workos 10.4.0 → 10.5.0

data/lib/workos/pipes/organization_connected_account.rb

@@ -0,0 +1,40 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class OrganizationConnectedAccount < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      account_display_name: :account_display_name,
+      account_identifier: :account_identifier,
+      access_token: :access_token,
+      refresh_token: :refresh_token,
+      expires_at: :expires_at,
+      scopes: :scopes,
+      state: :state,
+      user_id: :user_id
+    }.freeze
+
+    attr_accessor \
+      :account_display_name,
+      :account_identifier,
+      :access_token,
+      :refresh_token,
+      :expires_at,
+      :scopes,
+      :state,
+      :user_id
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @account_display_name = hash[:account_display_name]
+      @account_identifier = hash[:account_identifier]
+      @access_token = hash[:access_token]
+      @refresh_token = hash[:refresh_token]
+      @expires_at = hash[:expires_at]
+      @scopes = hash[:scopes] || []
+      @state = hash[:state]
+      @user_id = hash[:user_id]
+    end
+  end
+end

data/lib/workos/pipes/reauthorize_data_integrations_get_data_integration_authorize_url_request.rb

@@ -0,0 +1,40 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class ReauthorizeDataIntegrationsGetDataIntegrationAuthorizeUrlRequest < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      account_display_name: :account_display_name,
+      user_id: :user_id,
+      organization_id: :organization_id,
+      connection_owner: :connection_owner,
+      return_to: :return_to,
+      config: :config,
+      connection_intent: :connection_intent,
+      connected_account_id: :connected_account_id
+    }.freeze
+
+    attr_accessor \
+      :account_display_name,
+      :user_id,
+      :organization_id,
+      :connection_owner,
+      :return_to,
+      :config,
+      :connection_intent,
+      :connected_account_id
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @account_display_name = hash[:account_display_name]
+      @user_id = hash[:user_id]
+      @organization_id = hash[:organization_id]
+      @connection_owner = hash[:connection_owner]
+      @return_to = hash[:return_to]
+      @config = hash[:config] || {}
+      @connection_intent = hash[:connection_intent]
+      @connected_account_id = hash[:connected_account_id]
+    end
+  end
+end

data/lib/workos/pipes/reauthorize_data_integrations_upsert_api_key_request.rb

@@ -0,0 +1,40 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class ReauthorizeDataIntegrationsUpsertApiKeyRequest < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      account_display_name: :account_display_name,
+      account_identifier: :account_identifier,
+      user_id: :user_id,
+      organization_id: :organization_id,
+      connection_owner: :connection_owner,
+      secret: :secret,
+      connection_intent: :connection_intent,
+      connected_account_id: :connected_account_id
+    }.freeze
+
+    attr_accessor \
+      :account_display_name,
+      :account_identifier,
+      :user_id,
+      :organization_id,
+      :connection_owner,
+      :secret,
+      :connection_intent,
+      :connected_account_id
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @account_display_name = hash[:account_display_name]
+      @account_identifier = hash[:account_identifier]
+      @user_id = hash[:user_id]
+      @organization_id = hash[:organization_id]
+      @connection_owner = hash[:connection_owner]
+      @secret = hash[:secret]
+      @connection_intent = hash[:connection_intent]
+      @connected_account_id = hash[:connected_account_id]
+    end
+  end
+end

data/lib/workos/pipes/reauthorize_data_integrations_upsert_client_credentials_request.rb

@@ -0,0 +1,46 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class ReauthorizeDataIntegrationsUpsertClientCredentialsRequest < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      account_display_name: :account_display_name,
+      account_identifier: :account_identifier,
+      user_id: :user_id,
+      organization_id: :organization_id,
+      connection_owner: :connection_owner,
+      client_id: :client_id,
+      client_secret: :client_secret,
+      config: :config,
+      connection_intent: :connection_intent,
+      connected_account_id: :connected_account_id
+    }.freeze
+
+    attr_accessor \
+      :account_display_name,
+      :account_identifier,
+      :user_id,
+      :organization_id,
+      :connection_owner,
+      :client_id,
+      :client_secret,
+      :config,
+      :connection_intent,
+      :connected_account_id
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @account_display_name = hash[:account_display_name]
+      @account_identifier = hash[:account_identifier]
+      @user_id = hash[:user_id]
+      @organization_id = hash[:organization_id]
+      @connection_owner = hash[:connection_owner]
+      @client_id = hash[:client_id]
+      @client_secret = hash[:client_secret]
+      @config = hash[:config] || {}
+      @connection_intent = hash[:connection_intent]
+      @connected_account_id = hash[:connected_account_id]
+    end
+  end
+end

data/lib/workos/pipes.rb

@@ -184,31 +184,83 @@ module WorkOS
       nil
     end
 
+    # Create another API key connected account
+    # @param slug [String] The identifier of the integration.
