@workos/openapi-spec 0.1.0 → 0.3.0

package/types.d.ts

@@ -541,6 +541,26 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/authorization/organizations/{organization_id}/resources/{resource_type_slug}/{external_id}/role_assignments": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List role assignments for a resource by external ID
+         * @description List all role assignments granted on a resource, identified by its external ID. Each assignment includes the organization membership it was granted to.
+         */
+        get: operations["AuthorizationRoleAssignmentsController_listRoleAssignmentsForResourceByExternalId"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/authorization/permissions": {
         parameters: {
             query?: never;
@@ -665,6 +685,26 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/authorization/resources/{resource_id}/role_assignments": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List role assignments for a resource
+         * @description List all role assignments granted on a specific resource instance. Each assignment includes the organization membership it was granted to.
+         */
+        get: operations["AuthorizationRoleAssignmentsController_listRoleAssignmentsForResource"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/authorization/roles": {
         parameters: {
             query?: never;
@@ -1704,7 +1744,7 @@ export interface paths {
          * Authenticate
          * @description Authenticate a user with a specified [authentication method](/reference/authkit/authentication).
          */
-        post: operations["UserlandSessionsController_authenticate"];
+        post: operations["UserlandSessionsController_authenticate[0]"];
         delete?: never;
         options?: never;
         head?: never;
@@ -2136,7 +2176,7 @@ export interface paths {
          * Reset the password
          * @description Sets a new password using the `token` query parameter from the link that the user received. Successfully resetting the password will verify a user's email, if it hasn't been verified yet.
          */
-        post: operations["UserlandUsersController_resetPassword"];
+        post: operations["UserlandUsersController_resetPassword[0]"];
         delete?: never;
         options?: never;
         head?: never;
@@ -2234,13 +2274,13 @@ export interface paths {
          * List users
          * @description Get a list of all of your existing users matching the criteria specified.
          */
-        get: operations["UserlandUsersController_list"];
+        get: operations["UserlandUsersController_list[0]"];
         put?: never;
         /**
          * Create a user
          * @description Create a new user in the current environment.
          */
-        post: operations["UserlandUsersController_create"];
+        post: operations["UserlandUsersController_create[0]"];
         delete?: never;
         options?: never;
         head?: never;
@@ -2278,18 +2318,18 @@ export interface paths {
          * Get a user
          * @description Get the details of an existing user.
          */
-        get: operations["UserlandUsersController_get"];
+        get: operations["UserlandUsersController_get[0]"];
         /**
          * Update a user
          * @description Updates properties of a user. The omitted properties will be left unchanged.
          */
-        put: operations["UserlandUsersController_update"];
+        put: operations["UserlandUsersController_update[0]"];
         post?: never;
         /**
          * Delete a user
          * @description Permanently deletes a user in the current environment. It cannot be undone.
          */
-        delete: operations["UserlandUsersController_delete"];
+        delete: operations["UserlandUsersController_delete[0]"];
         options?: never;
         head?: never;
         patch?: never;
@@ -2348,7 +2388,7 @@ export interface paths {
          * Verify email
          * @description Verifies an email address using the one-time code received by the user.
          */
-        post: operations["UserlandUsersController_emailVerification"];
+        post: operations["UserlandUsersController_emailVerification[0]"];
         delete?: never;
         options?: never;
         head?: never;
@@ -2368,7 +2408,7 @@ export interface paths {
          * Send verification email
          * @description Sends an email that contains a one-time code used to verify a user’s email address.
          */
-        post: operations["UserlandUsersController_sendVerificationEmail"];
+        post: operations["UserlandUsersController_sendVerificationEmail[0]"];
         delete?: never;
         options?: never;
         head?: never;
@@ -2554,13 +2594,13 @@ export interface paths {
          * List authentication factors
          * @description Lists the [authentication factors](/reference/authkit/mfa/authentication-factor) for a user.
