@workos/openapi-spec 0.123.0 → 0.125.0

package/dist/open-api-spec.yaml

@@ -2302,6 +2302,25 @@ paths:
                         description: The list of records for the current page.
                         items:
                           $ref: '#/components/schemas/AuditLogActionJson'
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '404':
           description: Not Found
           content:
@@ -2359,6 +2378,25 @@ paths:
             application/json:
               schema:
                 $ref: '#/components/schemas/AuditLogSchemaJson'
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '422':
           description: Unprocessable Entity
           content:
@@ -2471,6 +2509,25 @@ paths:
                         description: The list of records for the current page.
                         items:
                           $ref: '#/components/schemas/AuditLogSchemaJson'
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '404':
           description: Not Found
           content:
@@ -2519,10 +2576,6 @@ paths:
         response. We suggest using [v4
         UUIDs](https://en.wikipedia.org/wiki/Universally_unique_identifier) for
         idempotency keys to avoid collisions.
-
-
-        Idempotency keys expire after 24 hours. The API will generate a new
-        response if you submit a request with an expired key.
       operationId: AuditLogEventsController_create
       parameters:
         - name: idempotency-key
@@ -2530,7 +2583,7 @@ paths:
           description: >-
             A unique string to prevent duplicate requests. Each subsequent
             request matching this unique string will return the same response.
-            We suggest using v4 UUIDs. Keys expire after 24 hours.
+            We suggest using v4 UUIDs.
           required: false
           schema:
             type: string
@@ -2599,6 +2652,25 @@ paths:
                 errors:
                   - instancePath: /targets
           description: Bad Request
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '404':
           content:
             application/json:
@@ -2737,6 +2809,25 @@ paths:
               example:
                 message: Invalid date range
                 code: invalid_audit_log_export_range_date
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
       summary: Create Export
       tags:
         - audit-logs
@@ -2769,6 +2860,25 @@ paths:
                 url: https://exports.audit-logs.com/audit-log-exports/export.csv
                 created_at: '2022-09-02T17:14:57.094Z'
                 updated_at: '2022-09-02T17:14:57.094Z'
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '404':
           description: Audit Log Export not found.
           content:
@@ -3346,6 +3456,25 @@ paths:
             application/json:
               schema:
                 $ref: '#/components/schemas/GroupRoleAssignmentList'
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '403':
           description: Forbidden
           content:
@@ -3399,6 +3528,25 @@ paths:
             application/json:
               schema:
                 $ref: '#/components/schemas/GroupRoleAssignment'
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '403':
           description: Forbidden
           content:
@@ -3486,6 +3634,25 @@ paths:
             application/json:
               schema:
                 $ref: '#/components/schemas/GroupRoleAssignmentList'
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '403':
           description: Forbidden
           content:
@@ -3618,6 +3785,25 @@ paths:
             application/json:
               schema:
                 $ref: '#/components/schemas/GroupRoleAssignment'
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '403':
           description: Forbidden
           content:
@@ -3725,6 +3911,25 @@ paths:
             application/json:
               schema:
                 $ref: '#/components/schemas/AuthorizationCheck'
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '403':
           description: Forbidden
           content:
@@ -3911,6 +4116,25 @@ paths:
                 required:
                   - code
                   - message
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '403':
           description: Forbidden
           content:
@@ -4040,6 +4264,25 @@ paths:
             application/json:
               schema:
                 $ref: '#/components/schemas/AuthorizationPermissionList'
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '403':
           description: Forbidden
           content:
@@ -4167,6 +4410,25 @@ paths:
             application/json:
               schema:
                 $ref: '#/components/schemas/AuthorizationPermissionList'
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '403':
           description: Forbidden
           content:
@@ -4300,6 +4562,25 @@ paths:
             application/json:
               schema:
                 $ref: '#/components/schemas/UserRoleAssignmentList'
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '403':
           description: Forbidden
           content:
@@ -4369,6 +4650,25 @@ paths:
                 created_at: '2026-01-15T12:00:00.000Z'
                 updated_at: '2026-01-15T12:00:00.000Z'
           description: Created
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '403':
           description: Forbidden
           content:
@@ -5553,6 +5853,25 @@ paths:
             application/json:
               schema:
                 $ref: '#/components/schemas/AuthorizationResource'
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '403':
           description: Forbidden
           content:
@@ -5700,6 +6019,25 @@ paths:
                 required:
                   - code
