workos 9.3.0 → 9.4.0

data/lib/workos/pipes.rb

@@ -10,6 +10,192 @@ module WorkOS
       @client = client
     end
 
+    # List data integrations
+    # @param before [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
+    # @param after [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
+    # @param limit [Integer, nil] Upper limit on the number of objects to return, between `1` and `100`.
+    # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records).
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::Types::ListStruct<WorkOS::DataIntegration>]
+    def list_data_integrations(
+      before: nil,
+      after: nil,
+      limit: 10,
+      order: "desc",
+      request_options: {}
+    )
+      params = {
+        "before" => before,
+        "after" => after,
+        "limit" => limit,
+        "order" => order
+      }.compact
+      response = @client.request(
+        method: :get,
+        path: "/data-integrations",
+        auth: true,
+        params: params,
+        request_options: request_options
+      )
+      fetch_next = ->(cursor) {
+        list_data_integrations(
+          before: before,
+          after: cursor,
+          limit: limit,
+          order: order,
+          request_options: request_options
+        )
+      }
+      WorkOS::Types::ListStruct.from_response(
+        response,
+        model: WorkOS::DataIntegration,
+        filters: {before: before, limit: limit, order: order},
+        fetch_next: fetch_next
+      )
+    end
+
+    # Create a data integration
+    # @param provider [String] The provider to create a Data Integration for. For a built-in provider use its slug (e.g. `github`, `slack`). For a custom provider, this is the new provider slug and `custom_provider` must be supplied. A custom provider slug cannot shadow an existing global provider slug.
+    # @param description [String, nil] An optional description of the Data Integration.
+    # @param enabled [Boolean, nil] Whether the Data Integration is enabled. Defaults to `false`.
+    # @param scopes [Array<String>, nil] The OAuth scopes to request for the Data Integration. Defaults to the provider's configured scopes when omitted.
+    # @param credentials [WorkOS::DataIntegrationCredentialsDto, nil] The credentials to configure for the Data Integration. Required for both built-in and custom providers.
+    # @param custom_provider [WorkOS::CustomProviderDefinition, nil] The OAuth definition for a custom provider. Supply this to define a custom provider; omit it to create an integration for a built-in provider.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::DataIntegration]
+    def create_data_integration(
+      provider:,
+      description: nil,
+      enabled: nil,
+      scopes: nil,
+      credentials: nil,
+      custom_provider: nil,
+      request_options: {}
+    )
+      body = {
+        "provider" => provider,
+        "description" => description,
+        "enabled" => enabled,
+        "scopes" => scopes,
+        "credentials" => credentials,
+        "custom_provider" => custom_provider
+      }.compact
+      response = @client.request(
+        method: :post,
+        path: "/data-integrations",
+        auth: true,
+        body: body,
+        request_options: request_options
+      )
+      result = WorkOS::DataIntegration.new(response.body)
+      result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
+      result
+    end
+
+    # Get a data integration
+    # @param slug [String] The slug identifier of the data integration.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::DataIntegration]
+    def get_data_integration(
+      slug:,
+      request_options: {}
+    )
+      response = @client.request(
+        method: :get,
+        path: "/data-integrations/#{WorkOS::Util.encode_path(slug)}",
+        auth: true,
+        request_options: request_options
+      )
+      result = WorkOS::DataIntegration.new(response.body)
+      result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
+      result
+    end
+
+    # Update a data integration
+    # @param slug [String] The slug identifier of the data integration.
+    # @param description [String, nil] An optional description of the Data Integration.
+    # @param enabled [Boolean, nil] Whether the Data Integration is enabled.
+    # @param scopes [Array<String>, nil] The OAuth scopes to request for the Data Integration. Pass `null` to reset to the provider's configured scopes.
+    # @param credentials [WorkOS::DataIntegrationCredentialsDto, nil] New credentials for the Data Integration. When provided, rotates the stored client secret.
+    # @param custom_provider [WorkOS::UpdateCustomProviderDefinition, nil] Updates to a custom provider's OAuth definition. Only valid for custom-provider integrations.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::DataIntegration]
+    def update_data_integration(
+      slug:,
+      description: nil,
+      enabled: nil,
+      scopes: nil,
+      credentials: nil,
+      custom_provider: nil,
+      request_options: {}
+    )
+      body = {
+        "description" => description,
+        "enabled" => enabled,
+        "scopes" => scopes,
+        "credentials" => credentials,
+        "custom_provider" => custom_provider
+      }.compact
+      response = @client.request(
+        method: :put,
+        path: "/data-integrations/#{WorkOS::Util.encode_path(slug)}",
+        auth: true,
+        body: body,
+        request_options: request_options
+      )
+      result = WorkOS::DataIntegration.new(response.body)
+      result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
+      result
+    end
+
+    # Delete a data integration
+    # @param slug [String] The slug identifier of the data integration.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [void]
+    def delete_data_integration(
+      slug:,
+      request_options: {}
+    )
+      @client.request(
+        method: :delete,
+        path: "/data-integrations/#{WorkOS::Util.encode_path(slug)}",
+        auth: true,
+        request_options: request_options
+      )
+      nil
+    end
+
+    # Upsert an API key for a connected account
+    # @param slug [String] The identifier of the integration.
+    # @param user_id [String] A [User](https://workos.com/docs/reference/authkit/user) identifier.
+    # @param organization_id [String, nil] An [Organization](https://workos.com/docs/reference/organization) identifier. Optional parameter to scope the connection to a specific organization.
+    # @param secret [String] The API key secret to store for this integration.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::ConnectedAccount]
+    def update_data_integration_api_key(
+      slug:,
+      user_id:,
+      secret:,
+      organization_id: nil,
+      request_options: {}
+    )
+      body = {
+        "user_id" => user_id,
+        "organization_id" => organization_id,
+        "secret" => secret
+      }.compact
+      response = @client.request(
+        method: :put,
+        path: "/data-integrations/#{WorkOS::Util.encode_path(slug)}/api-key",
+        auth: true,
+        body: body,
+        request_options: request_options
+      )
+      result = WorkOS::ConnectedAccount.new(response.body)
+      result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
+      result
+    end
+
     # Get authorization URL
     # @param slug [String] The slug identifier of the provider (e.g., `github`, `slack`, `notion`).
     # @param user_id [String] The ID of the user to authorize.
@@ -41,6 +227,34 @@ module WorkOS
       result
     end
 