          */
-        get: operations["UserlandUserAuthenticationFactorsController_list"];
+        get: operations["UserlandUserAuthenticationFactorsController_list[0]"];
         put?: never;
         /**
          * Enroll an authentication factor
          * @description Enrolls a user in a new [authentication factor](/reference/authkit/mfa/authentication-factor).
          */
-        post: operations["UserlandUserAuthenticationFactorsController_create"];
+        post: operations["UserlandUserAuthenticationFactorsController_create[0]"];
         delete?: never;
         options?: never;
         head?: never;
@@ -2727,6 +2767,12 @@ export interface components {
              */
             value: string;
         };
+        /**
+         * @default desc
+         * @example desc
+         * @enum {string}
+         */
+        PaginationOrder: "normal" | "desc" | "asc";
         RedirectUriDto: {
             /**
              * @description The redirect URI.
@@ -3601,6 +3647,7 @@ export interface components {
         };
         CreateUserlandMagicCodeAndReturnDto: {
             /**
+             * Format: email
              * @description The email address to send the magic code to.
              * @example marcelina.davis@example.com
              */
@@ -3613,6 +3660,7 @@ export interface components {
         };
         CreateUserlandUserInviteOptionsDto: {
             /**
+             * Format: email
              * @description The email address of the recipient.
              * @example marcelina.davis@example.com
              */
@@ -3715,6 +3763,7 @@ export interface components {
         };
         CreateUserlandUserDto: {
             /**
+             * Format: email
              * @description The email address of the user.
              * @example marcelina.davis@example.com
              */
@@ -3769,6 +3818,7 @@ export interface components {
         });
         UpdateUserlandUserDto: {
             /**
+             * Format: email
              * @description The email address of the user.
              * @example marcelina.davis@example.com
              */
@@ -3835,6 +3885,7 @@ export interface components {
         };
         CreatePasswordResetTokenDto: {
             /**
+             * Format: email
              * @description The email address of the user requesting a password reset.
              * @example marcelina.davis@example.com
              */
@@ -4788,7 +4839,7 @@ export interface components {
              */
             slug: string;
         };
-        RoleAssignment: {
+        UserRoleAssignment: {
             /**
              * @description Distinguishes the role assignment object.
              * @constant
@@ -4799,9 +4850,14 @@ export interface components {
              * @example role_assignment_01HXYZ123456789ABCDEFGH
              */
             id: string;
+            /**
+             * @description The ID of the organization membership the role is assigned to.
+             * @example om_01HXYZ123456789ABCDEFGHIJ
+             */
+            organization_membership_id: string;
             /** @description The role included in the assignment. */
             role: components["schemas"]["SlimRole"];
-            /** @description The resource to which the role is assigned. */
+            /** @description The resource the role is assigned on. */
             resource: {
                 /**
                  * @description The unique ID of the Resource.
@@ -4832,14 +4888,14 @@ export interface components {
              */
             updated_at: string;
         };
-        RoleAssignmentList: {
+        UserRoleAssignmentList: {
             /**
              * @description Indicates this is a list response.
              * @constant
              */
             object: "list";
             /** @description The list of records for the current page. */
-            data: components["schemas"]["RoleAssignment"][];
+            data: components["schemas"]["UserRoleAssignment"][];
             /** @description Pagination cursors for navigating between pages of results. */
             list_metadata: {
                 /**
@@ -5847,6 +5903,12 @@ export interface components {
              */
             updated_at: string;
         };
+        /**
+         * @description The external key provider used for BYOK.
+         * @example AWS_KMS
+         * @enum {string}
+         */
+        VaultByokKeyProvider: "AWS_KMS" | "GCP_KMS" | "AZURE_KEY_VAULT";
         WaitlistUser: {
             /**
              * @description Distinguishes the Waitlist User object.
