diff --git a/build.savant b/build.savant
index a335de3..714f704 100644
--- a/build.savant
+++ b/build.savant
@@ -24,12 +24,27 @@ javaErrorVersion = "2.2.3"
 restifyVersion = "4.4.0"
 testngVersion = "7.5.1"
 
-project(group: "io.fusionauth", name: "fusionauth-java-client", version: "1.70.0", licenses: ["ApacheV2_0"]) {
+project(group: "io.fusionauth", name: "fusionauth-java-client", version: "1.71.0", licenses: ["ApacheV2_0"]) {
   workflow {
     fetch {
       cache()
       url(url: "https://repository.savantbuild.org")
-      maven()
+      // allows overriding the Maven central URL
+      def mavenCentralUrl = System.getenv('MAVEN_CENTRAL_URL')
+      if (mavenCentralUrl) {
+        def mavenCentralUsername = System.getenv('MAVEN_CENTRAL_USERNAME')
+        if (mavenCentralUsername) {
+          maven(url: mavenCentralUrl,
+                username: mavenCentralUsername,
+                password: System.getenv('MAVEN_CENTRAL_PASSWORD'))
+        }
+        else {
+          maven(url: mavenCentralUrl)
+        }
+      }
+      else {
+        maven()
+      }
     }
     publish {
       cache()
diff --git a/pom.xml b/pom.xml
index c8cf68e..2650491 100644
--- a/pom.xml
+++ b/pom.xml
@@ -17,7 +17,7 @@
 
   <groupId>io.fusionauth</groupId>
   <artifactId>fusionauth-java-client</artifactId>
-  <version>1.70.0</version>
+  <version>1.71.0</version>
   <packaging>jar</packaging>
 
   <name>FusionAuth Java Client Library</name>
diff --git a/src/main/java/io/fusionauth/domain/AGENTS.md b/src/main/java/io/fusionauth/domain/AGENTS.md
index 06f7aa8..c4c2d6d 100644
--- a/src/main/java/io/fusionauth/domain/AGENTS.md
+++ b/src/main/java/io/fusionauth/domain/AGENTS.md
@@ -2,6 +2,9 @@
 
 Rules for domain model classes under `io.fusionauth.domain`. These are the classes shared with client libraries and must maintain Java 8 compatibility.
 
+## Skills
+- Use `developing-fusionauth` for domain-model conventions and client-builder propagation.
+
 ## Java 8 Compatibility (critical)
 - All code in `io.fusionauth.domain.*` **must be Java 8 compatible**.
 - Do not use Java 9+ language features (e.g., pattern variables with `instanceof`, `var`, records, sealed classes).
diff --git a/src/main/java/io/fusionauth/domain/LambdaType.java b/src/main/java/io/fusionauth/domain/LambdaType.java
index 4d90d0c..df54942 100644
--- a/src/main/java/io/fusionauth/domain/LambdaType.java
+++ b/src/main/java/io/fusionauth/domain/LambdaType.java
@@ -30,6 +30,7 @@ public enum LambdaType {
       "// https://fusionauth.io/docs/extend/code/lambdas/jwt-populate\n" +
       "// Optionally accept a fourth parameter named 'context' which provides additional request context.\n" +
       "// - If provided, FusionAuth will graft context.services.secrets for secret retrieval.\n" +
+      "// - context.application contains a secure copy of the application for the issued JWT when available.\n" +
       "function populate(jwt, user, registration, context) {\n" +
       "  //  When writing a lambda we've added a few helpers to make life easier.\n" +
       "  //  console.info('Hello World');         # This will create an EventLog of type Information\n" +
diff --git a/src/main/java/io/fusionauth/domain/RateLimitedRequestType.java b/src/main/java/io/fusionauth/domain/RateLimitedRequestType.java
index 1a734fd..c0193bc 100644
--- a/src/main/java/io/fusionauth/domain/RateLimitedRequestType.java
+++ b/src/main/java/io/fusionauth/domain/RateLimitedRequestType.java
@@ -28,5 +28,7 @@ public enum RateLimitedRequestType {
   SendTwoFactor,
   SendPhoneVerification,
   SendPhonePasswordless,
-  CimdClientRegistration
+  CimdClientRegistration,
+  ScimGroups,
+  PasswordlessLogin
 }
diff --git a/src/main/java/io/fusionauth/domain/TenantRateLimitConfiguration.java b/src/main/java/io/fusionauth/domain/TenantRateLimitConfiguration.java
index fe5ca3c..b5707df 100644
--- a/src/main/java/io/fusionauth/domain/TenantRateLimitConfiguration.java
+++ b/src/main/java/io/fusionauth/domain/TenantRateLimitConfiguration.java
@@ -31,6 +31,8 @@ public class TenantRateLimitConfiguration implements Buildable<TenantRateLimitCo
 
