@workos/openapi-spec 0.122.0 → 0.124.0

package/dist/open-api-spec.yaml

@@ -2302,6 +2302,25 @@ paths:
                         description: The list of records for the current page.
                         items:
                           $ref: '#/components/schemas/AuditLogActionJson'
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '404':
           description: Not Found
           content:
@@ -2359,6 +2378,25 @@ paths:
             application/json:
               schema:
                 $ref: '#/components/schemas/AuditLogSchemaJson'
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '422':
           description: Unprocessable Entity
           content:
@@ -2471,6 +2509,25 @@ paths:
                         description: The list of records for the current page.
                         items:
                           $ref: '#/components/schemas/AuditLogSchemaJson'
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '404':
           description: Not Found
           content:
@@ -2519,10 +2576,6 @@ paths:
         response. We suggest using [v4
         UUIDs](https://en.wikipedia.org/wiki/Universally_unique_identifier) for
         idempotency keys to avoid collisions.
-
-
-        Idempotency keys expire after 24 hours. The API will generate a new
-        response if you submit a request with an expired key.
       operationId: AuditLogEventsController_create
       parameters:
         - name: idempotency-key
@@ -2530,7 +2583,7 @@ paths:
           description: >-
             A unique string to prevent duplicate requests. Each subsequent
             request matching this unique string will return the same response.
-            We suggest using v4 UUIDs. Keys expire after 24 hours.
+            We suggest using v4 UUIDs.
           required: false
           schema:
             type: string
@@ -2599,6 +2652,25 @@ paths:
                 errors:
                   - instancePath: /targets
           description: Bad Request
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '404':
           content:
             application/json:
@@ -2737,6 +2809,25 @@ paths:
               example:
                 message: Invalid date range
                 code: invalid_audit_log_export_range_date
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
       summary: Create Export
       tags:
         - audit-logs
@@ -2769,6 +2860,25 @@ paths:
                 url: https://exports.audit-logs.com/audit-log-exports/export.csv
                 created_at: '2022-09-02T17:14:57.094Z'
                 updated_at: '2022-09-02T17:14:57.094Z'
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '404':
           description: Audit Log Export not found.
           content:
@@ -3346,6 +3456,25 @@ paths:
             application/json:
               schema:
                 $ref: '#/components/schemas/GroupRoleAssignmentList'
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '403':
           description: Forbidden
           content:
@@ -3399,6 +3528,25 @@ paths:
             application/json:
               schema:
                 $ref: '#/components/schemas/GroupRoleAssignment'
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '403':
           description: Forbidden
           content:
@@ -3486,6 +3634,25 @@ paths:
             application/json:
               schema:
                 $ref: '#/components/schemas/GroupRoleAssignmentList'
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '403':
           description: Forbidden
           content:
@@ -3618,6 +3785,25 @@ paths:
             application/json:
               schema:
                 $ref: '#/components/schemas/GroupRoleAssignment'
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '403':
           description: Forbidden
           content:
@@ -3725,6 +3911,25 @@ paths:
             application/json:
               schema:
                 $ref: '#/components/schemas/AuthorizationCheck'
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '403':
           description: Forbidden
           content:
@@ -3911,6 +4116,25 @@ paths:
                 required:
                   - code
                   - message
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '403':
           description: Forbidden
           content:
@@ -4040,6 +4264,25 @@ paths:
             application/json:
               schema:
                 $ref: '#/components/schemas/AuthorizationPermissionList'
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '403':
           description: Forbidden
           content:
@@ -4167,6 +4410,25 @@ paths:
             application/json:
               schema:
                 $ref: '#/components/schemas/AuthorizationPermissionList'
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '403':
           description: Forbidden
           content:
@@ -4300,6 +4562,25 @@ paths:
             application/json:
               schema:
                 $ref: '#/components/schemas/UserRoleAssignmentList'
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '403':
           description: Forbidden
           content:
@@ -4369,6 +4650,25 @@ paths:
                 created_at: '2026-01-15T12:00:00.000Z'
                 updated_at: '2026-01-15T12:00:00.000Z'
           description: Created
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '403':
           description: Forbidden
           content:
@@ -5553,6 +5853,25 @@ paths:
             application/json:
               schema:
                 $ref: '#/components/schemas/AuthorizationResource'
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '403':
           description: Forbidden
           content:
@@ -5700,6 +6019,25 @@ paths:
                 required:
                   - code
                   - message
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '403':
           description: Forbidden
           content:
@@ -6018,6 +6356,25 @@ paths:
                 required:
                   - code
                   - message
