clerk-sdk-ruby 8.0.0 → 8.0.1

data/lib/clerk/models/components/directorygrouprolemapping_deleted_object.rb

@@ -0,0 +1,19 @@
+# Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+
+# typed: false
+# frozen_string_literal: true
+
+
+module Clerk
+  module Models
+    module Components
+      # DirectoryGroupRoleMappingDeletedObject - String representing the object's type.
+      class DirectoryGroupRoleMappingDeletedObject
+        include ::Crystalline::Enum
+        enums do
+          DIRECTORY_GROUP_ROLE_MAPPING = new('directory_group_role_mapping')
+        end
+      end
+    end
+  end
+end

data/lib/clerk/models/components/directorygrouprolemapping_deleted_object.rbi

@@ -0,0 +1,11 @@
+# typed: false
+# frozen_string_literal: true
+
+
+class Clerk::Models::Components::DirectoryGroupRoleMappingDeletedObject
+  extend ::Crystalline::MetadataFields::ClassMethods
+end
+
+
+class Clerk::Models::Components::DirectoryGroupRoleMappingDeletedObject
+end

data/lib/clerk/models/components/directorygrouprolemapping_list.rb

@@ -0,0 +1,36 @@
+# Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+
+# typed: false
+# frozen_string_literal: true
+
+
+module Clerk
+  module Models
+    module Components
+      # A list of directory group role mappings, ordered by precedence.
+      class DirectoryGroupRoleMappingList
+        
+        include Crystalline::MetadataFields
+
+
+        field :data, Crystalline::Array.new(Models::Components::DirectoryGroupRoleMapping), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('data'), required: true } }
+        # Total number of directory group role mappings in the directory.
+        field :total_count, ::Integer, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('total_count'), required: true } }
+
+        
+        def initialize(data:, total_count:)
+          @data = data
+          @total_count = total_count
+        end
+
+        
+        def ==(other)
+          return false unless other.is_a? self.class
+          return false unless @data == other.data
+          return false unless @total_count == other.total_count
+          true
+        end
+      end
+    end
+  end
+end

data/lib/clerk/models/components/directorygrouprolemapping_list.rbi

@@ -0,0 +1,15 @@
+# typed: false
+# frozen_string_literal: true
+
+
+class Clerk::Models::Components::DirectoryGroupRoleMappingList
+  extend ::Crystalline::MetadataFields::ClassMethods
+end
+
+
+class Clerk::Models::Components::DirectoryGroupRoleMappingList
+  def data(); end
+  def data=(str_); end
+  def total_count(); end
+  def total_count=(str_); end
+end

data/lib/clerk/models/components/directorygrouprolemapping_object.rb

@@ -0,0 +1,19 @@
+# Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+
+# typed: false
+# frozen_string_literal: true
+
+
+module Clerk
+  module Models
+    module Components
+      # DirectoryGroupRoleMappingObject - String representing the object's type. Always "directory_group_role_mapping".
+      class DirectoryGroupRoleMappingObject
+        include ::Crystalline::Enum
+        enums do
+          DIRECTORY_GROUP_ROLE_MAPPING = new('directory_group_role_mapping')
+        end
+      end
+    end
+  end
+end

data/lib/clerk/models/components/directorygrouprolemapping_object.rbi

@@ -0,0 +1,11 @@
+# typed: false
+# frozen_string_literal: true
+
+
+class Clerk::Models::Components::DirectoryGroupRoleMappingObject
+  extend ::Crystalline::MetadataFields::ClassMethods
+end
+
+
+class Clerk::Models::Components::DirectoryGroupRoleMappingObject
+end

