@workos/openapi-spec 0.121.0 → 0.123.0

package/dist/open-api-spec.yaml

@@ -10823,6 +10823,25 @@ paths:
             schema:
               type: object
               properties:
+                account_display_name:
+                  type:
+                    - string
+                    - 'null'
+                  description: >-
+                    A mutable, non-unique label. Omit to preserve an existing
+                    label; null clears it. Labels are never account identifiers.
+                  maxLength: 255
+                  example: Acme production
+                account_identifier:
+                  type:
+                    - string
+                    - 'null'
+                  minLength: 1
+                  description: >-
+                    A developer-attested provider account identifier, never
+                    inferred from a label or credential. Omit to preserve an
+                    existing identifier; null clears it.
+                  example: workspace_123
                 user_id:
                   type: string
                   description: A [User](/reference/authkit/user) identifier.
@@ -10876,13 +10895,13 @@ paths:
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/ConnectedAccount'
+                $ref: '#/components/schemas/ConnectedAccountWriteResponse'
               example:
                 object: connected_account
                 id: data_installation_01EHZNVPK3SFK441A1RGBFSHRT
                 connection_role: standard
-                account_identifier: null
-                account_display_name: null
+                account_identifier: workspace_123
+                account_display_name: Acme production
                 user_id: user_01EHZNVPK3SFK441A1RGBFSHRT
                 organization_id: org_01EHZNVPK3SFK441A1RGBFSHRT
                 scopes: []
@@ -10901,9 +10920,11 @@ paths:
                 type: object
                 properties:
                   message:
-                    type: string
-                    description: A human-readable description of the error.
-                    example: 'Organization not found: ''org_01EHQMYV6MBK39QC5PZXHY59C3''.'
+                    oneOf:
+                      - type: string
+                      - type: array
+                        items:
+                          type: string
                 required:
                   - message
         '401':
@@ -11037,6 +11058,26 @@ paths:
               oneOf:
                 - type: object
                   properties:
+                    account_display_name:
+                      type:
+                        - string
+                        - 'null'
+                      description: >-
+                        A mutable, non-unique label. Omit to preserve an
+                        existing label; null clears it. Labels are never account
+                        identifiers.
+                      maxLength: 255
+                      example: Acme production
+                    account_identifier:
+                      type:
+                        - string
+                        - 'null'
+                      minLength: 1
+                      description: >-
+                        A developer-attested provider account identifier, never
+                        inferred from a label or credential. Omit to preserve an
+                        existing identifier; null clears it.
+                      example: workspace_123
                     user_id:
                       type: string
                       description: A [User](/reference/authkit/user) identifier.
@@ -11073,6 +11114,26 @@ paths:
                   additionalProperties: false
                 - type: object
                   properties:
+                    account_display_name:
+                      type:
+                        - string
+                        - 'null'
+                      description: >-
+                        A mutable, non-unique label. Omit to preserve an
+                        existing label; null clears it. Labels are never account
+                        identifiers.
+                      maxLength: 255
+                      example: Acme production
+                    account_identifier:
+                      type:
+                        - string
+                        - 'null'
+                      minLength: 1
+                      description: >-
+                        A developer-attested provider account identifier, never
+                        inferred from a label or credential. Omit to preserve an
+                        existing identifier; null clears it.
+                      example: workspace_123
                     user_id:
                       type: string
                       description: A [User](/reference/authkit/user) identifier.
@@ -11125,6 +11186,26 @@ paths:
                   additionalProperties: false
                 - type: object
                   properties:
+                    account_display_name:
+                      type:
+                        - string
+                        - 'null'
+                      description: >-
+                        A mutable, non-unique label. Omit to preserve an
+                        existing label; null clears it. Labels are never account
+                        identifiers.
+                      maxLength: 255
+                      example: Acme production
+                    account_identifier:
+                      type:
+                        - string
+                        - 'null'
+                      minLength: 1
+                      description: >-
+                        A developer-attested provider account identifier, never
+                        inferred from a label or credential. Omit to preserve an
+                        existing identifier; null clears it.
+                      example: workspace_123
                     user_id:
                       type: string
                       description: A [User](/reference/authkit/user) identifier.
@@ -11173,13 +11254,13 @@ paths:
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/ConnectedAccount'
+                $ref: '#/components/schemas/ConnectedAccountWriteResponse'
               example:
                 object: connected_account
                 id: data_installation_01EHZNVPK3SFK441A1RGBFSHRT
                 connection_role: compatibility
-                account_identifier: null
-                account_display_name: null
+                account_identifier: workspace_123
+                account_display_name: Acme production
                 user_id: user_01EHZNVPK3SFK441A1RGBFSHRT
                 organization_id: org_01EHZNVPK3SFK441A1RGBFSHRT
                 scopes: []
@@ -11196,9 +11277,11 @@ paths:
                 type: object
                 properties:
                   message:
-                    type: string
-                    description: A human-readable description of the error.
-                    example: 'Organization not found: ''org_01EHQMYV6MBK39QC5PZXHY59C3''.'
+                    oneOf:
+                      - type: string
+                      - type: array
+                        items:
+                          type: string
                 required:
                   - message
         '401':
@@ -11292,6 +11375,16 @@ paths:
               oneOf:
                 - type: object
                   properties:
+                    account_display_name:
+                      type:
+                        - string
+                        - 'null'
+                      description: >-
+                        A mutable, non-unique label. Omit to preserve an
+                        existing label; null clears it. Labels are never account
+                        identifiers.