                   - message
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '403':
           description: Forbidden
           content:
@@ -6018,6 +6356,25 @@ paths:
                 required:
                   - code
                   - message
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '403':
           description: Forbidden
           content:
@@ -6150,6 +6507,25 @@ paths:
             application/json:
               schema:
                 $ref: '#/components/schemas/UserRoleAssignmentList'
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '403':
           description: Forbidden
           content:
@@ -6679,6 +7055,25 @@ paths:
                 required:
                   - code
                   - message
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '403':
           description: Forbidden
           content:
@@ -6829,6 +7224,25 @@ paths:
                     required:
                       - code
                       - message
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '403':
           description: Forbidden
           content:
@@ -6933,6 +7347,25 @@ paths:
             application/json:
               schema:
                 $ref: '#/components/schemas/AuthorizationResource'
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '403':
           description: Forbidden
           content:
@@ -7079,6 +7512,25 @@ paths:
                 required:
                   - code
                   - message
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '403':
           description: Forbidden
           content:
@@ -7357,6 +7809,25 @@ paths:
                 required:
                   - code
                   - message
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '403':
           description: Forbidden
           content:
@@ -7473,122 +7944,8 @@ paths:
             application/json:
               schema:
                 $ref: '#/components/schemas/UserRoleAssignmentList'
-        '403':
-          description: Forbidden
-          content:
-            application/json:
-              schema:
-                type: object
-                properties:
-                  message:
-                    type: string
-                    description: A human-readable description of the error.
-                    example: 'Organization not found: ''org_01EHQMYV6MBK39QC5PZXHY59C3''.'
-                required:
-                  - message
-        '404':
-          description: Not Found
-          content:
-            application/json:
-              schema:
-                type: object
-                properties:
-                  message:
-                    type: string
-                    description: A human-readable description of the error.
-                    example: 'Organization not found: ''org_01EHQMYV6MBK39QC5PZXHY59C3''.'
-                required:
-                  - message
-      summary: List role assignments for a resource
-      tags:
-        - authorization
-  /authorization/roles:
-    post:
-      description: Create a new environment role.
-      operationId: AuthorizationRolesController_create
-      parameters: []
-      requestBody:
-        required: true
-        content:
-          application/json:
-            schema:
-              $ref: '#/components/schemas/CreateRoleDto'
-      responses:
-        '201':
-          description: Created
-          content:
-            application/json:
-              schema:
-                type: object
-                properties:
-                  slug:
-                    type: string
-                    description: A unique slug for the role.
-                    example: editor
-                  object:
-                    type: string
-                    description: Distinguishes the role object.
-                    example: role
-                    const: role
-                  id:
-                    type: string
-                    description: Unique identifier of the role.
-                    example: role_01EHQMYV6MBK39QC5PZXHY59C3
-                  name:
-                    type: string
-                    description: A descriptive name for the role.
-                    example: Editor
-                  description:
-                    type:
-                      - string
-                      - 'null'
-                    description: An optional description of the role.
-                    example: Can edit resources
-                  type:
-                    type: string
-                    enum:
-                      - EnvironmentRole
-                      - OrganizationRole
-                    description: >-
-                      Whether the role is scoped to the environment or an
-                      organization (custom role).
-                    example: EnvironmentRole
-                  resource_type_slug:
-                    type: string
-                    description: The slug of the resource type the role is scoped to.
-                    example: organization
-                  permissions:
-                    type: array
-                    items:
-                      type: string
-                    description: The permission slugs assigned to the role.
-                    example:
-                      - posts:read
-                      - posts:write
-                  created_at:
-                    format: date-time
-                    type: string
-                    description: An ISO 8601 timestamp.
-                    example: '2026-01-15T12:00:00.000Z'
-                  updated_at:
-                    format: date-time
-                    type: string
-                    description: An ISO 8601 timestamp.
