RubyGems - workos - Versions diffs - 9.5.1 → 10.3.0 - Mend

workos 9.5.1 → 10.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (415) hide show

data/.release-please-manifest.json CHANGED Viewed

@@ -1,3 +1,3 @@
 {
-  ".": "9.5.1"
+  ".": "10.3.0"
 }

data/AGENTS.md ADDED Viewed

	@@ -0,0 +1 @@
1	+ .claude/CLAUDE.md

data/CHANGELOG.md CHANGED Viewed

@@ -1,11 +1,339 @@
 # Changelog
-## [9.5.1](https://github.com/workos/workos-ruby/compare/v9.5.0...v9.5.1) (2026-08-20)
+## [10.3.0](https://github.com/workos/workos-ruby/compare/v10.2.1...v10.3.0) (2026-09-01)
+* [#546](https://github.com/workos/workos-ruby/pull/546) feat(generated)!: regenerate from spec (5 changes)
+  **⚠️ Breaking**
+  * **[agents](https://workos.com/docs/reference/agents)**:
+    * Removed service `Agents`
+  * **[sso](https://workos.com/docs/reference/sso)**:
+    * Removed model `TokenBody`
+    * Removed enum `TokenBodyGrantType`
+    * Removed model `TokenQuery`
+    * Changed parameter `SSO.token.grant_type`
+  **Features**
+  * **[agents](https://workos.com/docs/reference/agents)**:
+    * Added model `AgentBlueprint`
+    * Added model `AgentInstance`
+    * Added model `AgentToken`
+    * Added model `AgentInstanceSession`
+    * Added model `AgentBlueprintInvocableBy`
+    * Added model `AgentBlueprintSessionSetting`
+    * Added model `AgentBlueprintsCreateRequest`
+    * Added model `AgentBlueprintsCreateRequestInvocableBy`
+    * Added model `AgentBlueprintsCreateRequestSessionSetting`
+    * Added model `AgentBlueprintsUpdateRequest`
+    * Added model `AgentBlueprintsUpdateRequestInvocableBy`
+    * Added model `AgentBlueprintsUpdateRequestSessionSetting`
+    * Added model `AgentBlueprintsTokenMintTokenRequest`
+    * Added enum `AgentInstanceType`
+    * Added enum `AgentInstanceSessionStatus`
+    * Added enum `AgentBlueprintsTokenMintTokenRequestType`
+  * **agents_blueprints**:
+    * Added service `AgentsBlueprints`
+  * **agents_blueprints_tokens**:
+    * Added service `AgentsBlueprintsTokens`
+  * **agents_instances**:
+    * Added service `AgentsInstances`
+  * **agents_registrations**:
+    * Added service `AgentsRegistrations`
+  * **agents_sessions**:
+    * Added service `AgentsSessions`
+  * **[organizations](https://workos.com/docs/reference/organization)**:
+    * Added `retention_period` to `UpdateAuditLogsRetention`
+    * Made `UpdateAuditLogsRetention.retention_period_in_days` optional
+    * Added enum `UpdateAuditLogsRetentionRetentionPeriod`
+    * Added model `CreateItContact`
+    * Added model `InviteItContact`
+    * Added model `ItContact`
+    * Added model `ItContactList`
+    * Added model `ItContactListListMetadata`
+    * Added enum `InviteItContactIntents`
+    * Added service `OrganizationsItContacts`
+  * **platform_teams**:
+    * Added model `CreateTeam`
+    * Added model `Team`
+    * Added enum `TeamProductionState`
+    * Added service `PlatformTeams`
+  * **[sso](https://workos.com/docs/reference/sso)**:
+    * Added model `TokenQuery`
+    * Added enum `TokenQueryGrantType`
+    * Added model `CreateConnectionKeyPair`
+    * Added model `CreateConnectionSAMLOptions`
+    * Added model `CreateConnectionOidcOptions`
+    * Added model `CreateConnectionStandardAttributes`
+    * Added model `CreateConnectionAttributeMaps`
+    * Added model `CreateConnection`
+    * Added model `PatchConnectionSAMLOptions`
+    * Added model `PatchConnectionOidcOptions`
+    * Added model `PatchConnectionStandardAttributes`
+    * Added model `PatchConnectionAttributeMaps`
+    * Added model `PatchConnection`
+    * Added model `CreateSAMLIdpSigningCertificate`
+    * Added model `SAMLIdpSigningCertificate`
+    * Added model `SAMLIdpSigningCertificateList`
+    * Added model `SAMLSpEncryptionCertificate`
