clerk-sdk-ruby 7.0.0 → 8.0.1

data/lib/clerk/models/components/featureresponse_2_object.rbi

@@ -0,0 +1,11 @@
+# typed: false
+# frozen_string_literal: true
+
+
+class Clerk::Models::Components::FeatureResponse2Object
+  extend ::Crystalline::MetadataFields::ClassMethods
+end
+
+
+class Clerk::Models::Components::FeatureResponse2Object
+end

data/lib/clerk/models/components/instance.rb

@@ -18,15 +18,24 @@ module Clerk
         field :id, ::String, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('id'), required: true } }
 
         field :environment_type, ::String, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('environment_type'), required: true } }
+        # Subdomains of the instance's own domains that may originate requests, when the subdomain allowlist is enabled. Production instances only; always empty on a development instance.
+        field :allowed_subdomains, Crystalline::Array.new(::String), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('allowed_subdomains'), required: true } }
+        # Whether requests from subdomains of the instance's own domains are restricted to `allowed_subdomains`. When false, every subdomain of the instance's domain is accepted. Production instances only; always false on a development instance.
+        field :subdomain_allowlist_enabled, Crystalline::Boolean.new, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('subdomain_allowlist_enabled'), required: true } }
 
         field :allowed_origins, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('allowed_origins'), required: true } }
+        # The ID of the Clerk workspace that owns the instance's application. It is null when the application has no owner.
+        field :workspace_id, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('workspace_id'), required: true } }
 
         
-        def initialize(object:, id:, environment_type:, allowed_origins: nil)
+        def initialize(object:, id:, environment_type:, allowed_subdomains:, subdomain_allowlist_enabled:, allowed_origins: nil, workspace_id: nil)
           @object = object
           @id = id
           @environment_type = environment_type
+          @allowed_subdomains = allowed_subdomains
+          @subdomain_allowlist_enabled = subdomain_allowlist_enabled
           @allowed_origins = allowed_origins
+          @workspace_id = workspace_id
         end
 
         
@@ -35,7 +44,10 @@ module Clerk
           return false unless @object == other.object
           return false unless @id == other.id
           return false unless @environment_type == other.environment_type
+          return false unless @allowed_subdomains == other.allowed_subdomains
+          return false unless @subdomain_allowlist_enabled == other.subdomain_allowlist_enabled
           return false unless @allowed_origins == other.allowed_origins
+          return false unless @workspace_id == other.workspace_id
           true
         end
       end

data/lib/clerk/models/components/instance.rbi

@@ -14,6 +14,12 @@ class Clerk::Models::Components::Instance
   def id=(str_); end
   def environment_type(); end
   def environment_type=(str_); end
+  def allowed_subdomains(); end
+  def allowed_subdomains=(str_); end
+  def subdomain_allowlist_enabled(); end
+  def subdomain_allowlist_enabled=(str_); end
   def allowed_origins(); end
   def allowed_origins=(str_); end
+  def workspace_id(); end
+  def workspace_id=(str_); end
 end

data/lib/clerk/models/components/instanceprotect.rb

@@ -14,16 +14,25 @@ module Clerk
 
 
         field :object, Models::Components::InstanceProtectObject, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('object'), required: true, 'decoder': ::Clerk::Utils.enum_from_string(Models::Components::InstanceProtectObject, false) } }
-
+        # Whether Protect rules are enforced on this instance. False does not mean the instance is outside Protect — by default it is still evaluated in shadow, where rules are scored and recorded but never block.
         field :rules_enabled, Crystalline::Boolean.new, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('rules_enabled'), required: true } }
 
         field :specter_enabled, Crystalline::Boolean.new, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('specter_enabled'), required: true } }
+        # Whether the instance has opted out of the Protect prerequisite checks, asserting its setup already meets the requirements.
+        field :checks_bypassed, Crystalline::Boolean.new, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('checks_bypassed'), required: true } }
+        # Whether the Protect system has verified the instance's prerequisite checks. Protect rules are gated on checks being verified, bypassed or exempt.
+        field :checks_verified, Crystalline::Boolean.new, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('checks_verified'), required: true } }
+        # Whether the instance was created into Protect and so was never subject to the prerequisite checks at all.
+        field :checks_exempt, Crystalline::Boolean.new, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('checks_exempt'), required: true } }
 