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '403':
           description: Forbidden
           content:
@@ -6150,6 +6507,25 @@ paths:
             application/json:
               schema:
                 $ref: '#/components/schemas/UserRoleAssignmentList'
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '403':
           description: Forbidden
           content:
@@ -6679,6 +7055,25 @@ paths:
                 required:
                   - code
                   - message
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '403':
           description: Forbidden
           content:
@@ -6829,6 +7224,25 @@ paths:
                     required:
                       - code
                       - message
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '403':
           description: Forbidden
           content:
@@ -6933,6 +7347,25 @@ paths:
             application/json:
               schema:
                 $ref: '#/components/schemas/AuthorizationResource'
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '403':
           description: Forbidden
           content:
@@ -7079,6 +7512,25 @@ paths:
                 required:
                   - code
                   - message
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '403':
           description: Forbidden
           content:
@@ -7357,6 +7809,25 @@ paths:
                 required:
                   - code
                   - message
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '403':
           description: Forbidden
           content:
@@ -7473,6 +7944,25 @@ paths:
             application/json:
               schema:
                 $ref: '#/components/schemas/UserRoleAssignmentList'
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '403':
           description: Forbidden
           content:
@@ -10816,6 +11306,21 @@ paths:
           schema:
             example: github
             type: string
+        - name: idempotency-key
+          in: header
+          description: >-
+            Makes retries of this explicit add return the connection the first
+            attempt created instead of creating another. Reuse the same key for
+            every retry of one request. A matching retry within 24 hours returns
+            the existing connection; reusing the key for a different owner,
+            integration, or authentication method, or after 24 hours while that
+            connection exists, returns 409 `idempotency_key_conflict`. If that
+            connection was deleted, the key creates a new one. Requests without
+            a key are not retry-safe.
+          required: false
+          schema:
+            type: string
+            example: 0b6c3f0e-7a51-4c3a-9d8e-2f1b5a6c7d80
       requestBody:
         required: true
         content:
@@ -10980,7 +11485,9 @@ paths:
         '409':
           description: >-
             `connected_account_limit_reached` when the provider and owner
-            already have 25 connections.
+            already have 25 connections, or `idempotency_key_conflict` when the
+            `Idempotency-Key` was already used for a different connection
+            request or its replay window has passed.
           content:
             application/json:
               schema:
@@ -10989,9 +11496,11 @@ paths:
                     properties:
                       code:
                         type: string
+                        enum:
+                          - connected_account_limit_reached
+                          - idempotency_key_conflict
                         description: The error code identifying the type of error.
                         example: connected_account_limit_reached
-                        const: connected_account_limit_reached
                       message:
                         type: string
                         description: A human-readable description of the error.
@@ -11722,6 +12231,21 @@ paths:
           schema:
             example: salesforce
             type: string
+        - name: idempotency-key
+          in: header
+          description: >-
+            Makes retries of this explicit add return the connection the first
+            attempt created instead of creating another. Reuse the same key for
+            every retry of one request. A matching retry within 24 hours returns
+            the existing connection; reusing the key for a different owner,
+            integration, or authentication method, or after 24 hours while that
+            connection exists, returns 409 `idempotency_key_conflict`. If that
+            connection was deleted, the key creates a new one. Requests without
+            a key are not retry-safe.
+          required: false
+          schema:
+            type: string
+            example: 0b6c3f0e-7a51-4c3a-9d8e-2f1b5a6c7d80
       requestBody:
         required: true
         content:
@@ -11901,7 +12425,9 @@ paths:
         '409':
           description: >-
             `connected_account_limit_reached` when the provider and owner
-            already have 25 connections.
+            already have 25 connections, or `idempotency_key_conflict` when the
+            `Idempotency-Key` was already used for a different connection
+            request or its replay window has passed.
           content:
             application/json:
               schema:
@@ -11910,9 +12436,11 @@ paths:
                     properties:
                       code:
                         type: string
+                        enum:
+                          - connected_account_limit_reached
+                          - idempotency_key_conflict
                         description: The error code identifying the type of error.
                         example: connected_account_limit_reached
-                        const: connected_account_limit_reached
                       message:
                         type: string
                         description: A human-readable description of the error.