+    * Added model `SAMLSpEncryptionCertificateList`
+    * Added model `SAMLSpSigningCertificate`
+    * Added enum `CreateConnectionOidcOptionsIdTokenSignatureAlgorithm`
+    * Added enum `PatchConnectionOidcOptionsIdTokenSignatureAlgorithm`
+    * Added endpoint `POST /connections`
+    * Added endpoint `GET /connections/{connectionId}/saml_idp_signing_certs`
+    * Added endpoint `POST /connections/{connectionId}/saml_idp_signing_certs`
+    * Added endpoint `DELETE /connections/{connectionId}/saml_idp_signing_certs/{certificateId}`
+    * Added endpoint `GET /connections/{connectionId}/saml_sp_encryption_certs`
+    * Added endpoint `POST /connections/{connectionId}/saml_sp_encryption_certs`
+    * Added endpoint `DELETE /connections/{connectionId}/saml_sp_encryption_certs/{certificateId}`
+    * Added endpoint `GET /connections/{connectionId}/saml_sp_signing_cert`
+    * Added endpoint `POST /connections/{connectionId}/saml_sp_signing_cert`
+    * Added endpoint `DELETE /connections/{connectionId}/saml_sp_signing_cert/{certificateId}`
+    * Added endpoint `PATCH /connections/{id}`
+    * Added model `TokenBody`
+    * Added enum `TokenBodyGrantType`
+    * Added enum `SSOGrantType`
+    * Changed required status for parameter `SSO.token.code`
+  * **[user_management](https://workos.com/docs/reference/authkit/user)**:
+    * Added enum `CreateConnectionOidcOptionsTokenAuthenticationMethod`
+    * Added enum `PatchConnectionOidcOptionsTokenAuthenticationMethod`
+    * Added model `EmailCompletionSessionAuthenticateRequest`
+    * Added model `CreateWaitlistEntry`
+    * Added model `Waitlist`
+    * Added model `WaitlistEntry`
+    * Added enum `WaitlistEntryState`
+    * Added enum `UserManagementWaitlistsState`
+    * Added service `UserManagementWaitlists`
+  * **[webhooks](https://workos.com/docs/reference/webhooks)**:
+    * Added `agent.instance.created` to `CreateWebhookEndpointEvents`
+    * Added `agent.instance.deleted` to `CreateWebhookEndpointEvents`
+    * Added `agent.instance.session.created` to `CreateWebhookEndpointEvents`
+    * Added `agent.instance.session.revoked` to `CreateWebhookEndpointEvents`
+    * Added `agent.instance.created` to `UpdateWebhookEndpointEvents`
+    * Added `agent.instance.deleted` to `UpdateWebhookEndpointEvents`
+    * Added `agent.instance.session.created` to `UpdateWebhookEndpointEvents`
+    * Added `agent.instance.session.revoked` to `UpdateWebhookEndpointEvents`
+    * Added `agent.blueprint.created` to `CreateWebhookEndpointEvents`
+    * Added `agent.blueprint.deleted` to `CreateWebhookEndpointEvents`
+    * Added `agent.blueprint.updated` to `CreateWebhookEndpointEvents`
+    * Added `agent.blueprint.created` to `UpdateWebhookEndpointEvents`
+    * Added `agent.blueprint.deleted` to `UpdateWebhookEndpointEvents`
+    * Added `agent.blueprint.updated` to `UpdateWebhookEndpointEvents`
+  **Fixes**
+  * **[sso](https://workos.com/docs/reference/sso)**:
+    * Changed request body of `SSO.token` from `TokenBody` to `TokenQuery`
+    * Removed `DiscordOAuth` from `ConnectionType`
+    * Removed `GrokOAuth` from `ConnectionType`
+    * Removed `XOAuth` from `ConnectionType`
+    * Removed `DiscordOAuth` from `ProfileConnectionType`
+    * Removed `GrokOAuth` from `ProfileConnectionType`
+    * Removed `XOAuth` from `ProfileConnectionType`
+    * Removed `DiscordOAuth` from `ConnectionsConnectionType`
+    * Removed `GrokOAuth` from `ConnectionsConnectionType`
+    * Removed `XOAuth` from `ConnectionsConnectionType`
+    * Changed request body of `SSO.token` from `TokenQuery` to `TokenBody`
+  * **[user_management](https://workos.com/docs/reference/authkit/user)**:
+    * Changed request body for `UserManagementAuthentication.authenticate`
