@workos-inc/node 10.11.0 → 10.12.0

package/lib/{factory-VM3aexOH.d.cts → factory-CCkRzS83.d.cts}

@@ -2917,198 +2917,857 @@ interface SerializedUpdateGroupOptions {
   description?: string | null;
 }
 //#endregion
-//#region src/vault/interfaces/key.interface.d.ts
-interface KeyContext {
-  [key: string]: any;
+//#region src/pipes/interfaces/authorize-data-integration-options.interface.d.ts
+interface AuthorizeDataIntegrationOptions {
+  /** The slug identifier of the provider (e.g., `github`, `slack`, `notion`). */
+  slug: string;
+  /** The ID of the user to authorize. */
+  userId: string;
+  /** An organization ID to scope the authorization to a specific organization. */
+  organizationId?: string;
+  /** The URL to redirect the user to after authorization. */
+  returnTo?: string;
 }
-interface DataKeyPair {
-  context: KeyContext;
-  dataKey: DataKey;
-  encryptedKeys: string;
+//#endregion
+//#region src/pipes/interfaces/connected-account-auth-method.interface.d.ts
+declare const ConnectedAccountAuthMethod: {
+  readonly OAuth: "oauth";
+  readonly ApiKey: "api_key";
+};
+type ConnectedAccountAuthMethod = (typeof ConnectedAccountAuthMethod)[keyof typeof ConnectedAccountAuthMethod];
+//#endregion
+//#region src/pipes/interfaces/connected-account-state.interface.d.ts
+declare const ConnectedAccountState: {
+  readonly Connected: "connected";
+  readonly NeedsReauthorization: "needs_reauthorization";
+};
+type ConnectedAccountState = (typeof ConnectedAccountState)[keyof typeof ConnectedAccountState];
+//#endregion
+//#region src/pipes/interfaces/connected-account.interface.d.ts
+interface ConnectedAccount {
+  /** Distinguishes the connected account object. */
+  object: 'connected_account';
+  /** The unique identifier of the connected account. */
+  id: string;
+  /** The [User](https://workos.com/docs/reference/authkit/user) identifier associated with this connection. */
+  userId: string | null;
+  /** The [Organization](https://workos.com/docs/reference/organization) identifier associated with this connection, or `null` if not scoped to an organization. */
+  organizationId: string | null;
+  /** The OAuth scopes granted for this connection. */
+  scopes: string[];
+  /** The authentication method used for this connection (`oauth` or `api_key`). Defaults to `oauth` if absent. */
+  authMethod?: ConnectedAccountAuthMethod;
+  /** The last four characters of the API key, or `null` for OAuth connections. */
+  apiKeyLast4?: string | null;
+  /**
+   * The state of the connected account:
+   * - `connected`: The connection is active and tokens are valid.
+   * - `needs_reauthorization`: The user needs to reauthorize the connection, typically because required scopes have changed.
+   * - `disconnected`: The connection has been disconnected.
+   */
+  state: ConnectedAccountState;
+  /** The timestamp when the connection was created. */
+  createdAt: string;
+  /** The timestamp when the connection was last updated. */
+  updatedAt: string;
 }
-interface DataKey {
-  key: string;
+interface ConnectedAccountResponse {
+  object: 'connected_account';
   id: string;
+  user_id: string | null;
+  organization_id: string | null;
+  scopes: string[];
+  auth_method?: ConnectedAccountAuthMethod;
+  api_key_last_4?: string | null;
+  state: ConnectedAccountState;
+  created_at: string;
+  updated_at: string;
 }
 //#endregion
-//#region src/vault/interfaces/vault-event.interface.d.ts
-type VaultActorSource = 'api' | 'dashboard';
-interface VaultActor {
-  actorId: string;
-  actorSource: VaultActorSource;
-  actorName: string;
+//#region src/pipes/interfaces/create-data-integration-credential-options.interface.d.ts
+interface CreateDataIntegrationCredentialOptions {
+  /** The identifier of the integration. */
+  slug: string;
+  /** A [User](https://workos.com/docs/reference/authkit/user) identifier. */
+  userId: string;
+  /** An [Organization](https://workos.com/docs/reference/organization) identifier. Optional parameter to scope the connection to a specific organization. */
+  organizationId?: string;
 }
-interface VaultActorResponse {
-  actor_id: string;
-  actor_source: VaultActorSource;
-  actor_name: string;
+//#endregion
+//#region src/pipes/interfaces/data-integration-credentials-type.interface.d.ts
+declare const DataIntegrationCredentialsType: {
+  readonly Custom: "custom";
+  readonly Organization: "organization";
+};
+type DataIntegrationCredentialsType = (typeof DataIntegrationCredentialsType)[keyof typeof DataIntegrationCredentialsType];
+//#endregion
+//#region src/pipes/interfaces/data-integration-credentials-dto.interface.d.ts
+interface DataIntegrationCredentialsDto {
+  /** The credentials type. `custom` uses your own OAuth app credentials; `organization` has each organization supply its own credentials (configured per-organization). */
+  type: DataIntegrationCredentialsType;
+  /** OAuth client ID for the provider app. Required when `type` is `custom`; omit for `organization`. */
+  clientId?: string;
+  /** OAuth client secret for the provider app. Required when `type` is `custom`; omit for `organization`. */
+  clientSecret?: string;
 }
-interface VaultDataMutatedEventData extends VaultActor {
-  kvName: string;
-  keyId: string;
-  keyContext: KeyContext;
+interface DataIntegrationCredentialsDtoResponse {
+  type: DataIntegrationCredentialsType;
+  client_id?: string;
+  client_secret?: string;
 }
-interface VaultDataMutatedEventResponseData extends VaultActorResponse {
-  kv_name: string;
-  key_id: string;
-  key_context: KeyContext;
+//#endregion
+//#region src/pipes/interfaces/custom-provider-definition-authenticate-via.interface.d.ts
+declare const CustomProviderDefinitionAuthenticateVia: {
+  readonly RequestBody: "request_body";
+  readonly BasicAuthHeader: "basic_auth_header";
+};
+type CustomProviderDefinitionAuthenticateVia = (typeof CustomProviderDefinitionAuthenticateVia)[keyof typeof CustomProviderDefinitionAuthenticateVia];
+//#endregion
+//#region src/pipes/interfaces/custom-provider-definition.interface.d.ts
+interface CustomProviderDefinition {
+  /** A descriptive name for the custom provider. */
+  name: string;
+  /** The provider's OAuth authorization endpoint. */
+  authorizationUrl: string;
+  /** The provider's OAuth token endpoint. */
+  tokenUrl: string;
+  /** The endpoint used to refresh tokens, if different from the token endpoint. */
+  refreshTokenUrl?: string | null;
+  /** Whether PKCE is used during the authorization code flow. Defaults to `true`. */
+  pkceEnabled?: boolean;
+  /** The separator used to join requested scopes. Defaults to a space. */
+  requestScopeSeparator?: string;
+  /** Whether at least one scope must be selected when connecting an account. Defaults to `false`. */
+  scopesRequired?: boolean;
+  /** Whether a client secret is required for this provider. Defaults to `true`. */
+  clientSecretRequired?: boolean;
+  /** Additional static query parameters appended to the authorization request. */
+  additionalAuthorizationParameters?: Record<string, string>;
+  /** The Content-Type used when exchanging the token request. */
+  tokenBodyContentType?: string;
+  /** How client credentials are sent when exchanging authorization codes and refreshing tokens. */
+  authenticateVia?: CustomProviderDefinitionAuthenticateVia;
 }
-type VaultDataCreatedEventData = VaultDataMutatedEventData;
-type VaultDataUpdatedEventData = VaultDataMutatedEventData;
-type VaultDataCreatedEventResponseData = VaultDataMutatedEventResponseData;
-type VaultDataUpdatedEventResponseData = VaultDataMutatedEventResponseData;
-interface VaultDataReadEventData extends VaultActor {
-  kvName: string;
-  keyId: string;
+interface CustomProviderDefinitionResponse {
+  name: string;
+  authorization_url: string;
+  token_url: string;
+  refresh_token_url?: string | null;
+  pkce_enabled?: boolean;
+  request_scope_separator?: string;
+  scopes_required?: boolean;
+  client_secret_required?: boolean;
+  additional_authorization_parameters?: Record<string, string>;
+  token_body_content_type?: string;
+  authenticate_via?: CustomProviderDefinitionAuthenticateVia;
 }
-interface VaultDataReadEventResponseData extends VaultActorResponse {
-  kv_name: string;
-  key_id: string;
+//#endregion
+//#region src/pipes/interfaces/create-data-integration-options.interface.d.ts
+interface CreateDataIntegrationOptions {
+  /** The provider to create a Data Integration for. For a built-in provider use its slug (e.g. `github`, `slack`). For a custom provider, this is the new provider slug and `custom_provider` must be supplied. A custom provider slug cannot shadow an existing global provider slug. */
+  provider: string;
+  /** An optional description of the Data Integration. */
+  description?: string | null;
+  /** Whether the Data Integration is enabled. Defaults to `false`. */
+  enabled?: boolean;
+  /** The OAuth scopes to request for the Data Integration. Defaults to the provider's configured scopes when omitted. */
+  scopes?: string[] | null;
+  /** The credentials to configure for the Data Integration. Required for both built-in and custom providers. */
+  credentials?: DataIntegrationCredentialsDto;
+  /** The OAuth definition for a custom provider. Supply this to define a custom provider; omit it to create an integration for a built-in provider. */
+  customProvider?: CustomProviderDefinition;
 }
-interface VaultDataDeletedEventData extends VaultActor {
-  kvName: string;
+//#endregion
+//#region src/pipes/interfaces/create-user-connected-account-options.interface.d.ts
+interface CreateUserConnectedAccountOptions {
+  /** A [User](https://workos.com/docs/reference/authkit/user) identifier. */
+  userId: string;
+  /** The slug identifier of the provider (e.g., `github`, `slack`, `notion`). */
+  slug: string;
+  /** An [Organization](https://workos.com/docs/reference/organization) identifier. Optional parameter if the connection is scoped to an organization. */
+  organizationId?: string;
+  /** The OAuth access token for the connected account. */
+  accessToken?: string;
+  /** The OAuth refresh token for the connected account. */
+  refreshToken?: string;
+  /** The ISO-8601 timestamp when the access token expires. Required when `access_token` is provided for tokens that expire. */
+  expiresAt?: Date;
+  /** The OAuth scopes granted for this connection. */
+  scopes?: string[];
+  /** Explicitly set the state of the connected account. When omitted, the state is derived from the token combination provided. */
+  state?: ConnectedAccountState;
 }
-interface VaultDataDeletedEventResponseData extends VaultActorResponse {
-  kv_name: string;
+//#endregion
+//#region src/pipes/interfaces/data-integration-access-token-response-access-token.interface.d.ts
+/** The [access token](https://workos.com/docs/reference/pipes/access-token) object, present when `active` is `true`. */
+interface DataIntegrationAccessTokenResponseAccessToken {
+  /** Distinguishes the access token object. */
+  object: 'access_token';
+  /** The OAuth access token for the connected integration. */
+  accessToken: string;
+  /** The ISO-8601 formatted timestamp indicating when the access token expires. */
+  expiresAt: Date | null;
+  /** The scopes granted to the access token. */
+  scopes: string[];
+  /** If the integration has requested scopes that aren't present on the access token, they're listed here. */
+  missingScopes: string[];
 }
-interface VaultMetadataReadEventData extends VaultActor {
-  kvName: string;
+interface DataIntegrationAccessTokenResponseAccessTokenResponse {
+  object: 'access_token';
+  access_token: string;
+  expires_at: string | null;
+  scopes: string[];
+  missing_scopes: string[];
 }
-interface VaultMetadataReadEventResponseData extends VaultActorResponse {
-  kv_name: string;
+//#endregion
+//#region src/pipes/interfaces/data-integration-access-token-response.interface.d.ts
+type DataIntegrationAccessTokenResponse = {
+  active: true;
+  accessToken: DataIntegrationAccessTokenResponseAccessToken;
+} | {
+  active: false;
+  error: 'needs_reauthorization' | 'not_installed';
+};
+type DataIntegrationAccessTokenResponseWire = {
+  active: true;
+  access_token: DataIntegrationAccessTokenResponseAccessTokenResponse;
+} | {
+  active: false;
+  error: 'needs_reauthorization' | 'not_installed';
+};
+//#endregion
+//#region src/pipes/interfaces/data-integration-authorize-url-response.interface.d.ts
+interface DataIntegrationAuthorizeUrlResponse {
+  /** The OAuth authorization URL to redirect the user to. */
+  url: string;
 }
-type VaultNamesListedEventData = VaultActor;
-type VaultNamesListedEventResponseData = VaultActorResponse;
-interface VaultKekCreatedEventData extends VaultActor {
-  keyName: string;
-  keyId: string;
-}
-interface VaultKekCreatedEventResponseData extends VaultActorResponse {
-  key_name: string;
-  key_id: string;
+interface DataIntegrationAuthorizeUrlResponseWire {
+  url: string;
 }
-interface VaultDekReadEventData extends VaultActor {
-  keyIds: string[];
-  keyContext: KeyContext;
+//#endregion
+//#region src/pipes/interfaces/data-integration-credential-type.interface.d.ts
+declare const DataIntegrationCredentialType: {
+  readonly Custom: "custom";
+  readonly Organization: "organization";
+};
+type DataIntegrationCredentialType = (typeof DataIntegrationCredentialType)[keyof typeof DataIntegrationCredentialType];
+//#endregion
+//#region src/pipes/interfaces/data-integration-credential.interface.d.ts
+/** The credentials configured for the Data Integration. */
+interface DataIntegrationCredential {
+  /** The credentials type. `custom` uses your own OAuth app credentials; `organization` has each organization supply its own credentials (so `client_id`/`redacted_client_secret` are null on the integration itself). */
+  type: DataIntegrationCredentialType;
+  /** The OAuth client ID configured for the provider app. Null for `organization` credentials. */
+  clientId: string | null;
+  /** The last four characters of the OAuth client secret. The full secret is never returned. Null for `organization` credentials. */
+  redactedClientSecret: string | null;
 }
-interface VaultDekReadEventResponseData extends VaultActorResponse {
-  key_ids: string[];
-  key_context: KeyContext;
+interface DataIntegrationCredentialResponse {
+  type: DataIntegrationCredentialType;
+  client_id: string | null;
+  redacted_client_secret: string | null;
 }
-interface VaultDekDecryptedEventData extends VaultActor {
-  keyId: string;
+//#endregion
+//#region src/pipes/interfaces/data-integration-credentials-response-credential.interface.d.ts
+/** The credential object containing the vended secret. */
+interface DataIntegrationCredentialsResponseCredential {
+  /** Distinguishes the credential object. */
+  object: 'credential';
+  /** The authentication method for this credential. Additional values may be added in the future; handle unknown values gracefully. */
+  authMethod: 'oauth';
+  /** The OAuth access token. */
+  value: string;
+  /** The ISO-8601 formatted timestamp indicating when the credential expires. */
+  expiresAt: string | null;
+  /** The scopes granted to the access token. */
+  scopes: string[];
+  /** If the integration has requested scopes that aren't present on the access token, they're listed here. */
+  missingScopes: string[];
 }
-interface VaultDekDecryptedEventResponseData extends VaultActorResponse {
-  key_id: string;
+interface DataIntegrationCredentialsResponseCredentialResponse {
+  object: 'credential';
+  auth_method: 'oauth';
+  value: string;
+  expires_at: string | null;
+  scopes: string[];
+  missing_scopes: string[];
 }
-type VaultByokKeyProvider = 'AWS_KMS' | 'GCP_KMS' | 'AZURE_KEY_VAULT';
-interface VaultByokKeyVerificationCompletedEventData {
-  organizationId: string;
-  keyProvider: VaultByokKeyProvider;
-  verified: boolean;
+//#endregion
+//#region src/pipes/interfaces/data-integration-credentials-response-error.interface.d.ts
+declare const DataIntegrationCredentialsResponseError: {
+  readonly NotInstalled: "not_installed";
+  readonly NeedsReauthorization: "needs_reauthorization";
+};
+type DataIntegrationCredentialsResponseError = (typeof DataIntegrationCredentialsResponseError)[keyof typeof DataIntegrationCredentialsResponseError];
+//#endregion
+//#region src/pipes/interfaces/data-integration-custom-provider-authenticate-via.interface.d.ts
+declare const DataIntegrationCustomProviderAuthenticateVia: {
+  readonly RequestBody: "request_body";
+  readonly BasicAuthHeader: "basic_auth_header";
+};
+type DataIntegrationCustomProviderAuthenticateVia = (typeof DataIntegrationCustomProviderAuthenticateVia)[keyof typeof DataIntegrationCustomProviderAuthenticateVia];
+//#endregion
+//#region src/pipes/interfaces/data-integration-custom-provider.interface.d.ts
+interface DataIntegrationCustomProvider {
+  /** A descriptive name for the custom provider. */
+  name: string;
+  /** The provider's OAuth authorization endpoint. */
+  authorizationUrl: string | null;
+  /** The provider's OAuth token endpoint. */
+  tokenUrl: string | null;
+  /** The endpoint used to refresh tokens, if different from the token endpoint. */
+  refreshTokenUrl: string | null;
+  /** Whether PKCE is used during the authorization code flow. */
+  pkceEnabled: boolean;
+  /** The separator used to join requested scopes. */
+  requestScopeSeparator: string;
+  /** Whether at least one scope must be selected when connecting an account. */
+  scopesRequired: boolean;
+  /** Whether a client secret is required for this provider. */
+  clientSecretRequired: boolean;
+  /** Additional static query parameters appended to the authorization request. */
+  additionalAuthorizationParameters: Record<string, string>;
+  /** The Content-Type used when exchanging the token request. */
+  tokenBodyContentType: string;
+  /** How client credentials are sent when exchanging authorization codes and refreshing tokens. */
+  authenticateVia: DataIntegrationCustomProviderAuthenticateVia;
 }
-interface VaultByokKeyVerificationCompletedEventResponseData {
-  organization_id: string;
-  key_provider: VaultByokKeyProvider;
-  verified: boolean;
+interface DataIntegrationCustomProviderResponse {
+  name: string;
+  authorization_url: string | null;
+  token_url: string | null;
+  refresh_token_url: string | null;
+  pkce_enabled: boolean;
+  request_scope_separator: string;
+  scopes_required: boolean;
+  client_secret_required: boolean;
+  additional_authorization_parameters: Record<string, string>;
+  token_body_content_type: string;
+  authenticate_via: DataIntegrationCustomProviderAuthenticateVia;
 }
 //#endregion
-//#region src/common/interfaces/event.interface.d.ts
-interface EventBase {
+//#region src/pipes/interfaces/data-integration-state.interface.d.ts
+declare const DataIntegrationState: {
+  readonly Valid: "valid";
+  readonly Invalid: "invalid";
+  readonly Requested: "requested";
+};
+type DataIntegrationState = (typeof DataIntegrationState)[keyof typeof DataIntegrationState];
+//#endregion
+//#region src/pipes/interfaces/data-integration.interface.d.ts
+interface DataIntegration {
+  /** Distinguishes the Data Integration object. */
+  object: 'data_integration';
+  /** Unique identifier of the Data Integration. */
   id: string;
-  createdAt: string;
-  context: Record<string, unknown> | undefined;
+  /** The provider slug for this Data Integration. */
+  slug: string;
+  /** The integration type derived from the provider. */
+  integrationType: string;
+  /** An optional description of the Data Integration. */
+  description: string | null;
+  /** Whether the Data Integration is enabled. */
+  enabled: boolean;
+  /** The state of the Data Integration. */
+  state: DataIntegrationState;
+  /** The OAuth scopes configured for the Data Integration. `null` when the provider's configured scopes are used. */
+  scopes: string[] | null;
+  /** The OAuth redirect URI to register with the provider when configuring the custom application. */
+  redirectUri: string;
+  /** The credentials configured for the Data Integration. */
+  credentials: DataIntegrationCredential;
+  /** The OAuth definition when this is a custom provider; `null` for built-in providers. */
+  customProvider: DataIntegrationCustomProvider | null;
+  /** An ISO 8601 timestamp. */
+  createdAt: Date;
+  /** An ISO 8601 timestamp. */
+  updatedAt: Date;
 }
-interface EventResponseBase {
+interface DataIntegrationResponse {
+  object: 'data_integration';
   id: string;
+  slug: string;
+  integration_type: string;
+  description: string | null;
+  enabled: boolean;
+  state: DataIntegrationState;
+  scopes: string[] | null;
+  redirect_uri: string;
+  credentials: DataIntegrationCredentialResponse;
+  custom_provider: DataIntegrationCustomProviderResponse | null;
   created_at: string;
-  context?: Record<string, unknown>;
-}
-interface AuthenticationEmailVerificationSucceededEvent extends EventBase {
-  event: 'authentication.email_verification_succeeded';
-  data: AuthenticationEvent;
+  updated_at: string;
 }
-interface AuthenticationEmailVerificationSucceededEventResponse extends EventResponseBase {
-  event: 'authentication.email_verification_succeeded';
-  data: AuthenticationEventResponse;
+//#endregion
+//#region src/pipes/interfaces/data-integrations-list-response-data-auth-methods.interface.d.ts
+declare const DataIntegrationsListResponseDataAuthMethods: {
+  readonly OAuth: "oauth";
+  readonly ApiKey: "api_key";
+};
+type DataIntegrationsListResponseDataAuthMethods = (typeof DataIntegrationsListResponseDataAuthMethods)[keyof typeof DataIntegrationsListResponseDataAuthMethods];
+//#endregion
+//#region src/pipes/interfaces/data-integrations-list-response-data-connected-account-auth-method.interface.d.ts
+declare const DataIntegrationsListResponseDataConnectedAccountAuthMethod: {
+  readonly OAuth: "oauth";
+  readonly ApiKey: "api_key";
+};
+type DataIntegrationsListResponseDataConnectedAccountAuthMethod = (typeof DataIntegrationsListResponseDataConnectedAccountAuthMethod)[keyof typeof DataIntegrationsListResponseDataConnectedAccountAuthMethod];
+//#endregion
+//#region src/pipes/interfaces/data-integrations-list-response-data-connected-account-state.interface.d.ts
+declare const DataIntegrationsListResponseDataConnectedAccountState: {
+  readonly Connected: "connected";
+  readonly NeedsReauthorization: "needs_reauthorization";
+  readonly Disconnected: "disconnected";
+};
+type DataIntegrationsListResponseDataConnectedAccountState = (typeof DataIntegrationsListResponseDataConnectedAccountState)[keyof typeof DataIntegrationsListResponseDataConnectedAccountState];
+//#endregion
+//#region src/pipes/interfaces/data-integrations-list-response-data-connected-account.interface.d.ts
+interface DataIntegrationsListResponseDataConnectedAccount {
+  /** Distinguishes the connected account object. */
+  object: 'connected_account';
+  /** The unique identifier of the connected account. */
+  id: string;
+  /** The [User](https://workos.com/docs/reference/authkit/user) identifier associated with this connection. */
+  userId: string | null;
+  /** The [Organization](https://workos.com/docs/reference/organization) identifier associated with this connection, or `null` if not scoped to an organization. */
+  organizationId: string | null;
+  /** The OAuth scopes granted for this connection. */
+  scopes: string[];
+  /** The authentication method used for this connection (`oauth` or `api_key`). Defaults to `oauth` if absent. */
+  authMethod?: DataIntegrationsListResponseDataConnectedAccountAuthMethod;
+  /** The last four characters of the API key, or `null` for OAuth connections. */
+  apiKeyLast4?: string | null;
+  /**
+   * The state of the connected account:
+   * - `connected`: The connection is active and tokens are valid.