-                    example: '2026-01-15T12:00:00.000Z'
-                required:
-                  - slug
-                  - object
-                  - id
-                  - name
-                  - description
-                  - type
-                  - resource_type_slug
-                  - permissions
-                  - created_at
-                  - updated_at
-                x-inline-with-overrides: true
-        '400':
-          description: Bad Request
+        '402':
+          description: ''
           content:
             application/json:
               schema:
@@ -7597,8 +7954,141 @@ paths:
                   code:
                     type: string
                     description: The error code identifying the type of error.
-                    example: bad_request
-                    const: bad_request
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
+        '403':
+          description: Forbidden
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: 'Organization not found: ''org_01EHQMYV6MBK39QC5PZXHY59C3''.'
+                required:
+                  - message
+        '404':
+          description: Not Found
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: 'Organization not found: ''org_01EHQMYV6MBK39QC5PZXHY59C3''.'
+                required:
+                  - message
+      summary: List role assignments for a resource
+      tags:
+        - authorization
+  /authorization/roles:
+    post:
+      description: Create a new environment role.
+      operationId: AuthorizationRolesController_create
+      parameters: []
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/CreateRoleDto'
+      responses:
+        '201':
+          description: Created
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  slug:
+                    type: string
+                    description: A unique slug for the role.
+                    example: editor
+                  object:
+                    type: string
+                    description: Distinguishes the role object.
+                    example: role
+                    const: role
+                  id:
+                    type: string
+                    description: Unique identifier of the role.
+                    example: role_01EHQMYV6MBK39QC5PZXHY59C3
+                  name:
+                    type: string
+                    description: A descriptive name for the role.
+                    example: Editor
+                  description:
+                    type:
+                      - string
+                      - 'null'
+                    description: An optional description of the role.
+                    example: Can edit resources
+                  type:
+                    type: string
+                    enum:
+                      - EnvironmentRole
+                      - OrganizationRole
+                    description: >-
+                      Whether the role is scoped to the environment or an
+                      organization (custom role).
+                    example: EnvironmentRole
+                  resource_type_slug:
+                    type: string
+                    description: The slug of the resource type the role is scoped to.
+                    example: organization
+                  permissions:
+                    type: array
+                    items:
+                      type: string
+                    description: The permission slugs assigned to the role.
+                    example:
+                      - posts:read
+                      - posts:write
+                  created_at:
+                    format: date-time
+                    type: string
+                    description: An ISO 8601 timestamp.
+                    example: '2026-01-15T12:00:00.000Z'
+                  updated_at:
+                    format: date-time
+                    type: string
+                    description: An ISO 8601 timestamp.
+                    example: '2026-01-15T12:00:00.000Z'
+                required:
+                  - slug
+                  - object
+                  - id
+                  - name
+                  - description
+                  - type
+                  - resource_type_slug
+                  - permissions
+                  - created_at
+                  - updated_at
+                x-inline-with-overrides: true
+        '400':
+          description: Bad Request
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: bad_request
+                    const: bad_request
                   message:
                     type: string
                     description: A human-readable description of the error.
@@ -10816,6 +11306,21 @@ paths:
           schema:
             example: github
             type: string
+        - name: idempotency-key
+          in: header
+          description: >-
+            Makes retries of this explicit add return the connection the first
+            attempt created instead of creating another. Reuse the same key for
+            every retry of one request. A matching retry within 24 hours returns
+            the existing connection; reusing the key for a different owner,
+            integration, or authentication method, or after 24 hours while that
+            connection exists, returns 409 `idempotency_key_conflict`. If that
+            connection was deleted, the key creates a new one. Requests without
+            a key are not retry-safe.
+          required: false
+          schema:
+            type: string
+            example: 0b6c3f0e-7a51-4c3a-9d8e-2f1b5a6c7d80
       requestBody:
         required: true
         content:
@@ -10980,7 +11485,9 @@ paths:
         '409':
           description: >-
             `connected_account_limit_reached` when the provider and owner
-            already have 25 connections.
+            already have 25 connections, or `idempotency_key_conflict` when the
+            `Idempotency-Key` was already used for a different connection
+            request or its replay window has passed.
           content:
             application/json:
               schema:
@@ -10989,9 +11496,11 @@ paths:
                     properties:
                       code:
                         type: string
+                        enum:
+                          - connected_account_limit_reached
+                          - idempotency_key_conflict
                         description: The error code identifying the type of error.