+    # Vend credentials for a connected account
+    # @param slug [String] The identifier of the integration.
+    # @param user_id [String] A [User](https://workos.com/docs/reference/authkit/user) identifier.
+    # @param organization_id [String, nil] An [Organization](https://workos.com/docs/reference/organization) identifier. Optional parameter to scope the connection to a specific organization.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::DataIntegrationCredentialsResponse]
+    def create_data_integration_credential(
+      slug:,
+      user_id:,
+      organization_id: nil,
+      request_options: {}
+    )
+      body = {
+        "user_id" => user_id,
+        "organization_id" => organization_id
+      }.compact
+      response = @client.request(
+        method: :post,
+        path: "/data-integrations/#{WorkOS::Util.encode_path(slug)}/credentials",
+        auth: true,
+        body: body,
+        request_options: request_options
+      )
+      result = WorkOS::DataIntegrationCredentialsResponse.new(response.body)
+      result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
+      result
+    end
+
     # Get an access token for a connected account
     # @param provider [String] The identifier of the integration.
     # @param user_id [String] A [User](https://workos.com/docs/reference/authkit/user) identifier.
@@ -96,6 +310,96 @@ module WorkOS
       result
     end
 
+    # Import a connected account
+    # @param user_id [String] A [User](https://workos.com/docs/reference/authkit/user) identifier.
+    # @param slug [String] The slug identifier of the provider (e.g., `github`, `slack`, `notion`).
+    # @param access_token [String, nil] The OAuth access token for the connected account.
+    # @param refresh_token [String, nil] The OAuth refresh token for the connected account.
+    # @param expires_at [String, nil] The ISO-8601 timestamp when the access token expires. Required when `access_token` is provided for tokens that expire.
+    # @param scopes [Array<String>, nil] The OAuth scopes granted for this connection.
+    # @param state [WorkOS::Types::ConnectedAccountState, nil] Explicitly set the state of the connected account. When omitted, the state is derived from the token combination provided.
+    # @param organization_id [String, nil] An [Organization](https://workos.com/docs/reference/organization) identifier. Optional parameter if the connection is scoped to an organization.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::ConnectedAccount]
+    def create_user_connected_account(
+      user_id:,
+      slug:,
+      access_token: nil,
+      refresh_token: nil,
+      expires_at: nil,
+      scopes: nil,
+      state: nil,
+      organization_id: nil,
+      request_options: {}
+    )
+      params = {
+        "organization_id" => organization_id
+      }.compact
+      body = {
+        "access_token" => access_token,
+        "refresh_token" => refresh_token,
+        "expires_at" => expires_at,
+        "scopes" => scopes,
+        "state" => state
+      }.compact
+      response = @client.request(
+        method: :post,
+        path: "/user_management/users/#{WorkOS::Util.encode_path(user_id)}/connected_accounts/#{WorkOS::Util.encode_path(slug)}",
+        auth: true,
+        params: params,
+        body: body,
+        request_options: request_options
+      )
+      result = WorkOS::ConnectedAccount.new(response.body)
+      result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
+      result
+    end
+
+    # Update a connected account
+    # @param user_id [String] A [User](https://workos.com/docs/reference/authkit/user) identifier.
+    # @param slug [String] The slug identifier of the provider (e.g., `github`, `slack`, `notion`).
+    # @param access_token [String, nil] The OAuth access token for the connected account.
+    # @param refresh_token [String, nil] The OAuth refresh token for the connected account.
+    # @param expires_at [String, nil] The ISO-8601 timestamp when the access token expires. Required when `access_token` is provided for tokens that expire.
+    # @param scopes [Array<String>, nil] The OAuth scopes granted for this connection.
+    # @param state [WorkOS::Types::ConnectedAccountState, nil] Explicitly set the state of the connected account. When omitted, the state is derived from the token combination provided.
+    # @param organization_id [String, nil] An [Organization](https://workos.com/docs/reference/organization) identifier. Optional parameter if the connection is scoped to an organization.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::ConnectedAccount]
+    def update_user_connected_account(
+      user_id:,
+      slug:,
+      access_token: nil,
+      refresh_token: nil,
+      expires_at: nil,
+      scopes: nil,
+      state: nil,
+      organization_id: nil,
+      request_options: {}
+    )
+      params = {
+        "organization_id" => organization_id
+      }.compact
+      body = {
+        "access_token" => access_token,
+        "refresh_token" => refresh_token,
+        "expires_at" => expires_at,
+        "scopes" => scopes,
+        "state" => state
+      }.compact
+      response = @client.request(
+        method: :put,
+        path: "/user_management/users/#{WorkOS::Util.encode_path(user_id)}/connected_accounts/#{WorkOS::Util.encode_path(slug)}",
+        auth: true,
+        params: params,
+        body: body,
+        request_options: request_options
+      )
+      result = WorkOS::ConnectedAccount.new(response.body)
+      result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
+      result
+    end
+
     # Delete a connected account
     # @param user_id [String] A [User](https://workos.com/docs/reference/authkit/user) identifier.
     # @param slug [String] The slug identifier of the provider (e.g., `github`, `slack`, `notion`).

data/lib/workos/radar/radar_standalone_assess_request.rb

@@ -9,7 +9,8 @@ module WorkOS
       user_agent: :user_agent,
       email: :email,
       auth_method: :auth_method,
-      action: :action
+      action: :action,
+      signals_id: :signals_id
     }.freeze
 
     attr_accessor \
@@ -17,7 +18,8 @@ module WorkOS
       :user_agent,
       :email,
       :auth_method,
-      :action
+      :action,
+      :signals_id
 
     def initialize(json)
       hash = self.class.normalize(json)
@@ -26,6 +28,7 @@ module WorkOS
       @email = hash[:email]
       @auth_method = hash[:auth_method]
       @action = hash[:action]
+      @signals_id = hash[:signals_id]
     end
   end
 end

data/lib/workos/radar.rb

@@ -16,6 +16,7 @@ module WorkOS
     # @param email [String] The email address of the user making the request.
     # @param auth_method [WorkOS::Types::RadarStandaloneAssessRequestAuthMethod] The authentication method being used.
     # @param action [WorkOS::Types::RadarStandaloneAssessRequestAction] The action being performed.
+    # @param signals_id [String, nil] An optional Radar signals ID for the request.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
     # @return [WorkOS::RadarStandaloneResponse]
     def create_attempt(
@@ -24,6 +25,7 @@ module WorkOS
       email:,
       auth_method:,
       action:,
+      signals_id: nil,
       request_options: {}
     )
       body = {
@@ -31,8 +33,9 @@ module WorkOS
         "user_agent" => user_agent,
         "email" => email,
         "auth_method" => auth_method,
-        "action" => action
-      }
+        "action" => action,
+        "signals_id" => signals_id
+      }.compact
       response = @client.request(
         method: :post,
         path: "/radar/attempts",