         
-        def initialize(object:, rules_enabled:, specter_enabled:)
+        def initialize(object:, rules_enabled:, specter_enabled:, checks_bypassed:, checks_verified:, checks_exempt:)
           @object = object
           @rules_enabled = rules_enabled
           @specter_enabled = specter_enabled
+          @checks_bypassed = checks_bypassed
+          @checks_verified = checks_verified
+          @checks_exempt = checks_exempt
         end
 
         
@@ -32,6 +41,9 @@ module Clerk
           return false unless @object == other.object
           return false unless @rules_enabled == other.rules_enabled
           return false unless @specter_enabled == other.specter_enabled
+          return false unless @checks_bypassed == other.checks_bypassed
+          return false unless @checks_verified == other.checks_verified
+          return false unless @checks_exempt == other.checks_exempt
           true
         end
       end

data/lib/clerk/models/components/instanceprotect.rbi

@@ -14,4 +14,10 @@ class Clerk::Models::Components::InstanceProtect
   def rules_enabled=(str_); end
   def specter_enabled(); end
   def specter_enabled=(str_); end
+  def checks_bypassed(); end
+  def checks_bypassed=(str_); end
+  def checks_verified(); end
+  def checks_verified=(str_); end
+  def checks_exempt(); end
+  def checks_exempt=(str_); end
 end

data/lib/clerk/models/components/instancesettings.rb

@@ -22,7 +22,10 @@ module Clerk
         field :from_email_address, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('from_email_address') } }
 
         field :progressive_sign_up, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('progressive_sign_up') } }
-
+        # Deprecated. This setting is retired and no longer affects email delivery; all email is sent through the instance's configured email sending domain. The field is preserved for API compatibility only and will be removed in a future version.
+        #
+        #
+        # @deprecated true: This will be removed in a future release, please migrate away from it as soon as possible.
         field :enhanced_email_deliverability, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('enhanced_email_deliverability') } }
 
         

data/lib/clerk/models/components/level.rb

@@ -0,0 +1,21 @@
+# Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+
+# typed: false
+# frozen_string_literal: true
+
+
+module Clerk
+  module Models
+    module Components
+      # Level - The level used for the reverification
+      class Level
+        include ::Crystalline::Enum
+        enums do
+          FIRST_FACTOR = new('first_factor')
+          SECOND_FACTOR = new('second_factor')
+          MULTI_FACTOR = new('multi_factor')
+        end
+      end
+    end
+  end
+end

data/lib/clerk/models/components/{clerkerrors_meta.rbi → level.rbi}

@@ -2,10 +2,10 @@
 # frozen_string_literal: true
 
 
-class Clerk::Models::Components::ClerkErrorsMeta
+class Clerk::Models::Components::Level
   extend ::Crystalline::MetadataFields::ClassMethods
 end
 
 
-class Clerk::Models::Components::ClerkErrorsMeta
+class Clerk::Models::Components::Level
 end

data/lib/clerk/models/components/login_hint.rb

@@ -0,0 +1,36 @@
+# Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+
+# typed: false
+# frozen_string_literal: true
+
+
+module Clerk
+  module Models
+    module Components
+      # Configuration for the login_hint sent to the IdP on SSO sign-in
+      class LoginHint
+        
+        include Crystalline::MetadataFields
+
+        # Controls the login_hint sent to the IdP on SSO sign-in
+        field :mode, Models::Components::EnterpriseConnectionMode, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('mode'), required: true, 'decoder': ::Clerk::Utils.enum_from_string(Models::Components::EnterpriseConnectionMode, false) } }
+        # The user public_metadata key whose value is sent as the login_hint when mode is custom_attribute
+        field :source, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('source') } }
+
+        
+        def initialize(mode:, source: nil)
+          @mode = mode
+          @source = source
+        end
+
+        
+        def ==(other)
+          return false unless other.is_a? self.class
+          return false unless @mode == other.mode
+          return false unless @source == other.source
+          true
+        end
+      end
+    end
+  end
+end

data/lib/clerk/models/components/login_hint.rbi

@@ -0,0 +1,15 @@
+# typed: false
+# frozen_string_literal: true
+
+
+class Clerk::Models::Components::LoginHint
+  extend ::Crystalline::MetadataFields::ClassMethods
+end
+
+
+class Clerk::Models::Components::LoginHint
+  def mode(); end
+  def mode=(str_); end
+  def source(); end
+  def source=(str_); end
+end

data/lib/clerk/models/components/oauthapplication.rb

@@ -29,8 +29,11 @@ module Clerk
 
         field :pkce_required, Crystalline::Boolean.new, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('pkce_required'), required: true } }
 
