clerk-sdk-ruby 7.0.0 → 8.0.1

data/lib/clerk/models/operations/updateenterpriseconnection_custom_attribute.rbi

@@ -16,6 +16,8 @@ class Clerk::Models::Operations::UpdateEnterpriseConnectionCustomAttribute
   def sso_path=(str_); end
   def scim_path(); end
   def scim_path=(str_); end
+  def directory_path(); end
+  def directory_path=(str_); end
   def multi_valued(); end
   def multi_valued=(str_); end
 end

data/lib/clerk/models/operations/updateenterpriseconnection_login_hint.rb

@@ -0,0 +1,36 @@
+# Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+
+# typed: false
+# frozen_string_literal: true
+
+
+module Clerk
+  module Models
+    module Operations
+      # Configuration for the login_hint sent to the IdP on SSO sign-in
+      class UpdateEnterpriseConnectionLoginHint
+        
+        include Crystalline::MetadataFields
+
+        # Controls the login_hint sent to the IdP on SSO sign-in
+        field :mode, Models::Operations::UpdateEnterpriseConnectionMode, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('mode'), required: true, 'decoder': ::Clerk::Utils.enum_from_string(Models::Operations::UpdateEnterpriseConnectionMode, false) } }
+        # The user public_metadata key whose value is sent as the login_hint when mode is custom_attribute
+        field :source, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('source') } }
+
+        
+        def initialize(mode:, source: nil)
+          @mode = mode
+          @source = source
+        end
+
+        
+        def ==(other)
+          return false unless other.is_a? self.class
+          return false unless @mode == other.mode
+          return false unless @source == other.source
+          true
+        end
+      end
+    end
+  end
+end

data/lib/clerk/models/operations/updateenterpriseconnection_login_hint.rbi

@@ -0,0 +1,15 @@
+# typed: false
+# frozen_string_literal: true
+
+
+class Clerk::Models::Operations::UpdateEnterpriseConnectionLoginHint
+  extend ::Crystalline::MetadataFields::ClassMethods
+end
+
+
+class Clerk::Models::Operations::UpdateEnterpriseConnectionLoginHint
+  def mode(); end
+  def mode=(str_); end
+  def source(); end
+  def source=(str_); end
+end

data/lib/clerk/models/operations/updateenterpriseconnection_mode.rb

@@ -0,0 +1,21 @@
+# Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+
+# typed: false
+# frozen_string_literal: true
+
+
+module Clerk
+  module Models
+    module Operations
+      # UpdateEnterpriseConnectionMode - Controls the login_hint sent to the IdP on SSO sign-in
+      class UpdateEnterpriseConnectionMode
+        include ::Crystalline::Enum
+        enums do
+          EMAIL_ADDRESS = new('email_address')
+          CUSTOM_ATTRIBUTE = new('custom_attribute')
+          OFF = new('off')
+        end
+      end
+    end
+  end
+end

data/lib/clerk/models/operations/updateenterpriseconnection_mode.rbi

@@ -0,0 +1,11 @@
+# typed: false
+# frozen_string_literal: true
+
+
+class Clerk::Models::Operations::UpdateEnterpriseConnectionMode
+  extend ::Crystalline::MetadataFields::ClassMethods
+end
+
+
+class Clerk::Models::Operations::UpdateEnterpriseConnectionMode
+end

data/lib/clerk/models/operations/updateenterpriseconnection_saml.rb

@@ -33,9 +33,11 @@ module Clerk
         field :allow_idp_initiated, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('allow_idp_initiated') } }
 
         field :force_authn, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('force_authn') } }
+        # Configuration for the login_hint sent to the IdP on SSO sign-in
+        field :login_hint, Crystalline::Nilable.new(Models::Operations::UpdateEnterpriseConnectionLoginHint), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('login_hint') } }
 