@@ -11488,12 +11550,7 @@ export interface components {
                  * @example org_01EHT88Z8J8795GZNQ4ZP1J81T
                  */
                 organization_id: string;
-                /**
-                 * @description The external key provider used for BYOK.
-                 * @example AWS_KMS
-                 * @enum {string}
-                 */
-                key_provider: "AWS_KMS" | "GCP_KMS" | "AZURE_KEY_VAULT";
+                key_provider: components["schemas"]["VaultByokKeyProvider"];
             };
             /**
              * Format: date-time
@@ -11522,12 +11579,7 @@ export interface components {
                  * @example org_01EHT88Z8J8795GZNQ4ZP1J81T
                  */
                 organization_id: string;
-                /**
-                 * @description The external key provider used for BYOK.
-                 * @example AWS_KMS
-                 * @enum {string}
-                 */
-                key_provider: "AWS_KMS" | "GCP_KMS" | "AZURE_KEY_VAULT";
+                key_provider: components["schemas"]["VaultByokKeyProvider"];
                 /**
                  * @description Whether the BYOK key verification completed successfully.
                  * @example true
@@ -13913,7 +13965,7 @@ export interface operations {
                 /** @description Upper limit on the number of objects to return, between `1` and `100`. */
                 limit?: number;
                 /** @description Order the results by the creation time. */
-                order?: "normal" | "desc" | "asc";
+                order?: components["schemas"]["PaginationOrder"];
             };
             header?: never;
             path?: never;
@@ -13994,7 +14046,7 @@ export interface operations {
                 /** @description Upper limit on the number of objects to return, between `1` and `100`. */
                 limit?: number;
                 /** @description Order the results by the creation time. */
-                order?: "normal" | "desc" | "asc";
+                order?: components["schemas"]["PaginationOrder"];
             };
             header?: never;
             path: {
@@ -14897,7 +14949,7 @@ export interface operations {
                 /** @description Upper limit on the number of objects to return, between `1` and `100`. */
                 limit?: number;
                 /** @description Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending. */
-                order?: "normal" | "desc" | "asc";
+                order?: components["schemas"]["PaginationOrder"];
                 /** @description The permission slug to filter by. Only child resources where the organization membership has this permission are returned. */
                 permission_slug: string;
                 /** @description The WorkOS ID of the parent resource. Provide this or both `parent_resource_external_id` and `parent_resource_type_slug`, but not both. Mutually exclusive with `parent_resource_type_slug` and `parent_resource_external_id`. */
@@ -15003,7 +15055,7 @@ export interface operations {
                 /** @description Upper limit on the number of objects to return, between `1` and `100`. */
                 limit?: number;
                 /** @description Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending. */
-                order?: "normal" | "desc" | "asc";
+                order?: components["schemas"]["PaginationOrder"];
             };
             header?: never;
             path: {
@@ -15082,7 +15134,7 @@ export interface operations {
                 /** @description Upper limit on the number of objects to return, between `1` and `100`. */
                 limit?: number;
                 /** @description Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending. */
-                order?: "normal" | "desc" | "asc";
+                order?: components["schemas"]["PaginationOrder"];
             };
             header?: never;
             path: {
@@ -15163,7 +15215,13 @@ export interface operations {
                 /** @description Upper limit on the number of objects to return, between `1` and `100`. */
                 limit?: number;
                 /** @description Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending. */
-                order?: "normal" | "desc" | "asc";
+                order?: components["schemas"]["PaginationOrder"];
+                /** @description Filter assignments by the ID of the resource. */
+                resource_id?: string;
+                /** @description Filter assignments by the external ID of the resource. */
+                resource_external_id?: string;
+                /** @description Filter assignments by the slug of the resource type. */
+                resource_type_slug?: string;
             };
             header?: never;
             path: {
@@ -15180,7 +15238,7 @@ export interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["RoleAssignmentList"];
+                    "application/json": components["schemas"]["UserRoleAssignmentList"];
                 };
             };
             /** @description Forbidden */
