workos 10.2.1 → 10.3.0

data/lib/workos/agents.rb

@@ -10,6 +10,223 @@ module WorkOS
       @client = client
     end
 
+    # List agent blueprints
+    # @param before [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
+    # @param after [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
+    # @param limit [Integer, nil] Upper limit on the number of objects to return, between `1` and `100`.
+    # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records).
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::Types::ListStruct<WorkOS::AgentBlueprint>]
+    def list_blueprints(
+      before: nil,
+      after: nil,
+      limit: 10,
+      order: "desc",
+      request_options: {}
+    )
+      params = {
+        "before" => before,
+        "after" => after,
+        "limit" => limit,
+        "order" => order
+      }.compact
+      response = @client.request(
+        method: :get,
+        path: "/agents/blueprints",
+        auth: true,
+        params: params,
+        request_options: request_options
+      )
+      fetch_next = ->(cursor) {
+        list_blueprints(
+          before: before,
+          after: cursor,
+          limit: limit,
+          order: order,
+          request_options: request_options
+        )
+      }
+      WorkOS::Types::ListStruct.from_response(
+        response,
+        model: WorkOS::AgentBlueprint,
+        filters: {before: before, limit: limit, order: order},
+        fetch_next: fetch_next
+      )
+    end
+
+    # Create an agent blueprint
+    # @param name [String] Human-readable name of the agent blueprint.
+    # @param description [String, nil] Human-readable description of the agent blueprint.
+    # @param permissions [Array<String>, nil] Permission slugs forming the ceiling on what sessions minted from this blueprint may do. Each slug must exist in the environment.
+    # @param invocable_by [WorkOS::AgentBlueprintsCreateRequestInvocableBy, nil] Who may mint sessions from this blueprint.
+    # @param session_settings [WorkOS::AgentBlueprintsCreateRequestSessionSetting, nil] Token and session lifetimes for sessions minted from this blueprint.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::AgentBlueprint]
+    def create_blueprint(
+      name:,
+      description: nil,
+      permissions: nil,
+      invocable_by: nil,
+      session_settings: nil,
+      request_options: {}
+    )
+      body = {
+        "name" => name,
+        "description" => description,
+        "permissions" => permissions,
+        "invocable_by" => invocable_by,
+        "session_settings" => session_settings
+      }.compact
+      response = @client.request(
+        method: :post,
+        path: "/agents/blueprints",
+        auth: true,
+        body: body,
+        request_options: request_options
+      )
+      result = WorkOS::AgentBlueprint.new(response.body)
+      result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
+      result
+    end
+
+    # Get an agent blueprint
+    # @param agent_blueprint_id [String] The unique ID of the agent blueprint.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::AgentBlueprint]
+    def get_blueprint(
+      agent_blueprint_id:,
+      request_options: {}
+    )
+      response = @client.request(
+        method: :get,
+        path: "/agents/blueprints/#{WorkOS::Util.encode_path(agent_blueprint_id)}",
+        auth: true,
+        request_options: request_options
+      )
+      result = WorkOS::AgentBlueprint.new(response.body)
+      result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
+      result
+    end
+
+    # Update an agent blueprint
+    # @param agent_blueprint_id [String] The unique ID of the agent blueprint.
+    # @param name [String, nil] Human-readable name of the agent blueprint.
+    # @param description [String, nil] Human-readable description of the agent blueprint. Pass `null` to clear it.
+    # @param permissions [Array<String>, nil] Permission slugs forming the ceiling on what sessions minted from this blueprint may do. Each slug must exist in the environment.
+    # @param invocable_by [WorkOS::AgentBlueprintsUpdateRequestInvocableBy, nil] Who may mint sessions from this blueprint. Omitted lists are left unchanged.
+    # @param session_settings [WorkOS::AgentBlueprintsUpdateRequestSessionSetting, nil] Token and session lifetimes for sessions minted from this blueprint. Omitted fields are left unchanged.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::AgentBlueprint]
+    def update_blueprint(
+      agent_blueprint_id:,
+      name: nil,
+      description: WorkOS::OMIT,
+      permissions: nil,
+      invocable_by: nil,
+      session_settings: nil,
+      request_options: {}
+    )
+      body = {
+        "name" => name,
+        "permissions" => permissions,
+        "invocable_by" => invocable_by,
+        "session_settings" => session_settings
+      }.compact
+      body["description"] = description unless description.equal?(WorkOS::OMIT)
+      response = @client.request(
+        method: :patch,
+        path: "/agents/blueprints/#{WorkOS::Util.encode_path(agent_blueprint_id)}",
+        auth: true,
+        body: body,