+    # @param account_display_name [String, nil] A mutable, non-unique label. Omit to preserve an existing label; null clears it. Labels are never account identifiers.
+    # @param account_identifier [String, nil] A developer-attested provider account identifier, never inferred from a label or credential. Omit to preserve an existing identifier; null clears it.
+    # @param user_id [String] A [User](https://workos.com/docs/reference/authkit/user) identifier.
+    # @param organization_id [String, nil] An [Organization](https://workos.com/docs/reference/organization) identifier. Optional parameter to scope the connection to a specific organization. Required when `connection_owner` is `organization`.
+    # @param connection_owner [WorkOS::Types::DataIntegrationsCreateApiKeyConnectionRequestConnectionOwner, nil] Whose connection to create or rotate. `user` (the default) addresses the connection owned by `user_id`. `organization` addresses the connection shared by every member of `organization_id`; `user_id` then identifies the member performing the request and must be an active member of the organization.
+    # @param secret [String] The API key secret to store for this integration.
+    # @param connection_intent [String] Must be `add`: this endpoint only creates another connection. The first connection for an owner shape fills the compatibility slot; later connections are standard. Creating an additional connection is not yet available: until it is, `add` succeeds only when the owner has no connection for this integration and otherwise returns 404 `multiple_connections_unavailable`.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::ConnectedAccountWriteResponse]
+    def create_data_integration_api_key(
+      slug:,
+      user_id:,
+      secret:,
+      connection_intent:,
+      account_display_name: WorkOS::OMIT,
+      account_identifier: WorkOS::OMIT,
+      organization_id: nil,
+      connection_owner: nil,
+      request_options: {}
+    )
+      body = {
+        "user_id" => user_id,
+        "organization_id" => organization_id,
+        "connection_owner" => connection_owner,
+        "secret" => secret,
+        "connection_intent" => connection_intent
+      }.compact
+      body["account_display_name"] = account_display_name unless account_display_name.equal?(WorkOS::OMIT)
+      body["account_identifier"] = account_identifier unless account_identifier.equal?(WorkOS::OMIT)
+      response = @client.request(
+        method: :post,
+        path: "/data-integrations/#{WorkOS::Util.encode_path(slug)}/api-key",
+        auth: true,
+        body: body,
+        request_options: request_options
+      )
+      result = WorkOS::ConnectedAccountWriteResponse.new(response.body)
+      result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
+      result
+    end
+
     # Upsert an API key for a connected account
     # @param slug [String] The identifier of the integration.
+    # @param account_display_name [String, nil] A mutable, non-unique label. Omit to preserve an existing label; null clears it. Labels are never account identifiers.
+    # @param account_identifier [String, nil] A developer-attested provider account identifier, never inferred from a label or credential. Omit to preserve an existing identifier; null clears it.
     # @param user_id [String] A [User](https://workos.com/docs/reference/authkit/user) identifier.
     # @param organization_id [String, nil] An [Organization](https://workos.com/docs/reference/organization) identifier. Optional parameter to scope the connection to a specific organization. Required when `connection_owner` is `organization`.
-    # @param connected_account_id [String, nil] A [connected account](https://workos.com/docs/reference/pipes/connected-account) identifier. Use this to rotate a specific existing connection.