@@ -15241,6 +15299,7 @@ export interface operations {
                      * @example {
                      *       "object": "role_assignment",
                      *       "id": "role_assignment_01HXYZ123456789ABCDEFGH",
+                     *       "organization_membership_id": "om_01HXYZ123456789ABCDEFGHIJ",
                      *       "role": {
                      *         "slug": "editor"
                      *       },
@@ -15253,7 +15312,7 @@ export interface operations {
                      *       "updated_at": "2026-01-15T12:00:00.000Z"
                      *     }
                      */
-                    "application/json": components["schemas"]["RoleAssignment"];
+                    "application/json": components["schemas"]["UserRoleAssignment"];
                 };
             };
             /** @description Forbidden */
@@ -16713,7 +16772,7 @@ export interface operations {
                 /** @description Upper limit on the number of objects to return, between `1` and `100`. */
                 limit?: number;
                 /** @description Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending. */
-                order?: "normal" | "desc" | "asc";
+                order?: components["schemas"]["PaginationOrder"];
                 /** @description The permission slug to filter by. Only users with this permission on the resource are returned. */
                 permission_slug: string;
                 /** @description Filter by assignment type. Use "direct" for direct assignments only, or "indirect" to include inherited assignments. */
@@ -16809,6 +16868,74 @@ export interface operations {
             };
         };
     };
+    AuthorizationRoleAssignmentsController_listRoleAssignmentsForResourceByExternalId: {
+        parameters: {
+            query?: {
+                /** @description An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`. */
+                before?: string;
+                /** @description An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`. */
+                after?: string;
+                /** @description Upper limit on the number of objects to return, between `1` and `100`. */
+                limit?: number;
+                /** @description Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending. */
+                order?: components["schemas"]["PaginationOrder"];
+                /** @description Filter assignments by the slug of the role. */
+                role_slug?: string;
+            };
+            header?: never;
+            path: {
+                /** @description The ID of the organization that owns the resource. */
+                organization_id: string;
+                /** @description The slug of the resource type. */
+                resource_type_slug: string;
+                /** @description An identifier you provide to reference the resource in your system. */
+                external_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["UserRoleAssignmentList"];
+                };
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
+                         */
+                        message: string;
+                    };
+                };
+            };
+            /** @description Not Found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
+                         */
+                        message: string;
+                    };
+                };
+            };
+        };
+    };
     AuthorizationPermissionsController_list: {
         parameters: {
             query?: {
@@ -16819,7 +16946,7 @@ export interface operations {
                 /** @description Upper limit on the number of objects to return, between `1` and `100`. */
                 limit?: number;
                 /** @description Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending. */
-                order?: "normal" | "desc" | "asc";
+                order?: components["schemas"]["PaginationOrder"];
             };
             header?: never;
             path?: never;
@@ -17167,7 +17294,7 @@ export interface operations {
                 /** @description Upper limit on the number of objects to return, between `1` and `100`. */
                 limit?: number;
                 /** @description Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending. */
-                order?: "normal" | "desc" | "asc";
+                order?: components["schemas"]["PaginationOrder"];
                 /** @description Filter resources by organization ID. */
                 organization_id?: string;
                 /** @description Filter resources by resource type slug. */
@@ -17180,8 +17307,6 @@ export interface operations {
                 parent_resource_type_slug?: string;
                 /** @description Filter resources by parent external ID. Required with `parent_resource_type_slug`. Mutually exclusive with `parent_resource_id`. */
                 parent_external_id?: string;
-                /** @description Search resources by name. */
-                search?: string;
             };
             header?: never;
             path?: never;
@@ -17768,7 +17893,7 @@ export interface operations {