                         example: connected_account_limit_reached
-                        const: connected_account_limit_reached
                       message:
                         type: string
                         description: A human-readable description of the error.
@@ -11722,6 +12231,21 @@ paths:
           schema:
             example: salesforce
             type: string
+        - name: idempotency-key
+          in: header
+          description: >-
+            Makes retries of this explicit add return the connection the first
+            attempt created instead of creating another. Reuse the same key for
+            every retry of one request. A matching retry within 24 hours returns
+            the existing connection; reusing the key for a different owner,
+            integration, or authentication method, or after 24 hours while that
+            connection exists, returns 409 `idempotency_key_conflict`. If that
+            connection was deleted, the key creates a new one. Requests without
+            a key are not retry-safe.
+          required: false
+          schema:
+            type: string
+            example: 0b6c3f0e-7a51-4c3a-9d8e-2f1b5a6c7d80
       requestBody:
         required: true
         content:
@@ -11901,7 +12425,9 @@ paths:
         '409':
           description: >-
             `connected_account_limit_reached` when the provider and owner
-            already have 25 connections.
+            already have 25 connections, or `idempotency_key_conflict` when the
+            `Idempotency-Key` was already used for a different connection
+            request or its replay window has passed.
           content:
             application/json:
               schema:
@@ -11910,9 +12436,11 @@ paths:
                     properties:
                       code:
                         type: string
+                        enum:
+                          - connected_account_limit_reached
+                          - idempotency_key_conflict
                         description: The error code identifying the type of error.
                         example: connected_account_limit_reached
-                        const: connected_account_limit_reached
                       message:
                         type: string
                         description: A human-readable description of the error.
@@ -13944,6 +14472,25 @@ paths:
                     example: 'Organization not found: ''org_01EHQMYV6MBK39QC5PZXHY59C3''.'
                 required:
                   - message
+        '409':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: concurrent_flag_target_update
+                    const: concurrent_flag_target_update
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
       summary: Disable a feature flag
       tags:
         - feature-flags
@@ -14074,6 +14621,25 @@ paths:
                     example: 'Organization not found: ''org_01EHQMYV6MBK39QC5PZXHY59C3''.'
                 required:
                   - message
+        '409':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: concurrent_flag_target_update
+                    const: concurrent_flag_target_update
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
       summary: Enable a feature flag
       tags:
         - feature-flags
@@ -14937,6 +15503,25 @@ paths:
             application/json:
               schema:
                 $ref: '#/components/schemas/AuditLogsRetentionJson'
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '404':
           description: Not Found
           content:
@@ -14977,6 +15562,25 @@ paths:
             application/json:
               schema:
                 $ref: '#/components/schemas/AuditLogsRetentionJson'
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '404':
           description: Not Found
           content:
@@ -16164,6 +16768,8 @@ paths:
                 config:
                   instance_url: https://example.my.salesforce.com
                 state: connected
+                established_by_user_id: user_01EHZNVPK3SFK441A1RGBFSHRT
+                state_reason: null
                 created_at: '2024-01-16T14:20:00.000Z'
                 updated_at: '2024-01-16T14:20:00.000Z'
         '400':
@@ -16341,6 +16947,21 @@ paths:
           schema:
             example: github
             type: string
+        - name: idempotency-key
+          in: header
+          description: >-
+            Makes retries of this explicit add return the connection the first
+            attempt created instead of creating another. Reuse the same key for
+            every retry of one request. A matching retry within 24 hours returns
+            the existing connection; reusing the key for a different owner,
+            integration, or authentication method, or after 24 hours while that
+            connection exists, returns 409 `idempotency_key_conflict`. If that
+            connection was deleted, the key creates a new one. Requests without
+            a key are not retry-safe.