     # @param connection_owner [WorkOS::Types::DataIntegrationsUpsertApiKeyRequestConnectionOwner, nil] Whose connection to create or rotate. `user` (the default) addresses the connection owned by `user_id`. `organization` addresses the connection shared by every member of `organization_id`; `user_id` then identifies the member performing the request and must be an active member of the organization.
     # @param secret [String] The API key secret to store for this integration.
+    # @param connection_intent [String, nil] Reauthorize exactly the connection named by `connected_account_id`.
+    # @param connected_account_id [String, nil] The exact connected account to reauthorize. Required with `connection_intent: reauthorize`.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
-    # @return [WorkOS::ConnectedAccount]
+    # @return [WorkOS::ConnectedAccountWriteResponse]
     def update_data_integration_api_key(
       slug:,
       user_id:,
       secret:,
+      account_display_name: WorkOS::OMIT,
+      account_identifier: WorkOS::OMIT,
       organization_id: nil,
-      connected_account_id: nil,
       connection_owner: nil,
+      connection_intent: nil,
+      connected_account_id: nil,
       request_options: {}
     )
       body = {
         "user_id" => user_id,
         "organization_id" => organization_id,
-        "connected_account_id" => connected_account_id,
         "connection_owner" => connection_owner,
-        "secret" => secret
+        "secret" => secret,
+        "connection_intent" => connection_intent,
+        "connected_account_id" => connected_account_id
       }.compact
+      body["account_display_name"] = account_display_name unless account_display_name.equal?(WorkOS::OMIT)
+      body["account_identifier"] = account_identifier unless account_identifier.equal?(WorkOS::OMIT)
       response = @client.request(
         method: :put,
         path: "/data-integrations/#{WorkOS::Util.encode_path(slug)}/api-key",
@@ -216,27 +268,33 @@ module WorkOS
         body: body,
         request_options: request_options
       )
-      result = WorkOS::ConnectedAccount.new(response.body)
+      result = WorkOS::ConnectedAccountWriteResponse.new(response.body)
       result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
       result
     end
 
     # Get authorization URL
     # @param slug [String] The slug identifier of the provider (e.g., `github`, `slack`, `notion`).
+    # @param account_display_name [String, nil] A mutable, non-unique label. Omit to preserve an existing label; null clears it. Labels are never account identifiers.
     # @param user_id [String] The ID of the user to authorize. When `connection_owner` is `organization`, this is the user authorizing on behalf of the organization; they must be an active member of the organization and do not become the owner of the resulting connected account.
     # @param organization_id [String, nil] An organization ID to scope the authorization to a specific organization. Required when `connection_owner` is `organization`.
     # @param connection_owner [WorkOS::Types::DataIntegrationsGetDataIntegrationAuthorizeUrlRequestConnectionOwner, nil] Who will own the connected account. `user` (the default) connects the user's own account. `organization` connects the organization's shared account and requires `organization_id`.
     # @param return_to [String, nil] The URL to redirect the user to after authorization.
     # @param config [Hash{String => String}, nil] Connect-time config values for the provider-declared `installation`-scope fields (e.g. a Zendesk `subdomain`), keyed by the config field. Only fields the provider declares may be supplied, and required fields must be provided unless already pinned on the integration.
+    # @param connection_intent [String, nil] Create another connection. The first connection for an owner shape fills the compatibility slot; later connections are standard. Creating an additional connection is not yet available: until it is, `add` succeeds only when the owner has no connection for this integration and otherwise returns 404 `multiple_connections_unavailable`. Omit `connection_intent` to use the compatibility connection, or send `reauthorize` with `connected_account_id` to reauthorize one exact connection.