                 /** @description Upper limit on the number of objects to return, between `1` and `100`. */
                 limit?: number;
                 /** @description Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending. */
-                order?: "normal" | "desc" | "asc";
+                order?: components["schemas"]["PaginationOrder"];
                 /** @description The permission slug to filter by. Only users with this permission on the resource are returned. */
                 permission_slug: string;
                 /** @description Filter by assignment type. Use `direct` for direct assignments only, or `indirect` to include inherited assignments. */
@@ -17860,6 +17985,70 @@ export interface operations {
             };
         };
     };
+    AuthorizationRoleAssignmentsController_listRoleAssignmentsForResource: {
+        parameters: {
+            query?: {
+                /** @description An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`. */
+                before?: string;
+                /** @description An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`. */
+                after?: string;
+                /** @description Upper limit on the number of objects to return, between `1` and `100`. */
+                limit?: number;
+                /** @description Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending. */
+                order?: components["schemas"]["PaginationOrder"];
+                /** @description Filter assignments by the slug of the role. */
+                role_slug?: string;
+            };
+            header?: never;
+            path: {
+                /** @description The ID of the authorization resource. */
+                resource_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["UserRoleAssignmentList"];
+                };
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
+                         */
+                        message: string;
+                    };
+                };
+            };
+            /** @description Not Found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
+                         */
+                        message: string;
+                    };
+                };
+            };
+        };
+    };
     AuthorizationRolesController_list: {
         parameters: {
             query?: never;
@@ -18580,7 +18769,7 @@ export interface operations {
                 /** @description Upper limit on the number of objects to return, between `1` and `100`. */
                 limit?: number;
                 /** @description Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending. */
-                order?: "normal" | "desc" | "asc";
+                order?: components["schemas"]["PaginationOrder"];
                 /** @description Filter Connect Applications by organization ID. */
                 organization_id?: string;
             };
@@ -18975,7 +19164,7 @@ export interface operations {
                 /** @description Upper limit on the number of objects to return, between `1` and `100`. */
                 limit?: number;
                 /** @description Order the results by the creation time. */
-                order?: "normal" | "desc" | "asc";
+                order?: components["schemas"]["PaginationOrder"];
                 /** @description Filter Connections by their type. */
                 connection_type?: "ADFSSAML" | "AdpOidc" | "AppleOAuth" | "Auth0SAML" | "AzureSAML" | "BitbucketOAuth" | "CasSAML" | "CloudflareSAML" | "ClassLinkSAML" | "CleverOIDC" | "CyberArkSAML" | "DiscordOAuth" | "DuoSAML" | "EntraIdOIDC" | "GenericOIDC" | "GenericSAML" | "GithubOAuth" | "GitLabOAuth" | "GoogleOAuth" | "GoogleOIDC" | "GoogleSAML" | "IntuitOAuth" | "JumpCloudSAML" | "KeycloakSAML" | "LastPassSAML" | "LinkedInOAuth" | "LoginGovOidc" | "MagicLink" | "MicrosoftOAuth" | "MiniOrangeSAML" | "NetIqSAML" | "OktaOIDC" | "OktaSAML" | "OneLoginSAML" | "OracleSAML" | "PingFederateSAML" | "PingOneSAML" | "RipplingSAML" | "SalesforceSAML" | "ShibbolethGenericSAML" | "ShibbolethSAML" | "SimpleSamlPhpSAML" | "SalesforceOAuth" | "SlackOAuth" | "VercelMarketplaceOAuth" | "VercelOAuth" | "VMwareSAML" | "XeroOAuth";
                 /** @description Filter Connections by their associated domain. */
@@ -19324,7 +19513,7 @@ export interface operations {
                 /** @description Upper limit on the number of objects to return, between `1` and `100`. */
                 limit?: number;
                 /** @description Order the results by the creation time. */
-                order?: "normal" | "desc" | "asc";
+                order?: components["schemas"]["PaginationOrder"];
                 /** @description Filter Directories by their associated organization. */
                 organization_id?: string;
                 /** @description Searchable text to match against Directory names. */
@@ -19489,7 +19678,7 @@ export interface operations {
                 /** @description Upper limit on the number of objects to return, between `1` and `100`. */
                 limit?: number;
                 /** @description Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending. */