@@ -13944,6 +14472,25 @@ paths:
                     example: 'Organization not found: ''org_01EHQMYV6MBK39QC5PZXHY59C3''.'
                 required:
                   - message
+        '409':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: concurrent_flag_target_update
+                    const: concurrent_flag_target_update
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
       summary: Disable a feature flag
       tags:
         - feature-flags
@@ -14074,6 +14621,25 @@ paths:
                     example: 'Organization not found: ''org_01EHQMYV6MBK39QC5PZXHY59C3''.'
                 required:
                   - message
+        '409':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: concurrent_flag_target_update
+                    const: concurrent_flag_target_update
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
       summary: Enable a feature flag
       tags:
         - feature-flags
@@ -14937,6 +15503,25 @@ paths:
             application/json:
               schema:
                 $ref: '#/components/schemas/AuditLogsRetentionJson'
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '404':
           description: Not Found
           content:
@@ -14977,6 +15562,25 @@ paths:
             application/json:
               schema:
                 $ref: '#/components/schemas/AuditLogsRetentionJson'
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '404':
           description: Not Found
           content:
@@ -16164,6 +16768,8 @@ paths:
                 config:
                   instance_url: https://example.my.salesforce.com
                 state: connected
+                established_by_user_id: user_01EHZNVPK3SFK441A1RGBFSHRT
+                state_reason: null
                 created_at: '2024-01-16T14:20:00.000Z'
                 updated_at: '2024-01-16T14:20:00.000Z'
         '400':
@@ -16341,6 +16947,21 @@ paths:
           schema:
             example: github
             type: string
+        - name: idempotency-key
+          in: header
+          description: >-
+            Makes retries of this explicit add return the connection the first
+            attempt created instead of creating another. Reuse the same key for
+            every retry of one request. A matching retry within 24 hours returns
+            the existing connection; reusing the key for a different owner,
+            integration, or authentication method, or after 24 hours while that
+            connection exists, returns 409 `idempotency_key_conflict`. If that
+            connection was deleted, the key creates a new one. Requests without
+            a key are not retry-safe.
+          required: false
+          schema:
+            type: string
+            example: 0b6c3f0e-7a51-4c3a-9d8e-2f1b5a6c7d80
       requestBody:
         required: true
         content:
@@ -16372,6 +16993,8 @@ paths:
                 config:
                   instance_url: https://example.my.salesforce.com
                 state: connected
+                established_by_user_id: user_01EHZNVPK3SFK441A1RGBFSHRT
+                state_reason: null
                 created_at: '2024-01-16T14:20:00.000Z'
                 updated_at: '2024-01-16T14:20:00.000Z'
         '401':
@@ -16428,9 +17051,11 @@ paths:
         '409':
           description: >-
             The compatibility connection already exists for this organization
-            and integration, or `connected_account_limit_reached` when
+            and integration, `connected_account_limit_reached` when
             `connection_intent: add` would create a standard connection and the
-            owner already has 25 connections.
+            owner already has 25 connections, or `idempotency_key_conflict` when
+            the `Idempotency-Key` was already used for a different connection
+            request or its replay window has passed.
           content:
             application/json:
               schema:
@@ -16439,9 +17064,11 @@ paths:
                     properties:
                       code:
                         type: string
+                        enum:
+                          - connected_account_limit_reached
+                          - idempotency_key_conflict
                         description: The error code identifying the type of error.
                         example: connected_account_limit_reached
-                        const: connected_account_limit_reached
                       message:
                         type: string
                         description: A human-readable description of the error.
@@ -16633,6 +17260,8 @@ paths:
                 config:
                   instance_url: https://example.my.salesforce.com
                 state: connected
+                established_by_user_id: user_01EHZNVPK3SFK441A1RGBFSHRT
+                state_reason: null
                 created_at: '2024-01-16T14:20:00.000Z'
                 updated_at: '2024-01-16T14:20:00.000Z'
         '400':
@@ -16802,6 +17431,8 @@ paths:
                       config:
                         instance_url: https://example.my.salesforce.com
                       state: connected
+                      established_by_user_id: user_01EHZNVPK3SFK441A1RGBFSHRT
+                      state_reason: null
                       created_at: '2024-01-16T14:20:00.000Z'
                       updated_at: '2024-01-16T14:20:00.000Z'
                       userlandUserId: null
@@ -17086,6 +17717,25 @@ paths:
       responses:
         '204':
           description: No Content
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '403':
           description: Forbidden
           content:
@@ -17371,6 +18021,25 @@ paths:
                     example: 'Organization not found: ''org_01EHQMYV6MBK39QC5PZXHY59C3''.'