+          required: false
+          schema:
+            type: string
+            example: 0b6c3f0e-7a51-4c3a-9d8e-2f1b5a6c7d80
       requestBody:
         required: true
         content:
@@ -16372,6 +16993,8 @@ paths:
                 config:
                   instance_url: https://example.my.salesforce.com
                 state: connected
+                established_by_user_id: user_01EHZNVPK3SFK441A1RGBFSHRT
+                state_reason: null
                 created_at: '2024-01-16T14:20:00.000Z'
                 updated_at: '2024-01-16T14:20:00.000Z'
         '401':
@@ -16428,9 +17051,11 @@ paths:
         '409':
           description: >-
             The compatibility connection already exists for this organization
-            and integration, or `connected_account_limit_reached` when
+            and integration, `connected_account_limit_reached` when
             `connection_intent: add` would create a standard connection and the
-            owner already has 25 connections.
+            owner already has 25 connections, or `idempotency_key_conflict` when
+            the `Idempotency-Key` was already used for a different connection
+            request or its replay window has passed.
           content:
             application/json:
               schema:
@@ -16439,9 +17064,11 @@ paths:
                     properties:
                       code:
                         type: string
+                        enum:
+                          - connected_account_limit_reached
+                          - idempotency_key_conflict
                         description: The error code identifying the type of error.
                         example: connected_account_limit_reached
-                        const: connected_account_limit_reached
                       message:
                         type: string
                         description: A human-readable description of the error.
@@ -16633,6 +17260,8 @@ paths:
                 config:
                   instance_url: https://example.my.salesforce.com
                 state: connected
+                established_by_user_id: user_01EHZNVPK3SFK441A1RGBFSHRT
+                state_reason: null
                 created_at: '2024-01-16T14:20:00.000Z'
                 updated_at: '2024-01-16T14:20:00.000Z'
         '400':
@@ -16802,6 +17431,8 @@ paths:
                       config:
                         instance_url: https://example.my.salesforce.com
                       state: connected
+                      established_by_user_id: user_01EHZNVPK3SFK441A1RGBFSHRT
+                      state_reason: null
                       created_at: '2024-01-16T14:20:00.000Z'
                       updated_at: '2024-01-16T14:20:00.000Z'
                       userlandUserId: null
@@ -17086,6 +17717,25 @@ paths:
       responses:
         '204':
           description: No Content
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '403':
           description: Forbidden
           content:
@@ -17371,6 +18021,25 @@ paths:
                     example: 'Organization not found: ''org_01EHQMYV6MBK39QC5PZXHY59C3''.'
                 required:
                   - message
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '403':
           description: Forbidden
           content:
@@ -17413,6 +18082,56 @@ paths:
       summary: Generate a Portal Link
       tags:
         - admin-portal
+  /portal/revoke_link:
+    post:
+      description: >-
+        Revokes every Portal Link generated for the given organization with the
+        given `external_user_id`, and immediately ends any Admin Portal sessions
+        that were started from those links. Use this when an admin is
+        deprovisioned from your application: unopened links stop working, and
+        their already-open portal sessions are ended. Only links that were
+        generated with an `external_user_id` can be revoked, so pass one to
+        `generate_link` for every admin you may later need to deprovision.
+      operationId: PortalSessionsController_revokeLink
+      parameters: []
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/RevokeLinkDto'
+      responses:
+        '200':
+          description: OK
+        '404':
+          description: Not Found
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: 'Organization not found: ''org_01EHQMYV6MBK39QC5PZXHY59C3''.'
+                required:
+                  - message
+        '422':
+          description: Unprocessable Entity
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: 'Organization not found: ''org_01EHQMYV6MBK39QC5PZXHY59C3''.'
+                required:
+                  - message
+      summary: Revoke Portal Links
+      tags:
+        - admin-portal
   /radar/attempts:
     post:
       description: Assess a request for risk using the Radar engine and receive a verdict.
@@ -17488,6 +18207,25 @@ paths:
                     example: 'Organization not found: ''org_01EHQMYV6MBK39QC5PZXHY59C3''.'
                 required:
                   - message
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
       summary: Create an attempt
       tags:
         - radar
@@ -17541,6 +18279,25 @@ paths:
                     example: 'Organization not found: ''org_01EHQMYV6MBK39QC5PZXHY59C3''.'
                 required:
                   - message
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '404':
           description: Not Found
           content:
@@ -17629,6 +18386,25 @@ paths:
                     example: 'Organization not found: ''org_01EHQMYV6MBK39QC5PZXHY59C3''.'
                 required:
                   - message
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
       summary: Add an entry to a Radar list
       tags:
         - radar
@@ -19514,6 +20290,20 @@ paths:
                     required:
                       - code
                       - message
+                  - type: object
+                    properties:
+                      code:
+                        type: string
+                        description: The error code identifying the type of error.