-                order?: "normal" | "desc" | "asc";
+                order?: components["schemas"]["PaginationOrder"];
                 /** @description Unique identifier of the WorkOS Directory. This value can be obtained from the WorkOS dashboard or from the WorkOS API. */
                 directory?: string;
                 /** @description Unique identifier of the WorkOS Directory User. This value can be obtained from the WorkOS API. */
@@ -19620,7 +19809,7 @@ export interface operations {
                 /** @description Upper limit on the number of objects to return, between `1` and `100`. */
                 limit?: number;
                 /** @description Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending. */
-                order?: "normal" | "desc" | "asc";
+                order?: components["schemas"]["PaginationOrder"];
                 /** @description Unique identifier of the WorkOS Directory. This value can be obtained from the WorkOS dashboard or from the WorkOS API. */
                 directory?: string;
                 /** @description Unique identifier of the WorkOS Directory Group. This value can be obtained from the WorkOS API. */
@@ -19759,7 +19948,7 @@ export interface operations {
                 /** @description Upper limit on the number of objects to return, between `1` and `100`. */
                 limit?: number;
                 /** @description Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending. */
-                order?: "normal" | "desc" | "asc";
+                order?: components["schemas"]["PaginationOrder"];
                 /** @description Filter events by one or more event types (e.g. `dsync.user.created`). */
                 events?: string[];
                 /** @description ISO-8601 date string to filter events created after this date. */
@@ -19839,7 +20028,7 @@ export interface operations {
                 /** @description Upper limit on the number of objects to return, between `1` and `100`. */
                 limit?: number;
                 /** @description Order the results by the creation time. */
-                order?: "normal" | "desc" | "asc";
+                order?: components["schemas"]["PaginationOrder"];
             };
             header?: never;
             path?: never;
@@ -20550,7 +20739,7 @@ export interface operations {
                 /** @description Upper limit on the number of objects to return, between `1` and `100`. */
                 limit?: number;
                 /** @description Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending. */
-                order?: "normal" | "desc" | "asc";
+                order?: components["schemas"]["PaginationOrder"];
                 /** @description The domains of an Organization. Any Organization with a matching domain will be returned. */
                 domains?: string[];
                 /** @description Searchable text for an Organization. Matches against the organization name. */
@@ -21124,7 +21313,7 @@ export interface operations {
                 /** @description Upper limit on the number of objects to return, between `1` and `100`. */
                 limit?: number;
                 /** @description Order the results by the creation time. */
-                order?: "normal" | "desc" | "asc";
+                order?: components["schemas"]["PaginationOrder"];
             };
             header?: never;
             path: {
@@ -21241,7 +21430,7 @@ export interface operations {
                 /** @description Upper limit on the number of objects to return, between `1` and `100`. */
                 limit?: number;
                 /** @description Order the results by the creation time. */
-                order?: "normal" | "desc" | "asc";
+                order?: components["schemas"]["PaginationOrder"];
             };
             header?: never;
             path: {
@@ -21288,7 +21477,7 @@ export interface operations {
                 /** @description Upper limit on the number of objects to return, between `1` and `100`. */
                 limit?: number;
                 /** @description Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending. */
-                order?: "normal" | "desc" | "asc";
+                order?: components["schemas"]["PaginationOrder"];
             };
             header?: never;
             path: {
@@ -21646,7 +21835,7 @@ export interface operations {
                 /** @description Upper limit on the number of objects to return, between `1` and `100`. */
                 limit?: number;
                 /** @description Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending. */
-                order?: "normal" | "desc" | "asc";
+                order?: components["schemas"]["PaginationOrder"];
             };
             header?: never;
             path: {
@@ -21727,6 +21916,27 @@ export interface operations {
                     "application/json": components["schemas"]["Group"];
                 };
             };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description The error code identifying the type of error.
