workos 10.2.1 → 10.4.0

data/lib/workos/sso.rb

@@ -7,6 +7,30 @@ require "uri"
 
 module WorkOS
   class SSO
+    # Identifies the protocol options (saml variant).
+    #
+    # @!attribute [r] saml_options
+    #   @return [WorkOS::CreateConnectionSAMLOptions]
+    CreateProtocolOptionsSAML = Data.define(:saml_options)
+
+    # Identifies the protocol options (oidc variant).
+    #
+    # @!attribute [r] oidc_options
+    #   @return [WorkOS::CreateConnectionOIDCOptions]
+    CreateProtocolOptionsOIDC = Data.define(:oidc_options)
+
+    # Identifies the protocol options (saml variant).
+    #
+    # @!attribute [r] saml_options
+    #   @return [WorkOS::PatchConnectionSAMLOptions]
+    PatchProtocolOptionsSAML = Data.define(:saml_options)
+
+    # Identifies the protocol options (oidc variant).
+    #
+    # @!attribute [r] oidc_options
+    #   @return [WorkOS::PatchConnectionOIDCOptions]
+    PatchProtocolOptionsOIDC = Data.define(:oidc_options)
+
     def initialize(client)
       @client = client
     end
@@ -71,6 +95,228 @@ module WorkOS
       )
     end
 
+    # Create a Connection
+    # @param organization_id [String] Unique identifier for the Organization in which the Connection resides.
+    # @param name [String, nil] A human-readable name for the Connection. This will most commonly be the organization's name.
+    # @param external_id [String, nil] The customer-owned identifier for the Connection.
+    # @param connection_type [String, nil] The type of the Connection. Only SAML and OIDC connection types may be created. When omitted, the type is inferred from the provided options.
+    # @param attribute_maps [WorkOS::CreateConnectionAttributeMaps, nil] How IdP attributes or claims map onto WorkOS profile fields. Provided fields override the defaults for the connection type.
+    # @param protocol_options [WorkOS::SSO::CreateProtocolOptionsSAML, WorkOS::SSO::CreateProtocolOptionsOIDC] Identifies the protocol options.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::Connection]
+    def create_connection(
+      organization_id:,
+      protocol_options:,
+      name: nil,
+      external_id: nil,
+      connection_type: nil,
+      attribute_maps: nil,
+      request_options: {}
+    )
+      body = {
+        "organization_id" => organization_id,
+        "name" => name,
+        "external_id" => external_id,
+        "connection_type" => connection_type,
+        "attribute_maps" => attribute_maps
+      }.compact
+      case protocol_options
+      when WorkOS::SSO::CreateProtocolOptionsSAML
+        body["saml_options"] = protocol_options.saml_options
+      when WorkOS::SSO::CreateProtocolOptionsOIDC
+        body["oidc_options"] = protocol_options.oidc_options
+      else
+        raise ArgumentError, "expected protocol_options to be one of: WorkOS::SSO::CreateProtocolOptionsSAML, WorkOS::SSO::CreateProtocolOptionsOIDC, got #{protocol_options.class}"
+      end
+      response = @client.request(
+        method: :post,
+        path: "/connections",
+        auth: true,
+        body: body,
+        request_options: request_options
+      )
+      result = WorkOS::Connection.new(response.body)
+      result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
+      result
+    end
+
+    # List IdP signing certificates
+    # @param connection_id [String] Unique identifier for the Connection.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::SAMLIdpSigningCertificateList]
+    def list_connection_saml_idp_signing_certs(
+      connection_id:,
+      request_options: {}
+    )
+      response = @client.request(
+        method: :get,
+        path: "/connections/#{WorkOS::Util.encode_path(connection_id)}/saml_idp_signing_certs",
+        auth: true,
+        request_options: request_options
+      )
+      result = WorkOS::SAMLIdpSigningCertificateList.new(response.body)
+      result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
+      result
+    end
+
+    # Create an IdP signing certificate
+    # @param connection_id [String] Unique identifier for the Connection.
+    # @param value [String] The PEM-encoded X.509 certificate.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::SAMLIdpSigningCertificate]
+    def create_connection_saml_idp_signing_cert(
+      connection_id:,
+      value:,
+      request_options: {}
+    )
+      body = {
+        "value" => value
+      }
+      response = @client.request(
+        method: :post,
+        path: "/connections/#{WorkOS::Util.encode_path(connection_id)}/saml_idp_signing_certs",
+        auth: true,
+        body: body,
+        request_options: request_options
+      )
+      result = WorkOS::SAMLIdpSigningCertificate.new(response.body)
+      result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
+      result
+    end
+
+    # Delete an IdP signing certificate
+    # @param connection_id [String] Unique identifier for the Connection.
+    # @param certificate_id [String] Unique identifier for the Identity Provider signing certificate.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [void]
+    def delete_connection_saml_idp_signing_cert(
+      connection_id:,
+      certificate_id:,
+      request_options: {}
+    )
+      @client.request(
+        method: :delete,
+        path: "/connections/#{WorkOS::Util.encode_path(connection_id)}/saml_idp_signing_certs/#{WorkOS::Util.encode_path(certificate_id)}",
+        auth: true,
+        request_options: request_options
+      )
+      nil
+    end
+
+    # List SP encryption certificates
+    # @param connection_id [String] Unique identifier for the Connection.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::SAMLSpEncryptionCertificateList]
+    def list_connection_saml_sp_encryption_certs(
+      connection_id:,
+      request_options: {}
+    )
+      response = @client.request(
+        method: :get,
+        path: "/connections/#{WorkOS::Util.encode_path(connection_id)}/saml_sp_encryption_certs",
+        auth: true,
+        request_options: request_options
+      )
+      result = WorkOS::SAMLSpEncryptionCertificateList.new(response.body)
+      result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
+      result
+    end
+
+    # Create an SP encryption certificate
+    # @param connection_id [String] Unique identifier for the Connection.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::SAMLSpEncryptionCertificate]
+    def create_connection_saml_sp_encryption_cert(
+      connection_id:,
+      request_options: {}
+    )
+      response = @client.request(
+        method: :post,
+        path: "/connections/#{WorkOS::Util.encode_path(connection_id)}/saml_sp_encryption_certs",
+        auth: true,
+        request_options: request_options
+      )
+      result = WorkOS::SAMLSpEncryptionCertificate.new(response.body)
+      result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
+      result
+    end
+
+    # Delete an SP encryption certificate
+    # @param connection_id [String] Unique identifier for the Connection.
+    # @param certificate_id [String] Unique identifier for the Service Provider encryption key pair. WorkOS holds the corresponding private key, which is never exposed.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [void]
+    def delete_connection_saml_sp_encryption_cert(
+      connection_id:,
+      certificate_id:,
+      request_options: {}
+    )
+      @client.request(
+        method: :delete,
+        path: "/connections/#{WorkOS::Util.encode_path(connection_id)}/saml_sp_encryption_certs/#{WorkOS::Util.encode_path(certificate_id)}",
+        auth: true,
+        request_options: request_options
+      )
+      nil
+    end
+
+    # Get the SP signing certificate
+    # @param connection_id [String] Unique identifier for the Connection.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::SAMLSpSigningCertificate]
+    def list_connection_saml_sp_signing_cert(
+      connection_id:,
+      request_options: {}
+    )
+      response = @client.request(
+        method: :get,
+        path: "/connections/#{WorkOS::Util.encode_path(connection_id)}/saml_sp_signing_cert",
+        auth: true,
+        request_options: request_options
+      )
+      result = WorkOS::SAMLSpSigningCertificate.new(response.body)
+      result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
+      result
+    end
+
+    # Create an SP signing certificate
+    # @param connection_id [String] Unique identifier for the Connection.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::SAMLSpSigningCertificate]
+    def create_connection_saml_sp_signing_cert(
+      connection_id:,
+      request_options: {}
+    )
+      response = @client.request(
+        method: :post,
+        path: "/connections/#{WorkOS::Util.encode_path(connection_id)}/saml_sp_signing_cert",
+        auth: true,
+        request_options: request_options
+      )
+      result = WorkOS::SAMLSpSigningCertificate.new(response.body)
+      result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
+      result
+    end
+
+    # Delete the SP signing certificate
+    # @param connection_id [String] Unique identifier for the Connection.
+    # @param certificate_id [String] Unique identifier for the Service Provider signing key pair. WorkOS holds the corresponding private key, which is never exposed.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [void]
+    def delete_connection_saml_sp_signing_cert(
+      connection_id:,
+      certificate_id:,
+      request_options: {}
+    )
+      @client.request(
+        method: :delete,
+        path: "/connections/#{WorkOS::Util.encode_path(connection_id)}/saml_sp_signing_cert/#{WorkOS::Util.encode_path(certificate_id)}",
+        auth: true,
+        request_options: request_options
+      )
+      nil
+    end
+
     # Get a Connection
     # @param id [String] Unique identifier for the Connection.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
@@ -90,6 +336,52 @@ module WorkOS
       result
     end
 