+   * - `needs_reauthorization`: The user needs to reauthorize the connection, typically because required scopes have changed.
+   * - `disconnected`: The connection has been disconnected.
+   */
+  state: DataIntegrationsListResponseDataConnectedAccountState;
+  /** The timestamp when the connection was created. */
+  createdAt: string;
+  /** The timestamp when the connection was last updated. */
+  updatedAt: string;
+  /**
+   * Use `user_id` instead.
+   * @deprecated
+   */
+  userlandUserId: string | null;
 }
-interface AuthenticationMagicAuthFailedEvent extends EventBase {
-  event: 'authentication.magic_auth_failed';
-  data: AuthenticationEvent;
+interface DataIntegrationsListResponseDataConnectedAccountResponse {
+  object: 'connected_account';
+  id: string;
+  user_id: string | null;
+  organization_id: string | null;
+  scopes: string[];
+  auth_method?: DataIntegrationsListResponseDataConnectedAccountAuthMethod;
+  api_key_last_4?: string | null;
+  state: DataIntegrationsListResponseDataConnectedAccountState;
+  created_at: string;
+  updated_at: string;
+  userland_user_id: string | null;
 }
-interface AuthenticationMagicAuthFailedEventResponse extends EventResponseBase {
-  event: 'authentication.magic_auth_failed';
-  data: AuthenticationEventResponse;
+//#endregion
+//#region src/pipes/interfaces/data-integrations-list-response-data-ownership.interface.d.ts
+declare const DataIntegrationsListResponseDataOwnership: {
+  readonly UserlandUser: "userland_user";
+  readonly Organization: "organization";
+};
+type DataIntegrationsListResponseDataOwnership = (typeof DataIntegrationsListResponseDataOwnership)[keyof typeof DataIntegrationsListResponseDataOwnership];
+//#endregion
+//#region src/pipes/interfaces/data-integrations-list-response-data.interface.d.ts
+interface DataIntegrationsListResponseData {
+  /** Distinguishes the data provider object. */
+  object: 'data_provider';
+  /** The unique identifier of the provider. */
+  id: string;
+  /** The display name of the provider (e.g., "GitHub", "Slack"). */
+  name: string;
+  /** A description of the provider explaining how it will be used, if configured. */
+  description: string | null;
+  /** The slug identifier used in API calls (e.g., `github`, `slack`, `notion`). */
+  slug: string;
+  /** The type of integration (e.g., `github`, `slack`). */
+  integrationType: string;
+  /** The type of credentials used by the provider (e.g., `oauth2`). */
+  credentialsType: string;
+  /** The OAuth scopes configured for this provider, or `null` if none are configured. */
+  scopes: string[] | null;
+  /** The authentication methods supported by this provider (`oauth`, `api_key`, or both). Defaults to `["oauth"]` if absent. */
+  authMethods?: DataIntegrationsListResponseDataAuthMethods[];
+  /** Whether the provider is owned by a user or organization. */
+  ownership: DataIntegrationsListResponseDataOwnership;
+  /** The timestamp when the provider was created. */
+  createdAt: string;
+  /** The timestamp when the provider was last updated. */
+  updatedAt: string;
+  /** The user's [connected account](https://workos.com/docs/reference/pipes/connected-account) for this provider, or `null` if the user has not connected. */
+  connectedAccount: DataIntegrationsListResponseDataConnectedAccount | null;
 }
-interface AuthenticationMagicAuthSucceededEvent extends EventBase {
-  event: 'authentication.magic_auth_succeeded';
-  data: AuthenticationEvent;
+interface DataIntegrationsListResponseDataResponse {
+  object: 'data_provider';
+  id: string;
+  name: string;
+  description: string | null;
+  slug: string;
+  integration_type: string;
+  credentials_type: string;
+  scopes: string[] | null;
+  auth_methods?: DataIntegrationsListResponseDataAuthMethods[];
+  ownership: DataIntegrationsListResponseDataOwnership;
+  created_at: string;
+  updated_at: string;
+  connected_account: DataIntegrationsListResponseDataConnectedAccountResponse | null;
 }
-interface AuthenticationMagicAuthSucceededEventResponse extends EventResponseBase {
-  event: 'authentication.magic_auth_succeeded';
-  data: AuthenticationEventResponse;
+//#endregion
+//#region src/pipes/interfaces/data-integrations-list-response.interface.d.ts
+interface DataIntegrationsListResponse {
+  /** Indicates this is a list response. */
+  object: 'list';
+  /** A list of [providers](https://workos.com/docs/reference/pipes/provider), each including a [`connected_account`](https://workos.com/docs/reference/pipes/connected-account) field with the user's connection status. */
+  data: DataIntegrationsListResponseData[];
 }
-interface AuthenticationMfaSucceededEvent extends EventBase {
-  event: 'authentication.mfa_succeeded';
-  data: AuthenticationEvent;
+interface DataIntegrationsListResponseWire {
+  object: 'list';
+  data: DataIntegrationsListResponseDataResponse[];
 }
-interface AuthenticationMfaSucceededEventResponse extends EventResponseBase {
-  event: 'authentication.mfa_succeeded';
-  data: AuthenticationEventResponse;
+//#endregion
+//#region src/pipes/interfaces/delete-data-integration-options.interface.d.ts
+interface DeleteDataIntegrationOptions {
+  /** The slug identifier of the data integration. */
+  slug: string;
 }
-interface AuthenticationOAuthFailedEvent extends EventBase {
-  event: 'authentication.oauth_failed';
-  data: AuthenticationEvent;
+//#endregion
+//#region src/pipes/interfaces/delete-user-connected-account-options.interface.d.ts
+interface DeleteUserConnectedAccountOptions {
+  /** A [User](https://workos.com/docs/reference/authkit/user) identifier. */
+  userId: string;
+  /** The slug identifier of the provider (e.g., `github`, `slack`, `notion`). */
+  slug: string;
+  /** An [Organization](https://workos.com/docs/reference/organization) identifier. Optional parameter if the connection is scoped to an organization. */
+  organizationId?: string;
 }
-interface AuthenticationOAuthFailedEventResponse extends EventResponseBase {
-  event: 'authentication.oauth_failed';
-  data: AuthenticationEventResponse;
+//#endregion
+//#region src/pipes/interfaces/get-access-token-options.interface.d.ts
+interface GetAccessTokenOptions {
+  /** The identifier of the integration. */
+  provider: string;
+  /** A [User](https://workos.com/docs/reference/authkit/user) identifier. */
+  userId: string;
+  /** An [Organization](https://workos.com/docs/reference/organization) identifier. Optional parameter to scope the connection to a specific organization. */
+  organizationId?: string | null;
 }
-interface AuthenticationOAuthSucceededEvent extends EventBase {
-  event: 'authentication.oauth_succeeded';
-  data: AuthenticationEvent;
+//#endregion
+//#region src/pipes/interfaces/get-data-integration-options.interface.d.ts
+interface GetDataIntegrationOptions {
+  /** The slug identifier of the data integration. */
+  slug: string;
 }
-interface AuthenticationOAuthSucceededEventResponse extends EventResponseBase {
-  event: 'authentication.oauth_succeeded';
-  data: AuthenticationEventResponse;
+//#endregion
+//#region src/pipes/interfaces/get-user-connected-account-options.interface.d.ts
+interface GetUserConnectedAccountOptions {
+  /** A [User](https://workos.com/docs/reference/authkit/user) identifier. */
+  userId: string;
+  /** The slug identifier of the provider (e.g., `github`, `slack`, `notion`). */
+  slug: string;
+  /** An [Organization](https://workos.com/docs/reference/organization) identifier. Optional parameter if the connection is scoped to an organization. */
+  organizationId?: string;
 }
-interface AuthenticationPasskeyFailedEvent extends EventBase {
-  event: 'authentication.passkey_failed';
-  data: AuthenticationEvent;
+//#endregion
+//#region src/pipes/interfaces/list-user-data-providers-options.interface.d.ts
+interface ListUserDataProvidersOptions {
+  /** A [User](https://workos.com/docs/reference/authkit/user) identifier to list providers and connected accounts for. */
+  userId: string;
+  /** An [Organization](https://workos.com/docs/reference/organization) identifier. Optional parameter to filter connections for a specific organization. */
+  organizationId?: string;
 }
-interface AuthenticationPasskeyFailedEventResponse extends EventResponseBase {
-  event: 'authentication.passkey_failed';
-  data: AuthenticationEventResponse;
+//#endregion
+//#region src/pipes/interfaces/update-custom-provider-definition-authenticate-via.interface.d.ts
+declare const UpdateCustomProviderDefinitionAuthenticateVia: {
+  readonly RequestBody: "request_body";
+  readonly BasicAuthHeader: "basic_auth_header";
+};
+type UpdateCustomProviderDefinitionAuthenticateVia = (typeof UpdateCustomProviderDefinitionAuthenticateVia)[keyof typeof UpdateCustomProviderDefinitionAuthenticateVia];
+//#endregion
+//#region src/pipes/interfaces/update-custom-provider-definition.interface.d.ts
+interface UpdateCustomProviderDefinition {
+  /** A descriptive name for the custom provider. */
+  name?: string;
+  /** The provider's OAuth authorization endpoint. */
+  authorizationUrl?: string;
+  /** The provider's OAuth token endpoint. */
+  tokenUrl?: string;
+  /** The endpoint used to refresh tokens, if different from the token endpoint. */
+  refreshTokenUrl?: string | null;
+  /** Whether PKCE is used during the authorization code flow. */
+  pkceEnabled?: boolean;
+  /** The separator used to join requested scopes. */
+  requestScopeSeparator?: string;
+  /** Whether at least one scope must be selected when connecting an account. */
+  scopesRequired?: boolean;
+  /** Whether a client secret is required for this provider. */
+  clientSecretRequired?: boolean;
+  /** Additional static query parameters appended to the authorization request. */
+  additionalAuthorizationParameters?: Record<string, string>;
+  /** The Content-Type used when exchanging the token request. */
+  tokenBodyContentType?: string;
+  /** How client credentials are sent when exchanging authorization codes and refreshing tokens. */
+  authenticateVia?: UpdateCustomProviderDefinitionAuthenticateVia;
 }
-interface AuthenticationPasskeySucceededEvent extends EventBase {
-  event: 'authentication.passkey_succeeded';
-  data: AuthenticationEvent;
+interface UpdateCustomProviderDefinitionResponse {
+  name?: string;
+  authorization_url?: string;
+  token_url?: string;
+  refresh_token_url?: string | null;
+  pkce_enabled?: boolean;
+  request_scope_separator?: string;
+  scopes_required?: boolean;
+  client_secret_required?: boolean;
+  additional_authorization_parameters?: Record<string, string>;
+  token_body_content_type?: string;
+  authenticate_via?: UpdateCustomProviderDefinitionAuthenticateVia;
 }
-interface AuthenticationPasskeySucceededEventResponse extends EventResponseBase {
-  event: 'authentication.passkey_succeeded';
-  data: AuthenticationEventResponse;
+//#endregion
+//#region src/pipes/interfaces/update-data-integration-api-key-options.interface.d.ts
+interface UpdateDataIntegrationApiKeyOptions {
+  /** The identifier of the integration. */
+  slug: string;
+  /** A [User](https://workos.com/docs/reference/authkit/user) identifier. */
+  userId: string;
+  /** An [Organization](https://workos.com/docs/reference/organization) identifier. Optional parameter to scope the connection to a specific organization. */
+  organizationId?: string;
+  /** The API key secret to store for this integration. */
+  secret: string;
 }
-interface AuthenticationPasswordFailedEvent extends EventBase {
-  event: 'authentication.password_failed';
-  data: AuthenticationEvent;
+//#endregion
+//#region src/pipes/interfaces/update-data-integration-options.interface.d.ts
+interface UpdateDataIntegrationOptions {
+  /** The slug identifier of the data integration. */
+  slug: string;
+  /** An optional description of the Data Integration. */
+  description?: string | null;
+  /** Whether the Data Integration is enabled. */
+  enabled?: boolean;
+  /** The OAuth scopes to request for the Data Integration. Pass `null` to reset to the provider's configured scopes. */
+  scopes?: string[] | null;
+  /** New credentials for the Data Integration. When provided, rotates the stored client secret. */
+  credentials?: DataIntegrationCredentialsDto;
+  /** Updates to a custom provider's OAuth definition. Only valid for custom-provider integrations. */
+  customProvider?: UpdateCustomProviderDefinition;
 }
-interface AuthenticationPasswordFailedEventResponse extends EventResponseBase {
-  event: 'authentication.password_failed';
-  data: AuthenticationEventResponse;
+//#endregion
+//#region src/pipes/interfaces/update-user-connected-account-options.interface.d.ts
+interface UpdateUserConnectedAccountOptions {
+  /** A [User](https://workos.com/docs/reference/authkit/user) identifier. */
+  userId: string;
+  /** The slug identifier of the provider (e.g., `github`, `slack`, `notion`). */
+  slug: string;
+  /** An [Organization](https://workos.com/docs/reference/organization) identifier. Optional parameter if the connection is scoped to an organization. */
+  organizationId?: string;
+  /** The OAuth access token for the connected account. */
+  accessToken?: string;
+  /** The OAuth refresh token for the connected account. */
+  refreshToken?: string;
+  /** The ISO-8601 timestamp when the access token expires. Required when `access_token` is provided for tokens that expire. */
+  expiresAt?: Date;
+  /** The OAuth scopes granted for this connection. */
+  scopes?: string[];
+  /** Explicitly set the state of the connected account. When omitted, the state is derived from the token combination provided. */
+  state?: ConnectedAccountState;
 }
-interface AuthenticationPasswordSucceededEvent extends EventBase {
-  event: 'authentication.password_succeeded';
-  data: AuthenticationEvent;
+//#endregion
+//#region src/vault/interfaces/key.interface.d.ts
+interface KeyContext {
+  [key: string]: any;
 }
-interface AuthenticationPasswordSucceededEventResponse extends EventResponseBase {
-  event: 'authentication.password_succeeded';
-  data: AuthenticationEventResponse;
+interface DataKeyPair {
+  context: KeyContext;
+  dataKey: DataKey;
+  encryptedKeys: string;
 }
-interface AuthenticationRadarRiskDetectedEvent extends EventBase {
-  event: 'authentication.radar_risk_detected';
-  data: AuthenticationRadarRiskDetectedEventData;
+interface DataKey {
+  key: string;
+  id: string;
 }
-interface AuthenticationRadarRiskDetectedEventResponse extends EventResponseBase {
+//#endregion
+//#region src/vault/interfaces/vault-event.interface.d.ts
+type VaultActorSource = 'api' | 'dashboard';
+interface VaultActor {
+  actorId: string;
+  actorSource: VaultActorSource;
+  actorName: string;
+}
+interface VaultActorResponse {
+  actor_id: string;
+  actor_source: VaultActorSource;
+  actor_name: string;
+}
+interface VaultDataMutatedEventData extends VaultActor {
+  kvName: string;
+  keyId: string;
+  keyContext: KeyContext;
+}
+interface VaultDataMutatedEventResponseData extends VaultActorResponse {
+  kv_name: string;
+  key_id: string;
+  key_context: KeyContext;
+}
+type VaultDataCreatedEventData = VaultDataMutatedEventData;
+type VaultDataUpdatedEventData = VaultDataMutatedEventData;
+type VaultDataCreatedEventResponseData = VaultDataMutatedEventResponseData;
+type VaultDataUpdatedEventResponseData = VaultDataMutatedEventResponseData;
+interface VaultDataReadEventData extends VaultActor {
+  kvName: string;
+  keyId: string;
+}
+interface VaultDataReadEventResponseData extends VaultActorResponse {
+  kv_name: string;
+  key_id: string;
+}
+interface VaultDataDeletedEventData extends VaultActor {
+  kvName: string;
+}
+interface VaultDataDeletedEventResponseData extends VaultActorResponse {
+  kv_name: string;
+}
+interface VaultMetadataReadEventData extends VaultActor {
+  kvName: string;
+}
+interface VaultMetadataReadEventResponseData extends VaultActorResponse {
+  kv_name: string;
+}
+type VaultNamesListedEventData = VaultActor;
+type VaultNamesListedEventResponseData = VaultActorResponse;
+interface VaultKekCreatedEventData extends VaultActor {
+  keyName: string;
+  keyId: string;
+}
+interface VaultKekCreatedEventResponseData extends VaultActorResponse {
+  key_name: string;
+  key_id: string;
+}
+interface VaultDekReadEventData extends VaultActor {
+  keyIds: string[];
+  keyContext: KeyContext;
+}
+interface VaultDekReadEventResponseData extends VaultActorResponse {
+  key_ids: string[];
+  key_context: KeyContext;
+}
+interface VaultDekDecryptedEventData extends VaultActor {
+  keyId: string;
+}
+interface VaultDekDecryptedEventResponseData extends VaultActorResponse {
+  key_id: string;
+}
+type VaultByokKeyProvider = 'AWS_KMS' | 'GCP_KMS' | 'AZURE_KEY_VAULT';
+interface VaultByokKeyVerificationCompletedEventData {
+  organizationId: string;
+  keyProvider: VaultByokKeyProvider;
+  verified: boolean;
+}
+interface VaultByokKeyVerificationCompletedEventResponseData {
+  organization_id: string;
+  key_provider: VaultByokKeyProvider;
+  verified: boolean;
+}
+//#endregion
+//#region src/common/interfaces/event.interface.d.ts
+interface EventBase {
+  id: string;
+  createdAt: string;
+  context: Record<string, unknown> | undefined;
+}
+interface EventResponseBase {
+  id: string;
+  created_at: string;
+  context?: Record<string, unknown>;
+}
+interface AuthenticationEmailVerificationSucceededEvent extends EventBase {
+  event: 'authentication.email_verification_succeeded';
+  data: AuthenticationEvent;
+}
+interface AuthenticationEmailVerificationSucceededEventResponse extends EventResponseBase {
+  event: 'authentication.email_verification_succeeded';
+  data: AuthenticationEventResponse;
+}
+interface AuthenticationMagicAuthFailedEvent extends EventBase {
+  event: 'authentication.magic_auth_failed';
+  data: AuthenticationEvent;
+}
+interface AuthenticationMagicAuthFailedEventResponse extends EventResponseBase {
+  event: 'authentication.magic_auth_failed';
+  data: AuthenticationEventResponse;
+}
+interface AuthenticationMagicAuthSucceededEvent extends EventBase {
+  event: 'authentication.magic_auth_succeeded';
+  data: AuthenticationEvent;
+}
+interface AuthenticationMagicAuthSucceededEventResponse extends EventResponseBase {
+  event: 'authentication.magic_auth_succeeded';
+  data: AuthenticationEventResponse;
+}
+interface AuthenticationMfaSucceededEvent extends EventBase {
+  event: 'authentication.mfa_succeeded';
+  data: AuthenticationEvent;
+}
+interface AuthenticationMfaSucceededEventResponse extends EventResponseBase {
+  event: 'authentication.mfa_succeeded';
+  data: AuthenticationEventResponse;
+}
+interface AuthenticationOAuthFailedEvent extends EventBase {
+  event: 'authentication.oauth_failed';