+                      maxLength: 255
+                      example: Acme production
                     user_id:
                       type: string
                       description: >-
@@ -11342,6 +11435,16 @@ paths:
                   additionalProperties: false
                 - type: object
                   properties:
+                    account_display_name:
+                      type:
+                        - string
+                        - 'null'
+                      description: >-
+                        A mutable, non-unique label. Omit to preserve an
+                        existing label; null clears it. Labels are never account
+                        identifiers.
+                      maxLength: 255
+                      example: Acme production
                     user_id:
                       type: string
                       description: >-
@@ -11407,6 +11510,16 @@ paths:
                   additionalProperties: false
                 - type: object
                   properties:
+                    account_display_name:
+                      type:
+                        - string
+                        - 'null'
+                      description: >-
+                        A mutable, non-unique label. Omit to preserve an
+                        existing label; null clears it. Labels are never account
+                        identifiers.
+                      maxLength: 255
+                      example: Acme production
                     user_id:
                       type: string
                       description: >-
@@ -11485,9 +11598,11 @@ paths:
                 type: object
                 properties:
                   message:
-                    type: string
-                    description: A human-readable description of the error.
-                    example: 'Organization not found: ''org_01EHQMYV6MBK39QC5PZXHY59C3''.'
+                    oneOf:
+                      - type: string
+                      - type: array
+                        items:
+                          type: string
                 required:
                   - message
         '401':
@@ -11614,6 +11729,25 @@ paths:
             schema:
               type: object
               properties:
+                account_display_name:
+                  type:
+                    - string
+                    - 'null'
+                  description: >-
+                    A mutable, non-unique label. Omit to preserve an existing
+                    label; null clears it. Labels are never account identifiers.
+                  maxLength: 255
+                  example: Acme production
+                account_identifier:
+                  type:
+                    - string
+                    - 'null'
+                  minLength: 1
+                  description: >-
+                    A developer-attested provider account identifier, never
+                    inferred from a label or credential. Omit to preserve an
+                    existing identifier; null clears it.
+                  example: workspace_123
                 user_id:
                   type: string
                   description: A [User](/reference/authkit/user) identifier.
@@ -11683,13 +11817,13 @@ paths:
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/ConnectedAccount'
+                $ref: '#/components/schemas/ConnectedAccountWriteResponse'
               example:
                 object: connected_account
                 id: data_installation_01EHZNVPK3SFK441A1RGBFSHRT
                 connection_role: standard
-                account_identifier: null
-                account_display_name: null
+                account_identifier: workspace_123
+                account_display_name: Acme production
                 user_id: user_01EHZNVPK3SFK441A1RGBFSHRT
                 organization_id: org_01EHZNVPK3SFK441A1RGBFSHRT
                 scopes: []
@@ -11707,9 +11841,11 @@ paths:
                 type: object
                 properties:
                   message:
-                    type: string
-                    description: A human-readable description of the error.
-                    example: 'Organization not found: ''org_01EHQMYV6MBK39QC5PZXHY59C3''.'
+                    oneOf:
+                      - type: string
+                      - type: array
+                        items:
+                          type: string
                 required:
                   - message
         '401':
@@ -11843,6 +11979,26 @@ paths:
               oneOf:
                 - type: object
                   properties:
+                    account_display_name:
+                      type:
+                        - string
+                        - 'null'
+                      description: >-
+                        A mutable, non-unique label. Omit to preserve an
+                        existing label; null clears it. Labels are never account
+                        identifiers.
+                      maxLength: 255
+                      example: Acme production
+                    account_identifier:
+                      type:
+                        - string
+                        - 'null'
+                      minLength: 1
+                      description: >-
+                        A developer-attested provider account identifier, never
+                        inferred from a label or credential. Omit to preserve an
+                        existing identifier; null clears it.
+                      example: workspace_123
                     user_id:
                       type: string
                       description: A [User](/reference/authkit/user) identifier.
@@ -11895,6 +12051,26 @@ paths:
                   additionalProperties: false
                 - type: object
                   properties:
+                    account_display_name:
+                      type:
+                        - string
+                        - 'null'
+                      description: >-
+                        A mutable, non-unique label. Omit to preserve an
+                        existing label; null clears it. Labels are never account
+                        identifiers.
+                      maxLength: 255
+                      example: Acme production
+                    account_identifier:
+                      type:
+                        - string
+                        - 'null'
+                      minLength: 1
+                      description: >-
+                        A developer-attested provider account identifier, never
+                        inferred from a label or credential. Omit to preserve an
+                        existing identifier; null clears it.
+                      example: workspace_123
                     user_id:
                       type: string
                       description: A [User](/reference/authkit/user) identifier.
@@ -11962,6 +12138,26 @@ paths:
                   additionalProperties: false
                 - type: object
                   properties:
+                    account_display_name:
+                      type:
+                        - string
+                        - 'null'
+                      description: >-
+                        A mutable, non-unique label. Omit to preserve an
+                        existing label; null clears it. Labels are never account
+                        identifiers.
+                      maxLength: 255
+                      example: Acme production
+                    account_identifier:
+                      type:
+                        - string
+                        - 'null'
+                      minLength: 1
+                      description: >-
+                        A developer-attested provider account identifier, never
+                        inferred from a label or credential. Omit to preserve an
+                        existing identifier; null clears it.
+                      example: workspace_123
                     user_id:
                       type: string
                       description: A [User](/reference/authkit/user) identifier.
@@ -12025,13 +12221,13 @@ paths:
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/ConnectedAccount'
+                $ref: '#/components/schemas/ConnectedAccountWriteResponse'
               example:
                 object: connected_account
                 id: data_installation_01EHZNVPK3SFK441A1RGBFSHRT
                 connection_role: compatibility
-                account_identifier: null
-                account_display_name: null
+                account_identifier: workspace_123
+                account_display_name: Acme production
                 user_id: user_01EHZNVPK3SFK441A1RGBFSHRT
                 organization_id: org_01EHZNVPK3SFK441A1RGBFSHRT
                 scopes: []
@@ -12047,9 +12243,11 @@ paths:
                 type: object
                 properties:
                   message:
-                    type: string
-                    description: A human-readable description of the error.