+    * Changed errors for endpoint `POST /user_management/authenticate`
+    * Removed `DiscordOAuth` from `AuthenticateResponseAuthenticationMethod`
+    * Removed `GrokOAuth` from `AuthenticateResponseAuthenticationMethod`
+    * Removed `XOAuth` from `AuthenticateResponseAuthenticationMethod`
+    * Removed `DiscordOAuth` from `UserIdentitiesGetItemProvider`
+    * Removed `GrokOAuth` from `UserIdentitiesGetItemProvider`
+    * Removed `XOAuth` from `UserIdentitiesGetItemProvider`
+    * Changed errors for endpoint `DELETE /user_management/users/{id}`
+* [#549](https://github.com/workos/workos-ruby/pull/549) fix(generated): regenerate from spec
+  **Features**
+  * **[agents](https://workos.com/docs/reference/agents)**:
+    * Made `AgentBlueprintsCreateRequest.session_settings` optional
+    * Added model `AgentTokenValidation`
+    * Added model `AgentBlueprintsTokenValidateTokenRequest`
+  * **agents_blueprints_tokens**:
+    * Added endpoint `POST /agents/blueprints/{agent_blueprint_id}/tokens/validate`
+## [10.2.1](https://github.com/workos/workos-ruby/compare/v10.2.0...v10.2.1) (2026-08-20)
 ### Bug Fixes
-* explicitly evict connections if request does not complete as success ([bfee53e](https://github.com/workos/workos-ruby/commit/bfee53efbd80a2156cbd15b70b483be66913e714))
+* explicitly evict connections if request does not complete as success ([e792414](https://github.com/workos/workos-ruby/commit/e79241473e9cb0e8898632723200a7e23682ff24))
+## [10.2.0](https://github.com/workos/workos-ruby/compare/v10.1.0...v10.2.0) (2026-08-11)
+* [#533](https://github.com/workos/workos-ruby/pull/533) feat(generated)!: regenerate from spec (2 changes)
+  **⚠️ Breaking**
+  * **[events](https://workos.com/docs/reference/events)**:
+    * Changed required status for parameter `Events.list.events`
+  **Features**
+  * **[groups](https://workos.com/docs/reference/groups)**:
+    * Added parameter `Groups.list.search`
+  * **[connect](https://workos.com/docs/reference/workos-connect/standalone)**:
+    * Added `client_id` to `ConnectedAccount`
+    * Added `client_secret_last_4` to `ConnectedAccount`
+    * Added `config` to `ConnectedAccount`
+  * **[pipes](https://workos.com/docs/reference/pipes)**:
+    * Added `client_id` to `DataIntegrationsListResponseDataConnectedAccount`
+    * Added `client_secret_last_4` to `DataIntegrationsListResponseDataConnectedAccount`
+    * Added `config` to `DataIntegrationsListResponseDataConnectedAccount`
+    * Changed errors for endpoint `POST /data-integrations/{slug}/credentials`
+    * Made `CustomProviderDefinition.authorization_url` optional
+    * Made `CustomProviderDefinition.token_url` optional
+    * Added model `DataIntegrationsUpsertClientCredentialsRequest`
+    * Added `client_credentials` to `CreateDataIntegrationAuthMethods`
+    * Added endpoint `PUT /data-integrations/{slug}/client-credentials`
+  * **[sso](https://workos.com/docs/reference/sso)**:
+    * Added `XOAuth` to `ConnectionType`
+    * Added `XOAuth` to `ProfileConnectionType`
+    * Added `XOAuth` to `ConnectionsConnectionType`
+    * Added `GrokOAuth` to `ConnectionType`
+    * Added `GrokOAuth` to `ProfileConnectionType`
+    * Added `GrokOAuth` to `ConnectionsConnectionType`
+  * **[user_management](https://workos.com/docs/reference/authkit/user)**:
+    * Changed errors for endpoint `DELETE /user_management/users/{id}`
+    * Added `password_salt_position` to `CreateUser`
+    * Added `password_salt_position` to `UpdateUser`
+    * Made `RadarSmsChallengeCodeSessionAuthenticateRequest.verification_id` optional
+    * Made `RadarSmsChallengeCodeSessionAuthenticateRequest.phone_number` optional
+    * Added enum `CreateUserPasswordSaltPosition`
+    * Added enum `UpdateUserPasswordSaltPosition`