+        request_options: request_options
+      )
+      result = WorkOS::AgentBlueprint.new(response.body)
+      result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
+      result
+    end
+
+    # Delete an agent blueprint
+    # @param agent_blueprint_id [String] The unique ID of the agent blueprint.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [void]
+    def delete_blueprint(
+      agent_blueprint_id:,
+      request_options: {}
+    )
+      @client.request(
+        method: :delete,
+        path: "/agents/blueprints/#{WorkOS::Util.encode_path(agent_blueprint_id)}",
+        auth: true,
+        request_options: request_options
+      )
+      nil
+    end
+
+    # Mint an agent token
+    # @param agent_blueprint_id [String] The unique ID of the agent blueprint.
+    # @param type [WorkOS::Types::AgentBlueprintsTokenMintTokenRequestType] How the session is minted: `user_delegated`, `autonomous`, `agent_delegated`, or `refresh`.
+    # @param user_access_token [String, nil] The access token of the user delegating to the agent. The token identifies the user and organization; effective permissions are resolved server-side.
+    # @param intent [String, nil] Optional caller-supplied context, echoed as an object with a `text` field in the `intent` claim of the minted access token.
+    # @param organization_id [String, nil] The organization the agent acts within when operating as itself.
+    # @param agent_access_token [String, nil] The agent's own access token to exchange for a new session on the same instance. The token must have been minted from this blueprint; permissions are re-derived from current authority.
+    # @param refresh_token [String, nil] The refresh token issued with a previous agent access token. Refresh tokens are single-use: each refresh rotates it.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::AgentToken]
+    def create_blueprint_token(
+      agent_blueprint_id:,
+      type:,
+      user_access_token: nil,
+      intent: nil,
+      organization_id: nil,
+      agent_access_token: nil,
+      refresh_token: nil,
+      request_options: {}
+    )
+      body = {
+        "type" => type,
+        "user_access_token" => user_access_token,
+        "intent" => intent,
+        "organization_id" => organization_id,
+        "agent_access_token" => agent_access_token,
+        "refresh_token" => refresh_token
+      }.compact
+      response = @client.request(
+        method: :post,
+        path: "/agents/blueprints/#{WorkOS::Util.encode_path(agent_blueprint_id)}/tokens",
+        auth: true,
+        body: body,
+        request_options: request_options
+      )
+      result = WorkOS::AgentToken.new(response.body)
+      result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
+      result
+    end
+
+    # Validate an agent token
+    # @param agent_blueprint_id [String] The unique ID of the agent blueprint.
+    # @param agent_access_token [String] The agent access token (a JWT) to validate.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::AgentTokenValidation]
+    def validate_blueprint_token(
+      agent_blueprint_id:,
+      agent_access_token:,
+      request_options: {}
+    )
+      body = {
+        "agent_access_token" => agent_access_token
+      }
+      response = @client.request(
+        method: :post,
+        path: "/agents/blueprints/#{WorkOS::Util.encode_path(agent_blueprint_id)}/tokens/validate",
+        auth: true,
+        body: body,
+        request_options: request_options
+      )
+      result = WorkOS::AgentTokenValidation.new(response.body)
+      result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
+      result
+    end
+
     # Link a claim attempt to an external user
     # @param type [String] The operation to perform on the claim attempt. Currently only `link_external_user` is supported.
     # @param claim_attempt_token [String] The token identifying the claim attempt.
@@ -89,5 +306,183 @@ module WorkOS
       result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
       result
     end
+
+    # List agent instances
+    # @param before [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
+    # @param after [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
+    # @param limit [Integer, nil] Upper limit on the number of objects to return, between `1` and `100`.
+    # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records).
+    # @param organization_id [String, nil] Only return instances acting within this organization.
+    # @param agent_blueprint_id [String, nil] Only return instances minted from this blueprint.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::Types::ListStruct<WorkOS::AgentInstance>]
+    def list_instances(
+      before: nil,
+      after: nil,
+      limit: 10,
+      order: "desc",
+      organization_id: nil,
+      agent_blueprint_id: nil,
+      request_options: {}
+    )
+      params = {
+        "before" => before,
+        "after" => after,
+        "limit" => limit,
+        "order" => order,
+        "organization_id" => organization_id,
+        "agent_blueprint_id" => agent_blueprint_id
+      }.compact
+      response = @client.request(
