[fern-api]

Summary

Adds the Portals client, user consent signing key management, and database connection OTP settings to the Management API client, extends resource servers and clients, and removes the CAPTCHA policies client and its models.

Breaking Changes ⚠️

• CAPTCHA policies: client.attack_protection.captcha_policies is removed, along with its policy, match, and action models and the per-provider action settings for Arkose, hCaptcha, Friendly CAPTCHA, reCAPTCHA Enterprise, reCAPTCHA v2, Simple CAPTCHA, and auth challenge. Code that accesses it now raises AttributeError. This release provides no replacement.
• Experiments: client.experimentation.experiments.create() now requires allocation_strategy. Calls that leave it out raise TypeError. Pass the strategy explicitly, for example allocation_strategy="percentage".

Added

• Portals: create and manage portals with client.portals.list(), create(), get(), update(), and delete(). A portal has a client, sidebar navigation links, pages built from typed components, and custom <head> code. update() clears navigation, pages, or custom code when you pass None for it.
• Consent signing keys: list, read, and remove a user's consent signing keys with client.users.list_consent_signing_keys(), get_consent_signing_key(), and delete_consent_signing_key().
• Client OIDC support in responses: oidc_support is now returned on client responses from get, create, update, list, search, and secret rotation. Client profiles accept and return oidc_support in their client configuration.
• Resource server type: client.resource_servers.create() and update() accept a type, and resource server responses return it. Resource servers also expose agent_subject_claims.
• Database connection OTP settings: set one-time password length and expiry separately for email and phone with options.otp_settings on client.connections.create() and update().
• SAML connections: configure a cross-app access requesting app, and the client credentials and token endpoint settings that go with it. Connection key management documentation now covers SAML connections.
• Segment filtering: client.experimentation.segments.list() accepts a status filter.
• Smaller additions: a transaction context on event stream cloud events, agent_id on client search results, and a typed model for internal server error bodies.

Changed

• Experiment validity: is_valid on experiment responses is now documented as the state at the last update, which can lag later changes.
• Variation overrides: UpdateVariationOverridesMap now accepts None. Top-level keys merge into stored overrides, a null value removes a key, and None or {} clears all overrides.
• Tenant settings flags: the dashboard_insights_view flag is documented as deprecated with no effect.

Removed

• client.attack_protection.captcha_policies and the CAPTCHA policy models listed under Breaking Changes.