-        field :public, Crystalline::Boolean.new, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('public'), required: true } }
+        field :device_authorization_grant_enabled, Crystalline::Boolean.new, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('device_authorization_grant_enabled'), required: true } }
 
+        field :public, Crystalline::Boolean.new, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('public'), required: true } }
+        # The complete scope ceiling for the OAuth application, as a space-delimited list of built-in and assigned custom scope keys.
+        #
         field :scopes, ::String, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('scopes'), required: true } }
 
         field :redirect_uris, Crystalline::Array.new(::String), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('redirect_uris'), required: true } }
@@ -61,7 +64,7 @@ module Clerk
         field :client_image_url, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('client_image_url'), required: true } }
 
         
-        def initialize(object:, id:, instance_id:, name:, client_id:, dynamically_registered:, consent_screen_enabled:, pkce_required:, public:, scopes:, redirect_uris:, callback_url:, authorize_url:, token_fetch_url:, user_info_url:, discovery_url:, token_introspection_url:, created_at:, updated_at:, client_uri: nil, client_image_url: nil)
+        def initialize(object:, id:, instance_id:, name:, client_id:, dynamically_registered:, consent_screen_enabled:, pkce_required:, device_authorization_grant_enabled:, public:, scopes:, redirect_uris:, callback_url:, authorize_url:, token_fetch_url:, user_info_url:, discovery_url:, token_introspection_url:, created_at:, updated_at:, client_uri: nil, client_image_url: nil)
           @object = object
           @id = id
           @instance_id = instance_id
@@ -70,6 +73,7 @@ module Clerk
           @dynamically_registered = dynamically_registered
           @consent_screen_enabled = consent_screen_enabled
           @pkce_required = pkce_required
+          @device_authorization_grant_enabled = device_authorization_grant_enabled
           @public = public
           @scopes = scopes
           @redirect_uris = redirect_uris
@@ -96,6 +100,7 @@ module Clerk
           return false unless @dynamically_registered == other.dynamically_registered
           return false unless @consent_screen_enabled == other.consent_screen_enabled
           return false unless @pkce_required == other.pkce_required
+          return false unless @device_authorization_grant_enabled == other.device_authorization_grant_enabled
           return false unless @public == other.public
           return false unless @scopes == other.scopes
           return false unless @redirect_uris == other.redirect_uris

data/lib/clerk/models/components/oauthapplication.rbi

@@ -24,6 +24,8 @@ class Clerk::Models::Components::OAuthApplication
   def consent_screen_enabled=(str_); end
   def pkce_required(); end
   def pkce_required=(str_); end
+  def device_authorization_grant_enabled(); end
+  def device_authorization_grant_enabled=(str_); end
   def public(); end
   def public=(str_); end
   def scopes(); end

data/lib/clerk/models/components/oauthapplicationsettings.rb

@@ -18,12 +18,31 @@ module Clerk
         field :dynamic_oauth_client_registration, Crystalline::Boolean.new, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('dynamic_oauth_client_registration'), required: true } }
         # Whether OAuth JWT access tokens are enabled for the instance (disabled indicates opaque access tokens).
         field :oauth_jwt_access_tokens, Crystalline::Boolean.new, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('oauth_jwt_access_tokens'), required: true } }
+        # Whether OAuth access tokens can include an aud claim derived from the RFC 8707 resource parameter.
+        field :aud_claim_enabled, Crystalline::Boolean.new, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('aud_claim_enabled'), required: true } }
+        # Whether all new OAuth authorization-code requests must use PKCE with the S256 challenge method.
+        field :pkce_required, Crystalline::Boolean.new, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('pkce_required'), required: true } }
+        # Whether the instance advertises support for Client ID Metadata Documents in its OAuth authorization server metadata.
+        field :client_id_metadata_documents_advertised, Crystalline::Boolean.new, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('client_id_metadata_documents_advertised'), required: true } }
+        # When true, new unknown CIMD clients are rejected. Previously auto-connected and pre-registered clients remain admitted; deleting a client makes it unknown again.
+        field :client_id_metadata_documents_only_allow_pre_registered_clients, Crystalline::Boolean.new, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('client_id_metadata_documents_only_allow_pre_registered_clients'), required: true } }
+        # When true, recorded implicitly allowed CIMD clients are rejected on future client lookups. Explicitly allowed clients remain accepted. This does not revoke previously issued access tokens.
+        field :client_id_metadata_documents_block_implicitly_allowed_clients, Crystalline::Boolean.new, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('client_id_metadata_documents_block_implicitly_allowed_clients'), required: true } }
+        # Default scopes assigned when a dynamically registered or first-contact CIMD client omits `scope`. Contains built-in keys and custom catalog keys. Null means Clerk-provided defaults. `advertised` does not affect eligibility. An empty input array is stored and returned as null.
+        #
+        field :default_scopes, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('default_scopes'), required: true } }
 
