workos 10.2.1 → 10.3.0

data/CHANGELOG.md

@@ -1,5 +1,159 @@
 # Changelog
 
+## [10.3.0](https://github.com/workos/workos-ruby/compare/v10.2.1...v10.3.0) (2026-09-01)
+
+* [#546](https://github.com/workos/workos-ruby/pull/546) feat(generated)!: regenerate from spec (5 changes)
+
+  **⚠️ Breaking**
+  * **[agents](https://workos.com/docs/reference/agents)**:
+    * Removed service `Agents`
+  * **[sso](https://workos.com/docs/reference/sso)**:
+    * Removed model `TokenBody`
+    * Removed enum `TokenBodyGrantType`
+    * Removed model `TokenQuery`
+    * Changed parameter `SSO.token.grant_type`
+
+  **Features**
+  * **[agents](https://workos.com/docs/reference/agents)**:
+    * Added model `AgentBlueprint`
+    * Added model `AgentInstance`
+    * Added model `AgentToken`
+    * Added model `AgentInstanceSession`
+    * Added model `AgentBlueprintInvocableBy`
+    * Added model `AgentBlueprintSessionSetting`
+    * Added model `AgentBlueprintsCreateRequest`
+    * Added model `AgentBlueprintsCreateRequestInvocableBy`
+    * Added model `AgentBlueprintsCreateRequestSessionSetting`
+    * Added model `AgentBlueprintsUpdateRequest`
+    * Added model `AgentBlueprintsUpdateRequestInvocableBy`
+    * Added model `AgentBlueprintsUpdateRequestSessionSetting`
+    * Added model `AgentBlueprintsTokenMintTokenRequest`
+    * Added enum `AgentInstanceType`
+    * Added enum `AgentInstanceSessionStatus`
+    * Added enum `AgentBlueprintsTokenMintTokenRequestType`
+  * **agents_blueprints**:
+    * Added service `AgentsBlueprints`
+  * **agents_blueprints_tokens**:
+    * Added service `AgentsBlueprintsTokens`
+  * **agents_instances**:
+    * Added service `AgentsInstances`
+  * **agents_registrations**:
+    * Added service `AgentsRegistrations`
+  * **agents_sessions**:
+    * Added service `AgentsSessions`
+  * **[organizations](https://workos.com/docs/reference/organization)**:
+    * Added `retention_period` to `UpdateAuditLogsRetention`
+    * Made `UpdateAuditLogsRetention.retention_period_in_days` optional
+    * Added enum `UpdateAuditLogsRetentionRetentionPeriod`
+    * Added model `CreateItContact`
+    * Added model `InviteItContact`
+    * Added model `ItContact`
+    * Added model `ItContactList`
+    * Added model `ItContactListListMetadata`
+    * Added enum `InviteItContactIntents`
+    * Added service `OrganizationsItContacts`
+  * **platform_teams**:
+    * Added model `CreateTeam`
+    * Added model `Team`
+    * Added enum `TeamProductionState`
+    * Added service `PlatformTeams`
+  * **[sso](https://workos.com/docs/reference/sso)**:
+    * Added model `TokenQuery`
+    * Added enum `TokenQueryGrantType`
+    * Added model `CreateConnectionKeyPair`
+    * Added model `CreateConnectionSAMLOptions`
+    * Added model `CreateConnectionOidcOptions`
+    * Added model `CreateConnectionStandardAttributes`
+    * Added model `CreateConnectionAttributeMaps`
+    * Added model `CreateConnection`
+    * Added model `PatchConnectionSAMLOptions`
+    * Added model `PatchConnectionOidcOptions`
+    * Added model `PatchConnectionStandardAttributes`
+    * Added model `PatchConnectionAttributeMaps`
+    * Added model `PatchConnection`
+    * Added model `CreateSAMLIdpSigningCertificate`
+    * Added model `SAMLIdpSigningCertificate`
+    * Added model `SAMLIdpSigningCertificateList`
+    * Added model `SAMLSpEncryptionCertificate`
+    * Added model `SAMLSpEncryptionCertificateList`
+    * Added model `SAMLSpSigningCertificate`
+    * Added enum `CreateConnectionOidcOptionsIdTokenSignatureAlgorithm`
+    * Added enum `PatchConnectionOidcOptionsIdTokenSignatureAlgorithm`
+    * Added endpoint `POST /connections`
+    * Added endpoint `GET /connections/{connectionId}/saml_idp_signing_certs`
+    * Added endpoint `POST /connections/{connectionId}/saml_idp_signing_certs`
+    * Added endpoint `DELETE /connections/{connectionId}/saml_idp_signing_certs/{certificateId}`
+    * Added endpoint `GET /connections/{connectionId}/saml_sp_encryption_certs`
+    * Added endpoint `POST /connections/{connectionId}/saml_sp_encryption_certs`
