workos 7.1.2 → 8.0.0

data/lib/workos/{types/audit_logs_order.rb → api_keys/organization_api_key_with_value_owner.rb}

@@ -3,7 +3,5 @@
 # This file is auto-generated by oagen. Do not edit.
 
 module WorkOS
-  module Types
-    AuditLogsOrder = ApplicationsOrder
-  end
+  OrganizationApiKeyWithValueOwner = ApiKeyCreatedDataOwner
 end

data/lib/workos/api_keys.rb

@@ -10,59 +10,19 @@ module WorkOS
       @client = client
     end
 
-    # Validate API key
-    # @param value [String] The value for an API key.
-    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
-    # @return [WorkOS::ApiKeyValidationResponse]
-    def create_validation(
-      value:,
-      request_options: {}
-    )
-      body = {
-        "value" => value
-      }
-      response = @client.request(
-        method: :post,
-        path: "/api_keys/validations",
-        auth: true,
-        body: body,
-        request_options: request_options
-      )
-      result = WorkOS::ApiKeyValidationResponse.new(response.body)
-      result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
-      result
-    end
-
-    # Delete an API key
-    # @param id [String] The unique ID of the API key.
-    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
-    # @return [void]
-    def delete_api_key(
-      id:,
-      request_options: {}
-    )
-      @client.request(
-        method: :delete,
-        path: "/api_keys/#{WorkOS::Util.encode_path(id)}",
-        auth: true,
-        request_options: request_options
-      )
-      nil
-    end
-
     # List API keys for an organization
     # @param organization_id [String] Unique identifier of the Organization.
     # @param before [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list.
     # @param after [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list.
     # @param limit [Integer, nil] Upper limit on the number of objects to return, between `1` and `100`.
-    # @param order [WorkOS::Types::OrganizationsApiKeysOrder, nil] Order the results by the creation time.
+    # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
-    # @return [WorkOS::Types::ListStruct<WorkOS::ApiKey>]
+    # @return [WorkOS::Types::ListStruct<WorkOS::OrganizationApiKey>]
     def list_organization_api_keys(
       organization_id:,
       before: nil,
       after: nil,
-      limit: nil,
+      limit: 10,
       order: "desc",
       request_options: {}
     )
@@ -91,7 +51,7 @@ module WorkOS
       }
       WorkOS::Types::ListStruct.from_response(
         response,
-        model: WorkOS::ApiKey,
+        model: WorkOS::OrganizationApiKey,
         filters: {organization_id: organization_id, before: before, limit: limit, order: order},
         fetch_next: fetch_next
       )
@@ -102,7 +62,7 @@ module WorkOS
     # @param name [String] The name for the API key.
     # @param permissions [Array<String>, nil] The permission slugs to assign to the API key.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
-    # @return [WorkOS::ApiKeyWithValue]
+    # @return [WorkOS::OrganizationApiKeyWithValue]
     def create_organization_api_key(
       organization_id:,
       name:,
@@ -120,9 +80,49 @@ module WorkOS
         body: body,
         request_options: request_options
       )
-      result = WorkOS::ApiKeyWithValue.new(response.body)
+      result = WorkOS::OrganizationApiKeyWithValue.new(response.body)
       result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
       result
     end
+
+    # Validate API key
+    # @param value [String] The value for an API key.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::ApiKeyValidationResponse]
+    def create_validation(
+      value:,
+      request_options: {}
+    )
+      body = {
+        "value" => value
+      }
+      response = @client.request(
+        method: :post,
+        path: "/api_keys/validations",
+        auth: true,
+        body: body,
+        request_options: request_options
+      )
+      result = WorkOS::ApiKeyValidationResponse.new(response.body)
+      result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
+      result
+    end
+
+    # Delete an API key
+    # @param id [String] The unique ID of the API key.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [void]
+    def delete_api_key(
+      id:,
+      request_options: {}
+    )
+      @client.request(
+        method: :delete,
+        path: "/api_keys/#{WorkOS::Util.encode_path(id)}",
+        auth: true,
+        request_options: request_options
+      )
+      nil
+    end
   end
 end

