third_party_security_mode?: Management.ClientThirdPartySecurityModeEnum | undefined;
     redirection_policy?: Management.ClientRedirectionPolicyEnum | undefined;
     /** The identifier of the resource server that this client is linked to. */
@@ -32093,7 +32317,6 @@ export interface SearchOrganization {
     /** Friendly name of this organization. */
     display_name?: string | undefined;
     branding?: Management.OrganizationBranding | undefined;
-    metadata?: Management.OrganizationMetadata | undefined;
     token_quota?: Management.TokenQuota | undefined;
     third_party_client_access?: Management.OrganizationThirdPartyClientAccessEnum | undefined;
     /** Whether app entitlement is active for this organization. */
@@ -32102,6 +32325,7 @@ export interface SearchOrganization {
     [key: string]: any;
 }
 export interface SearchOrganizationsPaginatedResponseContent {
+    /** Array of organization objects matching the search criteria. */
     organizations: Management.SearchOrganization[];
     /** Cursor for retrieving the next page of results. Absent when no more results are available. */
     next?: string | undefined;
@@ -32123,6 +32347,7 @@ export interface Segment {
     name: string;
     description?: string | undefined;
     type: Management.SegmentTypeEnum;
+    status: Management.SegmentStatusEnum;
     rules: Management.SegmentRule[];
     created_at: string;
     updated_at: string;
@@ -32180,6 +32405,11 @@ export interface SegmentRule {
 export interface SegmentStartsWithExpression {
     starts_with: string[];
 }
+export declare const SegmentStatusEnum: {
+    readonly Active: "active";
+    readonly Archived: "archived";
+};
+export type SegmentStatusEnum = (typeof SegmentStatusEnum)[keyof typeof SegmentStatusEnum];
 export declare const SegmentTypeEnum: {
     readonly Self: "self";
     readonly Auth0: "auth0";
@@ -32892,6 +33122,10 @@ export interface SynchronizedGroupSelectionId {
     /** Google Workspace Directory group ID. */
     id: string;
 }
+export declare const SystemRoleOwnerId: {
+    readonly Auth0: "auth0";
+};
+export type SystemRoleOwnerId = (typeof SystemRoleOwnerId)[keyof typeof SystemRoleOwnerId];
 /**
  * Settings related to OIDC RP-initiated Logout
  */
@@ -33603,6 +33837,7 @@ export interface UpdateClientResponseContent {
     my_organization_configuration?: Management.ClientMyOrganizationResponseConfiguration | undefined;
     identity_assertion_authorization_grant?: Management.IdentityAssertionAuthorizationGrant | undefined;
     anonymous_sessions?: Management.AnonymousSessions | undefined;
+    enforce_anon_session_transfer_network_binding?: Management.ClientAnonymousSessionTransferNetworkBindingEnum | undefined;
     third_party_security_mode?: Management.ClientThirdPartySecurityModeEnum | undefined;
     redirection_policy?: Management.ClientRedirectionPolicyEnum | undefined;
     /** The identifier of the resource server that this client is linked to. */
@@ -34202,30 +34437,6 @@ export interface UpdateExperimentResponseContent {
     created_at: string;
     updated_at: string;
 }
-export interface UpdateExperimentStatusResponseContent {
-    id: string;
-    name: string;
-    description?: string | undefined;
-    feature_flag_id: string;
-    feature_flag_name?: string | undefined;
-    authentication_flow: string;
-    allocation_strategy: Management.AllocationStrategyEnum;
-    status: Management.ExperimentStatusEnum;
-    is_valid: boolean;
-    default_config?: Management.DefaultConfigEnum | undefined;
-    feature_flag_snapshot?: (Record<string, unknown> | null) | undefined;
-    allocations: Management.AllocationItem[];
-    /** Fields that may be mutated given the experiment's current status. Computed at response time; always current with the API's enforcement logic. */
-    editable_fields: string[];
-    /** Ramp experiment levels configuration. */
-    levels?: number[] | undefined;
-    /** Read-only. The active exposure percentage for the current ramp step. Null when no ramp schedule is active. */
-    current_level?: (number | null) | undefined;
-    started_at?: string | undefined;
-    ended_at?: string | undefined;
-    created_at: string;
-    updated_at: string;
-}
 /**
  * Configuration parameters for this feature flag
  */
@@ -34240,16 +34451,6 @@ export interface UpdateFeatureFlagResponseContent {
     created_at: string;
     updated_at: string;
 }
-export interface UpdateFeatureFlagStatusResponseContent {
-    id: string;
-    name: string;
-    description?: string | undefined;
-    type: Management.FeatureFlagTypeEnum;
-    status: Management.FeatureFlagStatusEnum;
-    parameters?: Management.FeatureFlagConfigParams | undefined;
-    created_at: string;
-    updated_at: string;
-}
 export interface UpdateFlowResponseContent {
     id: string;
     name: string;
@@ -34522,8 +34723,7 @@ export interface UpdateRoleResponseContent {
     /** Description of this role. */
     description?: string | undefined;
     type?: Management.RoleTypeEnum | undefined;
-    /** The id of the entity that owns this role, such as an organization id. */
-    owner_id?: string | undefined;
+    owner_id?: Management.RoleOwnerId | undefined;
 }
 export interface UpdateRuleResponseContent {
     /** Name of this rule. */
@@ -34562,6 +34762,7 @@ export interface UpdateSegmentResponseContent {
     name: string;
     description?: string | undefined;
     type: Management.SegmentTypeEnum;
+    status: Management.SegmentStatusEnum;
     rules: Management.SegmentRule[];
     created_at: string;
     updated_at: string;
@@ -34681,6 +34882,8 @@ export interface UpdateTenantSettingsResponseContent {
     pushed_authorization_requests_supported?: boolean | undefined;
     /** Supports iss parameter in authorization responses */
     authorization_response_iss_parameter_supported?: (boolean | null) | undefined;
+    /** Enables strict DPoP refresh token binding per RFC 9449: all refresh tokens issued to public clients that present a DPoP proof are bound to the sender's key, and the binding is validated on every subsequent exchange. When disabled, DPoP refresh token binding may still apply for specific audiences for backwards compatibility. */
+    dpop_strict_refresh_token_binding?: (boolean | null) | undefined;
     /**
      * Controls whether a confirmation prompt is shown during login flows when the redirect URI uses non-verifiable callback URIs (for example, a custom URI schema such as `myapp://`, or `localhost`).
      * If set to true, a confirmation prompt will not be shown. We recommend that this is set to false for improved protection from malicious apps.
@@ -35047,8 +35250,7 @@ export interface UserEffectivePermissionRoleSourceResponseContent {
     /** Description of this role. */
     description?: string | undefined;
     type?: Management.RoleTypeEnum | undefined;
-    /** The id of the entity that owns this role, such as an organization id. */
-    owner_id?: string | undefined;
+    owner_id?: Management.RoleOwnerId | undefined;
     /** List of sources where this role is coming from. */
     sources?: Management.UserEffectivePermissionRoleSourceEnum[] | undefined;
 }