+    * Added endpoint `DELETE /connections/{connectionId}/saml_sp_encryption_certs/{certificateId}`
+    * Added endpoint `GET /connections/{connectionId}/saml_sp_signing_cert`
+    * Added endpoint `POST /connections/{connectionId}/saml_sp_signing_cert`
+    * Added endpoint `DELETE /connections/{connectionId}/saml_sp_signing_cert/{certificateId}`
+    * Added endpoint `PATCH /connections/{id}`
+    * Added model `TokenBody`
+    * Added enum `TokenBodyGrantType`
+    * Added enum `SSOGrantType`
+    * Changed required status for parameter `SSO.token.code`
+  * **[user_management](https://workos.com/docs/reference/authkit/user)**:
+    * Added enum `CreateConnectionOidcOptionsTokenAuthenticationMethod`
+    * Added enum `PatchConnectionOidcOptionsTokenAuthenticationMethod`
+    * Added model `EmailCompletionSessionAuthenticateRequest`
+    * Added model `CreateWaitlistEntry`
+    * Added model `Waitlist`
+    * Added model `WaitlistEntry`
+    * Added enum `WaitlistEntryState`
+    * Added enum `UserManagementWaitlistsState`
+    * Added service `UserManagementWaitlists`
+  * **[webhooks](https://workos.com/docs/reference/webhooks)**:
+    * Added `agent.instance.created` to `CreateWebhookEndpointEvents`
+    * Added `agent.instance.deleted` to `CreateWebhookEndpointEvents`
+    * Added `agent.instance.session.created` to `CreateWebhookEndpointEvents`
+    * Added `agent.instance.session.revoked` to `CreateWebhookEndpointEvents`
+    * Added `agent.instance.created` to `UpdateWebhookEndpointEvents`
+    * Added `agent.instance.deleted` to `UpdateWebhookEndpointEvents`
+    * Added `agent.instance.session.created` to `UpdateWebhookEndpointEvents`
+    * Added `agent.instance.session.revoked` to `UpdateWebhookEndpointEvents`
+    * Added `agent.blueprint.created` to `CreateWebhookEndpointEvents`
+    * Added `agent.blueprint.deleted` to `CreateWebhookEndpointEvents`
+    * Added `agent.blueprint.updated` to `CreateWebhookEndpointEvents`
+    * Added `agent.blueprint.created` to `UpdateWebhookEndpointEvents`
+    * Added `agent.blueprint.deleted` to `UpdateWebhookEndpointEvents`
+    * Added `agent.blueprint.updated` to `UpdateWebhookEndpointEvents`
+
+  **Fixes**
+  * **[sso](https://workos.com/docs/reference/sso)**:
+    * Changed request body of `SSO.token` from `TokenBody` to `TokenQuery`
+    * Removed `DiscordOAuth` from `ConnectionType`
+    * Removed `GrokOAuth` from `ConnectionType`
+    * Removed `XOAuth` from `ConnectionType`
+    * Removed `DiscordOAuth` from `ProfileConnectionType`
+    * Removed `GrokOAuth` from `ProfileConnectionType`
+    * Removed `XOAuth` from `ProfileConnectionType`
+    * Removed `DiscordOAuth` from `ConnectionsConnectionType`
+    * Removed `GrokOAuth` from `ConnectionsConnectionType`
+    * Removed `XOAuth` from `ConnectionsConnectionType`
+    * Changed request body of `SSO.token` from `TokenQuery` to `TokenBody`
+  * **[user_management](https://workos.com/docs/reference/authkit/user)**:
+    * Changed request body for `UserManagementAuthentication.authenticate`
+    * Changed errors for endpoint `POST /user_management/authenticate`
+    * Removed `DiscordOAuth` from `AuthenticateResponseAuthenticationMethod`
+    * Removed `GrokOAuth` from `AuthenticateResponseAuthenticationMethod`
+    * Removed `XOAuth` from `AuthenticateResponseAuthenticationMethod`
+    * Removed `DiscordOAuth` from `UserIdentitiesGetItemProvider`
+    * Removed `GrokOAuth` from `UserIdentitiesGetItemProvider`
+    * Removed `XOAuth` from `UserIdentitiesGetItemProvider`
+    * Changed errors for endpoint `DELETE /user_management/users/{id}`
+
+* [#549](https://github.com/workos/workos-ruby/pull/549) fix(generated): regenerate from spec
+
+  **Features**
+  * **[agents](https://workos.com/docs/reference/agents)**:
+    * Made `AgentBlueprintsCreateRequest.session_settings` optional
+    * Added model `AgentTokenValidation`
+    * Added model `AgentBlueprintsTokenValidateTokenRequest`
+  * **agents_blueprints_tokens**:
+    * Added endpoint `POST /agents/blueprints/{agent_blueprint_id}/tokens/validate`
+
 ## [10.2.1](https://github.com/workos/workos-ruby/compare/v10.2.0...v10.2.1) (2026-08-20)
 