         
-        def initialize(object:, dynamic_oauth_client_registration:, oauth_jwt_access_tokens:)
+        def initialize(object:, dynamic_oauth_client_registration:, oauth_jwt_access_tokens:, aud_claim_enabled:, pkce_required:, client_id_metadata_documents_advertised:, client_id_metadata_documents_only_allow_pre_registered_clients:, client_id_metadata_documents_block_implicitly_allowed_clients:, default_scopes: nil)
           @object = object
           @dynamic_oauth_client_registration = dynamic_oauth_client_registration
           @oauth_jwt_access_tokens = oauth_jwt_access_tokens
+          @aud_claim_enabled = aud_claim_enabled
+          @pkce_required = pkce_required
+          @client_id_metadata_documents_advertised = client_id_metadata_documents_advertised
+          @client_id_metadata_documents_only_allow_pre_registered_clients = client_id_metadata_documents_only_allow_pre_registered_clients
+          @client_id_metadata_documents_block_implicitly_allowed_clients = client_id_metadata_documents_block_implicitly_allowed_clients
+          @default_scopes = default_scopes
         end
 
         
@@ -32,6 +51,12 @@ module Clerk
           return false unless @object == other.object
           return false unless @dynamic_oauth_client_registration == other.dynamic_oauth_client_registration
           return false unless @oauth_jwt_access_tokens == other.oauth_jwt_access_tokens
+          return false unless @aud_claim_enabled == other.aud_claim_enabled
+          return false unless @pkce_required == other.pkce_required
+          return false unless @client_id_metadata_documents_advertised == other.client_id_metadata_documents_advertised
+          return false unless @client_id_metadata_documents_only_allow_pre_registered_clients == other.client_id_metadata_documents_only_allow_pre_registered_clients
+          return false unless @client_id_metadata_documents_block_implicitly_allowed_clients == other.client_id_metadata_documents_block_implicitly_allowed_clients
+          return false unless @default_scopes == other.default_scopes
           true
         end
       end

data/lib/clerk/models/components/oauthapplicationsettings.rbi

@@ -14,4 +14,16 @@ class Clerk::Models::Components::OAuthApplicationSettings
   def dynamic_oauth_client_registration=(str_); end
   def oauth_jwt_access_tokens(); end
   def oauth_jwt_access_tokens=(str_); end
+  def aud_claim_enabled(); end
+  def aud_claim_enabled=(str_); end
+  def pkce_required(); end
+  def pkce_required=(str_); end
+  def client_id_metadata_documents_advertised(); end
+  def client_id_metadata_documents_advertised=(str_); end
+  def client_id_metadata_documents_only_allow_pre_registered_clients(); end
+  def client_id_metadata_documents_only_allow_pre_registered_clients=(str_); end
+  def client_id_metadata_documents_block_implicitly_allowed_clients(); end
+  def client_id_metadata_documents_block_implicitly_allowed_clients=(str_); end
+  def default_scopes(); end
+  def default_scopes=(str_); end
 end

data/lib/clerk/models/components/oauthapplicationwithsecret.rb

@@ -29,8 +29,11 @@ module Clerk
 
         field :pkce_required, Crystalline::Boolean.new, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('pkce_required'), required: true } }
 
-        field :public, Crystalline::Boolean.new, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('public'), required: true } }
+        field :device_authorization_grant_enabled, Crystalline::Boolean.new, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('device_authorization_grant_enabled'), required: true } }
 
+        field :public, Crystalline::Boolean.new, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('public'), required: true } }
+        # The complete scope ceiling for the OAuth application, as a space-delimited list of built-in and assigned custom scope keys.
+        #
         field :scopes, ::String, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('scopes'), required: true } }
 
         field :redirect_uris, Crystalline::Array.new(::String), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('redirect_uris'), required: true } }
@@ -64,7 +67,7 @@ module Clerk
         field :client_secret, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('client_secret') } }
 
