clerk-sdk-ruby 8.0.0 → 8.0.1

data/lib/clerk/models/operations/revokeuserbiometriccredential_request.rb

@@ -0,0 +1,36 @@
+# Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+
+# typed: false
+# frozen_string_literal: true
+
+
+module Clerk
+  module Models
+    module Operations
+
+      class RevokeUserBiometricCredentialRequest
+        
+        include Crystalline::MetadataFields
+
+        # The ID of the user that owns the biometric credential
+        field :user_id, ::String, { 'path_param': { 'field_name': 'user_id', 'style': 'simple', 'explode': false } }
+        # The ID of the biometric credential to revoke
+        field :biometric_credential_id, ::String, { 'path_param': { 'field_name': 'biometric_credential_id', 'style': 'simple', 'explode': false } }
+
+        
+        def initialize(user_id:, biometric_credential_id:)
+          @user_id = user_id
+          @biometric_credential_id = biometric_credential_id
+        end
+
+        
+        def ==(other)
+          return false unless other.is_a? self.class
+          return false unless @user_id == other.user_id
+          return false unless @biometric_credential_id == other.biometric_credential_id
+          true
+        end
+      end
+    end
+  end
+end

data/lib/clerk/models/operations/revokeuserbiometriccredential_request.rbi

@@ -0,0 +1,15 @@
+# typed: false
+# frozen_string_literal: true
+
+
+class Clerk::Models::Operations::RevokeUserBiometricCredentialRequest
+  extend ::Crystalline::MetadataFields::ClassMethods
+end
+
+
+class Clerk::Models::Operations::RevokeUserBiometricCredentialRequest
+  def user_id(); end
+  def user_id=(str_); end
+  def biometric_credential_id(); end
+  def biometric_credential_id=(str_); end
+end

data/lib/clerk/models/operations/revokeuserbiometriccredential_response.rb

@@ -0,0 +1,44 @@
+# Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+
+# typed: false
+# frozen_string_literal: true
+
+
+module Clerk
+  module Models
+    module Operations
+
+      class RevokeUserBiometricCredentialResponse
+        
+        include Crystalline::MetadataFields
+
+        # HTTP response content type for this operation
+        field :content_type, ::String
+        # HTTP response status code for this operation
+        field :status_code, ::Integer
+        # Raw HTTP response; suitable for custom response parsing
+        field :raw_response, ::Faraday::Response
+        # Success
+        field :biometric_credential, Crystalline::Nilable.new(Models::Components::BiometricCredential)
+
+        
+        def initialize(content_type:, status_code:, raw_response:, biometric_credential: nil)
+          @content_type = content_type
+          @status_code = status_code
+          @raw_response = raw_response
+          @biometric_credential = biometric_credential
+        end
+
+        
+        def ==(other)
+          return false unless other.is_a? self.class
+          return false unless @content_type == other.content_type
+          return false unless @status_code == other.status_code
+          return false unless @raw_response == other.raw_response
+          return false unless @biometric_credential == other.biometric_credential
+          true
+        end
+      end
+    end
+  end
+end

data/lib/clerk/models/operations/revokeuserbiometriccredential_response.rbi

@@ -0,0 +1,19 @@
+# typed: false
+# frozen_string_literal: true
+
+
+class Clerk::Models::Operations::RevokeUserBiometricCredentialResponse
+  extend ::Crystalline::MetadataFields::ClassMethods
+end
+
+
+class Clerk::Models::Operations::RevokeUserBiometricCredentialResponse
+  def content_type(); end
+  def content_type=(str_); end
+  def status_code(); end
+  def status_code=(str_); end
+  def raw_response(); end
+  def raw_response=(str_); end
+  def biometric_credential(); end
+  def biometric_credential=(str_); end
+end

data/lib/clerk/models/operations/rotatedirectoryapikey_request.rb

@@ -0,0 +1,32 @@
+# Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+
+# typed: false
+# frozen_string_literal: true
+
+
+module Clerk
+  module Models
+    module Operations
+
+      class RotateDirectoryAPIKeyRequest
+        
+        include Crystalline::MetadataFields
+
+        # The ID of the directory whose API key to rotate
+        field :directory_id, ::String, { 'path_param': { 'field_name': 'directory_id', 'style': 'simple', 'explode': false } }
+
+        
+        def initialize(directory_id:)
+          @directory_id = directory_id
+        end
+
+        
+        def ==(other)
+          return false unless other.is_a? self.class
+          return false unless @directory_id == other.directory_id
+          true
+        end
+      end
+    end
+  end
+end