data/lib/workos/shared/auth_method_mismatch_error.rb

@@ -0,0 +1,22 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class AuthMethodMismatchError < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      code: :code,
+      message: :message
+    }.freeze
+
+    attr_accessor \
+      :code,
+      :message
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @code = hash[:code]
+      @message = hash[:message]
+    end
+  end
+end

data/lib/workos/types/audit_log_export_state.rb

@@ -8,7 +8,8 @@ module WorkOS
       PENDING = "pending"
       READY = "ready"
       ERROR = "error"
-      ALL = [PENDING, READY, ERROR].freeze
+      EXPIRED = "expired"
+      ALL = [PENDING, READY, ERROR, EXPIRED].freeze
     end
   end
 end

data/lib/workos/types/connected_account_state.rb

@@ -7,8 +7,7 @@ module WorkOS
     class ConnectedAccountState
       CONNECTED = "connected"
       NEEDS_REAUTHORIZATION = "needs_reauthorization"
-      DISCONNECTED = "disconnected"
-      ALL = [CONNECTED, NEEDS_REAUTHORIZATION, DISCONNECTED].freeze
+      ALL = [CONNECTED, NEEDS_REAUTHORIZATION].freeze
     end
   end
 end

data/lib/workos/types/create_webhook_endpoint_events.rb

@@ -5,6 +5,11 @@
 module WorkOS
   module Types
     class CreateWebhookEndpointEvents
+      AGENT_REGISTRATION_CREATED = "agent.registration.created"
+      AGENT_REGISTRATION_CLAIM_ATTEMPT_CREATED = "agent.registration.claim.attempt.created"
+      AGENT_REGISTRATION_CLAIM_COMPLETED = "agent.registration.claim.completed"
+      AGENT_REGISTRATION_CREDENTIAL_ISSUED = "agent.registration.credential.issued"
+      AGENT_REGISTRATION_ORGANIZATION_SWITCHED = "agent.registration.organization.switched"
       AUTHENTICATION_EMAIL_VERIFICATION_SUCCEEDED = "authentication.email_verification_succeeded"
       AUTHENTICATION_MAGIC_AUTH_FAILED = "authentication.magic_auth_failed"
       AUTHENTICATION_MAGIC_AUTH_SUCCEEDED = "authentication.magic_auth_succeeded"
@@ -20,6 +25,7 @@ module WorkOS
       AUTHENTICATION_SSO_SUCCEEDED = "authentication.sso_succeeded"
       AUTHENTICATION_SSO_TIMED_OUT = "authentication.sso_timed_out"
       AUTHENTICATION_RADAR_RISK_DETECTED = "authentication.radar_risk_detected"
+      AUTHENTICATION_REAUTHENTICATION_SUCCEEDED = "authentication.reauthentication_succeeded"
       API_KEY_CREATED = "api_key.created"
       API_KEY_REVOKED = "api_key.revoked"
       API_KEY_UPDATED = "api_key.updated"
@@ -79,6 +85,7 @@ module WorkOS
       PERMISSION_DELETED = "permission.deleted"