+    # Update a Connection
+    # @param id [String] Unique identifier for the Connection.
+    # @param name [String, nil] A human-readable name for the Connection.
+    # @param external_id [String, nil] The customer-owned identifier for the Connection. Set to `null` to stop tracking one.
+    # @param connection_type [String, nil] The type of the Connection. Immutable after creation — it may be sent, but only with the Connection current type.
+    # @param attribute_maps [WorkOS::PatchConnectionAttributeMaps, nil] How IdP attributes or claims map onto WorkOS profile fields. Only the provided fields are updated.
+    # @param protocol_options [WorkOS::SSO::PatchProtocolOptionsSAML, WorkOS::SSO::PatchProtocolOptionsOIDC, nil] Identifies the protocol options.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::Connection]
+    def update_connection(
+      id:,
+      name: nil,
+      external_id: WorkOS::OMIT,
+      connection_type: nil,
+      attribute_maps: nil,
+      protocol_options: nil,
+      request_options: {}
+    )
+      body = {
+        "name" => name,
+        "connection_type" => connection_type,
+        "attribute_maps" => attribute_maps
+      }.compact
+      body["external_id"] = external_id unless external_id.equal?(WorkOS::OMIT)
+      if protocol_options
+        case protocol_options
+        when WorkOS::SSO::PatchProtocolOptionsSAML
+          body["saml_options"] = protocol_options.saml_options
+        when WorkOS::SSO::PatchProtocolOptionsOIDC
+          body["oidc_options"] = protocol_options.oidc_options
+        else
+          raise ArgumentError, "expected protocol_options to be one of: WorkOS::SSO::PatchProtocolOptionsSAML, WorkOS::SSO::PatchProtocolOptionsOIDC, got #{protocol_options.class}"
+        end
+      end
+      response = @client.request(
+        method: :patch,
+        path: "/connections/#{WorkOS::Util.encode_path(id)}",
+        auth: true,
+        body: body,
+        request_options: request_options
+      )
+      result = WorkOS::Connection.new(response.body)
+      result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
+      result
+    end
+
     # Delete a Connection
     # @param id [String] Unique identifier for the Connection.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
@@ -214,19 +506,28 @@ module WorkOS
     end
 