data/lib/clerk/models/operations/rotatedirectoryapikey_request.rbi

@@ -0,0 +1,13 @@
+# typed: false
+# frozen_string_literal: true
+
+
+class Clerk::Models::Operations::RotateDirectoryAPIKeyRequest
+  extend ::Crystalline::MetadataFields::ClassMethods
+end
+
+
+class Clerk::Models::Operations::RotateDirectoryAPIKeyRequest
+  def directory_id(); end
+  def directory_id=(str_); end
+end

data/lib/clerk/models/operations/rotatedirectoryapikey_response.rb

@@ -0,0 +1,44 @@
+# Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+
+# typed: false
+# frozen_string_literal: true
+
+
+module Clerk
+  module Models
+    module Operations
+
+      class RotateDirectoryAPIKeyResponse
+        
+        include Crystalline::MetadataFields
+
+        # HTTP response content type for this operation
+        field :content_type, ::String
+        # HTTP response status code for this operation
+        field :status_code, ::Integer
+        # Raw HTTP response; suitable for custom response parsing
+        field :raw_response, ::Faraday::Response
+        # A directory
+        field :directory, Crystalline::Nilable.new(Models::Components::Directory)
+
+        
+        def initialize(content_type:, status_code:, raw_response:, directory: nil)
+          @content_type = content_type
+          @status_code = status_code
+          @raw_response = raw_response
+          @directory = directory
+        end
+
+        
+        def ==(other)
+          return false unless other.is_a? self.class
+          return false unless @content_type == other.content_type
+          return false unless @status_code == other.status_code
+          return false unless @raw_response == other.raw_response
+          return false unless @directory == other.directory
+          true
+        end
+      end
+    end
+  end
+end

data/lib/clerk/models/operations/rotatedirectoryapikey_response.rbi

@@ -0,0 +1,19 @@
+# typed: false
+# frozen_string_literal: true
+
+
+class Clerk::Models::Operations::RotateDirectoryAPIKeyResponse
+  extend ::Crystalline::MetadataFields::ClassMethods
+end
+
+
+class Clerk::Models::Operations::RotateDirectoryAPIKeyResponse
+  def content_type(); end
+  def content_type=(str_); end
+  def status_code(); end
+  def status_code=(str_); end
+  def raw_response(); end
+  def raw_response=(str_); end
+  def directory(); end
+  def directory=(str_); end
+end

data/lib/clerk/models/operations/rotatescimdirectoryapikey_request.rb

@@ -12,7 +12,7 @@ module Clerk
         
         include Crystalline::MetadataFields
 
-        # The ID of the SCIM directory whose API key to rotate
+        # The ID of the directory whose API key to rotate
         field :scim_directory_id, ::String, { 'path_param': { 'field_name': 'scim_directory_id', 'style': 'simple', 'explode': false } }
 
         

data/lib/clerk/models/operations/rotatescimdirectoryapikey_response.rb

@@ -18,7 +18,7 @@ module Clerk
         field :status_code, ::Integer
         # Raw HTTP response; suitable for custom response parsing
         field :raw_response, ::Faraday::Response
-        # A SCIM directory
+        # A directory
         field :scim_directory, Crystalline::Nilable.new(Models::Components::SCIMDirectory)
 
         

data/lib/clerk/models/operations/updatedirectory_request.rb

@@ -0,0 +1,36 @@
+# Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+
+# typed: false
+# frozen_string_literal: true
+
+
+module Clerk
+  module Models
+    module Operations
+
+      class UpdateDirectoryRequest
+        
+        include Crystalline::MetadataFields
+
+        # The ID of the directory to update
+        field :directory_id, ::String, { 'path_param': { 'field_name': 'directory_id', 'style': 'simple', 'explode': false } }
+
+        field :body, Crystalline::Nilable.new(Models::Operations::UpdateDirectoryRequestBody), { 'request': { 'media_type': 'application/json' } }
+
+        
+        def initialize(directory_id:, body: nil)
+          @directory_id = directory_id
+          @body = body
+        end
+
+        
+        def ==(other)
+          return false unless other.is_a? self.class
+          return false unless @directory_id == other.directory_id
+          return false unless @body == other.body
+          true
+        end
+      end
+    end
+  end
+end