         
-        def initialize(name: nil, idp_entity_id: nil, idp_sso_url: nil, idp_certificate: nil, idp_metadata_url: nil, idp_metadata: nil, attribute_mapping: nil, allow_subdomains: nil, allow_idp_initiated: nil, force_authn: nil)
+        def initialize(name: nil, idp_entity_id: nil, idp_sso_url: nil, idp_certificate: nil, idp_metadata_url: nil, idp_metadata: nil, attribute_mapping: nil, allow_subdomains: nil, allow_idp_initiated: nil, force_authn: nil, login_hint: nil)
           @name = name
           @idp_entity_id = idp_entity_id
           @idp_sso_url = idp_sso_url
@@ -46,6 +48,7 @@ module Clerk
           @allow_subdomains = allow_subdomains
           @allow_idp_initiated = allow_idp_initiated
           @force_authn = force_authn
+          @login_hint = login_hint
         end
 
         
@@ -61,6 +64,7 @@ module Clerk
           return false unless @allow_subdomains == other.allow_subdomains
           return false unless @allow_idp_initiated == other.allow_idp_initiated
           return false unless @force_authn == other.force_authn
+          return false unless @login_hint == other.login_hint
           true
         end
       end

data/lib/clerk/models/operations/updateenterpriseconnection_saml.rbi

@@ -28,4 +28,6 @@ class Clerk::Models::Operations::UpdateEnterpriseConnectionSaml
   def allow_idp_initiated=(str_); end
   def force_authn(); end
   def force_authn=(str_); end
+  def login_hint(); end
+  def login_hint=(str_); end
 end

data/lib/clerk/models/operations/updateinstance_request.rb

@@ -12,8 +12,6 @@ module Clerk
         
         include Crystalline::MetadataFields
 
-        # For browser-like stacks such as browser extensions, Electron (not officially supported), or Capacitor.js (not officially supported), the instance allowed origins need to be updated with the request origin value. For Chrome extensions popup, background, or service worker pages, the origin is chrome-extension://extension_uuid. For Electron apps the default origin is http://localhost:3000. For Capacitor, the origin is capacitor://localhost.
-        field :allowed_origins, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('allowed_origins') } }
         # Toggles test mode for this instance, allowing the use of test email addresses and phone numbers.
         # Defaults to true for development instances.
         field :test_mode, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('test_mode') } }
@@ -25,6 +23,14 @@ module Clerk
         field :clerk_js_version, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('clerk_js_version') } }
 
         field :development_origin, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('development_origin') } }
+        # For browser-like stacks such as browser extensions, Electron (not officially supported), or Capacitor.js (not officially supported), the instance allowed origins need to be updated with the request origin value. For Chrome extensions popup, background, or service worker pages, the origin is chrome-extension://extension_uuid. For Electron apps the default origin is http://localhost:3000. For Capacitor, the origin is capacitor://localhost.
+        # Send an empty array to remove all allowed origins. A null value leaves the current list unchanged.
+        field :allowed_origins, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('allowed_origins') } }
+        # Subdomains of the instance's own domains that may originate requests while `subdomain_allowlist_enabled` is true. Each entry is either an exact host (`app.example.com`) or a wildcard anchored on a host beneath one of the instance's domains (`*.preview.example.com`), which covers every host under that anchor but not the anchor itself.
+        # Entries are stored folded to lower case with any trailing dot removed, the form the origin check compares against, so entries differing only in those respects are one entry. Entries already stored are not validated again, so a list read back from the instance can always be written again unchanged. Send an empty array to remove all entries. A null value leaves the current list unchanged. Production instances only.
+        field :allowed_subdomains, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('allowed_subdomains') } }
+        # Whether requests from subdomains of the instance's own domains are restricted to `allowed_subdomains`. When false, every subdomain of the instance's domain is accepted. Production instances only.
+        field :subdomain_allowlist_enabled, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('subdomain_allowlist_enabled') } }
         # Whether the instance should operate in cookieless development mode (i.e. without third-party cookies).
         # Deprecated: Please use `url_based_session_syncing` instead.
         #
@@ -36,13 +42,15 @@ module Clerk
         field :preferred_sign_in_strategy_when_password_required, Crystalline::Nilable.new(Models::Operations::PreferredSignInStrategyWhenPasswordRequired), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('preferred_sign_in_strategy_when_password_required'), 'decoder': ::Clerk::Utils.enum_from_string(Models::Operations::PreferredSignInStrategyWhenPasswordRequired, true) } }
 