     # Get a Profile and Token
-    # @param code [String] The authorization code received from the authorization callback.
+    # @param code [String, nil] The authorization code received from the authorization callback. Required when `grant_type` is `authorization_code`.
+    # @param subject_token [String, nil] The OIDC ID token to exchange. Required when `grant_type` is `urn:ietf:params:oauth:grant-type:token-exchange`. Must be sent in the request body.
+    # @param subject_token_type [String, nil] The type of the subject token. Required when `grant_type` is `urn:ietf:params:oauth:grant-type:token-exchange`. Must be sent in the request body.
+    # @param organization_id [String, nil] The ID of the organization whose connection the subject token is validated against. Required when `grant_type` is `urn:ietf:params:oauth:grant-type:token-exchange`. Must be sent in the request body.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
     # @return [WorkOS::SSOTokenResponse]
     def get_profile_and_token(
-      code:,
+      code: nil,
+      subject_token: nil,
+      subject_token_type: nil,
+      organization_id: nil,
       request_options: {}
     )
       body = {
         "grant_type" => "authorization_code",
         "client_id" => request_options[:client_id] || @client.client_id,
         "client_secret" => request_options[:api_key] || @client.api_key,
-        "code" => code
-      }
+        "code" => code,
+        "subject_token" => subject_token,
+        "subject_token_type" => subject_token_type,
+        "organization_id" => organization_id
+      }.compact
       response = @client.request(
         method: :post,
         path: "/sso/token",

data/lib/workos/types/agent_blueprints_token_mint_token_request_type.rb

@@ -0,0 +1,15 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  module Types
+    class AgentBlueprintsTokenMintTokenRequestType
+      USER_DELEGATED = "user_delegated"
+      AUTONOMOUS = "autonomous"
+      AGENT_DELEGATED = "agent_delegated"
+      REFRESH = "refresh"
+      ALL = [USER_DELEGATED, AUTONOMOUS, AGENT_DELEGATED, REFRESH].freeze
+    end
+  end
+end

data/lib/workos/types/agent_instance_created_data_type.rb

@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  module Types
+    class AgentInstanceCreatedDataType
+      DELEGATED = "delegated"
+      AUTONOMOUS = "autonomous"
+      ALL = [DELEGATED, AUTONOMOUS].freeze
+    end
+  end
+end

data/lib/workos/types/agent_instance_deleted_data_type.rb

@@ -0,0 +1,9 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  module Types
+    AgentInstanceDeletedDataType = AgentInstanceCreatedDataType
+  end
+end

data/lib/workos/types/agent_instance_session_status.rb

@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  module Types
+    class AgentInstanceSessionStatus
+      ACTIVE = "active"
+      REVOKED = "revoked"
+      EXPIRED = "expired"
+      ALL = [ACTIVE, REVOKED, EXPIRED].freeze
+    end
+  end
+end

data/lib/workos/types/agent_instance_type.rb

@@ -0,0 +1,9 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  module Types
+    AgentInstanceType = AgentInstanceCreatedDataType
+  end
+end

data/lib/workos/types/authenticate_response_authentication_method.rb

@@ -11,13 +11,10 @@ module WorkOS
       APPLE_OAUTH = "AppleOAuth"
       BITBUCKET_OAUTH = "BitbucketOAuth"
       CROSS_APP_AUTH = "CrossAppAuth"
-      DISCORD_OAUTH = "DiscordOAuth"
       EXTERNAL_AUTH = "ExternalAuth"
       GIT_HUB_OAUTH = "GitHubOAuth"
       GIT_LAB_OAUTH = "GitLabOAuth"
       GOOGLE_OAUTH = "GoogleOAuth"
-      GROK_OAUTH = "GrokOAuth"
-      XO_AUTH = "XOAuth"
       INTUIT_OAUTH = "IntuitOAuth"
       LINKED_IN_OAUTH = "LinkedInOAuth"
       MICROSOFT_OAUTH = "MicrosoftOAuth"
@@ -29,7 +26,7 @@ module WorkOS
       MAGIC_AUTH = "MagicAuth"
       IMPERSONATION = "Impersonation"
       MIGRATED_SESSION = "MigratedSession"
-      ALL = [SSO, PASSWORD, PASSKEY, APPLE_OAUTH, BITBUCKET_OAUTH, CROSS_APP_AUTH, DISCORD_OAUTH, EXTERNAL_AUTH, GIT_HUB_OAUTH, GIT_LAB_OAUTH, GOOGLE_OAUTH, GROK_OAUTH, XO_AUTH, INTUIT_OAUTH, LINKED_IN_OAUTH, MICROSOFT_OAUTH, SALESFORCE_OAUTH, SLACK_OAUTH, VERCEL_MARKETPLACE_OAUTH, VERCEL_OAUTH, XERO_OAUTH, MAGIC_AUTH, IMPERSONATION, MIGRATED_SESSION].freeze
+      ALL = [SSO, PASSWORD, PASSKEY, APPLE_OAUTH, BITBUCKET_OAUTH, CROSS_APP_AUTH, EXTERNAL_AUTH, GIT_HUB_OAUTH, GIT_LAB_OAUTH, GOOGLE_OAUTH, INTUIT_OAUTH, LINKED_IN_OAUTH, MICROSOFT_OAUTH, SALESFORCE_OAUTH, SLACK_OAUTH, VERCEL_MARKETPLACE_OAUTH, VERCEL_OAUTH, XERO_OAUTH, MAGIC_AUTH, IMPERSONATION, MIGRATED_SESSION].freeze
     end
   end
 end

