workos 10.4.0 → 10.6.0

data/rbi/workos/vault_dek_rekeyed.rbi

@@ -0,0 +1,54 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+# typed: strong
+
+module WorkOS
+  class VaultDekRekeyed
+    sig { params(json: T.any(String, T::Hash[Symbol, T.untyped])).void }
+    def initialize(json); end
+
+    sig { returns(String) }
+    def object; end
+
+    sig { params(value: String).returns(String) }
+    def object=(value); end
+
+    sig { returns(String) }
+    def id; end
+
+    sig { params(value: String).returns(String) }
+    def id=(value); end
+
+    sig { returns(String) }
+    def event; end
+
+    sig { params(value: String).returns(String) }
+    def event=(value); end
+
+    sig { returns(WorkOS::VaultDekRekeyedData) }
+    def data; end
+
+    sig { params(value: WorkOS::VaultDekRekeyedData).returns(WorkOS::VaultDekRekeyedData) }
+    def data=(value); end
+
+    sig { returns(String) }
+    def created_at; end
+
+    sig { params(value: String).returns(String) }
+    def created_at=(value); end
+
+    sig { returns(T.nilable(WorkOS::EventContext)) }
+    def context; end
+
+    sig { params(value: T.nilable(WorkOS::EventContext)).returns(T.nilable(WorkOS::EventContext)) }
+    def context=(value); end
+
+    sig { returns(T::Hash[Symbol, T.untyped]) }
+    def to_h; end
+
+    sig { params(args: T.untyped).returns(String) }
+    def to_json(*args); end
+  end
+end

data/rbi/workos/vault_dek_rekeyed_data.rbi

@@ -0,0 +1,48 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+# typed: strong
+
+module WorkOS
+  class VaultDekRekeyedData
+    sig { params(json: T.any(String, T::Hash[Symbol, T.untyped])).void }
+    def initialize(json); end
+
+    sig { returns(String) }
+    def actor_id; end
+
+    sig { params(value: String).returns(String) }
+    def actor_id=(value); end
+
+    sig { returns(String) }
+    def actor_source; end
+
+    sig { params(value: String).returns(String) }
+    def actor_source=(value); end
+
+    sig { returns(String) }
+    def actor_name; end
+
+    sig { params(value: String).returns(String) }
+    def actor_name=(value); end
+
+    sig { returns(T::Array[String]) }
+    def key_ids; end
+
+    sig { params(value: T::Array[String]).returns(T::Array[String]) }
+    def key_ids=(value); end
+
+    sig { returns(T::Hash[String, String]) }
+    def key_context; end
+
+    sig { params(value: T::Hash[String, String]).returns(T::Hash[String, String]) }
+    def key_context=(value); end
+
+    sig { returns(T::Hash[Symbol, T.untyped]) }
+    def to_h; end
+
+    sig { params(args: T.untyped).returns(String) }
+    def to_json(*args); end
+  end
+end

data/rbi/workos/verification_id_required_error_body.rbi

@@ -0,0 +1,30 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+# typed: strong
+
+module WorkOS
+  class VerificationIdRequiredErrorBody
+    sig { params(json: T.any(String, T::Hash[Symbol, T.untyped])).void }
+    def initialize(json); end
+
+    sig { returns(String) }
+    def code; end
+
+    sig { params(value: String).returns(String) }
+    def code=(value); end
+
+    sig { returns(String) }
+    def message; end
+
+    sig { params(value: String).returns(String) }
+    def message=(value); end
+
+    sig { returns(T::Hash[Symbol, T.untyped]) }
+    def to_h; end
+
+    sig { params(args: T.untyped).returns(String) }
+    def to_json(*args); end
+  end
+end

data/rbi/workos/version_list_response.rbi

@@ -0,0 +1,30 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+# typed: strong
+
+module WorkOS
+  class VersionListResponse
+    sig { params(json: T.any(String, T::Hash[Symbol, T.untyped])).void }
+    def initialize(json); end
+
+    sig { returns(T::Array[WorkOS::ObjectVersion]) }
+    def data; end
+
+    sig { params(value: T::Array[WorkOS::ObjectVersion]).returns(T::Array[WorkOS::ObjectVersion]) }
+    def data=(value); end
+
+    sig { returns(WorkOS::ListMetadata) }
+    def list_metadata; end
+
+    sig { params(value: WorkOS::ListMetadata).returns(WorkOS::ListMetadata) }
+    def list_metadata=(value); end
+
+    sig { returns(T::Hash[Symbol, T.untyped]) }
+    def to_h; end
+
+    sig { params(args: T.untyped).returns(String) }
+    def to_json(*args); end
+  end
+end