data/lib/workos/audit_logs.rb

@@ -58,13 +58,13 @@ module WorkOS
     # @param before [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list.
     # @param after [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list.
     # @param limit [Integer, nil] Upper limit on the number of objects to return, between `1` and `100`.
-    # @param order [WorkOS::Types::AuditLogsOrder, nil] Order the results by the creation time.
+    # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
     # @return [WorkOS::Types::ListStruct<WorkOS::AuditLogActionJson>]
     def list_actions(
       before: nil,
       after: nil,
-      limit: nil,
+      limit: 10,
       order: "desc",
       request_options: {}
     )
@@ -103,14 +103,14 @@ module WorkOS
     # @param before [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list.
     # @param after [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list.
     # @param limit [Integer, nil] Upper limit on the number of objects to return, between `1` and `100`.
-    # @param order [WorkOS::Types::AuditLogsOrder, nil] Order the results by the creation time.
+    # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
     # @return [WorkOS::Types::ListStruct<WorkOS::AuditLogSchemaJson>]
     def list_action_schemas(
       action_name:,
       before: nil,
       after: nil,
-      limit: nil,
+      limit: 10,
       order: "desc",
       request_options: {}
     )

data/lib/workos/authorization/user_organization_membership_base_list_data.rb

@@ -14,7 +14,8 @@ module WorkOS
       organization_name: :organization_name,
       custom_attributes: :custom_attributes,
       created_at: :created_at,
-      updated_at: :updated_at
+      updated_at: :updated_at,
+      user: :user
     }.freeze
 
     attr_accessor \
@@ -27,7 +28,8 @@ module WorkOS
       :organization_name,
       :custom_attributes,
       :created_at,
-      :updated_at
+      :updated_at,
+      :user
 
     def initialize(json)
       hash = self.class.normalize(json)
@@ -41,6 +43,7 @@ module WorkOS
       @custom_attributes = hash[:custom_attributes] || {}
       @created_at = hash[:created_at]
       @updated_at = hash[:updated_at]
+      @user = hash[:user] ? WorkOS::User.new(hash[:user]) : nil
     end
   end
 end

data/lib/workos/authorization/{role_assignment.rb → user_role_assignment.rb}

@@ -3,10 +3,11 @@
 # This file is auto-generated by oagen. Do not edit.
 
 module WorkOS
-  class RoleAssignment < WorkOS::Types::BaseModel
+  class UserRoleAssignment < WorkOS::Types::BaseModel
     HASH_ATTRS = {
       object: :object,
       id: :id,
+      organization_membership_id: :organization_membership_id,
       role: :role,
       resource: :resource,
       created_at: :created_at,
@@ -16,6 +17,7 @@ module WorkOS
     attr_accessor \
       :object,
       :id,
+      :organization_membership_id,
       :role,
       :resource,
       :created_at,
@@ -25,8 +27,9 @@ module WorkOS
       hash = self.class.normalize(json)
       @object = hash[:object]
       @id = hash[:id]
+      @organization_membership_id = hash[:organization_membership_id]
       @role = hash[:role] ? WorkOS::SlimRole.new(hash[:role]) : nil
-      @resource = hash[:resource] ? WorkOS::RoleAssignmentResource.new(hash[:resource]) : nil
+      @resource = hash[:resource] ? WorkOS::UserRoleAssignmentResource.new(hash[:resource]) : nil
       @created_at = hash[:created_at]
       @updated_at = hash[:updated_at]
     end

data/lib/workos/authorization/{role_assignment_resource.rb → user_role_assignment_resource.rb}

@@ -3,7 +3,7 @@
 # This file is auto-generated by oagen. Do not edit.
 
 module WorkOS
-  class RoleAssignmentResource < WorkOS::Types::BaseModel
+  class UserRoleAssignmentResource < WorkOS::Types::BaseModel
     HASH_ATTRS = {
       id: :id,
       external_id: :external_id,