 

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    workos (10.2.1)
+    workos (10.3.0)
       jwt (~> 3.1)
       logger (~> 1.7)
       zeitwerk (~> 2.6)
@@ -153,7 +153,7 @@ CHECKSUMS
   unicode-emoji (4.2.0) sha256=519e69150f75652e40bf736106cfbc8f0f73aa3fb6a65afe62fefa7f80b0f80f
   webmock (3.26.2) sha256=774556f2ea6371846cca68c01769b2eac0d134492d21f6d0ab5dd643965a4c90
   webrick (1.9.2) sha256=beb4a15fc474defed24a3bda4ffd88a490d517c9e4e6118c3edce59e45864131
-  workos (10.2.1)
+  workos (10.3.0)
   yard (0.9.44) sha256=eb087e9b631ccd887b049f303d489963945452d5e2a7eb49a5a74a7cf6887f28
   yard-markdown (0.7.1) sha256=06c378632dfe7ba053be9ba469eb4701aa0470e36bcf7e5546f353eb90c1bfd1
   zeitwerk (2.7.5) sha256=d8da92128c09ea6ec62c949011b00ed4a20242b255293dd66bf41545398f73dd

data/lib/workos/agents/agent_blueprint.rb

@@ -0,0 +1,43 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class AgentBlueprint < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      object: :object,
+      id: :id,
+      name: :name,
+      description: :description,
+      permissions: :permissions,
+      invocable_by: :invocable_by,
+      session_settings: :session_settings,
+      created_at: :created_at,
+      updated_at: :updated_at
+    }.freeze
+
+    attr_accessor \
+      :object,
+      :id,
+      :name,
+      :description,
+      :permissions,
+      :invocable_by,
+      :session_settings,
+      :created_at,
+      :updated_at
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @object = hash[:object]
+      @id = hash[:id]
+      @name = hash[:name]
+      @description = hash[:description]
+      @permissions = hash[:permissions] || []
+      @invocable_by = hash[:invocable_by] ? WorkOS::AgentBlueprintInvocableBy.new(hash[:invocable_by]) : nil
+      @session_settings = hash[:session_settings] ? WorkOS::AgentBlueprintSessionSetting.new(hash[:session_settings]) : nil
+      @created_at = hash[:created_at]
+      @updated_at = hash[:updated_at]
+    end
+  end
+end

data/lib/workos/agents/agent_blueprint_invocable_by.rb

@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  AgentBlueprintInvocableBy = AgentBlueprintCreatedDataInvocableBy
+end

data/lib/workos/agents/agent_blueprint_session_setting.rb

@@ -0,0 +1,25 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class AgentBlueprintSessionSetting < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      max_age_seconds: :max_age_seconds,
+      access_token_ttl_seconds: :access_token_ttl_seconds,
+      refresh_token_ttl_seconds: :refresh_token_ttl_seconds
+    }.freeze
+
+    attr_accessor \
+      :max_age_seconds,
+      :access_token_ttl_seconds,
+      :refresh_token_ttl_seconds
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @max_age_seconds = hash[:max_age_seconds]
+      @access_token_ttl_seconds = hash[:access_token_ttl_seconds]
+      @refresh_token_ttl_seconds = hash[:refresh_token_ttl_seconds]
+    end
+  end
+end