data/rbi/workos/waitlist_list_response.rbi

@@ -0,0 +1,36 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+# typed: strong
+
+module WorkOS
+  class WaitlistListResponse
+    sig { params(json: T.any(String, T::Hash[Symbol, T.untyped])).void }
+    def initialize(json); end
+
+    sig { returns(String) }
+    def object; end
+
+    sig { params(value: String).returns(String) }
+    def object=(value); end
+
+    sig { returns(T::Array[WorkOS::Waitlist]) }
+    def data; end
+
+    sig { params(value: T::Array[WorkOS::Waitlist]).returns(T::Array[WorkOS::Waitlist]) }
+    def data=(value); end
+
+    sig { returns(WorkOS::WaitlistListResponseListMetadata) }
+    def list_metadata; end
+
+    sig { params(value: WorkOS::WaitlistListResponseListMetadata).returns(WorkOS::WaitlistListResponseListMetadata) }
+    def list_metadata=(value); end
+
+    sig { returns(T::Hash[Symbol, T.untyped]) }
+    def to_h; end
+
+    sig { params(args: T.untyped).returns(String) }
+    def to_json(*args); end
+  end
+end

data/rbi/workos/waitlist_list_response_list_metadata.rbi

@@ -0,0 +1,30 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+# typed: strong
+
+module WorkOS
+  class WaitlistListResponseListMetadata
+    sig { params(json: T.any(String, T::Hash[Symbol, T.untyped])).void }
+    def initialize(json); end
+
+    sig { returns(T.nilable(String)) }
+    def before; end
+
+    sig { params(value: T.nilable(String)).returns(T.nilable(String)) }
+    def before=(value); end
+
+    sig { returns(T.nilable(String)) }
+    def after; end
+
+    sig { params(value: T.nilable(String)).returns(T.nilable(String)) }
+    def after=(value); end
+
+    sig { returns(T::Hash[Symbol, T.untyped]) }
+    def to_h; end
+
+    sig { params(args: T.untyped).returns(String) }
+    def to_json(*args); end
+  end
+end

data/rbi/workos/webhooks.rbi

@@ -18,7 +18,7 @@ module WorkOS
         request_options: T::Hash[Symbol, T.untyped]
       ).returns(WorkOS::Types::ListStruct)
     end
-    def list_webhook_endpoints(before:, after:, limit:, order:, request_options:); end
+    def list_webhook_endpoints(before: nil, after: nil, limit: nil, order: nil, request_options: {}); end
 
     sig do
       params(
@@ -27,7 +27,7 @@ module WorkOS
         request_options: T::Hash[Symbol, T.untyped]
       ).returns(WorkOS::WebhookEndpoint)
     end
-    def create_webhook_endpoint(endpoint_url:, events:, request_options:); end
+    def create_webhook_endpoint(endpoint_url:, events:, request_options: {}); end
 
     sig do
       params(
@@ -38,7 +38,7 @@ module WorkOS
         request_options: T::Hash[Symbol, T.untyped]
       ).returns(WorkOS::WebhookEndpoint)
     end
-    def update_webhook_endpoint(id:, endpoint_url:, status:, events:, request_options:); end
+    def update_webhook_endpoint(id:, endpoint_url: nil, status: nil, events: nil, request_options: {}); end
 
     sig do
       params(
@@ -46,7 +46,7 @@ module WorkOS
         request_options: T::Hash[Symbol, T.untyped]
       ).returns(NilClass)
     end
-    def delete_webhook_endpoint(id:, request_options:); end
+    def delete_webhook_endpoint(id:, request_options: {}); end
 
   end
 end

data/rbi/workos/widgets.rbi

@@ -17,7 +17,7 @@ module WorkOS
         request_options: T::Hash[Symbol, T.untyped]
       ).returns(WorkOS::WidgetSessionTokenResponse)
     end
-    def create_token(organization_id:, user_id:, scopes:, request_options:); end
+    def create_token(organization_id: nil, user_id: nil, scopes: nil, request_options: {}); end
 
   end
 end

data/test/workos/test_admin_portal.rb

@@ -18,9 +18,17 @@ class AdminPortalTest < Minitest::Test
     refute_nil result
   end
 