data/lib/workos/types/connected_account_connection_role.rb

@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  module Types
+    class ConnectedAccountConnectionRole
+      COMPATIBILITY = "compatibility"
+      STANDARD = "standard"
+      ALL = [COMPATIBILITY, STANDARD].freeze
+    end
+  end
+end

data/lib/workos/types/connection_activated_data_connection_type.rb

@@ -17,7 +17,6 @@ module WorkOS
       CLEVER_OIDC = "CleverOIDC"
       CLOUDFLARE_SAML = "CloudflareSAML"
       CYBER_ARK_SAML = "CyberArkSAML"
-      DISCORD_OAUTH = "DiscordOAuth"
       DUO_SAML = "DuoSAML"
       ENTRA_ID_OIDC = "EntraIdOIDC"
       GENERIC_OIDC = "GenericOIDC"
@@ -27,8 +26,6 @@ module WorkOS
       GOOGLE_OAUTH = "GoogleOAuth"
       GOOGLE_OIDC = "GoogleOIDC"
       GOOGLE_SAML = "GoogleSAML"
-      GROK_OAUTH = "GrokOAuth"
-      XO_AUTH = "XOAuth"
       INTUIT_OAUTH = "IntuitOAuth"
       JUMP_CLOUD_SAML = "JumpCloudSAML"
       KEYCLOAK_SAML = "KeycloakSAML"
@@ -57,7 +54,7 @@ module WorkOS
       VERCEL_OAUTH = "VercelOAuth"
       V_MWARE_SAML = "VMwareSAML"
       XERO_OAUTH = "XeroOAuth"
-      ALL = [ADFSSAML, ADP_OIDC, APPLE_OAUTH, AUTH_0_MIGRATION, AUTH_0_SAML, AZURE_SAML, BITBUCKET_OAUTH, CAS_SAML, CLASS_LINK_SAML, CLEVER_OIDC, CLOUDFLARE_SAML, CYBER_ARK_SAML, DISCORD_OAUTH, DUO_SAML, ENTRA_ID_OIDC, GENERIC_OIDC, GENERIC_SAML, GIT_HUB_OAUTH, GIT_LAB_OAUTH, GOOGLE_OAUTH, GOOGLE_OIDC, GOOGLE_SAML, GROK_OAUTH, XO_AUTH, INTUIT_OAUTH, JUMP_CLOUD_SAML, KEYCLOAK_SAML, LAST_PASS_SAML, LINKED_IN_OAUTH, LOGIN_GOV_OIDC, MAGIC_LINK, MICROSOFT_OAUTH, MINI_ORANGE_SAML, NET_IQ_SAML, OKTA_OIDC, OKTA_SAML, ONE_LOGIN_SAML, ORACLE_SAML, PING_FEDERATE_SAML, PING_ONE_SAML, RIPPLING_SAML, SALESFORCE_SAML, SHIBBOLETH_GENERIC_SAML, SHIBBOLETH_SAML, SIMPLE_SAML_PHP_SAML, SALESFORCE_OAUTH, SLACK_OAUTH, TEST_IDP, VERCEL_MARKETPLACE_OAUTH, VERCEL_OAUTH, V_MWARE_SAML, XERO_OAUTH].freeze
+      ALL = [ADFSSAML, ADP_OIDC, APPLE_OAUTH, AUTH_0_MIGRATION, AUTH_0_SAML, AZURE_SAML, BITBUCKET_OAUTH, CAS_SAML, CLASS_LINK_SAML, CLEVER_OIDC, CLOUDFLARE_SAML, CYBER_ARK_SAML, DUO_SAML, ENTRA_ID_OIDC, GENERIC_OIDC, GENERIC_SAML, GIT_HUB_OAUTH, GIT_LAB_OAUTH, GOOGLE_OAUTH, GOOGLE_OIDC, GOOGLE_SAML, INTUIT_OAUTH, JUMP_CLOUD_SAML, KEYCLOAK_SAML, LAST_PASS_SAML, LINKED_IN_OAUTH, LOGIN_GOV_OIDC, MAGIC_LINK, MICROSOFT_OAUTH, MINI_ORANGE_SAML, NET_IQ_SAML, OKTA_OIDC, OKTA_SAML, ONE_LOGIN_SAML, ORACLE_SAML, PING_FEDERATE_SAML, PING_ONE_SAML, RIPPLING_SAML, SALESFORCE_SAML, SHIBBOLETH_GENERIC_SAML, SHIBBOLETH_SAML, SIMPLE_SAML_PHP_SAML, SALESFORCE_OAUTH, SLACK_OAUTH, TEST_IDP, VERCEL_MARKETPLACE_OAUTH, VERCEL_OAUTH, V_MWARE_SAML, XERO_OAUTH].freeze
     end
   end
 end