data/lib/workos/authorization.rb

@@ -93,7 +93,7 @@ module WorkOS
     # @param before [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
     # @param after [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
     # @param limit [Integer, nil] Upper limit on the number of objects to return, between `1` and `100`.
-    # @param order [WorkOS::Types::AuthorizationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
+    # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
     # @param permission_slug [String] The permission slug to filter by. Only child resources where the organization membership has this permission are returned.
     # @param parent_resource [WorkOS::Authorization::ParentResourceById, WorkOS::Authorization::ParentResourceByExternalId] Identifies the parent resource.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
@@ -104,7 +104,7 @@ module WorkOS
       parent_resource:,
       before: nil,
       after: nil,
-      limit: nil,
+      limit: 10,
       order: "desc",
       request_options: {}
     )
@@ -157,7 +157,7 @@ module WorkOS
     # @param before [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
     # @param after [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
     # @param limit [Integer, nil] Upper limit on the number of objects to return, between `1` and `100`.
-    # @param order [WorkOS::Types::AuthorizationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
+    # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
     # @return [WorkOS::Types::ListStruct<WorkOS::AuthorizationPermission>]
     def list_effective_permissions(
@@ -165,7 +165,7 @@ module WorkOS
       resource_id:,
       before: nil,
       after: nil,
-      limit: nil,
+      limit: 10,
       order: "desc",
       request_options: {}
     )
@@ -208,7 +208,7 @@ module WorkOS
     # @param before [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
     # @param after [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
     # @param limit [Integer, nil] Upper limit on the number of objects to return, between `1` and `100`.
-    # @param order [WorkOS::Types::AuthorizationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
+    # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
     # @return [WorkOS::Types::ListStruct<WorkOS::AuthorizationPermission>]
     def list_effective_permissions_by_external_id(
@@ -217,7 +217,7 @@ module WorkOS
       external_id:,
       before: nil,
       after: nil,
-      limit: nil,
+      limit: 10,
       order: "desc",
       request_options: {}
     )
@@ -259,14 +259,14 @@ module WorkOS
     # @param before [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
     # @param after [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
     # @param limit [Integer, nil] Upper limit on the number of objects to return, between `1` and `100`.
-    # @param order [WorkOS::Types::AuthorizationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
+    # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
-    # @return [WorkOS::Types::ListStruct<WorkOS::RoleAssignment>]
+    # @return [WorkOS::Types::ListStruct<WorkOS::UserRoleAssignment>]
     def list_role_assignments(
       organization_membership_id:,
       before: nil,
       after: nil,
-      limit: nil,
+      limit: 10,
       order: "desc",
       request_options: {}
     )
@@ -295,7 +295,7 @@ module WorkOS
       }
       WorkOS::Types::ListStruct.from_response(
         response,
-        model: WorkOS::RoleAssignment,
+        model: WorkOS::UserRoleAssignment,
         filters: {organization_membership_id: organization_membership_id, before: before, limit: limit, order: order},
         fetch_next: fetch_next
       )
@@ -306,7 +306,7 @@ module WorkOS
     # @param role_slug [String] The slug of the role to assign.
     # @param resource_target [WorkOS::Authorization::ResourceTargetById, WorkOS::Authorization::ResourceTargetByExternalId] Identifies the resource target.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
-    # @return [WorkOS::RoleAssignment]
+    # @return [WorkOS::UserRoleAssignment]
     def assign_role(
       organization_membership_id:,
       role_slug:,
@@ -332,7 +332,7 @@ module WorkOS
         body: body,
         request_options: request_options
       )
-      result = WorkOS::RoleAssignment.new(response.body)
+      result = WorkOS::UserRoleAssignment.new(response.body)
       result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
       result
     end
@@ -671,7 +671,7 @@ module WorkOS
       organization_id:,
       resource_type_slug:,
       external_id:,
-      cascade_delete: nil,
+      cascade_delete: false,
       request_options: {}
     )
       params = {
@@ -694,7 +694,7 @@ module WorkOS
     # @param before [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
     # @param after [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
     # @param limit [Integer, nil] Upper limit on the number of objects to return, between `1` and `100`.
-    # @param order [WorkOS::Types::AuthorizationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
+    # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
     # @param permission_slug [String] The permission slug to filter by. Only users with this permission on the resource are returned.
     # @param assignment [WorkOS::Types::AuthorizationAssignment, nil] Filter by assignment type. Use "direct" for direct assignments only, or "indirect" to include inherited assignments.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
@@ -706,7 +706,7 @@ module WorkOS
       permission_slug:,
       before: nil,
       after: nil,
-      limit: nil,
+      limit: 10,
       order: "desc",
       assignment: nil,
       request_options: {}
@@ -748,11 +748,64 @@ module WorkOS
       )
     end
 
+    # List role assignments for a resource by external ID
+    # @param organization_id [String] The ID of the organization that owns the resource.
+    # @param resource_type_slug [String] The slug of the resource type.
+    # @param external_id [String] An identifier you provide to reference the resource in your system.
+    # @param before [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
+    # @param after [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
+    # @param limit [Integer, nil] Upper limit on the number of objects to return, between `1` and `100`.
+    # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::Types::ListStruct<WorkOS::UserRoleAssignment>]
+    def list_role_assignments_for_resource_by_external_id(
+      organization_id:,
+      resource_type_slug:,
+      external_id:,
+      before: nil,
+      after: nil,
+      limit: 10,
+      order: "desc",
+      request_options: {}
+    )
+      params = {
+        "before" => before,
+        "after" => after,
+        "limit" => limit,
+        "order" => order
+      }.compact
+      response = @client.request(
+        method: :get,
+        path: "/authorization/organizations/#{WorkOS::Util.encode_path(organization_id)}/resources/#{WorkOS::Util.encode_path(resource_type_slug)}/#{WorkOS::Util.encode_path(external_id)}/role_assignments",
+        auth: true,
+        params: params,
+        request_options: request_options
+      )
+      fetch_next = ->(cursor) {
+        list_role_assignments_for_resource_by_external_id(
+          organization_id: organization_id,
+          resource_type_slug: resource_type_slug,
+          external_id: external_id,
+          before: before,
+          after: cursor,
+          limit: limit,
+          order: order,
+          request_options: request_options
+        )
+      }
+      WorkOS::Types::ListStruct.from_response(
+        response,
+        model: WorkOS::UserRoleAssignment,
+        filters: {organization_id: organization_id, resource_type_slug: resource_type_slug, external_id: external_id, before: before, limit: limit, order: order},
+        fetch_next: fetch_next
+      )
+    end
+
     # List resources
     # @param before [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
     # @param after [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
     # @param limit [Integer, nil] Upper limit on the number of objects to return, between `1` and `100`.
-    # @param order [WorkOS::Types::AuthorizationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
+    # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
     # @param organization_id [String, nil] Filter resources by organization ID.
     # @param resource_type_slug [String, nil] Filter resources by resource type slug.
     # @param resource_external_id [String, nil] Filter resources by external ID.
@@ -763,7 +816,7 @@ module WorkOS
     def list_resources(
       before: nil,
       after: nil,
-      limit: nil,
+      limit: 10,
       order: "desc",
       organization_id: nil,
       resource_type_slug: nil,
@@ -937,7 +990,7 @@ module WorkOS
     # @return [void]
     def delete_resource(
       resource_id:,
-      cascade_delete: nil,
+      cascade_delete: false,
       request_options: {}
     )
       params = {
@@ -958,7 +1011,7 @@ module WorkOS
     # @param before [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
     # @param after [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
     # @param limit [Integer, nil] Upper limit on the number of objects to return, between `1` and `100`.
-    # @param order [WorkOS::Types::AuthorizationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
+    # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
     # @param permission_slug [String] The permission slug to filter by. Only users with this permission on the resource are returned.
     # @param assignment [WorkOS::Types::AuthorizationAssignment, nil] Filter by assignment type. Use `direct` for direct assignments only, or `indirect` to include inherited assignments.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
@@ -968,7 +1021,7 @@ module WorkOS
       permission_slug:,
       before: nil,
       after: nil,
-      limit: nil,
+      limit: 10,
       order: "desc",
       assignment: nil,
       request_options: {}
@@ -1008,6 +1061,53 @@ module WorkOS
       )
     end
 
+    # List role assignments for a resource
+    # @param resource_id [String] The ID of the authorization resource.
+    # @param before [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
+    # @param after [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
+    # @param limit [Integer, nil] Upper limit on the number of objects to return, between `1` and `100`.
+    # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::Types::ListStruct<WorkOS::UserRoleAssignment>]
+    def list_role_assignments_for_resource(
+      resource_id:,
+      before: nil,
+      after: nil,
+      limit: 10,
+      order: "desc",
+      request_options: {}
+    )
+      params = {
+        "before" => before,
+        "after" => after,
+        "limit" => limit,
+        "order" => order
+      }.compact
+      response = @client.request(
+        method: :get,
+        path: "/authorization/resources/#{WorkOS::Util.encode_path(resource_id)}/role_assignments",
+        auth: true,
+        params: params,
+        request_options: request_options
+      )
+      fetch_next = ->(cursor) {
+        list_role_assignments_for_resource(
+          resource_id: resource_id,
+          before: before,
+          after: cursor,
+          limit: limit,
+          order: order,
+          request_options: request_options
+        )
+      }
+      WorkOS::Types::ListStruct.from_response(
+        response,
+        model: WorkOS::UserRoleAssignment,
+        filters: {resource_id: resource_id, before: before, limit: limit, order: order},
+        fetch_next: fetch_next
+      )
+    end
+
     # List environment roles
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
     # @return [WorkOS::RoleList]
@@ -1156,13 +1256,13 @@ module WorkOS
     # @param before [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
     # @param after [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
     # @param limit [Integer, nil] Upper limit on the number of objects to return, between `1` and `100`.
-    # @param order [WorkOS::Types::PermissionsOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
+    # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
     # @return [WorkOS::Types::ListStruct<WorkOS::AuthorizationPermission>]
     def list_permissions(
       before: nil,
       after: nil,
-      limit: nil,
+      limit: 10,
       order: "desc",
       request_options: {}
     )

data/lib/workos/client.rb

@@ -4,10 +4,6 @@
 
 module WorkOS
   class Client < BaseClient
-    def api_keys
-      @api_keys ||= WorkOS::ApiKeys.new(self)
-    end
-
     def multi_factor_auth
       @multi_factor_auth ||= WorkOS::MultiFactorAuth.new(self)
     end
@@ -48,6 +44,10 @@ module WorkOS
       @organizations ||= WorkOS::Organizations.new(self)
     end
 
+    def api_keys
+      @api_keys ||= WorkOS::ApiKeys.new(self)
+    end
+
     def groups
       @groups ||= WorkOS::Groups.new(self)
     end

data/lib/workos/connect.rb

@@ -43,14 +43,14 @@ module WorkOS
     # @param before [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
     # @param after [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
     # @param limit [Integer, nil] Upper limit on the number of objects to return, between `1` and `100`.
-    # @param order [WorkOS::Types::ApplicationsOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
+    # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
     # @param organization_id [String, nil] Filter Connect Applications by organization ID.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
     # @return [WorkOS::Types::ListStruct<WorkOS::ConnectApplication>]
     def list_applications(
       before: nil,
       after: nil,
-      limit: nil,
+      limit: 10,
       order: "desc",
       organization_id: nil,
       request_options: {}

data/lib/workos/directory_sync/directory_user.rb

@@ -13,6 +13,7 @@ module WorkOS
       email: :email,
       first_name: :first_name,
       last_name: :last_name,
+      name: :name,
       emails: :emails,
       job_title: :job_title,
       username: :username,
@@ -43,6 +44,7 @@ module WorkOS
       :email,
       :first_name,
       :last_name,
+      :name,
       :state,
       :custom_attributes,
       :role,
@@ -88,6 +90,7 @@ module WorkOS
       @email = hash[:email]
       @first_name = hash[:first_name]
       @last_name = hash[:last_name]
+      @name = hash[:name]
       @emails = (hash[:emails] || []).map { |item| item ? WorkOS::DirectoryUserEmail.new(item) : nil }
       @job_title = hash[:job_title]
       @username = hash[:username]

data/lib/workos/directory_sync/directory_user_with_groups.rb

@@ -13,6 +13,7 @@ module WorkOS
       email: :email,
       first_name: :first_name,
       last_name: :last_name,
+      name: :name,
       emails: :emails,
       job_title: :job_title,
       username: :username,
@@ -35,7 +36,7 @@ module WorkOS
     # @!attribute raw_attributes
     #   @deprecated The raw attributes received from the directory provider.
     # @!attribute groups
-    #   @deprecated The directory groups the user belongs to. Use the List Directory Groups endpoint with a user filter instead.
+    #   @deprecated The directory groups the user belongs to. Deprecated: starting May 1, 2026, this field returns an empty array by default for newly created teams. Existing teams currently depending on this field should migrate to the new access pattern for better throughput performance — the field is unbounded by user, so users with many group memberships produce large, slow response payloads. Use the List Directory Groups endpoint with a `user` filter to fetch a user's group memberships.
 
     attr_accessor \
       :object,
@@ -46,6 +47,7 @@ module WorkOS
       :email,
       :first_name,
       :last_name,
+      :name,
       :state,
       :custom_attributes,
       :role,
@@ -98,6 +100,7 @@ module WorkOS
       @email = hash[:email]
       @first_name = hash[:first_name]
       @last_name = hash[:last_name]
+      @name = hash[:name]
       @emails = (hash[:emails] || []).map { |item| item ? WorkOS::DirectoryUserWithGroupsEmail.new(item) : nil }
       @job_title = hash[:job_title]
       @username = hash[:username]