+  def test_revoke_link_returns_expected_result
+    stub_request(:post, %r{\Ahttps://api\.workos\.com/portal/revoke_link(\?|\z)})
+      .to_return(body: "{}", status: 200)
+    result = @client.admin_portal.revoke_link(organization: "stub", external_user_id: "stub")
+    assert_nil result
+  end
+
   # Parameterized authentication error tests (one per endpoint).
   [
-    {name: :generate_link, verb: :post, url: %r{\Ahttps://api\.workos\.com/portal/generate_link(\?|\z)}, args: {organization: "stub"}}
+    {name: :generate_link, verb: :post, url: %r{\Ahttps://api\.workos\.com/portal/generate_link(\?|\z)}, args: {organization: "stub"}},
+    {name: :revoke_link, verb: :post, url: %r{\Ahttps://api\.workos\.com/portal/revoke_link(\?|\z)}, args: {organization: "stub", external_user_id: "stub"}}
   ].each do |spec|
     define_method("test_#{spec[:name]}_raises_authentication_error_on_401") do
       stub_request(spec[:verb], spec[:url])

data/test/workos/test_admin_portal_model_round_trip.rb

@@ -10,6 +10,7 @@ class AdminPortalModelRoundTripTest < Minitest::Test
       "return_url" => "stub",
       "success_url" => "stub",
       "organization" => "stub",
+      "external_user_id" => "stub",
       "intent" => "stub",
       "it_contact_emails" => []
     }
@@ -20,6 +21,19 @@ class AdminPortalModelRoundTripTest < Minitest::Test
     fixture.each_key { |k| assert json.key?(k.to_sym) || json.key?(k), "Expected to_h to include key #{k}" }
   end
 
+  def test_revoke_link_round_trip
+    fixture = {
+      "organization" => "stub",
+      "external_user_id" => "stub"
+    }
+    model = WorkOS::RevokeLink.new(fixture.to_json)
+    json = model.to_h
+    assert_kind_of Hash, json
+    assert_equal fixture["organization"], json[:organization]
+    assert_equal fixture["external_user_id"], json[:external_user_id]
+    fixture.each_key { |k| assert json.key?(k.to_sym) || json.key?(k), "Expected to_h to include key #{k}" }
+  end
+
   def test_portal_link_response_round_trip
     fixture = {
       "link" => "stub"

data/test/workos/test_agents.rb

@@ -81,6 +81,13 @@ class AgentsTest < Minitest::Test
     refute_nil result
   end
 
+  def test_revoke_registration_returns_expected_result
+    stub_request(:post, %r{\Ahttps://api\.workos\.com/agents/registrations/stub/revoke(\?|\z)})
+      .to_return(body: "{}", status: 200)
+    result = @client.agents.revoke_registration(id: "stub")
+    refute_nil result
+  end
+
   def test_list_instances_returns_expected_result
     stub_request(:get, %r{\Ahttps://api\.workos\.com/agents/instances(\?|\z)})
       .to_return(body: '{"data": [], "list_metadata": {}}', status: 200)
@@ -135,6 +142,7 @@ class AgentsTest < Minitest::Test
     {name: :update_attempts, verb: :patch, url: %r{\Ahttps://api\.workos\.com/agents/claims/attempts(\?|\z)}, args: {type: "link_external_user", claim_attempt_token: "stub", user: {}}},
     {name: :create_validate, verb: :post, url: %r{\Ahttps://api\.workos\.com/agents/credentials/validate(\?|\z)}, args: {type: "stub", credential: "stub"}},
     {name: :get_registration, verb: :get, url: %r{\Ahttps://api\.workos\.com/agents/registrations/stub(\?|\z)}, args: {id: "stub"}},
+    {name: :revoke_registration, verb: :post, url: %r{\Ahttps://api\.workos\.com/agents/registrations/stub/revoke(\?|\z)}, args: {id: "stub"}},
     {name: :list_instances, verb: :get, url: %r{\Ahttps://api\.workos\.com/agents/instances(\?|\z)}},
     {name: :get_instance, verb: :get, url: %r{\Ahttps://api\.workos\.com/agents/instances/stub(\?|\z)}, args: {agent_instance_id: "stub"}},
     {name: :delete_instance, verb: :delete, url: %r{\Ahttps://api\.workos\.com/agents/instances/stub(\?|\z)}, args: {agent_instance_id: "stub"}},