+    # @param connected_account_id [String, nil] The exact connected account to reauthorize. Required with `connection_intent: reauthorize`.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
     # @return [WorkOS::DataIntegrationAuthorizeUrlResponse]
     def authorize_data_integration(
       slug:,
       user_id:,
+      account_display_name: WorkOS::OMIT,
       organization_id: nil,
       connection_owner: nil,
       return_to: nil,
       config: nil,
+      connection_intent: nil,
+      connected_account_id: nil,
       request_options: {}
     )
       body = {
@@ -244,8 +302,11 @@ module WorkOS
         "organization_id" => organization_id,
         "connection_owner" => connection_owner,
         "return_to" => return_to,
-        "config" => config
+        "config" => config,
+        "connection_intent" => connection_intent,
+        "connected_account_id" => connected_account_id
       }.compact
+      body["account_display_name"] = account_display_name unless account_display_name.equal?(WorkOS::OMIT)
       response = @client.request(
         method: :post,
         path: "/data-integrations/#{WorkOS::Util.encode_path(slug)}/authorize",
@@ -258,37 +319,95 @@ module WorkOS
       result
     end
 
+    # Create another client credentials connected account
+    # @param slug [String] The identifier of the integration.
+    # @param account_display_name [String, nil] A mutable, non-unique label. Omit to preserve an existing label; null clears it. Labels are never account identifiers.
+    # @param account_identifier [String, nil] A developer-attested provider account identifier, never inferred from a label or credential. Omit to preserve an existing identifier; null clears it.
+    # @param user_id [String] A [User](https://workos.com/docs/reference/authkit/user) identifier.
+    # @param organization_id [String, nil] An [Organization](https://workos.com/docs/reference/organization) identifier. Optional parameter to scope the connection to a specific organization. Required when `connection_owner` is `organization`.
+    # @param connection_owner [WorkOS::Types::DataIntegrationsCreateClientCredentialsConnectionRequestConnectionOwner, nil] Whose connection to create or rotate. `user` (the default) addresses the connection owned by `user_id`. `organization` addresses the connection shared by every member of `organization_id`; `user_id` then identifies the member performing the request and must be an active member of the organization.
+    # @param client_id [String] The OAuth client ID to store for this integration.
+    # @param client_secret [String] The OAuth client secret to store for this integration.
+    # @param config [Hash{String => String}, nil] Provider-specific configuration values collected for this installation, keyed by the provider's config field descriptors.
+    # @param connection_intent [String] Must be `add`: this endpoint only creates another connection. The first connection for an owner shape fills the compatibility slot; later connections are standard. Creating an additional connection is not yet available: until it is, `add` succeeds only when the owner has no connection for this integration and otherwise returns 404 `multiple_connections_unavailable`.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::ConnectedAccountWriteResponse]
+    def create_data_integration_client_credential(
+      slug:,
+      user_id:,
+      client_id:,
+      client_secret:,
+      connection_intent:,
+      account_display_name: WorkOS::OMIT,
+      account_identifier: WorkOS::OMIT,
+      organization_id: nil,
+      connection_owner: nil,
+      config: nil,
+      request_options: {}
+    )
+      body = {
+        "user_id" => user_id,
+        "organization_id" => organization_id,
+        "connection_owner" => connection_owner,
+        "client_id" => client_id,
+        "client_secret" => client_secret,
+        "config" => config,
+        "connection_intent" => connection_intent
+      }.compact
+      body["account_display_name"] = account_display_name unless account_display_name.equal?(WorkOS::OMIT)
+      body["account_identifier"] = account_identifier unless account_identifier.equal?(WorkOS::OMIT)
+      response = @client.request(
+        method: :post,
+        path: "/data-integrations/#{WorkOS::Util.encode_path(slug)}/client-credentials",
+        auth: true,
+        body: body,
+        request_options: request_options
+      )
+      result = WorkOS::ConnectedAccountWriteResponse.new(response.body)
+      result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
+      result
+    end
+
     # Upsert client credentials for a connected account
     # @param slug [String] The identifier of the integration.
+    # @param account_display_name [String, nil] A mutable, non-unique label. Omit to preserve an existing label; null clears it. Labels are never account identifiers.
+    # @param account_identifier [String, nil] A developer-attested provider account identifier, never inferred from a label or credential. Omit to preserve an existing identifier; null clears it.