+        method: :get,
+        path: "/agents/instances",
+        auth: true,
+        params: params,
+        request_options: request_options
+      )
+      fetch_next = ->(cursor) {
+        list_instances(
+          before: before,
+          after: cursor,
+          limit: limit,
+          order: order,
+          organization_id: organization_id,
+          agent_blueprint_id: agent_blueprint_id,
+          request_options: request_options
+        )
+      }
+      WorkOS::Types::ListStruct.from_response(
+        response,
+        model: WorkOS::AgentInstance,
+        filters: {before: before, limit: limit, order: order, organization_id: organization_id, agent_blueprint_id: agent_blueprint_id},
+        fetch_next: fetch_next
+      )
+    end
+
+    # Get an agent instance
+    # @param agent_instance_id [String] The unique ID of the agent instance.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::AgentInstance]
+    def get_instance(
+      agent_instance_id:,
+      request_options: {}
+    )
+      response = @client.request(
+        method: :get,
+        path: "/agents/instances/#{WorkOS::Util.encode_path(agent_instance_id)}",
+        auth: true,
+        request_options: request_options
+      )
+      result = WorkOS::AgentInstance.new(response.body)
+      result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
+      result
+    end
+
+    # Delete an agent instance
+    # @param agent_instance_id [String] The unique ID of the agent instance.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [void]
+    def delete_instance(
+      agent_instance_id:,
+      request_options: {}
+    )
+      @client.request(
+        method: :delete,
+        path: "/agents/instances/#{WorkOS::Util.encode_path(agent_instance_id)}",
+        auth: true,
+        request_options: request_options
+      )
+      nil
+    end
+
+    # List agent instance sessions
+    # @param before [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
+    # @param after [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
+    # @param limit [Integer, nil] Upper limit on the number of objects to return, between `1` and `100`.
+    # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records).
+    # @param agent_blueprint_id [String, nil] Only return sessions of instances minted from this blueprint.
+    # @param agent_instance_id [String, nil] Only return sessions belonging to this agent instance.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::Types::ListStruct<WorkOS::AgentInstanceSession>]
+    def list_sessions(
+      before: nil,
+      after: nil,
+      limit: 10,
+      order: "desc",
+      agent_blueprint_id: nil,
+      agent_instance_id: nil,
+      request_options: {}
+    )
+      params = {
+        "before" => before,
+        "after" => after,
+        "limit" => limit,
+        "order" => order,
+        "agent_blueprint_id" => agent_blueprint_id,
+        "agent_instance_id" => agent_instance_id
+      }.compact
+      response = @client.request(
+        method: :get,
+        path: "/agents/sessions",
+        auth: true,
+        params: params,
+        request_options: request_options
+      )
+      fetch_next = ->(cursor) {
+        list_sessions(
+          before: before,
+          after: cursor,
+          limit: limit,
+          order: order,
+          agent_blueprint_id: agent_blueprint_id,
+          agent_instance_id: agent_instance_id,
+          request_options: request_options
+        )
+      }
+      WorkOS::Types::ListStruct.from_response(
+        response,
+        model: WorkOS::AgentInstanceSession,
+        filters: {before: before, limit: limit, order: order, agent_blueprint_id: agent_blueprint_id, agent_instance_id: agent_instance_id},
+        fetch_next: fetch_next
+      )
+    end
+
+    # Get an agent instance session
+    # @param agent_instance_session_id [String] The unique ID of the agent instance session.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::AgentInstanceSession]
+    def get_session(
+      agent_instance_session_id:,
+      request_options: {}
+    )
+      response = @client.request(
+        method: :get,
+        path: "/agents/sessions/#{WorkOS::Util.encode_path(agent_instance_session_id)}",
+        auth: true,
+        request_options: request_options
+      )
+      result = WorkOS::AgentInstanceSession.new(response.body)
+      result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
+      result
+    end
+
+    # Revoke an agent instance session
+    # @param agent_instance_session_id [String] The unique ID of the agent instance session.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::AgentInstanceSession]
+    def revoke_session(
+      agent_instance_session_id:,
+      request_options: {}
+    )
+      response = @client.request(
+        method: :post,
+        path: "/agents/sessions/#{WorkOS::Util.encode_path(agent_instance_session_id)}/revoke",
+        auth: true,
+        request_options: request_options
+      )
+      result = WorkOS::AgentInstanceSession.new(response.body)
+      result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
+      result
+    end
   end
 end