data/lib/clerk/models/operations/updatedirectory_request.rbi

@@ -0,0 +1,15 @@
+# typed: false
+# frozen_string_literal: true
+
+
+class Clerk::Models::Operations::UpdateDirectoryRequest
+  extend ::Crystalline::MetadataFields::ClassMethods
+end
+
+
+class Clerk::Models::Operations::UpdateDirectoryRequest
+  def directory_id(); end
+  def directory_id=(str_); end
+  def body(); end
+  def body=(str_); end
+end

data/lib/clerk/models/operations/updatedirectory_requestbody.rb

@@ -0,0 +1,49 @@
+# Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+
+# typed: false
+# frozen_string_literal: true
+
+
+module Clerk
+  module Models
+    module Operations
+
+      class UpdateDirectoryRequestBody
+        
+        include Crystalline::MetadataFields
+
+        # A human-friendly name for the directory.
+        field :name, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('name') } }
+        # Whether the directory is enabled.
+        field :enabled, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('enabled') } }
+        # The identity provider for this directory.
+        field :provider, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('provider') } }
+        # Attribute-to-directory-path entries to merge into the directory's attribute mapping.
+        # Set a key to `null` to remove it from the mapping.
+        field :attribute_mapping, Crystalline::Nilable.new(Crystalline::Hash.new(Symbol, ::String)), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('attribute_mapping') } }
+        # Whether group-to-role mapping is enabled for this directory.
+        field :group_role_mapping_enabled, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('group_role_mapping_enabled') } }
+
+        
+        def initialize(name: nil, enabled: nil, provider: nil, attribute_mapping: nil, group_role_mapping_enabled: nil)
+          @name = name
+          @enabled = enabled
+          @provider = provider
+          @attribute_mapping = attribute_mapping
+          @group_role_mapping_enabled = group_role_mapping_enabled
+        end
+
+        
+        def ==(other)
+          return false unless other.is_a? self.class
+          return false unless @name == other.name
+          return false unless @enabled == other.enabled
+          return false unless @provider == other.provider
+          return false unless @attribute_mapping == other.attribute_mapping
+          return false unless @group_role_mapping_enabled == other.group_role_mapping_enabled
+          true
+        end
+      end
+    end
+  end
+end

data/lib/clerk/models/operations/updatedirectory_requestbody.rbi

@@ -0,0 +1,21 @@
+# typed: false
+# frozen_string_literal: true
+
+
+class Clerk::Models::Operations::UpdateDirectoryRequestBody
+  extend ::Crystalline::MetadataFields::ClassMethods
+end
+
+
+class Clerk::Models::Operations::UpdateDirectoryRequestBody
+  def name(); end
+  def name=(str_); end
+  def enabled(); end
+  def enabled=(str_); end
+  def provider(); end
+  def provider=(str_); end
+  def attribute_mapping(); end
+  def attribute_mapping=(str_); end
+  def group_role_mapping_enabled(); end
+  def group_role_mapping_enabled=(str_); end
+end

data/lib/clerk/models/operations/updatedirectory_response.rb

@@ -0,0 +1,44 @@
+# Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+
+# typed: false
+# frozen_string_literal: true
+
+
+module Clerk
+  module Models
+    module Operations
+
+      class UpdateDirectoryResponse
+        
+        include Crystalline::MetadataFields
+
+        # HTTP response content type for this operation
+        field :content_type, ::String
+        # HTTP response status code for this operation
+        field :status_code, ::Integer
+        # Raw HTTP response; suitable for custom response parsing
+        field :raw_response, ::Faraday::Response
+        # A directory
+        field :directory, Crystalline::Nilable.new(Models::Components::Directory)
+
+        
+        def initialize(content_type:, status_code:, raw_response:, directory: nil)
+          @content_type = content_type
+          @status_code = status_code
+          @raw_response = raw_response
+          @directory = directory
+        end
+
+        
+        def ==(other)
+          return false unless other.is_a? self.class
+          return false unless @content_type == other.content_type
+          return false unless @status_code == other.status_code
+          return false unless @raw_response == other.raw_response
+          return false unless @directory == other.directory
+          true
+        end
+      end
+    end
+  end
+end

