auth0 7.5.0 → 7.7.0

package/dist/cjs/management/errors/ManagementTimeoutError.js

@@ -1,18 +1,52 @@
 "use strict";
 // This file was auto-generated by Fern from our API Definition.
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ManagementTimeoutError = void 0;
-class ManagementTimeoutError extends Error {
+const errors = __importStar(require("./index.js"));
+class ManagementTimeoutError extends errors.ManagementError {
     constructor(message, opts) {
-        super(message);
+        super({
+            message: message,
+            cause: opts === null || opts === void 0 ? void 0 : opts.cause,
+        });
         Object.setPrototypeOf(this, new.target.prototype);
         if (Error.captureStackTrace) {
             Error.captureStackTrace(this, this.constructor);
         }
         this.name = "ManagementTimeoutError";
-        if ((opts === null || opts === void 0 ? void 0 : opts.cause) != null) {
-            this.cause = opts.cause;
-        }
     }
 }
 exports.ManagementTimeoutError = ManagementTimeoutError;

package/dist/cjs/management/version.d.ts

@@ -1 +1 @@
-export declare const SDK_VERSION = "7.5.0";
+export declare const SDK_VERSION = "7.7.0";

package/dist/cjs/management/version.js

@@ -1,4 +1,4 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.SDK_VERSION = void 0;
-exports.SDK_VERSION = "7.5.0";
+exports.SDK_VERSION = "7.7.0";

package/dist/cjs/management/wrapper/ManagementClient.d.ts

@@ -16,7 +16,10 @@ export declare namespace ManagementClient {
      * @public
      */
     interface ManagementClientOptions extends Omit<FernClient.Options, "token" | "environment" | "fetcher" | "baseUrl"> {
-        /** Auth0 domain (e.g., 'your-tenant.auth0.com') */
+        /**
+         * Auth0 domain as a bare hostname (e.g., 'your-tenant.auth0.com'), without a scheme or path.
+         * The client throws at construction if the domain is empty or is not a bare hostname.
+         */
         domain: string;
         /**
          * API audience. Defaults to https://{domain}/api/v2/

package/dist/cjs/management/wrapper/ManagementClient.js

@@ -69,7 +69,8 @@ class ManagementClient extends Client_js_1.ManagementClient {
      * @group Management API
      */
     constructor(_options) {
-        const baseUrl = `https://${_options.domain}/api/v2`;
+        // Validates the domain before anything else, so a static token is covered as well as client credentials.
+        const baseUrl = (0, auth_helpers_js_1.buildManagementBaseUrl)(_options.domain);
         const headers = (0, auth_helpers_js_1.createTelemetryHeaders)(_options);
         const token = (0, auth_helpers_js_1.createTokenSupplier)(_options);
         // Temporarily remove fetcher from options to avoid people passing it for now

package/dist/cjs/management/wrapper/auth-helpers.d.ts

@@ -18,6 +18,9 @@ export type ManagementAuthConfig = ManagementClient.ManagementClientOptionsWithT
 /**
  * Builds the Management API v2 base URL for a tenant domain.
  *
+ * The domain is validated first, so every caller rejects a domain that is not a bare hostname,
+ * whichever authentication mode is in use.
+ *
  * @group Management API
  * @internal
  */

package/dist/cjs/management/wrapper/auth-helpers.js

@@ -5,14 +5,19 @@ exports.isClientOptionsWithToken = isClientOptionsWithToken;
 exports.createTokenSupplier = createTokenSupplier;
 exports.createTelemetryHeaders = createTelemetryHeaders;
 const token_provider_js_1 = require("./token-provider.js");
+const domain_js_1 = require("./domain.js");
 const auth0_client_telemetry_js_1 = require("../../lib/middleware/auth0-client-telemetry.js");
 /**
  * Builds the Management API v2 base URL for a tenant domain.
  *
+ * The domain is validated first, so every caller rejects a domain that is not a bare hostname,
+ * whichever authentication mode is in use.
+ *
  * @group Management API
  * @internal
  */
 function buildManagementBaseUrl(domain) {
+    (0, domain_js_1.validateDomain)(domain);
     return `https://${domain}/api/v2`;
 }
 /**