-                    example: 'Organization not found: ''org_01EHQMYV6MBK39QC5PZXHY59C3''.'
+                    oneOf:
+                      - type: string
+                      - type: array
+                        items:
+                          type: string
                 required:
                   - message
         '401':
@@ -15954,7 +16152,7 @@ paths:
                 user_id: null
                 organization_id: org_01EHZNVPK3SFK441A1RGBFSHRT
                 connection_role: compatibility
-                account_identifier: acme-workspace
+                account_identifier: workspace_123
                 account_display_name: Acme production
                 scopes:
                   - repo
@@ -16155,14 +16353,14 @@ paths:
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/ConnectedAccount'
+                $ref: '#/components/schemas/ConnectedAccountWriteResponse'
               example:
                 object: connected_account
                 id: data_installation_01EHZNVPK3SFK441A1RGBFSHRT
                 user_id: null
                 organization_id: org_01EHZNVPK3SFK441A1RGBFSHRT
                 connection_role: compatibility
-                account_identifier: acme-workspace
+                account_identifier: workspace_123
                 account_display_name: Acme production
                 scopes:
                   - repo
@@ -16416,14 +16614,14 @@ paths:
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/ConnectedAccount'
+                $ref: '#/components/schemas/ConnectedAccountWriteResponse'
               example:
                 object: connected_account
                 id: data_installation_01EHZNVPK3SFK441A1RGBFSHRT
                 user_id: null
                 organization_id: org_01EHZNVPK3SFK441A1RGBFSHRT
                 connection_role: compatibility
-                account_identifier: acme-workspace
+                account_identifier: workspace_123
                 account_display_name: Acme production
                 scopes:
                   - repo
@@ -16592,7 +16790,7 @@ paths:
                       user_id: null
                       organization_id: org_01EHZNVPK3SFK441A1RGBFSHRT
                       connection_role: compatibility
-                      account_identifier: acme-workspace
+                      account_identifier: workspace_123
                       account_display_name: Acme production
                       scopes:
                         - repo
@@ -25033,7 +25231,7 @@ paths:
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/ConnectedAccount'
+                $ref: '#/components/schemas/ConnectedAccountWriteResponse'
         '401':
           description: The request is missing a valid API key.
         '404':
@@ -25270,7 +25468,7 @@ paths:
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/ConnectedAccount'
+                $ref: '#/components/schemas/ConnectedAccountWriteResponse'
         '400':
           description: The connected account selector is malformed.
           content:
@@ -29487,6 +29685,21 @@ components:
     CreateOrganizationConnectedAccountDto:
       type: object
       properties:
+        account_display_name:
+          type:
+            - string
+            - 'null'
+          description: >-
+            A mutable, non-unique connection label; null clears it. Not an
+            account identifier.
+          maxLength: 255
+          example: Acme production
+        account_identifier:
+          type:
+            - string
+            - 'null'
+          description: A developer-attested account identifier; null clears it.
+          example: workspace_123
         access_token:
           type: string
           description: The OAuth access token for the connected account.
@@ -29542,6 +29755,21 @@ components:
     OrganizationConnectedAccountDto:
       type: object
       properties:
+        account_display_name:
+          type:
+            - string
+            - 'null'
+          description: >-
+            A mutable, non-unique connection label; null clears it. Not an
+            account identifier.
+          maxLength: 255
+          example: Acme production
+        account_identifier:
+          type:
+            - string
+            - 'null'
+          description: A developer-attested account identifier; null clears it.
+          example: workspace_123
         access_token:
           type: string
           description: The OAuth access token for the connected account.
@@ -29582,6 +29810,21 @@ components:
     CreateConnectedAccountDto:
       type: object
       properties:
+        account_display_name:
+          type:
+            - string
+            - 'null'
+          description: >-
+            A mutable, non-unique connection label; null clears it. Not an
+            account identifier.
+          maxLength: 255
+          example: Acme production
+        account_identifier:
+          type:
+            - string
+            - 'null'
+          description: A developer-attested account identifier; null clears it.
+          example: workspace_123
         access_token:
           type: string
           description: The OAuth access token for the connected account.
@@ -29624,6 +29867,21 @@ components:
     ConnectedAccountDto:
       type: object
       properties:
+        account_display_name:
+          type:
+            - string
+            - 'null'
+          description: >-
+            A mutable, non-unique connection label; null clears it. Not an
+            account identifier.
+          maxLength: 255
+          example: Acme production
+        account_identifier:
+          type:
+            - string
+            - 'null'
+          description: A developer-attested account identifier; null clears it.
+          example: workspace_123
         access_token:
           type: string
           description: The OAuth access token for the connected account.
@@ -30874,6 +31132,14 @@ components:
             - authorization_code
             - urn:ietf:params:oauth:grant-type:token-exchange
           example: authorization_code
+        code_verifier:
+          type: string
+          description: >-
+            The PKCE code verifier matching the `code_challenge` sent with the
+            authorization request. Required when the authorization request
+            included a `code_challenge`. Must be sent in the request body.
+          example: code_verifier_value
+          format: password
         subject_token:
           type: string
           description: >-
@@ -46691,7 +46957,7 @@ components:
           required:
             - active
             - error
-    ConnectedAccount:
+    ConnectedAccountWriteResponse:
       type: object
       properties:
         object:
@@ -46823,6 +47089,26 @@ components:
           type: string
           description: The timestamp when the connection was last updated.
           example: '2024-01-16T14:20:00.000Z'
+        warnings:
+          type: array
+          items:
+            type: object
+            properties:
+              code:
+                type: string
+                const: duplicate_account_display_name
+              message:
+                type: string
+                description: A human-readable explanation of the non-blocking warning.
+                example: >-
+                  Another connection for this provider and owner has the same
+                  label.
+            required:
+              - code
+              - message
+          description: >-
+            Non-blocking warnings about an explicitly supplied label, omitted
+            when no duplicate exists. Reads do not include this field.
       required:
         - object
         - id
@@ -47340,6 +47626,150 @@ components:
       required:
         - object
         - data
+    ConnectedAccount:
+      type: object
+      properties:
+        object:
+          type: string
+          description: Distinguishes the connected account object.
+          const: connected_account
+        id:
+          type: string
+          description: The unique identifier of the connected account.
+          example: data_installation_01EHZNVPK3SFK441A1RGBFSHRT
+        connection_role:
+          type: string
+          enum:
+            - compatibility
+            - standard
+          description: >-
+            Whether this row is the compatibility connection visible to
+            undeclared clients or a standard peer for plural-aware clients. The
+            role does not indicate preference or creation order.
+          example: compatibility
+        account_identifier:
+          type:
+            - string
+            - 'null'
+          description: >-
+            A best-effort identifier for the provider account this connection
+            points at. It is correlation metadata, not the connection identifier
+            or a selector.
+          example: workspace_123
+        account_display_name:
+          type:
+            - string
+            - 'null'
+          description: >-
+            A mutable, non-unique display name for the provider account
+            connection.
+          example: Acme production
+        user_id:
+          type:
+            - string
+            - 'null'
+          description: >-
+            The [User](/reference/authkit/user) identifier associated with this
+            connection.
+          example: user_01EHZNVPK3SFK441A1RGBFSHRT
+        organization_id:
+          type:
+            - string
+            - 'null'
+          description: >-
+            The [Organization](/reference/organization) identifier associated
+            with this connection, or `null` if not scoped to an organization.
+          example: null
+        scopes:
+          type: array
+          items:
+            type: string
+          description: The OAuth scopes granted for this connection.
+          example:
+            - repo
+            - user:email
+        auth_method:
+          type: string
+          enum:
+            - oauth
+            - api_key
+            - client_credentials
+          description: >-
+            The authentication method used for this connection (`oauth`,
+            `api_key`, or `client_credentials`). Defaults to `oauth` if absent.
+          example: oauth
+        api_key_last_4:
+          type:
+            - string
+            - 'null'
+          description: >-
+            The last four characters of the API key, or `null` for OAuth
+            connections.
+          example: null
+        client_id:
+          type:
+            - string
+            - 'null'
+          description: >-
+            The client ID supplied for this connection. Only present when
+            `auth_method` is `client_credentials`.
+          example: 3MVG9dZJodJWxft2VoStSCVwPFsx0eDcpVc
+        client_secret_last_4:
+          type:
+            - string
+            - 'null'
+          description: >-
+            The last four characters of the client secret supplied for this
+            connection, or `null` when it can't be read. Only present when
+            `auth_method` is `client_credentials`.
+          example: cdef
+        config:
+          type: object
+          additionalProperties:
+            type: string
+          description: >-
+            The connection-level configuration values stored for this connection
+            — the fields the provider declares at `installation` scope,
+            excluding secret and undeclared fields. Returned for every
+            authentication method; empty when no stored values can be disclosed.
+          example:
+            instance_url: https://example.my.salesforce.com
+        state:
+          type: string
+          enum:
+            - connected
+            - needs_reauthorization
+            - disconnected
+          description: >-
+            The state of the connected account:
+
+            - `connected`: The connection is active and tokens are valid.
+
+            - `needs_reauthorization`: The user needs to reauthorize the
+            connection, typically because required scopes have changed.
+
+            - `disconnected`: The connection has been disconnected.
+          example: connected
+        created_at:
+          type: string
+          description: The timestamp when the connection was created.
+          example: '2024-01-16T14:20:00.000Z'
+        updated_at:
+          type: string
+          description: The timestamp when the connection was last updated.
+          example: '2024-01-16T14:20:00.000Z'
+      required:
+        - object
+        - id
+        - connection_role
+        - account_identifier
+        - account_display_name
+        - user_id
+        - organization_id
+        - scopes
+        - state
+        - created_at
+        - updated_at
     PortalLinkResponse:
       type: object
       properties:

package/dist/types.d.ts

@@ -5558,6 +5558,16 @@ export interface components {
             custom_provider?: components["schemas"]["UpdateCustomProviderDefinitionDto"];
         };
         CreateOrganizationConnectedAccountDto: {
+            /**
+             * @description A mutable, non-unique connection label; null clears it. Not an account identifier.
+             * @example Acme production
+             */
+            account_display_name?: string | null;
+            /**
+             * @description A developer-attested account identifier; null clears it.
+             * @example workspace_123
+             */
+            account_identifier?: string | null;
             /**
              * @description The OAuth access token for the connected account.
              * @example gho_16C7e42F292c6912E7710c838347Ae178B4a
@@ -5601,6 +5611,16 @@ export interface components {
             connection_intent?: "add";
         };
         OrganizationConnectedAccountDto: {
+            /**
+             * @description A mutable, non-unique connection label; null clears it. Not an account identifier.
+             * @example Acme production
+             */
+            account_display_name?: string | null;
+            /**
+             * @description A developer-attested account identifier; null clears it.
+             * @example workspace_123
+             */
+            account_identifier?: string | null;
             /**
              * @description The OAuth access token for the connected account.
              * @example gho_16C7e42F292c6912E7710c838347Ae178B4a
@@ -5638,6 +5658,16 @@ export interface components {
             user_id: string;
         };
         CreateConnectedAccountDto: {
+            /**
+             * @description A mutable, non-unique connection label; null clears it. Not an account identifier.
+             * @example Acme production
+             */
+            account_display_name?: string | null;
+            /**
+             * @description A developer-attested account identifier; null clears it.
+             * @example workspace_123
+             */
+            account_identifier?: string | null;
             /**
              * @description The OAuth access token for the connected account.
              * @example gho_16C7e42F292c6912E7710c838347Ae178B4a
@@ -5676,6 +5706,16 @@ export interface components {
             connection_intent?: "add";
         };
         ConnectedAccountDto: {
+            /**
+             * @description A mutable, non-unique connection label; null clears it. Not an account identifier.
+             * @example Acme production
+             */
+            account_display_name?: string | null;
+            /**
+             * @description A developer-attested account identifier; null clears it.
+             * @example workspace_123
+             */
+            account_identifier?: string | null;
             /**
              * @description The OAuth access token for the connected account.
              * @example gho_16C7e42F292c6912E7710c838347Ae178B4a
@@ -6290,6 +6330,12 @@ export interface components {
              * @enum {string}
              */
             grant_type: "authorization_code" | "urn:ietf:params:oauth:grant-type:token-exchange";
+            /**
+             * Format: password
+             * @description The PKCE code verifier matching the `code_challenge` sent with the authorization request. Required when the authorization request included a `code_challenge`. Must be sent in the request body.
+             * @example code_verifier_value
+             */
+            code_verifier?: string;
             /**
              * @description The OIDC ID token to exchange. Required when `grant_type` is `urn:ietf:params:oauth:grant-type:token-exchange`. Must be sent in the request body.
              * @example eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjMifQ.example
@@ -18448,7 +18494,7 @@ export interface components {
              */
             error: "not_installed" | "needs_reauthorization";
         };
-        ConnectedAccount: {
+        ConnectedAccountWriteResponse: {
             /**
              * @description Distinguishes the connected account object.
              * @constant
@@ -18542,6 +18588,16 @@ export interface components {
              * @example 2024-01-16T14:20:00.000Z
              */
             updated_at: string;
+            /** @description Non-blocking warnings about an explicitly supplied label, omitted when no duplicate exists. Reads do not include this field. */
+            warnings?: {
+                /** @constant */
+                code: "duplicate_account_display_name";
+                /**
+                 * @description A human-readable explanation of the non-blocking warning.
+                 * @example Another connection for this provider and owner has the same label.
+                 */
+                message: string;
+            }[];
         };
         DataIntegrationsListResponse: {
             /**
@@ -18877,6 +18933,101 @@ export interface components {
                 }[];
             }[];
         };
+        ConnectedAccount: {
+            /**
+             * @description Distinguishes the connected account object.
+             * @constant
+             */
+            object: "connected_account";
+            /**
+             * @description The unique identifier of the connected account.
+             * @example data_installation_01EHZNVPK3SFK441A1RGBFSHRT
+             */
+            id: string;
+            /**
+             * @description Whether this row is the compatibility connection visible to undeclared clients or a standard peer for plural-aware clients. The role does not indicate preference or creation order.
+             * @example compatibility
+             * @enum {string}
+             */
+            connection_role: "compatibility" | "standard";
+            /**
+             * @description A best-effort identifier for the provider account this connection points at. It is correlation metadata, not the connection identifier or a selector.
+             * @example workspace_123
+             */
+            account_identifier: string | null;
+            /**
+             * @description A mutable, non-unique display name for the provider account connection.
+             * @example Acme production
+             */
+            account_display_name: string | null;
+            /**
+             * @description The [User](/reference/authkit/user) identifier associated with this connection.
+             * @example user_01EHZNVPK3SFK441A1RGBFSHRT
+             */
+            user_id: string | null;
+            /**
+             * @description The [Organization](/reference/organization) identifier associated with this connection, or `null` if not scoped to an organization.
+             * @example null
+             */
+            organization_id: string | null;
+            /**
+             * @description The OAuth scopes granted for this connection.
+             * @example [
+             *       "repo",
+             *       "user:email"
+             *     ]
+             */
+            scopes: string[];
+            /**
+             * @description The authentication method used for this connection (`oauth`, `api_key`, or `client_credentials`). Defaults to `oauth` if absent.
+             * @example oauth
+             * @enum {string}
+             */
+            auth_method?: "oauth" | "api_key" | "client_credentials";
+            /**
+             * @description The last four characters of the API key, or `null` for OAuth connections.
+             * @example null
+             */
+            api_key_last_4?: string | null;
+            /**
+             * @description The client ID supplied for this connection. Only present when `auth_method` is `client_credentials`.
+             * @example 3MVG9dZJodJWxft2VoStSCVwPFsx0eDcpVc
+             */
+            client_id?: string | null;
+            /**
+             * @description The last four characters of the client secret supplied for this connection, or `null` when it can't be read. Only present when `auth_method` is `client_credentials`.
+             * @example cdef
+             */
+            client_secret_last_4?: string | null;
+            /**
+             * @description The connection-level configuration values stored for this connection — the fields the provider declares at `installation` scope, excluding secret and undeclared fields. Returned for every authentication method; empty when no stored values can be disclosed.
+             * @example {
+             *       "instance_url": "https://example.my.salesforce.com"
+             *     }
+             */
+            config?: {
+                [key: string]: string;
+            };
+            /**
+             * @description The state of the connected account:
+             *     - `connected`: The connection is active and tokens are valid.
+             *     - `needs_reauthorization`: The user needs to reauthorize the connection, typically because required scopes have changed.
+             *     - `disconnected`: The connection has been disconnected.
+             * @example connected
+             * @enum {string}
+             */
+            state: "connected" | "needs_reauthorization" | "disconnected";
+            /**
+             * @description The timestamp when the connection was created.
+             * @example 2024-01-16T14:20:00.000Z
+             */
+            created_at: string;
+            /**
+             * @description The timestamp when the connection was last updated.
+             * @example 2024-01-16T14:20:00.000Z
+             */
+            updated_at: string;
+        };
         PortalLinkResponse: {
             /**
              * Format: password
@@ -29802,6 +29953,16 @@ export interface operations {
         requestBody: {
             content: {
                 "application/json": {
+                    /**
+                     * @description A mutable, non-unique label. Omit to preserve an existing label; null clears it. Labels are never account identifiers.
+                     * @example Acme production
+                     */
+                    account_display_name?: string | null;
+                    /**
+                     * @description A developer-attested provider account identifier, never inferred from a label or credential. Omit to preserve an existing identifier; null clears it.
+                     * @example workspace_123
+                     */
+                    account_identifier?: string | null;
                     /**
                      * @description A [User](/reference/authkit/user) identifier.
                      * @example user_01EHZNVPK3SFK441A1RGBFSHRT
@@ -29824,6 +29985,16 @@ export interface operations {
                      */
                     secret: string;
                 } | {
+                    /**
+                     * @description A mutable, non-unique label. Omit to preserve an existing label; null clears it. Labels are never account identifiers.
+                     * @example Acme production
+                     */
+                    account_display_name?: string | null;
+                    /**
+                     * @description A developer-attested provider account identifier, never inferred from a label or credential. Omit to preserve an existing identifier; null clears it.
+                     * @example workspace_123
+                     */
+                    account_identifier?: string | null;
                     /**
                      * @description A [User](/reference/authkit/user) identifier.
                      * @example user_01EHZNVPK3SFK441A1RGBFSHRT
@@ -29857,6 +30028,16 @@ export interface operations {
                      */
                     connected_account_id: string;
                 } | {
+                    /**
+                     * @description A mutable, non-unique label. Omit to preserve an existing label; null clears it. Labels are never account identifiers.
+                     * @example Acme production
+                     */
+                    account_display_name?: string | null;
+                    /**
+                     * @description A developer-attested provider account identifier, never inferred from a label or credential. Omit to preserve an existing identifier; null clears it.
+                     * @example workspace_123
+                     */
+                    account_identifier?: string | null;
                     /**
                      * @description A [User](/reference/authkit/user) identifier.
                      * @example user_01EHZNVPK3SFK441A1RGBFSHRT
@@ -29898,8 +30079,8 @@ export interface operations {
                      *       "object": "connected_account",
                      *       "id": "data_installation_01EHZNVPK3SFK441A1RGBFSHRT",
                      *       "connection_role": "compatibility",
-                     *       "account_identifier": null,
-                     *       "account_display_name": null,
+                     *       "account_identifier": "workspace_123",
+                     *       "account_display_name": "Acme production",
                      *       "user_id": "user_01EHZNVPK3SFK441A1RGBFSHRT",
                      *       "organization_id": "org_01EHZNVPK3SFK441A1RGBFSHRT",
                      *       "scopes": [],
@@ -29910,7 +30091,7 @@ export interface operations {
                      *       "updated_at": "2024-01-16T14:20:00.000Z"
                      *     }
                      */
-                    "application/json": components["schemas"]["ConnectedAccount"];
+                    "application/json": components["schemas"]["ConnectedAccountWriteResponse"];
                 };
             };
             /** @description Bad Request */
@@ -29920,11 +30101,7 @@ export interface operations {
                 };
                 content: {
                     "application/json": {
-                        /**
-                         * @description A human-readable description of the error.
-                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
-                         */
-                        message: string;
+                        message: string | string[];
                     };
                 };
             };
@@ -30010,6 +30187,16 @@ export interface operations {
         requestBody: {
             content: {
                 "application/json": {
+                    /**
+                     * @description A mutable, non-unique label. Omit to preserve an existing label; null clears it. Labels are never account identifiers.
+                     * @example Acme production
+                     */
+                    account_display_name?: string | null;
+                    /**
+                     * @description A developer-attested provider account identifier, never inferred from a label or credential. Omit to preserve an existing identifier; null clears it.
+                     * @example workspace_123
+                     */
+                    account_identifier?: string | null;
                     /**
                      * @description A [User](/reference/authkit/user) identifier.
                      * @example user_01EHZNVPK3SFK441A1RGBFSHRT
@@ -30052,8 +30239,8 @@ export interface operations {
                      *       "object": "connected_account",
                      *       "id": "data_installation_01EHZNVPK3SFK441A1RGBFSHRT",
                      *       "connection_role": "standard",
-                     *       "account_identifier": null,
-                     *       "account_display_name": null,
+                     *       "account_identifier": "workspace_123",
+                     *       "account_display_name": "Acme production",
                      *       "user_id": "user_01EHZNVPK3SFK441A1RGBFSHRT",
                      *       "organization_id": "org_01EHZNVPK3SFK441A1RGBFSHRT",
                      *       "scopes": [],
@@ -30064,7 +30251,7 @@ export interface operations {
                      *       "updated_at": "2024-01-16T14:20:00.000Z"
                      *     }
                      */
-                    "application/json": components["schemas"]["ConnectedAccount"];
+                    "application/json": components["schemas"]["ConnectedAccountWriteResponse"];
                 };
             };
             /** @description The request is invalid, including a missing `connection_intent: add` or a supplied `connected_account_id`. */
@@ -30074,11 +30261,7 @@ export interface operations {
                 };
                 content: {
                     "application/json": {
-                        /**
-                         * @description A human-readable description of the error.
-                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
-                         */
-                        message: string;
+                        message: string | string[];
                     };
                 };
             };
@@ -30194,6 +30377,11 @@ export interface operations {
         requestBody: {
             content: {
                 "application/json": {
+                    /**
+                     * @description A mutable, non-unique label. Omit to preserve an existing label; null clears it. Labels are never account identifiers.
+                     * @example Acme production
+                     */
+                    account_display_name?: string | null;
                     /**
                      * @description The ID of the user to authorize. When `connection_owner` is `organization`, this is the user authorizing on behalf of the organization; they must be an active member of the organization and do not become the owner of the resulting connected account.
                      * @example user_01EHZNVPK3SFK441A1RGBFSHRT
@@ -30226,6 +30414,11 @@ export interface operations {
                         [key: string]: string;
                     };
                 } | {
+                    /**
+                     * @description A mutable, non-unique label. Omit to preserve an existing label; null clears it. Labels are never account identifiers.
+                     * @example Acme production
+                     */
+                    account_display_name?: string | null;
                     /**
                      * @description The ID of the user to authorize. When `connection_owner` is `organization`, this is the user authorizing on behalf of the organization; they must be an active member of the organization and do not become the owner of the resulting connected account.
                      * @example user_01EHZNVPK3SFK441A1RGBFSHRT
@@ -30264,6 +30457,11 @@ export interface operations {
                      */
                     connection_intent: "add";
                 } | {
+                    /**
+                     * @description A mutable, non-unique label. Omit to preserve an existing label; null clears it. Labels are never account identifiers.
+                     * @example Acme production
+                     */
+                    account_display_name?: string | null;
                     /**
                      * @description The ID of the user to authorize. When `connection_owner` is `organization`, this is the user authorizing on behalf of the organization; they must be an active member of the organization and do not become the owner of the resulting connected account.
                      * @example user_01EHZNVPK3SFK441A1RGBFSHRT
@@ -30326,11 +30524,7 @@ export interface operations {
                 };
                 content: {
                     "application/json": {
-                        /**
-                         * @description A human-readable description of the error.
-                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
-                         */
-                        message: string;
+                        message: string | string[];
                     };
                 };
             };
@@ -30434,6 +30628,16 @@ export interface operations {
         requestBody: {
             content: {
                 "application/json": {
+                    /**
+                     * @description A mutable, non-unique label. Omit to preserve an existing label; null clears it. Labels are never account identifiers.
+                     * @example Acme production
+                     */
+                    account_display_name?: string | null;
+                    /**
+                     * @description A developer-attested provider account identifier, never inferred from a label or credential. Omit to preserve an existing identifier; null clears it.
+                     * @example workspace_123
+                     */
+                    account_identifier?: string | null;
                     /**
                      * @description A [User](/reference/authkit/user) identifier.
                      * @example user_01EHZNVPK3SFK441A1RGBFSHRT
@@ -30470,6 +30674,16 @@ export interface operations {
                         [key: string]: string;
                     };
                 } | {
+                    /**
+                     * @description A mutable, non-unique label. Omit to preserve an existing label; null clears it. Labels are never account identifiers.
+                     * @example Acme production
+                     */
+                    account_display_name?: string | null;
+                    /**
+                     * @description A developer-attested provider account identifier, never inferred from a label or credential. Omit to preserve an existing identifier; null clears it.
+                     * @example workspace_123
+                     */
+                    account_identifier?: string | null;
                     /**
                      * @description A [User](/reference/authkit/user) identifier.
                      * @example user_01EHZNVPK3SFK441A1RGBFSHRT
@@ -30517,6 +30731,16 @@ export interface operations {
                      */
                     connected_account_id: string;
                 } | {
+                    /**
+                     * @description A mutable, non-unique label. Omit to preserve an existing label; null clears it. Labels are never account identifiers.
+                     * @example Acme production
+                     */
+                    account_display_name?: string | null;
+                    /**
+                     * @description A developer-attested provider account identifier, never inferred from a label or credential. Omit to preserve an existing identifier; null clears it.
+                     * @example workspace_123
+                     */
+                    account_identifier?: string | null;
                     /**
                      * @description A [User](/reference/authkit/user) identifier.
                      * @example user_01EHZNVPK3SFK441A1RGBFSHRT
@@ -30572,8 +30796,8 @@ export interface operations {
                      *       "object": "connected_account",
                      *       "id": "data_installation_01EHZNVPK3SFK441A1RGBFSHRT",
                      *       "connection_role": "compatibility",
-                     *       "account_identifier": null,
-                     *       "account_display_name": null,
+                     *       "account_identifier": "workspace_123",
+                     *       "account_display_name": "Acme production",
                      *       "user_id": "user_01EHZNVPK3SFK441A1RGBFSHRT",
                      *       "organization_id": "org_01EHZNVPK3SFK441A1RGBFSHRT",
                      *       "scopes": [],
@@ -30583,7 +30807,7 @@ export interface operations {
                      *       "updated_at": "2024-01-16T14:20:00.000Z"
                      *     }
                      */
-                    "application/json": components["schemas"]["ConnectedAccount"];
+                    "application/json": components["schemas"]["ConnectedAccountWriteResponse"];
                 };
             };
             /** @description Bad Request */
@@ -30593,11 +30817,7 @@ export interface operations {
                 };
                 content: {
                     "application/json": {
-                        /**
-                         * @description A human-readable description of the error.
-                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
-                         */
-                        message: string;
+                        message: string | string[];
                     };
                 };
             };
@@ -30683,6 +30903,16 @@ export interface operations {
         requestBody: {
             content: {
                 "application/json": {
+                    /**
+                     * @description A mutable, non-unique label. Omit to preserve an existing label; null clears it. Labels are never account identifiers.
+                     * @example Acme production
+                     */
+                    account_display_name?: string | null;
+                    /**
+                     * @description A developer-attested provider account identifier, never inferred from a label or credential. Omit to preserve an existing identifier; null clears it.
+                     * @example workspace_123
+                     */
+                    account_identifier?: string | null;
                     /**
                      * @description A [User](/reference/authkit/user) identifier.
                      * @example user_01EHZNVPK3SFK441A1RGBFSHRT
@@ -30739,8 +30969,8 @@ export interface operations {
                      *       "object": "connected_account",
                      *       "id": "data_installation_01EHZNVPK3SFK441A1RGBFSHRT",
                      *       "connection_role": "standard",
-                     *       "account_identifier": null,
-                     *       "account_display_name": null,
+                     *       "account_identifier": "workspace_123",
+                     *       "account_display_name": "Acme production",
                      *       "user_id": "user_01EHZNVPK3SFK441A1RGBFSHRT",
                      *       "organization_id": "org_01EHZNVPK3SFK441A1RGBFSHRT",
                      *       "scopes": [],
@@ -30750,7 +30980,7 @@ export interface operations {
                      *       "updated_at": "2024-01-16T14:20:00.000Z"
                      *     }
                      */
-                    "application/json": components["schemas"]["ConnectedAccount"];
+                    "application/json": components["schemas"]["ConnectedAccountWriteResponse"];
                 };
             };
             /** @description The request is invalid, including a missing `connection_intent: add` or a supplied `connected_account_id`. */
@@ -30760,11 +30990,7 @@ export interface operations {
                 };
                 content: {
                     "application/json": {
-                        /**
-                         * @description A human-readable description of the error.
-                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
-                         */
-                        message: string;
+                        message: string | string[];
                     };
                 };
             };
@@ -34314,7 +34540,7 @@ export interface operations {
                      *       "user_id": null,
                      *       "organization_id": "org_01EHZNVPK3SFK441A1RGBFSHRT",
                      *       "connection_role": "compatibility",
-                     *       "account_identifier": "acme-workspace",
+                     *       "account_identifier": "workspace_123",
                      *       "account_display_name": "Acme production",
                      *       "scopes": [
                      *         "repo",
@@ -34421,7 +34647,7 @@ export interface operations {
                      *       "user_id": null,
                      *       "organization_id": "org_01EHZNVPK3SFK441A1RGBFSHRT",
                      *       "connection_role": "compatibility",
-                     *       "account_identifier": "acme-workspace",
+                     *       "account_identifier": "workspace_123",
                      *       "account_display_name": "Acme production",
                      *       "scopes": [
                      *         "repo",
@@ -34439,7 +34665,7 @@ export interface operations {
                      *       "updated_at": "2024-01-16T14:20:00.000Z"
                      *     }
                      */
-                    "application/json": components["schemas"]["ConnectedAccount"];
+                    "application/json": components["schemas"]["ConnectedAccountWriteResponse"];
                 };
             };
             /** @description The connected account selector is malformed. */
@@ -34570,7 +34796,7 @@ export interface operations {
                      *       "user_id": null,
                      *       "organization_id": "org_01EHZNVPK3SFK441A1RGBFSHRT",
                      *       "connection_role": "compatibility",
-                     *       "account_identifier": "acme-workspace",
+                     *       "account_identifier": "workspace_123",
                      *       "account_display_name": "Acme production",
                      *       "scopes": [
                      *         "repo",
@@ -34588,7 +34814,7 @@ export interface operations {
                      *       "updated_at": "2024-01-16T14:20:00.000Z"
                      *     }
                      */
-                    "application/json": components["schemas"]["ConnectedAccount"];
+                    "application/json": components["schemas"]["ConnectedAccountWriteResponse"];
                 };
             };
             /** @description The request is missing a valid API key. */
@@ -34885,7 +35111,7 @@ export interface operations {
                      *             "user_id": null,
                      *             "organization_id": "org_01EHZNVPK3SFK441A1RGBFSHRT",
                      *             "connection_role": "compatibility",
-                     *             "account_identifier": "acme-workspace",
+                     *             "account_identifier": "workspace_123",
                      *             "account_display_name": "Acme production",
                      *             "scopes": [
                      *               "repo",
@@ -34913,7 +35139,7 @@ export interface operations {
                      *               "user_id": null,
                      *               "organization_id": "org_01EHZNVPK3SFK441A1RGBFSHRT",
                      *               "connection_role": "compatibility",
-                     *               "account_identifier": "acme-workspace",
+                     *               "account_identifier": "workspace_123",
                      *               "account_display_name": "Acme production",
                      *               "scopes": [
                      *                 "repo",
@@ -42050,7 +42276,7 @@ export interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["ConnectedAccount"];
+                    "application/json": components["schemas"]["ConnectedAccountWriteResponse"];
                 };
             };
             /** @description The connected account selector is malformed. */
@@ -42195,7 +42421,7 @@ export interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["ConnectedAccount"];
+                    "application/json": components["schemas"]["ConnectedAccountWriteResponse"];
                 };
             };
             /** @description The request is missing a valid API key. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@workos/openapi-spec",
-  "version": "0.121.0",
+  "version": "0.123.0",
   "type": "module",
   "description": "WorkOS OpenAPI specification, TypeScript types, and SDK resolution policy",
   "license": "MIT",