data/lib/clerk/models/operations/updatedirectory_response.rbi

@@ -0,0 +1,19 @@
+# typed: false
+# frozen_string_literal: true
+
+
+class Clerk::Models::Operations::UpdateDirectoryResponse
+  extend ::Crystalline::MetadataFields::ClassMethods
+end
+
+
+class Clerk::Models::Operations::UpdateDirectoryResponse
+  def content_type(); end
+  def content_type=(str_); end
+  def status_code(); end
+  def status_code=(str_); end
+  def raw_response(); end
+  def raw_response=(str_); end
+  def directory(); end
+  def directory=(str_); end
+end

data/lib/clerk/models/operations/updateenterpriseconnection_custom_attribute.rb

@@ -20,15 +20,18 @@ module Clerk
         field :sso_path, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('sso_path') } }
         # GJSON path to extract the attribute value from SCIM user resources
         field :scim_path, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('scim_path') } }
+        # The new name for `scim_path`. Send either one, or both with the same value; sending both with different values is rejected.
+        field :directory_path, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('directory_path') } }
         # When true, the attribute supports multiple values; values from the IdP are written to public_metadata as an array. Defaults to false.
         field :multi_valued, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('multi_valued') } }
 
         
-        def initialize(name:, key:, sso_path: nil, scim_path: nil, multi_valued: nil)
+        def initialize(name:, key:, sso_path: nil, scim_path: nil, directory_path: nil, multi_valued: nil)
           @name = name
           @key = key
           @sso_path = sso_path
           @scim_path = scim_path
+          @directory_path = directory_path
           @multi_valued = multi_valued
         end
 
@@ -39,6 +42,7 @@ module Clerk
           return false unless @key == other.key
           return false unless @sso_path == other.sso_path
           return false unless @scim_path == other.scim_path
+          return false unless @directory_path == other.directory_path
           return false unless @multi_valued == other.multi_valued
           true
         end

data/lib/clerk/models/operations/updateenterpriseconnection_custom_attribute.rbi

@@ -16,6 +16,8 @@ class Clerk::Models::Operations::UpdateEnterpriseConnectionCustomAttribute
   def sso_path=(str_); end
   def scim_path(); end
   def scim_path=(str_); end
+  def directory_path(); end
+  def directory_path=(str_); end
   def multi_valued(); end
   def multi_valued=(str_); end
 end

data/lib/clerk/models/operations/updateinstance_request.rb

@@ -12,8 +12,6 @@ module Clerk
         
         include Crystalline::MetadataFields
 
-        # For browser-like stacks such as browser extensions, Electron (not officially supported), or Capacitor.js (not officially supported), the instance allowed origins need to be updated with the request origin value. For Chrome extensions popup, background, or service worker pages, the origin is chrome-extension://extension_uuid. For Electron apps the default origin is http://localhost:3000. For Capacitor, the origin is capacitor://localhost.
-        field :allowed_origins, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('allowed_origins') } }
         # Toggles test mode for this instance, allowing the use of test email addresses and phone numbers.
         # Defaults to true for development instances.
         field :test_mode, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('test_mode') } }
@@ -25,6 +23,14 @@ module Clerk
         field :clerk_js_version, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('clerk_js_version') } }
 
         field :development_origin, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('development_origin') } }
+        # For browser-like stacks such as browser extensions, Electron (not officially supported), or Capacitor.js (not officially supported), the instance allowed origins need to be updated with the request origin value. For Chrome extensions popup, background, or service worker pages, the origin is chrome-extension://extension_uuid. For Electron apps the default origin is http://localhost:3000. For Capacitor, the origin is capacitor://localhost.
+        # Send an empty array to remove all allowed origins. A null value leaves the current list unchanged.
+        field :allowed_origins, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('allowed_origins') } }
+        # Subdomains of the instance's own domains that may originate requests while `subdomain_allowlist_enabled` is true. Each entry is either an exact host (`app.example.com`) or a wildcard anchored on a host beneath one of the instance's domains (`*.preview.example.com`), which covers every host under that anchor but not the anchor itself.
+        # Entries are stored folded to lower case with any trailing dot removed, the form the origin check compares against, so entries differing only in those respects are one entry. Entries already stored are not validated again, so a list read back from the instance can always be written again unchanged. Send an empty array to remove all entries. A null value leaves the current list unchanged. Production instances only.
+        field :allowed_subdomains, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('allowed_subdomains') } }
+        # Whether requests from subdomains of the instance's own domains are restricted to `allowed_subdomains`. When false, every subdomain of the instance's domain is accepted. Production instances only.
+        field :subdomain_allowlist_enabled, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('subdomain_allowlist_enabled') } }
         # Whether the instance should operate in cookieless development mode (i.e. without third-party cookies).
         # Deprecated: Please use `url_based_session_syncing` instead.
         #
@@ -36,13 +42,15 @@ module Clerk
         field :preferred_sign_in_strategy_when_password_required, Crystalline::Nilable.new(Models::Operations::PreferredSignInStrategyWhenPasswordRequired), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('preferred_sign_in_strategy_when_password_required'), 'decoder': ::Clerk::Utils.enum_from_string(Models::Operations::PreferredSignInStrategyWhenPasswordRequired, true) } }
 