package/dist/cjs/management/wrapper/domain.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Validates that a domain is a bare hostname such as `tenant.auth0.com`, optionally with a port.
+ *
+ * Throws when the domain is missing, empty or whitespace-only, or contains a scheme, path, query
+ * string, fragment, credentials, or whitespace. Both the Management API base URL and the token
+ * endpoint are built from the domain, so it is validated at construction for every authentication
+ * mode.
+ *
+ * @group Management API
+ * @internal
+ */
+export declare function validateDomain(domain: unknown): asserts domain is string;

package/dist/cjs/management/wrapper/domain.js

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateDomain = validateDomain;
+/**
+ * Characters that cannot appear in a bare hostname. Each one changes the host or path of the URLs
+ * built from the domain: `/` and `\` start a path (URL parsers treat `\` like `/`), `?` and `#`
+ * start a query string or fragment, `@` turns the text before it into credentials and sends the
+ * request to the host after it, and whitespace is never part of a hostname.
+ */
+const INVALID_DOMAIN_CHARACTERS = /[\s/\\?#@]/;
+/**
+ * Validates that a domain is a bare hostname such as `tenant.auth0.com`, optionally with a port.
+ *
+ * Throws when the domain is missing, empty or whitespace-only, or contains a scheme, path, query
+ * string, fragment, credentials, or whitespace. Both the Management API base URL and the token
+ * endpoint are built from the domain, so it is validated at construction for every authentication
+ * mode.
+ *
+ * @group Management API
+ * @internal
+ */
+function validateDomain(domain) {
+    if (typeof domain !== "string" || domain.length === 0 || INVALID_DOMAIN_CHARACTERS.test(domain)) {
+        // JSON.stringify makes an empty value or stray whitespace visible in the message.
+        const received = typeof domain === "string" ? JSON.stringify(domain) : String(domain);
+        throw new Error(`ManagementClient: invalid domain ${received}. Provide a bare hostname, e.g. "tenant.auth0.com".`);
+    }
+}

package/dist/cjs/management/wrapper/management-auth.d.ts

@@ -63,7 +63,8 @@ export interface ManagementAuth {
  *
  * When client credentials are provided, tokens are obtained via the client credentials grant
  * and cached until shortly before they expire. When a static `token` is provided, it is used
- * as-is.
+ * as-is. In both cases, `domain` must be a bare hostname such as `tenant.auth0.com`; anything
+ * else throws.
  *
  * The returned {@link ManagementAuth.clientOptions} carry the same telemetry headers, request
  * timeouts, retry counts, logging, and custom domain behaviour that the full `ManagementClient`

package/dist/cjs/management/wrapper/management-auth.js

@@ -45,7 +45,8 @@ const auth_helpers_js_1 = require("./auth-helpers.js");
  *
  * When client credentials are provided, tokens are obtained via the client credentials grant
  * and cached until shortly before they expire. When a static `token` is provided, it is used
- * as-is.
+ * as-is. In both cases, `domain` must be a bare hostname such as `tenant.auth0.com`; anything
+ * else throws.
  *
  * The returned {@link ManagementAuth.clientOptions} carry the same telemetry headers, request
  * timeouts, retry counts, logging, and custom domain behaviour that the full `ManagementClient`