   public RateLimitedRequestConfiguration forgotPassword = new RateLimitedRequestConfiguration(5, 60);
 
+  public RateLimitedRequestConfiguration passwordlessLogin = new RateLimitedRequestConfiguration(5, 60);
+
   public RateLimitedRequestConfiguration sendEmailVerification = new RateLimitedRequestConfiguration(5, 60);
 
   public RateLimitedRequestConfiguration sendPasswordless = new RateLimitedRequestConfiguration(5, 60);
@@ -51,6 +53,7 @@ public TenantRateLimitConfiguration(TenantRateLimitConfiguration other) {
     this.cimdClientRegistration = new RateLimitedRequestConfiguration(other.cimdClientRegistration);
     this.failedLogin = new RateLimitedRequestConfiguration(other.failedLogin);
     this.forgotPassword = new RateLimitedRequestConfiguration(other.forgotPassword);
+    this.passwordlessLogin = new RateLimitedRequestConfiguration(other.passwordlessLogin);
     this.sendEmailVerification = new RateLimitedRequestConfiguration(other.sendEmailVerification);
     this.sendPasswordless = new RateLimitedRequestConfiguration(other.sendPasswordless);
     this.sendPasswordlessPhone = new RateLimitedRequestConfiguration(other.sendPasswordlessPhone);
@@ -71,6 +74,7 @@ public boolean equals(Object o) {
     return Objects.equals(cimdClientRegistration, that.cimdClientRegistration) &&
            Objects.equals(failedLogin, that.failedLogin) &&
            Objects.equals(forgotPassword, that.forgotPassword) &&
+           Objects.equals(passwordlessLogin, that.passwordlessLogin) &&
            Objects.equals(sendEmailVerification, that.sendEmailVerification) &&
            Objects.equals(sendPasswordless, that.sendPasswordless) &&
            Objects.equals(sendPasswordlessPhone, that.sendPasswordlessPhone) &&
@@ -96,6 +100,8 @@ public RateLimitedRequestConfiguration getConfiguration(RateLimitedRequestType t
         return failedLogin;
       case ForgotPassword:
         return forgotPassword;
+      case PasswordlessLogin:
+        return passwordlessLogin;
       case SendEmailVerification:
         return sendEmailVerification;
       case SendPasswordless:
@@ -115,8 +121,8 @@ public RateLimitedRequestConfiguration getConfiguration(RateLimitedRequestType t
 
   @Override
   public int hashCode() {
-    return Objects.hash(cimdClientRegistration, failedLogin, forgotPassword, sendEmailVerification, sendPasswordless, sendPasswordlessPhone, sendPhoneVerification,
-                        sendRegistrationVerification, sendTwoFactor);
+    return Objects.hash(cimdClientRegistration, failedLogin, forgotPassword, passwordlessLogin, sendEmailVerification, sendPasswordless, sendPasswordlessPhone,
+                        sendPhoneVerification, sendRegistrationVerification, sendTwoFactor);
   }
 
   @Override