data/lib/workos/agents/agent_blueprints_create_request.rb

@@ -0,0 +1,31 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class AgentBlueprintsCreateRequest < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      name: :name,
+      description: :description,
+      permissions: :permissions,
+      invocable_by: :invocable_by,
+      session_settings: :session_settings
+    }.freeze
+
+    attr_accessor \
+      :name,
+      :description,
+      :permissions,
+      :invocable_by,
+      :session_settings
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @name = hash[:name]
+      @description = hash[:description]
+      @permissions = hash[:permissions] || []
+      @invocable_by = hash[:invocable_by] ? WorkOS::AgentBlueprintsCreateRequestInvocableBy.new(hash[:invocable_by]) : nil
+      @session_settings = hash[:session_settings] ? WorkOS::AgentBlueprintsCreateRequestSessionSetting.new(hash[:session_settings]) : nil
+    end
+  end
+end

data/lib/workos/agents/agent_blueprints_create_request_invocable_by.rb

@@ -0,0 +1,22 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class AgentBlueprintsCreateRequestInvocableBy < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      role_slugs: :role_slugs,
+      organization_ids: :organization_ids
+    }.freeze
+
+    attr_accessor \
+      :role_slugs,
+      :organization_ids
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @role_slugs = hash[:role_slugs] || []
+      @organization_ids = hash[:organization_ids] || []
+    end
+  end
+end

data/lib/workos/agents/agent_blueprints_create_request_session_setting.rb

@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  AgentBlueprintsCreateRequestSessionSetting = AgentBlueprintSessionSetting
+end

data/lib/workos/agents/agent_blueprints_token_mint_token_request.rb

@@ -0,0 +1,34 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class AgentBlueprintsTokenMintTokenRequest < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      type: :type,
+      user_access_token: :user_access_token,
+      intent: :intent,
+      organization_id: :organization_id,
+      agent_access_token: :agent_access_token,
+      refresh_token: :refresh_token
+    }.freeze
+
+    attr_accessor \
+      :type,
+      :user_access_token,
+      :intent,
+      :organization_id,
+      :agent_access_token,
+      :refresh_token
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @type = hash[:type]
+      @user_access_token = hash[:user_access_token]
+      @intent = hash[:intent]
+      @organization_id = hash[:organization_id]
+      @agent_access_token = hash[:agent_access_token]
+      @refresh_token = hash[:refresh_token]
+    end
+  end
+end

data/lib/workos/agents/agent_blueprints_token_validate_token_request.rb

@@ -0,0 +1,18 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class AgentBlueprintsTokenValidateTokenRequest < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      agent_access_token: :agent_access_token
+    }.freeze
+
+    attr_accessor :agent_access_token
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @agent_access_token = hash[:agent_access_token]
+    end
+  end
+end

data/lib/workos/agents/agent_blueprints_update_request.rb

@@ -0,0 +1,31 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class AgentBlueprintsUpdateRequest < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      name: :name,
+      description: :description,
+      permissions: :permissions,
+      invocable_by: :invocable_by,
+      session_settings: :session_settings
+    }.freeze
+
+    attr_accessor \
+      :name,
+      :description,
+      :permissions,
+      :invocable_by,
+      :session_settings
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @name = hash[:name]
+      @description = hash[:description]
+      @permissions = hash[:permissions] || []
+      @invocable_by = hash[:invocable_by] ? WorkOS::AgentBlueprintsUpdateRequestInvocableBy.new(hash[:invocable_by]) : nil
+      @session_settings = hash[:session_settings] ? WorkOS::AgentBlueprintsUpdateRequestSessionSetting.new(hash[:session_settings]) : nil
+    end
+  end
+end

data/lib/workos/agents/agent_blueprints_update_request_invocable_by.rb

@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  AgentBlueprintsUpdateRequestInvocableBy = AgentBlueprintsCreateRequestInvocableBy
+end

data/lib/workos/agents/agent_blueprints_update_request_session_setting.rb

@@ -0,0 +1,25 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class AgentBlueprintsUpdateRequestSessionSetting < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      max_age_seconds: :max_age_seconds,
+      access_token_ttl_seconds: :access_token_ttl_seconds,
+      refresh_token_ttl_seconds: :refresh_token_ttl_seconds
+    }.freeze
+
+    attr_accessor \
+      :max_age_seconds,
+      :access_token_ttl_seconds,
+      :refresh_token_ttl_seconds
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @max_age_seconds = hash[:max_age_seconds]
+      @access_token_ttl_seconds = hash[:access_token_ttl_seconds]
+      @refresh_token_ttl_seconds = hash[:refresh_token_ttl_seconds]
+    end
+  end
+end