+  data: AuthenticationEvent;
+}
+interface AuthenticationOAuthFailedEventResponse extends EventResponseBase {
+  event: 'authentication.oauth_failed';
+  data: AuthenticationEventResponse;
+}
+interface AuthenticationOAuthSucceededEvent extends EventBase {
+  event: 'authentication.oauth_succeeded';
+  data: AuthenticationEvent;
+}
+interface AuthenticationOAuthSucceededEventResponse extends EventResponseBase {
+  event: 'authentication.oauth_succeeded';
+  data: AuthenticationEventResponse;
+}
+interface AuthenticationPasskeyFailedEvent extends EventBase {
+  event: 'authentication.passkey_failed';
+  data: AuthenticationEvent;
+}
+interface AuthenticationPasskeyFailedEventResponse extends EventResponseBase {
+  event: 'authentication.passkey_failed';
+  data: AuthenticationEventResponse;
+}
+interface AuthenticationPasskeySucceededEvent extends EventBase {
+  event: 'authentication.passkey_succeeded';
+  data: AuthenticationEvent;
+}
+interface AuthenticationPasskeySucceededEventResponse extends EventResponseBase {
+  event: 'authentication.passkey_succeeded';
+  data: AuthenticationEventResponse;
+}
+interface AuthenticationPasswordFailedEvent extends EventBase {
+  event: 'authentication.password_failed';
+  data: AuthenticationEvent;
+}
+interface AuthenticationPasswordFailedEventResponse extends EventResponseBase {
+  event: 'authentication.password_failed';
+  data: AuthenticationEventResponse;
+}
+interface AuthenticationPasswordSucceededEvent extends EventBase {
+  event: 'authentication.password_succeeded';
+  data: AuthenticationEvent;
+}
+interface AuthenticationPasswordSucceededEventResponse extends EventResponseBase {
+  event: 'authentication.password_succeeded';
+  data: AuthenticationEventResponse;
+}
+interface AuthenticationRadarRiskDetectedEvent extends EventBase {
+  event: 'authentication.radar_risk_detected';
+  data: AuthenticationRadarRiskDetectedEventData;
+}
+interface AuthenticationRadarRiskDetectedEventResponse extends EventResponseBase {
   event: 'authentication.radar_risk_detected';
   data: AuthenticationRadarRiskDetectedEventResponseData;
 }
@@ -3608,6 +4267,87 @@ interface GroupMemberRemovedEventResponse extends EventResponseBase {
   event: 'group.member_removed';
   data: GroupMemberEventResponseData;
 }
+type PipesConnectedAccountState = ConnectedAccountState | 'disconnected';
+interface PipesConnectedAccount {
+  object: 'connected_account';
+  id: string;
+  dataIntegrationId: string;
+  providerSlug: string;
+  userId: string | null;
+  organizationId: string | null;
+  scopes: string[];
+  state: PipesConnectedAccountState;
+  createdAt: string;
+  updatedAt: string;
+}
+interface PipesConnectedAccountResponse {
+  object: 'connected_account';
+  id: string;
+  data_integration_id: string;
+  provider_slug: string;
+  user_id: string | null;
+  organization_id: string | null;
+  scopes: string[];
+  state: PipesConnectedAccountState;
+  created_at: string;
+  updated_at: string;
+}
+interface PipesConnectionFailed {
+  object: 'connection_failed';
+  dataIntegrationId: string;
+  providerSlug: string;
+  userId: string | null;
+  organizationId: string | null;
+  errorCode: string;
+  errorReason: string | null;
+  providerError: string | null;
+  providerErrorDescription: string | null;
+  createdAt: string;
+}
+interface PipesConnectionFailedResponse {
+  object: 'connection_failed';
+  data_integration_id: string;
+  provider_slug: string;
+  user_id: string | null;
+  organization_id: string | null;
+  error_code: string;
+  error_reason: string | null;
+  provider_error: string | null;
+  provider_error_description: string | null;
+  created_at: string;
+}
+interface PipesConnectedAccountConnectedEvent extends EventBase {
+  event: 'pipes.connected_account.connected';
+  data: PipesConnectedAccount;
+}
+interface PipesConnectedAccountConnectedEventResponse extends EventResponseBase {
+  event: 'pipes.connected_account.connected';
+  data: PipesConnectedAccountResponse;
+}
+interface PipesConnectedAccountConnectionFailedEvent extends EventBase {
+  event: 'pipes.connected_account.connection_failed';
+  data: PipesConnectionFailed;
+}
+interface PipesConnectedAccountConnectionFailedEventResponse extends EventResponseBase {
+  event: 'pipes.connected_account.connection_failed';
+  data: PipesConnectionFailedResponse;
+}
+interface PipesConnectedAccountDisconnectedEvent extends EventBase {
+  event: 'pipes.connected_account.disconnected';
+  data: PipesConnectedAccount;
+}
+interface PipesConnectedAccountDisconnectedEventResponse extends EventResponseBase {
+  event: 'pipes.connected_account.disconnected';
+  data: PipesConnectedAccountResponse;
+}
+interface PipesConnectedAccountReauthorizationNeededEvent extends EventBase {
+  event: 'pipes.connected_account.reauthorization_needed';
+  data: PipesConnectedAccount;
+}
+interface PipesConnectedAccountReauthorizationNeededEventResponse extends EventResponseBase {
+  event: 'pipes.connected_account.reauthorization_needed';
+  data: PipesConnectedAccountResponse;
+}
 interface VaultDataCreatedEvent extends EventBase {
   event: 'vault.data.created';
   data: VaultDataCreatedEventData;
@@ -3692,8 +4432,8 @@ interface UnknownEvent extends EventBase {
   event: string;
   data: Record<string, unknown>;
 }
-type Event = AuthenticationEmailVerificationSucceededEvent | AuthenticationMfaSucceededEvent | AuthenticationOAuthFailedEvent | AuthenticationOAuthSucceededEvent | AuthenticationSSOFailedEvent | AuthenticationSSOSucceededEvent | AuthenticationPasskeyFailedEvent | AuthenticationPasskeySucceededEvent | AuthenticationPasswordFailedEvent | AuthenticationPasswordSucceededEvent | AuthenticationMagicAuthFailedEvent | AuthenticationMagicAuthSucceededEvent | AuthenticationRadarRiskDetectedEvent | ConnectionActivatedEvent | ConnectionDeactivatedEvent | ConnectionDeletedEvent | DsyncActivatedEvent | DsyncDeletedEvent | DsyncGroupCreatedEvent | DsyncGroupUpdatedEvent | DsyncGroupDeletedEvent | DsyncGroupUserAddedEvent | DsyncGroupUserRemovedEvent | DsyncUserCreatedEvent | DsyncUserUpdatedEvent | DsyncUserDeletedEvent | EmailVerificationCreatedEvent | InvitationAcceptedEvent | InvitationCreatedEvent | InvitationRevokedEvent | InvitationResentEvent | MagicAuthCreatedEvent | PasswordResetCreatedEvent | PasswordResetSucceededEvent | UserCreatedEvent | UserUpdatedEvent | UserDeletedEvent | OrganizationMembershipCreated | OrganizationMembershipDeleted | OrganizationMembershipUpdated | RoleCreatedEvent | RoleDeletedEvent | RoleUpdatedEvent | OrganizationRoleCreatedEvent | OrganizationRoleUpdatedEvent | OrganizationRoleDeletedEvent | PermissionCreatedEvent | PermissionUpdatedEvent | PermissionDeletedEvent | SessionCreatedEvent | SessionRevokedEvent | OrganizationCreatedEvent | OrganizationUpdatedEvent | OrganizationDeletedEvent | OrganizationDomainVerifiedEvent | OrganizationDomainVerificationFailedEvent | OrganizationDomainCreatedEvent | OrganizationDomainUpdatedEvent | OrganizationDomainDeletedEvent | ApiKeyCreatedEvent | ApiKeyRevokedEvent | FlagCreatedEvent | FlagUpdatedEvent | FlagDeletedEvent | FlagRuleUpdatedEvent | GroupCreatedEvent | GroupUpdatedEvent | GroupDeletedEvent | GroupMemberAddedEvent | GroupMemberRemovedEvent | VaultDataCreatedEvent | VaultDataUpdatedEvent | VaultDataReadEvent | VaultDataDeletedEvent | VaultNamesListedEvent | VaultMetadataReadEvent | VaultKekCreatedEvent | VaultDekReadEvent | VaultDekDecryptedEvent | VaultByokKeyVerificationCompletedEvent;
-type EventResponse = AuthenticationEmailVerificationSucceededEventResponse | AuthenticationMagicAuthFailedEventResponse | AuthenticationMagicAuthSucceededEventResponse | AuthenticationMfaSucceededEventResponse | AuthenticationOAuthFailedEventResponse | AuthenticationOAuthSucceededEventResponse | AuthenticationPasskeyFailedEventResponse | AuthenticationPasskeySucceededEventResponse | AuthenticationPasswordFailedEventResponse | AuthenticationPasswordSucceededEventResponse | AuthenticationSSOFailedEventResponse | AuthenticationSSOSucceededEventResponse | AuthenticationRadarRiskDetectedEventResponse | ConnectionActivatedEventResponse | ConnectionDeactivatedEventResponse | ConnectionDeletedEventResponse | DsyncActivatedEventResponse | DsyncDeletedEventResponse | DsyncGroupCreatedEventResponse | DsyncGroupUpdatedEventResponse | DsyncGroupDeletedEventResponse | DsyncGroupUserAddedEventResponse | DsyncGroupUserRemovedEventResponse | DsyncUserCreatedEventResponse | DsyncUserUpdatedEventResponse | DsyncUserDeletedEventResponse | EmailVerificationCreatedEventResponse | InvitationAcceptedEventResponse | InvitationCreatedEventResponse | InvitationRevokedEventResponse | InvitationResentEventResponse | MagicAuthCreatedEventResponse | PasswordResetCreatedEventResponse | PasswordResetSucceededEventResponse | UserCreatedEventResponse | UserUpdatedEventResponse | UserDeletedEventResponse | OrganizationMembershipCreatedResponse | OrganizationMembershipDeletedResponse | OrganizationMembershipUpdatedResponse | RoleCreatedEventResponse | RoleDeletedEventResponse | RoleUpdatedEventResponse | OrganizationRoleCreatedEventResponse | OrganizationRoleUpdatedEventResponse | OrganizationRoleDeletedEventResponse | PermissionCreatedEventResponse | PermissionUpdatedEventResponse | PermissionDeletedEventResponse | SessionCreatedEventResponse | SessionRevokedEventResponse | OrganizationCreatedResponse | OrganizationUpdatedResponse | OrganizationDeletedResponse | OrganizationDomainVerifiedEventResponse | OrganizationDomainVerificationFailedEventResponse | OrganizationDomainCreatedEventResponse | OrganizationDomainUpdatedEventResponse | OrganizationDomainDeletedEventResponse | ApiKeyCreatedEventResponse | ApiKeyRevokedEventResponse | FlagCreatedEventResponse | FlagUpdatedEventResponse | FlagDeletedEventResponse | FlagRuleUpdatedEventResponse | GroupCreatedEventResponse | GroupUpdatedEventResponse | GroupDeletedEventResponse | GroupMemberAddedEventResponse | GroupMemberRemovedEventResponse | VaultDataCreatedEventResponse | VaultDataUpdatedEventResponse | VaultDataReadEventResponse | VaultDataDeletedEventResponse | VaultNamesListedEventResponse | VaultMetadataReadEventResponse | VaultKekCreatedEventResponse | VaultDekReadEventResponse | VaultDekDecryptedEventResponse | VaultByokKeyVerificationCompletedEventResponse;
+type Event = AuthenticationEmailVerificationSucceededEvent | AuthenticationMfaSucceededEvent | AuthenticationOAuthFailedEvent | AuthenticationOAuthSucceededEvent | AuthenticationSSOFailedEvent | AuthenticationSSOSucceededEvent | AuthenticationPasskeyFailedEvent | AuthenticationPasskeySucceededEvent | AuthenticationPasswordFailedEvent | AuthenticationPasswordSucceededEvent | AuthenticationMagicAuthFailedEvent | AuthenticationMagicAuthSucceededEvent | AuthenticationRadarRiskDetectedEvent | ConnectionActivatedEvent | ConnectionDeactivatedEvent | ConnectionDeletedEvent | DsyncActivatedEvent | DsyncDeletedEvent | DsyncGroupCreatedEvent | DsyncGroupUpdatedEvent | DsyncGroupDeletedEvent | DsyncGroupUserAddedEvent | DsyncGroupUserRemovedEvent | DsyncUserCreatedEvent | DsyncUserUpdatedEvent | DsyncUserDeletedEvent | EmailVerificationCreatedEvent | InvitationAcceptedEvent | InvitationCreatedEvent | InvitationRevokedEvent | InvitationResentEvent | MagicAuthCreatedEvent | PasswordResetCreatedEvent | PasswordResetSucceededEvent | UserCreatedEvent | UserUpdatedEvent | UserDeletedEvent | OrganizationMembershipCreated | OrganizationMembershipDeleted | OrganizationMembershipUpdated | RoleCreatedEvent | RoleDeletedEvent | RoleUpdatedEvent | OrganizationRoleCreatedEvent | OrganizationRoleUpdatedEvent | OrganizationRoleDeletedEvent | PermissionCreatedEvent | PermissionUpdatedEvent | PermissionDeletedEvent | SessionCreatedEvent | SessionRevokedEvent | OrganizationCreatedEvent | OrganizationUpdatedEvent | OrganizationDeletedEvent | OrganizationDomainVerifiedEvent | OrganizationDomainVerificationFailedEvent | OrganizationDomainCreatedEvent | OrganizationDomainUpdatedEvent | OrganizationDomainDeletedEvent | ApiKeyCreatedEvent | ApiKeyRevokedEvent | FlagCreatedEvent | FlagUpdatedEvent | FlagDeletedEvent | FlagRuleUpdatedEvent | GroupCreatedEvent | GroupUpdatedEvent | GroupDeletedEvent | GroupMemberAddedEvent | GroupMemberRemovedEvent | PipesConnectedAccountConnectedEvent | PipesConnectedAccountConnectionFailedEvent | PipesConnectedAccountDisconnectedEvent | PipesConnectedAccountReauthorizationNeededEvent | VaultDataCreatedEvent | VaultDataUpdatedEvent | VaultDataReadEvent | VaultDataDeletedEvent | VaultNamesListedEvent | VaultMetadataReadEvent | VaultKekCreatedEvent | VaultDekReadEvent | VaultDekDecryptedEvent | VaultByokKeyVerificationCompletedEvent;
+type EventResponse = AuthenticationEmailVerificationSucceededEventResponse | AuthenticationMagicAuthFailedEventResponse | AuthenticationMagicAuthSucceededEventResponse | AuthenticationMfaSucceededEventResponse | AuthenticationOAuthFailedEventResponse | AuthenticationOAuthSucceededEventResponse | AuthenticationPasskeyFailedEventResponse | AuthenticationPasskeySucceededEventResponse | AuthenticationPasswordFailedEventResponse | AuthenticationPasswordSucceededEventResponse | AuthenticationSSOFailedEventResponse | AuthenticationSSOSucceededEventResponse | AuthenticationRadarRiskDetectedEventResponse | ConnectionActivatedEventResponse | ConnectionDeactivatedEventResponse | ConnectionDeletedEventResponse | DsyncActivatedEventResponse | DsyncDeletedEventResponse | DsyncGroupCreatedEventResponse | DsyncGroupUpdatedEventResponse | DsyncGroupDeletedEventResponse | DsyncGroupUserAddedEventResponse | DsyncGroupUserRemovedEventResponse | DsyncUserCreatedEventResponse | DsyncUserUpdatedEventResponse | DsyncUserDeletedEventResponse | EmailVerificationCreatedEventResponse | InvitationAcceptedEventResponse | InvitationCreatedEventResponse | InvitationRevokedEventResponse | InvitationResentEventResponse | MagicAuthCreatedEventResponse | PasswordResetCreatedEventResponse | PasswordResetSucceededEventResponse | UserCreatedEventResponse | UserUpdatedEventResponse | UserDeletedEventResponse | OrganizationMembershipCreatedResponse | OrganizationMembershipDeletedResponse | OrganizationMembershipUpdatedResponse | RoleCreatedEventResponse | RoleDeletedEventResponse | RoleUpdatedEventResponse | OrganizationRoleCreatedEventResponse | OrganizationRoleUpdatedEventResponse | OrganizationRoleDeletedEventResponse | PermissionCreatedEventResponse | PermissionUpdatedEventResponse | PermissionDeletedEventResponse | SessionCreatedEventResponse | SessionRevokedEventResponse | OrganizationCreatedResponse | OrganizationUpdatedResponse | OrganizationDeletedResponse | OrganizationDomainVerifiedEventResponse | OrganizationDomainVerificationFailedEventResponse | OrganizationDomainCreatedEventResponse | OrganizationDomainUpdatedEventResponse | OrganizationDomainDeletedEventResponse | ApiKeyCreatedEventResponse | ApiKeyRevokedEventResponse | FlagCreatedEventResponse | FlagUpdatedEventResponse | FlagDeletedEventResponse | FlagRuleUpdatedEventResponse | GroupCreatedEventResponse | GroupUpdatedEventResponse | GroupDeletedEventResponse | GroupMemberAddedEventResponse | GroupMemberRemovedEventResponse | PipesConnectedAccountConnectedEventResponse | PipesConnectedAccountConnectionFailedEventResponse | PipesConnectedAccountDisconnectedEventResponse | PipesConnectedAccountReauthorizationNeededEventResponse | VaultDataCreatedEventResponse | VaultDataUpdatedEventResponse | VaultDataReadEventResponse | VaultDataDeletedEventResponse | VaultNamesListedEventResponse | VaultMetadataReadEventResponse | VaultKekCreatedEventResponse | VaultDekReadEventResponse | VaultDekDecryptedEventResponse | VaultByokKeyVerificationCompletedEventResponse;
 type EventName = Event['event'];
 //#endregion
 //#region src/common/interfaces/generate-link-intent.interface.d.ts
@@ -3841,6 +4581,73 @@ interface SerializedCreateOrganizationOptions {
 }
 type CreateOrganizationRequestOptions = Pick<PostOptions, 'idempotencyKey'>;
 //#endregion
+//#region src/organizations/interfaces/it-contact-options.interface.d.ts
+declare const ItContactIntent: {
+  readonly SSO: "sso";
+  readonly DirectorySync: "directory_sync";
+  readonly LogStreams: "log_streams";
+  readonly DomainVerification: "domain_verification";
+  readonly BringYourOwnKey: "bring_your_own_key";
+};
+type ItContactIntent = (typeof ItContactIntent)[keyof typeof ItContactIntent];
+interface ListItContactsOptions {
+  /** Unique identifier of the Organization. */
+  organizationId: string;
+}
+interface CreateItContactOptions {
+  /** Unique identifier of the Organization. */
+  organizationId: string;
+  /** The email address of the IT Contact. */
+  email: string;
+}
+interface SerializedCreateItContactOptions {
+  email: string;
+}
+interface DeleteItContactOptions {
+  /** Unique identifier of the Organization. */
+  organizationId: string;
+  /** Unique identifier of the IT Contact. */
+  contactId: string;
+}
+interface InviteItContactOptions {
+  /** Unique identifier of the Organization. */
+  organizationId: string;
+  /** Unique identifier of the IT Contact. */
+  contactId: string;
+  /** The Admin Portal features that the IT Contact can configure. */
+  intents: ItContactIntent[];
+}
+interface SerializedInviteItContactOptions {
+  intents: ItContactIntent[];
+}
+interface RevokeItContactOptions {
+  /** Unique identifier of the Organization. */
+  organizationId: string;
+  /** Unique identifier of the IT Contact. */
+  contactId: string;
+}
+//#endregion
+//#region src/organizations/interfaces/it-contact.interface.d.ts
+interface ItContact {
+  /** Distinguishes the IT Contact object. */
+  object: 'it_contact';
+  /** Unique identifier of the IT Contact. */
+  id: string;
+  /** The email address of the IT Contact. */
+  email: string;
+  /** An ISO 8601 timestamp. */
+  createdAt: string;
+  /** An ISO 8601 timestamp. */
+  updatedAt: string;
+}
+interface ItContactResponse {
+  object: 'it_contact';
+  id: string;
+  email: string;
+  created_at: string;
+  updated_at: string;
+}
+//#endregion
 //#region src/organizations/interfaces/list-organization-feature-flags-options.interface.d.ts
 interface ListOrganizationFeatureFlagsOptions extends PaginationOptions {
   organizationId: string;
@@ -5162,14 +5969,72 @@ declare class Organizations {
    * @throws {UnprocessableEntityException} 422
    */
   updateOrganization(options: UpdateOrganizationOptions): Promise<Organization>;
-}
-//#endregion
-//#region src/organization-domains/organization-domains.d.ts
-declare class OrganizationDomains {
-  private readonly workos;
-  constructor(workos: WorkOS);
   /**
-   * Get an Organization Domain
+   * List IT Contacts
+   *
+   * Get the IT Contacts for an Organization.