                 required:
                   - message
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '403':
           description: Forbidden
           content:
@@ -17413,6 +18082,56 @@ paths:
       summary: Generate a Portal Link
       tags:
         - admin-portal
+  /portal/revoke_link:
+    post:
+      description: >-
+        Revokes every Portal Link generated for the given organization with the
+        given `external_user_id`, and immediately ends any Admin Portal sessions
+        that were started from those links. Use this when an admin is
+        deprovisioned from your application: unopened links stop working, and
+        their already-open portal sessions are ended. Only links that were
+        generated with an `external_user_id` can be revoked, so pass one to
+        `generate_link` for every admin you may later need to deprovision.
+      operationId: PortalSessionsController_revokeLink
+      parameters: []
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/RevokeLinkDto'
+      responses:
+        '200':
+          description: OK
+        '404':
+          description: Not Found
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: 'Organization not found: ''org_01EHQMYV6MBK39QC5PZXHY59C3''.'
+                required:
+                  - message
+        '422':
+          description: Unprocessable Entity
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: 'Organization not found: ''org_01EHQMYV6MBK39QC5PZXHY59C3''.'
+                required:
+                  - message
+      summary: Revoke Portal Links
+      tags:
+        - admin-portal
   /radar/attempts:
     post:
       description: Assess a request for risk using the Radar engine and receive a verdict.
@@ -17488,6 +18207,25 @@ paths:
                     example: 'Organization not found: ''org_01EHQMYV6MBK39QC5PZXHY59C3''.'
                 required:
                   - message
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
       summary: Create an attempt
       tags:
         - radar
@@ -17541,6 +18279,25 @@ paths:
                     example: 'Organization not found: ''org_01EHQMYV6MBK39QC5PZXHY59C3''.'
                 required:
                   - message
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '404':
           description: Not Found
           content:
@@ -17629,6 +18386,25 @@ paths:
                     example: 'Organization not found: ''org_01EHQMYV6MBK39QC5PZXHY59C3''.'
                 required:
                   - message
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
       summary: Add an entry to a Radar list
       tags:
         - radar
@@ -20539,6 +21315,25 @@ paths:
                     required:
                       - code
                       - message
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '404':
           description: Not Found
           content:
@@ -20899,6 +21694,25 @@ paths:
                     required:
                       - code
                       - message
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '404':
           description: Not Found
           content:
@@ -25219,6 +26033,21 @@ paths:
           schema:
             example: org_01EHZNVPK3SFK441A1RGBFSHRT
             type: string
+        - name: idempotency-key
+          in: header
+          description: >-
+            Makes retries of this explicit add return the connection the first
+            attempt created instead of creating another. Reuse the same key for
+            every retry of one request. A matching retry within 24 hours returns
+            the existing connection; reusing the key for a different owner,
+            integration, or authentication method, or after 24 hours while that
+            connection exists, returns 409 `idempotency_key_conflict`. If that
+            connection was deleted, the key creates a new one. Requests without
+            a key are not retry-safe.
+          required: false
+          schema:
+            type: string
+            example: 0b6c3f0e-7a51-4c3a-9d8e-2f1b5a6c7d80
       requestBody:
         required: true
         content:
@@ -25273,9 +26102,11 @@ paths:
         '409':
           description: >-
             The compatibility connection already exists for this user,
-            integration, and organization, or `connected_account_limit_reached`
+            integration, and organization, `connected_account_limit_reached`
             when `connection_intent: add` would create a standard connection and
-            the owner already has 25 connections.
+            the owner already has 25 connections, or `idempotency_key_conflict`
+            when the `Idempotency-Key` was already used for a different
+            connection request or its replay window has passed.
           content:
             application/json:
               schema:
@@ -25284,9 +26115,11 @@ paths:
                     properties:
                       code:
                         type: string
+                        enum:
+                          - connected_account_limit_reached
+                          - idempotency_key_conflict
                         description: The error code identifying the type of error.
                         example: connected_account_limit_reached
-                        const: connected_account_limit_reached
                       message:
                         type: string
                         description: A human-readable description of the error.