data/lib/workos/agents/agent_instance.rb

@@ -0,0 +1,40 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class AgentInstance < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      object: :object,
+      id: :id,
+      agent_blueprint_id: :agent_blueprint_id,
+      organization_id: :organization_id,
+      organization_membership_id: :organization_membership_id,
+      type: :type,
+      created_at: :created_at,
+      updated_at: :updated_at
+    }.freeze
+
+    attr_accessor \
+      :object,
+      :id,
+      :agent_blueprint_id,
+      :organization_id,
+      :organization_membership_id,
+      :type,
+      :created_at,
+      :updated_at
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @object = hash[:object]
+      @id = hash[:id]
+      @agent_blueprint_id = hash[:agent_blueprint_id]
+      @organization_id = hash[:organization_id]
+      @organization_membership_id = hash[:organization_membership_id]
+      @type = hash[:type]
+      @created_at = hash[:created_at]
+      @updated_at = hash[:updated_at]
+    end
+  end
+end

data/lib/workos/agents/agent_instance_session.rb

@@ -0,0 +1,40 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class AgentInstanceSession < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      object: :object,
+      id: :id,
+      agent_instance_id: :agent_instance_id,
+      status: :status,
+      expires_at: :expires_at,
+      revoked_at: :revoked_at,
+      created_at: :created_at,
+      updated_at: :updated_at
+    }.freeze
+
+    attr_accessor \
+      :object,
+      :id,
+      :agent_instance_id,
+      :status,
+      :expires_at,
+      :revoked_at,
+      :created_at,
+      :updated_at
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @object = hash[:object]
+      @id = hash[:id]
+      @agent_instance_id = hash[:agent_instance_id]
+      @status = hash[:status]
+      @expires_at = hash[:expires_at]
+      @revoked_at = hash[:revoked_at]
+      @created_at = hash[:created_at]
+      @updated_at = hash[:updated_at]
+    end
+  end
+end

data/lib/workos/agents/agent_token.rb

@@ -0,0 +1,40 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class AgentToken < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      access_token: :access_token,
+      token_type: :token_type,
+      expires_in: :expires_in,
+      refresh_token: :refresh_token,
+      agent_instance_id: :agent_instance_id,
+      new_instance: :new_instance,
+      agent_instance_session_id: :agent_instance_session_id,
+      permissions: :permissions
+    }.freeze
+
+    attr_accessor \
+      :access_token,
+      :token_type,
+      :expires_in,
+      :refresh_token,
+      :agent_instance_id,
+      :new_instance,
+      :agent_instance_session_id,
+      :permissions
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @access_token = hash[:access_token]
+      @token_type = hash[:token_type]
+      @expires_in = hash[:expires_in]
+      @refresh_token = hash[:refresh_token]
+      @agent_instance_id = hash[:agent_instance_id]
+      @new_instance = hash[:new_instance]
+      @agent_instance_session_id = hash[:agent_instance_session_id]
+      @permissions = hash[:permissions] || []
+    end
+  end
+end

data/lib/workos/agents/agent_token_validation.rb

@@ -0,0 +1,40 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class AgentTokenValidation < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      valid: :valid,
+      agent_instance_id: :agent_instance_id,
+      agent_instance_session_id: :agent_instance_session_id,
+      organization_id: :organization_id,
+      permissions: :permissions,
+      intent: :intent,
+      acting_user_id: :acting_user_id,
+      session_expires_at: :session_expires_at
+    }.freeze
+
+    attr_accessor \
+      :valid,
+      :agent_instance_id,
+      :agent_instance_session_id,
+      :organization_id,
+      :permissions,
+      :intent,
+      :acting_user_id,
+      :session_expires_at
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @valid = hash[:valid]
+      @agent_instance_id = hash[:agent_instance_id]
+      @agent_instance_session_id = hash[:agent_instance_session_id]
+      @organization_id = hash[:organization_id]
+      @permissions = hash[:permissions] || []
+      @intent = hash[:intent]
+      @acting_user_id = hash[:acting_user_id]
+      @session_expires_at = hash[:session_expires_at]
+    end
+  end
+end