data/lib/clerk/models/components/dnstarget.rb

@@ -0,0 +1,49 @@
+# Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+
+# typed: false
+# frozen_string_literal: true
+
+
+module Clerk
+  module Models
+    module Components
+
+      class DNSTarget
+        
+        include Crystalline::MetadataFields
+
+
+        field :host, ::String, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('host'), required: true } }
+
+        field :value, ::String, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('value'), required: true } }
+
+        field :record_type, Models::Components::RecordType, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('record_type'), required: true, 'decoder': ::Clerk::Utils.enum_from_string(Models::Components::RecordType, false) } }
+        # Denotes whether this DNS target is required to be set in order for the domain to be considered deployed.
+        #
+        field :required, Crystalline::Boolean.new, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('required'), required: true } }
+
+        field :automation_disposition, Crystalline::Nilable.new(Models::Components::AutomationDisposition), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('automation_disposition'), 'decoder': ::Clerk::Utils.enum_from_string(Models::Components::AutomationDisposition, true) } }
+
+        
+        def initialize(host:, value:, record_type:, required:, automation_disposition: nil)
+          @host = host
+          @value = value
+          @record_type = record_type
+          @required = required
+          @automation_disposition = automation_disposition
+        end
+
+        
+        def ==(other)
+          return false unless other.is_a? self.class
+          return false unless @host == other.host
+          return false unless @value == other.value
+          return false unless @record_type == other.record_type
+          return false unless @required == other.required
+          return false unless @automation_disposition == other.automation_disposition
+          true
+        end
+      end
+    end
+  end
+end

data/lib/clerk/models/components/dnstarget.rbi

@@ -0,0 +1,21 @@
+# typed: false
+# frozen_string_literal: true
+
+
+class Clerk::Models::Components::DNSTarget
+  extend ::Crystalline::MetadataFields::ClassMethods
+end
+
+
+class Clerk::Models::Components::DNSTarget
+  def host(); end
+  def host=(str_); end
+  def value(); end
+  def value=(str_); end
+  def record_type(); end
+  def record_type=(str_); end
+  def required(); end
+  def required=(str_); end
+  def automation_disposition(); end
+  def automation_disposition=(str_); end
+end

data/lib/clerk/models/components/domain.rb

@@ -29,11 +29,14 @@ module Clerk
         field :accounts_portal_url, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('accounts_portal_url') } }
 
         field :proxy_url, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('proxy_url') } }
-
+        # Legacy CNAME-only DNS targets. Prefer `dns_targets` when present.
         field :cname_targets, Crystalline::Nilable.new(Crystalline::Array.new(Models::Components::CNameTarget)), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('cname_targets') } }
+        # The complete typed DNS contract. Consumers should use this field instead of merging it with `cname_targets`.
+        #
+        field :dns_targets, Crystalline::Nilable.new(Crystalline::Array.new(Models::Components::DNSTarget)), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('dns_targets') } }
 
         
-        def initialize(object:, id:, name:, is_satellite:, frontend_api_url:, development_origin:, accounts_portal_url: nil, proxy_url: nil, cname_targets: nil)
+        def initialize(object:, id:, name:, is_satellite:, frontend_api_url:, development_origin:, accounts_portal_url: nil, proxy_url: nil, cname_targets: nil, dns_targets: nil)
           @object = object
           @id = id
           @name = name
@@ -43,6 +46,7 @@ module Clerk
           @accounts_portal_url = accounts_portal_url
           @proxy_url = proxy_url
           @cname_targets = cname_targets
+          @dns_targets = dns_targets
         end
 
         
@@ -57,6 +61,7 @@ module Clerk
           return false unless @accounts_portal_url == other.accounts_portal_url
           return false unless @proxy_url == other.proxy_url
           return false unless @cname_targets == other.cname_targets
+          return false unless @dns_targets == other.dns_targets
           true
         end
       end

data/lib/clerk/models/components/domain.rbi

@@ -26,4 +26,6 @@ class Clerk::Models::Components::Domain
   def proxy_url=(str_); end
   def cname_targets(); end
   def cname_targets=(str_); end
+  def dns_targets(); end
+  def dns_targets=(str_); end
 end

data/lib/clerk/models/components/effect.rb

@@ -0,0 +1,20 @@
+# Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+
+# typed: false
+# frozen_string_literal: true
+
+
+module Clerk
+  module Models
+    module Components
+      # Effect - The snapshotted discount effect.
+      class Effect
+        include ::Crystalline::Enum
+        enums do
+          PERCENTAGE = new('percentage')
+          FIXED_AMOUNT = new('fixed_amount')
+        end
+      end
+    end
+  end
+end

data/lib/clerk/models/components/{platform.rbi → effect.rbi}

@@ -2,10 +2,10 @@
 # frozen_string_literal: true
 
 
-class Clerk::Models::Components::Platform
+class Clerk::Models::Components::Effect
   extend ::Crystalline::MetadataFields::ClassMethods
 end
 
 
-class Clerk::Models::Components::Platform
+class Clerk::Models::Components::Effect
 end

data/lib/clerk/models/components/enterpriseconnection_custom_attribute.rb

@@ -20,15 +20,18 @@ module Clerk
         field :sso_path, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('sso_path') } }
         # GJSON path to extract the attribute value from SCIM user resources
         field :scim_path, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('scim_path') } }
+        # GJSON path to extract the attribute value from directory sync user resources. Same value as `scim_path`.
+        field :directory_path, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('directory_path') } }
         # When true, the attribute supports multiple values; values from the IdP are written to public_metadata as an array. Defaults to false.
         field :multi_valued, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('multi_valued') } }
 
         
-        def initialize(name:, key:, sso_path: nil, scim_path: nil, multi_valued: nil)
+        def initialize(name:, key:, sso_path: nil, scim_path: nil, directory_path: nil, multi_valued: nil)
           @name = name
           @key = key
           @sso_path = sso_path
           @scim_path = scim_path
+          @directory_path = directory_path
           @multi_valued = multi_valued
         end
 
@@ -39,6 +42,7 @@ module Clerk
           return false unless @key == other.key
           return false unless @sso_path == other.sso_path
           return false unless @scim_path == other.scim_path
+          return false unless @directory_path == other.directory_path
           return false unless @multi_valued == other.multi_valued
           true
         end

data/lib/clerk/models/components/enterpriseconnection_custom_attribute.rbi

@@ -16,6 +16,8 @@ class Clerk::Models::Components::EnterpriseConnectionCustomAttribute
   def sso_path=(str_); end
   def scim_path(); end
   def scim_path=(str_); end
+  def directory_path(); end
+  def directory_path=(str_); end
   def multi_valued(); end
   def multi_valued=(str_); end
 end

data/lib/clerk/models/components/instance.rb

@@ -18,15 +18,24 @@ module Clerk
         field :id, ::String, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('id'), required: true } }
 
         field :environment_type, ::String, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('environment_type'), required: true } }
+        # Subdomains of the instance's own domains that may originate requests, when the subdomain allowlist is enabled. Production instances only; always empty on a development instance.
+        field :allowed_subdomains, Crystalline::Array.new(::String), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('allowed_subdomains'), required: true } }
+        # Whether requests from subdomains of the instance's own domains are restricted to `allowed_subdomains`. When false, every subdomain of the instance's domain is accepted. Production instances only; always false on a development instance.
+        field :subdomain_allowlist_enabled, Crystalline::Boolean.new, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('subdomain_allowlist_enabled'), required: true } }
 
         field :allowed_origins, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('allowed_origins'), required: true } }
+        # The ID of the Clerk workspace that owns the instance's application. It is null when the application has no owner.
+        field :workspace_id, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('workspace_id'), required: true } }
 
         
-        def initialize(object:, id:, environment_type:, allowed_origins: nil)
+        def initialize(object:, id:, environment_type:, allowed_subdomains:, subdomain_allowlist_enabled:, allowed_origins: nil, workspace_id: nil)
           @object = object
           @id = id
           @environment_type = environment_type
+          @allowed_subdomains = allowed_subdomains
+          @subdomain_allowlist_enabled = subdomain_allowlist_enabled
           @allowed_origins = allowed_origins
+          @workspace_id = workspace_id
         end
 
         
@@ -35,7 +44,10 @@ module Clerk
           return false unless @object == other.object
           return false unless @id == other.id
           return false unless @environment_type == other.environment_type
+          return false unless @allowed_subdomains == other.allowed_subdomains
+          return false unless @subdomain_allowlist_enabled == other.subdomain_allowlist_enabled
           return false unless @allowed_origins == other.allowed_origins
+          return false unless @workspace_id == other.workspace_id
           true
         end
       end

data/lib/clerk/models/components/instance.rbi

@@ -14,6 +14,12 @@ class Clerk::Models::Components::Instance
   def id=(str_); end
   def environment_type(); end
   def environment_type=(str_); end
+  def allowed_subdomains(); end
+  def allowed_subdomains=(str_); end
+  def subdomain_allowlist_enabled(); end
+  def subdomain_allowlist_enabled=(str_); end
   def allowed_origins(); end
   def allowed_origins=(str_); end
+  def workspace_id(); end
+  def workspace_id=(str_); end
 end

data/lib/clerk/models/components/instanceprotect.rb

@@ -14,19 +14,25 @@ module Clerk
 
 
         field :object, Models::Components::InstanceProtectObject, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('object'), required: true, 'decoder': ::Clerk::Utils.enum_from_string(Models::Components::InstanceProtectObject, false) } }
-
+        # Whether Protect rules are enforced on this instance. False does not mean the instance is outside Protect — by default it is still evaluated in shadow, where rules are scored and recorded but never block.
         field :rules_enabled, Crystalline::Boolean.new, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('rules_enabled'), required: true } }
 
         field :specter_enabled, Crystalline::Boolean.new, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('specter_enabled'), required: true } }
         # Whether the instance has opted out of the Protect prerequisite checks, asserting its setup already meets the requirements.
         field :checks_bypassed, Crystalline::Boolean.new, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('checks_bypassed'), required: true } }
+        # Whether the Protect system has verified the instance's prerequisite checks. Protect rules are gated on checks being verified, bypassed or exempt.
+        field :checks_verified, Crystalline::Boolean.new, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('checks_verified'), required: true } }
+        # Whether the instance was created into Protect and so was never subject to the prerequisite checks at all.
+        field :checks_exempt, Crystalline::Boolean.new, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('checks_exempt'), required: true } }
 
         
-        def initialize(object:, rules_enabled:, specter_enabled:, checks_bypassed:)
+        def initialize(object:, rules_enabled:, specter_enabled:, checks_bypassed:, checks_verified:, checks_exempt:)
           @object = object
           @rules_enabled = rules_enabled
           @specter_enabled = specter_enabled
           @checks_bypassed = checks_bypassed
+          @checks_verified = checks_verified
+          @checks_exempt = checks_exempt
         end
 
         
@@ -36,6 +42,8 @@ module Clerk
           return false unless @rules_enabled == other.rules_enabled
           return false unless @specter_enabled == other.specter_enabled
           return false unless @checks_bypassed == other.checks_bypassed
+          return false unless @checks_verified == other.checks_verified
+          return false unless @checks_exempt == other.checks_exempt
           true
         end
       end

data/lib/clerk/models/components/instanceprotect.rbi

@@ -16,4 +16,8 @@ class Clerk::Models::Components::InstanceProtect
   def specter_enabled=(str_); end
   def checks_bypassed(); end
   def checks_bypassed=(str_); end
+  def checks_verified(); end
+  def checks_verified=(str_); end
+  def checks_exempt(); end
+  def checks_exempt=(str_); end
 end

data/lib/clerk/models/components/instancesettings.rb

@@ -22,7 +22,7 @@ module Clerk
         field :from_email_address, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('from_email_address') } }
 
         field :progressive_sign_up, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('progressive_sign_up') } }
-        # Deprecated. When enabled, production authentication emails for this instance are sent through Clerk's legacy managed email delivery path. This setting is being retired; use the instance's configured email sending domain instead.
+        # Deprecated. This setting is retired and no longer affects email delivery; all email is sent through the instance's configured email sending domain. The field is preserved for API compatibility only and will be removed in a future version.
         #
         #
         # @deprecated true: This will be removed in a future release, please migrate away from it as soon as possible.

data/lib/clerk/models/components/level.rb

@@ -0,0 +1,21 @@
+# Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+
+# typed: false
+# frozen_string_literal: true
+
+
+module Clerk
+  module Models
+    module Components
+      # Level - The level used for the reverification
+      class Level
+        include ::Crystalline::Enum
+        enums do
+          FIRST_FACTOR = new('first_factor')
+          SECOND_FACTOR = new('second_factor')
+          MULTI_FACTOR = new('multi_factor')
+        end
+      end
+    end
+  end
+end

data/lib/clerk/models/components/{algorithm.rbi → level.rbi}

@@ -2,10 +2,10 @@
 # frozen_string_literal: true
 
 
-class Clerk::Models::Components::Algorithm
+class Clerk::Models::Components::Level
   extend ::Crystalline::MetadataFields::ClassMethods
 end
 
 
-class Clerk::Models::Components::Algorithm
+class Clerk::Models::Components::Level
 end

data/lib/clerk/models/components/oauthapplication.rb

@@ -29,8 +29,11 @@ module Clerk
 
         field :pkce_required, Crystalline::Boolean.new, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('pkce_required'), required: true } }
 
-        field :public, Crystalline::Boolean.new, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('public'), required: true } }
+        field :device_authorization_grant_enabled, Crystalline::Boolean.new, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('device_authorization_grant_enabled'), required: true } }
 
+        field :public, Crystalline::Boolean.new, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('public'), required: true } }
+        # The complete scope ceiling for the OAuth application, as a space-delimited list of built-in and assigned custom scope keys.
+        #
         field :scopes, ::String, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('scopes'), required: true } }
 
         field :redirect_uris, Crystalline::Array.new(::String), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('redirect_uris'), required: true } }
@@ -61,7 +64,7 @@ module Clerk
         field :client_image_url, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('client_image_url'), required: true } }
 
         
-        def initialize(object:, id:, instance_id:, name:, client_id:, dynamically_registered:, consent_screen_enabled:, pkce_required:, public:, scopes:, redirect_uris:, callback_url:, authorize_url:, token_fetch_url:, user_info_url:, discovery_url:, token_introspection_url:, created_at:, updated_at:, client_uri: nil, client_image_url: nil)
+        def initialize(object:, id:, instance_id:, name:, client_id:, dynamically_registered:, consent_screen_enabled:, pkce_required:, device_authorization_grant_enabled:, public:, scopes:, redirect_uris:, callback_url:, authorize_url:, token_fetch_url:, user_info_url:, discovery_url:, token_introspection_url:, created_at:, updated_at:, client_uri: nil, client_image_url: nil)
           @object = object
           @id = id
           @instance_id = instance_id
@@ -70,6 +73,7 @@ module Clerk
           @dynamically_registered = dynamically_registered
           @consent_screen_enabled = consent_screen_enabled
           @pkce_required = pkce_required
+          @device_authorization_grant_enabled = device_authorization_grant_enabled
           @public = public
           @scopes = scopes
           @redirect_uris = redirect_uris
@@ -96,6 +100,7 @@ module Clerk
           return false unless @dynamically_registered == other.dynamically_registered
           return false unless @consent_screen_enabled == other.consent_screen_enabled
           return false unless @pkce_required == other.pkce_required
+          return false unless @device_authorization_grant_enabled == other.device_authorization_grant_enabled
           return false unless @public == other.public
           return false unless @scopes == other.scopes
           return false unless @redirect_uris == other.redirect_uris

data/lib/clerk/models/components/oauthapplication.rbi

@@ -24,6 +24,8 @@ class Clerk::Models::Components::OAuthApplication
   def consent_screen_enabled=(str_); end
   def pkce_required(); end
   def pkce_required=(str_); end
+  def device_authorization_grant_enabled(); end
+  def device_authorization_grant_enabled=(str_); end
   def public(); end
   def public=(str_); end
   def scopes(); end

data/lib/clerk/models/components/oauthapplicationsettings.rb

@@ -18,20 +18,27 @@ module Clerk
         field :dynamic_oauth_client_registration, Crystalline::Boolean.new, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('dynamic_oauth_client_registration'), required: true } }
         # Whether OAuth JWT access tokens are enabled for the instance (disabled indicates opaque access tokens).
         field :oauth_jwt_access_tokens, Crystalline::Boolean.new, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('oauth_jwt_access_tokens'), required: true } }
+        # Whether OAuth access tokens can include an aud claim derived from the RFC 8707 resource parameter.
+        field :aud_claim_enabled, Crystalline::Boolean.new, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('aud_claim_enabled'), required: true } }
+        # Whether all new OAuth authorization-code requests must use PKCE with the S256 challenge method.
+        field :pkce_required, Crystalline::Boolean.new, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('pkce_required'), required: true } }
         # Whether the instance advertises support for Client ID Metadata Documents in its OAuth authorization server metadata.
         field :client_id_metadata_documents_advertised, Crystalline::Boolean.new, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('client_id_metadata_documents_advertised'), required: true } }
         # When true, new unknown CIMD clients are rejected. Previously auto-connected and pre-registered clients remain admitted; deleting a client makes it unknown again.
         field :client_id_metadata_documents_only_allow_pre_registered_clients, Crystalline::Boolean.new, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('client_id_metadata_documents_only_allow_pre_registered_clients'), required: true } }
         # When true, recorded implicitly allowed CIMD clients are rejected on future client lookups. Explicitly allowed clients remain accepted. This does not revoke previously issued access tokens.
         field :client_id_metadata_documents_block_implicitly_allowed_clients, Crystalline::Boolean.new, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('client_id_metadata_documents_block_implicitly_allowed_clients'), required: true } }
-        # Default scopes.
+        # Default scopes assigned when a dynamically registered or first-contact CIMD client omits `scope`. Contains built-in keys and custom catalog keys. Null means Clerk-provided defaults. `advertised` does not affect eligibility. An empty input array is stored and returned as null.
+        #
         field :default_scopes, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('default_scopes'), required: true } }
 
         
-        def initialize(object:, dynamic_oauth_client_registration:, oauth_jwt_access_tokens:, client_id_metadata_documents_advertised:, client_id_metadata_documents_only_allow_pre_registered_clients:, client_id_metadata_documents_block_implicitly_allowed_clients:, default_scopes: nil)
+        def initialize(object:, dynamic_oauth_client_registration:, oauth_jwt_access_tokens:, aud_claim_enabled:, pkce_required:, client_id_metadata_documents_advertised:, client_id_metadata_documents_only_allow_pre_registered_clients:, client_id_metadata_documents_block_implicitly_allowed_clients:, default_scopes: nil)
           @object = object
           @dynamic_oauth_client_registration = dynamic_oauth_client_registration
           @oauth_jwt_access_tokens = oauth_jwt_access_tokens
+          @aud_claim_enabled = aud_claim_enabled
+          @pkce_required = pkce_required
           @client_id_metadata_documents_advertised = client_id_metadata_documents_advertised
           @client_id_metadata_documents_only_allow_pre_registered_clients = client_id_metadata_documents_only_allow_pre_registered_clients
           @client_id_metadata_documents_block_implicitly_allowed_clients = client_id_metadata_documents_block_implicitly_allowed_clients
@@ -44,6 +51,8 @@ module Clerk
           return false unless @object == other.object
           return false unless @dynamic_oauth_client_registration == other.dynamic_oauth_client_registration
           return false unless @oauth_jwt_access_tokens == other.oauth_jwt_access_tokens
+          return false unless @aud_claim_enabled == other.aud_claim_enabled
+          return false unless @pkce_required == other.pkce_required
           return false unless @client_id_metadata_documents_advertised == other.client_id_metadata_documents_advertised
           return false unless @client_id_metadata_documents_only_allow_pre_registered_clients == other.client_id_metadata_documents_only_allow_pre_registered_clients
           return false unless @client_id_metadata_documents_block_implicitly_allowed_clients == other.client_id_metadata_documents_block_implicitly_allowed_clients

data/lib/clerk/models/components/oauthapplicationsettings.rbi

@@ -14,6 +14,10 @@ class Clerk::Models::Components::OAuthApplicationSettings
   def dynamic_oauth_client_registration=(str_); end
   def oauth_jwt_access_tokens(); end
   def oauth_jwt_access_tokens=(str_); end
+  def aud_claim_enabled(); end
+  def aud_claim_enabled=(str_); end
+  def pkce_required(); end
+  def pkce_required=(str_); end
   def client_id_metadata_documents_advertised(); end
   def client_id_metadata_documents_advertised=(str_); end
   def client_id_metadata_documents_only_allow_pre_registered_clients(); end

data/lib/clerk/models/components/oauthapplicationwithsecret.rb

@@ -29,8 +29,11 @@ module Clerk
 
         field :pkce_required, Crystalline::Boolean.new, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('pkce_required'), required: true } }
 
-        field :public, Crystalline::Boolean.new, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('public'), required: true } }
+        field :device_authorization_grant_enabled, Crystalline::Boolean.new, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('device_authorization_grant_enabled'), required: true } }
 
+        field :public, Crystalline::Boolean.new, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('public'), required: true } }
+        # The complete scope ceiling for the OAuth application, as a space-delimited list of built-in and assigned custom scope keys.
+        #
         field :scopes, ::String, { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('scopes'), required: true } }
 
         field :redirect_uris, Crystalline::Array.new(::String), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('redirect_uris'), required: true } }
@@ -64,7 +67,7 @@ module Clerk
         field :client_secret, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('client_secret') } }
 
         
-        def initialize(object:, id:, instance_id:, name:, client_id:, dynamically_registered:, consent_screen_enabled:, pkce_required:, public:, scopes:, redirect_uris:, callback_url:, authorize_url:, token_fetch_url:, user_info_url:, discovery_url:, token_introspection_url:, created_at:, updated_at:, client_uri: nil, client_image_url: nil, client_secret: nil)
+        def initialize(object:, id:, instance_id:, name:, client_id:, dynamically_registered:, consent_screen_enabled:, pkce_required:, device_authorization_grant_enabled:, public:, scopes:, redirect_uris:, callback_url:, authorize_url:, token_fetch_url:, user_info_url:, discovery_url:, token_introspection_url:, created_at:, updated_at:, client_uri: nil, client_image_url: nil, client_secret: nil)
           @object = object
           @id = id
           @instance_id = instance_id
@@ -73,6 +76,7 @@ module Clerk
           @dynamically_registered = dynamically_registered
           @consent_screen_enabled = consent_screen_enabled
           @pkce_required = pkce_required
+          @device_authorization_grant_enabled = device_authorization_grant_enabled
           @public = public
           @scopes = scopes
           @redirect_uris = redirect_uris
@@ -100,6 +104,7 @@ module Clerk
           return false unless @dynamically_registered == other.dynamically_registered
           return false unless @consent_screen_enabled == other.consent_screen_enabled
           return false unless @pkce_required == other.pkce_required
+          return false unless @device_authorization_grant_enabled == other.device_authorization_grant_enabled
           return false unless @public == other.public
           return false unless @scopes == other.scopes
           return false unless @redirect_uris == other.redirect_uris

data/lib/clerk/models/components/oauthapplicationwithsecret.rbi

@@ -24,6 +24,8 @@ class Clerk::Models::Components::OAuthApplicationWithSecret
   def consent_screen_enabled=(str_); end
   def pkce_required(); end
   def pkce_required=(str_); end
+  def device_authorization_grant_enabled(); end
+  def device_authorization_grant_enabled=(str_); end
   def public(); end
   def public=(str_); end
   def scopes(); end

data/lib/clerk/models/components/organization.rb

@@ -49,12 +49,15 @@ module Clerk
         # Unix timestamp of last activity.
         #
         field :last_active_at, Crystalline::Nilable.new(::Integer), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('last_active_at') } }
+        # Whether this organization can configure self-serve enterprise SSO.
+        #
+        field :self_serve_sso_enabled, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('self_serve_sso_enabled') } }
         # The key of the [role set](https://clerk.com/docs/guides/organizations/control-access/role-sets) assigned to this organization.
         #
         field :role_set_key, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Clerk::Utils.field_name('role_set_key') } }
 
         
-        def initialize(object:, id:, name:, slug:, has_image:, max_allowed_memberships:, admin_delete_enabled:, public_metadata:, created_at:, updated_at:, image_url: nil, members_count: nil, missing_member_with_elevated_permissions: nil, pending_invitations_count: nil, private_metadata: nil, created_by: nil, last_active_at: nil, role_set_key: nil)
+        def initialize(object:, id:, name:, slug:, has_image:, max_allowed_memberships:, admin_delete_enabled:, public_metadata:, created_at:, updated_at:, image_url: nil, members_count: nil, missing_member_with_elevated_permissions: nil, pending_invitations_count: nil, private_metadata: nil, created_by: nil, last_active_at: nil, self_serve_sso_enabled: nil, role_set_key: nil)
           @object = object
           @id = id
           @name = name
@@ -72,6 +75,7 @@ module Clerk
           @private_metadata = private_metadata
           @created_by = created_by
           @last_active_at = last_active_at
+          @self_serve_sso_enabled = self_serve_sso_enabled
           @role_set_key = role_set_key
         end
 
@@ -95,6 +99,7 @@ module Clerk
           return false unless @private_metadata == other.private_metadata
           return false unless @created_by == other.created_by
           return false unless @last_active_at == other.last_active_at
+          return false unless @self_serve_sso_enabled == other.self_serve_sso_enabled
           return false unless @role_set_key == other.role_set_key
           true
         end