         
-        def initialize(allowed_origins: nil, test_mode: nil, hibp: nil, support_email: nil, clerk_js_version: nil, development_origin: nil, cookieless_dev: nil, url_based_session_syncing: nil, preferred_sign_in_strategy_when_password_required: nil)
-          @allowed_origins = allowed_origins
+        def initialize(test_mode: nil, hibp: nil, support_email: nil, clerk_js_version: nil, development_origin: nil, allowed_origins: nil, allowed_subdomains: nil, subdomain_allowlist_enabled: nil, cookieless_dev: nil, url_based_session_syncing: nil, preferred_sign_in_strategy_when_password_required: nil)
           @test_mode = test_mode
           @hibp = hibp
           @support_email = support_email
           @clerk_js_version = clerk_js_version
           @development_origin = development_origin
+          @allowed_origins = allowed_origins
+          @allowed_subdomains = allowed_subdomains
+          @subdomain_allowlist_enabled = subdomain_allowlist_enabled
           @cookieless_dev = cookieless_dev
           @url_based_session_syncing = url_based_session_syncing
           @preferred_sign_in_strategy_when_password_required = preferred_sign_in_strategy_when_password_required
@@ -51,12 +59,14 @@ module Clerk
         
         def ==(other)
           return false unless other.is_a? self.class
-          return false unless @allowed_origins == other.allowed_origins
           return false unless @test_mode == other.test_mode
           return false unless @hibp == other.hibp
           return false unless @support_email == other.support_email
           return false unless @clerk_js_version == other.clerk_js_version
           return false unless @development_origin == other.development_origin
+          return false unless @allowed_origins == other.allowed_origins
+          return false unless @allowed_subdomains == other.allowed_subdomains
+          return false unless @subdomain_allowlist_enabled == other.subdomain_allowlist_enabled
           return false unless @cookieless_dev == other.cookieless_dev
           return false unless @url_based_session_syncing == other.url_based_session_syncing
           return false unless @preferred_sign_in_strategy_when_password_required == other.preferred_sign_in_strategy_when_password_required

data/lib/clerk/models/operations/updateinstance_request.rbi

@@ -8,8 +8,6 @@ end
 
 
 class Clerk::Models::Operations::UpdateInstanceRequest
-  def allowed_origins(); end
-  def allowed_origins=(str_); end
   def test_mode(); end
   def test_mode=(str_); end
   def hibp(); end
@@ -20,6 +18,12 @@ class Clerk::Models::Operations::UpdateInstanceRequest
   def clerk_js_version=(str_); end
   def development_origin(); end
   def development_origin=(str_); end
+  def allowed_origins(); end
+  def allowed_origins=(str_); end
+  def allowed_subdomains(); end
+  def allowed_subdomains=(str_); end
+  def subdomain_allowlist_enabled(); end
+  def subdomain_allowlist_enabled=(str_); end
   def cookieless_dev(); end
   def cookieless_dev=(str_); end
   def url_based_session_syncing(); end

data/lib/clerk/models/operations/updateinstanceoauthapplicationsettings_request.rb