       PERMISSION_UPDATED = "permission.updated"
       PIPES_CONNECTED_ACCOUNT_CONNECTED = "pipes.connected_account.connected"
+      PIPES_CONNECTED_ACCOUNT_CONNECTION_FAILED = "pipes.connected_account.connection_failed"
       PIPES_CONNECTED_ACCOUNT_DISCONNECTED = "pipes.connected_account.disconnected"
       PIPES_CONNECTED_ACCOUNT_REAUTHORIZATION_NEEDED = "pipes.connected_account.reauthorization_needed"
       SESSION_CREATED = "session.created"
@@ -86,7 +93,7 @@ module WorkOS
       WAITLIST_USER_APPROVED = "waitlist_user.approved"
       WAITLIST_USER_CREATED = "waitlist_user.created"
       WAITLIST_USER_DENIED = "waitlist_user.denied"
-      ALL = [AUTHENTICATION_EMAIL_VERIFICATION_SUCCEEDED, AUTHENTICATION_MAGIC_AUTH_FAILED, AUTHENTICATION_MAGIC_AUTH_SUCCEEDED, AUTHENTICATION_MFA_SUCCEEDED, AUTHENTICATION_OAUTH_FAILED, AUTHENTICATION_OAUTH_SUCCEEDED, AUTHENTICATION_PASSWORD_FAILED, AUTHENTICATION_PASSWORD_SUCCEEDED, AUTHENTICATION_PASSKEY_FAILED, AUTHENTICATION_PASSKEY_SUCCEEDED, AUTHENTICATION_SSO_FAILED, AUTHENTICATION_SSO_STARTED, AUTHENTICATION_SSO_SUCCEEDED, AUTHENTICATION_SSO_TIMED_OUT, AUTHENTICATION_RADAR_RISK_DETECTED, API_KEY_CREATED, API_KEY_REVOKED, API_KEY_UPDATED, CONNECTION_ACTIVATED, CONNECTION_DEACTIVATED, CONNECTION_SAML_CERTIFICATE_RENEWAL_REQUIRED, CONNECTION_SAML_CERTIFICATE_RENEWED, CONNECTION_DELETED, DSYNC_ACTIVATED, DSYNC_DELETED, DSYNC_GROUP_CREATED, DSYNC_GROUP_DELETED, DSYNC_GROUP_UPDATED, DSYNC_GROUP_USER_ADDED, DSYNC_GROUP_USER_REMOVED, DSYNC_USER_CREATED, DSYNC_USER_DELETED, DSYNC_USER_UPDATED, EMAIL_VERIFICATION_CREATED, GROUP_CREATED, GROUP_DELETED, GROUP_MEMBER_ADDED, GROUP_MEMBER_REMOVED, GROUP_UPDATED, FLAG_CREATED, FLAG_DELETED, FLAG_UPDATED, FLAG_RULE_UPDATED, INVITATION_ACCEPTED, INVITATION_CREATED, INVITATION_RESENT, INVITATION_REVOKED, MAGIC_AUTH_CREATED, ORGANIZATION_CREATED, ORGANIZATION_DELETED, ORGANIZATION_UPDATED, ORGANIZATION_DOMAIN_CREATED, ORGANIZATION_DOMAIN_DELETED, ORGANIZATION_DOMAIN_UPDATED, ORGANIZATION_DOMAIN_VERIFIED, ORGANIZATION_DOMAIN_VERIFICATION_FAILED, PASSWORD_RESET_CREATED, PASSWORD_RESET_SUCCEEDED, USER_CREATED, USER_UPDATED, USER_DELETED, ORGANIZATION_MEMBERSHIP_CREATED, ORGANIZATION_MEMBERSHIP_DELETED, ORGANIZATION_MEMBERSHIP_UPDATED, ROLE_CREATED, ROLE_DELETED, ROLE_UPDATED, ORGANIZATION_ROLE_CREATED, ORGANIZATION_ROLE_DELETED, ORGANIZATION_ROLE_UPDATED, PERMISSION_CREATED, PERMISSION_DELETED, PERMISSION_UPDATED, PIPES_CONNECTED_ACCOUNT_CONNECTED, PIPES_CONNECTED_ACCOUNT_DISCONNECTED, PIPES_CONNECTED_ACCOUNT_REAUTHORIZATION_NEEDED, SESSION_CREATED, SESSION_REVOKED, WAITLIST_USER_APPROVED, WAITLIST_USER_CREATED, WAITLIST_USER_DENIED].freeze
