workos 9.5.1 → 10.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1c34fe37d22956705fc72fc7bc0aabd35e5dde5a4a784263705ac684708d8482
-  data.tar.gz: 8d40b87964c3fb62b7f06bf58d9a93256a37aa45428741ba61f8f05fa0b93aba
+  metadata.gz: b11c529bc0ccad98b5d2673f1a4418ecc0c16bb0f8853d31710a05284f3e5057
+  data.tar.gz: e61ed07475746367f32c38679ca20370604f4bbf8b8745751a650a9ed5ba5bb0
 SHA512:
-  metadata.gz: 43edc59178986404b4ce4efbf2bfc614775dd53a82d987adea6e9713a38b71ab7b2c8c11e5579bdf26b83a48f980c493b2c387a2eb433c8dbc9293e4aa3edaf2
-  data.tar.gz: 3a302db04edaaf67e5b27e66a114587a7e9cef1d1ae163fad0e1b240207ac84faed2a60e7ebc8fabd62b0ea7ceb6ad84e64d1a0632830f6d87e7787c64e9fd20
+  metadata.gz: a5400bb7f9b56099600fcfe73ccbb9275a79dd58dfd3744c9785db3bf116f0f3ca7259b625fbcc081f537e3754ccfb3e530390c4efed4d20d9841f98fc92967b
+  data.tar.gz: b3f0aa44d338fd95cd25d85ea422d31373c897adff105a58b3085f0c321338a23707a1546e1ace4ff9099f97461be568f50734d6c60bfe4e5be4601a49af5e68

data/.claude/CLAUDE.md

@@ -0,0 +1,38 @@
+# WorkOS Ruby SDK — Agent Context
+
+Most code in this repository is **auto-generated**. It is emitted by the
+oagen pipeline from the WorkOS OpenAPI spec. It is not hand-written here,
+and most bugs in it cannot be fixed here.
+
+## The generation pipeline
+
+| Repo | Role |
+| --- | --- |
+| [workos/openapi-spec](https://github.com/workos/openapi-spec) | Source of truth for the API surface (the OpenAPI spec, exported by the WorkOS API) and the orchestration entrypoint for all SDK generation |
+| [workos/oagen](https://github.com/workos/oagen) | The generator engine (spec → IR → code) |
+| [workos/oagen-emitters](https://github.com/workos/oagen-emitters) | The per-language emitters, including the Ruby emitter that produces this repo's code |
+
+Regeneration runs from a checkout of `openapi-spec`, never from this repo:
+
+```bash
+npm run sdk:generate -- --lang ruby --output workos-ruby
+```
+
+## Generated vs. hand-maintained code
+
+- Generated files begin with the header `# This file is auto-generated by oagen. Do not edit.` — treat them as build artifacts.
+- Hand-maintained code is fenced with `@oagen-ignore-start` / `@oagen-ignore-end` markers, or lives in files marked `@oagen-ignore-file`. Only this code is editable in this repo.
+
+## Where to fix an issue
+
+| Symptom | Fix it in |
+| --- | --- |
+| Wrong or missing endpoint, field, type, or enum value | [workos/openapi-spec](https://github.com/workos/openapi-spec) (or the WorkOS API that exports the spec) |
+| Generated Ruby code is broken or un-idiomatic | [workos/oagen-emitters](https://github.com/workos/oagen-emitters) |
+| Generator behavior: naming, IR, pagination, compat checks | [workos/oagen](https://github.com/workos/oagen) |
+| Code inside `@oagen-ignore` fences or ignore-marked files | This repo — edit normally |
+
+Don't hand-edit a file that has the generated header — the next
+`sdk:generate` run silently overwrites it. Instead, fix the emitter or the
+spec upstream and regenerate. If a requested fix lands in a generated file,
+say so and point at the upstream repo rather than patching it here.

data/.github/workflows/block-generated-edits.yml

@@ -0,0 +1,13 @@
+name: Block Generated File Edits
+
+on:
+  pull_request_target:
+    # No "reopened": a maintainer reopening to override the bot should not be
+    # immediately re-closed. A follow-up push (synchronize) re-checks.
+    types: [opened, synchronize]
+
+jobs:
+  block-generated-edits:
+    uses: workos/actions/.github/workflows/block-generated-edits.yml@5c7450a04f5a182b346eae2d833b869e337b12bb # main
+    secrets:
+      SDK_BOT_PRIVATE_KEY: ${{ secrets.SDK_BOT_PRIVATE_KEY }}

data/.github/workflows/ci.yml

@@ -21,8 +21,8 @@ jobs:
           - '3.4'
           - '4.0'
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # 6.0.3
-      - uses: ruby/setup-ruby@12fd324f1d0b43274fdc8130f6980590a667c455 # 1.312.0
+      - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # 6.1.0
+      - uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # 1.321.0
         with:
           ruby-version: ${{ matrix.ruby }}
           bundler-cache: true

data/.github/workflows/docs.yml

@@ -14,8 +14,8 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # 6.0.3
-      - uses: ruby/setup-ruby@12fd324f1d0b43274fdc8130f6980590a667c455 # 1.312.0
+      - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # 6.1.0
+      - uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # 1.321.0
         with:
           bundler-cache: true
       - run: ./script/docs

data/.github/workflows/lint.yml

@@ -15,8 +15,8 @@ jobs:
     name: Lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # 6.0.3
-      - uses: ruby/setup-ruby@12fd324f1d0b43274fdc8130f6980590a667c455 # 1.312.0
+      - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # 6.1.0
+      - uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # 1.321.0
         with:
           bundler-cache: true
 

data/.github/workflows/release-please.yml

@@ -3,10 +3,10 @@ name: Release Please
 on:
   push:
     branches:
-      - v9.5.x
+      - main
 
 concurrency:
-  group: release-please-v9.5.x
+  group: release-please
   cancel-in-progress: false
 
 permissions:
@@ -35,12 +35,13 @@ jobs:
         with:
           app-id: ${{ vars.SDK_BOT_APP_ID }}
           private-key: ${{ secrets.SDK_BOT_PRIVATE_KEY }}
+          permission-contents: write
+          permission-pull-requests: write
 
       - uses: googleapis/release-please-action@45996ed1f6d02564a971a2fa1b5860e934307cf7 # v5.0.0
         id: release
         with:
           token: ${{ steps.generate-token.outputs.token }}
-          target-branch: v9.5.x
 
   # While the release PR is open, enrich it before it merges. Runs as its
   # own job (gated on the PR existing) so a failure here can never block the
@@ -56,9 +57,11 @@ jobs:
         with:
           app-id: ${{ vars.SDK_BOT_APP_ID }}
           private-key: ${{ secrets.SDK_BOT_PRIVATE_KEY }}
+          permission-contents: write
+          permission-pull-requests: write
 
       - name: Checkout release PR branch
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # 6.0.3
+        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # 6.1.0
         with:
           ref: ${{ fromJSON(needs.release-please.outputs.pr).headBranchName }}
           token: ${{ steps.generate-token.outputs.token }}
@@ -152,7 +155,7 @@ jobs:
           git push
 
       - name: Set up Ruby
-        uses: ruby/setup-ruby@12fd324f1d0b43274fdc8130f6980590a667c455 # 1.312.0
+        uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # 1.321.0
         with:
           ruby-version: ruby
 
@@ -184,8 +187,10 @@ jobs:
         with:
           app-id: ${{ vars.SDK_BOT_APP_ID }}
           private-key: ${{ secrets.SDK_BOT_PRIVATE_KEY }}
+          permission-contents: write
+          permission-pull-requests: write
 
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # 6.0.3
+      - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # 6.1.0
         with:
           token: ${{ steps.generate-token.outputs.token }}
 

data/.github/workflows/release.yml

@@ -22,10 +22,10 @@ jobs:
           role-to-assume: rg_oidc_akr_fn8dx45asckvmsnd2kka
 
       - name: Checkout
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # 6.0.3
+        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # 6.1.0
 
       - name: Setup Ruby
-        uses: ruby/setup-ruby@12fd324f1d0b43274fdc8130f6980590a667c455 # 1.312.0
+        uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # 1.321.0
         with:
           bundler-cache: true
 

data/.last-synced-sha

@@ -1 +1 @@
-23faa38318d596e581656934ed72c4a18476d742
+edb560e2be3f54b668ea8d11fa5a060c87ab5087