@@ -14,10 +14,15 @@ module Clerk
 
         # Whether dynamic OAuth client registration is enabled for the instance (RFC 7591).
         field :dynamic_oauth_client_registration, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('dynamic_oauth_client_registration') } }
-        # Default scopes. Set to null to reset to Clerk-provided defaults.
+        # Default scopes assigned when a dynamically registered or first-contact CIMD client omits `scope`. Accepts built-in keys and current custom catalog keys. `advertised` does not affect eligibility. Duplicate keys, unknown keys, and `offline_access` are rejected. An empty array or null resets to Clerk-provided defaults.
+        #
         field :default_scopes, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('default_scopes') } }
         # Whether OAuth JWT access tokens are enabled for the instance (disabled indicates opaque access tokens).
         field :oauth_jwt_access_tokens, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('oauth_jwt_access_tokens') } }
+        # Whether OAuth access tokens can include an aud claim derived from the RFC 8707 resource parameter.
+        field :aud_claim_enabled, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('aud_claim_enabled') } }
+        # Whether all new OAuth authorization-code requests must use PKCE with the S256 challenge method.
+        field :pkce_required, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('pkce_required') } }
         # Whether the instance advertises support for Client ID Metadata Documents in its OAuth authorization server metadata.
         field :client_id_metadata_documents_advertised, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('client_id_metadata_documents_advertised') } }
         # When true, new unknown CIMD clients are rejected. Previously auto-connected and pre-registered clients remain admitted; deleting a client makes it unknown again.
@@ -26,10 +31,12 @@ module Clerk
         field :client_id_metadata_documents_block_implicitly_allowed_clients, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('client_id_metadata_documents_block_implicitly_allowed_clients') } }
 
         
-        def initialize(dynamic_oauth_client_registration: nil, default_scopes: nil, oauth_jwt_access_tokens: nil, client_id_metadata_documents_advertised: nil, client_id_metadata_documents_only_allow_pre_registered_clients: nil, client_id_metadata_documents_block_implicitly_allowed_clients: nil)
+        def initialize(dynamic_oauth_client_registration: nil, default_scopes: nil, oauth_jwt_access_tokens: nil, aud_claim_enabled: nil, pkce_required: nil, client_id_metadata_documents_advertised: nil, client_id_metadata_documents_only_allow_pre_registered_clients: nil, client_id_metadata_documents_block_implicitly_allowed_clients: nil)
           @dynamic_oauth_client_registration = dynamic_oauth_client_registration
           @default_scopes = default_scopes
           @oauth_jwt_access_tokens = oauth_jwt_access_tokens
+          @aud_claim_enabled = aud_claim_enabled
+          @pkce_required = pkce_required
           @client_id_metadata_documents_advertised = client_id_metadata_documents_advertised
           @client_id_metadata_documents_only_allow_pre_registered_clients = client_id_metadata_documents_only_allow_pre_registered_clients
           @client_id_metadata_documents_block_implicitly_allowed_clients = client_id_metadata_documents_block_implicitly_allowed_clients
@@ -41,6 +48,8 @@ module Clerk
           return false unless @dynamic_oauth_client_registration == other.dynamic_oauth_client_registration
           return false unless @default_scopes == other.default_scopes
           return false unless @oauth_jwt_access_tokens == other.oauth_jwt_access_tokens
+          return false unless @aud_claim_enabled == other.aud_claim_enabled
+          return false unless @pkce_required == other.pkce_required
           return false unless @client_id_metadata_documents_advertised == other.client_id_metadata_documents_advertised
           return false unless @client_id_metadata_documents_only_allow_pre_registered_clients == other.client_id_metadata_documents_only_allow_pre_registered_clients
           return false unless @client_id_metadata_documents_block_implicitly_allowed_clients == other.client_id_metadata_documents_block_implicitly_allowed_clients

data/lib/clerk/models/operations/updateinstanceoauthapplicationsettings_request.rbi

@@ -14,6 +14,10 @@ class Clerk::Models::Operations::UpdateInstanceOAuthApplicationSettingsRequest
   def default_scopes=(str_); end
   def oauth_jwt_access_tokens(); end
   def oauth_jwt_access_tokens=(str_); end
+  def aud_claim_enabled(); end
+  def aud_claim_enabled=(str_); end
+  def pkce_required(); end
+  def pkce_required=(str_); end
   def client_id_metadata_documents_advertised(); end
   def client_id_metadata_documents_advertised=(str_); end
   def client_id_metadata_documents_only_allow_pre_registered_clients(); end

data/lib/clerk/models/operations/updateinstanceprotect_request.rb

@@ -12,7 +12,7 @@ module Clerk
         
         include Crystalline::MetadataFields
 
-
+        # Set true to enforce Protect rules on this instance. Set false to stop enforcing and return the instance to its default posture, where traffic is still evaluated in shadow but nothing is blocked. This does not remove the instance from Protect.
         field :rules_enabled, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('rules_enabled') } }
 
         field :specter_enabled, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('specter_enabled') } }