data/lib/workos/types/connection_type.rb

@@ -18,7 +18,6 @@ module WorkOS
       CLEVER_OIDC = "CleverOIDC"
       CLOUDFLARE_SAML = "CloudflareSAML"
       CYBER_ARK_SAML = "CyberArkSAML"
-      DISCORD_OAUTH = "DiscordOAuth"
       DUO_SAML = "DuoSAML"
       ENTRA_ID_OIDC = "EntraIdOIDC"
       GENERIC_OIDC = "GenericOIDC"
@@ -28,8 +27,6 @@ module WorkOS
       GOOGLE_OAUTH = "GoogleOAuth"
       GOOGLE_OIDC = "GoogleOIDC"
       GOOGLE_SAML = "GoogleSAML"
-      GROK_OAUTH = "GrokOAuth"
-      XO_AUTH = "XOAuth"
       INTUIT_OAUTH = "IntuitOAuth"
       JUMP_CLOUD_SAML = "JumpCloudSAML"
       KEYCLOAK_SAML = "KeycloakSAML"
@@ -58,7 +55,7 @@ module WorkOS
       VERCEL_OAUTH = "VercelOAuth"
       V_MWARE_SAML = "VMwareSAML"
       XERO_OAUTH = "XeroOAuth"
-      ALL = [PENDING, ADFSSAML, ADP_OIDC, APPLE_OAUTH, AUTH_0_MIGRATION, AUTH_0_SAML, AZURE_SAML, BITBUCKET_OAUTH, CAS_SAML, CLASS_LINK_SAML, CLEVER_OIDC, CLOUDFLARE_SAML, CYBER_ARK_SAML, DISCORD_OAUTH, DUO_SAML, ENTRA_ID_OIDC, GENERIC_OIDC, GENERIC_SAML, GIT_HUB_OAUTH, GIT_LAB_OAUTH, GOOGLE_OAUTH, GOOGLE_OIDC, GOOGLE_SAML, GROK_OAUTH, XO_AUTH, INTUIT_OAUTH, JUMP_CLOUD_SAML, KEYCLOAK_SAML, LAST_PASS_SAML, LINKED_IN_OAUTH, LOGIN_GOV_OIDC, MAGIC_LINK, MICROSOFT_OAUTH, MINI_ORANGE_SAML, NET_IQ_SAML, OKTA_OIDC, OKTA_SAML, ONE_LOGIN_SAML, ORACLE_SAML, PING_FEDERATE_SAML, PING_ONE_SAML, RIPPLING_SAML, SALESFORCE_SAML, SHIBBOLETH_GENERIC_SAML, SHIBBOLETH_SAML, SIMPLE_SAML_PHP_SAML, SALESFORCE_OAUTH, SLACK_OAUTH, TEST_IDP, VERCEL_MARKETPLACE_OAUTH, VERCEL_OAUTH, V_MWARE_SAML, XERO_OAUTH].freeze
+      ALL = [PENDING, ADFSSAML, ADP_OIDC, APPLE_OAUTH, AUTH_0_MIGRATION, AUTH_0_SAML, AZURE_SAML, BITBUCKET_OAUTH, CAS_SAML, CLASS_LINK_SAML, CLEVER_OIDC, CLOUDFLARE_SAML, CYBER_ARK_SAML, DUO_SAML, ENTRA_ID_OIDC, GENERIC_OIDC, GENERIC_SAML, GIT_HUB_OAUTH, GIT_LAB_OAUTH, GOOGLE_OAUTH, GOOGLE_OIDC, GOOGLE_SAML, INTUIT_OAUTH, JUMP_CLOUD_SAML, KEYCLOAK_SAML, LAST_PASS_SAML, LINKED_IN_OAUTH, LOGIN_GOV_OIDC, MAGIC_LINK, MICROSOFT_OAUTH, MINI_ORANGE_SAML, NET_IQ_SAML, OKTA_OIDC, OKTA_SAML, ONE_LOGIN_SAML, ORACLE_SAML, PING_FEDERATE_SAML, PING_ONE_SAML, RIPPLING_SAML, SALESFORCE_SAML, SHIBBOLETH_GENERIC_SAML, SHIBBOLETH_SAML, SIMPLE_SAML_PHP_SAML, SALESFORCE_OAUTH, SLACK_OAUTH, TEST_IDP, VERCEL_MARKETPLACE_OAUTH, VERCEL_OAUTH, V_MWARE_SAML, XERO_OAUTH].freeze
     end
   end
 end