         
-        def initialize(allowed_origins: nil, test_mode: nil, hibp: nil, support_email: nil, clerk_js_version: nil, development_origin: nil, cookieless_dev: nil, url_based_session_syncing: nil, preferred_sign_in_strategy_when_password_required: nil)
-          @allowed_origins = allowed_origins
+        def initialize(test_mode: nil, hibp: nil, support_email: nil, clerk_js_version: nil, development_origin: nil, allowed_origins: nil, allowed_subdomains: nil, subdomain_allowlist_enabled: nil, cookieless_dev: nil, url_based_session_syncing: nil, preferred_sign_in_strategy_when_password_required: nil)
           @test_mode = test_mode
           @hibp = hibp
           @support_email = support_email
           @clerk_js_version = clerk_js_version
           @development_origin = development_origin
+          @allowed_origins = allowed_origins
+          @allowed_subdomains = allowed_subdomains
+          @subdomain_allowlist_enabled = subdomain_allowlist_enabled
           @cookieless_dev = cookieless_dev
           @url_based_session_syncing = url_based_session_syncing
           @preferred_sign_in_strategy_when_password_required = preferred_sign_in_strategy_when_password_required
@@ -51,12 +59,14 @@ module Clerk
         
         def ==(other)
           return false unless other.is_a? self.class
-          return false unless @allowed_origins == other.allowed_origins
           return false unless @test_mode == other.test_mode
           return false unless @hibp == other.hibp
           return false unless @support_email == other.support_email
           return false unless @clerk_js_version == other.clerk_js_version
           return false unless @development_origin == other.development_origin
+          return false unless @allowed_origins == other.allowed_origins
+          return false unless @allowed_subdomains == other.allowed_subdomains
+          return false unless @subdomain_allowlist_enabled == other.subdomain_allowlist_enabled
           return false unless @cookieless_dev == other.cookieless_dev
           return false unless @url_based_session_syncing == other.url_based_session_syncing
           return false unless @preferred_sign_in_strategy_when_password_required == other.preferred_sign_in_strategy_when_password_required

data/lib/clerk/models/operations/updateinstance_request.rbi

@@ -8,8 +8,6 @@ end
 
 
 class Clerk::Models::Operations::UpdateInstanceRequest
-  def allowed_origins(); end
-  def allowed_origins=(str_); end
   def test_mode(); end
   def test_mode=(str_); end
   def hibp(); end
@@ -20,6 +18,12 @@ class Clerk::Models::Operations::UpdateInstanceRequest
   def clerk_js_version=(str_); end
   def development_origin(); end
   def development_origin=(str_); end
+  def allowed_origins(); end
+  def allowed_origins=(str_); end
+  def allowed_subdomains(); end
+  def allowed_subdomains=(str_); end
+  def subdomain_allowlist_enabled(); end
+  def subdomain_allowlist_enabled=(str_); end
   def cookieless_dev(); end
   def cookieless_dev=(str_); end
   def url_based_session_syncing(); end

data/lib/clerk/models/operations/updateinstanceoauthapplicationsettings_request.rb