+    * Added `XOAuth` to `AuthenticateResponseAuthenticationMethod`
+    * Added `XOAuth` to `UserIdentitiesGetItemProvider`
+    * Added `GrokOAuth` to `AuthenticateResponseAuthenticationMethod`
+    * Added `GrokOAuth` to `UserIdentitiesGetItemProvider`
+  * **[webhooks](https://workos.com/docs/reference/webhooks)**:
+    * Added `agent.registration.refreshed` to `CreateWebhookEndpointEvents`
+    * Added `agent.registration.refreshed` to `UpdateWebhookEndpointEvents`
+  **Fixes**
+  * **[pipes](https://workos.com/docs/reference/pipes)**:
+    * Changed the type of `DataIntegration.credentials`
+  * **[user_management](https://workos.com/docs/reference/authkit/user)**:
+    * Changed errors for endpoint `POST /user_management/authenticate`
+    * Changed errors for endpoint `POST /user_management/users`
+    * Changed errors for endpoint `PUT /user_management/users/{id}`
+## [10.1.0](https://github.com/workos/workos-ruby/compare/v10.0.0...v10.1.0) (2026-07-28)
+### Features
+* replace hand-written URL builders with generated ones ([b162486](https://github.com/workos/workos-ruby/commit/b1624866137d8364dda1726b0302b70bed00a75c))
+* [#531](https://github.com/workos/workos-ruby/pull/531) fix(generated): regenerate from spec
+  **Features**
+  * **[pipes](https://workos.com/docs/reference/pipes)**:
+    * Added `config` to `DataIntegrationsGetDataIntegrationAuthorizeUrlRequest`
+    * Added `client_credentials` to `DataIntegrationAuthMethods`
+    * Added `client_credentials` to `DataIntegrationsListResponseDataAuthMethods`
+    * Added `client_credentials` to `DataIntegrationsListResponseDataConnectedAccountAuthMethod`
+    * Added `config` to Pipes models
+  * **[connect](https://workos.com/docs/reference/workos-connect/standalone)**:
+    * Added `client_credentials` to `ConnectedAccountAuthMethod`
+  **Fixes**
+  * **[user_management](https://workos.com/docs/reference/authkit/user)**:
+    * Changed errors for endpoint `POST /user_management/invitations`
+    * Changed errors for endpoint `POST /user_management/invitations/{id}/resend`
+    * Changed errors for endpoint `POST /user_management/magic_auth`
+    * Changed errors for endpoint `POST /user_management/authenticate`
+* [#532](https://github.com/workos/workos-ruby/pull/532) fix(generated): regenerate from spec
+  **Fixes**
+  * **[sso](https://workos.com/docs/reference/sso)**:
+    * Removed `callback_endpoint` from `Connection`
+## [10.0.0](https://github.com/workos/workos-ruby/compare/v9.5.0...v10.0.0) (2026-07-22)
+### Bug Fixes
+* Preserve explicit nil in request bodies as JSON null ([#522](https://github.com/workos/workos-ruby/issues/522)) ([5b06e32](https://github.com/workos/workos-ruby/commit/5b06e329ffe25b97ac9299571586ce2ecdca4a96))
+* [#524](https://github.com/workos/workos-ruby/pull/524) feat(generated)!: regenerate from spec (3 changes)
+  **Features**
+  * **agents**:
+    * Added model `ClaimViewResponse`
+    * Added model `ClaimViewResponseOrganization`
+    * Added model `AgentAdminLinkClaimAttemptToExternalUserRequest`
+    * Added model `AgentAdminLinkClaimAttemptToExternalUserRequestUser`
+    * Added enum `ClaimViewResponseStatus`
+    * Added endpoint `PATCH /agents/claims/attempts`
+    * Added model `AgentRegistration`
+    * Added model `AgentCredentialValidation`
+    * Added model `AgentRegistrationAgentIdentity`
+    * Added model `AgentRegistrationClaim`
+    * Added model `AgentAdminValidateCredentialRequest`
+    * Added model `AgentRegistrationClaimClaimCompletion`
+    * Added enum `AgentRegistrationStatus`
+    * Added enum `AgentRegistrationKind`
+    * Added enum `AgentAdminValidateCredentialRequestType`
+    * Added service `Agents`
+  * **[api_keys](https://workos.com/docs/reference/authkit/api-keys)**:
+    * Added `agent_registration_id` to `ApiKeyValidationResponse`
+  * **[connect](https://workos.com/docs/reference/workos-connect/standalone)**:
+    * Added enum `ApplicationsRegistrationTypes`
+    * Added parameter `Applications.list.registration_types`
+  * **[directory_sync](https://workos.com/docs/reference/directory-sync)**:
+    * Added parameter `DirectoryUsers.list.idp_id`
+    * Added parameter `DirectoryUsers.list.email`
+  * **[organizations](https://workos.com/docs/reference/organization)**:
+    * Added model `OrganizationAuthorizedConnectApplicationList`
+    * Added model `OrganizationAuthorizedConnectApplicationListData`
+    * Added model `OrganizationAuthorizedConnectApplicationListListMetadata`
+    * Added service `OrganizationsAuthorizedApplications`
+  * **[pipes](https://workos.com/docs/reference/pipes)**:
+    * Added model `DataIntegrationInstallation`
+    * Added `auth_methods` to `CreateDataIntegration`
+    * Added `api_key` to `CreateDataIntegration`
+    * Added `api_key` to `UpdateDataIntegration`
+    * Added `auth_methods` to `DataIntegration`
+    * Added `installation` to `DataIntegration`
+    * Added enum `CreateDataIntegrationAuthMethods`
+    * Added enum `DataIntegrationAuthMethods`
+    * Added model `DataIntegrationCredentialsResponse`
+    * Added model `DataIntegrationCredentialsResponseCredential`
+    * Added model `DataIntegrationsUpsertApiKeyRequest`
+    * Added model `DataIntegrationsVendCredentialsRequest`
+    * Added enum `DataIntegrationCredentialsResponseError`
+    * Added endpoint `PUT /data-integrations/{slug}/api-key`
+    * Added endpoint `POST /data-integrations/{slug}/credentials`
+  * **[sso](https://workos.com/docs/reference/sso)**:
+    * Added parameter `SSO.authorize.prompt`
+  * **[user_management](https://workos.com/docs/reference/authkit/user)**:
+    * Added `ssha256` to `CreateUserPasswordHashType`
+    * Added `ssha256` to `UpdateUserPasswordHashType`
+    * Added endpoint `GET /user_management/radar_challenges/{id}`
+  * **[webhooks](https://workos.com/docs/reference/webhooks)**:
+    * Added `agent.registration.revoked` to `CreateWebhookEndpointEvents`
+    * Added `agent.registration.revoked` to `UpdateWebhookEndpointEvents`
+    * Added `agent.registration.deleted` to `CreateWebhookEndpointEvents`
+    * Added `agent.registration.deleted` to `UpdateWebhookEndpointEvents`
+    * Added `radar.challenge_created` to `CreateWebhookEndpointEvents`
+    * Added `radar.challenge_created` to `UpdateWebhookEndpointEvents`
+    * Added `agent.registration.expired` to `CreateWebhookEndpointEvents`
+    * Added `agent.registration.expired` to `UpdateWebhookEndpointEvents`
+  * **[widgets](https://workos.com/docs/reference/widgets)**:
+    * Made `WidgetSessionToken.organization_id` optional
+* [#527](https://github.com/workos/workos-ruby/pull/527) feat(generated)!: regenerate from spec (5 changes)
+  **⚠️ Breaking**
+  * **[admin_portal](https://workos.com/docs/reference/admin-portal)**:
+    * SDK surface change: Symbol "IntentOptions" was removed
+  * **[connect](https://workos.com/docs/reference/workos-connect/standalone)**:
+    * SDK surface change: Symbol "ConnectedAccountDto" was removed
+  * **[organization_domains](https://workos.com/docs/reference/domain-verification)**:
+    * SDK surface change: Symbol "DomainVerificationIntentOptions" was removed
+  * **[pipes](https://workos.com/docs/reference/pipes)**:
+    * SDK surface change: Symbol "DataIntegrationCredentialsDto" was removed
+  * **[sso](https://workos.com/docs/reference/sso)**:
+    * SDK surface change: Symbol "SSOIntentOptions" was removed
 ## [9.5.0](https://github.com/workos/workos-ruby/compare/v9.4.0...v9.5.0) (2026-07-06)