package/dist/cjs/management/wrapper/token-provider.js

@@ -13,16 +13,16 @@ exports.TokenProvider = void 0;
 const jose_1 = require("jose");
 const utils_js_1 = require("../../utils.js");
 const ManagementError_js_1 = require("../errors/ManagementError.js");
+const domain_js_1 = require("./domain.js");
 const LEEWAY = 10 * 1000; // 10s refresh-ahead in ms
 class TokenProvider {
     constructor(options) {
         this.options = options;
         this.expiresAt = 0;
         this.accessToken = "";
-        // Validate domain: must be a bare hostname, no slashes or query strings.
-        if (/[/?#]/.test(options.domain)) {
-            throw new Error(`ManagementClient: invalid domain "${options.domain}". Provide a bare hostname, e.g. "tenant.auth0.com".`);
-        }
+        // TokenProvider is exported and can be constructed directly, so it validates the domain itself
+        // rather than relying on ManagementClient or createManagementAuth having done so.
+        (0, domain_js_1.validateDomain)(options.domain);
         if (options.useMTLS) {
             const { fetch: customFetch } = options;
             if (!customFetch) {

package/dist/esm/management/BaseClient.d.mts

@@ -6,6 +6,8 @@ export type BaseClientOptions = {
     environment?: core.Supplier<environments.ManagementEnvironment | string>;
     /** Specify a custom URL to connect the client to. */
     baseUrl?: core.Supplier<string>;
+    /** Defaults to "{TENANT}.auth0.com". */
+    tenantDomain?: string;
     /** Additional headers to include in requests. */
     headers?: Record<string, string | core.Supplier<string | null | undefined> | null | undefined>;
     /** The default maximum time to wait for a response in seconds. */
@@ -17,6 +19,11 @@ export type BaseClientOptions = {
     fetcher?: core.FetchFunction;
     /** Configure logging for the client. */
     logging?: core.logging.LogConfig | core.logging.Logger;
+    /** Default options for SSE stream reconnection behavior. Has no effect on non-resumable endpoints. */
+    stream?: {
+        reconnectionEnabled?: boolean;
+        maxReconnectionAttempts?: number;
+    };
     /** Override auth. Pass false to disable, a function returning auth headers, an AuthProvider, or auth options. */
     auth?: AuthOption;
 } & BearerAuthProvider.AuthOptions;
@@ -29,8 +36,15 @@ export interface BaseRequestOptions {
     abortSignal?: AbortSignal;
     /** Additional query string parameters to include in the request. */
     queryParams?: Record<string, unknown>;
+    /** A dictionary containing additional parameters to spread into the request's body. */
+    additionalBodyParameters?: Record<string, unknown>;
     /** Additional headers to include in the request. */
     headers?: Record<string, string | core.Supplier<string | null | undefined> | null | undefined>;
+    /** Options for SSE stream reconnection behavior. Has no effect on non-resumable endpoints. */
+    stream?: {
+        reconnectionEnabled?: boolean;
+        maxReconnectionAttempts?: number;
+    };
 }
 export type NormalizedClientOptions<T extends BaseClientOptions = BaseClientOptions> = T & {
     logging: core.logging.Logger;

package/dist/esm/management/BaseClient.mjs

@@ -1,8 +1,20 @@
 // This file was auto-generated by Fern from our API Definition.
 import { BearerAuthProvider } from "./auth/BearerAuthProvider.mjs";
 import * as core from "./core/index.mjs";
+import * as environments from "./environments.mjs";
 export function normalizeClientOptions(options) {
-    return Object.assign(Object.assign({}, options), { logging: core.logging.createLogger(options === null || options === void 0 ? void 0 : options.logging) });
+    var _a, _b;
+    let baseUrl = options === null || options === void 0 ? void 0 : options.baseUrl;
+    if ((options === null || options === void 0 ? void 0 : options.tenantDomain) != null) {
+        const _tenantDomain = (_a = options === null || options === void 0 ? void 0 : options.tenantDomain) !== null && _a !== void 0 ? _a : "{TENANT}.auth0.com";
+        if (baseUrl == null) {
+            const _environmentUrls = new Map([
+                [environments.ManagementEnvironment.Default, `https://${_tenantDomain}/api/v2`],
+            ]);
+            baseUrl = (_b = _environmentUrls.get(options === null || options === void 0 ? void 0 : options.environment)) !== null && _b !== void 0 ? _b : `https://${_tenantDomain}/api/v2`;
+        }
+    }
+    return Object.assign(Object.assign({}, options), { baseUrl, logging: core.logging.createLogger(options === null || options === void 0 ? void 0 : options.logging) });
 }
 export function normalizeClientOptionsWithAuth(options) {
     var _a;