@@ -14,20 +14,45 @@ module Clerk
 
         # Whether dynamic OAuth client registration is enabled for the instance (RFC 7591).
         field :dynamic_oauth_client_registration, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('dynamic_oauth_client_registration') } }
+        # Default scopes assigned when a dynamically registered or first-contact CIMD client omits `scope`. Accepts built-in keys and current custom catalog keys. `advertised` does not affect eligibility. Duplicate keys, unknown keys, and `offline_access` are rejected. An empty array or null resets to Clerk-provided defaults.
+        #
+        field :default_scopes, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('default_scopes') } }
         # Whether OAuth JWT access tokens are enabled for the instance (disabled indicates opaque access tokens).
         field :oauth_jwt_access_tokens, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('oauth_jwt_access_tokens') } }
+        # Whether OAuth access tokens can include an aud claim derived from the RFC 8707 resource parameter.
+        field :aud_claim_enabled, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('aud_claim_enabled') } }
+        # Whether all new OAuth authorization-code requests must use PKCE with the S256 challenge method.
+        field :pkce_required, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('pkce_required') } }
+        # Whether the instance advertises support for Client ID Metadata Documents in its OAuth authorization server metadata.
+        field :client_id_metadata_documents_advertised, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('client_id_metadata_documents_advertised') } }
+        # When true, new unknown CIMD clients are rejected. Previously auto-connected and pre-registered clients remain admitted; deleting a client makes it unknown again.
+        field :client_id_metadata_documents_only_allow_pre_registered_clients, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('client_id_metadata_documents_only_allow_pre_registered_clients') } }
+        # When true, recorded implicitly allowed CIMD clients are rejected on future client lookups. Explicitly allowed clients remain accepted. This does not revoke previously issued access tokens.
+        field :client_id_metadata_documents_block_implicitly_allowed_clients, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('client_id_metadata_documents_block_implicitly_allowed_clients') } }
 
         
-        def initialize(dynamic_oauth_client_registration: nil, oauth_jwt_access_tokens: nil)
+        def initialize(dynamic_oauth_client_registration: nil, default_scopes: nil, oauth_jwt_access_tokens: nil, aud_claim_enabled: nil, pkce_required: nil, client_id_metadata_documents_advertised: nil, client_id_metadata_documents_only_allow_pre_registered_clients: nil, client_id_metadata_documents_block_implicitly_allowed_clients: nil)
           @dynamic_oauth_client_registration = dynamic_oauth_client_registration
+          @default_scopes = default_scopes
           @oauth_jwt_access_tokens = oauth_jwt_access_tokens
+          @aud_claim_enabled = aud_claim_enabled
+          @pkce_required = pkce_required
+          @client_id_metadata_documents_advertised = client_id_metadata_documents_advertised
+          @client_id_metadata_documents_only_allow_pre_registered_clients = client_id_metadata_documents_only_allow_pre_registered_clients
+          @client_id_metadata_documents_block_implicitly_allowed_clients = client_id_metadata_documents_block_implicitly_allowed_clients
         end
 
         
         def ==(other)
           return false unless other.is_a? self.class
           return false unless @dynamic_oauth_client_registration == other.dynamic_oauth_client_registration
+          return false unless @default_scopes == other.default_scopes
           return false unless @oauth_jwt_access_tokens == other.oauth_jwt_access_tokens
+          return false unless @aud_claim_enabled == other.aud_claim_enabled
+          return false unless @pkce_required == other.pkce_required
+          return false unless @client_id_metadata_documents_advertised == other.client_id_metadata_documents_advertised
+          return false unless @client_id_metadata_documents_only_allow_pre_registered_clients == other.client_id_metadata_documents_only_allow_pre_registered_clients
+          return false unless @client_id_metadata_documents_block_implicitly_allowed_clients == other.client_id_metadata_documents_block_implicitly_allowed_clients
           true
         end
       end

data/lib/clerk/models/operations/updateinstanceoauthapplicationsettings_request.rbi