data/Gemfile.lock CHANGED Viewed

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    workos (9.5.1)
+    workos (10.3.0)
       jwt (~> 3.1)
       logger (~> 1.7)
       zeitwerk (~> 2.6)
@@ -153,7 +153,7 @@ CHECKSUMS
   unicode-emoji (4.2.0) sha256=519e69150f75652e40bf736106cfbc8f0f73aa3fb6a65afe62fefa7f80b0f80f
   webmock (3.26.2) sha256=774556f2ea6371846cca68c01769b2eac0d134492d21f6d0ab5dd643965a4c90
   webrick (1.9.2) sha256=beb4a15fc474defed24a3bda4ffd88a490d517c9e4e6118c3edce59e45864131
-  workos (9.5.1)
+  workos (10.3.0)
   yard (0.9.44) sha256=eb087e9b631ccd887b049f303d489963945452d5e2a7eb49a5a74a7cf6887f28
   yard-markdown (0.7.1) sha256=06c378632dfe7ba053be9ba469eb4701aa0470e36bcf7e5546f353eb90c1bfd1
   zeitwerk (2.7.5) sha256=d8da92128c09ea6ec62c949011b00ed4a20242b255293dd66bf41545398f73dd

data/README.md CHANGED Viewed

@@ -25,13 +25,7 @@ gem "workos"
 ## Configuration
-To use the library, provide your WorkOS API key as `WORKOS_API_KEY` and, for AuthKit and SSO flows, your client ID as `WORKOS_CLIENT_ID`:
-```sh
-WORKOS_API_KEY=sk_test_123 WORKOS_CLIENT_ID=client_123 ruby app.rb
-```
-Or configure the SDK in an initializer:
+Store your WorkOS API key (and, for AuthKit and SSO flows, your client ID) in environment variables such as `WORKOS_API_KEY` and `WORKOS_CLIENT_ID`, then pass them to the SDK explicitly. The SDK does not read these environment variables automatically — configure it in an initializer:
 ```ruby
 # /config/initializers/workos.rb
@@ -77,6 +71,7 @@ tenant_b.organizations.list_organizations
 ```ruby
 public_client = WorkOS::PublicClient.create(client_id: "client_123")
 url, verifier, state = public_client.user_management.get_authorization_url_with_pkce(
+  provider: "authkit",
   redirect_uri: "https://example.com/callback"
 )
 ```
@@ -93,20 +88,22 @@ on_worker_boot { WorkOS.reset_client }
 ## Per-request options
-Every API call accepts `request_options:` for per-call overrides:
+Every method that makes an HTTP request accepts `request_options:` for per-call overrides (local URL-building helpers such as `get_authorization_url` and `get_logout_url` do not):
 ```ruby
 organization = WorkOS.client.organizations.get_organization(
   id: "org_123",
   request_options: {
     timeout: 10,
-    extra_headers: {"X-Request-Source" => "admin"},
-    idempotency_key: "org-create-123"
+    extra_headers: {"X-Request-Source" => "admin"}
   }
 )
 ```
-`Idempotency-Key` is only sent when you provide `request_options[:idempotency_key]`, or when the SDK retries a mutating request after a transient failure.
+`Idempotency-Key` is only sent on `POST`, `PUT`, and `PATCH` requests — either when you provide `request_options[:idempotency_key]`, or auto-generated when the SDK retries one of those requests after a transient failure. It is never attached to `GET` or `DELETE` requests.
+> [!NOTE]
+> The WorkOS API currently honors `Idempotency-Key` only on the [Create Audit Log Event](https://workos.com/docs/reference/audit-logs/event) endpoint (`audit_logs.create_event`). Other endpoints accept the header but do not deduplicate requests, so a retried mutation elsewhere can still create a duplicate.
