@workos/openapi-spec 0.111.0 → 0.113.0

package/dist/open-api-spec.yaml

@@ -11513,6 +11513,14 @@ paths:
         Returns credentials for a user's connected account. Branches on the
         installation's `auth_method`: OAuth installations return an access token
         (refreshed if needed); API-key installations return the stored secret.
+        Every active credential includes `config`: provider-declared, non-secret
+        values from the installation snapshot, with current provider defaults
+        for unset fields. Editing integration or organization configuration does
+        not change the snapshot; reconnect or explicitly rebind the connection
+        to adopt those edits. Defaults remain live, so a changed default can
+        appear in `config` before a cached token is refreshed or re-minted.
+        Credentials that never refresh require a reconnect or rebind when a
+        default changes their routing.
       operationId: DataIntegrationsController_vendCredentials
       parameters:
         - name: slug
@@ -11593,6 +11601,7 @@ paths:
                     - repo
                     - user:email
                   missing_scopes: []
+                  config: {}
         '400':
           description: Bad Request
           content:
@@ -22516,6 +22525,25 @@ paths:
                 required:
                   - code
                   - message
+        '503':
+          description: Another request is updating the same user. Retry the request.
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: concurrent_request
+                    const: concurrent_request
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
       summary: Update a user
       tags:
         - user-management.users
@@ -45591,6 +45619,22 @@ components:
                 the access token, they're listed here. Present for `oauth` and
                 `client_credentials` credentials; absent for `api_key`.
               example: []
+            config:
+              type: object
+              additionalProperties:
+                type: string
+              description: >-
+                Provider-declared, non-secret config from the installation
+                snapshot, with current defaults for unset fields. Includes both
+                integration- and installation-scope fields; omits undeclared
+                fields and fields marked secret. Use these values to address a
+                per-tenant host, such as Snowflake's `account` or Zendesk's
+                `subdomain`. Empty when no values are disclosable. Changes to
+                integration or organization pins require reconnecting or
+                explicitly rebinding the connection. Defaults are live and can
+                differ from a cached token's audience until refresh or re-mint.
+              example: &ref_39
+                account: myorg-myaccount
           required:
             - object
             - auth_method
@@ -45598,6 +45642,7 @@ components:
             - expires_at
             - scopes
             - missing_scopes
+            - config
         - type: object
           properties:
             object:
@@ -45619,10 +45664,26 @@ components:
               format: password
               description: The API key secret.
               example: sk-1234567890abcdef
+            config:
+              type: object
+              additionalProperties:
+                type: string
+              description: >-
+                Provider-declared, non-secret config from the installation
+                snapshot, with current defaults for unset fields. Includes both
+                integration- and installation-scope fields; omits undeclared
+                fields and fields marked secret. Use these values to address a
+                per-tenant host, such as Snowflake's `account` or Zendesk's
+                `subdomain`. Empty when no values are disclosable. Changes to
+                integration or organization pins require reconnecting or
+                explicitly rebinding the connection. Defaults are live and can
+                differ from a cached token's audience until refresh or re-mint.
+              example: *ref_39
           required:
             - object
             - auth_method
             - value
+            - config
         - type: object
           properties:
             object:
@@ -45680,6 +45741,21 @@ components:
                 provider. Only present for `client_credentials` credentials.
               example:
                 instance_url: https://acme.my.salesforce.com
+            config:
+              type: object
+              additionalProperties:
+                type: string
+              description: >-
+                Provider-declared, non-secret config from the installation
+                snapshot, with current defaults for unset fields. Includes both
+                integration- and installation-scope fields; omits undeclared
+                fields and fields marked secret. Use these values to address a
+                per-tenant host, such as Snowflake's `account` or Zendesk's
+                `subdomain`. Empty when no values are disclosable. Changes to
+                integration or organization pins require reconnecting or
+                explicitly rebinding the connection. Defaults are live and can
+                differ from a cached token's audience until refresh or re-mint.
+              example: *ref_39
           required:
             - object
             - auth_method
@@ -45688,6 +45764,7 @@ components:
             - scopes
             - missing_scopes
             - metadata
+            - config
     DataIntegrationCredentialsResponse:
       oneOf:
         - type: object
@@ -46058,7 +46135,7 @@ components:
                         items:
                           type: string
                         description: The OAuth scopes granted for this connection.
-                        example: &ref_39
+                        example: &ref_40
                           - repo
                           - user:email
                       auth_method:
@@ -46108,7 +46185,7 @@ components:
                           `installation` scope, excluding any it declares as
                           secret. Only present when `auth_method` is
                           `client_credentials`.
-                        example: &ref_40
+                        example: &ref_41
                           instance_url: https://example.my.salesforce.com
                       state:
                         type: string
@@ -46237,7 +46314,7 @@ components:
                       items:
                         type: string
                       description: The OAuth scopes granted for this connection.
-                      example: *ref_39
+                      example: *ref_40
                     auth_method:
                       type: string
                       enum:
@@ -46284,7 +46361,7 @@ components:
                         `installation` scope, excluding any it declares as
                         secret. Only present when `auth_method` is
                         `client_credentials`.
-                      example: *ref_40
+                      example: *ref_41
                     state:
                       type: string
                       enum:

package/dist/types.d.ts

@@ -1532,7 +1532,7 @@ export interface paths {
         put?: never;
         /**
          * Vend credentials for a connected account
-         * @description Returns credentials for a user's connected account. Branches on the installation's `auth_method`: OAuth installations return an access token (refreshed if needed); API-key installations return the stored secret.
+         * @description Returns credentials for a user's connected account. Branches on the installation's `auth_method`: OAuth installations return an access token (refreshed if needed); API-key installations return the stored secret. Every active credential includes `config`: provider-declared, non-secret values from the installation snapshot, with current provider defaults for unset fields. Editing integration or organization configuration does not change the snapshot; reconnect or explicitly rebind the connection to adopt those edits. Defaults remain live, so a changed default can appear in `config` before a cached token is refreshed or re-minted. Credentials that never refresh require a reconnect or rebind when a default changes their routing.
          */
         post: operations["DataIntegrationsController_vendCredentials"];
         delete?: never;
@@ -18283,6 +18283,15 @@ export interface components {
              * @example []
              */
             missing_scopes: string[];
+            /**
+             * @description Provider-declared, non-secret config from the installation snapshot, with current defaults for unset fields. Includes both integration- and installation-scope fields; omits undeclared fields and fields marked secret. Use these values to address a per-tenant host, such as Snowflake's `account` or Zendesk's `subdomain`. Empty when no values are disclosable. Changes to integration or organization pins require reconnecting or explicitly rebinding the connection. Defaults are live and can differ from a cached token's audience until refresh or re-mint.
+             * @example {
+             *       "account": "myorg-myaccount"
+             *     }
+             */
+            config: {
+                [key: string]: string;
+            };
         } | {
             /**
              * @description Distinguishes the credential object.
@@ -18300,6 +18309,15 @@ export interface components {
              * @example sk-1234567890abcdef
              */
             value: string;
+            /**
+             * @description Provider-declared, non-secret config from the installation snapshot, with current defaults for unset fields. Includes both integration- and installation-scope fields; omits undeclared fields and fields marked secret. Use these values to address a per-tenant host, such as Snowflake's `account` or Zendesk's `subdomain`. Empty when no values are disclosable. Changes to integration or organization pins require reconnecting or explicitly rebinding the connection. Defaults are live and can differ from a cached token's audience until refresh or re-mint.
+             * @example {
+             *       "account": "myorg-myaccount"
+             *     }
+             */
+            config: {
+                [key: string]: string;
+            };
         } | {
             /**
              * @description Distinguishes the credential object.
@@ -18343,6 +18361,15 @@ export interface components {
             metadata: {
                 [key: string]: unknown;
             };
+            /**
+             * @description Provider-declared, non-secret config from the installation snapshot, with current defaults for unset fields. Includes both integration- and installation-scope fields; omits undeclared fields and fields marked secret. Use these values to address a per-tenant host, such as Snowflake's `account` or Zendesk's `subdomain`. Empty when no values are disclosable. Changes to integration or organization pins require reconnecting or explicitly rebinding the connection. Defaults are live and can differ from a cached token's audience until refresh or re-mint.
+             * @example {
+             *       "account": "myorg-myaccount"
+             *     }
+             */
+            config: {
+                [key: string]: string;
+            };
         };
         DataIntegrationCredentialsResponse: {
             /**
@@ -30359,7 +30386,8 @@ export interface operations {
                      *           "repo",
                      *           "user:email"
                      *         ],
-                     *         "missing_scopes": []
+                     *         "missing_scopes": [],
+                     *         "config": {}
                      *       }
                      *     }
                      */
@@ -40025,6 +40053,27 @@ export interface operations {
                     };
                 };
             };
+            /** @description Another request is updating the same user. Retry the request. */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description The error code identifying the type of error.
+                         * @example concurrent_request
+                         * @constant
+                         */
+                        code: "concurrent_request";
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Request could not be processed.
+                         */
+                        message: string;
+                    };
+                };
+            };
         };
     };
     "UserlandUsersController_delete[0]": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@workos/openapi-spec",
-  "version": "0.111.0",
+  "version": "0.113.0",
   "type": "module",
   "description": "WorkOS OpenAPI specification, TypeScript types, and SDK resolution policy",
   "license": "MIT",