data/lib/workos/api_keys/validate_api_key.rb

@@ -3,16 +3,5 @@
 # This file is auto-generated by oagen. Do not edit.
 
 module WorkOS
-  class ValidateApiKey < WorkOS::Types::BaseModel
-    HASH_ATTRS = {
-      value: :value
-    }.freeze
-
-    attr_accessor :value
-
-    def initialize(json)
-      hash = self.class.normalize(json)
-      @value = hash[:value]
-    end
-  end
+  ValidateApiKey = CreateSAMLIdpSigningCertificate
 end

data/lib/workos/audit_logs.rb

@@ -6,6 +6,18 @@ require "json"
 
 module WorkOS
   class AuditLogs
+    # Identifies the retention (period variant).
+    #
+    # @!attribute [r] retention_period
+    #   @return [WorkOS::Types::UpdateAuditLogsRetentionRetentionPeriod]
+    RetentionPeriod = Data.define(:retention_period)
+
+    # Identifies the retention (period in days variant).
+    #
+    # @!attribute [r] retention_period_in_days
+    #   @return [Integer]
+    RetentionPeriodInDays = Data.define(:retention_period_in_days)
+
     def initialize(client)
       @client = client
     end
@@ -31,17 +43,23 @@ module WorkOS
 
     # Set Retention
     # @param id [String] Unique identifier of the Organization.
-    # @param retention_period_in_days [Integer] The number of days Audit Log events will be retained. Valid values are `30` and `365`.
+    # @param retention [WorkOS::AuditLogs::RetentionPeriod, WorkOS::AuditLogs::RetentionPeriodInDays] Identifies the retention.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
     # @return [WorkOS::AuditLogsRetention]
     def update_organization_audit_logs_retention(
       id:,
-      retention_period_in_days:,
+      retention:,
       request_options: {}
     )
-      body = {
-        "retention_period_in_days" => retention_period_in_days
-      }
+      body = {}
+      case retention
+      when WorkOS::AuditLogs::RetentionPeriod
+        body["retention_period"] = retention.retention_period
+      when WorkOS::AuditLogs::RetentionPeriodInDays
+        body["retention_period_in_days"] = retention.retention_period_in_days
+      else
+        raise ArgumentError, "expected retention to be one of: WorkOS::AuditLogs::RetentionPeriod, WorkOS::AuditLogs::RetentionPeriodInDays, got #{retention.class}"
+      end
       response = @client.request(
         method: :put,
         path: "/organizations/#{WorkOS::Util.encode_path(id)}/audit_logs_retention",