@@ -10,6 +10,18 @@ end
 class Clerk::Models::Operations::UpdateInstanceOAuthApplicationSettingsRequest
   def dynamic_oauth_client_registration(); end
   def dynamic_oauth_client_registration=(str_); end
+  def default_scopes(); end
+  def default_scopes=(str_); end
   def oauth_jwt_access_tokens(); end
   def oauth_jwt_access_tokens=(str_); end
+  def aud_claim_enabled(); end
+  def aud_claim_enabled=(str_); end
+  def pkce_required(); end
+  def pkce_required=(str_); end
+  def client_id_metadata_documents_advertised(); end
+  def client_id_metadata_documents_advertised=(str_); end
+  def client_id_metadata_documents_only_allow_pre_registered_clients(); end
+  def client_id_metadata_documents_only_allow_pre_registered_clients=(str_); end
+  def client_id_metadata_documents_block_implicitly_allowed_clients(); end
+  def client_id_metadata_documents_block_implicitly_allowed_clients=(str_); end
 end

data/lib/clerk/models/operations/updateinstanceprotect_request.rb

@@ -12,7 +12,7 @@ module Clerk
         
         include Crystalline::MetadataFields
 
-
+        # Set true to enforce Protect rules on this instance. Set false to stop enforcing and return the instance to its default posture, where traffic is still evaluated in shadow but nothing is blocked. This does not remove the instance from Protect.
         field :rules_enabled, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('rules_enabled') } }
 
         field :specter_enabled, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('specter_enabled') } }

data/lib/clerk/models/operations/updateoauthapplication_requestbody.rb

@@ -21,24 +21,27 @@ module Clerk
         #
         # @deprecated true: This will be removed in a future release, please migrate away from it as soon as possible.
         field :callback_url, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('callback_url') } }
+        # Replace the application's complete built-in and custom scope ceiling. Provide scope keys as a space-delimited string. Custom keys must exist in the instance OAuth scope catalog. Required built-in scopes, such as `offline_access`, must be included in the replacement set, otherwise the request is rejected. Omit this field to leave all scope assignments unchanged.
+        field :scopes, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('scopes') } }
         # True to enable a consent screen to display in the authentication flow. This cannot be disabled for dynamically registered OAuth Applications.
         field :consent_screen_enabled, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('consent_screen_enabled') } }
         # True to require the Proof Key of Code Exchange (PKCE) flow.
         field :pkce_required, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('pkce_required') } }
+        # True to enable the OAuth Device Authorization Grant for this application. Enabling requires the new OAuth IdP and a reachable device verification page. Omit this field to leave the setting unchanged.
+        field :device_authorization_grant_enabled, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('device_authorization_grant_enabled') } }
         # If true, this client is public and you can use the Proof Key of Code Exchange (PKCE) flow.
         field :public, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('public') } }
-        # Define the allowed scopes for the new OAuth applications that dictate the user payload of the OAuth user info endpoint. Available scopes are `profile`, `email`, `public_metadata`, `private_metadata`. Provide the requested scopes as a string, separated by spaces.
-        field :scopes, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('scopes') } }
 
         
-        def initialize(name: nil, redirect_uris: nil, callback_url: nil, consent_screen_enabled: nil, pkce_required: nil, public: nil, scopes: 'profile email')
+        def initialize(name: nil, redirect_uris: nil, callback_url: nil, scopes: nil, consent_screen_enabled: nil, pkce_required: nil, device_authorization_grant_enabled: nil, public: nil)
           @name = name
           @redirect_uris = redirect_uris
           @callback_url = callback_url
+          @scopes = scopes
           @consent_screen_enabled = consent_screen_enabled
           @pkce_required = pkce_required
+          @device_authorization_grant_enabled = device_authorization_grant_enabled
           @public = public
-          @scopes = scopes
         end
 