     # @param user_id [String] A [User](https://workos.com/docs/reference/authkit/user) identifier.
     # @param organization_id [String, nil] An [Organization](https://workos.com/docs/reference/organization) identifier. Optional parameter to scope the connection to a specific organization. Required when `connection_owner` is `organization`.
-    # @param connected_account_id [String, nil] A [connected account](https://workos.com/docs/reference/pipes/connected-account) identifier. Use this to rotate a specific existing connection.
     # @param connection_owner [WorkOS::Types::DataIntegrationsUpsertClientCredentialsRequestConnectionOwner, nil] Whose connection to create or rotate. `user` (the default) addresses the connection owned by `user_id`. `organization` addresses the connection shared by every member of `organization_id`; `user_id` then identifies the member performing the request and must be an active member of the organization.
     # @param client_id [String] The OAuth client ID to store for this integration.
     # @param client_secret [String] The OAuth client secret to store for this integration.
     # @param config [Hash{String => String}, nil] Provider-specific configuration values collected for this installation, keyed by the provider's config field descriptors.
+    # @param connection_intent [String, nil] Reauthorize exactly the connection named by `connected_account_id`.
+    # @param connected_account_id [String, nil] The exact connected account to reauthorize. Required with `connection_intent: reauthorize`.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
-    # @return [WorkOS::ConnectedAccount]
+    # @return [WorkOS::ConnectedAccountWriteResponse]
     def update_data_integration_client_credentials(
       slug:,
       user_id:,
       client_id:,
       client_secret:,
+      account_display_name: WorkOS::OMIT,
+      account_identifier: WorkOS::OMIT,
       organization_id: nil,
-      connected_account_id: nil,
       connection_owner: nil,
       config: nil,
+      connection_intent: nil,
+      connected_account_id: nil,
       request_options: {}
     )
       body = {
         "user_id" => user_id,
         "organization_id" => organization_id,
-        "connected_account_id" => connected_account_id,
         "connection_owner" => connection_owner,
         "client_id" => client_id,
         "client_secret" => client_secret,
-        "config" => config
+        "config" => config,
+        "connection_intent" => connection_intent,
+        "connected_account_id" => connected_account_id
       }.compact
+      body["account_display_name"] = account_display_name unless account_display_name.equal?(WorkOS::OMIT)
+      body["account_identifier"] = account_identifier unless account_identifier.equal?(WorkOS::OMIT)
       response = @client.request(
         method: :put,
         path: "/data-integrations/#{WorkOS::Util.encode_path(slug)}/client-credentials",
@@ -296,7 +415,7 @@ module WorkOS
         body: body,
         request_options: request_options
       )
-      result = WorkOS::ConnectedAccount.new(response.body)
+      result = WorkOS::ConnectedAccountWriteResponse.new(response.body)
       result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
       result
     end
@@ -484,21 +603,29 @@ module WorkOS
     # Import an organization connected account
     # @param organization_id [String] An [Organization](https://workos.com/docs/reference/organization) identifier.
     # @param slug [String] The slug identifier of the provider (e.g., `github`, `slack`, `notion`).
+    # @param account_display_name [String, nil] A mutable, non-unique connection label; null clears it. Not an account identifier.
+    # @param account_identifier [String, nil] A developer-attested account identifier; null clears it.
     # @param access_token [String, nil] The OAuth access token for the connected account.
     # @param refresh_token [String, nil] The OAuth refresh token for the connected account.
     # @param expires_at [String, nil] The ISO-8601 timestamp when the access token expires. Required when `access_token` is provided for tokens that expire.
     # @param scopes [Array<String>, nil] The OAuth scopes granted for this connection.
-    # @param state [WorkOS::Types::ConnectedAccountInputState, nil] Explicitly set the state of the connected account. When omitted, the state is derived from the token combination provided.
+    # @param state [WorkOS::Types::CreateOrganizationConnectedAccountState, nil] Explicitly set the state of the connected account. When omitted, the state is derived from the token combination provided.
+    # @param user_id [String] The [User](https://workos.com/docs/reference/authkit/user) identifier of the organization member on whose behalf the connected account is being imported or updated. The user must be an active member of the organization.