+      ALL = [AGENT_REGISTRATION_CREATED, AGENT_REGISTRATION_CLAIM_ATTEMPT_CREATED, AGENT_REGISTRATION_CLAIM_COMPLETED, AGENT_REGISTRATION_CREDENTIAL_ISSUED, AGENT_REGISTRATION_ORGANIZATION_SWITCHED, AUTHENTICATION_EMAIL_VERIFICATION_SUCCEEDED, AUTHENTICATION_MAGIC_AUTH_FAILED, AUTHENTICATION_MAGIC_AUTH_SUCCEEDED, AUTHENTICATION_MFA_SUCCEEDED, AUTHENTICATION_OAUTH_FAILED, AUTHENTICATION_OAUTH_SUCCEEDED, AUTHENTICATION_PASSWORD_FAILED, AUTHENTICATION_PASSWORD_SUCCEEDED, AUTHENTICATION_PASSKEY_FAILED, AUTHENTICATION_PASSKEY_SUCCEEDED, AUTHENTICATION_SSO_FAILED, AUTHENTICATION_SSO_STARTED, AUTHENTICATION_SSO_SUCCEEDED, AUTHENTICATION_SSO_TIMED_OUT, AUTHENTICATION_RADAR_RISK_DETECTED, AUTHENTICATION_REAUTHENTICATION_SUCCEEDED, API_KEY_CREATED, API_KEY_REVOKED, API_KEY_UPDATED, CONNECTION_ACTIVATED, CONNECTION_DEACTIVATED, CONNECTION_SAML_CERTIFICATE_RENEWAL_REQUIRED, CONNECTION_SAML_CERTIFICATE_RENEWED, CONNECTION_DELETED, DSYNC_ACTIVATED, DSYNC_DELETED, DSYNC_GROUP_CREATED, DSYNC_GROUP_DELETED, DSYNC_GROUP_UPDATED, DSYNC_GROUP_USER_ADDED, DSYNC_GROUP_USER_REMOVED, DSYNC_USER_CREATED, DSYNC_USER_DELETED, DSYNC_USER_UPDATED, EMAIL_VERIFICATION_CREATED, GROUP_CREATED, GROUP_DELETED, GROUP_MEMBER_ADDED, GROUP_MEMBER_REMOVED, GROUP_UPDATED, FLAG_CREATED, FLAG_DELETED, FLAG_UPDATED, FLAG_RULE_UPDATED, INVITATION_ACCEPTED, INVITATION_CREATED, INVITATION_RESENT, INVITATION_REVOKED, MAGIC_AUTH_CREATED, ORGANIZATION_CREATED, ORGANIZATION_DELETED, ORGANIZATION_UPDATED, ORGANIZATION_DOMAIN_CREATED, ORGANIZATION_DOMAIN_DELETED, ORGANIZATION_DOMAIN_UPDATED, ORGANIZATION_DOMAIN_VERIFIED, ORGANIZATION_DOMAIN_VERIFICATION_FAILED, PASSWORD_RESET_CREATED, PASSWORD_RESET_SUCCEEDED, USER_CREATED, USER_UPDATED, USER_DELETED, ORGANIZATION_MEMBERSHIP_CREATED, ORGANIZATION_MEMBERSHIP_DELETED, ORGANIZATION_MEMBERSHIP_UPDATED, ROLE_CREATED, ROLE_DELETED, ROLE_UPDATED, ORGANIZATION_ROLE_CREATED, ORGANIZATION_ROLE_DELETED, ORGANIZATION_ROLE_UPDATED, PERMISSION_CREATED, PERMISSION_DELETED, PERMISSION_UPDATED, PIPES_CONNECTED_ACCOUNT_CONNECTED, PIPES_CONNECTED_ACCOUNT_CONNECTION_FAILED, PIPES_CONNECTED_ACCOUNT_DISCONNECTED, PIPES_CONNECTED_ACCOUNT_REAUTHORIZATION_NEEDED, SESSION_CREATED, SESSION_REVOKED, WAITLIST_USER_APPROVED, WAITLIST_USER_CREATED, WAITLIST_USER_DENIED].freeze
     end
   end
 end

data/lib/workos/types/custom_provider_definition_authenticate_via.rb

@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  module Types
+    class CustomProviderDefinitionAuthenticateVia
+      REQUEST_BODY = "request_body"
+      BASIC_AUTH_HEADER = "basic_auth_header"
+      ALL = [REQUEST_BODY, BASIC_AUTH_HEADER].freeze
+    end
+  end
+end

data/lib/workos/types/data_integration_credential_type.rb

@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  module Types
+    class DataIntegrationCredentialType
+      CUSTOM = "custom"
+      ORGANIZATION = "organization"
+      ALL = [CUSTOM, ORGANIZATION].freeze
+    end
+  end
+end

data/lib/workos/types/data_integration_credentials_response_error.rb

@@ -0,0 +1,9 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  module Types
+    DataIntegrationCredentialsResponseError = DataIntegrationAccessTokenResponseError
+  end
+end

data/lib/workos/types/data_integration_credentials_type.rb

@@ -0,0 +1,9 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  module Types
+    DataIntegrationCredentialsType = DataIntegrationCredentialType
+  end
+end

data/lib/workos/types/data_integration_custom_provider_authenticate_via.rb

@@ -0,0 +1,9 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  module Types
+    DataIntegrationCustomProviderAuthenticateVia = CustomProviderDefinitionAuthenticateVia
+  end
+end

data/lib/workos/types/data_integration_state.rb

@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  module Types
+    class DataIntegrationState
+      VALID = "valid"
+      INVALID = "invalid"
+      REQUESTED = "requested"
+      ALL = [VALID, INVALID, REQUESTED].freeze
+    end
+  end
+end

data/lib/workos/types/data_integrations_list_response_data_connected_account_state.rb