         
@@ -47,10 +50,11 @@ module Clerk
           return false unless @name == other.name
           return false unless @redirect_uris == other.redirect_uris
           return false unless @callback_url == other.callback_url
+          return false unless @scopes == other.scopes
           return false unless @consent_screen_enabled == other.consent_screen_enabled
           return false unless @pkce_required == other.pkce_required
+          return false unless @device_authorization_grant_enabled == other.device_authorization_grant_enabled
           return false unless @public == other.public
-          return false unless @scopes == other.scopes
           true
         end
       end

data/lib/clerk/models/operations/updateoauthapplication_requestbody.rbi

@@ -14,12 +14,14 @@ class Clerk::Models::Operations::UpdateOAuthApplicationRequestBody
   def redirect_uris=(str_); end
   def callback_url(); end
   def callback_url=(str_); end
+  def scopes(); end
+  def scopes=(str_); end
   def consent_screen_enabled(); end
   def consent_screen_enabled=(str_); end
   def pkce_required(); end
   def pkce_required=(str_); end
+  def device_authorization_grant_enabled(); end
+  def device_authorization_grant_enabled=(str_); end
   def public(); end
   def public=(str_); end
-  def scopes(); end
-  def scopes=(str_); end
 end

data/lib/clerk/models/operations/updateorganization_requestbody.rb

@@ -22,17 +22,21 @@ module Clerk
         field :max_allowed_memberships, Crystalline::Nilable.new(::Integer), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('max_allowed_memberships') } }
         # If true, an admin can delete this organization with the Frontend API.
         field :admin_delete_enabled, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('admin_delete_enabled') } }
+        # Whether this organization can configure self-serve enterprise SSO.
+        # Requires the instance to have the self-serve SSO entitlement enabled.
+        field :self_serve_sso_enabled, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('self_serve_sso_enabled') } }
         # A custom date/time denoting _when_ the organization was created, specified in RFC3339 format (e.g. `2012-10-20T07:15:20.902Z`).
         field :created_at, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('created_at') } }
         # The key of the [role set](https://clerk.com/docs/guides/organizations/control-access/role-sets) to assign to this organization.
         field :role_set_key, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('role_set_key') } }
 
         
-        def initialize(name: nil, slug: nil, max_allowed_memberships: nil, admin_delete_enabled: nil, created_at: nil, role_set_key: nil)
+        def initialize(name: nil, slug: nil, max_allowed_memberships: nil, admin_delete_enabled: nil, self_serve_sso_enabled: nil, created_at: nil, role_set_key: nil)
           @name = name
           @slug = slug
           @max_allowed_memberships = max_allowed_memberships
           @admin_delete_enabled = admin_delete_enabled
+          @self_serve_sso_enabled = self_serve_sso_enabled
           @created_at = created_at
           @role_set_key = role_set_key
         end
@@ -44,6 +48,7 @@ module Clerk
           return false unless @slug == other.slug
           return false unless @max_allowed_memberships == other.max_allowed_memberships
           return false unless @admin_delete_enabled == other.admin_delete_enabled
+          return false unless @self_serve_sso_enabled == other.self_serve_sso_enabled
           return false unless @created_at == other.created_at
           return false unless @role_set_key == other.role_set_key
           true

data/lib/clerk/models/operations/updateorganization_requestbody.rbi

@@ -16,6 +16,8 @@ class Clerk::Models::Operations::UpdateOrganizationRequestBody
   def max_allowed_memberships=(str_); end
   def admin_delete_enabled(); end
   def admin_delete_enabled=(str_); end
+  def self_serve_sso_enabled(); end
+  def self_serve_sso_enabled=(str_); end
   def created_at(); end
   def created_at=(str_); end
   def role_set_key(); end

data/lib/clerk/models/operations/updateorganizationdomain_requestbody.rb

@@ -12,7 +12,7 @@ module Clerk
         
         include Crystalline::MetadataFields
 
-        # The enrollment_mode for the new domain. This can be `automatic_invitation`, `automatic_suggestion` or `manual_invitation`
+        # The enrollment_mode for the new domain. This can be `automatic_invitation`, `automatic_suggestion`, `manual_invitation` or `enterprise_sso`
         field :enrollment_mode, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('enrollment_mode') } }
         # The status of the domain's verification
         field :verified, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('verified') } }