+    # @param connection_intent [String, nil] Set to `add` to create another connected account. Omit this field for permanent compatibility behavior. Creating an additional connection is not yet available: until it is, `add` succeeds only when the owner has no connection for this integration, which creates the compatibility connection, and otherwise returns 404 `multiple_connections_unavailable`.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
-    # @return [WorkOS::ConnectedAccount]
+    # @return [WorkOS::ConnectedAccountWriteResponse]
     def create_organization_connected_account(
       organization_id:,
       slug:,
+      user_id:,
+      account_display_name: WorkOS::OMIT,
+      account_identifier: WorkOS::OMIT,
       access_token: nil,
       refresh_token: nil,
       expires_at: nil,
       scopes: nil,
       state: nil,
+      connection_intent: nil,
       request_options: {}
     )
       body = {
@@ -506,8 +633,12 @@ module WorkOS
         "refresh_token" => refresh_token,
         "expires_at" => expires_at,
         "scopes" => scopes,
-        "state" => state
+        "state" => state,
+        "user_id" => user_id,
+        "connection_intent" => connection_intent
       }.compact
+      body["account_display_name"] = account_display_name unless account_display_name.equal?(WorkOS::OMIT)
+      body["account_identifier"] = account_identifier unless account_identifier.equal?(WorkOS::OMIT)
       response = @client.request(
         method: :post,
         path: "/organizations/#{WorkOS::Util.encode_path(organization_id)}/connected_accounts/#{WorkOS::Util.encode_path(slug)}",
@@ -515,7 +646,7 @@ module WorkOS
         body: body,
         request_options: request_options
       )
-      result = WorkOS::ConnectedAccount.new(response.body)
+      result = WorkOS::ConnectedAccountWriteResponse.new(response.body)
       result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
       result
     end
@@ -523,18 +654,25 @@ module WorkOS
     # Update an organization connected account
     # @param organization_id [String] An [Organization](https://workos.com/docs/reference/organization) identifier.
     # @param slug [String] The slug identifier of the provider (e.g., `github`, `slack`, `notion`).
+    # @param account_display_name [String, nil] A mutable, non-unique connection label; null clears it. Not an account identifier.
+    # @param account_identifier [String, nil] A developer-attested account identifier; null clears it.
     # @param access_token [String, nil] The OAuth access token for the connected account.
     # @param refresh_token [String, nil] The OAuth refresh token for the connected account.
     # @param expires_at [String, nil] The ISO-8601 timestamp when the access token expires. Required when `access_token` is provided for tokens that expire.
     # @param scopes [Array<String>, nil] The OAuth scopes granted for this connection.
-    # @param state [WorkOS::Types::ConnectedAccountInputState, nil] Explicitly set the state of the connected account. When omitted, the state is derived from the token combination provided.
-    # @param supports_multiple_connections [Boolean, nil] Set to `true` to use the plural connection contract. When omitted or `false`, only the compatibility connection is considered.
+    # @param state [WorkOS::Types::OrganizationConnectedAccountState, nil] Explicitly set the state of the connected account. When omitted, the state is derived from the token combination provided.
+    # @param user_id [String] The [User](https://workos.com/docs/reference/authkit/user) identifier of the organization member on whose behalf the connected account is being imported or updated. The user must be an active member of the organization.
+    # @param supports_multiple_connections [Boolean, nil] Accepted for compatibility; does not change update targeting. Omit intent and selector to update the compatibility connection, or supply `connected_account_id` to update an exact connection.
     # @param connected_account_id [String, nil] A [connected account](https://workos.com/docs/reference/pipes/connected-account) identifier. Use this to select the connection to update.