data/lib/workos/authorization.rb

@@ -834,8 +834,8 @@ module WorkOS
         when WorkOS::Authorization::ParentResourceById
           body["parent_resource_id"] = parent_resource.parent_resource_id
         when WorkOS::Authorization::ParentResourceByExternalId
-          body["parent_resource_external_id"] = parent_resource.parent_resource_external_id
           body["parent_resource_type_slug"] = parent_resource.parent_resource_type_slug
+          body["parent_resource_external_id"] = parent_resource.parent_resource_external_id
         else
           raise ArgumentError, "expected parent_resource to be one of: WorkOS::Authorization::ParentResourceById, WorkOS::Authorization::ParentResourceByExternalId, got #{parent_resource.class}"
         end
@@ -1097,8 +1097,8 @@ module WorkOS
         when WorkOS::Authorization::ParentResourceById
           body["parent_resource_id"] = parent_resource.parent_resource_id
         when WorkOS::Authorization::ParentResourceByExternalId
-          body["parent_resource_external_id"] = parent_resource.parent_resource_external_id
           body["parent_resource_type_slug"] = parent_resource.parent_resource_type_slug
+          body["parent_resource_external_id"] = parent_resource.parent_resource_external_id
         else
           raise ArgumentError, "expected parent_resource to be one of: WorkOS::Authorization::ParentResourceById, WorkOS::Authorization::ParentResourceByExternalId, got #{parent_resource.class}"
         end
@@ -1157,8 +1157,8 @@ module WorkOS
         when WorkOS::Authorization::ParentResourceById
           body["parent_resource_id"] = parent_resource.parent_resource_id
         when WorkOS::Authorization::ParentResourceByExternalId
-          body["parent_resource_external_id"] = parent_resource.parent_resource_external_id
           body["parent_resource_type_slug"] = parent_resource.parent_resource_type_slug
+          body["parent_resource_external_id"] = parent_resource.parent_resource_external_id
         else
           raise ArgumentError, "expected parent_resource to be one of: WorkOS::Authorization::ParentResourceById, WorkOS::Authorization::ParentResourceByExternalId, got #{parent_resource.class}"
         end

data/lib/workos/client.rb

@@ -64,6 +64,10 @@ module WorkOS
       @groups ||= WorkOS::Groups.new(self)
     end
 
+    def platform_teams
+      @platform_teams ||= WorkOS::PlatformTeams.new(self)
+    end
+
     def admin_portal
       @admin_portal ||= WorkOS::AdminPortal.new(self)
     end