@@ -25897,6 +26730,25 @@ paths:
                   - updated_at
                   - object
                 x-inline-with-overrides: true
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '404':
           description: Not Found
           content:
@@ -29933,6 +30785,16 @@ components:
           type: string
           description: An [Organization](/reference/organization) identifier.
           example: org_01EHZNVPK3SFK441A1RGBFSHRT
+        external_user_id:
+          type: string
+          minLength: 1
+          maxLength: 255
+          description: >-
+            The ID of the user in your application the link is generated for.
+            The link and any Admin Portal sessions started from it can later be
+            revoked by this ID, for example when that user is deprovisioned from
+            your application.
+          example: user_12345
         intent:
           type: string
           description: |2-
@@ -29967,6 +30829,25 @@ components:
           type: array
       required:
         - organization
+    RevokeLinkDto:
+      type: object
+      properties:
+        organization:
+          type: string
+          description: An [Organization](/reference/organization) identifier.
+          example: org_01EHZNVPK3SFK441A1RGBFSHRT
+        external_user_id:
+          type: string
+          minLength: 1
+          maxLength: 255
+          description: >-
+            The `external_user_id` the Portal Links were generated with for this
+            organization. Every matching link is revoked, along with any Admin
+            Portal sessions started from those links.
+          example: user_12345
+      required:
+        - organization
+        - external_user_id
     SendRadarSmsChallengeDto:
       type: object
       properties:
@@ -31132,6 +32013,14 @@ components:
             - authorization_code
             - urn:ietf:params:oauth:grant-type:token-exchange
           example: authorization_code
+        code_verifier:
+          type: string
+          description: >-
+            The PKCE code verifier matching the `code_challenge` sent with the
+            authorization request. Required when the authorization request
+            included a `code_challenge`. Must be sent in the request body.
+          example: code_verifier_value
+          format: password
         subject_token:
           type: string
           description: >-
@@ -34912,6 +35801,29 @@ components:
             - needs_reauthorization
           description: The state of the connected account.
           example: connected
+        established_by_user_id:
+          type:
+            - string
+            - 'null'
+          description: >-
+            The ID of the User whose authorization established the connected
+            account, or null when it is developer-managed, its establisher is
+            unknown, or the establishing member left the organization.
+            Historical events may omit this field.
+          example: user_01EHZNVPK3SFK441A1RGBFSHRT
+        state_reason:
+          description: >-
+            Why WorkOS put the connected account in its current state, or null
+            when there is no WorkOS-recorded reason.
+            `establishing_member_membership_ended` means the member who
+            established an organization-owned connection is no longer an active
+            member. Additional values may be added. Historical events may omit
+            this field.
+          example: null
+          oneOf:
+            - type: string
+              const: establishing_member_membership_ended
+            - type: 'null'
         created_at:
           format: date-time
           type: string
@@ -47070,9 +47982,40 @@ components:
 
             - `needs_reauthorization`: The user needs to reauthorize the
             connection, typically because required scopes have changed.
+            `state_reason` explains why when WorkOS invalidated the connection
+            itself.
 
             - `disconnected`: The connection has been disconnected.
           example: connected
+        established_by_user_id:
+          type:
+            - string
+            - 'null'
+          description: >-
+            The [User](/reference/authkit/user) whose authorization established
+            this connection. `null` when the connection is developer-managed or
+            its establisher is unknown, and when the establishing member lost
+            access to the organization — in which case `state_reason` is
+            `establishing_member_membership_ended`.
+          example: user_01EHZNVPK3SFK441A1RGBFSHRT
+        state_reason:
+          description: >-
+            Why WorkOS put the connection in its current `state`, or `null` when
+            there is no WorkOS-recorded reason:
+
+            - `establishing_member_membership_ended`: The member who established
+            this organization-owned connection is no longer an active member of
+            the organization, so its credentials were cleared. An organization
+            admin must provide new credentials.
+
+
+            Additional values may be added; treat an unrecognized value as an
+            unknown reason.
+          example: null
+          oneOf:
+            - type: string
+              const: establishing_member_membership_ended
+            - type: 'null'
         created_at:
           type: string
           description: The timestamp when the connection was created.
@@ -47364,11 +48307,44 @@ components:
 
                           - `needs_reauthorization`: The user needs to
                           reauthorize the connection, typically because required
-                          scopes have changed.
+                          scopes have changed. `state_reason` explains why when
+                          WorkOS invalidated the connection itself.