+    # @param connection_intent [String, nil] Set to `reauthorize` with `connected_account_id` to update one exact connection. The intent may be omitted when supplying an ID. Omit both for permanent compatibility behavior.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
-    # @return [WorkOS::ConnectedAccount]
+    # @return [WorkOS::ConnectedAccountWriteResponse]
     def update_organization_connected_account(
       organization_id:,
       slug:,
+      user_id:,
+      account_display_name: WorkOS::OMIT,
+      account_identifier: WorkOS::OMIT,
       access_token: nil,
       refresh_token: nil,
       expires_at: nil,
@@ -542,19 +680,24 @@ module WorkOS
       state: nil,
       supports_multiple_connections: nil,
       connected_account_id: nil,
+      connection_intent: nil,
       request_options: {}
     )
       params = {
         "supports_multiple_connections" => supports_multiple_connections,
-        "connected_account_id" => connected_account_id
+        "connected_account_id" => connected_account_id,
+        "connection_intent" => connection_intent
       }.compact
       body = {
         "access_token" => access_token,
         "refresh_token" => refresh_token,
         "expires_at" => expires_at,
         "scopes" => scopes,
-        "state" => state
+        "state" => state,
+        "user_id" => user_id
       }.compact
+      body["account_display_name"] = account_display_name unless account_display_name.equal?(WorkOS::OMIT)
+      body["account_identifier"] = account_identifier unless account_identifier.equal?(WorkOS::OMIT)
       response = @client.request(
         method: :put,
         path: "/organizations/#{WorkOS::Util.encode_path(organization_id)}/connected_accounts/#{WorkOS::Util.encode_path(slug)}",
@@ -563,7 +706,7 @@ module WorkOS
         body: body,
         request_options: request_options
       )
-      result = WorkOS::ConnectedAccount.new(response.body)
+      result = WorkOS::ConnectedAccountWriteResponse.new(response.body)
       result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
       result
     end
@@ -657,22 +800,28 @@ module WorkOS
     # Import a connected account
     # @param user_id [String] A [User](https://workos.com/docs/reference/authkit/user) identifier.
     # @param slug [String] The slug identifier of the provider (e.g., `github`, `slack`, `notion`).
+    # @param account_display_name [String, nil] A mutable, non-unique connection label; null clears it. Not an account identifier.
+    # @param account_identifier [String, nil] A developer-attested account identifier; null clears it.
     # @param access_token [String, nil] The OAuth access token for the connected account.
     # @param refresh_token [String, nil] The OAuth refresh token for the connected account.
     # @param expires_at [String, nil] The ISO-8601 timestamp when the access token expires. Required when `access_token` is provided for tokens that expire.
     # @param scopes [Array<String>, nil] The OAuth scopes granted for this connection.
-    # @param state [WorkOS::Types::ConnectedAccountInputState, nil] Explicitly set the state of the connected account. When omitted, the state is derived from the token combination provided.
+    # @param state [WorkOS::Types::CreateConnectedAccountState, nil] Explicitly set the state of the connected account. When omitted, the state is derived from the token combination provided.
+    # @param connection_intent [String, nil] Set to `add` to create another connected account. Omit this field for permanent compatibility behavior. Creating an additional connection is not yet available: until it is, `add` succeeds only when the owner has no connection for this integration, which creates the compatibility connection, and otherwise returns 404 `multiple_connections_unavailable`.
     # @param organization_id [String, nil] An [Organization](https://workos.com/docs/reference/organization) identifier. Optional parameter if the connection is scoped to an organization.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
-    # @return [WorkOS::ConnectedAccount]
+    # @return [WorkOS::ConnectedAccountWriteResponse]
     def create_user_connected_account(
       user_id:,
       slug:,
+      account_display_name: WorkOS::OMIT,
+      account_identifier: WorkOS::OMIT,
       access_token: nil,
       refresh_token: nil,
       expires_at: nil,
       scopes: nil,
       state: nil,
+      connection_intent: nil,
       organization_id: nil,
       request_options: {}
     )
@@ -684,8 +833,11 @@ module WorkOS
         "refresh_token" => refresh_token,
         "expires_at" => expires_at,
         "scopes" => scopes,
-        "state" => state
+        "state" => state,
+        "connection_intent" => connection_intent
       }.compact
+      body["account_display_name"] = account_display_name unless account_display_name.equal?(WorkOS::OMIT)
+      body["account_identifier"] = account_identifier unless account_identifier.equal?(WorkOS::OMIT)
       response = @client.request(
         method: :post,
         path: "/user_management/users/#{WorkOS::Util.encode_path(user_id)}/connected_accounts/#{WorkOS::Util.encode_path(slug)}",
@@ -694,7 +846,7 @@ module WorkOS
         body: body,
         request_options: request_options
       )
-      result = WorkOS::ConnectedAccount.new(response.body)
+      result = WorkOS::ConnectedAccountWriteResponse.new(response.body)