+   * @param options - Object containing the Organization ID.
+   * @returns {Promise<List<ItContact>>}
+   * @throws {AuthorizationException} 403
+   * @throws {NotFoundException} 404
+   */
+  listItContacts(options: ListItContactsOptions): Promise<List<ItContact>>;
+  /**
+   * Create an IT Contact
+   *
+   * Add an IT Contact to an Organization. No Admin Portal invitation is sent,
+   * though the contact is notified if the Organization has a connection
+   * certificate nearing expiry.
+   * @param options - Object containing the Organization ID and the email address.
+   * @returns {Promise<ItContact>}
+   * @throws {AuthorizationException} 403
+   * @throws {NotFoundException} 404
+   * @throws {ConflictException} 409
+   * @throws {UnprocessableEntityException} 422
+   */
+  createItContact(options: CreateItContactOptions): Promise<ItContact>;
+  /**
+   * Delete an IT Contact
+   *
+   * Remove an IT Contact from an Organization and revoke the contact's active
+   * setup links.
+   * @param options - Object containing the Organization ID and the IT Contact ID.
+   * @returns {Promise<void>}
+   * @throws {AuthorizationException} 403
+   * @throws {NotFoundException} 404
+   */
+  deleteItContact(options: DeleteItContactOptions): Promise<void>;
+  /**
+   * Invite an IT Contact
+   *
+   * Create an Admin Portal setup link and email it to the IT Contact. An
+   * Organization can have at most one active invitation.
+   * @param options - Object containing the Organization ID, the IT Contact ID and the intents.
+   * @returns {Promise<void>}
+   * @throws {AuthorizationException} 403
+   * @throws {NotFoundException} 404
+   * @throws {ConflictException} 409
+   * @throws {UnprocessableEntityException} 422
+   */
+  inviteItContact(options: InviteItContactOptions): Promise<void>;
+  /**
+   * Revoke an IT Contact's invitation
+   *
+   * Revoke the Organization's active Admin Portal invitation.
+   * @param options - Object containing the Organization ID and the IT Contact ID.
+   * @returns {Promise<void>}
+   * @throws {AuthorizationException} 403
+   * @throws {NotFoundException} 404
+   */
+  revokeItContact(options: RevokeItContactOptions): Promise<void>;
+}
+//#endregion
+//#region src/organization-domains/organization-domains.d.ts
+declare class OrganizationDomains {
+  private readonly workos;
+  constructor(workos: WorkOS);
+  /**
+   * Get an Organization Domain
    *
    * Get the details of an existing organization domain.
    * @param id - Unique identifier of the organization domain.
@@ -5218,541 +6083,53 @@ declare class OrganizationDomains {
   deleteOrganizationDomain(id: string): Promise<void>;
 }
 //#endregion
-//#region src/passwordless/interfaces/passwordless-session.interface.d.ts
-interface PasswordlessSession {
-  id: string;
-  email: string;
-  expiresAt: Date;
-  link: string;
-  object: 'passwordless_session';
-}
-interface PasswordlessSessionResponse {
-  id: string;
-  email: string;
-  expires_at: Date;
-  link: string;
-  object: 'passwordless_session';
-}
-//#endregion
-//#region src/passwordless/interfaces/create-passwordless-session-options.interface.d.ts
-interface CreatePasswordlessSessionOptions {
-  type: 'MagicLink';
-  email: string;
-  redirectURI?: string;
-  state?: string;
-  connection?: string;
-  expiresIn?: number;
-}
-interface SerializedCreatePasswordlessSessionOptions {
-  type: 'MagicLink';
-  email: string;
-  redirect_uri?: string;
-  state?: string;
-  connection?: string;
-  expires_in?: number;
-}
-//#endregion
-//#region src/passwordless/interfaces/send-session-response.interface.d.ts
-interface SendSessionResponse {
-  message?: string;
-  success?: boolean;
-}
-//#endregion
-//#region src/passwordless/passwordless.d.ts
-declare class Passwordless {
-  private readonly workos;
-  constructor(workos: WorkOS);
-  createSession({ redirectURI, expiresIn, ...options }: CreatePasswordlessSessionOptions): Promise<PasswordlessSession>;
-  sendSession(sessionId: string): Promise<SendSessionResponse>;
-}
-//#endregion
-//#region src/pipes/interfaces/data-integration-credentials-type.interface.d.ts
-declare const DataIntegrationCredentialsType: {
-  readonly Custom: "custom";
-  readonly Organization: "organization";
-};
-type DataIntegrationCredentialsType = (typeof DataIntegrationCredentialsType)[keyof typeof DataIntegrationCredentialsType];
-//#endregion
-//#region src/pipes/interfaces/data-integration-credentials-dto.interface.d.ts
-interface DataIntegrationCredentialsDto {
-  /** The credentials type. `custom` uses your own OAuth app credentials; `organization` has each organization supply its own credentials (configured per-organization). */
-  type: DataIntegrationCredentialsType;
-  /** OAuth client ID for the provider app. Required when `type` is `custom`; omit for `organization`. */
-  clientId?: string;
-  /** OAuth client secret for the provider app. Required when `type` is `custom`; omit for `organization`. */
-  clientSecret?: string;
-}
-interface DataIntegrationCredentialsDtoResponse {
-  type: DataIntegrationCredentialsType;
-  client_id?: string;
-  client_secret?: string;
-}
-//#endregion
-//#region src/pipes/interfaces/custom-provider-definition-authenticate-via.interface.d.ts
-declare const CustomProviderDefinitionAuthenticateVia: {
-  readonly RequestBody: "request_body";
-  readonly BasicAuthHeader: "basic_auth_header";
-};
-type CustomProviderDefinitionAuthenticateVia = (typeof CustomProviderDefinitionAuthenticateVia)[keyof typeof CustomProviderDefinitionAuthenticateVia];
-//#endregion
-//#region src/pipes/interfaces/custom-provider-definition.interface.d.ts
-interface CustomProviderDefinition {
-  /** A descriptive name for the custom provider. */
-  name: string;
-  /** The provider's OAuth authorization endpoint. */
-  authorizationUrl: string;
-  /** The provider's OAuth token endpoint. */
-  tokenUrl: string;
-  /** The endpoint used to refresh tokens, if different from the token endpoint. */
-  refreshTokenUrl?: string | null;
-  /** Whether PKCE is used during the authorization code flow. Defaults to `true`. */
-  pkceEnabled?: boolean;
-  /** The separator used to join requested scopes. Defaults to a space. */
-  requestScopeSeparator?: string;
-  /** Whether at least one scope must be selected when connecting an account. Defaults to `false`. */
-  scopesRequired?: boolean;
-  /** Whether a client secret is required for this provider. Defaults to `true`. */
-  clientSecretRequired?: boolean;
-  /** Additional static query parameters appended to the authorization request. */
-  additionalAuthorizationParameters?: Record<string, string>;
-  /** The Content-Type used when exchanging the token request. */
-  tokenBodyContentType?: string;
-  /** How client credentials are sent when exchanging authorization codes and refreshing tokens. */
-  authenticateVia?: CustomProviderDefinitionAuthenticateVia;
-}
-interface CustomProviderDefinitionResponse {
-  name: string;
-  authorization_url: string;
-  token_url: string;
-  refresh_token_url?: string | null;
-  pkce_enabled?: boolean;
-  request_scope_separator?: string;
-  scopes_required?: boolean;
-  client_secret_required?: boolean;
-  additional_authorization_parameters?: Record<string, string>;
-  token_body_content_type?: string;
-  authenticate_via?: CustomProviderDefinitionAuthenticateVia;
-}
-//#endregion
-//#region src/pipes/interfaces/create-data-integration-options.interface.d.ts
-interface CreateDataIntegrationOptions {
-  /** The provider to create a Data Integration for. For a built-in provider use its slug (e.g. `github`, `slack`). For a custom provider, this is the new provider slug and `custom_provider` must be supplied. A custom provider slug cannot shadow an existing global provider slug. */
-  provider: string;
-  /** An optional description of the Data Integration. */
-  description?: string | null;
-  /** Whether the Data Integration is enabled. Defaults to `false`. */
-  enabled?: boolean;
-  /** The OAuth scopes to request for the Data Integration. Defaults to the provider's configured scopes when omitted. */
-  scopes?: string[] | null;
-  /** The credentials to configure for the Data Integration. Required for both built-in and custom providers. */
-  credentials?: DataIntegrationCredentialsDto;
-  /** The OAuth definition for a custom provider. Supply this to define a custom provider; omit it to create an integration for a built-in provider. */
-  customProvider?: CustomProviderDefinition;
-}
-//#endregion
-//#region src/pipes/interfaces/get-data-integration-options.interface.d.ts
-interface GetDataIntegrationOptions {
-  /** The slug identifier of the data integration. */
-  slug: string;
-}
-//#endregion
-//#region src/pipes/interfaces/update-custom-provider-definition-authenticate-via.interface.d.ts
-declare const UpdateCustomProviderDefinitionAuthenticateVia: {
-  readonly RequestBody: "request_body";
-  readonly BasicAuthHeader: "basic_auth_header";
-};
-type UpdateCustomProviderDefinitionAuthenticateVia = (typeof UpdateCustomProviderDefinitionAuthenticateVia)[keyof typeof UpdateCustomProviderDefinitionAuthenticateVia];
-//#endregion
-//#region src/pipes/interfaces/update-custom-provider-definition.interface.d.ts
-interface UpdateCustomProviderDefinition {
-  /** A descriptive name for the custom provider. */
-  name?: string;
-  /** The provider's OAuth authorization endpoint. */
-  authorizationUrl?: string;
-  /** The provider's OAuth token endpoint. */
-  tokenUrl?: string;
-  /** The endpoint used to refresh tokens, if different from the token endpoint. */
-  refreshTokenUrl?: string | null;
-  /** Whether PKCE is used during the authorization code flow. */
-  pkceEnabled?: boolean;
-  /** The separator used to join requested scopes. */
-  requestScopeSeparator?: string;
-  /** Whether at least one scope must be selected when connecting an account. */
-  scopesRequired?: boolean;
-  /** Whether a client secret is required for this provider. */
-  clientSecretRequired?: boolean;
-  /** Additional static query parameters appended to the authorization request. */
-  additionalAuthorizationParameters?: Record<string, string>;
-  /** The Content-Type used when exchanging the token request. */
-  tokenBodyContentType?: string;
-  /** How client credentials are sent when exchanging authorization codes and refreshing tokens. */
-  authenticateVia?: UpdateCustomProviderDefinitionAuthenticateVia;
-}
-interface UpdateCustomProviderDefinitionResponse {
-  name?: string;
-  authorization_url?: string;
-  token_url?: string;
-  refresh_token_url?: string | null;
-  pkce_enabled?: boolean;
-  request_scope_separator?: string;
-  scopes_required?: boolean;
-  client_secret_required?: boolean;
-  additional_authorization_parameters?: Record<string, string>;
-  token_body_content_type?: string;
-  authenticate_via?: UpdateCustomProviderDefinitionAuthenticateVia;
-}
-//#endregion
-//#region src/pipes/interfaces/update-data-integration-options.interface.d.ts
-interface UpdateDataIntegrationOptions {
-  /** The slug identifier of the data integration. */
-  slug: string;
-  /** An optional description of the Data Integration. */
-  description?: string | null;
-  /** Whether the Data Integration is enabled. */
-  enabled?: boolean;
-  /** The OAuth scopes to request for the Data Integration. Pass `null` to reset to the provider's configured scopes. */
-  scopes?: string[] | null;
-  /** New credentials for the Data Integration. When provided, rotates the stored client secret. */
-  credentials?: DataIntegrationCredentialsDto;
-  /** Updates to a custom provider's OAuth definition. Only valid for custom-provider integrations. */
-  customProvider?: UpdateCustomProviderDefinition;
-}
-//#endregion
-//#region src/pipes/interfaces/delete-data-integration-options.interface.d.ts
-interface DeleteDataIntegrationOptions {
-  /** The slug identifier of the data integration. */
-  slug: string;
-}
-//#endregion
-//#region src/pipes/interfaces/update-data-integration-api-key-options.interface.d.ts
-interface UpdateDataIntegrationApiKeyOptions {
-  /** The identifier of the integration. */
-  slug: string;
-  /** A [User](https://workos.com/docs/reference/authkit/user) identifier. */
-  userId: string;
-  /** An [Organization](https://workos.com/docs/reference/organization) identifier. Optional parameter to scope the connection to a specific organization. */
-  organizationId?: string;
-  /** The API key secret to store for this integration. */
-  secret: string;
-}
-//#endregion
-//#region src/pipes/interfaces/authorize-data-integration-options.interface.d.ts
-interface AuthorizeDataIntegrationOptions {
-  /** The slug identifier of the provider (e.g., `github`, `slack`, `notion`). */
-  slug: string;
-  /** The ID of the user to authorize. */
-  userId: string;
-  /** An organization ID to scope the authorization to a specific organization. */
-  organizationId?: string;
-  /** The URL to redirect the user to after authorization. */
-  returnTo?: string;
-}
-//#endregion
-//#region src/pipes/interfaces/create-data-integration-credential-options.interface.d.ts
-interface CreateDataIntegrationCredentialOptions {
-  /** The identifier of the integration. */
-  slug: string;
-  /** A [User](https://workos.com/docs/reference/authkit/user) identifier. */
-  userId: string;
-  /** An [Organization](https://workos.com/docs/reference/organization) identifier. Optional parameter to scope the connection to a specific organization. */
-  organizationId?: string;
-}
-//#endregion
-//#region src/pipes/interfaces/get-access-token-options.interface.d.ts
-interface GetAccessTokenOptions {
-  /** The identifier of the integration. */
-  provider: string;
-  /** A [User](https://workos.com/docs/reference/authkit/user) identifier. */
-  userId: string;
-  /** An [Organization](https://workos.com/docs/reference/organization) identifier. Optional parameter to scope the connection to a specific organization. */
-  organizationId?: string | null;
-}
-//#endregion
-//#region src/pipes/interfaces/get-user-connected-account-options.interface.d.ts
-interface GetUserConnectedAccountOptions {
-  /** A [User](https://workos.com/docs/reference/authkit/user) identifier. */
-  userId: string;
-  /** The slug identifier of the provider (e.g., `github`, `slack`, `notion`). */
-  slug: string;
-  /** An [Organization](https://workos.com/docs/reference/organization) identifier. Optional parameter if the connection is scoped to an organization. */
-  organizationId?: string;
-}
-//#endregion
-//#region src/pipes/interfaces/connected-account-state.interface.d.ts
-declare const ConnectedAccountState: {
-  readonly Connected: "connected";
-  readonly NeedsReauthorization: "needs_reauthorization";
-};
-type ConnectedAccountState = (typeof ConnectedAccountState)[keyof typeof ConnectedAccountState];
-//#endregion
-//#region src/pipes/interfaces/create-user-connected-account-options.interface.d.ts
-interface CreateUserConnectedAccountOptions {
-  /** A [User](https://workos.com/docs/reference/authkit/user) identifier. */
-  userId: string;
-  /** The slug identifier of the provider (e.g., `github`, `slack`, `notion`). */
-  slug: string;
-  /** An [Organization](https://workos.com/docs/reference/organization) identifier. Optional parameter if the connection is scoped to an organization. */
-  organizationId?: string;
-  /** The OAuth access token for the connected account. */
-  accessToken?: string;
-  /** The OAuth refresh token for the connected account. */
-  refreshToken?: string;
-  /** The ISO-8601 timestamp when the access token expires. Required when `access_token` is provided for tokens that expire. */
-  expiresAt?: Date;
-  /** The OAuth scopes granted for this connection. */
-  scopes?: string[];
-  /** Explicitly set the state of the connected account. When omitted, the state is derived from the token combination provided. */
-  state?: ConnectedAccountState;
-}
-//#endregion
-//#region src/pipes/interfaces/update-user-connected-account-options.interface.d.ts
-interface UpdateUserConnectedAccountOptions {
-  /** A [User](https://workos.com/docs/reference/authkit/user) identifier. */
-  userId: string;
-  /** The slug identifier of the provider (e.g., `github`, `slack`, `notion`). */
-  slug: string;
-  /** An [Organization](https://workos.com/docs/reference/organization) identifier. Optional parameter if the connection is scoped to an organization. */
-  organizationId?: string;
-  /** The OAuth access token for the connected account. */
-  accessToken?: string;
-  /** The OAuth refresh token for the connected account. */
-  refreshToken?: string;
-  /** The ISO-8601 timestamp when the access token expires. Required when `access_token` is provided for tokens that expire. */
-  expiresAt?: Date;
-  /** The OAuth scopes granted for this connection. */
-  scopes?: string[];
-  /** Explicitly set the state of the connected account. When omitted, the state is derived from the token combination provided. */
-  state?: ConnectedAccountState;
-}
-//#endregion
-//#region src/pipes/interfaces/delete-user-connected-account-options.interface.d.ts
-interface DeleteUserConnectedAccountOptions {
-  /** A [User](https://workos.com/docs/reference/authkit/user) identifier. */
-  userId: string;
-  /** The slug identifier of the provider (e.g., `github`, `slack`, `notion`). */
-  slug: string;
-  /** An [Organization](https://workos.com/docs/reference/organization) identifier. Optional parameter if the connection is scoped to an organization. */
-  organizationId?: string;
-}
-//#endregion
-//#region src/pipes/interfaces/list-user-data-providers-options.interface.d.ts
-interface ListUserDataProvidersOptions {
-  /** A [User](https://workos.com/docs/reference/authkit/user) identifier to list providers and connected accounts for. */
-  userId: string;
-  /** An [Organization](https://workos.com/docs/reference/organization) identifier. Optional parameter to filter connections for a specific organization. */
-  organizationId?: string;
-}
-//#endregion
-//#region src/pipes/interfaces/data-integration-credential-type.interface.d.ts
-declare const DataIntegrationCredentialType: {
-  readonly Custom: "custom";
-  readonly Organization: "organization";
-};
-type DataIntegrationCredentialType = (typeof DataIntegrationCredentialType)[keyof typeof DataIntegrationCredentialType];
-//#endregion
-//#region src/pipes/interfaces/data-integration-credential.interface.d.ts
-/** The credentials configured for the Data Integration. */
-interface DataIntegrationCredential {
-  /** The credentials type. `custom` uses your own OAuth app credentials; `organization` has each organization supply its own credentials (so `client_id`/`redacted_client_secret` are null on the integration itself). */
-  type: DataIntegrationCredentialType;
-  /** The OAuth client ID configured for the provider app. Null for `organization` credentials. */
-  clientId: string | null;
-  /** The last four characters of the OAuth client secret. The full secret is never returned. Null for `organization` credentials. */
-  redactedClientSecret: string | null;
-}
-interface DataIntegrationCredentialResponse {
-  type: DataIntegrationCredentialType;
-  client_id: string | null;
-  redacted_client_secret: string | null;
-}
-//#endregion
-//#region src/pipes/interfaces/data-integration-custom-provider-authenticate-via.interface.d.ts
-declare const DataIntegrationCustomProviderAuthenticateVia: {
-  readonly RequestBody: "request_body";
-  readonly BasicAuthHeader: "basic_auth_header";
-};
-type DataIntegrationCustomProviderAuthenticateVia = (typeof DataIntegrationCustomProviderAuthenticateVia)[keyof typeof DataIntegrationCustomProviderAuthenticateVia];
-//#endregion
-//#region src/pipes/interfaces/data-integration-custom-provider.interface.d.ts
-interface DataIntegrationCustomProvider {
-  /** A descriptive name for the custom provider. */
-  name: string;
-  /** The provider's OAuth authorization endpoint. */
-  authorizationUrl: string | null;
-  /** The provider's OAuth token endpoint. */
-  tokenUrl: string | null;
-  /** The endpoint used to refresh tokens, if different from the token endpoint. */
-  refreshTokenUrl: string | null;
-  /** Whether PKCE is used during the authorization code flow. */
-  pkceEnabled: boolean;
-  /** The separator used to join requested scopes. */
-  requestScopeSeparator: string;
-  /** Whether at least one scope must be selected when connecting an account. */
-  scopesRequired: boolean;
-  /** Whether a client secret is required for this provider. */
-  clientSecretRequired: boolean;
-  /** Additional static query parameters appended to the authorization request. */
-  additionalAuthorizationParameters: Record<string, string>;
-  /** The Content-Type used when exchanging the token request. */
-  tokenBodyContentType: string;
-  /** How client credentials are sent when exchanging authorization codes and refreshing tokens. */
-  authenticateVia: DataIntegrationCustomProviderAuthenticateVia;
-}
-interface DataIntegrationCustomProviderResponse {
-  name: string;
-  authorization_url: string | null;
-  token_url: string | null;
-  refresh_token_url: string | null;
-  pkce_enabled: boolean;
-  request_scope_separator: string;
-  scopes_required: boolean;
-  client_secret_required: boolean;
-  additional_authorization_parameters: Record<string, string>;
-  token_body_content_type: string;
-  authenticate_via: DataIntegrationCustomProviderAuthenticateVia;
-}
-//#endregion
-//#region src/pipes/interfaces/data-integration-state.interface.d.ts
-declare const DataIntegrationState: {
-  readonly Valid: "valid";
-  readonly Invalid: "invalid";
-  readonly Requested: "requested";
-};
-type DataIntegrationState = (typeof DataIntegrationState)[keyof typeof DataIntegrationState];
-//#endregion
-//#region src/pipes/interfaces/data-integration.interface.d.ts
-interface DataIntegration {
-  /** Distinguishes the Data Integration object. */
-  object: 'data_integration';
-  /** Unique identifier of the Data Integration. */
-  id: string;
-  /** The provider slug for this Data Integration. */
-  slug: string;
-  /** The integration type derived from the provider. */
-  integrationType: string;
-  /** An optional description of the Data Integration. */
-  description: string | null;
-  /** Whether the Data Integration is enabled. */
-  enabled: boolean;
-  /** The state of the Data Integration. */
-  state: DataIntegrationState;
-  /** The OAuth scopes configured for the Data Integration. `null` when the provider's configured scopes are used. */
-  scopes: string[] | null;
-  /** The OAuth redirect URI to register with the provider when configuring the custom application. */
-  redirectUri: string;
-  /** The credentials configured for the Data Integration. */
-  credentials: DataIntegrationCredential;
-  /** The OAuth definition when this is a custom provider; `null` for built-in providers. */
-  customProvider: DataIntegrationCustomProvider | null;
-  /** An ISO 8601 timestamp. */
-  createdAt: Date;
-  /** An ISO 8601 timestamp. */
-  updatedAt: Date;
-}
-interface DataIntegrationResponse {
-  object: 'data_integration';
-  id: string;
-  slug: string;
-  integration_type: string;
-  description: string | null;
-  enabled: boolean;
-  state: DataIntegrationState;
-  scopes: string[] | null;
-  redirect_uri: string;
-  credentials: DataIntegrationCredentialResponse;
-  custom_provider: DataIntegrationCustomProviderResponse | null;
-  created_at: string;
-  updated_at: string;
-}
-//#endregion
-//#region src/pipes/interfaces/connected-account-auth-method.interface.d.ts
-declare const ConnectedAccountAuthMethod: {
-  readonly OAuth: "oauth";
-  readonly ApiKey: "api_key";
-};
-type ConnectedAccountAuthMethod = (typeof ConnectedAccountAuthMethod)[keyof typeof ConnectedAccountAuthMethod];
-//#endregion
-//#region src/pipes/interfaces/connected-account.interface.d.ts
-interface ConnectedAccount {
-  /** Distinguishes the connected account object. */
-  object: 'connected_account';
-  /** The unique identifier of the connected account. */
-  id: string;
-  /** The [User](https://workos.com/docs/reference/authkit/user) identifier associated with this connection. */
-  userId: string | null;
-  /** The [Organization](https://workos.com/docs/reference/organization) identifier associated with this connection, or `null` if not scoped to an organization. */
-  organizationId: string | null;
-  /** The OAuth scopes granted for this connection. */
-  scopes: string[];
-  /** The authentication method used for this connection (`oauth` or `api_key`). Defaults to `oauth` if absent. */
-  authMethod?: ConnectedAccountAuthMethod;
-  /** The last four characters of the API key, or `null` for OAuth connections. */
-  apiKeyLast4?: string | null;
-  /**
-   * The state of the connected account:
-   * - `connected`: The connection is active and tokens are valid.