         
-        def initialize(object:, id:, instance_id:, name:, client_id:, dynamically_registered:, consent_screen_enabled:, pkce_required:, public:, scopes:, redirect_uris:, callback_url:, authorize_url:, token_fetch_url:, user_info_url:, discovery_url:, token_introspection_url:, created_at:, updated_at:, client_uri: nil, client_image_url: nil, client_secret: nil)
+        def initialize(object:, id:, instance_id:, name:, client_id:, dynamically_registered:, consent_screen_enabled:, pkce_required:, device_authorization_grant_enabled:, public:, scopes:, redirect_uris:, callback_url:, authorize_url:, token_fetch_url:, user_info_url:, discovery_url:, token_introspection_url:, created_at:, updated_at:, client_uri: nil, client_image_url: nil, client_secret: nil)
           @object = object
           @id = id
           @instance_id = instance_id
@@ -73,6 +76,7 @@ module Clerk
           @dynamically_registered = dynamically_registered
           @consent_screen_enabled = consent_screen_enabled
           @pkce_required = pkce_required
+          @device_authorization_grant_enabled = device_authorization_grant_enabled
           @public = public
           @scopes = scopes
           @redirect_uris = redirect_uris
@@ -100,6 +104,7 @@ module Clerk
           return false unless @dynamically_registered == other.dynamically_registered
           return false unless @consent_screen_enabled == other.consent_screen_enabled
           return false unless @pkce_required == other.pkce_required
+          return false unless @device_authorization_grant_enabled == other.device_authorization_grant_enabled
           return false unless @public == other.public
           return false unless @scopes == other.scopes
           return false unless @redirect_uris == other.redirect_uris

data/lib/clerk/models/components/oauthapplicationwithsecret.rbi

@@ -24,6 +24,8 @@ class Clerk::Models::Components::OAuthApplicationWithSecret
   def consent_screen_enabled=(str_); end
   def pkce_required(); end
   def pkce_required=(str_); end
+  def device_authorization_grant_enabled(); end
+  def device_authorization_grant_enabled=(str_); end
   def public(); end
   def public=(str_); end
   def scopes(); end

data/lib/clerk/models/components/organization.rb

@@ -49,12 +49,15 @@ module Clerk
         # Unix timestamp of last activity.
         #
         field :last_active_at, Crystalline::Nilable.new(::Integer), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('last_active_at') } }
+        # Whether this organization can configure self-serve enterprise SSO.
+        #
+        field :self_serve_sso_enabled, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('self_serve_sso_enabled') } }
         # The key of the [role set](https://clerk.com/docs/guides/organizations/control-access/role-sets) assigned to this organization.
         #
         field :role_set_key, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('role_set_key') } }
 
         
-        def initialize(object:, id:, name:, slug:, has_image:, max_allowed_memberships:, admin_delete_enabled:, public_metadata:, created_at:, updated_at:, image_url: nil, members_count: nil, missing_member_with_elevated_permissions: nil, pending_invitations_count: nil, private_metadata: nil, created_by: nil, last_active_at: nil, role_set_key: nil)
+        def initialize(object:, id:, name:, slug:, has_image:, max_allowed_memberships:, admin_delete_enabled:, public_metadata:, created_at:, updated_at:, image_url: nil, members_count: nil, missing_member_with_elevated_permissions: nil, pending_invitations_count: nil, private_metadata: nil, created_by: nil, last_active_at: nil, self_serve_sso_enabled: nil, role_set_key: nil)
           @object = object
           @id = id
           @name = name
@@ -72,6 +75,7 @@ module Clerk
           @private_metadata = private_metadata
           @created_by = created_by
           @last_active_at = last_active_at
+          @self_serve_sso_enabled = self_serve_sso_enabled
           @role_set_key = role_set_key
         end
 
@@ -95,6 +99,7 @@ module Clerk
           return false unless @private_metadata == other.private_metadata
           return false unless @created_by == other.created_by
           return false unless @last_active_at == other.last_active_at
+          return false unless @self_serve_sso_enabled == other.self_serve_sso_enabled
           return false unless @role_set_key == other.role_set_key
           true
         end

data/lib/clerk/models/components/organization.rbi

@@ -42,6 +42,8 @@ class Clerk::Models::Components::Organization
   def created_by=(str_); end
   def last_active_at(); end
   def last_active_at=(str_); end
+  def self_serve_sso_enabled(); end
+  def self_serve_sso_enabled=(str_); end
   def role_set_key(); end
   def role_set_key=(str_); end
 end

data/lib/clerk/models/components/organizationmembership_organization.rb

@@ -49,12 +49,15 @@ module Clerk
         # Unix timestamp of last activity.
         #
         field :last_active_at, Crystalline::Nilable.new(::Integer), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('last_active_at') } }
+        # Whether this organization can configure self-serve enterprise SSO.
+        #
+        field :self_serve_sso_enabled, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('self_serve_sso_enabled') } }
         # The key of the [role set](https://clerk.com/docs/guides/organizations/control-access/role-sets) assigned to this organization.
         #
         field :role_set_key, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('role_set_key') } }
 
         
-        def initialize(object:, id:, name:, slug:, has_image:, max_allowed_memberships:, admin_delete_enabled:, public_metadata:, created_at:, updated_at:, image_url: nil, members_count: nil, missing_member_with_elevated_permissions: nil, pending_invitations_count: nil, private_metadata: nil, created_by: nil, last_active_at: nil, role_set_key: nil)
+        def initialize(object:, id:, name:, slug:, has_image:, max_allowed_memberships:, admin_delete_enabled:, public_metadata:, created_at:, updated_at:, image_url: nil, members_count: nil, missing_member_with_elevated_permissions: nil, pending_invitations_count: nil, private_metadata: nil, created_by: nil, last_active_at: nil, self_serve_sso_enabled: nil, role_set_key: nil)
           @object = object
           @id = id
           @name = name
@@ -72,6 +75,7 @@ module Clerk
           @private_metadata = private_metadata
           @created_by = created_by
           @last_active_at = last_active_at
+          @self_serve_sso_enabled = self_serve_sso_enabled
           @role_set_key = role_set_key
         end
 
@@ -95,6 +99,7 @@ module Clerk
           return false unless @private_metadata == other.private_metadata
           return false unless @created_by == other.created_by
           return false unless @last_active_at == other.last_active_at
+          return false unless @self_serve_sso_enabled == other.self_serve_sso_enabled
           return false unless @role_set_key == other.role_set_key
           true
         end

data/lib/clerk/models/components/organizationmembership_organization.rbi

@@ -42,6 +42,8 @@ class Clerk::Models::Components::OrganizationMembershipOrganization
   def created_by=(str_); end
   def last_active_at(); end
   def last_active_at=(str_); end
+  def self_serve_sso_enabled(); end
+  def self_serve_sso_enabled=(str_); end
   def role_set_key(); end
   def role_set_key=(str_); end
 end

data/lib/clerk/models/components/organizationmembershippublicuserdata.rb

@@ -27,12 +27,14 @@ module Clerk
 
         field :banned, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('banned') } }
 
+        field :deprovisioned, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('deprovisioned') } }
+
         field :identifier, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('identifier') } }
 
         field :username, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('username') } }
 
         
-        def initialize(user_id:, image_url:, has_image:, first_name: nil, last_name: nil, profile_image_url: nil, banned: nil, identifier: nil, username: nil)
+        def initialize(user_id:, image_url:, has_image:, first_name: nil, last_name: nil, profile_image_url: nil, banned: nil, deprovisioned: nil, identifier: nil, username: nil)
           @user_id = user_id
           @image_url = image_url
           @has_image = has_image
@@ -40,6 +42,7 @@ module Clerk
           @last_name = last_name
           @profile_image_url = profile_image_url
           @banned = banned
+          @deprovisioned = deprovisioned
           @identifier = identifier
           @username = username
         end
@@ -54,6 +57,7 @@ module Clerk
           return false unless @last_name == other.last_name
           return false unless @profile_image_url == other.profile_image_url
           return false unless @banned == other.banned
+          return false unless @deprovisioned == other.deprovisioned
           return false unless @identifier == other.identifier
           return false unless @username == other.username
           true

data/lib/clerk/models/components/organizationmembershippublicuserdata.rbi

@@ -22,6 +22,8 @@ class Clerk::Models::Components::OrganizationMembershipPublicUserData
   def profile_image_url=(str_); end
   def banned(); end
   def banned=(str_); end
+  def deprovisioned(); end
+  def deprovisioned=(str_); end
   def identifier(); end
   def identifier=(str_); end
   def username(); end