+                         * @example group_membership_limit_exceeded
+                         * @constant
+                         */
+                        code: "group_membership_limit_exceeded";
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Request could not be processed.
+                         */
+                        message: string;
+                    };
+                };
+            };
             /** @description Forbidden */
             403: {
                 headers: {
@@ -22228,7 +22438,7 @@ export interface operations {
                 organization?: string;
                 /** @description Can be used to pre-fill the domain field when initiating authentication with Microsoft OAuth or with a Google SAML connection type. */
                 domain_hint?: string;
-                /** @description Can be used to pre-fill the username/email address field of the IdP sign-in page for the user, if you know their username ahead of time. Currently supported for OAuth, OpenID Connect, Okta, and Entra ID connections. */
+                /** @description Can be used to pre-fill the username/email address field of the IdP sign-in page for the user, if you know their username ahead of time. Currently supported for OAuth, OpenID Connect, Okta, Entra ID, and custom SAML connections. */
                 login_hint?: string;
                 /** @description A random string generated by the client that is used to mitigate replay attacks. */
                 nonce?: string;
@@ -22573,7 +22783,7 @@ export interface operations {
             };
         };
     };
-    UserlandSessionsController_authenticate: {
+    "UserlandSessionsController_authenticate[0]": {
         parameters: {
             query?: never;
             header?: never;
@@ -23747,7 +23957,7 @@ export interface operations {
                 /** @description Upper limit on the number of objects to return, between `1` and `100`. */
                 limit?: number;
                 /** @description Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending. */
-                order?: "normal" | "desc" | "asc";
+                order?: components["schemas"]["PaginationOrder"];
                 /** @description The ID of the [organization](/reference/organization) that the recipient will join. */
                 organization_id?: string;
                 /** @description The email address of the recipient. */
@@ -24633,7 +24843,7 @@ export interface operations {
                 /** @description Upper limit on the number of objects to return, between `1` and `100`. */
                 limit?: number;
                 /** @description Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending. */
-                order?: "normal" | "desc" | "asc";
+                order?: components["schemas"]["PaginationOrder"];
                 /** @description The ID of the [organization](/reference/organization) which the user belongs to. */
                 organization_id?: string;
                 /** @description Filter by the status of the organization membership. Array including any of `active`, `inactive`, or `pending`. */
@@ -25341,7 +25551,7 @@ export interface operations {
                 /** @description Upper limit on the number of objects to return, between `1` and `100`. */
                 limit?: number;
                 /** @description Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending. */
-                order?: "normal" | "desc" | "asc";
+                order?: components["schemas"]["PaginationOrder"];
             };
             header?: never;
             path: {
@@ -25491,7 +25701,7 @@ export interface operations {
             };
         };
     };
-    UserlandUsersController_resetPassword: {
+    "UserlandUsersController_resetPassword[0]": {
         parameters: {
             query?: never;
             header?: never;
@@ -25821,7 +26031,7 @@ export interface operations {
             };
         };
     };
-    UserlandUsersController_list: {
+    "UserlandUsersController_list[0]": {
         parameters: {
             query?: {
                 /** @description An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`. */
@@ -25831,7 +26041,7 @@ export interface operations {
                 /** @description Upper limit on the number of objects to return, between `1` and `100`. */
                 limit?: number;
                 /** @description Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending. */
-                order?: "normal" | "desc" | "asc";
+                order?: components["schemas"]["PaginationOrder"];
                 /**
                  * @deprecated
                  * @description Filter users by the organization they are a member of. Deprecated in favor of `organization_id`.