-   * - `needs_reauthorization`: The user needs to reauthorize the connection, typically because required scopes have changed.
-   * - `disconnected`: The connection has been disconnected.
-   */
-  state: ConnectedAccountState;
-  /** The timestamp when the connection was created. */
-  createdAt: string;
-  /** The timestamp when the connection was last updated. */
-  updatedAt: string;
+//#region src/passwordless/interfaces/passwordless-session.interface.d.ts
+interface PasswordlessSession {
+  id: string;
+  email: string;
+  expiresAt: Date;
+  link: string;
+  object: 'passwordless_session';
 }
-interface ConnectedAccountResponse {
-  object: 'connected_account';
+interface PasswordlessSessionResponse {
   id: string;
-  user_id: string | null;
-  organization_id: string | null;
-  scopes: string[];
-  auth_method?: ConnectedAccountAuthMethod;
-  api_key_last_4?: string | null;
-  state: ConnectedAccountState;
-  created_at: string;
-  updated_at: string;
+  email: string;
+  expires_at: Date;
+  link: string;
+  object: 'passwordless_session';
 }
 //#endregion
-//#region src/pipes/interfaces/data-integration-authorize-url-response.interface.d.ts
-interface DataIntegrationAuthorizeUrlResponse {
-  /** The OAuth authorization URL to redirect the user to. */
-  url: string;
+//#region src/passwordless/interfaces/create-passwordless-session-options.interface.d.ts
+interface CreatePasswordlessSessionOptions {
+  type: 'MagicLink';
+  email: string;
+  redirectURI?: string;
+  state?: string;
+  connection?: string;
+  expiresIn?: number;
 }
-interface DataIntegrationAuthorizeUrlResponseWire {
-  url: string;
+interface SerializedCreatePasswordlessSessionOptions {
+  type: 'MagicLink';
+  email: string;
+  redirect_uri?: string;
+  state?: string;
+  connection?: string;
+  expires_in?: number;
 }
 //#endregion
-//#region src/pipes/interfaces/data-integration-credentials-response-credential.interface.d.ts
-/** The credential object containing the vended secret. */
-interface DataIntegrationCredentialsResponseCredential {
-  /** Distinguishes the credential object. */
-  object: 'credential';
-  /** The authentication method for this credential. Additional values may be added in the future; handle unknown values gracefully. */
-  authMethod: 'oauth';
-  /** The OAuth access token. */
-  value: string;
-  /** The ISO-8601 formatted timestamp indicating when the credential expires. */
-  expiresAt: string | null;
-  /** The scopes granted to the access token. */
-  scopes: string[];
-  /** If the integration has requested scopes that aren't present on the access token, they're listed here. */
-  missingScopes: string[];
-}
-interface DataIntegrationCredentialsResponseCredentialResponse {
-  object: 'credential';
-  auth_method: 'oauth';
-  value: string;
-  expires_at: string | null;
-  scopes: string[];
-  missing_scopes: string[];
+//#region src/passwordless/interfaces/send-session-response.interface.d.ts
+interface SendSessionResponse {
+  message?: string;
+  success?: boolean;
 }
 //#endregion
-//#region src/pipes/interfaces/data-integration-credentials-response-error.interface.d.ts
-declare const DataIntegrationCredentialsResponseError: {
-  readonly NotInstalled: "not_installed";
-  readonly NeedsReauthorization: "needs_reauthorization";
-};
-type DataIntegrationCredentialsResponseError = (typeof DataIntegrationCredentialsResponseError)[keyof typeof DataIntegrationCredentialsResponseError];
+//#region src/passwordless/passwordless.d.ts
+declare class Passwordless {
+  private readonly workos;
+  constructor(workos: WorkOS);
+  createSession({ redirectURI, expiresIn, ...options }: CreatePasswordlessSessionOptions): Promise<PasswordlessSession>;
+  sendSession(sessionId: string): Promise<SendSessionResponse>;
+}
 //#endregion
 //#region src/pipes/interfaces/data-integration-credentials-response.interface.d.ts
 interface DataIntegrationCredentialsResponse {
@@ -5768,177 +6145,6 @@ interface DataIntegrationCredentialsResponse {
   error?: DataIntegrationCredentialsResponseError;
 }
 //#endregion
-//#region src/pipes/interfaces/data-integration-access-token-response-access-token.interface.d.ts
-/** The [access token](https://workos.com/docs/reference/pipes/access-token) object, present when `active` is `true`. */
-interface DataIntegrationAccessTokenResponseAccessToken {
-  /** Distinguishes the access token object. */
-  object: 'access_token';
-  /** The OAuth access token for the connected integration. */
-  accessToken: string;
-  /** The ISO-8601 formatted timestamp indicating when the access token expires. */
-  expiresAt: Date | null;
-  /** The scopes granted to the access token. */
-  scopes: string[];
-  /** If the integration has requested scopes that aren't present on the access token, they're listed here. */
-  missingScopes: string[];
-}
-interface DataIntegrationAccessTokenResponseAccessTokenResponse {
-  object: 'access_token';
-  access_token: string;
-  expires_at: string | null;
-  scopes: string[];
-  missing_scopes: string[];
-}
-//#endregion
-//#region src/pipes/interfaces/data-integration-access-token-response.interface.d.ts
-type DataIntegrationAccessTokenResponse = {
-  active: true;
-  accessToken: DataIntegrationAccessTokenResponseAccessToken;
-} | {
-  active: false;
-  error: 'needs_reauthorization' | 'not_installed';
-};
-type DataIntegrationAccessTokenResponseWire = {
-  active: true;
-  access_token: DataIntegrationAccessTokenResponseAccessTokenResponse;
-} | {
-  active: false;
-  error: 'needs_reauthorization' | 'not_installed';
-};
-//#endregion
-//#region src/pipes/interfaces/data-integrations-list-response-data-connected-account-auth-method.interface.d.ts
-declare const DataIntegrationsListResponseDataConnectedAccountAuthMethod: {
-  readonly OAuth: "oauth";
-  readonly ApiKey: "api_key";
-};
-type DataIntegrationsListResponseDataConnectedAccountAuthMethod = (typeof DataIntegrationsListResponseDataConnectedAccountAuthMethod)[keyof typeof DataIntegrationsListResponseDataConnectedAccountAuthMethod];
-//#endregion
-//#region src/pipes/interfaces/data-integrations-list-response-data-connected-account-state.interface.d.ts
-declare const DataIntegrationsListResponseDataConnectedAccountState: {
-  readonly Connected: "connected";
-  readonly NeedsReauthorization: "needs_reauthorization";
-  readonly Disconnected: "disconnected";
-};
-type DataIntegrationsListResponseDataConnectedAccountState = (typeof DataIntegrationsListResponseDataConnectedAccountState)[keyof typeof DataIntegrationsListResponseDataConnectedAccountState];
-//#endregion
-//#region src/pipes/interfaces/data-integrations-list-response-data-connected-account.interface.d.ts
-interface DataIntegrationsListResponseDataConnectedAccount {
-  /** Distinguishes the connected account object. */
-  object: 'connected_account';
-  /** The unique identifier of the connected account. */
-  id: string;
-  /** The [User](https://workos.com/docs/reference/authkit/user) identifier associated with this connection. */
-  userId: string | null;
-  /** The [Organization](https://workos.com/docs/reference/organization) identifier associated with this connection, or `null` if not scoped to an organization. */
-  organizationId: string | null;
-  /** The OAuth scopes granted for this connection. */
-  scopes: string[];
-  /** The authentication method used for this connection (`oauth` or `api_key`). Defaults to `oauth` if absent. */
-  authMethod?: DataIntegrationsListResponseDataConnectedAccountAuthMethod;
-  /** The last four characters of the API key, or `null` for OAuth connections. */
-  apiKeyLast4?: string | null;
-  /**
-   * The state of the connected account:
-   * - `connected`: The connection is active and tokens are valid.
-   * - `needs_reauthorization`: The user needs to reauthorize the connection, typically because required scopes have changed.
-   * - `disconnected`: The connection has been disconnected.
-   */
-  state: DataIntegrationsListResponseDataConnectedAccountState;
-  /** The timestamp when the connection was created. */
-  createdAt: string;
-  /** The timestamp when the connection was last updated. */
-  updatedAt: string;
-  /**
-   * Use `user_id` instead.
-   * @deprecated
-   */
-  userlandUserId: string | null;
-}
-interface DataIntegrationsListResponseDataConnectedAccountResponse {
-  object: 'connected_account';
-  id: string;
-  user_id: string | null;
-  organization_id: string | null;
-  scopes: string[];
-  auth_method?: DataIntegrationsListResponseDataConnectedAccountAuthMethod;
-  api_key_last_4?: string | null;
-  state: DataIntegrationsListResponseDataConnectedAccountState;
-  created_at: string;
-  updated_at: string;
-  userland_user_id: string | null;
-}
-//#endregion
-//#region src/pipes/interfaces/data-integrations-list-response-data-auth-methods.interface.d.ts
-declare const DataIntegrationsListResponseDataAuthMethods: {
-  readonly OAuth: "oauth";
-  readonly ApiKey: "api_key";
-};
-type DataIntegrationsListResponseDataAuthMethods = (typeof DataIntegrationsListResponseDataAuthMethods)[keyof typeof DataIntegrationsListResponseDataAuthMethods];
-//#endregion
-//#region src/pipes/interfaces/data-integrations-list-response-data-ownership.interface.d.ts
-declare const DataIntegrationsListResponseDataOwnership: {
-  readonly UserlandUser: "userland_user";
-  readonly Organization: "organization";
-};
-type DataIntegrationsListResponseDataOwnership = (typeof DataIntegrationsListResponseDataOwnership)[keyof typeof DataIntegrationsListResponseDataOwnership];
-//#endregion
-//#region src/pipes/interfaces/data-integrations-list-response-data.interface.d.ts
-interface DataIntegrationsListResponseData {
-  /** Distinguishes the data provider object. */
-  object: 'data_provider';
-  /** The unique identifier of the provider. */
-  id: string;
-  /** The display name of the provider (e.g., "GitHub", "Slack"). */
-  name: string;
-  /** A description of the provider explaining how it will be used, if configured. */
-  description: string | null;
-  /** The slug identifier used in API calls (e.g., `github`, `slack`, `notion`). */
-  slug: string;
-  /** The type of integration (e.g., `github`, `slack`). */
-  integrationType: string;
-  /** The type of credentials used by the provider (e.g., `oauth2`). */
-  credentialsType: string;
-  /** The OAuth scopes configured for this provider, or `null` if none are configured. */
-  scopes: string[] | null;
-  /** The authentication methods supported by this provider (`oauth`, `api_key`, or both). Defaults to `["oauth"]` if absent. */
-  authMethods?: DataIntegrationsListResponseDataAuthMethods[];
-  /** Whether the provider is owned by a user or organization. */
-  ownership: DataIntegrationsListResponseDataOwnership;
-  /** The timestamp when the provider was created. */
-  createdAt: string;
-  /** The timestamp when the provider was last updated. */
-  updatedAt: string;
-  /** The user's [connected account](https://workos.com/docs/reference/pipes/connected-account) for this provider, or `null` if the user has not connected. */
-  connectedAccount: DataIntegrationsListResponseDataConnectedAccount | null;
-}
-interface DataIntegrationsListResponseDataResponse {
-  object: 'data_provider';
-  id: string;
-  name: string;
-  description: string | null;
-  slug: string;
-  integration_type: string;
-  credentials_type: string;
-  scopes: string[] | null;
-  auth_methods?: DataIntegrationsListResponseDataAuthMethods[];
-  ownership: DataIntegrationsListResponseDataOwnership;
-  created_at: string;
-  updated_at: string;
-  connected_account: DataIntegrationsListResponseDataConnectedAccountResponse | null;
-}
-//#endregion
-//#region src/pipes/interfaces/data-integrations-list-response.interface.d.ts
-interface DataIntegrationsListResponse {
-  /** Indicates this is a list response. */
-  object: 'list';
-  /** A list of [providers](https://workos.com/docs/reference/pipes/provider), each including a [`connected_account`](https://workos.com/docs/reference/pipes/connected-account) field with the user's connection status. */
-  data: DataIntegrationsListResponseData[];
-}
-interface DataIntegrationsListResponseWire {
-  object: 'list';
-  data: DataIntegrationsListResponseDataResponse[];
-}
-//#endregion
 //#region src/pipes/pipes.d.ts
 declare class Pipes {
   private readonly workos;
@@ -9315,6 +9521,7 @@ declare const CreateWebhookEndpointEvents: {
   readonly PermissionDeleted: "permission.deleted";
   readonly PermissionUpdated: "permission.updated";
   readonly PipesConnectedAccountConnected: "pipes.connected_account.connected";
+  readonly PipesConnectedAccountConnectionFailed: "pipes.connected_account.connection_failed";
   readonly PipesConnectedAccountDisconnected: "pipes.connected_account.disconnected";
   readonly PipesConnectedAccountReauthorizationNeeded: "pipes.connected_account.reauthorization_needed";
   readonly SessionCreated: "session.created";
@@ -9415,6 +9622,7 @@ declare const UpdateWebhookEndpointEvents: {
   readonly PermissionDeleted: "permission.deleted";
   readonly PermissionUpdated: "permission.updated";
   readonly PipesConnectedAccountConnected: "pipes.connected_account.connected";
+  readonly PipesConnectedAccountConnectionFailed: "pipes.connected_account.connection_failed";
   readonly PipesConnectedAccountDisconnected: "pipes.connected_account.disconnected";
   readonly PipesConnectedAccountReauthorizationNeeded: "pipes.connected_account.reauthorization_needed";
   readonly SessionCreated: "session.created";
@@ -9713,8 +9921,9 @@ declare class UnprocessableEntityException extends Error implements RequestExcep
   readonly message: string;
   readonly code?: string;
   readonly requestID: string;
-  constructor({ code, errors, message, requestID }: {
+  constructor({ code, error, errors, message, requestID }: {
     code?: string;
+    error?: string;
     errors?: UnprocessableEntityError[];
     message?: string;
     requestID: string;
@@ -9859,5 +10068,5 @@ interface ConfidentialClientOptions extends WorkOSOptions {
 declare function createWorkOS(options: PublicClientOptions): PublicWorkOS;
 declare function createWorkOS(options: ConfidentialClientOptions): WorkOS;
 //#endregion
-export { ReadObjectMetadataResponse as $, FlagDeletedEventResponse as $a, SerializedUpdateUserOptions as $c, SerializedListConnectionsOptions as $d, RemoveRoleOptionsWithResourceId as $f, AuthenticationMfaSucceededEventResponse as $i, ListInvitationsOptions as $l, PasswordlessSessionResponse as $n, OrganizationUpdatedResponse as $o, SerializedUpdateOrganizationRoleOptions as $p, SerializedLinkClaimAttemptToExternalUserOptions as $r, ListGroupsOptions as $s, DataIntegrationsListResponseDataOwnership as $t, AuthenticateWithSessionCookieFailureReason as $u, ApiKeyRequiredException as A, DsyncGroupDeletedEvent as Aa, CreatedApiKey as Ac, AuthenticateUserWithMagicAuthCredentials as Ad, SerializedGroupRoleAssignmentEntry as Af, DomainData as Ai, CreateMagicAuthResponseResponse as Al, HttpClientResponseInterface as Am, ConnectedAccountState as An, OrganizationDomainCreatedEvent as Ao, DeleteAuthorizationResourceByExternalIdOptions as Ap, CompleteOAuth2Options as Ar, VaultDataCreatedEventResponse as As, SerializedAuditLogExportOptions as At, AuthenticationFactorResponse as Au, ObjectSummaryResponse as B, DsyncUserDeletedEvent as Ba, OrganizationDomainResponse as Bc, SerializedAuthenticateWithCodeOptions as Bd, CreateGroupRoleAssignmentOptions as Bf, GetOptions as Bi, SerializedListUserApiKeysOptions as Bl, UpdateCustomProviderDefinitionAuthenticateVia as Bn, OrganizationMembershipCreated as Bo, SerializedCreateAuthorizationResourceOptions as Bp, AgentCredentialValidation as Br, VaultDekReadEventResponse as Bs, RadarStandaloneResponse as Bt, TotpResponse as Bu, BadRequestException as C, ConnectionDeletedEventResponse as Ca, LegacyEvaluationContext as Cc, SerializedAuthenticateWithOrganizationSelectionOptions as Cd, ListEffectivePermissionsOptions as Cf, Organization as Ci, RetryableRefreshSessionFailureReason as Cl, DirectoryState as Cm, DataIntegrationCredential as Cn, InvitationRevokedEventResponse as Co, SerializedListResourcesForMembershipOptions as Cp, CreateM2MApplication as Cr, UserDeletedEvent as Cs, AuditLogSchema as Ct, CreateMagicAuthOptions as Cu, isAuthenticationErrorData as D, DsyncDeletedEventResponse as Da, ValidateApiKeyOptions as Dc, AuthenticateUserWithRadarEmailChallengeCredentials as Dd, GroupRoleAssignmentEntryWithResourceExternalId as Df, CreateOrganizationOptions as Di, PasswordResetEventResponse as Dl, EventDirectoryResponse as Dm, DeleteUserConnectedAccountOptions as Dn, OrganizationCreatedResponse as Do, AuthorizationCheckResult as Dp, RedirectUriInput as Dr, VaultByokKeyVerificationCompletedEvent as Ds, AuditLogExport as Dt, AuthenticationRadarRiskDetectedEventData as Du, AuthenticationException as E, DsyncDeletedEvent as Ea, SerializedValidateApiKeyResponse as Ec, SerializedAuthenticateWithRadarSmsChallengeOptions as Ed, GroupRoleAssignmentEntryForOrganization as Ef, ListOrganizationFeatureFlagsOptions as Ei, PasswordResetEvent as El, EventDirectory as Em, ListUserDataProvidersOptions as En, OrganizationCreatedEvent as Eo, AuthorizationCheckOptionsWithResourceId as Ep, CreateOAuthApplicationResponse as Er, UserUpdatedEventResponse as Es, AuditLogTargetSchema as Et, UserManagementAuthorizationURLOptions as Eu, UpdateWebhookEndpointEvents as F, DsyncGroupUserAddedEventResponse