package/dist/esm/management/Client.d.mts

@@ -26,6 +26,7 @@ import { LogsClient } from "./api/resources/logs/client/Client.mjs";
 import { LogStreamsClient } from "./api/resources/logStreams/client/Client.mjs";
 import { NetworkAclsClient } from "./api/resources/networkAcls/client/Client.mjs";
 import { OrganizationsClient } from "./api/resources/organizations/client/Client.mjs";
+import { PortalsClient } from "./api/resources/portals/client/Client.mjs";
 import { PromptsClient } from "./api/resources/prompts/client/Client.mjs";
 import { RateLimitPoliciesClient } from "./api/resources/rateLimitPolicies/client/Client.mjs";
 import { RefreshTokensClient } from "./api/resources/refreshTokens/client/Client.mjs";
@@ -80,6 +81,7 @@ export declare class ManagementClient {
     protected _logs: LogsClient | undefined;
     protected _networkAcls: NetworkAclsClient | undefined;
     protected _organizations: OrganizationsClient | undefined;
+    protected _portals: PortalsClient | undefined;
     protected _prompts: PromptsClient | undefined;
     protected _rateLimitPolicies: RateLimitPoliciesClient | undefined;
     protected _refreshTokens: RefreshTokensClient | undefined;
@@ -129,6 +131,7 @@ export declare class ManagementClient {
     get logs(): LogsClient;
     get networkAcls(): NetworkAclsClient;
     get organizations(): OrganizationsClient;
+    get portals(): PortalsClient;
     get prompts(): PromptsClient;
     get rateLimitPolicies(): RateLimitPoliciesClient;
     get refreshTokens(): RefreshTokensClient;

package/dist/esm/management/Client.mjs

@@ -36,6 +36,7 @@ import { LogsClient } from "./api/resources/logs/client/Client.mjs";
 import { LogStreamsClient } from "./api/resources/logStreams/client/Client.mjs";
 import { NetworkAclsClient } from "./api/resources/networkAcls/client/Client.mjs";
 import { OrganizationsClient } from "./api/resources/organizations/client/Client.mjs";
+import { PortalsClient } from "./api/resources/portals/client/Client.mjs";
 import { PromptsClient } from "./api/resources/prompts/client/Client.mjs";
 import { RateLimitPoliciesClient } from "./api/resources/rateLimitPolicies/client/Client.mjs";
 import { RefreshTokensClient } from "./api/resources/refreshTokens/client/Client.mjs";
@@ -158,6 +159,10 @@ export class ManagementClient {
         var _a;
         return ((_a = this._organizations) !== null && _a !== void 0 ? _a : (this._organizations = new OrganizationsClient(this._options)));
     }
+    get portals() {
+        var _a;
+        return ((_a = this._portals) !== null && _a !== void 0 ? _a : (this._portals = new PortalsClient(this._options)));
+    }
     get prompts() {
         var _a;
         return ((_a = this._prompts) !== null && _a !== void 0 ? _a : (this._prompts = new PromptsClient(this._options)));