@@ -4,6 +4,11 @@
 
 module WorkOS
   module Types
-    DataIntegrationsListResponseDataConnectedAccountState = ConnectedAccountState
+    class DataIntegrationsListResponseDataConnectedAccountState
+      CONNECTED = "connected"
+      NEEDS_REAUTHORIZATION = "needs_reauthorization"
+      DISCONNECTED = "disconnected"
+      ALL = [CONNECTED, NEEDS_REAUTHORIZATION, DISCONNECTED].freeze
+    end
   end
 end

data/lib/workos/types/update_custom_provider_definition_authenticate_via.rb

@@ -0,0 +1,9 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  module Types
+    UpdateCustomProviderDefinitionAuthenticateVia = CustomProviderDefinitionAuthenticateVia
+  end
+end

data/lib/workos/types/user_role_assignment_source_type.rb

@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  module Types
+    class UserRoleAssignmentSourceType
+      DIRECT = "direct"
+      GROUP = "group"
+      ALL = [DIRECT, GROUP].freeze
+    end
+  end
+end

data/lib/workos/user_management/authorization_code_session_authenticate_request.rb

@@ -13,7 +13,8 @@ module WorkOS
       invitation_token: :invitation_token,
       ip_address: :ip_address,
       device_id: :device_id,
-      user_agent: :user_agent
+      user_agent: :user_agent,
+      signals_id: :signals_id
     }.freeze
 
     attr_accessor \
@@ -25,7 +26,8 @@ module WorkOS
       :invitation_token,
       :ip_address,
       :device_id,
-      :user_agent
+      :user_agent,
+      :signals_id
 
     def initialize(json)
       hash = self.class.normalize(json)
@@ -38,6 +40,7 @@ module WorkOS
       @ip_address = hash[:ip_address]
       @device_id = hash[:device_id]
       @user_agent = hash[:user_agent]
+      @signals_id = hash[:signals_id]
     end
   end
 end

data/lib/workos/user_management/create_magic_code_and_return.rb

@@ -6,17 +6,29 @@ module WorkOS
   class CreateMagicCodeAndReturn < WorkOS::Types::BaseModel
     HASH_ATTRS = {
       email: :email,
-      invitation_token: :invitation_token
+      invitation_token: :invitation_token,
+      ip_address: :ip_address,
+      user_agent: :user_agent,
+      radar_auth_attempt_id: :radar_auth_attempt_id,
+      signals_id: :signals_id
     }.freeze
 
     attr_accessor \
       :email,
-      :invitation_token
+      :invitation_token,
+      :ip_address,
+      :user_agent,
+      :radar_auth_attempt_id,
+      :signals_id
 
     def initialize(json)
       hash = self.class.normalize(json)
       @email = hash[:email]
       @invitation_token = hash[:invitation_token]
+      @ip_address = hash[:ip_address]
+      @user_agent = hash[:user_agent]
+      @radar_auth_attempt_id = hash[:radar_auth_attempt_id]
+      @signals_id = hash[:signals_id]
     end
   end
 end

data/lib/workos/user_management/create_user.rb

@@ -12,6 +12,9 @@ module WorkOS
       email_verified: :email_verified,
       metadata: :metadata,
       external_id: :external_id,
+      ip_address: :ip_address,
+      user_agent: :user_agent,
+      signals_id: :signals_id,
       password: :password,
       password_hash: :password_hash,
       password_hash_type: :password_hash_type
@@ -25,6 +28,9 @@ module WorkOS
       :email_verified,
       :metadata,
       :external_id,
+      :ip_address,
+      :user_agent,
+      :signals_id,
       :password,
       :password_hash,
       :password_hash_type
@@ -38,6 +44,9 @@ module WorkOS
       @email_verified = hash[:email_verified]
       @metadata = hash[:metadata] || {}
       @external_id = hash[:external_id]
+      @ip_address = hash[:ip_address]
+      @user_agent = hash[:user_agent]
+      @signals_id = hash[:signals_id]
       @password = hash[:password]
       @password_hash = hash[:password_hash]
       @password_hash_type = hash[:password_hash_type]