 
                           - `disconnected`: The connection has been
                           disconnected.
                         example: connected
+                      established_by_user_id:
+                        type:
+                          - string
+                          - 'null'
+                        description: >-
+                          The [User](/reference/authkit/user) whose
+                          authorization established this connection. `null` when
+                          the connection is developer-managed or its establisher
+                          is unknown, and when the establishing member lost
+                          access to the organization — in which case
+                          `state_reason` is
+                          `establishing_member_membership_ended`.
+                        example: user_01EHZNVPK3SFK441A1RGBFSHRT
+                      state_reason:
+                        description: >-
+                          Why WorkOS put the connection in its current `state`,
+                          or `null` when there is no WorkOS-recorded reason:
+
+                          - `establishing_member_membership_ended`: The member
+                          who established this organization-owned connection is
+                          no longer an active member of the organization, so its
+                          credentials were cleared. An organization admin must
+                          provide new credentials.
+
+
+                          Additional values may be added; treat an unrecognized
+                          value as an unknown reason.
+                        example: null
+                        oneOf:
+                          - type: string
+                            const: establishing_member_membership_ended
+                          - type: 'null'
                       created_at:
                         type: string
                         description: The timestamp when the connection was created.
@@ -47539,10 +48515,42 @@ components:
 
                         - `needs_reauthorization`: The user needs to reauthorize
                         the connection, typically because required scopes have
-                        changed.
+                        changed. `state_reason` explains why when WorkOS
+                        invalidated the connection itself.
 
                         - `disconnected`: The connection has been disconnected.
                       example: connected
+                    established_by_user_id:
+                      type:
+                        - string
+                        - 'null'
+                      description: >-
+                        The [User](/reference/authkit/user) whose authorization
+                        established this connection. `null` when the connection
+                        is developer-managed or its establisher is unknown, and
+                        when the establishing member lost access to the
+                        organization — in which case `state_reason` is
+                        `establishing_member_membership_ended`.
+                      example: user_01EHZNVPK3SFK441A1RGBFSHRT
+                    state_reason:
+                      description: >-
+                        Why WorkOS put the connection in its current `state`, or
+                        `null` when there is no WorkOS-recorded reason:
+
+                        - `establishing_member_membership_ended`: The member who
+                        established this organization-owned connection is no
+                        longer an active member of the organization, so its
+                        credentials were cleared. An organization admin must
+                        provide new credentials.
+
+
+                        Additional values may be added; treat an unrecognized
+                        value as an unknown reason.
+                      example: null
+                      oneOf:
+                        - type: string
+                          const: establishing_member_membership_ended
+                        - type: 'null'
                     created_at:
                       type: string
                       description: The timestamp when the connection was created.
@@ -47739,9 +48747,40 @@ components:
 
             - `needs_reauthorization`: The user needs to reauthorize the
             connection, typically because required scopes have changed.
+            `state_reason` explains why when WorkOS invalidated the connection
+            itself.
 
             - `disconnected`: The connection has been disconnected.
           example: connected
+        established_by_user_id:
+          type:
+            - string
+            - 'null'
+          description: >-
+            The [User](/reference/authkit/user) whose authorization established
+            this connection. `null` when the connection is developer-managed or
+            its establisher is unknown, and when the establishing member lost
+            access to the organization — in which case `state_reason` is
+            `establishing_member_membership_ended`.
+          example: user_01EHZNVPK3SFK441A1RGBFSHRT
+        state_reason:
+          description: >-
+            Why WorkOS put the connection in its current `state`, or `null` when
+            there is no WorkOS-recorded reason:
+
+            - `establishing_member_membership_ended`: The member who established
+            this organization-owned connection is no longer an active member of
+            the organization, so its credentials were cleared. An organization
+            admin must provide new credentials.
+
+
+            Additional values may be added; treat an unrecognized value as an
+            unknown reason.
+          example: null
+          oneOf:
+            - type: string
+              const: establishing_member_membership_ended
+            - type: 'null'
         created_at:
           type: string
           description: The timestamp when the connection was created.
@@ -47769,8 +48808,7 @@ components:
           type: string
           format: password
           description: An ephemeral link to initiate the Admin Portal.
-          example: >-
-            https://setup.workos.com?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...
+          example: https://setup.workos.com/init?apiToken=01EHZNVPK3SFK441A1RGBFSHRT
       required:
         - link
     RadarChallenge: