workos 10.0.0 → 10.2.0

data/lib/workos/user_management.rb

@@ -3,6 +3,7 @@
 # This file is auto-generated by oagen. Do not edit.
 
 require "json"
+require "uri"
 
 module WorkOS
   class UserManagement
@@ -18,7 +19,13 @@ module WorkOS
     #   @return [String]
     # @!attribute [r] password_hash_type
     #   @return [WorkOS::Types::CreateUserPasswordHashType]
-    PasswordHashed = Data.define(:password_hash, :password_hash_type)
+    # @!attribute [r] password_salt_position
+    #   @return [WorkOS::Types::CreateUserPasswordSaltPosition, nil]
+    PasswordHashed = Data.define(:password_hash, :password_hash_type, :password_salt_position) do
+      def initialize(password_hash:, password_hash_type:, password_salt_position: nil)
+        super
+      end
+    end
 
     def initialize(client)
       @client = client
@@ -62,8 +69,8 @@ module WorkOS
     # @param pending_authentication_token [String, nil] The pending authentication token from a previous authentication attempt.
     # @param authentication_challenge_id [String, nil] The ID of the MFA authentication challenge.
     # @param radar_challenge_id [String, nil] The ID of the Radar email challenge being verified.
-    # @param verification_id [String, nil] The ID of the Radar SMS verification being confirmed.
-    # @param phone_number [String, nil] The phone number the Radar SMS challenge was sent to.
+    # @param verification_id [String, nil] The ID of the Radar SMS verification being confirmed. Required for sign-up challenges; omitted for sign-in challenges, where the verification is resolved server-side.
+    # @param phone_number [String, nil] The phone number the Radar SMS challenge was sent to. Required for sign-up challenges; omitted for sign-in challenges, where the phone number on file is resolved server-side.
     # @param device_code [String, nil] The device verification code.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
     # @return [WorkOS::AuthenticateResponse]
@@ -475,8 +482,8 @@ module WorkOS
 
     # Authenticate with radar sms challenge.
     # @param code [String]
-    # @param verification_id [String]
-    # @param phone_number [String]
+    # @param verification_id [String, nil]
+    # @param phone_number [String, nil]
     # @param pending_authentication_token [String]
     # @param ip_address [String, nil]
     # @param device_id [String, nil]
@@ -485,9 +492,9 @@ module WorkOS
     # @return [WorkOS::AuthenticateResponse]
     def authenticate_with_radar_sms_challenge(
       code:,
-      verification_id:,
-      phone_number:,
       pending_authentication_token:,
+      verification_id: nil,
+      phone_number: nil,
       ip_address: nil,
       device_id: nil,
       user_agent: nil,
@@ -515,6 +522,70 @@ module WorkOS
       WorkOS::AuthenticateResponse.new(response.body)
     end
 
+    # Get an authorization URL
+    # Builds the URL client-side; no HTTP request is made.
+    # @param code_challenge_method [String, nil] The only valid PKCE code challenge method is `"S256"`. Required when specifying a `code_challenge`.
+    # @param code_challenge [String, nil] Code challenge derived from the code verifier used for the PKCE flow.
+    # @param domain_hint [String, nil] A domain hint for SSO connection lookup.
+    # @param connection_id [String, nil] The ID of an SSO connection to use for authentication.
+    # @param provider_query_params [Hash{String => String}, nil] Key/value pairs of query parameters to pass to the OAuth provider.
+    # @param provider_scopes [Array<String>, nil] Additional OAuth scopes to request from the identity provider.
+    # @param invitation_token [String, nil] A token representing a user invitation to redeem during authentication.
+    # @param max_age [Integer, nil] Maximum allowable elapsed time, in seconds, since the user last actively authenticated. If the last authentication is older than this value, the user is prompted to re-authenticate; a value of `0` forces re-authentication. Only supported when the provider is `authkit`.
+    # @param screen_hint [WorkOS::Types::UserManagementAuthenticationScreenHint, nil] Used to specify which screen to display when the provider is `authkit`.
+    # @param login_hint [String, nil] A hint to the authorization server about the login identifier the user might use.
+    # @param provider [WorkOS::Types::UserManagementAuthenticationProvider, nil] The OAuth provider to authenticate with (e.g., GoogleOAuth, MicrosoftOAuth, GitHubOAuth).
+    # @param prompt [String, nil] Controls the authentication flow behavior for the user.
+    # @param state [String, nil] An opaque value used to maintain state between the request and the callback.
+    # @param organization_id [String, nil] The ID of the organization to authenticate the user against.
+    # @param redirect_uri [String] The callback URI where the authorization code will be sent after authentication.
+    # @param client_id [String, nil] The unique identifier of the WorkOS environment client. Defaults to the client's configured client_id.
+    # @return [String]
+    def get_authorization_url(
+      redirect_uri:,
+      code_challenge_method: nil,
+      code_challenge: nil,
+      domain_hint: nil,
+      connection_id: nil,
+      provider_query_params: nil,
+      provider_scopes: nil,
+      invitation_token: nil,
+      max_age: nil,
+      screen_hint: nil,
+      login_hint: nil,
+      provider: nil,
+      prompt: nil,
+      state: nil,
+      organization_id: nil,
+      client_id: nil
+    )
+      params = {
+        "code_challenge_method" => code_challenge_method,
+        "code_challenge" => code_challenge,
+        "domain_hint" => domain_hint,
+        "connection_id" => connection_id,
+        "provider_query_params" => provider_query_params,
+        "provider_scopes" => provider_scopes,
+        "invitation_token" => invitation_token,
+        "max_age" => max_age,
+        "screen_hint" => screen_hint,
+        "login_hint" => login_hint,
+        "provider" => provider,
+        "prompt" => prompt,
+        "state" => state,
+        "organization_id" => organization_id,
+        "redirect_uri" => redirect_uri,
+        "client_id" => client_id
+      }.compact
+      params["provider_query_params"] = JSON.generate(provider_query_params) unless provider_query_params.nil?
+      params["provider_scopes"] = provider_scopes.join(",") unless provider_scopes.nil?
+      params["response_type"] = "code"
+      params["client_id"] = @client.client_id if !params.key?("client_id") && !@client.client_id.nil?
+      uri = URI.join(@client.base_url, "/user_management/authorize")
+      uri.query = URI.encode_www_form(params) unless params.empty?
+      uri.to_s
+    end
+
     # Get device authorization URL
     # @param client_id [String] The WorkOS client ID for your application.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
@@ -592,6 +663,24 @@ module WorkOS
       result
     end
 
+    # Logout
+    # Builds the URL client-side; no HTTP request is made.
+    # @param session_id [String] The ID of the session. This can be extracted from the `sid` claim of the access token.
+    # @param return_to [String, nil] The URL to redirect the user to after logout.
+    # @return [String]
+    def get_logout_url(
+      session_id:,
+      return_to: nil
+    )
+      params = {
+        "session_id" => session_id,
+        "return_to" => return_to
+      }.compact
+      uri = URI.join(@client.base_url, "/user_management/sessions/logout")
+      uri.query = URI.encode_www_form(params) unless params.empty?
+      uri.to_s
+    end
+
     # Revoke Session
     # @param session_id [String] The ID of the session to revoke. This can be extracted from the `sid` claim of the access token.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
@@ -870,6 +959,7 @@ module WorkOS
         when WorkOS::UserManagement::PasswordHashed
           body["password_hash"] = password.password_hash
           body["password_hash_type"] = password.password_hash_type
+          body["password_salt_position"] = password.password_salt_position unless password.password_salt_position.nil?
         else
           raise ArgumentError, "expected password to be one of: WorkOS::UserManagement::PasswordPlaintext, WorkOS::UserManagement::PasswordHashed, got #{password.class}"
         end
@@ -967,6 +1057,7 @@ module WorkOS
         when WorkOS::UserManagement::PasswordHashed
           body["password_hash"] = password.password_hash
           body["password_hash_type"] = password.password_hash_type
+          body["password_salt_position"] = password.password_salt_position unless password.password_salt_position.nil?
         else
           raise ArgumentError, "expected password to be one of: WorkOS::UserManagement::PasswordPlaintext, WorkOS::UserManagement::PasswordHashed, got #{password.class}"
         end
@@ -1690,32 +1781,10 @@ module WorkOS
       URI.join(base, "/sso/jwks/#{WorkOS::Util.encode_path(cid)}").to_s
     end
 
-    # H09 — Build an AuthKit authorization URL (client-side, no HTTP call).
-    # Overrides the generated get_authorization_url which hits the API.
-    def get_authorization_url(redirect_uri:, client_id: nil, provider: nil, connection_id: nil,
-      organization_id: nil, domain_hint: nil, login_hint: nil,
-      state: nil, screen_hint: nil, code_challenge: nil,
-      code_challenge_method: nil, prompt: nil, **)
-      cid = client_id || @client.client_id
-      raise ArgumentError, "client_id is required (set on Client or pass explicitly)" if cid.nil? || cid.empty?
-      raise ArgumentError, "provider, connection_id, or organization_id required" if provider.nil? && connection_id.nil? && organization_id.nil?
-      params = {
-        "client_id" => cid,
-        "redirect_uri" => redirect_uri,
-        "response_type" => "code",
-        "provider" => provider,
-        "connection_id" => connection_id,
-        "organization_id" => organization_id,
-        "domain_hint" => domain_hint,
-        "login_hint" => login_hint,
-        "state" => state,
-        "screen_hint" => screen_hint,
-        "code_challenge" => code_challenge,
-        "code_challenge_method" => code_challenge_method,
-        "prompt" => prompt
-      }.compact
-      build_url("/user_management/authorize", params)
-    end
+    # H09 (authkit_authorization_url) is provided by the generated
+    # `get_authorization_url` url-builder method, which accepts an optional
+    # per-call `client_id` override falling back to the client's configured
+    # value; no hand-maintained override is needed here.
 
     # H10 — AuthKit authorization URL with auto-generated PKCE + state.
     # Returns [url, code_verifier, state].
@@ -1773,24 +1842,9 @@ module WorkOS
     # `authenticate_with_device_code` method (wraps /user_management/authenticate);
     # no hand-maintained override is needed here.
 
-    # Build the AuthKit logout redirect URL (client-side, no HTTP call).
-    # @param session_id [String] The session ID (from the `sid` claim of the access token).
-    # @param return_to [String, nil] URL to redirect the user to after session revocation.
-    # @return [String]
-    def get_logout_url(session_id:, return_to: nil)
-      params = {"session_id" => session_id}
-      params["return_to"] = return_to if return_to
-      build_url("/user_management/sessions/logout", params)
-    end
-
-    private
-
-    def build_url(path, params)
-      base = @client.base_url
-      uri = URI.join(base, path)
-      uri.query = URI.encode_www_form(params)
-      uri.to_s
-    end
+    # The AuthKit logout redirect URL is provided by the generated
+    # `get_logout_url` url-builder method; no hand-maintained override is
+    # needed here.
     # @oagen-ignore-end
   end
 end

data/lib/workos/version.rb

@@ -2,5 +2,5 @@
 
 # @oagen-ignore-file
 module WorkOS
-  VERSION = "10.0.0"
+  VERSION = "10.2.0"
 end

data/rbi/workos/agent_registration_refreshed.rbi

@@ -0,0 +1,54 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+# typed: strong
+
+module WorkOS
+  class AgentRegistrationRefreshed
+    sig { params(json: T.any(String, T::Hash[Symbol, T.untyped])).void }
+    def initialize(json); end
+
+    sig { returns(String) }
+    def object; end
+
+    sig { params(value: String).returns(String) }
+    def object=(value); end
+
+    sig { returns(String) }
+    def id; end
+
+    sig { params(value: String).returns(String) }
+    def id=(value); end
+
+    sig { returns(String) }
+    def event; end
+
+    sig { params(value: String).returns(String) }
+    def event=(value); end
+
+    sig { returns(WorkOS::AgentRegistrationRefreshedData) }
+    def data; end
+
+    sig { params(value: WorkOS::AgentRegistrationRefreshedData).returns(WorkOS::AgentRegistrationRefreshedData) }
+    def data=(value); end
+
+    sig { returns(String) }
+    def created_at; end
+
+    sig { params(value: String).returns(String) }
+    def created_at=(value); end
+
+    sig { returns(T.nilable(WorkOS::EventContext)) }
+    def context; end
+
+    sig { params(value: T.nilable(WorkOS::EventContext)).returns(T.nilable(WorkOS::EventContext)) }
+    def context=(value); end
+
+    sig { returns(T::Hash[Symbol, T.untyped]) }
+    def to_h; end
+
+    sig { params(args: T.untyped).returns(String) }
+    def to_json(*args); end
+  end
+end

data/rbi/workos/agent_registration_refreshed_data.rbi

@@ -0,0 +1,24 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+# typed: strong
+
+module WorkOS
+  class AgentRegistrationRefreshedData
+    sig { params(json: T.any(String, T::Hash[Symbol, T.untyped])).void }
+    def initialize(json); end
+
+    sig { returns(String) }
+    def agent_registration_id; end
+
+    sig { params(value: String).returns(String) }
+    def agent_registration_id=(value); end
+
+    sig { returns(T::Hash[Symbol, T.untyped]) }
+    def to_h; end
+
+    sig { params(args: T.untyped).returns(String) }
+    def to_json(*args); end
+  end
+end

data/rbi/workos/configure_data_integration_body.rbi

@@ -33,6 +33,12 @@ module WorkOS
     sig { params(value: T.nilable(String)).returns(T.nilable(String)) }
     def client_secret=(value); end
 
+    sig { returns(T.nilable(T::Hash[String, String])) }
+    def config; end
+
+    sig { params(value: T.nilable(T::Hash[String, String])).returns(T.nilable(T::Hash[String, String])) }
+    def config=(value); end
+
     sig { returns(T::Hash[Symbol, T.untyped]) }
     def to_h; end
 

data/rbi/workos/connected_account.rbi

@@ -51,6 +51,24 @@ module WorkOS
     sig { params(value: T.nilable(String)).returns(T.nilable(String)) }
     def api_key_last_4=(value); end
 
+    sig { returns(T.nilable(String)) }
+    def client_id; end
+
+    sig { params(value: T.nilable(String)).returns(T.nilable(String)) }
+    def client_id=(value); end
+
+    sig { returns(T.nilable(String)) }
+    def client_secret_last_4; end
+
+    sig { params(value: T.nilable(String)).returns(T.nilable(String)) }
+    def client_secret_last_4=(value); end
+
+    sig { returns(T.nilable(T::Hash[String, String])) }
+    def config; end
+
+    sig { params(value: T.nilable(T::Hash[String, String])).returns(T.nilable(T::Hash[String, String])) }
+    def config=(value); end
+
     sig { returns(String) }
     def state; end
 

data/rbi/workos/connection.rbi

@@ -57,12 +57,6 @@ module WorkOS
     sig { params(value: T::Array[WorkOS::ConnectionDomain]).returns(T::Array[WorkOS::ConnectionDomain]) }
     def domains=(value); end
 
-    sig { returns(T.nilable(String)) }
-    def callback_endpoint; end
-
-    sig { params(value: T.nilable(String)).returns(T.nilable(String)) }
-    def callback_endpoint=(value); end
-
     sig { returns(String) }
     def created_at; end
 

data/rbi/workos/create_data_integration.rbi

@@ -39,6 +39,12 @@ module WorkOS
     sig { params(value: T.nilable(T::Array[String])).returns(T.nilable(T::Array[String])) }
     def auth_methods=(value); end
 
+    sig { returns(T.nilable(T::Hash[String, String])) }
+    def config; end
+
+    sig { params(value: T.nilable(T::Hash[String, String])).returns(T.nilable(T::Hash[String, String])) }
+    def config=(value); end
+
     sig { returns(T.nilable(WorkOS::DataIntegrationCredentialsInput)) }
     def credentials; end
 

data/rbi/workos/create_user.rbi

@@ -87,6 +87,12 @@ module WorkOS
     sig { params(value: T.nilable(String)).returns(T.nilable(String)) }
     def password_hash_type=(value); end
 
+    sig { returns(T.nilable(String)) }
+    def password_salt_position; end
+
+    sig { params(value: T.nilable(String)).returns(T.nilable(String)) }
+    def password_salt_position=(value); end
+
     sig { returns(T::Hash[Symbol, T.untyped]) }
     def to_h; end
 

data/rbi/workos/custom_provider_definition.rbi

@@ -15,16 +15,16 @@ module WorkOS
     sig { params(value: String).returns(String) }
     def name=(value); end
 
-    sig { returns(String) }
+    sig { returns(T.nilable(String)) }
     def authorization_url; end
 
-    sig { params(value: String).returns(String) }
+    sig { params(value: T.nilable(String)).returns(T.nilable(String)) }
     def authorization_url=(value); end
 
-    sig { returns(String) }
+    sig { returns(T.nilable(String)) }
     def token_url; end
 
-    sig { params(value: String).returns(String) }
+    sig { params(value: T.nilable(String)).returns(T.nilable(String)) }
     def token_url=(value); end
 
     sig { returns(T.nilable(String)) }

data/rbi/workos/data_integration.rbi

@@ -69,10 +69,10 @@ module WorkOS
     sig { params(value: T::Array[String]).returns(T::Array[String]) }
     def auth_methods=(value); end
 
-    sig { returns(WorkOS::DataIntegrationCredential) }
+    sig { returns(T.nilable(WorkOS::DataIntegrationCredential)) }
     def credentials; end
 
-    sig { params(value: WorkOS::DataIntegrationCredential).returns(WorkOS::DataIntegrationCredential) }
+    sig { params(value: T.nilable(WorkOS::DataIntegrationCredential)).returns(T.nilable(WorkOS::DataIntegrationCredential)) }
     def credentials=(value); end
 
     sig { returns(T.nilable(WorkOS::DataIntegrationInstallation)) }
@@ -81,6 +81,12 @@ module WorkOS
     sig { params(value: T.nilable(WorkOS::DataIntegrationInstallation)).returns(T.nilable(WorkOS::DataIntegrationInstallation)) }
     def installation=(value); end
 
+    sig { returns(T::Hash[String, String]) }
+    def config; end
+
+    sig { params(value: T::Hash[String, String]).returns(T::Hash[String, String]) }
+    def config=(value); end
+
     sig { returns(T.nilable(WorkOS::DataIntegrationCustomProvider)) }
     def custom_provider; end
 

data/rbi/workos/data_integration_configuration_response.rbi

@@ -51,6 +51,12 @@ module WorkOS
     sig { params(value: T.nilable(T::Array[String])).returns(T.nilable(T::Array[String])) }
     def scopes=(value); end
 
+    sig { returns(T::Hash[String, String]) }
+    def config; end
+
+    sig { params(value: T::Hash[String, String]).returns(T::Hash[String, String]) }
+    def config=(value); end
+
     sig { returns(String) }
     def created_at; end
 

data/rbi/workos/data_integrations_get_data_integration_authorize_url_request.rbi

@@ -27,6 +27,12 @@ module WorkOS
     sig { params(value: T.nilable(String)).returns(T.nilable(String)) }
     def return_to=(value); end
 
+    sig { returns(T.nilable(T::Hash[String, String])) }
+    def config; end
+
+    sig { params(value: T.nilable(T::Hash[String, String])).returns(T.nilable(T::Hash[String, String])) }
+    def config=(value); end
+
     sig { returns(T::Hash[Symbol, T.untyped]) }
     def to_h; end
 

data/rbi/workos/data_integrations_list_response_data_connected_account.rbi

@@ -51,6 +51,24 @@ module WorkOS
     sig { params(value: T.nilable(String)).returns(T.nilable(String)) }
     def api_key_last_4=(value); end
 
+    sig { returns(T.nilable(String)) }
+    def client_id; end
+
+    sig { params(value: T.nilable(String)).returns(T.nilable(String)) }
+    def client_id=(value); end
+
+    sig { returns(T.nilable(String)) }
+    def client_secret_last_4; end
+
+    sig { params(value: T.nilable(String)).returns(T.nilable(String)) }
+    def client_secret_last_4=(value); end
+
+    sig { returns(T.nilable(T::Hash[String, String])) }
+    def config; end
+
+    sig { params(value: T.nilable(T::Hash[String, String])).returns(T.nilable(T::Hash[String, String])) }
+    def config=(value); end
+
     sig { returns(String) }
     def state; end
 

data/rbi/workos/data_integrations_upsert_client_credentials_request.rbi

@@ -0,0 +1,48 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+# typed: strong
+
+module WorkOS
+  class DataIntegrationsUpsertClientCredentialsRequest
+    sig { params(json: T.any(String, T::Hash[Symbol, T.untyped])).void }
+    def initialize(json); end
+
+    sig { returns(String) }
+    def user_id; end
+
+    sig { params(value: String).returns(String) }
+    def user_id=(value); end
+
+    sig { returns(T.nilable(String)) }
+    def organization_id; end
+
+    sig { params(value: T.nilable(String)).returns(T.nilable(String)) }
+    def organization_id=(value); end
+
+    sig { returns(String) }
+    def client_id; end
+
+    sig { params(value: String).returns(String) }
+    def client_id=(value); end
+
+    sig { returns(String) }
+    def client_secret; end
+
+    sig { params(value: String).returns(String) }
+    def client_secret=(value); end
+
+    sig { returns(T.nilable(T::Hash[String, String])) }
+    def config; end
+
+    sig { params(value: T.nilable(T::Hash[String, String])).returns(T.nilable(T::Hash[String, String])) }
+    def config=(value); end
+
+    sig { returns(T::Hash[Symbol, T.untyped]) }
+    def to_h; end
+
+    sig { params(args: T.untyped).returns(String) }
+    def to_json(*args); end
+  end
+end

data/rbi/workos/events.rbi

@@ -11,18 +11,18 @@ module WorkOS
 
     sig do
       params(
+        events: T::Array[String],
         before: T.nilable(String),
         after: T.nilable(String),
         limit: T.nilable(Integer),
         order: T.nilable(String),
-        events: T.nilable(T::Array[String]),
         range_start: T.nilable(String),
         range_end: T.nilable(String),
         organization_id: T.nilable(String),
         request_options: T::Hash[Symbol, T.untyped]
       ).returns(WorkOS::Types::ListStruct)
     end
-    def list_events(before:, after:, limit:, order:, events:, range_start:, range_end:, organization_id:, request_options:); end
+    def list_events(events:, before:, after:, limit:, order:, range_start:, range_end:, organization_id:, request_options:); end
 
   end
 end

data/rbi/workos/groups.rbi

@@ -16,10 +16,11 @@ module WorkOS
         after: T.nilable(String),
         limit: T.nilable(Integer),
         order: T.nilable(String),
+        search: T.nilable(String),
         request_options: T::Hash[Symbol, T.untyped]
       ).returns(WorkOS::Types::ListStruct)
     end
-    def list_organization_groups(organization_id:, before:, after:, limit:, order:, request_options:); end
+    def list_organization_groups(organization_id:, before:, after:, limit:, order:, search:, request_options:); end
 
     sig do
       params(

data/rbi/workos/pipes.rbi

@@ -27,13 +27,14 @@ module WorkOS
         enabled: T.nilable(T::Boolean),
         scopes: T.nilable(T::Array[String]),
         auth_methods: T.nilable(T::Array[String]),
+        config: T.nilable(T::Hash[String, String]),
         credentials: T.nilable(WorkOS::DataIntegrationCredentialsInput),
         api_key: T.nilable(WorkOS::ApiKeyInstallation),
         custom_provider: T.nilable(WorkOS::CustomProviderDefinition),
         request_options: T::Hash[Symbol, T.untyped]
       ).returns(WorkOS::DataIntegration)
     end
-    def create_data_integration(provider:, description:, enabled:, scopes:, auth_methods:, credentials:, api_key:, custom_provider:, request_options:); end
+    def create_data_integration(provider:, description:, enabled:, scopes:, auth_methods:, config:, credentials:, api_key:, custom_provider:, request_options:); end
 
     sig do
       params(
@@ -82,10 +83,24 @@ module WorkOS
         user_id: String,
         organization_id: T.nilable(String),
         return_to: T.nilable(String),
+        config: T.nilable(T::Hash[String, String]),
         request_options: T::Hash[Symbol, T.untyped]
       ).returns(WorkOS::DataIntegrationAuthorizeUrlResponse)
     end
-    def authorize_data_integration(slug:, user_id:, organization_id:, return_to:, request_options:); end
+    def authorize_data_integration(slug:, user_id:, organization_id:, return_to:, config:, request_options:); end
+
+    sig do
+      params(
+        slug: String,
+        user_id: String,
+        client_id: String,
+        client_secret: String,
+        organization_id: T.nilable(String),
+        config: T.nilable(T::Hash[String, String]),
+        request_options: T::Hash[Symbol, T.untyped]
+      ).returns(WorkOS::ConnectedAccount)
+    end
+    def update_data_integration_client_credentials(slug:, user_id:, client_id:, client_secret:, organization_id:, config:, request_options:); end
 
     sig do
       params(

data/rbi/workos/pipes_provider.rbi

@@ -25,10 +25,11 @@ module WorkOS
         scopes: T.nilable(T::Array[String]),
         client_id: T.nilable(String),
         client_secret: T.nilable(String),
+        config: T.nilable(T::Hash[String, String]),
         request_options: T::Hash[Symbol, T.untyped]
       ).returns(WorkOS::DataIntegrationConfigurationResponse)
     end
-    def update_organization_data_integration_configuration(organization_id:, slug:, enabled:, scopes:, client_id:, client_secret:, request_options:); end
+    def update_organization_data_integration_configuration(organization_id:, slug:, enabled:, scopes:, client_id:, client_secret:, config:, request_options:); end
 
   end
 end

data/rbi/workos/radar_sms_challenge_code_session_authenticate_request.rbi

@@ -33,16 +33,16 @@ module WorkOS
     sig { params(value: String).returns(String) }
     def code=(value); end
 
-    sig { returns(String) }
+    sig { returns(T.nilable(String)) }
     def verification_id; end
 
-    sig { params(value: String).returns(String) }
+    sig { params(value: T.nilable(String)).returns(T.nilable(String)) }
     def verification_id=(value); end
 
-    sig { returns(String) }
+    sig { returns(T.nilable(String)) }
     def phone_number; end
 
-    sig { params(value: String).returns(String) }
+    sig { params(value: T.nilable(String)).returns(T.nilable(String)) }
     def phone_number=(value); end
 
     sig { returns(String) }