 ## Usage Examples
@@ -155,8 +152,8 @@ ruby -rsecurerandom -e 'puts SecureRandom.base64(32)'
 ```
 Anything shorter than 32 bytes (including `nil` or `""`) raises
-`ArgumentError` at SDK init time — sealing or unsealing will not silently
-proceed with a weakened key.
+`ArgumentError` as soon as you load, seal, or unseal a session — sealing or
+unsealing will not silently proceed with a weakened key.
 ### Verify a webhook
@@ -196,7 +193,9 @@ end
 ## Error Handling
-The SDK raises typed errors for API and transport failures.
+The SDK raises typed errors for API failures (`WorkOS::APIError` and
+subclasses) and transport failures (`WorkOS::APIConnectionError`). Both
+inherit from `WorkOS::Error`.
 ```ruby
 begin
@@ -204,6 +203,8 @@ begin
 rescue WorkOS::APIError => e
   warn "#{e.class}: #{e.message}"
   warn "status=#{e.http_status} request_id=#{e.request_id} code=#{e.code}"
+rescue WorkOS::APIConnectionError => e
+  warn "connection failure: #{e.message}"
 end
 ```

data/lib/workos/agents/agent_admin_link_claim_attempt_to_external_user_request.rb ADDED Viewed

@@ -0,0 +1,28 @@
+# frozen_string_literal: true
+# This file is auto-generated by oagen. Do not edit.
+module WorkOS
+  class AgentAdminLinkClaimAttemptToExternalUserRequest < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      type: :type,
+      claim_attempt_token: :claim_attempt_token,
+      user: :user,
+      organization_id: :organization_id
+    }.freeze
+    attr_accessor \
+      :type,
+      :claim_attempt_token,
+      :user,
+      :organization_id
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @type = hash[:type]
+      @claim_attempt_token = hash[:claim_attempt_token]
+      @user = hash[:user] ? WorkOS::AgentAdminLinkClaimAttemptToExternalUserRequestUser.new(hash[:user]) : nil
+      @organization_id = hash[:organization_id]
+    end
+  end
+end

data/lib/workos/agents/agent_admin_link_claim_attempt_to_external_user_request_user.rb ADDED Viewed

@@ -0,0 +1,22 @@
+# frozen_string_literal: true
+# This file is auto-generated by oagen. Do not edit.
+module WorkOS
+  class AgentAdminLinkClaimAttemptToExternalUserRequestUser < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      email: :email,
+      external_id: :external_id
+    }.freeze
+    attr_accessor \
+      :email,
+      :external_id
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @email = hash[:email]
+      @external_id = hash[:external_id]
+    end
+  end
+end

data/lib/workos/agents/agent_admin_validate_credential_request.rb ADDED Viewed

@@ -0,0 +1,25 @@
+# frozen_string_literal: true
+# This file is auto-generated by oagen. Do not edit.
+module WorkOS
+  class AgentAdminValidateCredentialRequest < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      type: :type,
+      credential: :credential,
+      audience: :audience
+    }.freeze
+    attr_accessor \
+      :type,
+      :credential,
+      :audience
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @type = hash[:type]
+      @credential = hash[:credential]
+      @audience = hash[:audience]
+    end
+  end
+end