data/lib/clerk/models/operations/updatesamlconnection_login_hint.rb

@@ -0,0 +1,36 @@
+# Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+
+# typed: false
+# frozen_string_literal: true
+
+
+module Clerk
+  module Models
+    module Operations
+      # Configuration for the login_hint sent to the IdP on SSO sign-in
+      class UpdateSAMLConnectionLoginHint
+        
+        include Crystalline::MetadataFields
+
+        # Controls the login_hint sent to the IdP on SSO sign-in
+        field :mode, Models::Operations::UpdateSAMLConnectionMode, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('mode'), required: true, 'decoder': ::Clerk::Utils.enum_from_string(Models::Operations::UpdateSAMLConnectionMode, false) } }
+        # The user public_metadata key whose value is sent as the login_hint when mode is custom_attribute
+        field :source, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('source') } }
+
+        
+        def initialize(mode:, source: nil)
+          @mode = mode
+          @source = source
+        end
+
+        
+        def ==(other)
+          return false unless other.is_a? self.class
+          return false unless @mode == other.mode
+          return false unless @source == other.source
+          true
+        end
+      end
+    end
+  end
+end

data/lib/clerk/models/operations/updatesamlconnection_login_hint.rbi

@@ -0,0 +1,15 @@
+# typed: false
+# frozen_string_literal: true
+
+
+class Clerk::Models::Operations::UpdateSAMLConnectionLoginHint
+  extend ::Crystalline::MetadataFields::ClassMethods
+end
+
+
+class Clerk::Models::Operations::UpdateSAMLConnectionLoginHint
+  def mode(); end
+  def mode=(str_); end
+  def source(); end
+  def source=(str_); end
+end

data/lib/clerk/models/operations/updatesamlconnection_mode.rb

@@ -0,0 +1,21 @@
+# Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+
+# typed: false
+# frozen_string_literal: true
+
+
+module Clerk
+  module Models
+    module Operations
+      # UpdateSAMLConnectionMode - Controls the login_hint sent to the IdP on SSO sign-in
+      class UpdateSAMLConnectionMode
+        include ::Crystalline::Enum
+        enums do
+          EMAIL_ADDRESS = new('email_address')
+          CUSTOM_ATTRIBUTE = new('custom_attribute')
+          OFF = new('off')
+        end
+      end
+    end
+  end
+end

data/lib/clerk/models/operations/updatesamlconnection_mode.rbi

@@ -0,0 +1,11 @@
+# typed: false
+# frozen_string_literal: true
+
+
+class Clerk::Models::Operations::UpdateSAMLConnectionMode
+  extend ::Crystalline::MetadataFields::ClassMethods
+end
+
+
+class Clerk::Models::Operations::UpdateSAMLConnectionMode
+end

data/lib/clerk/models/operations/updatesamlconnection_requestbody.rb

@@ -48,11 +48,13 @@ module Clerk
         field :disable_additional_identifications, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('disable_additional_identifications') } }
         # Whether this connection supports account linking via organization membership
         field :allow_organization_account_linking, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('allow_organization_account_linking') } }
+        # Configuration for the login_hint sent to the IdP on SSO sign-in
+        field :login_hint, Crystalline::Nilable.new(Models::Operations::UpdateSAMLConnectionLoginHint), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('login_hint') } }
         # When enabling the connection, controls behavior when verified domains used for enrollment modes like automatic invitation or automatic suggestion already exist for the same domain. If true, those verified domains are removed and the connection is enabled. If false or omitted, the request fails when any such verified domain exists.
         field :consent_verified_domains_deletion, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('consent_verified_domains_deletion') } }
 