@@ -25874,7 +26084,7 @@ export interface operations {
             };
         };
     };
-    UserlandUsersController_create: {
+    "UserlandUsersController_create[0]": {
         parameters: {
             query?: never;
             header?: never;
@@ -26079,7 +26289,7 @@ export interface operations {
             };
         };
     };
-    UserlandUsersController_get: {
+    "UserlandUsersController_get[0]": {
         parameters: {
             query?: never;
             header?: never;
@@ -26117,7 +26327,7 @@ export interface operations {
             };
         };
     };
-    UserlandUsersController_update: {
+    "UserlandUsersController_update[0]": {
         parameters: {
             query?: never;
             header?: never;
@@ -26319,7 +26529,7 @@ export interface operations {
             };
         };
     };
-    UserlandUsersController_delete: {
+    "UserlandUsersController_delete[0]": {
         parameters: {
             query?: never;
             header?: never;
@@ -26759,7 +26969,7 @@ export interface operations {
             };
         };
     };
-    UserlandUsersController_emailVerification: {
+    "UserlandUsersController_emailVerification[0]": {
         parameters: {
             query?: never;
             header?: never;
@@ -26879,7 +27089,7 @@ export interface operations {
             };
         };
     };
-    UserlandUsersController_sendVerificationEmail: {
+    "UserlandUsersController_sendVerificationEmail[0]": {
         parameters: {
             query?: never;
             header?: never;
@@ -27023,7 +27233,7 @@ export interface operations {
                 /** @description Upper limit on the number of objects to return, between `1` and `100`. */
                 limit?: number;
                 /** @description Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending. */
-                order?: "normal" | "desc" | "asc";
+                order?: components["schemas"]["PaginationOrder"];
             };
             header?: never;
             path: {
@@ -27193,7 +27403,7 @@ export interface operations {
                 /** @description Upper limit on the number of objects to return, between `1` and `100`. */
                 limit?: number;
                 /** @description Order the results by the creation time. */
-                order?: "normal" | "desc" | "asc";
+                order?: components["schemas"]["PaginationOrder"];
                 /** @description The ID of the organization to filter user API keys by. When provided, only API keys created against that organization membership are returned. */
                 organization_id?: string;
             };
@@ -27327,7 +27537,7 @@ export interface operations {
                 /** @description Upper limit on the number of objects to return, between `1` and `100`. */
                 limit?: number;
                 /** @description Order the results by the creation time. */
-                order?: "normal" | "desc" | "asc";
+                order?: components["schemas"]["PaginationOrder"];
             };
             header?: never;
             path: {
@@ -27374,7 +27584,7 @@ export interface operations {
                 /** @description Upper limit on the number of objects to return, between `1` and `100`. */
                 limit?: number;
                 /** @description Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending. */
-                order?: "normal" | "desc" | "asc";
+                order?: components["schemas"]["PaginationOrder"];
             };
             header?: never;
             path: {
@@ -27610,7 +27820,7 @@ export interface operations {
             };
         };
     };
-    UserlandUserAuthenticationFactorsController_list: {
+    "UserlandUserAuthenticationFactorsController_list[0]": {
         parameters: {
             query?: {
                 /** @description An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. */
@@ -27620,7 +27830,7 @@ export interface operations {
                 /** @description Upper limit on the number of objects to return, between `1` and `100`. */
                 limit?: number;
                 /** @description Order the results by the creation time. */
-                order?: "normal" | "desc" | "asc";
+                order?: components["schemas"]["PaginationOrder"];
             };
             header?: never;
             path: {
@@ -27657,7 +27867,7 @@ export interface operations {
             };
         };
     };
-    UserlandUserAuthenticationFactorsController_create: {
+    "UserlandUserAuthenticationFactorsController_create[0]": {
         parameters: {
             query?: never;
             header?: never;
@@ -27709,7 +27919,7 @@ export interface operations {
                 /** @description Upper limit on the number of objects to return, between `1` and `100`. */
                 limit?: number;
                 /** @description Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending. */
-                order?: "normal" | "desc" | "asc";
+                order?: components["schemas"]["PaginationOrder"];
             };
             header?: never;
             path?: never;