refactor(core): add sdk re-export convention for api types

[harishsundar-okta]

Summary

Documents all intentionally custom API request/response types and adds an SDK re-export convention to prevent type drift when SDK packages are updated.

Why

Custom types that mirror SDK API request/response shapes were scattered across the codebase with no documentation explaining whether they were intentional or simply missing SDK re-exports. When SDK packages are updated, these custom types must be manually synced with no compiler error to flag drift. An audit of all ~38 custom API types confirmed they are either already SDK re-exports or intentionally custom (no SDK equivalent available), but this was not documented anywhere.

What

• Audited all custom API request/response types across the codebase against @auth0/myorganization-js, @auth0/myaccount-js, and @auth0/auth0-spa-js SDK exports
• Added JSDoc comments to intentionally custom types explaining why they can't be replaced with SDK re-exports:
• mfa-step-up-api-types.ts — ~23 types for raw /auth/mfa/* endpoints (@auth0/auth0-spa-js has equivalents but is not a core dependency)
• auth-types.ts — TokenEndpointResponse and FetcherAuthParams (internal abstractions, no SDK dependency available)
• organization-details-types.ts — OrganizationPrivate and Organization (hybrid form+API types, not pure SDK shapes)
• mfa-types.ts — EnrollOptions and ConfirmEnrollmentOptions (simplified internal abstractions for MFAControllerInterface)
• api-types.ts — ApiError (no SDK equivalent exists)
• Added convention to AGENTS.md anti-patterns: "always re-export SDK types via type Alias = SDK.Type for API request/response shapes"

Packages

• core
• react

Testing

Please describe how this can be tested by reviewers. Be specific about anything not tested and reasons why. If this library has unit and tests should be added for new functionality and existing tests should complete without errors.

• 
• 

Checklist

• I have read the Auth0 general contribution guidelines
• I have read the Auth0 Code of Conduct
• All existing and new tests complete without errors

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 89.42%. Comparing base (a5faee2) to head (c127d2b).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #257   +/-   ##
=======================================
  Coverage   89.42%   89.42%           
=======================================
  Files         159      159           
  Lines       13325    13325           
  Branches     1435     1435           
=======================================
  Hits        11916    11916           
  Misses       1409     1409           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[rax7389]

Pending Comment