data/test/workos/test_agents_model_round_trip.rb

@@ -5,12 +5,24 @@
 require "test_helper"
 
 class AgentsModelRoundTripTest < Minitest::Test
+  def test_list_metadata_round_trip
+    fixture = {
+      "after" => nil,
+      "before" => nil
+    }
+    model = WorkOS::ListMetadata.new(fixture.to_json)
+    json = model.to_h
+    assert_kind_of Hash, json
+    fixture.each_key { |k| assert json.key?(k.to_sym) || json.key?(k), "Expected to_h to include key #{k}" }
+  end
+
   def test_agent_registration_round_trip
     fixture = {
       "id" => "stub",
       "agent_identity" => {},
       "organization_id" => "stub",
       "status" => "stub",
+      "revoked_at" => nil,
       "kind" => "stub",
       "claim" => nil,
       "created_at" => "stub",
@@ -21,6 +33,7 @@ class AgentsModelRoundTripTest < Minitest::Test
     assert_kind_of Hash, json
     assert_equal fixture["id"], json[:id]
     assert_equal fixture["organization_id"], json[:organization_id]
+    assert_nil json[:revoked_at]
     assert_equal fixture["created_at"], json[:created_at]
     assert_equal fixture["updated_at"], json[:updated_at]
     fixture.each_key { |k| assert json.key?(k.to_sym) || json.key?(k), "Expected to_h to include key #{k}" }
@@ -64,6 +77,7 @@ class AgentsModelRoundTripTest < Minitest::Test
       "description" => nil,
       "permissions" => [],
       "invocable_by" => {},
+      "invocable_as" => {},
       "session_settings" => {},
       "created_at" => "stub",
       "updated_at" => "stub"
@@ -182,6 +196,16 @@ class AgentsModelRoundTripTest < Minitest::Test
     fixture.each_key { |k| assert json.key?(k.to_sym) || json.key?(k), "Expected to_h to include key #{k}" }
   end
 
+  def test_agent_blueprint_invocable_as_round_trip
+    fixture = {
+      "instance_types" => []
+    }
+    model = WorkOS::AgentBlueprintInvocableAs.new(fixture.to_json)
+    json = model.to_h
+    assert_kind_of Hash, json
+    fixture.each_key { |k| assert json.key?(k.to_sym) || json.key?(k), "Expected to_h to include key #{k}" }
+  end
+
   def test_agent_blueprint_session_setting_round_trip
     fixture = {
       "max_age_seconds" => 1,
@@ -251,6 +275,7 @@ class AgentsModelRoundTripTest < Minitest::Test
       "description" => "stub",
       "permissions" => [],
       "invocable_by" => {},
+      "invocable_as" => {},
       "session_settings" => {}
     }
     model = WorkOS::AgentBlueprintsCreateRequest.new(fixture.to_json)
@@ -271,6 +296,16 @@ class AgentsModelRoundTripTest < Minitest::Test
     fixture.each_key { |k| assert json.key?(k.to_sym) || json.key?(k), "Expected to_h to include key #{k}" }
   end
 
+  def test_agent_blueprints_create_request_invocable_as_round_trip
+    fixture = {
+      "instance_types" => []
+    }
+    model = WorkOS::AgentBlueprintsCreateRequestInvocableAs.new(fixture.to_json)
+    json = model.to_h
+    assert_kind_of Hash, json
+    fixture.each_key { |k| assert json.key?(k.to_sym) || json.key?(k), "Expected to_h to include key #{k}" }
+  end
+
   def test_agent_blueprints_create_request_session_setting_round_trip
     fixture = {
       "max_age_seconds" => 1,
@@ -292,6 +327,7 @@ class AgentsModelRoundTripTest < Minitest::Test
       "description" => nil,
       "permissions" => [],
       "invocable_by" => {},
+      "invocable_as" => {},
       "session_settings" => {}
     }
     model = WorkOS::AgentBlueprintsUpdateRequest.new(fixture.to_json)
@@ -311,6 +347,16 @@ class AgentsModelRoundTripTest < Minitest::Test
     fixture.each_key { |k| assert json.key?(k.to_sym) || json.key?(k), "Expected to_h to include key #{k}" }
   end
 
