feat: add Experiment Center advance-ramp, Guardian AFC factor settings, and Anonymous Sessions fields; remove top-level OrganizationTemplates client

[fern-api]

Changes

SDK regeneration from the Auth0 OpenAPI spec via Fern. Adds top-level Guardian settings and Guardian email and phone factor settings endpoints, anonymous session support across clients, resource servers, and tenant settings, search endpoints for organizations and resource servers, an Experiment Center advance-ramp endpoint, resource server access token claims configuration, and organization connection member access levels. Removes the top-level OrganizationTemplates client and renames MCP connection strategy enum members.

🆕 New endpoints / types:

• Guardian settings - new guardian.get / guardian.set on GET/PUT /guardian/settings, backed by GetGuardianSettingsResponseContent, SetGuardianSettingsRequestContent, and SetGuardianSettingsResponseContent
• Guardian email factor settings - new guardian.factors.email.get / guardian.factors.email.set on GET/PUT /guardian/factors/email/settings, backed by GetEmailFactorSettingsResponseContent, SetEmailFactorSettingsRequestContent, and SetEmailFactorSettingsResponseContent
• Guardian phone factor settings - new guardian.factors.phone.get / guardian.factors.phone.set on GET/PUT /guardian/factors/phone/settings, backed by GetPhoneFactorSettingsResponseContent, SetPhoneFactorSettingsRequestContent, and SetPhoneFactorSettingsResponseContent, alongside the existing message type, provider, and template operations
• Organizations search - new organizations.search on GET /organizations/search with cursor pagination, backed by SearchOrganizationsRequestParameters, SearchOrganization, OrganizationSortFieldEnum, and SearchParserEnum
• Resource Servers search - new resource_servers.search on GET /resource-servers/search, backed by SearchResourceServersRequestParameters, ResourceServerSearchResponse, and ResourceServerSortFieldEnum
• Experiment Center advance-ramp - new experimentation.experiments.advance_ramp on POST /experimentation/experiments/{id}/advance-ramp, backed by AdvanceRampRequestContent and AdvanceRampResponseContent, with a new UPDATE_EXPERIMENTATION (update:experimentation) OauthScope constant
• Anonymous sessions on clients - anonymous_sessions on client create, update, and response types, backed by new AnonymousSessions, CreateAnonymousSessions, and UpdateAnonymousSessions types
• Resource server access token claims - access_token on resource server create, update, and response types, backed by new ResourceServerAccessToken, ResourceServerAccessTokenClaimsMapping, ResourceServerAccessTokenCustomClaimsMapping, and ResourceServerAccessTokenCustomClaimsMappingRule
• Organization member access level - new OrganizationMemberAccessLevelEnum (none, readonly, limited, full) and its nullable variant OrganizationMemberAccessLevelEnumWithNull for the update path

✏️ Modified endpoints (new properties):

• Anonymous access on resource servers - subject_type_authorization.anonymous_user (policy deny_all / require_client_grant, backed by new ResourceServerSubjectTypeAuthorizationAnonymousUser and ResourceServerSubjectTypeAuthorizationAnonymousUserPolicyEnum) on resource server responses, and token_lifetime_for_anonymous_access_tokens on resource server create, update, and response types
• Organization connection member access level - organization_member_access_level on organization connection create and update parameters and on OrganizationAllConnectionPost, CreateOrganizationAllConnectionResponseContent, GetOrganizationAllConnectionResponseContent, and UpdateOrganizationAllConnectionResponseContent
• Tenant settings anonymous sessions - sessions.anonymous on tenant settings get and update, backed by new TenantSettingsSessionsAnonymous (lifetime_in_minutes, activate_cookie)
• Tenant settings access token - access_token (ResourceServerAccessToken) on tenant settings update
• My Organization member management - enforce_permission_ceiling and enforce_self_assignment_restriction on client My Organization post, patch, and response configuration
• Client timestamps - created_at and updated_at on client create, update, and response types
• Connection SHA-384 thumbprints - thumbprints_sha384 on ConnectionOptionsAd, ConnectionOptionsAdfs, ConnectionOptionsAzureAd, ConnectionOptionsCommonSaml, ConnectionOptionsPingFederate, ConnectionOptionsSaml, ConnectionPropertiesOptions, and UpdateConnectionOptions, with thumbprints also added to ConnectionPropertiesOptions and UpdateConnectionOptions

⚠️ Breaking Changes:

• client.organization_templates removed - the top-level organization_templates accessor and its list, create, get, update methods are removed along with the OrganizationTemplates module and the ListOrganizationTemplatesPaginatedResponseContent type. The CREATE_ORGANIZATION_TEMPLATES and UPDATE_ORGANIZATION_TEMPLATES OauthScope constants are removed (READ_ORGANIZATION_TEMPLATES is retained). Migration: use client.organizations.organization_template for org-level template reads and assignments. Tenant-level template CRUD is no longer exposed through this SDK in this release.
• ConnectionStrategyEnum and ConnectionIdentityProviderEnum MCP member renames - four providers dropped the -mcp suffix (ASANA_MCP → ASANA, ATLASSIAN_MCP → ATLASSIAN, GITLAB_MCP → GITLAB, SLACK_MCP → SLACK). Nine values were removed entirely: DOCUSIGN_MCP, FIGMA_MCP, GUSTO_MCP, HEROKU_MCP, INTERCOM_MCP, PAGERDUTY_MCP, SUPABASE_MCP, VERCEL_MCP, XERO_MCP. The -mcp members cloudflare-mcp, hubspot-mcp, linear-mcp, and sentry-mcp are retained. Update any code that references the removed constant names.

References

Closes #795
Closes #796

Testing

Existing wire tests were regenerated to match the updated client. The live-tenant integration test passes against a dev tenant, and the new types load correctly.

• This change adds unit test coverage
• This change has been tested on the latest version of Ruby

Checklist

• I have read the Auth0 general contribution guidelines
• I have read the Auth0 Code of Conduct
• All existing and new tests complete without errors
• Rubocop passes on all added/modified files
• All active GitHub checks have passed

[kishore7snehil]

LGTM!