data/lib/clerk/models/components/organizationwithlogo.rb

@@ -51,12 +51,15 @@ module Clerk
         field :last_active_at, Crystalline::Nilable.new(::Integer), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('last_active_at') } }
         # @deprecated true: This will be removed in a future release, please migrate away from it as soon as possible.
         field :logo_url, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('logo_url') } }
+        # Whether this organization can configure self-serve enterprise SSO.
+        #
+        field :self_serve_sso_enabled, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('self_serve_sso_enabled') } }
         # The key of the [role set](https://clerk.com/docs/guides/organizations/control-access/role-sets) assigned to this organization.
         #
         field :role_set_key, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('role_set_key') } }
 
         
-        def initialize(object:, id:, name:, slug:, image_url:, has_image:, max_allowed_memberships:, admin_delete_enabled:, public_metadata:, created_at:, updated_at:, members_count: nil, missing_member_with_elevated_permissions: nil, pending_invitations_count: nil, private_metadata: nil, created_by: nil, last_active_at: nil, logo_url: nil, role_set_key: nil)
+        def initialize(object:, id:, name:, slug:, image_url:, has_image:, max_allowed_memberships:, admin_delete_enabled:, public_metadata:, created_at:, updated_at:, members_count: nil, missing_member_with_elevated_permissions: nil, pending_invitations_count: nil, private_metadata: nil, created_by: nil, last_active_at: nil, logo_url: nil, self_serve_sso_enabled: nil, role_set_key: nil)
           @object = object
           @id = id
           @name = name
@@ -75,6 +78,7 @@ module Clerk
           @created_by = created_by
           @last_active_at = last_active_at
           @logo_url = logo_url
+          @self_serve_sso_enabled = self_serve_sso_enabled
           @role_set_key = role_set_key
         end
 
@@ -99,6 +103,7 @@ module Clerk
           return false unless @created_by == other.created_by
           return false unless @last_active_at == other.last_active_at
           return false unless @logo_url == other.logo_url
+          return false unless @self_serve_sso_enabled == other.self_serve_sso_enabled
           return false unless @role_set_key == other.role_set_key
           true
         end

data/lib/clerk/models/components/organizationwithlogo.rbi

@@ -44,6 +44,8 @@ class Clerk::Models::Components::OrganizationWithLogo
   def last_active_at=(str_); end
   def logo_url(); end
   def logo_url=(str_); end
+  def self_serve_sso_enabled(); end
+  def self_serve_sso_enabled=(str_); end
   def role_set_key(); end
   def role_set_key=(str_); end
 end

data/lib/clerk/models/components/payer_commercepayer.rb

@@ -13,7 +13,7 @@ module Clerk
         include Crystalline::MetadataFields
 
         # String representing the object's type. Objects of the same type share the same value.
-        field :object, Models::Components::SchemasCommerceSubscriptionItemObjectCommercePayer, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('object'), required: true, 'decoder': ::Clerk::Utils.enum_from_string(Models::Components::SchemasCommerceSubscriptionItemObjectCommercePayer, false) } }
+        field :object, Models::Components::CommerceSubscriptionItem2ObjectCommercePayer, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('object'), required: true, 'decoder': ::Clerk::Utils.enum_from_string(Models::Components::CommerceSubscriptionItem2ObjectCommercePayer, false) } }
         # Unique identifier for the payer.
         field :id, ::String, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('id'), required: true } }
         # Unique identifier for the Clerk instance.

data/lib/clerk/models/components/payment_type.rb

@@ -13,6 +13,7 @@ module Clerk
         enums do
           CARD = new('card')
           LINK = new('link')
+          PAYER_CREDITS = new('payer-credits')
         end
       end
     end

data/lib/clerk/models/components/record_type.rb

@@ -0,0 +1,20 @@
+# Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+
+# typed: false
+# frozen_string_literal: true
+
+
+module Clerk
+  module Models
+    module Components
+
+      class RecordType
+        include ::Crystalline::Enum
+        enums do
+          CNAME = new('CNAME')
+          TXT = new('TXT')
+        end
+      end
+    end
+  end
+end

data/lib/clerk/models/components/record_type.rbi

@@ -0,0 +1,11 @@
+# typed: false
+# frozen_string_literal: true
+
+
+class Clerk::Models::Components::RecordType
+  extend ::Crystalline::MetadataFields::ClassMethods
+end
+
+
+class Clerk::Models::Components::RecordType
+end