+  def test_agent_blueprints_update_request_invocable_as_round_trip
+    fixture = {
+      "instance_types" => []
+    }
+    model = WorkOS::AgentBlueprintsUpdateRequestInvocableAs.new(fixture.to_json)
+    json = model.to_h
+    assert_kind_of Hash, json
+    fixture.each_key { |k| assert json.key?(k.to_sym) || json.key?(k), "Expected to_h to include key #{k}" }
+  end
+
   def test_agent_blueprints_update_request_session_setting_round_trip
     fixture = {
       "max_age_seconds" => 1,

data/test/workos/test_api_keys_model_round_trip.rb

@@ -281,6 +281,20 @@ class ApiKeysModelRoundTripTest < Minitest::Test
     fixture.each_key { |k| assert json.key?(k.to_sym) || json.key?(k), "Expected to_h to include key #{k}" }
   end
 
+  def test_api_key_data_integration_vended_credential_round_trip
+    fixture = {
+      "object" => "credential",
+      "auth_method" => "api_key",
+      "value" => "stub",
+      "config" => {}
+    }
+    model = WorkOS::ApiKeyDataIntegrationVendedCredential.new(fixture.to_json)
+    json = model.to_h
+    assert_kind_of Hash, json
+    assert_equal fixture["value"], json[:value]
+    fixture.each_key { |k| assert json.key?(k.to_sym) || json.key?(k), "Expected to_h to include key #{k}" }
+  end
+
   def test_organization_api_key_with_value_owner_round_trip
     fixture = {
       "type" => "organization",

data/test/workos/test_authorization.rb

@@ -32,6 +32,13 @@ class AuthorizationTest < Minitest::Test
     assert_kind_of WorkOS::Types::ListStruct, result
   end
 
+  def test_patch_group_role_assignments_returns_expected_result
+    stub_request(:patch, %r{\Ahttps://api\.workos\.com/authorization/groups/stub/role_assignments(\?|\z)})
+      .to_return(body: "{}", status: 200)
+    result = @client.authorization.patch_group_role_assignments(group_id: "stub")
+    assert_nil result
+  end
+
   def test_delete_group_role_assignments_returns_expected_result
     stub_request(:delete, %r{\Ahttps://api\.workos\.com/authorization/groups/stub/role_assignments(\?|\z)})
       .to_return(body: "{}", status: 200)
@@ -397,6 +404,7 @@ class AuthorizationTest < Minitest::Test
     {name: :list_group_role_assignments, verb: :get, url: %r{\Ahttps://api\.workos\.com/authorization/groups/stub/role_assignments(\?|\z)}, args: {group_id: "stub"}},
     {name: :create_group_role_assignment, verb: :post, url: %r{\Ahttps://api\.workos\.com/authorization/groups/stub/role_assignments(\?|\z)}, args: {group_id: "stub", role_slug: "stub"}},
     {name: :update_group_role_assignments, verb: :put, url: %r{\Ahttps://api\.workos\.com/authorization/groups/stub/role_assignments(\?|\z)}, args: {group_id: "stub", role_assignments: [{}]}},
+    {name: :patch_group_role_assignments, verb: :patch, url: %r{\Ahttps://api\.workos\.com/authorization/groups/stub/role_assignments(\?|\z)}, args: {group_id: "stub"}},
     {name: :delete_group_role_assignments, verb: :delete, url: %r{\Ahttps://api\.workos\.com/authorization/groups/stub/role_assignments(\?|\z)}, args: {group_id: "stub", role_slug: "stub"}},
     {name: :get_group_role_assignment, verb: :get, url: %r{\Ahttps://api\.workos\.com/authorization/groups/stub/role_assignments/stub(\?|\z)}, args: {group_id: "stub", role_assignment_id: "stub"}},
     {name: :delete_group_role_assignment, verb: :delete, url: %r{\Ahttps://api\.workos\.com/authorization/groups/stub/role_assignments/stub(\?|\z)}, args: {group_id: "stub", role_assignment_id: "stub"}},

data/test/workos/test_authorization_model_round_trip.rb

@@ -47,6 +47,17 @@ class AuthorizationModelRoundTripTest < Minitest::Test
     fixture.each_key { |k| assert json.key?(k.to_sym) || json.key?(k), "Expected to_h to include key #{k}" }
   end
 
+  def test_patch_group_role_assignments_round_trip
+    fixture = {
+      "add" => [],
+      "remove" => []
+    }
+    model = WorkOS::PatchGroupRoleAssignments.new(fixture.to_json)
+    json = model.to_h
+    assert_kind_of Hash, json
+    fixture.each_key { |k| assert json.key?(k.to_sym) || json.key?(k), "Expected to_h to include key #{k}" }
+  end
+
   def test_replace_group_role_assignments_round_trip
     fixture = {
       "role_assignments" => []
@@ -328,6 +339,18 @@ class AuthorizationModelRoundTripTest < Minitest::Test
     fixture.each_key { |k| assert json.key?(k.to_sym) || json.key?(k), "Expected to_h to include key #{k}" }
   end
 
+  def test_group_role_assignment_list_round_trip
+    fixture = {
+      "object" => "list",
+      "data" => [],
+      "list_metadata" => {}
+    }
+    model = WorkOS::GroupRoleAssignmentList.new(fixture.to_json)
+    json = model.to_h
+    assert_kind_of Hash, json
+    fixture.each_key { |k| assert json.key?(k.to_sym) || json.key?(k), "Expected to_h to include key #{k}" }
+  end
+
   def test_user_role_assignment_round_trip
     fixture = {
       "object" => "role_assignment",
@@ -641,7 +664,8 @@ class AuthorizationModelRoundTripTest < Minitest::Test
   def test_user_role_assignment_source_round_trip
     fixture = {
       "type" => "stub",
-      "group_role_assignment_id" => nil
+      "group_role_assignment_id" => nil,
+      "group" => nil
     }
     model = WorkOS::UserRoleAssignmentSource.new(fixture.to_json)
     json = model.to_h
@@ -690,4 +714,17 @@ class AuthorizationModelRoundTripTest < Minitest::Test
     assert_equal fixture["updated_at"], json[:updated_at]
     fixture.each_key { |k| assert json.key?(k.to_sym) || json.key?(k), "Expected to_h to include key #{k}" }
   end
+
+  def test_user_role_assignment_source_group_round_trip
+    fixture = {
+      "id" => "stub",
+      "name" => "stub"
+    }
+    model = WorkOS::UserRoleAssignmentSourceGroup.new(fixture.to_json)
+    json = model.to_h
+    assert_kind_of Hash, json
+    assert_equal fixture["id"], json[:id]
+    assert_equal fixture["name"], json[:name]
+    fixture.each_key { |k| assert json.key?(k.to_sym) || json.key?(k), "Expected to_h to include key #{k}" }
+  end
 end

data/test/workos/test_base_client.rb

@@ -164,15 +164,16 @@ class BaseClientTest < Minitest::Test
     assert_equal({"external_id" => nil}, JSON.parse(request.body))
   end
 
-  def test_retry_path_generates_idempotency_key_for_mutating_requests
+  def test_post_sends_one_idempotency_key_on_the_first_attempt_and_its_retries
     stub_request(:post, "https://api.workos.com/widgets")
       .to_return({status: 500, body: '{"message":"retry"}'}, {status: 200, body: "{}"})
 
     @client.singleton_class.define_method(:sleep) { |_duration| nil }
     @client.request(method: :post, path: "/widgets", body: {name: "widget"})
 
-    assert_requested(:post, "https://api.workos.com/widgets", times: 2)
-    assert_requested(:post, "https://api.workos.com/widgets", headers: {"Idempotency-Key" => /.+/}, times: 1)
+    assert_requested(:post, "https://api.workos.com/widgets", headers: {"Idempotency-Key" => /.+/}, times: 2)
+    keys = WebMock::RequestRegistry.instance.requested_signatures.hash.keys.map { |signature| signature.headers["Idempotency-Key"] }
+    assert_equal 1, keys.uniq.size
   end
 
   def test_409_idempotency_error_raises_specific_error

data/test/workos/test_connect_model_round_trip.rb

@@ -69,6 +69,7 @@ class ConnectModelRoundTripTest < Minitest::Test
       "description" => nil,
       "scopes" => nil,
       "redirect_uris" => nil,
+      "cors_origins" => nil,
       "uses_pkce" => nil,
       "is_first_party" => true,
       "organization_id" => nil
@@ -102,7 +103,8 @@ class ConnectModelRoundTripTest < Minitest::Test
       "name" => "stub",
       "description" => nil,
       "scopes" => nil,
-      "redirect_uris" => nil
+      "redirect_uris" => nil,
+      "cors_origins" => nil
     }
     model = WorkOS::UpdateOAuthApplication.new(fixture.to_json)
     json = model.to_h

data/test/workos/test_directory_sync.rb

@@ -32,6 +32,13 @@ class DirectorySyncTest < Minitest::Test
     assert_nil result
   end
 
+  def test_create_directory_sync_returns_expected_result
+    stub_request(:post, %r{\Ahttps://api\.workos\.com/directories/stub/sync(\?|\z)})
+      .to_return(body: "{}", status: 200)
+    result = @client.directory_sync.create_directory_sync(id: "stub")
+    refute_nil result
+  end
+
   def test_list_groups_returns_expected_result
     stub_request(:get, %r{\Ahttps://api\.workos\.com/directory_groups(\?|\z)})
       .to_return(body: '{"data": [], "list_metadata": {}}', status: 200)
@@ -65,6 +72,7 @@ class DirectorySyncTest < Minitest::Test
     {name: :list_directories, verb: :get, url: %r{\Ahttps://api\.workos\.com/directories(\?|\z)}},
     {name: :get_directory, verb: :get, url: %r{\Ahttps://api\.workos\.com/directories/stub(\?|\z)}, args: {id: "stub"}},
     {name: :delete_directory, verb: :delete, url: %r{\Ahttps://api\.workos\.com/directories/stub(\?|\z)}, args: {id: "stub"}},
+    {name: :create_directory_sync, verb: :post, url: %r{\Ahttps://api\.workos\.com/directories/stub/sync(\?|\z)}, args: {id: "stub"}},
     {name: :list_groups, verb: :get, url: %r{\Ahttps://api\.workos\.com/directory_groups(\?|\z)}},
     {name: :get_group, verb: :get, url: %r{\Ahttps://api\.workos\.com/directory_groups/stub(\?|\z)}, args: {id: "stub"}},
     {name: :list_users, verb: :get, url: %r{\Ahttps://api\.workos\.com/directory_users(\?|\z)}},

data/test/workos/test_directory_sync_model_round_trip.rb

@@ -31,6 +31,30 @@ class DirectorySyncModelRoundTripTest < Minitest::Test
     fixture.each_key { |k| assert json.key?(k.to_sym) || json.key?(k), "Expected to_h to include key #{k}" }
   end
 
+  def test_directory_sync_response_round_trip
+    fixture = {
+      "status" => "queued"
+    }
+    model = WorkOS::DirectorySyncResponse.new(fixture.to_json)
+    json = model.to_h
+    assert_kind_of Hash, json
+    fixture.each_key { |k| assert json.key?(k.to_sym) || json.key?(k), "Expected to_h to include key #{k}" }
+  end
+
+  def test_directory_sync_rate_limit_error_round_trip
+    fixture = {
+      "code" => "directory_sync_rate_limited",
+      "message" => "stub",
+      "retry_after_seconds" => 1
+    }
+    model = WorkOS::DirectorySyncRateLimitError.new(fixture.to_json)
+    json = model.to_h
+    assert_kind_of Hash, json
+    assert_equal fixture["message"], json[:message]
+    assert_equal fixture["retry_after_seconds"], json[:retry_after_seconds]
+    fixture.each_key { |k| assert json.key?(k.to_sym) || json.key?(k), "Expected to_h to include key #{k}" }
+  end
+
   def test_directory_group_round_trip
     fixture = {
       "object" => "directory_group",