as Fa, ApiKey as Fc, SerializedAuthenticateWithEmailVerificationOptions as Fd, RemoveGroupRoleAssignmentsOptionsWithResourceExternalId as Ff, PutOptions as Fi, LogoutURLOptions as Fl, CryptoProvider as Fm, UpdateDataIntegrationApiKeyOptions as Fn, OrganizationDomainUpdatedEventResponse as Fo, AuthorizationResource as Fp, UserObject as Fr, VaultDataUpdatedEvent as Fs, Challenge as Ft, FactorResponse as Fu, ObjectMetadata as G, EmailVerificationCreatedEventResponse as Ga, SerializedVerifyEmailOptions as Gc, WithResolvedClientId as Gd, GetGroupRoleAssignmentOptions as Gf, ApiKeyRevokedEventResponse as Gi, SerializedListOrganizationMembershipsOptions as Gl, CustomProviderDefinitionAuthenticateVia as Gn, OrganizationMembershipUpdatedResponse as Go, UpdatePermissionOptions as Gp, ValidAgentCredential as Gr, VaultNamesListedEvent as Gs, RadarListAction as Gt, AuthenticationEvent as Gu, ObjectVersionResponse as H, DsyncUserUpdatedEvent as Ha, OrganizationDomainVerificationStrategy as Hc, AuthenticateWithSessionOptions as Hd, CreateGroupRoleAssignmentOptionsWithResourceExternalId as Hf, ApiKeyCreatedEvent as Hi, ListSessionsOptions as Hl, CreateDataIntegrationOptions as Hn, OrganizationMembershipDeleted as Ho, UpdateAuthorizationResourceOptions as Hp, SerializedAgentAccessTokenClaims as Hr, VaultKekCreatedEventResponse as Hs, RadarStandaloneResponseBlocklistType as Ht, TotpWithSecretsResponse as Hu, UpdateWebhookEndpointStatus as I, DsyncGroupUserRemovedEvent as Ia, SerializedApiKey as Ic, AuthenticateWithCodeAndVerifierOptions as Id, RemoveGroupRoleAssignmentsOptionsWithResourceId as If, PostOptions as Ii, Locale as Il, DeleteDataIntegrationOptions as In, OrganizationDomainVerificationFailedEvent as Io, AuthorizationResourceResponse as Ip, UserObjectResponse as Ir, VaultDataUpdatedEventResponse as Is, ChallengeResponse as It, FactorType as Iu, ActorResponse as J, EventName as Ja, UserApiKeyWithValue as Jc, Profile as Jd, GroupRoleAssignmentResponse as Jf, AuthenticationMagicAuthFailedEvent as Ji, BaseOrganizationMembership as Jl, DataIntegrationCredentialsType as Jn, OrganizationRoleDeletedEvent as Jo, Permission as Jp, ValidateAgentCredentialOptions as Jr, DataKeyPair as Js, RadarStandaloneAssessRequestAuthMethod as Jt, AuthenticationEventSsoResponse as Ju, ObjectMetadataResponse as K, Event as Ka, VerifyEmailOptions as Kc, ProfileAndToken as Kd, ListGroupRoleAssignmentsOptions as Kf, AuthenticationEmailVerificationSucceededEvent as Ki, AuthorizationOrganizationMembership as Kl, DataIntegrationCredentialsDto as Kn, OrganizationRoleCreatedEvent as Ko, CreatePermissionOptions as Kp, ValidateAgentAccessTokenOptions as Kr, VaultNamesListedEventResponse as Ks, RadarListType as Kt, AuthenticationEventResponse as Ku, CreateWebhookEndpointEvents as L, DsyncGroupUserRemovedEventResponse as La, OrganizationDomainVerificationFailed as Lc, SerializedAuthenticateWithCodeAndVerifierOptions as Ld, SerializedRemoveGroupRoleAssignmentsOptions as Lf, PatchOptions as Li, ListUsersOptions as Ll, UpdateDataIntegrationOptions as Ln, OrganizationDomainVerificationFailedEventResponse as Lo, CreateAuthorizationResourceOptions as Lp, AutoPaginatable as Lr, VaultDekDecryptedEvent as Ls, ChallengeFactorOptions as Lt, FactorWithSecrets as Lu, WebhookEndpoint as M, DsyncGroupUpdatedEvent as Ma, CreateOrganizationApiKeyOptions as Mc, SerializedAuthenticateWithMagicAuthOptions as Md, BaseRemoveGroupRoleAssignmentsOptions as Mf, WorkOSResponseError as Mi, MagicAuthEvent as Ml, RequestOptions as Mm, GetAccessTokenOptions as Mn, OrganizationDomainDeletedEvent as Mo, GetAuthorizationResourceByExternalIdOptions as Mp, UserConsentOptionResponse as Mr, VaultDataDeletedEventResponse as Ms, VerifyResponseResponse as Mt, AuthenticationFactorWithSecrets as Mu, WebhookEndpointResponse as N, DsyncGroupUpdatedEventResponse as Na, CreateOrganizationApiKeyRequestOptions as Nc, AuthenticateUserWithEmailVerificationCredentials as Nd, RemoveGroupRoleAssignmentsOptions as Nf, WorkOSOptions as Ni, MagicAuthEventResponse as Nl, ResponseHeaderValue as Nm, CreateDataIntegrationCredentialOptions as Nn, OrganizationDomainDeletedEventResponse as No, ListAuthorizationResourcesOptions as Np, UserConsentOptionChoice as Nr, VaultDataReadEvent as Ns, VerifyChallengeOptions as Nt, AuthenticationFactorWithSecretsResponse as Nu, GenericServerException as O, DsyncGroupCreatedEvent as Oa, ValidateApiKeyResponse as Oc, AuthenticateWithRadarEmailChallengeOptions as Od, GroupRoleAssignmentEntryWithResourceId as Of, CreateOrganizationRequestOptions as Oi, PasswordResetResponse as Ol, HttpClient as Om, UpdateUserConnectedAccountOptions as On, OrganizationDeletedEvent as Oo, SerializedAuthorizationCheckOptions as Op, RedirectUriInputResponse as Or, VaultByokKeyVerificationCompletedEventResponse as Os, AuditLogExportResponse as Ot, AuthenticationRadarRiskDetectedEventResponseData as Ou, WebhookEndpointStatus as P, DsyncGroupUserAddedEvent as Pa, SerializedCreateOrganizationApiKeyOptions as Pc, AuthenticateWithEmailVerificationOptions as Pd, RemoveGroupRoleAssignmentsOptionsForOrganization as Pf, UnprocessableEntityError as Pi, MagicAuthResponse as Pl, ResponseHeaders as Pm, AuthorizeDataIntegrationOptions as Pn, OrganizationDomainUpdatedEvent as Po, SerializedListAuthorizationResourcesOptions as Pp, UserConsentOptionChoiceResponse as Pr, VaultDataReadEventResponse as Ps, EnrollFactorOptions as Pt, Factor as Pu, UpdateObjectOptions as Q, FlagDeletedEvent as Qa, UpdateUserPasswordOptions as Qc, ListConnectionsOptions as Qd, RemoveRoleOptionsWithResourceExternalId as Qf, AuthenticationMfaSucceededEvent as Qi, OrganizationMembershipStatus as Ql, PasswordlessSession as Qn, OrganizationUpdatedEvent as Qo, SetOrganizationRolePermissionsOptions as Qp, SerializedClaimAttemptResponse as Qr, RemoveGroupOrganizationMembershipOptions as Qs, DataIntegrationsListResponseDataResponse as Qt, AuthenticateWithSessionCookieFailedResponse as Qu, WorkOS as R, DsyncUserCreatedEvent as Ra, OrganizationDomainVerificationFailedResponse as Rc, AuthenticateUserWithCodeCredentials as Rd, RemoveGroupRoleAssignmentOptions as Rf, List as Ri, SerializedListUsersOptions as Rl, UpdateCustomProviderDefinition as Rn, OrganizationDomainVerifiedEvent as Ro, CreateOptionsWithParentExternalId as Rp, AgentAccessTokenClaims as Rr, VaultDekDecryptedEventResponse as Rs, RadarListEntryAlreadyPresentResponse as Rt, FactorWithSecretsResponse as Ru, ConflictException as S, ConnectionDeletedEvent as Sa, EvaluationResource as Sc, AuthenticateWithOrganizationSelectionOptions as Sd, ListEffectivePermissionsByExternalIdOptions as Sf, UpdateOrganizationOptions as Si, RefreshSessionResponse as Sl, DirectoryResponse as Sm, DataIntegrationCustomProviderAuthenticateVia as Sn, InvitationRevokedEvent as So, ListResourcesForMembershipOptionsWithParentId as Sp, CreateApplicationOptions as Sr, UserCreatedEventResponse as Ss, AuditLogActorSchema as St, SerializedCreateOrganizationMembershipOptions as Su, AuthenticationErrorData as T, DsyncActivatedEventResponse as Ta, AddFlagTargetOptions as Tc, AuthenticateWithRadarSmsChallengeOptions as Td, GroupRoleAssignmentEntry as Tf, ListOrganizationsOptions as Ti, PasswordReset as Tl, DirectoryType as Tm, DataIntegrationCredentialType as Tn, MagicAuthCreatedEventResponse as To, AuthorizationCheckOptionsWithResourceExternalId as Tp, CreateOAuthApplication as Tr, UserUpdatedEvent as Ts, AuditLogSchemaResponse as Tt, PKCEAuthorizationURLResult as Tu, VaultObject as U, DsyncUserUpdatedEventResponse as Ua, CreateOrganizationDomainOptions as Uc, SerializedAuthenticatePublicClientBase as Ud, CreateGroupRoleAssignmentOptionsWithResourceId as Uf, ApiKeyCreatedEventResponse as Ui, SerializedListSessionsOptions as Ul, CustomProviderDefinition as Un, OrganizationMembershipDeletedResponse as Uo, ListPermissionsOptions as Up, SerializedAgentCredentialValidation as Ur, VaultMetadataReadEvent as Us, RadarStandaloneResponseControl as Ut, Sms as Uu, ObjectVersion as V, DsyncUserDeletedEventResponse as Va, OrganizationDomainState as Vc, AuthenticateWithOptionsBase as Vd, CreateGroupRoleAssignmentOptionsForOrganization as Vf, GenerateLinkIntent as Vi, ListUserFeatureFlagsOptions as Vl, GetDataIntegrationOptions as Vn, OrganizationMembershipCreatedResponse as Vo, SerializedUpdateAuthorizationResourceOptions as Vp, InvalidAgentCredential as Vr, VaultKekCreatedEvent as Vs, RadarStandaloneResponseWire as Vt, TotpWithSecrets as Vu, VaultObjectResponse as W, EmailVerificationCreatedEvent as Wa, SerializedCreateOrganizationDomainOptions as Wc, SerializedAuthenticateWithOptionsBase as Wd, SerializedCreateGroupRoleAssignmentOptions as Wf, ApiKeyRevokedEvent as Wi, ListOrganizationMembershipsOptions as Wl, CustomProviderDefinitionResponse as Wn, OrganizationMembershipUpdated as Wo, SerializedUpdatePermissionOptions as Wp, SerializedValidateAgentCredentialOptions as Wr, VaultMetadataReadEventResponse as Ws, RadarStandaloneResponseVerdict as Wt, SmsResponse as Wu, CreateDataKeyResponseWire as X, FlagCreatedEvent as Xa, UserApiKey as Xc, OauthTokens as Xd, BaseRemoveRoleOptions as Xf, AuthenticationMagicAuthSucceededEvent as Xi, OrganizationMembership as Xl, CreatePasswordlessSessionOptions as Xn, OrganizationRoleUpdatedEvent as Xo, RemoveOrganizationRolePermissionOptions as Xp, ClaimAttemptResponse as Xr, SerializedUpdateGroupOptions as Xs, DataIntegrationsListResponseWire as Xt, AuthenticateWithTotpOptions as Xu, CreateDataKeyResponse as Y, EventResponse as Ya, SerializedUserApiKey as Yc, ProfileResponse as Yd, RemoveRoleAssignmentOptions as Yf, AuthenticationMagicAuthFailedEventResponse as Yi, BaseOrganizationMembershipResponse as Yl, SendSessionResponse as Yn, OrganizationRoleDeletedEventResponse as Yo, PermissionResponse as Yp, ClaimAttemptOrganization as Yr, KeyContext as Ys, DataIntegrationsListResponse as Yt, AuthenticateUserWithTotpCredentials as Yu, UpdateObjectEntity as Z, FlagCreatedEventResponse as Za, SerializedUpdateUserPasswordOptions as Zc, OauthTokensResponse as Zd, RemoveRoleOptions as Zf, AuthenticationMagicAuthSucceededEventResponse as Zi, OrganizationMembershipResponse as Zl, SerializedCreatePasswordlessSessionOptions as Zn, OrganizationRoleUpdatedEventResponse as Zo, AddOrganizationRolePermissionOptions as Zp, LinkClaimAttemptToExternalUserOptions as Zr, UpdateGroupOptions as Zs, DataIntegrationsListResponseData as Zt, SerializedAuthenticateWithTotpOptions as Zu, SignatureVerificationException as _, AuthenticationSSOSucceededEventResponse as _a, FlagPollResponse as _c, SerializedAuthenticateWithRefreshTokenOptions as _d, Role as _f, ActionPayload as _i, ResetPasswordOptions as _l, SerializedListDirectoriesOptions as _m, DataIntegration as _n, InvitationAcceptedEventResponse as _o, RoleAssignmentSourceResponse as _p, CreateApplicationClientSecretOptions as _r, SessionCreatedEventResponse as _s, AuditLogActor as _t, CreateUserApiKeyRequestOptions as _u, PublicWorkOS as a, AuthenticationPasskeyFailedEventResponse as aa, CreateGroupOptions as ac, AuthenticationResponse as ad, ConnectionType as af, AgentRegistrationStatus as ai, SessionResponse as al, SetEnvironmentRolePermissionsOptions as am, DataIntegrationAccessTokenResponse as an, GroupCreatedEventResponse as ao, SerializedAssignRoleOptions as ap, ApplicationCredentialsListItemResponse as ar, PermissionCreatedEventResponse as as, DecryptDataKeyResponse as at, InvitationEventResponse as au, NotFoundException as b, ConnectionDeactivatedEvent as ba, FeatureFlagResponse as bc, SerializedAuthenticateWithPasswordOptions as bd, RoleList as bf, UserRegistrationActionPayload as bi, SerializedResendInvitationOptions as bl, DirectoryGroupResponse as bm, DataIntegrationCustomProvider as bn, InvitationResentEvent as bo, ListResourcesForMembershipOptions as bp, UpdateApplicationOptions as br, UnknownEvent as bs, CreateAuditLogEventRequestOptions as bt, SerializedCreatePasswordResetOptions as bu, PortalLinkResponseWire as c, AuthenticationPasswordFailedEvent as ca, SerializedAddGroupOrganizationMembershipOptions as cc, CreateUserResponseResponse as cd, DefaultCustomAttributes as cf, SerializedAgentRegistrationClaim as ci, SendRadarSmsChallengeOptions as cl, CreateEnvironmentRoleOptions as cm, DataIntegrationAccessTokenResponseAccessTokenResponse as cn, GroupMemberAddedEvent as co, SerializedListRoleAssignmentsForResourceOptions as cp, ConnectApplicationM2MResponse as cr, PermissionUpdatedEvent as cs, WidgetSessionTokenResponseWire as ct, EnrollAuthFactorOptions as cu, IntentOptions as d, AuthenticationPasswordSucceededEventResponse as da, RuntimeClientOptions as dc, Impersonator as dd, DirectoryUserWithGroups as df, PKCEPair as di, SerializedSendRadarSmsChallengeOptions as dl, EnvironmentRoleList as dm, DataIntegrationCredentialsResponseCredentialResponse as dn, GroupMemberEventResponseData as do, RoleAssignment as dp, ConnectApplicationResponse as dr, RoleCreatedEventResponse as ds, FeatureFlagsRuntimeClient as dt, EmailVerificationEvent as du, AuthenticationOAuthFailedEvent as ea, ListGroupOrganizationMembershipsOptions as ec, AuthenticateWithSessionCookieOptions as ed, GetProfileAndTokenOptions as ef, AgentIdentity as ei, UpdateUserOptions as el, UpdateOrganizationRoleOptions as em, DataIntegrationsListResponseDataAuthMethods as en, FlagRuleUpdatedEvent as eo, SerializedRemoveRoleOptions as ep, ListEventOptions as er, PasswordResetCreatedEvent as es, ReadObjectOptions as et, SerializedListInvitationsOptions as eu, IntentOptionsResponse as f, AuthenticationRadarRiskDetectedEvent as fa, RemoveFlagTargetOptions as fc, ImpersonatorResponse as fd, DirectoryUserWithGroupsResponse as ff, Actions as fi, SendInvitationOptions as fl, EnvironmentRoleListResponse as fm, DataIntegrationAuthorizeUrlResponse as fn, GroupMemberRemovedEvent as fo, RoleAssignmentResource as fp, ConnectApplicationRedirectUri as fr, RoleDeletedEvent as fs, CookieSession as ft, EmailVerificationEventResponse as fu, UnauthorizedException as g, AuthenticationSSOSucceededEvent as ga, FlagPollEntry as gc, AuthenticateWithRefreshTokenOptions as gd, OrganizationRoleResponse as gf, ActionContext as gi, serializeRevokeSessionOptions as gl, ListDirectoriesOptions as gm, ConnectedAccountAuthMethod as gn, InvitationAcceptedEvent as go, RoleAssignmentSource as gp, DeleteClientSecretOptions as gr, SessionCreatedEvent as gs, SerializedCreateAuditLogSchemaOptions as gt, CreateUserApiKeyOptions as gu, UnprocessableEntityException as h, AuthenticationSSOFailedEventResponse as ha, FlagCustomTarget as hc, AuthenticateUserWithRefreshTokenCredentials as hd, OrganizationRoleEventResponse as hf, UserRegistrationActionResponseData as hi, SerializedRevokeSessionOptions as hl, ListDirectoryGroupsOptions as hm, ConnectedAccountResponse as hn, GroupUpdatedEventResponse as ho, RoleAssignmentRole as hp, ExternalAuthCompleteResponseWire as hr, RoleUpdatedEventResponse as hs, CreateAuditLogSchemaResponse as ht, SerializedCreateUserOptions as hu, PublicUserManagement as i, AuthenticationPasskeyFailedEvent as ia, DeleteGroupOptions as ic, AuthenticationMethod as id, ConnectionResponse as if, AgentRegistrationKind as ii, Session as il, AddEnvironmentRolePermissionOptions as im, DataIntegrationsListResponseDataConnectedAccountAuthMethod as in, GroupCreatedEvent as io, BaseAssignRoleOptions as ip, ApplicationCredentialsListItem as ir, PermissionCreatedEvent as is, DecryptDataKeyOptions as it, InvitationEvent as iu, Webhooks as j, DsyncGroupDeletedEventResponse as ja, SerializedCreatedApiKey as jc, AuthenticateWithMagicAuthOptions as jd, SerializedReplaceGroupRoleAssignmentsOptions as jf, DomainDataState as ji, MagicAuth as jl, RequestHeaders as jm, GetUserConnectedAccountOptions as jn, OrganizationDomainCreatedEventResponse as jo, UpdateAuthorizationResourceByExternalIdOptions as jp, UserConsentOption as jr, VaultDataDeletedEvent as js, VerifyResponse as jt, AuthenticationFactorType as ju, WorkOSErrorData as k, DsyncGroupCreatedEventResponse as ka, ListOrganizationApiKeysOptions as kc, SerializedAuthenticateWithRadarEmailChallengeOptions as kd, ReplaceGroupRoleAssignmentsOptions as kf, SerializedCreateOrganizationOptions as ki, CreateMagicAuthResponse as kl, HttpClientInterface as km, CreateUserConnectedAccountOptions as kn, OrganizationDeletedResponse as ko, DeleteAuthorizationResourceOptions as kp, ListApplicationsOptions as kr, VaultDataCreatedEvent as ks, AuditLogExportOptions as kt, AuthenticationFactor as ku, GenerateLink as l, AuthenticationPasswordFailedEventResponse as la, RuntimeClientStats as lc, User as ld, DirectoryUser as lf, SerializedAgentRegistrationClaimCompletion as li, SendRadarSmsChallengeResponse as ll, SerializedCreateEnvironmentRoleOptions as lm, DataIntegrationCredentialsResponseError as ln, GroupMemberAddedEventResponse as lo, ListRoleAssignmentsOptions as lp, ConnectApplicationOAuth as lr, PermissionUpdatedEventResponse as ls, CreateTokenOptions as lt, SerializedEnrollUserInMfaFactorOptions as lu, SSOIntentOptionsResponse as m, AuthenticationSSOFailedEvent as ma, FlagChange as mc, SerializedAuthenticateWithRefreshTokenPublicClientOptions as md, OrganizationRoleEvent as mf, ResponsePayload as mi, RevokeSessionOptions as ml, ListDirectoryUsersOptions as mm, ConnectedAccount as mn, GroupUpdatedEvent as mo, RoleAssignmentResponse as mp, ExternalAuthCompleteResponse as mr, RoleUpdatedEvent as ms, CreateAuditLogSchemaRequestOptions as