         
-        def initialize(force_authn: nil, name: nil, domain: nil, domains: nil, idp_entity_id: nil, idp_sso_url: nil, idp_certificate: nil, idp_metadata_url: nil, idp_metadata: nil, organization_id: nil, attribute_mapping: nil, active: nil, sync_user_attributes: nil, allow_subdomains: nil, allow_idp_initiated: nil, disable_additional_identifications: nil, allow_organization_account_linking: nil, consent_verified_domains_deletion: nil)
+        def initialize(force_authn: nil, name: nil, domain: nil, domains: nil, idp_entity_id: nil, idp_sso_url: nil, idp_certificate: nil, idp_metadata_url: nil, idp_metadata: nil, organization_id: nil, attribute_mapping: nil, active: nil, sync_user_attributes: nil, allow_subdomains: nil, allow_idp_initiated: nil, disable_additional_identifications: nil, allow_organization_account_linking: nil, login_hint: nil, consent_verified_domains_deletion: nil)
           @force_authn = force_authn
           @name = name
           @domain = domain
@@ -70,6 +72,7 @@ module Clerk
           @allow_idp_initiated = allow_idp_initiated
           @disable_additional_identifications = disable_additional_identifications
           @allow_organization_account_linking = allow_organization_account_linking
+          @login_hint = login_hint
           @consent_verified_domains_deletion = consent_verified_domains_deletion
         end
 
@@ -93,6 +96,7 @@ module Clerk
           return false unless @allow_idp_initiated == other.allow_idp_initiated
           return false unless @disable_additional_identifications == other.disable_additional_identifications
           return false unless @allow_organization_account_linking == other.allow_organization_account_linking
+          return false unless @login_hint == other.login_hint
           return false unless @consent_verified_domains_deletion == other.consent_verified_domains_deletion
           true
         end

data/lib/clerk/models/operations/updatesamlconnection_requestbody.rbi

@@ -42,6 +42,8 @@ class Clerk::Models::Operations::UpdateSAMLConnectionRequestBody
   def disable_additional_identifications=(str_); end
   def allow_organization_account_linking(); end
   def allow_organization_account_linking=(str_); end
+  def login_hint(); end
+  def login_hint=(str_); end
   def consent_verified_domains_deletion(); end
   def consent_verified_domains_deletion=(str_); end
 end

data/lib/clerk/models/operations/updatescimdirectory_request.rb

@@ -0,0 +1,36 @@
+# Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+
+# typed: false
+# frozen_string_literal: true
+
+
+module Clerk
+  module Models
+    module Operations
+
+      class UpdateSCIMDirectoryRequest
+        
+        include Crystalline::MetadataFields
+
+        # The ID of the directory to update
+        field :scim_directory_id, ::String, { 'path_param': { 'field_name': 'scim_directory_id', 'style': 'simple', 'explode': false } }
+
+        field :body, Crystalline::Nilable.new(Models::Operations::UpdateSCIMDirectoryRequestBody), { 'request': { 'media_type': 'application/json' } }
+
+        
+        def initialize(scim_directory_id:, body: nil)
+          @scim_directory_id = scim_directory_id
+          @body = body
+        end
+
+        
+        def ==(other)
+          return false unless other.is_a? self.class
+          return false unless @scim_directory_id == other.scim_directory_id
+          return false unless @body == other.body
+          true
+        end
+      end
+    end
+  end
+end

data/lib/clerk/models/operations/updatescimdirectory_request.rbi

@@ -0,0 +1,15 @@
+# typed: false
+# frozen_string_literal: true
+
+
+class Clerk::Models::Operations::UpdateSCIMDirectoryRequest
+  extend ::Crystalline::MetadataFields::ClassMethods
+end
+
+
+class Clerk::Models::Operations::UpdateSCIMDirectoryRequest
+  def scim_directory_id(); end
+  def scim_directory_id=(str_); end
+  def body(); end
+  def body=(str_); end
+end