data/lib/workos/types/connections_connection_type.rb

@@ -16,7 +16,6 @@ module WorkOS
       CLASS_LINK_SAML = "ClassLinkSAML"
       CLEVER_OIDC = "CleverOIDC"
       CYBER_ARK_SAML = "CyberArkSAML"
-      DISCORD_OAUTH = "DiscordOAuth"
       DUO_SAML = "DuoSAML"
       ENTRA_ID_OIDC = "EntraIdOIDC"
       GENERIC_OIDC = "GenericOIDC"
@@ -26,8 +25,6 @@ module WorkOS
       GOOGLE_OAUTH = "GoogleOAuth"
       GOOGLE_OIDC = "GoogleOIDC"
       GOOGLE_SAML = "GoogleSAML"
-      GROK_OAUTH = "GrokOAuth"
-      XO_AUTH = "XOAuth"
       INTUIT_OAUTH = "IntuitOAuth"
       JUMP_CLOUD_SAML = "JumpCloudSAML"
       KEYCLOAK_SAML = "KeycloakSAML"
@@ -55,7 +52,7 @@ module WorkOS
       VERCEL_OAUTH = "VercelOAuth"
       V_MWARE_SAML = "VMwareSAML"
       XERO_OAUTH = "XeroOAuth"
-      ALL = [ADFSSAML, ADP_OIDC, APPLE_OAUTH, AUTH_0_SAML, AZURE_SAML, BITBUCKET_OAUTH, CAS_SAML, CLOUDFLARE_SAML, CLASS_LINK_SAML, CLEVER_OIDC, CYBER_ARK_SAML, DISCORD_OAUTH, DUO_SAML, ENTRA_ID_OIDC, GENERIC_OIDC, GENERIC_SAML, GITHUB_OAUTH, GIT_LAB_OAUTH, GOOGLE_OAUTH, GOOGLE_OIDC, GOOGLE_SAML, GROK_OAUTH, XO_AUTH, INTUIT_OAUTH, JUMP_CLOUD_SAML, KEYCLOAK_SAML, LAST_PASS_SAML, LINKED_IN_OAUTH, LOGIN_GOV_OIDC, MAGIC_LINK, MICROSOFT_OAUTH, MINI_ORANGE_SAML, NET_IQ_SAML, OKTA_OIDC, OKTA_SAML, ONE_LOGIN_SAML, ORACLE_SAML, PING_FEDERATE_SAML, PING_ONE_SAML, RIPPLING_SAML, SALESFORCE_SAML, SHIBBOLETH_GENERIC_SAML, SHIBBOLETH_SAML, SIMPLE_SAML_PHP_SAML, SALESFORCE_OAUTH, SLACK_OAUTH, VERCEL_MARKETPLACE_OAUTH, VERCEL_OAUTH, V_MWARE_SAML, XERO_OAUTH].freeze
+      ALL = [ADFSSAML, ADP_OIDC, APPLE_OAUTH, AUTH_0_SAML, AZURE_SAML, BITBUCKET_OAUTH, CAS_SAML, CLOUDFLARE_SAML, CLASS_LINK_SAML, CLEVER_OIDC, CYBER_ARK_SAML, DUO_SAML, ENTRA_ID_OIDC, GENERIC_OIDC, GENERIC_SAML, GITHUB_OAUTH, GIT_LAB_OAUTH, GOOGLE_OAUTH, GOOGLE_OIDC, GOOGLE_SAML, INTUIT_OAUTH, JUMP_CLOUD_SAML, KEYCLOAK_SAML, LAST_PASS_SAML, LINKED_IN_OAUTH, LOGIN_GOV_OIDC, MAGIC_LINK, MICROSOFT_OAUTH, MINI_ORANGE_SAML, NET_IQ_SAML, OKTA_OIDC, OKTA_SAML, ONE_LOGIN_SAML, ORACLE_SAML, PING_FEDERATE_SAML, PING_ONE_SAML, RIPPLING_SAML, SALESFORCE_SAML, SHIBBOLETH_GENERIC_SAML, SHIBBOLETH_SAML, SIMPLE_SAML_PHP_SAML, SALESFORCE_OAUTH, SLACK_OAUTH, VERCEL_MARKETPLACE_OAUTH, VERCEL_OAUTH, V_MWARE_SAML, XERO_OAUTH].freeze
     end
   end
 end

data/lib/workos/types/create_connection_oidc_options_id_token_signature_algorithm.rb

@@ -0,0 +1,24 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  module Types
+    class CreateConnectionOIDCOptionsIdTokenSignatureAlgorithm
+      ES_256 = "ES256"
+      ES_384 = "ES384"
+      ES_512 = "ES512"
+      ED_DSA = "EdDSA"
+      HS_256 = "HS256"
+      HS_384 = "HS384"
+      HS_512 = "HS512"
+      PS_256 = "PS256"
+      PS_384 = "PS384"
+      PS_512 = "PS512"
+      RS_256 = "RS256"
+      RS_384 = "RS384"
+      RS_512 = "RS512"
+      ALL = [ES_256, ES_384, ES_512, ED_DSA, HS_256, HS_384, HS_512, PS_256, PS_384, PS_512, RS_256, RS_384, RS_512].freeze
+    end
+  end
+end

data/lib/workos/types/create_connection_oidc_options_token_authentication_method.rb

@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  module Types
+    class CreateConnectionOIDCOptionsTokenAuthenticationMethod
+      CLIENT_SECRET_POST = "client_secret_post"
+      CLIENT_SECRET_BASIC = "client_secret_basic"
+      PRIVATE_KEY_JWT = "private_key_jwt"
+      ALL = [CLIENT_SECRET_POST, CLIENT_SECRET_BASIC, PRIVATE_KEY_JWT].freeze
+    end
+  end
+end

data/lib/workos/types/create_data_integration_ownership.rb

@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  module Types
+    class CreateDataIntegrationOwnership
+      USER = "user"
+      ORGANIZATION = "organization"
+      ALL = [USER, ORGANIZATION].freeze
+    end
+  end
+end

data/lib/workos/types/create_webhook_endpoint_events.rb

@@ -5,6 +5,13 @@
 module WorkOS
   module Types
     class CreateWebhookEndpointEvents
+      AGENT_BLUEPRINT_CREATED = "agent.blueprint.created"
+      AGENT_BLUEPRINT_DELETED = "agent.blueprint.deleted"
+      AGENT_BLUEPRINT_UPDATED = "agent.blueprint.updated"
+      AGENT_INSTANCE_CREATED = "agent.instance.created"
+      AGENT_INSTANCE_DELETED = "agent.instance.deleted"
+      AGENT_INSTANCE_SESSION_CREATED = "agent.instance.session.created"
+      AGENT_INSTANCE_SESSION_REVOKED = "agent.instance.session.revoked"
       AGENT_REGISTRATION_CREATED = "agent.registration.created"
       AGENT_REGISTRATION_CLAIM_ATTEMPT_CREATED = "agent.registration.claim.attempt.created"
       AGENT_REGISTRATION_CLAIM_COMPLETED = "agent.registration.claim.completed"
@@ -89,6 +96,11 @@ module WorkOS
       PERMISSION_CREATED = "permission.created"
       PERMISSION_DELETED = "permission.deleted"
       PERMISSION_UPDATED = "permission.updated"
+      PIPES_ACCOUNT_CONNECTION_ADD_FAILED = "pipes.account_connection.add_failed"
+      PIPES_ACCOUNT_CONNECTION_CONNECTED = "pipes.account_connection.connected"
+      PIPES_ACCOUNT_CONNECTION_CONNECTION_FAILED = "pipes.account_connection.connection_failed"
+      PIPES_ACCOUNT_CONNECTION_DISCONNECTED = "pipes.account_connection.disconnected"
+      PIPES_ACCOUNT_CONNECTION_REAUTHORIZATION_NEEDED = "pipes.account_connection.reauthorization_needed"
       PIPES_CONNECTED_ACCOUNT_CONNECTED = "pipes.connected_account.connected"
       PIPES_CONNECTED_ACCOUNT_CONNECTION_FAILED = "pipes.connected_account.connection_failed"
       PIPES_CONNECTED_ACCOUNT_DISCONNECTED = "pipes.connected_account.disconnected"
@@ -98,7 +110,7 @@ module WorkOS
       WAITLIST_USER_APPROVED = "waitlist_user.approved"
       WAITLIST_USER_CREATED = "waitlist_user.created"
       WAITLIST_USER_DENIED = "waitlist_user.denied"
-      ALL = [AGENT_REGISTRATION_CREATED, AGENT_REGISTRATION_CLAIM_ATTEMPT_CREATED, AGENT_REGISTRATION_CLAIM_COMPLETED, AGENT_REGISTRATION_CREDENTIAL_ISSUED, AGENT_REGISTRATION_DELETED, AGENT_REGISTRATION_REFRESHED, AGENT_REGISTRATION_EXPIRED, AGENT_REGISTRATION_ORGANIZATION_SWITCHED, AGENT_REGISTRATION_REVOKED, AUTHENTICATION_EMAIL_VERIFICATION_SUCCEEDED, AUTHENTICATION_MAGIC_AUTH_FAILED, AUTHENTICATION_MAGIC_AUTH_SUCCEEDED, AUTHENTICATION_MFA_SUCCEEDED, AUTHENTICATION_OAUTH_FAILED, AUTHENTICATION_OAUTH_SUCCEEDED, AUTHENTICATION_PASSWORD_FAILED, AUTHENTICATION_PASSWORD_SUCCEEDED, AUTHENTICATION_PASSKEY_FAILED, AUTHENTICATION_PASSKEY_SUCCEEDED, AUTHENTICATION_SSO_FAILED, AUTHENTICATION_SSO_STARTED, AUTHENTICATION_SSO_SUCCEEDED, AUTHENTICATION_SSO_TIMED_OUT, RADAR_CHALLENGE_CREATED, AUTHENTICATION_RADAR_RISK_DETECTED, AUTHENTICATION_REAUTHENTICATION_SUCCEEDED, API_KEY_CREATED, API_KEY_REVOKED, API_KEY_UPDATED, CONNECTION_ACTIVATED, CONNECTION_DEACTIVATED, CONNECTION_SAML_CERTIFICATE_RENEWAL_REQUIRED, CONNECTION_SAML_CERTIFICATE_RENEWED, CONNECTION_DELETED, DSYNC_ACTIVATED, DSYNC_DELETED, DSYNC_GROUP_CREATED, DSYNC_GROUP_DELETED, DSYNC_GROUP_UPDATED, DSYNC_GROUP_USER_ADDED, DSYNC_GROUP_USER_REMOVED, DSYNC_USER_CREATED, DSYNC_USER_DELETED, DSYNC_USER_UPDATED, EMAIL_VERIFICATION_CREATED, GROUP_CREATED, GROUP_DELETED, GROUP_MEMBER_ADDED, GROUP_MEMBER_REMOVED, GROUP_UPDATED, FLAG_CREATED, FLAG_DELETED, FLAG_UPDATED, FLAG_RULE_UPDATED, INVITATION_ACCEPTED, INVITATION_CREATED, INVITATION_RESENT, INVITATION_REVOKED, MAGIC_AUTH_CREATED, ORGANIZATION_CREATED, ORGANIZATION_DELETED, ORGANIZATION_UPDATED, ORGANIZATION_DOMAIN_CREATED, ORGANIZATION_DOMAIN_DELETED, ORGANIZATION_DOMAIN_UPDATED, ORGANIZATION_DOMAIN_VERIFIED, ORGANIZATION_DOMAIN_VERIFICATION_FAILED, PASSWORD_RESET_CREATED, PASSWORD_RESET_SUCCEEDED, USER_CREATED, USER_UPDATED, USER_DELETED, ORGANIZATION_MEMBERSHIP_CREATED, ORGANIZATION_MEMBERSHIP_DELETED, ORGANIZATION_MEMBERSHIP_UPDATED, ROLE_CREATED, ROLE_DELETED, ROLE_UPDATED, ORGANIZATION_ROLE_CREATED, ORGANIZATION_ROLE_DELETED, ORGANIZATION_ROLE_UPDATED, PERMISSION_CREATED, PERMISSION_DELETED, PERMISSION_UPDATED, PIPES_CONNECTED_ACCOUNT_CONNECTED, PIPES_CONNECTED_ACCOUNT_CONNECTION_FAILED, PIPES_CONNECTED_ACCOUNT_DISCONNECTED, PIPES_CONNECTED_ACCOUNT_REAUTHORIZATION_NEEDED, SESSION_CREATED, SESSION_REVOKED, WAITLIST_USER_APPROVED, WAITLIST_USER_CREATED, WAITLIST_USER_DENIED].freeze
+      ALL = [AGENT_BLUEPRINT_CREATED, AGENT_BLUEPRINT_DELETED, AGENT_BLUEPRINT_UPDATED, AGENT_INSTANCE_CREATED, AGENT_INSTANCE_DELETED, AGENT_INSTANCE_SESSION_CREATED, AGENT_INSTANCE_SESSION_REVOKED, AGENT_REGISTRATION_CREATED, AGENT_REGISTRATION_CLAIM_ATTEMPT_CREATED, AGENT_REGISTRATION_CLAIM_COMPLETED, AGENT_REGISTRATION_CREDENTIAL_ISSUED, AGENT_REGISTRATION_DELETED, AGENT_REGISTRATION_REFRESHED, AGENT_REGISTRATION_EXPIRED, AGENT_REGISTRATION_ORGANIZATION_SWITCHED, AGENT_REGISTRATION_REVOKED, AUTHENTICATION_EMAIL_VERIFICATION_SUCCEEDED, AUTHENTICATION_MAGIC_AUTH_FAILED, AUTHENTICATION_MAGIC_AUTH_SUCCEEDED, AUTHENTICATION_MFA_SUCCEEDED, AUTHENTICATION_OAUTH_FAILED, AUTHENTICATION_OAUTH_SUCCEEDED, AUTHENTICATION_PASSWORD_FAILED, AUTHENTICATION_PASSWORD_SUCCEEDED, AUTHENTICATION_PASSKEY_FAILED, AUTHENTICATION_PASSKEY_SUCCEEDED, AUTHENTICATION_SSO_FAILED, AUTHENTICATION_SSO_STARTED, AUTHENTICATION_SSO_SUCCEEDED, AUTHENTICATION_SSO_TIMED_OUT, RADAR_CHALLENGE_CREATED, AUTHENTICATION_RADAR_RISK_DETECTED, AUTHENTICATION_REAUTHENTICATION_SUCCEEDED, API_KEY_CREATED, API_KEY_REVOKED, API_KEY_UPDATED, CONNECTION_ACTIVATED, CONNECTION_DEACTIVATED, CONNECTION_SAML_CERTIFICATE_RENEWAL_REQUIRED, CONNECTION_SAML_CERTIFICATE_RENEWED, CONNECTION_DELETED, DSYNC_ACTIVATED, DSYNC_DELETED, DSYNC_GROUP_CREATED, DSYNC_GROUP_DELETED, DSYNC_GROUP_UPDATED, DSYNC_GROUP_USER_ADDED, DSYNC_GROUP_USER_REMOVED, DSYNC_USER_CREATED, DSYNC_USER_DELETED, DSYNC_USER_UPDATED, EMAIL_VERIFICATION_CREATED, GROUP_CREATED, GROUP_DELETED, GROUP_MEMBER_ADDED, GROUP_MEMBER_REMOVED, GROUP_UPDATED, FLAG_CREATED, FLAG_DELETED, FLAG_UPDATED, FLAG_RULE_UPDATED, INVITATION_ACCEPTED, INVITATION_CREATED, INVITATION_RESENT, INVITATION_REVOKED, MAGIC_AUTH_CREATED, ORGANIZATION_CREATED, ORGANIZATION_DELETED, ORGANIZATION_UPDATED, ORGANIZATION_DOMAIN_CREATED, ORGANIZATION_DOMAIN_DELETED, ORGANIZATION_DOMAIN_UPDATED, ORGANIZATION_DOMAIN_VERIFIED, ORGANIZATION_DOMAIN_VERIFICATION_FAILED, PASSWORD_RESET_CREATED, PASSWORD_RESET_SUCCEEDED, USER_CREATED, USER_UPDATED, USER_DELETED, ORGANIZATION_MEMBERSHIP_CREATED, ORGANIZATION_MEMBERSHIP_DELETED, ORGANIZATION_MEMBERSHIP_UPDATED, ROLE_CREATED, ROLE_DELETED, ROLE_UPDATED, ORGANIZATION_ROLE_CREATED, ORGANIZATION_ROLE_DELETED, ORGANIZATION_ROLE_UPDATED, PERMISSION_CREATED, PERMISSION_DELETED, PERMISSION_UPDATED, PIPES_ACCOUNT_CONNECTION_ADD_FAILED, PIPES_ACCOUNT_CONNECTION_CONNECTED, PIPES_ACCOUNT_CONNECTION_CONNECTION_FAILED, PIPES_ACCOUNT_CONNECTION_DISCONNECTED, PIPES_ACCOUNT_CONNECTION_REAUTHORIZATION_NEEDED, PIPES_CONNECTED_ACCOUNT_CONNECTED, PIPES_CONNECTED_ACCOUNT_CONNECTION_FAILED, PIPES_CONNECTED_ACCOUNT_DISCONNECTED, PIPES_CONNECTED_ACCOUNT_REAUTHORIZATION_NEEDED, SESSION_CREATED, SESSION_REVOKED, WAITLIST_USER_APPROVED, WAITLIST_USER_CREATED, WAITLIST_USER_DENIED].freeze
     end
   end
 end

data/lib/workos/types/data_integration_installation_connection_role.rb

@@ -0,0 +1,9 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  module Types
+    DataIntegrationInstallationConnectionRole = ConnectedAccountConnectionRole
+  end
+end

data/lib/workos/types/data_integration_ownership.rb

@@ -0,0 +1,9 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  module Types
+    DataIntegrationOwnership = CreateDataIntegrationOwnership
+  end
+end

data/lib/workos/types/data_integrations_get_data_integration_authorize_url_request_connection_owner.rb

@@ -0,0 +1,9 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  module Types
+    DataIntegrationsGetDataIntegrationAuthorizeUrlRequestConnectionOwner = CreateDataIntegrationOwnership
+  end
+end