package/dist/esm/management/api/requests/requests.d.mts

@@ -292,6 +292,7 @@ export interface UpdateClientProfileRequestContent {
  *         is_first_party: true,
  *         app_type: "app_type",
  *         external_client_id: "external_client_id",
+ *         agent_id: "agent_id",
  *         q: "q"
  *     }
  */
@@ -314,6 +315,8 @@ export interface ListClientsRequestParameters {
     app_type?: string | null;
     /** Optional filter by the <a href="https://drafts.oauth.net/draft-ietf-oauth-client-id-metadata-document/draft-ietf-oauth-client-id-metadata-document.html">Client ID Metadata Document</a> URI for CIMD-registered clients. */
     external_client_id?: string | null;
+    /** Optional filter by the agent associated with the client.<br /><b>Additional Restrictions</b>:<br /><ul><li>Cannot be used in combination with other filters</li><li>Only <i>fields</i>, <i>include_fields</i>, <i>page</i>, <i>per_page</i>, and <i>include_totals</i> are supported alongside it</li><li>Checkpoint pagination (<i>from</i>, <i>take</i>) is not supported</li></ul> */
+    agent_id?: string | null;
     /** Advanced Query in <a href="https://lucene.apache.org/core/2_9_4/queryparsersyntax.html">Lucene</a> syntax.<br /><b>Permitted Queries</b>:<br /><ul><li><i>client_grant.organization_id:{organization_id}</i></li><li><i>client_grant.allow_any_organization:true</i></li></ul><b>Additional Restrictions</b>:<br /><ul><li>Cannot be used in combination with other filters</li><li>Requires use of the <i>from</i> and <i>take</i> paging parameters (checkpoint paginatinon)</li><li>Reduced rate limits apply. See <a href="https://auth0.com/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/enterprise-public">Rate Limit Configurations</a></li></ul><i><b>Note</b>: Recent updates may not be immediately reflected in query results</i> */
     q?: string | null;
 }
@@ -416,6 +419,8 @@ export interface CreateClientRequestContent {
     b2b_integration_configuration?: Management.B2BIntegrationConfiguration;
     my_organization_configuration?: Management.ClientMyOrganizationPostConfiguration;
     async_approval_notification_channels?: Management.ClientAsyncApprovalNotificationsChannelsApiPostConfiguration;
+    /** ID of the agent to associate with this client. */
+    agent_id?: string | null;
     oidc_support?: Management.ClientOidcSupportPost;
 }
 /**
@@ -578,6 +583,8 @@ export interface UpdateClientRequestContent {
     async_approval_notification_channels?: (Management.ClientAsyncApprovalNotificationsChannelsApiPatchConfiguration | undefined) | null;
     third_party_security_mode?: Management.ClientThirdPartySecurityModeEnum;
     redirection_policy?: Management.ClientRedirectionPolicyEnum;
+    /** ID of the agent to associate with this client, or null to remove the association. */
+    agent_id?: string | null;
     oidc_support?: Management.ClientOidcSupportPatch | null;
 }
 /**
@@ -1405,6 +1412,38 @@ export interface UpdateOrganizationRequestContent {
     /** Whether app entitlement is active for this organization. */
     is_app_entitlement_active?: boolean;
 }
+/**
+ * @example
+ *     {
+ *         slug: "slug",
+ *         name: "name",
+ *         client: {
+ *             token_endpoint_auth_method: "client_secret_post",
+ *             client_id: "client_id",
+ *             client_secret: "client_secret"
+ *         }
+ *     }
+ */
+export interface CreatePortalRequestContent {
+    slug: Management.PortalSlug;
+    name: Management.PortalName;
+    client: Management.PortalClientSecretPostRequest;
+    navigation?: Management.PortalNavigation;
+    pages?: Management.PortalPagesByType;
+    custom_code?: Management.PortalCustomCode;
+}
+/**
+ * @example
+ *     {}
+ */
+export interface UpdatePortalRequestContent {
+    slug?: Management.PortalSlug;
+    name?: Management.PortalName;
+    client?: Management.PortalClientSecretPostRequest;
+    navigation?: (Management.PortalNavigationNullable | undefined) | null;
+    pages?: (Management.PortalPagesByTypeNullable | undefined) | null;
+    custom_code?: (Management.PortalCustomCodeNullable | undefined) | null;
+}
 /**
  * @example
  *     {}
@@ -1576,6 +1615,8 @@ export interface CreateResourceServerRequestContent {
     proof_of_possession?: Management.ResourceServerProofOfPossession | null;
     subject_type_authorization?: Management.ResourceServerSubjectTypeAuthorization;
     authorization_policy?: Management.ResourceServerAuthorizationPolicy | null;
+    agent_subject_claims?: Management.ResourceServerAgentSubjectClaimsSchemaEnum;
+    type?: Management.ResourceServerTypeEnum | null;