+                        example: policy_denied
+                        const: policy_denied
+                      message:
+                        type: string
+                        description: A human-readable description of the error.
+                        example: Request could not be processed.
+                    required:
+                      - code
+                      - message
         '404':
           description: Not Found
           content:
@@ -20539,6 +21329,25 @@ paths:
                     required:
                       - code
                       - message
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '404':
           description: Not Found
           content:
@@ -20899,6 +21708,25 @@ paths:
                     required:
                       - code
                       - message
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '404':
           description: Not Found
           content:
@@ -21254,6 +22082,25 @@ paths:
                     required:
                       - code
                       - message
+        '403':
+          description: Forbidden
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: policy_denied
+                    const: policy_denied
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '422':
           description: Unprocessable Entity
           content:
@@ -23198,6 +24045,25 @@ paths:
                     required:
                       - code
                       - message
+        '403':
+          description: Forbidden
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: policy_denied
+                    const: policy_denied
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '404':
           description: Not Found
           content:
@@ -25219,6 +26085,21 @@ paths:
           schema:
             example: org_01EHZNVPK3SFK441A1RGBFSHRT
             type: string
+        - name: idempotency-key
+          in: header
+          description: >-
+            Makes retries of this explicit add return the connection the first
+            attempt created instead of creating another. Reuse the same key for
+            every retry of one request. A matching retry within 24 hours returns
+            the existing connection; reusing the key for a different owner,
+            integration, or authentication method, or after 24 hours while that
+            connection exists, returns 409 `idempotency_key_conflict`. If that
+            connection was deleted, the key creates a new one. Requests without
+            a key are not retry-safe.
+          required: false
+          schema:
+            type: string
+            example: 0b6c3f0e-7a51-4c3a-9d8e-2f1b5a6c7d80
       requestBody:
         required: true
         content:
@@ -25273,9 +26154,11 @@ paths:
         '409':
           description: >-
             The compatibility connection already exists for this user,
-            integration, and organization, or `connected_account_limit_reached`
+            integration, and organization, `connected_account_limit_reached`
             when `connection_intent: add` would create a standard connection and
-            the owner already has 25 connections.
+            the owner already has 25 connections, or `idempotency_key_conflict`
+            when the `Idempotency-Key` was already used for a different
+            connection request or its replay window has passed.
           content:
             application/json:
               schema:
@@ -25284,9 +26167,11 @@ paths:
                     properties:
                       code:
                         type: string
+                        enum:
+                          - connected_account_limit_reached
+                          - idempotency_key_conflict
                         description: The error code identifying the type of error.
                         example: connected_account_limit_reached
-                        const: connected_account_limit_reached
                       message:
                         type: string
                         description: A human-readable description of the error.
@@ -25897,6 +26782,25 @@ paths:
                   - updated_at
                   - object
                 x-inline-with-overrides: true
+        '402':
+          description: ''
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  code:
+                    type: string
+                    description: The error code identifying the type of error.
+                    example: production_feature_requires_billing
+                    const: production_feature_requires_billing
+                  message:
+                    type: string
+                    description: A human-readable description of the error.
+                    example: Request could not be processed.
+                required:
+                  - code
+                  - message
         '404':
           description: Not Found
           content:
@@ -29933,6 +30837,16 @@ components:
           type: string
           description: An [Organization](/reference/organization) identifier.
           example: org_01EHZNVPK3SFK441A1RGBFSHRT
+        external_user_id:
+          type: string
+          minLength: 1
+          maxLength: 255
+          description: >-
+            The ID of the user in your application the link is generated for.
+            The link and any Admin Portal sessions started from it can later be
+            revoked by this ID, for example when that user is deprovisioned from
+            your application.
+          example: user_12345
         intent:
           type: string
           description: |2-
@@ -29967,6 +30881,25 @@ components:
           type: array
       required:
         - organization
+    RevokeLinkDto:
+      type: object
+      properties:
+        organization:
+          type: string
+          description: An [Organization](/reference/organization) identifier.