       result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
       result
     end
@@ -702,19 +854,24 @@ module WorkOS
     # Update a connected account
     # @param user_id [String] A [User](https://workos.com/docs/reference/authkit/user) identifier.
     # @param slug [String] The slug identifier of the provider (e.g., `github`, `slack`, `notion`).
+    # @param account_display_name [String, nil] A mutable, non-unique connection label; null clears it. Not an account identifier.
+    # @param account_identifier [String, nil] A developer-attested account identifier; null clears it.
     # @param access_token [String, nil] The OAuth access token for the connected account.
     # @param refresh_token [String, nil] The OAuth refresh token for the connected account.
     # @param expires_at [String, nil] The ISO-8601 timestamp when the access token expires. Required when `access_token` is provided for tokens that expire.
     # @param scopes [Array<String>, nil] The OAuth scopes granted for this connection.
     # @param state [WorkOS::Types::ConnectedAccountInputState, nil] Explicitly set the state of the connected account. When omitted, the state is derived from the token combination provided.
     # @param organization_id [String, nil] An [Organization](https://workos.com/docs/reference/organization) identifier. Optional parameter if the connection is scoped to an organization.
-    # @param supports_multiple_connections [Boolean, nil] Set to `true` to use the plural connection contract. When omitted or `false`, only the compatibility connection is considered.
+    # @param supports_multiple_connections [Boolean, nil] Accepted for compatibility; does not change update targeting. Omit intent and selector to update the compatibility connection, or supply `connected_account_id` to update an exact connection.
     # @param connected_account_id [String, nil] A [connected account](https://workos.com/docs/reference/pipes/connected-account) identifier. Use this to select the connection to update.
+    # @param connection_intent [String, nil] Set to `reauthorize` with `connected_account_id` to update one exact connection. The intent may be omitted when supplying an ID. Omit both for permanent compatibility behavior.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
-    # @return [WorkOS::ConnectedAccount]
+    # @return [WorkOS::ConnectedAccountWriteResponse]
     def update_user_connected_account(
       user_id:,
       slug:,
+      account_display_name: WorkOS::OMIT,
+      account_identifier: WorkOS::OMIT,
       access_token: nil,
       refresh_token: nil,
       expires_at: nil,
@@ -723,12 +880,14 @@ module WorkOS
       organization_id: nil,
       supports_multiple_connections: nil,
       connected_account_id: nil,
+      connection_intent: nil,
       request_options: {}
     )
       params = {
         "organization_id" => organization_id,
         "supports_multiple_connections" => supports_multiple_connections,
-        "connected_account_id" => connected_account_id
+        "connected_account_id" => connected_account_id,
+        "connection_intent" => connection_intent
       }.compact
       body = {
         "access_token" => access_token,
@@ -737,6 +896,8 @@ module WorkOS
         "scopes" => scopes,
         "state" => state
       }.compact
+      body["account_display_name"] = account_display_name unless account_display_name.equal?(WorkOS::OMIT)
+      body["account_identifier"] = account_identifier unless account_identifier.equal?(WorkOS::OMIT)
       response = @client.request(
         method: :put,
         path: "/user_management/users/#{WorkOS::Util.encode_path(user_id)}/connected_accounts/#{WorkOS::Util.encode_path(slug)}",
@@ -745,7 +906,7 @@ module WorkOS
         body: body,
         request_options: request_options
       )
-      result = WorkOS::ConnectedAccount.new(response.body)
+      result = WorkOS::ConnectedAccountWriteResponse.new(response.body)
       result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
       result
     end