data/lib/workos/inflections.rb

@@ -45,15 +45,30 @@ WORKOS_INFLECTIONS = {
   "connection_saml_certificate_renewed_data_certificate_certificate_type" => "ConnectionSAMLCertificateRenewedDataCertificateCertificateType",
   "connection_saml_certificate_renewed_data_connection" => "ConnectionSAMLCertificateRenewedDataConnection",
   "cors_origin_response" => "CORSOriginResponse",
+  "create_connection_oidc_options" => "CreateConnectionOIDCOptions",
+  "create_connection_oidc_options_id_token_signature_algorithm" => "CreateConnectionOIDCOptionsIdTokenSignatureAlgorithm",
+  "create_connection_oidc_options_token_authentication_method" => "CreateConnectionOIDCOptionsTokenAuthenticationMethod",
+  "create_connection_saml_options" => "CreateConnectionSAMLOptions",
   "create_cors_origin" => "CreateCORSOrigin",
   "create_m2m_application" => "CreateM2MApplication",
   "create_oauth_application" => "CreateOAuthApplication",
+  "create_saml_idp_signing_certificate" => "CreateSAMLIdpSigningCertificate",
   "jwt_template_response" => "JWTTemplateResponse",
   "mfa_totp_session_authenticate_request" => "MFATotpSessionAuthenticateRequest",
+  "patch_connection_oidc_options" => "PatchConnectionOIDCOptions",
+  "patch_connection_oidc_options_id_token_signature_algorithm" => "PatchConnectionOIDCOptionsIdTokenSignatureAlgorithm",
+  "patch_connection_oidc_options_token_authentication_method" => "PatchConnectionOIDCOptionsTokenAuthenticationMethod",
+  "patch_connection_saml_options" => "PatchConnectionSAMLOptions",
   "pkce" => "PKCE",
+  "saml_idp_signing_certificate" => "SAMLIdpSigningCertificate",
+  "saml_idp_signing_certificate_list" => "SAMLIdpSigningCertificateList",
+  "saml_sp_encryption_certificate" => "SAMLSpEncryptionCertificate",
+  "saml_sp_encryption_certificate_list" => "SAMLSpEncryptionCertificateList",
+  "saml_sp_signing_certificate" => "SAMLSpSigningCertificate",
   "sso" => "SSO",
   "sso_authorize_url_response" => "SSOAuthorizeUrlResponse",
   "sso_device_authorization_request" => "SSODeviceAuthorizationRequest",
+  "sso_grant_type" => "SSOGrantType",
   "sso_logout_authorize_request" => "SSOLogoutAuthorizeRequest",
   "sso_logout_authorize_response" => "SSOLogoutAuthorizeResponse",
   "sso_provider" => "SSOProvider",

data/lib/workos/organizations/create_it_contact.rb

@@ -0,0 +1,18 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class CreateItContact < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      email: :email
+    }.freeze
+
+    attr_accessor :email
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @email = hash[:email]
+    end
+  end
+end

data/lib/workos/organizations/invite_it_contact.rb

@@ -0,0 +1,18 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class InviteItContact < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      intents: :intents
+    }.freeze
+
+    attr_accessor :intents
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @intents = hash[:intents] || []
+    end
+  end
+end

data/lib/workos/organizations/it_contact.rb

@@ -0,0 +1,31 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class ItContact < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      object: :object,
+      id: :id,
+      email: :email,
+      created_at: :created_at,
+      updated_at: :updated_at
+    }.freeze
+
+    attr_accessor \
+      :object,
+      :id,
+      :email,
+      :created_at,
+      :updated_at
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @object = hash[:object]
+      @id = hash[:id]
+      @email = hash[:email]
+      @created_at = hash[:created_at]
+      @updated_at = hash[:updated_at]
+    end
+  end
+end

data/lib/workos/organizations/it_contact_list.rb

@@ -0,0 +1,25 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class ItContactList < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      object: :object,
+      data: :data,
+      list_metadata: :list_metadata
+    }.freeze
+
+    attr_accessor \
+      :object,
+      :data,
+      :list_metadata
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @object = hash[:object]
+      @data = (hash[:data] || []).map { |item| item ? WorkOS::ItContact.new(item) : nil }
+      @list_metadata = hash[:list_metadata] ? WorkOS::ItContactListListMetadata.new(hash[:list_metadata]) : nil
+    end
+  end
+end

data/lib/workos/organizations/organization_input.rb

@@ -13,14 +13,23 @@ module WorkOS
       external_id: :external_id
     }.freeze
 
+    # @!attribute domains
+    #   @deprecated The domains associated with the organization. Deprecated in favor of `domain_data`.
+
     attr_accessor \
       :name,
       :allow_profiles_outside_organization,
-      :domains,
       :domain_data,
       :metadata,
       :external_id
 
+    def domains
+      warn "[DEPRECATION] `domains` is deprecated and will be removed in a future version.", uplevel: 1
+      @domains
+    end
+
+    attr_writer :domains
+
     def initialize(json)
       hash = self.class.normalize(json)
       @name = hash[:name]