data/lib/workos/agents/agent_blueprint.rb ADDED Viewed

@@ -0,0 +1,43 @@
+# frozen_string_literal: true
+# This file is auto-generated by oagen. Do not edit.
+module WorkOS
+  class AgentBlueprint < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      object: :object,
+      id: :id,
+      name: :name,
+      description: :description,
+      permissions: :permissions,
+      invocable_by: :invocable_by,
+      session_settings: :session_settings,
+      created_at: :created_at,
+      updated_at: :updated_at
+    }.freeze
+    attr_accessor \
+      :object,
+      :id,
+      :name,
+      :description,
+      :permissions,
+      :invocable_by,
+      :session_settings,
+      :created_at,
+      :updated_at
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @object = hash[:object]
+      @id = hash[:id]
+      @name = hash[:name]
+      @description = hash[:description]
+      @permissions = hash[:permissions] || []
+      @invocable_by = hash[:invocable_by] ? WorkOS::AgentBlueprintInvocableBy.new(hash[:invocable_by]) : nil
+      @session_settings = hash[:session_settings] ? WorkOS::AgentBlueprintSessionSetting.new(hash[:session_settings]) : nil
+      @created_at = hash[:created_at]
+      @updated_at = hash[:updated_at]
+    end
+  end
+end

data/lib/workos/agents/agent_blueprint_invocable_by.rb ADDED Viewed

@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+# This file is auto-generated by oagen. Do not edit.
+module WorkOS
+  AgentBlueprintInvocableBy = AgentBlueprintCreatedDataInvocableBy
+end

data/lib/workos/agents/agent_blueprint_session_setting.rb ADDED Viewed

@@ -0,0 +1,25 @@
+# frozen_string_literal: true
+# This file is auto-generated by oagen. Do not edit.
+module WorkOS
+  class AgentBlueprintSessionSetting < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      max_age_seconds: :max_age_seconds,
+      access_token_ttl_seconds: :access_token_ttl_seconds,
+      refresh_token_ttl_seconds: :refresh_token_ttl_seconds
+    }.freeze
+    attr_accessor \
+      :max_age_seconds,
+      :access_token_ttl_seconds,
+      :refresh_token_ttl_seconds
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @max_age_seconds = hash[:max_age_seconds]
+      @access_token_ttl_seconds = hash[:access_token_ttl_seconds]
+      @refresh_token_ttl_seconds = hash[:refresh_token_ttl_seconds]
+    end
+  end
+end

data/lib/workos/agents/agent_blueprints_create_request.rb ADDED Viewed

@@ -0,0 +1,31 @@
+# frozen_string_literal: true
+# This file is auto-generated by oagen. Do not edit.
+module WorkOS
+  class AgentBlueprintsCreateRequest < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      name: :name,
+      description: :description,
+      permissions: :permissions,
+      invocable_by: :invocable_by,
+      session_settings: :session_settings
+    }.freeze
+    attr_accessor \
+      :name,
+      :description,
+      :permissions,
+      :invocable_by,
+      :session_settings
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @name = hash[:name]
+      @description = hash[:description]
+      @permissions = hash[:permissions] || []
+      @invocable_by = hash[:invocable_by] ? WorkOS::AgentBlueprintsCreateRequestInvocableBy.new(hash[:invocable_by]) : nil
+      @session_settings = hash[:session_settings] ? WorkOS::AgentBlueprintsCreateRequestSessionSetting.new(hash[:session_settings]) : nil
+    end
+  end
+end

data/lib/workos/agents/agent_blueprints_create_request_invocable_by.rb ADDED Viewed

@@ -0,0 +1,22 @@
+# frozen_string_literal: true
+# This file is auto-generated by oagen. Do not edit.
+module WorkOS
+  class AgentBlueprintsCreateRequestInvocableBy < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      role_slugs: :role_slugs,
+      organization_ids: :organization_ids
+    }.freeze
+    attr_accessor \
+      :role_slugs,
+      :organization_ids
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @role_slugs = hash[:role_slugs] || []
+      @organization_ids = hash[:organization_ids] || []
+    end
+  end
+end

data/lib/workos/agents/agent_blueprints_create_request_session_setting.rb ADDED Viewed

@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+# This file is auto-generated by oagen. Do not edit.
+module WorkOS
+  AgentBlueprintsCreateRequestSessionSetting = AgentBlueprintSessionSetting
+end