mt, CreateUserOptions as mu, PublicClientOptions as n, AuthenticationOAuthSucceededEvent as na, GroupResponse as nc, SessionCookieData as nd, Connection as nf, AgentRegistrationClaim as ni, UpdateOrganizationMembershipOptions as nl, SerializedCreateOrganizationRoleOptions as nm, DataIntegrationsListResponseDataConnectedAccountResponse as nn, FlagUpdatedEvent as no, AssignRoleOptionsWithResourceExternalId as np, NewConnectApplicationSecret as nr, PasswordResetSucceededEvent as ns, CreateObjectEntity as nt, ListAuthFactorsOptions as nu, createWorkOS as o, AuthenticationPasskeySucceededEvent as oa, SerializedCreateGroupOptions as oc, AuthenticationResponseResponse as od, SSOAuthorizationURLOptions as of, SerializedAgentIdentity as oi, SessionStatus as ol, SerializedUpdateEnvironmentRoleOptions as om, DataIntegrationAccessTokenResponseWire as on, GroupDeletedEvent as oo, ListRoleAssignmentsForResourceByExternalIdOptions as op, ConnectApplication as or, PermissionDeletedEvent as os, CreateDataKeyOptions as ot, InvitationResponse as ou, SSOIntentOptions as p, AuthenticationRadarRiskDetectedEventResponse as pa, ListFeatureFlagsOptions as pc, AuthenticateWithRefreshTokenPublicClientOptions as pd, ListOrganizationRolesResponse as pf, AuthenticationActionResponseData as pi, SerializedSendInvitationOptions as pl, EnvironmentRoleResponse as pm, DataIntegrationAuthorizeUrlResponseWire as pn, GroupMemberRemovedEventResponse as po, RoleAssignmentResourceResponse as pp, ConnectApplicationRedirectUriResponse as pr, RoleDeletedEventResponse as ps, CreateAuditLogSchemaOptions as pt, EmailVerificationResponse as pu, Actor as q, EventBase as qa, SerializedUserApiKeyWithValue as qc, ProfileAndTokenResponse as qd, GroupRoleAssignment as qf, AuthenticationEmailVerificationSucceededEventResponse as qi, AuthorizationOrganizationMembershipResponse as ql, DataIntegrationCredentialsDtoResponse as qn, OrganizationRoleCreatedEventResponse as qo, SerializedCreatePermissionOptions as qp, ValidateAgentApiKeyOptions as qr, DataKey as qs, RadarStandaloneAssessRequestAction as qt, AuthenticationEventSso as qu, PublicSSO as r, AuthenticationOAuthSucceededEventResponse as ra, GetGroupOptions as rc, UserManagementAccessToken as rd, ConnectionDomain as rf, AgentRegistrationClaimCompletion as ri, AuthMethod as rl, OrganizationRole as rm, DataIntegrationsListResponseDataConnectedAccountState as rn, FlagUpdatedEventResponse as ro, AssignRoleOptionsWithResourceId as rp, NewConnectApplicationSecretResponse as rr, PasswordResetSucceededEventResponse as rs, CreateObjectOptions as rt, Invitation as ru, PortalLinkResponse as s, AuthenticationPasskeySucceededEventResponse as sa, AddGroupOrganizationMembershipOptions as sc, CreateUserResponse as sd, SSOPKCEAuthorizationURLResult as sf, SerializedAgentRegistration as si, SendVerificationEmailOptions as sl, UpdateEnvironmentRoleOptions as sm, DataIntegrationAccessTokenResponseAccessToken as sn, GroupDeletedEventResponse as so, ListRoleAssignmentsForResourceOptions as sp, ConnectApplicationM2M as sr, PermissionDeletedEventResponse as ss, WidgetSessionTokenResponse as st, Identity as su, ConfidentialClientOptions as t, AuthenticationOAuthFailedEventResponse as ta, Group as tc, AuthenticateWithSessionCookieSuccessResponse as td, GetProfileOptions as tf, AgentRegistration as ti, SerializedUpdateOrganizationMembershipOptions as tl, CreateOrganizationRoleOptions as tm, DataIntegrationsListResponseDataConnectedAccount as tn, FlagRuleUpdatedEventResponse as to, AssignRoleOptions as tp, SerializedListEventOptions as tr, PasswordResetCreatedEventResponse as ts, ReadObjectResponse as tt, ListGroupsForOrganizationMembershipOptions as tu, GenerateLinkResponse as u, AuthenticationPasswordSucceededEvent as ua, RuntimeClientLogger as uc, UserResponse as ud, DirectoryUserResponse as uf, PKCE as ui, SendRadarSmsChallengeResponseResponse as ul, EnvironmentRole as um, DataIntegrationCredentialsResponseCredential as un, GroupMemberEventData as uo, SerializedListRoleAssignmentsOptions as up, ConnectApplicationOAuthResponse as ur, RoleCreatedEvent as us, WidgetSessionTokenScopes as ut, EmailVerification as uu, RateLimitExceededException as v, ConnectionActivatedEvent as va, FlagTarget as vc, AuthenticateUserWithPasswordCredentials as vd, RoleEvent as vf, UserData as vi, SerializedResetPasswordOptions as vl, PaginationOptions as vm, DataIntegrationResponse as vn, InvitationCreatedEvent as vo, ListMembershipsForResourceByExternalIdOptions as vp, ListApplicationClientSecretsOptions as vr, SessionRevokedEvent as vs, AuditLogTarget as vt, SerializedCreateUserApiKeyOptions as vu, AuthenticationErrorCode as w, DsyncActivatedEvent as wa, TypedEvaluationContext as wc, AuthenticateUserWithRadarSmsChallengeCredentials as wd, BaseGroupRoleAssignmentEntry as wf, OrganizationResponse as wi, TerminalRefreshSessionFailureReason as wl, DirectoryStateResponse as wm, DataIntegrationCredentialResponse as wn, MagicAuthCreatedEvent as wo, AuthorizationCheckOptions as wp, CreateM2MApplicationResponse as wr, UserDeletedEventResponse as ws, AuditLogSchemaMetadata as wt, SerializedCreateMagicAuthOptions as wu, NoApiKeyProvidedException as x, ConnectionDeactivatedEventResponse as xa, EvaluationContext as xc, AuthenticateUserWithOrganizationSelectionCredentials as xd, RoleResponse as xf, SerializedUpdateOrganizationOptions as xi, RefreshSessionFailureReason as xl, Directory as xm, DataIntegrationCustomProviderResponse as xn, InvitationResentEventResponse as xo, ListResourcesForMembershipOptionsWithParentExternalId as xp, GetApplicationOptions as xr, UserCreatedEvent as xs, SerializedCreateAuditLogEventOptions as xt, CreateOrganizationMembershipOptions as xu, OauthException as y, ConnectionActivatedEventResponse as ya, FeatureFlag as yc, AuthenticateWithPasswordOptions as yd, RoleEventResponse as yf, UserDataPayload as yi, ResendInvitationOptions as yl, DirectoryGroup as ym, DataIntegrationState as yn, InvitationCreatedEventResponse as yo, ListMembershipsForResourceOptions as yp, DeleteApplicationOptions as yr, SessionRevokedEventResponse as ys, CreateAuditLogEventOptions as yt, CreatePasswordResetOptions as yu, ObjectSummary as z, DsyncUserCreatedEventResponse as za, OrganizationDomain as zc, AuthenticateWithCodeOptions as zd, BaseCreateGroupRoleAssignmentOptions as zf, ListResponse as zi, ListUserApiKeysOptions as zl, UpdateCustomProviderDefinitionResponse as zn, OrganizationDomainVerifiedEventResponse as zo, CreateOptionsWithParentResourceId as zp, AgentCredentialType as zr, VaultDekReadEvent as zs, RadarListEntryAlreadyPresentResponseWire as zt, Totp as zu };
-//# sourceMappingURL=factory-VM3aexOH.d.cts.map
+export { ReadObjectMetadataResponse as $, OrganizationMembershipDeletedResponse as $a, CreatedApiKey as $c, AuthenticateUserWithMagicAuthCredentials as $d, SerializedGroupRoleAssignmentEntry as $f, DsyncUserUpdatedEventResponse as $i, CreateMagicAuthResponseResponse as $l, HttpClientResponseInterface as $m, SerializedLinkClaimAttemptToExternalUserOptions as $n, VaultDataCreatedEventResponse as $o, DeleteAuthorizationResourceByExternalIdOptions as $p, ApiKeyCreatedEventResponse as $r, DataIntegrationAuthorizeUrlResponse as $s, PasswordlessSessionResponse as $t, AuthenticationFactorResponse as $u, ApiKeyRequiredException as A, InvitationResentEvent as Aa, AddGroupOrganizationMembershipOptions as Ac, CreateUserResponse as Ad, SSOPKCEAuthorizationURLResult as Af, ConnectionDeactivatedEvent as Ai, SendVerificationEmailOptions as Al, UpdateEnvironmentRoleOptions as Am, CompleteOAuth2Options as An, PipesConnectedAccountState as Ao, ListRoleAssignmentsForResourceOptions as Ap, DeleteItContactOptions as Ar, DeleteDataIntegrationOptions as As, SerializedAuditLogExportOptions as At, Identity as Au, ObjectSummaryResponse as B, OrganizationDomainCreatedEvent as Ba, FlagPollResponse as Bc, SerializedAuthenticateWithRefreshTokenOptions as Bd, Role as Bf, DsyncGroupDeletedEvent as Bi, ResetPasswordOptions as Bl, SerializedListDirectoriesOptions as Bm, AgentCredentialValidation as Bn, SessionCreatedEventResponse as Bo, RoleAssignmentSourceResponse as Bp, DomainData as Br, DataIntegrationsListResponseDataAuthMethods as Bs, RadarStandaloneResponse as Bt, CreateUserApiKeyRequestOptions as Bu, BadRequestException as C, GroupMemberRemovedEventResponse as Ca, ListGroupOrganizationMembershipsOptions as Cc, AuthenticateWithSessionCookieOptions as Cd, GetProfileAndTokenOptions as Cf, AuthenticationRadarRiskDetectedEventResponse as Ci, UpdateUserOptions as Cl, UpdateOrganizationRoleOptions as Cm, CreateM2MApplication as Cn, PipesConnectedAccountConnectionFailedEvent as Co, SerializedRemoveRoleOptions as Cp, Organization as Cr, UpdateCustomProviderDefinitionResponse as Cs, AuditLogSchema as Ct, SerializedListInvitationsOptions as Cu, isAuthenticationErrorData as D, InvitationAcceptedEventResponse as Da, DeleteGroupOptions as Dc, AuthenticationMethod as Dd, ConnectionResponse as Df, AuthenticationSSOSucceededEventResponse as Di, Session as Dl, AddEnvironmentRolePermissionOptions as Dm, RedirectUriInput as Dn, PipesConnectedAccountReauthorizationNeededEvent as Do, BaseAssignRoleOptions as Dp, ItContact as Dr, GetDataIntegrationOptions as Ds, AuditLogExport as Dt, InvitationEvent as Du, AuthenticationException as E, InvitationAcceptedEvent as Ea, GetGroupOptions as Ec, UserManagementAccessToken as Ed, ConnectionDomain as Ef, AuthenticationSSOSucceededEvent as Ei, AuthMethod as El, OrganizationRole as Em, CreateOAuthApplicationResponse as En, PipesConnectedAccountDisconnectedEventResponse as Eo, AssignRoleOptionsWithResourceId as Ep, ListOrganizationFeatureFlagsOptions as Er, GetUserConnectedAccountOptions as Es, AuditLogTargetSchema as Et, Invitation as Eu, UpdateWebhookEndpointEvents as F, MagicAuthCreatedEventResponse as Fa, RemoveFlagTargetOptions as Fc, ImpersonatorResponse as Fd, DirectoryUserWithGroupsResponse as Ff, DsyncActivatedEventResponse as Fi, SendInvitationOptions as Fl, EnvironmentRoleListResponse as Fm, UserObject as Fn, RoleDeletedEvent as Fo, RoleAssignmentResource as Fp, SerializedCreateItContactOptions as Fr, DataIntegrationsListResponseDataOwnership as Fs, Challenge as Ft, EmailVerificationEventResponse as Fu, ObjectMetadata as G, OrganizationDomainUpdatedEventResponse as Ga, EvaluationResource as Gc, AuthenticateWithOrganizationSelectionOptions as Gd, ListEffectivePermissionsByExternalIdOptions as Gf, DsyncGroupUserAddedEventResponse as Gi, RefreshSessionResponse as Gl, DirectoryResponse as Gm, ValidAgentCredential as Gn, UserCreatedEventResponse as Go, ListResourcesForMembershipOptionsWithParentId as Gp, PutOptions as Gr, DataIntegrationCustomProviderResponse as Gs, RadarListAction as Gt, SerializedCreateOrganizationMembershipOptions as Gu, ObjectVersionResponse as H, OrganizationDomainDeletedEvent as Ha, FeatureFlag as Hc, AuthenticateWithPasswordOptions as Hd, RoleEventResponse as Hf, DsyncGroupUpdatedEvent as Hi, ResendInvitationOptions as Hl, DirectoryGroup as Hm, SerializedAgentAccessTokenClaims as Hn, SessionRevokedEventResponse as Ho, ListMembershipsForResourceOptions as Hp, WorkOSResponseError as Hr, DataIntegrationResponse as Hs, RadarStandaloneResponseBlocklistType as Ht, CreatePasswordResetOptions as Hu, UpdateWebhookEndpointStatus as I, OrganizationCreatedEvent as Ia, ListFeatureFlagsOptions as Ic, AuthenticateWithRefreshTokenPublicClientOptions as Id, ListOrganizationRolesResponse as If, DsyncDeletedEvent as Ii, SerializedSendInvitationOptions as Il, EnvironmentRoleResponse as Im, UserObjectResponse as In, RoleDeletedEventResponse as Io, RoleAssignmentResourceResponse as Ip, SerializedInviteItContactOptions as Ir, DataIntegrationsListResponseDataConnectedAccount as Is, ChallengeResponse as It, EmailVerificationResponse as Iu, ActorResponse as J, OrganizationDomainVerifiedEvent as Ja, AddFlagTargetOptions as Jc, AuthenticateWithRadarSmsChallengeOptions as Jd, GroupRoleAssignmentEntry as Jf, DsyncUserCreatedEvent as Ji, PasswordReset as Jl, DirectoryType as Jm, ValidateAgentCredentialOptions as Jn, UserUpdatedEvent as Jo, AuthorizationCheckOptionsWithResourceExternalId as Jp, List as Jr, DataIntegrationCredentialsResponseCredential as Js, RadarStandaloneAssessRequestAuthMethod as Jt, PKCEAuthorizationURLResult as Ju, ObjectMetadataResponse as K, OrganizationDomainVerificationFailedEvent as Ka, LegacyEvaluationContext as Kc, SerializedAuthenticateWithOrganizationSelectionOptions as Kd, ListEffectivePermissionsOptions as Kf, DsyncGroupUserRemovedEvent as Ki, RetryableRefreshSessionFailureReason as Kl, DirectoryState as Km, ValidateAgentAccessTokenOptions as Kn, UserDeletedEvent as Ko, SerializedListResourcesForMembershipOptions as Kp, PostOptions as Kr, DataIntegrationCustomProviderAuthenticateVia as Ks, RadarListType as Kt, CreateMagicAuthOptions as Ku, CreateWebhookEndpointEvents as L, OrganizationCreatedResponse as La, FlagChange as Lc, SerializedAuthenticateWithRefreshTokenPublicClientOptions as Ld, OrganizationRoleEvent as Lf, DsyncDeletedEventResponse as Li, RevokeSessionOptions as Ll, ListDirectoryUsersOptions as Lm, AutoPaginatable as Ln, RoleUpdatedEvent as Lo, RoleAssignmentResponse as Lp, CreateOrganizationOptions as Lr, DataIntegrationsListResponseDataConnectedAccountResponse as Ls, ChallengeFactorOptions as Lt, CreateUserOptions as Lu, WebhookEndpoint as M, InvitationRevokedEvent as Ma, RuntimeClientStats as Mc, User as Md, DirectoryUser as Mf, ConnectionDeletedEvent as Mi, SendRadarSmsChallengeResponse as Ml, SerializedCreateEnvironmentRoleOptions as Mm, UserConsentOptionResponse as Mn, PipesConnectionFailedResponse as Mo, ListRoleAssignmentsOptions as Mp, ItContactIntent as Mr, DataIntegrationsListResponseWire as Ms, VerifyResponseResponse as Mt, SerializedEnrollUserInMfaFactorOptions as Mu, WebhookEndpointResponse as N, InvitationRevokedEventResponse as Na, RuntimeClientLogger as Nc, UserResponse as Nd, DirectoryUserResponse as Nf, ConnectionDeletedEventResponse as Ni, SendRadarSmsChallengeResponseResponse as Nl, EnvironmentRole as Nm, UserConsentOptionChoice as Nn, RoleCreatedEvent as No, SerializedListRoleAssignmentsOptions as Np, ListItContactsOptions as Nr, DataIntegrationsListResponseData as Ns, VerifyChallengeOptions as Nt, EmailVerification as Nu, GenericServerException as O, InvitationCreatedEvent as Oa, CreateGroupOptions as Oc, AuthenticationResponse as Od, ConnectionType as Of, ConnectionActivatedEvent as Oi, SessionResponse as Ol, SetEnvironmentRolePermissionsOptions as Om, RedirectUriInputResponse as On, PipesConnectedAccountReauthorizationNeededEventResponse as Oo, SerializedAssignRoleOptions as Op, ItContactResponse as Or, GetAccessTokenOptions as Os, AuditLogExportResponse as Ot, InvitationEventResponse as Ou, WebhookEndpointStatus as P, MagicAuthCreatedEvent as Pa, RuntimeClientOptions as Pc, Impersonator as Pd, DirectoryUserWithGroups as Pf, DsyncActivatedEvent as Pi, SerializedSendRadarSmsChallengeOptions as Pl, EnvironmentRoleList as Pm, UserConsentOptionChoiceResponse as Pn, RoleCreatedEventResponse as Po, RoleAssignment as Pp, RevokeItContactOptions as Pr, DataIntegrationsListResponseDataResponse as Ps, EnrollFactorOptions as Pt, EmailVerificationEvent as Pu, UpdateObjectOptions as Q, OrganizationMembershipDeleted as Qa, ListOrganizationApiKeysOptions as Qc, SerializedAuthenticateWithRadarEmailChallengeOptions as Qd, ReplaceGroupRoleAssignmentsOptions as Qf, DsyncUserUpdatedEvent as Qi, CreateMagicAuthResponse as Ql, HttpClientInterface as Qm, SerializedClaimAttemptResponse as Qn, VaultDataCreatedEvent as Qo, DeleteAuthorizationResourceOptions as Qp, ApiKeyCreatedEvent as Qr, DataIntegrationCredentialType as Qs, PasswordlessSession as Qt, AuthenticationFactor as Qu, WorkOS as R, OrganizationDeletedEvent as Ra, FlagCustomTarget as Rc, AuthenticateUserWithRefreshTokenCredentials as Rd, OrganizationRoleEventResponse as Rf, DsyncGroupCreatedEvent as Ri, SerializedRevokeSessionOptions as Rl, ListDirectoryGroupsOptions as Rm, AgentAccessTokenClaims as Rn, RoleUpdatedEventResponse as Ro, RoleAssignmentRole as Rp, CreateOrganizationRequestOptions as Rr, DataIntegrationsListResponseDataConnectedAccountState as Rs, RadarListEntryAlreadyPresentResponse as Rt, SerializedCreateUserOptions as Ru, ConflictException as S, GroupMemberRemovedEvent as Sa, ListGroupsOptions as Sc, AuthenticateWithSessionCookieFailureReason as Sd, SerializedListConnectionsOptions as Sf, AuthenticationRadarRiskDetectedEvent as Si, SerializedUpdateUserOptions as Sl, SerializedUpdateOrganizationRoleOptions as Sm, CreateApplicationOptions as Sn, PipesConnectedAccountConnectedEventResponse as So, RemoveRoleOptionsWithResourceId as Sp, UpdateOrganizationOptions as Sr, UpdateCustomProviderDefinition as Ss, AuditLogActorSchema as St, ListInvitationsOptions as Su, AuthenticationErrorData as T, GroupUpdatedEventResponse as Ta, GroupResponse as Tc, SessionCookieData as Td, Connection as Tf, AuthenticationSSOFailedEventResponse as Ti, UpdateOrganizationMembershipOptions as Tl, SerializedCreateOrganizationRoleOptions as Tm, CreateOAuthApplication as Tn, PipesConnectedAccountDisconnectedEvent as To, AssignRoleOptionsWithResourceExternalId as Tp, ListOrganizationsOptions as Tr, ListUserDataProvidersOptions as Ts, AuditLogSchemaResponse as Tt, ListAuthFactorsOptions as Tu, VaultObject as U, OrganizationDomainDeletedEventResponse as Ua, FeatureFlagResponse as Uc, SerializedAuthenticateWithPasswordOptions