 }
 /**
  * @example
@@ -1651,6 +1692,8 @@ export interface UpdateResourceServerRequestContent {
     proof_of_possession?: Management.ResourceServerProofOfPossession | null;
     subject_type_authorization?: Management.ResourceServerSubjectTypeAuthorization;
     authorization_policy?: Management.ResourceServerAuthorizationPolicy | null;
+    agent_subject_claims?: Management.ResourceServerAgentSubjectClaimsSchemaEnum;
+    type?: Management.ResourceServerTypeEnum | null;
 }
 /**
  * @example
@@ -2353,9 +2396,9 @@ export interface UpdateBruteForceSettingsRequestContent {
     /** List of trusted IP addresses that will not have attack protection enforced against them. */
     allowlist?: string[];
     mode?: Management.BruteForceProtectionModeEnum;
+    form_submission_mode?: Management.BruteForceProtectionFormSubmissionModeEnum;
     /** Maximum number of unsuccessful attempts. */
     max_attempts?: number;
-    form_submission_mode?: Management.BruteForceProtectionFormSubmissionModeEnum;
 }
 /**
  * @example
@@ -2371,39 +2414,6 @@ export interface UpdateAttackProtectionCaptchaRequestContent {
     recaptcha_v2?: Management.AttackProtectionUpdateCaptchaRecaptchaV2;
     simple_captcha?: Management.AttackProtectionCaptchaSimpleCaptchaResponseContent;
 }
-/**
- * @example
- *     {
- *         name: "name",
- *         priority: 1,
- *         match: {},
- *         action: {}
- *     }
- */
-export interface CreateAttackProtectionCaptchaPolicyRequestContent {
-    /** Human-readable policy name. */
-    name: string;
-    /** Description of the attack protection policy. */
-    description?: string;
-    /** Conflict resolution order. Lower number takes higher precedence. Must be unique per tenant. */
-    priority: number;
-    match: Management.AttackProtectionCaptchaPolicyMatch;
-    action: Management.AttackProtectionCaptchaPolicyActionInput;
-}
-/**
- * @example
- *     {}
- */
-export interface UpdateAttackProtectionCaptchaPolicyRequestContent {
-    /** Human-readable policy name. */
-    name?: string;
-    /** Description of the policy's purpose. */
-    description?: string;
-    /** Conflict resolution order. Lower number takes higher precedence. Must be unique per tenant. */
-    priority?: number;
-    match?: Management.AttackProtectionCaptchaPolicyMatch;
-    action?: Management.AttackProtectionCaptchaPolicyActionInput;
-}
 /**
  * @example
  *     {
@@ -2989,7 +2999,8 @@ export interface ListExperimentsRequestParameters {
  *     {
  *         name: "name",
  *         feature_flag_id: "feature_flag_id",
- *         authentication_flow: "authentication"
+ *         authentication_flow: "authentication",
+ *         allocation_strategy: "percentage"
  *     }
  */
 export interface CreateExperimentRequestContent {
@@ -3003,7 +3014,7 @@ export interface CreateExperimentRequestContent {
     /** Applies only to Auth0-managed flags. Controls where non-overridden config keys resolve from: 'tenant' inherits the tenant's live config so the experiment overlays only its changes, 'flag' uses the flag's frozen defaults for a complete config. Optional; defaults to 'tenant' when omitted. Rejected for customer-defined flags. */
     default_config?: Management.DefaultConfigEnum;
     /** The traffic allocation strategy for this experiment */
-    allocation_strategy?: Management.AllocationStrategyEnum;
+    allocation_strategy: Management.AllocationStrategyEnum;
     /** Traffic allocations mapping variations to weights or segments */
     allocations?: Management.AllocationRequestItem[];
     /** Ramp experiment levels configuration. A strictly-increasing sequence of exposure percentages, each an integer in [0, 100]. */
@@ -3089,7 +3100,8 @@ export interface UpdateFeatureFlagRequestContent {
  *     {
  *         from: "from",
  *         take: 1,
- *         type: "auth0"
+ *         type: "auth0",
+ *         status: "active"
  *     }
  */
 export interface ListSegmentsRequestParameters {
@@ -3099,6 +3111,8 @@ export interface ListSegmentsRequestParameters {
     take?: number | null;
     /** Filter by type. Exact match. */
     type?: Management.SegmentTypeFilterEnum | null;
+    /** Filter by status. Exact match. */
+    status?: Management.SegmentStatusEnum | null;
 }
 /**
  * @example
@@ -3155,7 +3169,7 @@ export interface UpdateVariationRequestContent {
     name?: string;
     /** A description of what this variation controls */
     description?: string | null;
-    overrides?: Management.UpdateVariationOverridesMap;
+    overrides?: (Management.UpdateVariationOverridesMap | undefined) | null;
 }
 /**
  * @example

package/dist/esm/management/api/resources/actions/client/Client.d.mts

@@ -32,6 +32,8 @@ export declare class ActionsClient {
      * @throws {@link Management.UnauthorizedError}
      * @throws {@link Management.ForbiddenError}
      * @throws {@link Management.TooManyRequestsError}
+     * @throws {@link errors.ManagementError}
+     * @throws {@link errors.ManagementTimeoutError}
      *
      * @example
      *     await client.actions.list({
@@ -54,6 +56,8 @@ export declare class ActionsClient {
      * @throws {@link Management.UnauthorizedError}
      * @throws {@link Management.ForbiddenError}
      * @throws {@link Management.TooManyRequestsError}
+     * @throws {@link errors.ManagementError}
+     * @throws {@link errors.ManagementTimeoutError}
      *
      * @example
      *     await client.actions.create({
@@ -76,6 +80,8 @@ export declare class ActionsClient {
      * @throws {@link Management.ForbiddenError}
      * @throws {@link Management.NotFoundError}
      * @throws {@link Management.TooManyRequestsError}
+     * @throws {@link errors.ManagementError}
+     * @throws {@link errors.ManagementTimeoutError}
      *
      * @example
      *     await client.actions.get("id")
@@ -94,6 +100,8 @@ export declare class ActionsClient {
      * @throws {@link Management.ForbiddenError}
      * @throws {@link Management.NotFoundError}
      * @throws {@link Management.TooManyRequestsError}
+     * @throws {@link errors.ManagementError}
+     * @throws {@link errors.ManagementTimeoutError}
      *
      * @example
      *     await client.actions.delete("id", {
@@ -114,6 +122,8 @@ export declare class ActionsClient {
      * @throws {@link Management.ForbiddenError}
      * @throws {@link Management.NotFoundError}
      * @throws {@link Management.TooManyRequestsError}
+     * @throws {@link errors.ManagementError}
+     * @throws {@link errors.ManagementTimeoutError}
      *
      * @example
      *     await client.actions.update("id")
@@ -130,6 +140,8 @@ export declare class ActionsClient {
      * @throws {@link Management.UnauthorizedError}
      * @throws {@link Management.ForbiddenError}
      * @throws {@link Management.TooManyRequestsError}
+     * @throws {@link errors.ManagementError}
+     * @throws {@link errors.ManagementTimeoutError}
      *
      * @example
      *     await client.actions.deploy("id")
@@ -147,6 +159,8 @@ export declare class ActionsClient {
      * @throws {@link Management.UnauthorizedError}
      * @throws {@link Management.ForbiddenError}
      * @throws {@link Management.TooManyRequestsError}
+     * @throws {@link errors.ManagementError}
+     * @throws {@link errors.ManagementTimeoutError}
      *
      * @example
      *     await client.actions.test("id", {