as Ud, RoleList as Uf, DsyncGroupUpdatedEventResponse as Ui, SerializedResendInvitationOptions as Ul, DirectoryGroupResponse as Um, SerializedAgentCredentialValidation as Un, UnknownEvent as Uo, ListResourcesForMembershipOptions as Up, WorkOSOptions as Ur, DataIntegrationState as Us, RadarStandaloneResponseControl as Ut, SerializedCreatePasswordResetOptions as Uu, ObjectVersion as V, OrganizationDomainCreatedEventResponse as Va, FlagTarget as Vc, AuthenticateUserWithPasswordCredentials as Vd, RoleEvent as Vf, DsyncGroupDeletedEventResponse as Vi, SerializedResetPasswordOptions as Vl, PaginationOptions as Vm, InvalidAgentCredential as Vn, SessionRevokedEvent as Vo, ListMembershipsForResourceByExternalIdOptions as Vp, DomainDataState as Vr, DataIntegration as Vs, RadarStandaloneResponseWire as Vt, SerializedCreateUserApiKeyOptions as Vu, VaultObjectResponse as W, OrganizationDomainUpdatedEvent as Wa, EvaluationContext as Wc, AuthenticateUserWithOrganizationSelectionCredentials as Wd, RoleResponse as Wf, DsyncGroupUserAddedEvent as Wi, RefreshSessionFailureReason as Wl, Directory as Wm, SerializedValidateAgentCredentialOptions as Wn, UserCreatedEvent as Wo, ListResourcesForMembershipOptionsWithParentExternalId as Wp, UnprocessableEntityError as Wr, DataIntegrationCustomProvider as Ws, RadarStandaloneResponseVerdict as Wt, CreateOrganizationMembershipOptions as Wu, CreateDataKeyResponseWire as X, OrganizationMembershipCreated as Xa, ValidateApiKeyOptions as Xc, AuthenticateUserWithRadarEmailChallengeCredentials as Xd, GroupRoleAssignmentEntryWithResourceExternalId as Xf, DsyncUserDeletedEvent as Xi, PasswordResetEventResponse as Xl, EventDirectoryResponse as Xm, ClaimAttemptResponse as Xn, VaultByokKeyVerificationCompletedEvent as Xo, AuthorizationCheckResult as Xp, GetOptions as Xr, DataIntegrationCredential as Xs, CreatePasswordlessSessionOptions as Xt, AuthenticationRadarRiskDetectedEventData as Xu, CreateDataKeyResponse as Y, OrganizationDomainVerifiedEventResponse as Ya, SerializedValidateApiKeyResponse as Yc, SerializedAuthenticateWithRadarSmsChallengeOptions as Yd, GroupRoleAssignmentEntryForOrganization as Yf, DsyncUserCreatedEventResponse as Yi, PasswordResetEvent as Yl, EventDirectory as Ym, ClaimAttemptOrganization as Yn, UserUpdatedEventResponse as Yo, AuthorizationCheckOptionsWithResourceId as Yp, ListResponse as Yr, DataIntegrationCredentialsResponseCredentialResponse as Ys, SendSessionResponse as Yt, UserManagementAuthorizationURLOptions as Yu, UpdateObjectEntity as Z, OrganizationMembershipCreatedResponse as Za, ValidateApiKeyResponse as Zc, AuthenticateWithRadarEmailChallengeOptions as Zd, GroupRoleAssignmentEntryWithResourceId as Zf, DsyncUserDeletedEventResponse as Zi, PasswordResetResponse as Zl, HttpClient as Zm, LinkClaimAttemptToExternalUserOptions as Zn, VaultByokKeyVerificationCompletedEventResponse as Zo, SerializedAuthorizationCheckOptions as Zp, GenerateLinkIntent as Zr, DataIntegrationCredentialResponse as Zs, SerializedCreatePasswordlessSessionOptions as Zt, AuthenticationRadarRiskDetectedEventResponseData as Zu, SignatureVerificationException as _, GroupDeletedEventResponse as _a, ConnectedAccountAuthMethod as _c, AuthenticationEventSsoResponse as _d, Profile as _f, AuthenticationPasskeySucceededEventResponse as _i, UserApiKeyWithValue as _l, Permission as _m, CreateApplicationClientSecretOptions as _n, PermissionDeletedEventResponse as _o, GroupRoleAssignmentResponse as _p, ActionPayload as _r, DataKeyPair as _s, AuditLogActor as _t, BaseOrganizationMembership as _u, PublicWorkOS as a, EventResponse as aa, CreateUserConnectedAccountOptions as ac, FactorType as ad, AuthenticateWithCodeAndVerifierOptions as af, AuthenticationMagicAuthFailedEventResponse as ai, SerializedApiKey as al, AuthorizationResourceResponse as am, ApplicationCredentialsListItemResponse as an, OrganizationRoleDeletedEventResponse as ao, RemoveGroupRoleAssignmentsOptionsWithResourceId as ap, AgentRegistrationStatus as ar, VaultDataUpdatedEventResponse as as, DecryptDataKeyResponse as at, Locale as au, NotFoundException as b, GroupMemberEventData as ba, UpdateGroupOptions as bc, SerializedAuthenticateWithTotpOptions as bd, OauthTokensResponse as bf, AuthenticationPasswordSucceededEvent as bi, SerializedUpdateUserPasswordOptions as bl, AddOrganizationRolePermissionOptions as bm, UpdateApplicationOptions as bn, PipesConnectedAccount as bo, RemoveRoleOptions as bp, UserRegistrationActionPayload as br, UpdateDataIntegrationOptions as bs, CreateAuditLogEventRequestOptions as bt, OrganizationMembershipResponse as bu, PortalLinkResponseWire as c, FlagDeletedEvent as ca, CustomProviderDefinitionResponse as cc, Totp as cd, AuthenticateWithCodeOptions as cf, AuthenticationMfaSucceededEvent as ci, OrganizationDomain as cl, CreateOptionsWithParentResourceId as cm, ConnectApplicationM2MResponse as cn, OrganizationUpdatedEvent as co, BaseCreateGroupRoleAssignmentOptions as cp, SerializedAgentRegistrationClaim as cr, VaultDekReadEvent as cs, WidgetSessionTokenResponseWire as ct, ListUserApiKeysOptions as cu, IntentOptions as d, FlagRuleUpdatedEventResponse as da, DataIntegrationCredentialsDtoResponse as dc, TotpWithSecretsResponse as dd, AuthenticateWithSessionOptions as df, AuthenticationOAuthFailedEventResponse as di, OrganizationDomainVerificationStrategy as dl, UpdateAuthorizationResourceOptions as dm, ConnectApplicationResponse as dn, PasswordResetCreatedEventResponse as do, CreateGroupRoleAssignmentOptionsWithResourceExternalId as dp, PKCEPair as dr, VaultKekCreatedEventResponse as ds, FeatureFlagsRuntimeClient as dt, ListSessionsOptions as du, EmailVerificationCreatedEvent as ea, DataIntegrationAuthorizeUrlResponseWire as ec, AuthenticationFactorType as ed, AuthenticateWithMagicAuthOptions as ef, RequestHeaders as eh, ApiKeyRevokedEvent as ei, SerializedCreatedApiKey as el, UpdateAuthorizationResourceByExternalIdOptions as em, ListEventOptions as en, OrganizationMembershipUpdated as eo, SerializedReplaceGroupRoleAssignmentsOptions as ep, AgentIdentity as er, VaultDataDeletedEvent as es, ReadObjectOptions as et, MagicAuth as eu, IntentOptionsResponse as f, FlagUpdatedEvent as fa, DataIntegrationCredentialsType as fc, Sms as fd, SerializedAuthenticatePublicClientBase as ff, AuthenticationOAuthSucceededEvent as fi, CreateOrganizationDomainOptions as fl, ListPermissionsOptions as fm, ConnectApplicationRedirectUri as fn, PasswordResetSucceededEvent as fo, CreateGroupRoleAssignmentOptionsWithResourceId as fp, Actions as fr, VaultMetadataReadEvent as fs, CookieSession as ft, SerializedListSessionsOptions as fu, UnauthorizedException as g, GroupDeletedEvent as ga, ConnectedAccountState as gc, AuthenticationEventSso as gd, ProfileAndTokenResponse as gf, AuthenticationPasskeySucceededEvent as gi, SerializedUserApiKeyWithValue as gl, SerializedCreatePermissionOptions as gm, DeleteClientSecretOptions as gn, PermissionDeletedEvent as go, GroupRoleAssignment as gp, ActionContext as gr, DataKey as gs, SerializedCreateAuditLogSchemaOptions as gt, AuthorizationOrganizationMembershipResponse as gu, UnprocessableEntityException as h, GroupCreatedEventResponse as ha, ConnectedAccountResponse as hc, AuthenticationEventResponse as hd, ProfileAndToken as hf, AuthenticationPasskeyFailedEventResponse as hi, VerifyEmailOptions as hl, CreatePermissionOptions as hm, ExternalAuthCompleteResponseWire as hn, PermissionCreatedEventResponse as ho, ListGroupRoleAssignmentsOptions as hp, UserRegistrationActionResponseData as hr, VaultNamesListedEventResponse as hs, CreateAuditLogSchemaResponse as ht, AuthorizationOrganizationMembership as hu, PublicUserManagement as i, EventName as ia, DataIntegrationAccessTokenResponseAccessTokenResponse as ic, FactorResponse as id, SerializedAuthenticateWithEmailVerificationOptions as if, CryptoProvider as ih, AuthenticationMagicAuthFailedEvent as ii, ApiKey as il, AuthorizationResource as im, ApplicationCredentialsListItem as in, OrganizationRoleDeletedEvent as io, RemoveGroupRoleAssignmentsOptionsWithResourceExternalId as ip, AgentRegistrationKind as ir, VaultDataUpdatedEvent as is, DecryptDataKeyOptions as it, LogoutURLOptions as iu, Webhooks as j, InvitationResentEventResponse as ja, SerializedAddGroupOrganizationMembershipOptions as jc, CreateUserResponseResponse as jd, DefaultCustomAttributes as jf, ConnectionDeactivatedEventResponse as ji, SendRadarSmsChallengeOptions as jl, CreateEnvironmentRoleOptions as jm, UserConsentOption as jn, PipesConnectionFailed as jo, SerializedListRoleAssignmentsForResourceOptions as jp, InviteItContactOptions as jr, DataIntegrationsListResponse as js, VerifyResponse as jt, EnrollAuthFactorOptions as ju, WorkOSErrorData as k, InvitationCreatedEventResponse as ka, SerializedCreateGroupOptions as kc, AuthenticationResponseResponse as kd, SSOAuthorizationURLOptions as kf, ConnectionActivatedEventResponse as ki, SessionStatus as kl, SerializedUpdateEnvironmentRoleOptions as km, ListApplicationsOptions as kn, PipesConnectedAccountResponse as ko, ListRoleAssignmentsForResourceByExternalIdOptions as kp, CreateItContactOptions as kr, DeleteUserConnectedAccountOptions as ks, AuditLogExportOptions as kt, InvitationResponse as ku, GenerateLink as l, FlagDeletedEventResponse as la, CustomProviderDefinitionAuthenticateVia as lc, TotpResponse as ld, SerializedAuthenticateWithCodeOptions as lf, AuthenticationMfaSucceededEventResponse as li, OrganizationDomainResponse as ll, SerializedCreateAuthorizationResourceOptions as lm, ConnectApplicationOAuth as ln, OrganizationUpdatedResponse as lo, CreateGroupRoleAssignmentOptions as lp, SerializedAgentRegistrationClaimCompletion as lr, VaultDekReadEventResponse as ls, CreateTokenOptions as lt, SerializedListUserApiKeysOptions as lu, SSOIntentOptionsResponse as m, GroupCreatedEvent as ma, ConnectedAccount as mc, AuthenticationEvent as md, WithResolvedClientId as mf, AuthenticationPasskeyFailedEvent as mi, SerializedVerifyEmailOptions as ml, UpdatePermissionOptions as mm, ExternalAuthCompleteResponse as mn, PermissionCreatedEvent as mo, GetGroupRoleAssignmentOptions as mp, ResponsePayload as mr, VaultNamesListedEvent as ms, CreateAuditLogSchemaRequestOptions as mt, SerializedListOrganizationMembershipsOptions as mu, PublicClientOptions as n, Event as na, DataIntegrationAccessTokenResponseWire as nc, AuthenticationFactorWithSecretsResponse as nd, AuthenticateUserWithEmailVerificationCredentials as nf, ResponseHeaderValue as nh, AuthenticationEmailVerificationSucceededEvent as ni, CreateOrganizationApiKeyRequestOptions as nl, ListAuthorizationResourcesOptions as nm, NewConnectApplicationSecret as nn, OrganizationRoleCreatedEvent as no, RemoveGroupRoleAssignmentsOptions as np, AgentRegistrationClaim as nr, VaultDataReadEvent as ns, CreateObjectEntity as nt, MagicAuthEventResponse as nu, createWorkOS as o, FlagCreatedEvent as oa, CreateDataIntegrationOptions as oc, FactorWithSecrets as od, SerializedAuthenticateWithCodeAndVerifierOptions as of, AuthenticationMagicAuthSucceededEvent as oi, OrganizationDomainVerificationFailed as ol, CreateAuthorizationResourceOptions as om, ConnectApplication as on, OrganizationRoleUpdatedEvent as oo, SerializedRemoveGroupRoleAssignmentsOptions as op, SerializedAgentIdentity as or, VaultDekDecryptedEvent as os, CreateDataKeyOptions as ot, ListUsersOptions as ou, SSOIntentOptions as p, FlagUpdatedEventResponse as pa, CreateDataIntegrationCredentialOptions as pc, SmsResponse as pd, SerializedAuthenticateWithOptionsBase as pf, AuthenticationOAuthSucceededEventResponse as pi, SerializedCreateOrganizationDomainOptions as pl, SerializedUpdatePermissionOptions as pm, ConnectApplicationRedirectUriResponse as pn, PasswordResetSucceededEventResponse as po, SerializedCreateGroupRoleAssignmentOptions as pp, AuthenticationActionResponseData as pr, VaultMetadataReadEventResponse as ps, CreateAuditLogSchemaOptions as pt, ListOrganizationMembershipsOptions as pu, Actor as q, OrganizationDomainVerificationFailedEventResponse as qa, TypedEvaluationContext as qc, AuthenticateUserWithRadarSmsChallengeCredentials as qd, BaseGroupRoleAssignmentEntry as qf, DsyncGroupUserRemovedEventResponse as qi, TerminalRefreshSessionFailureReason as ql, DirectoryStateResponse as qm, ValidateAgentApiKeyOptions as qn, UserDeletedEventResponse as qo, AuthorizationCheckOptions as qp, PatchOptions as qr, DataIntegrationCredentialsResponseError as qs, RadarStandaloneAssessRequestAction as qt, SerializedCreateMagicAuthOptions as qu, PublicSSO as r, EventBase as ra, DataIntegrationAccessTokenResponseAccessToken as rc, Factor as rd, AuthenticateWithEmailVerificationOptions as rf, ResponseHeaders as rh, AuthenticationEmailVerificationSucceededEventResponse as ri, SerializedCreateOrganizationApiKeyOptions as rl, SerializedListAuthorizationResourcesOptions as rm, NewConnectApplicationSecretResponse as rn, OrganizationRoleCreatedEventResponse as ro, RemoveGroupRoleAssignmentsOptionsForOrganization as rp, AgentRegistrationClaimCompletion as rr, VaultDataReadEventResponse as rs, CreateObjectOptions as rt, MagicAuthResponse as ru, PortalLinkResponse as s, FlagCreatedEventResponse as sa, CustomProviderDefinition as sc, FactorWithSecretsResponse as sd, AuthenticateUserWithCodeCredentials as sf, AuthenticationMagicAuthSucceededEventResponse as si, OrganizationDomainVerificationFailedResponse as sl, CreateOptionsWithParentExternalId as sm, ConnectApplicationM2M as sn, OrganizationRoleUpdatedEventResponse as so, RemoveGroupRoleAssignmentOptions as sp, SerializedAgentRegistration as sr, VaultDekDecryptedEventResponse as ss, WidgetSessionTokenResponse as st, SerializedListUsersOptions as su, ConfidentialClientOptions as t, EmailVerificationCreatedEventResponse as ta, DataIntegrationAccessTokenResponse as tc, AuthenticationFactorWithSecrets as td, SerializedAuthenticateWithMagicAuthOptions as tf, RequestOptions as th, ApiKeyRevokedEventResponse as ti, CreateOrganizationApiKeyOptions as tl, GetAuthorizationResourceByExternalIdOptions as tm, SerializedListEventOptions as tn, OrganizationMembershipUpdatedResponse as to, BaseRemoveGroupRoleAssignmentsOptions as tp, AgentRegistration as tr, VaultDataDeletedEventResponse as ts, ReadObjectResponse as tt, MagicAuthEvent as tu, GenerateLinkResponse as u, FlagRuleUpdatedEvent as ua, DataIntegrationCredentialsDto as uc, TotpWithSecrets as ud, AuthenticateWithOptionsBase as uf, AuthenticationOAuthFailedEvent as ui, OrganizationDomainState as ul, SerializedUpdateAuthorizationResourceOptions as um, ConnectApplicationOAuthResponse as un, PasswordResetCreatedEvent as uo, CreateGroupRoleAssignmentOptionsForOrganization as up, PKCE as ur, VaultKekCreatedEvent as us, WidgetSessionTokenScopes as ut, ListUserFeatureFlagsOptions as uu, RateLimitExceededException as v, GroupMemberAddedEvent as va, AuthorizeDataIntegrationOptions as vc, AuthenticateUserWithTotpCredentials as vd, ProfileResponse as vf, AuthenticationPasswordFailedEvent as vi, SerializedUserApiKey as vl, PermissionResponse as vm, ListApplicationClientSecretsOptions as vn, PermissionUpdatedEvent as vo, RemoveRoleAssignmentOptions as vp, UserData as vr, KeyContext as vs, AuditLogTarget as vt, BaseOrganizationMembershipResponse as vu, AuthenticationErrorCode as w, GroupUpdatedEvent as wa, Group as wc, AuthenticateWithSessionCookieSuccessResponse as wd, GetProfileOptions as wf, AuthenticationSSOFailedEvent as wi, SerializedUpdateOrganizationMembershipOptions as wl, CreateOrganizationRoleOptions as wm, CreateM2MApplicationResponse as wn, PipesConnectedAccountConnectionFailedEventResponse as wo, AssignRoleOptions as wp, OrganizationResponse as wr, UpdateCustomProviderDefinitionAuthenticateVia as ws, AuditLogSchemaMetadata as wt, ListGroupsForOrganizationMembershipOptions as wu, NoApiKeyProvidedException as x, GroupMemberEventResponseData as xa, RemoveGroupOrganizationMembershipOptions as xc, AuthenticateWithSessionCookieFailedResponse as xd, ListConnectionsOptions as xf, AuthenticationPasswordSucceededEventResponse as xi, UpdateUserPasswordOptions as xl, SetOrganizationRolePermissionsOptions as xm, GetApplicationOptions as xn, PipesConnectedAccountConnectedEvent as xo, RemoveRoleOptionsWithResourceExternalId as xp, SerializedUpdateOrganizationOptions as xr, UpdateDataIntegrationApiKeyOptions as xs, SerializedCreateAuditLogEventOptions as xt, OrganizationMembershipStatus as xu, OauthException as y, GroupMemberAddedEventResponse as ya, SerializedUpdateGroupOptions as yc, AuthenticateWithTotpOptions as yd, OauthTokens as yf, AuthenticationPasswordFailedEventResponse as yi, UserApiKey as yl, RemoveOrganizationRolePermissionOptions as ym, DeleteApplicationOptions as yn, PermissionUpdatedEventResponse as yo, BaseRemoveRoleOptions as yp, UserDataPayload as yr, UpdateUserConnectedAccountOptions as ys, CreateAuditLogEventOptions as yt, OrganizationMembership as yu, ObjectSummary as z, OrganizationDeletedResponse as za, FlagPollEntry as zc, AuthenticateWithRefreshTokenOptions as zd, OrganizationRoleResponse as zf, DsyncGroupCreatedEventResponse as zi, serializeRevokeSessionOptions as zl, ListDirectoriesOptions as zm, AgentCredentialType as zn, SessionCreatedEvent as zo, RoleAssignmentSource as zp, SerializedCreateOrganizationOptions as zr, DataIntegrationsListResponseDataConnectedAccountAuthMethod as zs, RadarListEntryAlreadyPresentResponseWire as zt, CreateUserApiKeyOptions as zu };
+//# sourceMappingURL=factory-CCkRzS83.d.cts.map