+          example: org_01EHZNVPK3SFK441A1RGBFSHRT
+        external_user_id:
+          type: string
+          minLength: 1
+          maxLength: 255
+          description: >-
+            The `external_user_id` the Portal Links were generated with for this
+            organization. Every matching link is revoked, along with any Admin
+            Portal sessions started from those links.
+          example: user_12345
+      required:
+        - organization
+        - external_user_id
     SendRadarSmsChallengeDto:
       type: object
       properties:
@@ -34920,6 +35853,29 @@ components:
             - needs_reauthorization
           description: The state of the connected account.
           example: connected
+        established_by_user_id:
+          type:
+            - string
+            - 'null'
+          description: >-
+            The ID of the User whose authorization established the connected
+            account, or null when it is developer-managed, its establisher is
+            unknown, or the establishing member left the organization.
+            Historical events may omit this field.
+          example: user_01EHZNVPK3SFK441A1RGBFSHRT
+        state_reason:
+          description: >-
+            Why WorkOS put the connected account in its current state, or null
+            when there is no WorkOS-recorded reason.
+            `establishing_member_membership_ended` means the member who
+            established an organization-owned connection is no longer an active
+            member. Additional values may be added. Historical events may omit
+            this field.
+          example: null
+          oneOf:
+            - type: string
+              const: establishing_member_membership_ended
+            - type: 'null'
         created_at:
           format: date-time
           type: string
@@ -47078,9 +48034,40 @@ components:
 
             - `needs_reauthorization`: The user needs to reauthorize the
             connection, typically because required scopes have changed.
+            `state_reason` explains why when WorkOS invalidated the connection
+            itself.
 
             - `disconnected`: The connection has been disconnected.
           example: connected
+        established_by_user_id:
+          type:
+            - string
+            - 'null'
+          description: >-
+            The [User](/reference/authkit/user) whose authorization established
+            this connection. `null` when the connection is developer-managed or
+            its establisher is unknown, and when the establishing member lost
+            access to the organization — in which case `state_reason` is
+            `establishing_member_membership_ended`.
+          example: user_01EHZNVPK3SFK441A1RGBFSHRT
+        state_reason:
+          description: >-
+            Why WorkOS put the connection in its current `state`, or `null` when
+            there is no WorkOS-recorded reason:
+
+            - `establishing_member_membership_ended`: The member who established
+            this organization-owned connection is no longer an active member of
+            the organization, so its credentials were cleared. An organization
+            admin must provide new credentials.
+
+
+            Additional values may be added; treat an unrecognized value as an
+            unknown reason.
+          example: null
+          oneOf:
+            - type: string
+              const: establishing_member_membership_ended
+            - type: 'null'
         created_at:
           type: string
           description: The timestamp when the connection was created.
@@ -47372,11 +48359,44 @@ components:
 
                           - `needs_reauthorization`: The user needs to
                           reauthorize the connection, typically because required
-                          scopes have changed.
+                          scopes have changed. `state_reason` explains why when
+                          WorkOS invalidated the connection itself.
 
                           - `disconnected`: The connection has been
                           disconnected.
                         example: connected
+                      established_by_user_id:
+                        type:
+                          - string
+                          - 'null'
+                        description: >-
+                          The [User](/reference/authkit/user) whose
+                          authorization established this connection. `null` when
+                          the connection is developer-managed or its establisher
+                          is unknown, and when the establishing member lost
+                          access to the organization — in which case
+                          `state_reason` is
+                          `establishing_member_membership_ended`.
+                        example: user_01EHZNVPK3SFK441A1RGBFSHRT
+                      state_reason:
+                        description: >-
+                          Why WorkOS put the connection in its current `state`,
+                          or `null` when there is no WorkOS-recorded reason:
+
+                          - `establishing_member_membership_ended`: The member
+                          who established this organization-owned connection is
+                          no longer an active member of the organization, so its
+                          credentials were cleared. An organization admin must
+                          provide new credentials.
+
+
+                          Additional values may be added; treat an unrecognized
+                          value as an unknown reason.
+                        example: null
+                        oneOf:
+                          - type: string
+                            const: establishing_member_membership_ended
+                          - type: 'null'
                       created_at:
                         type: string
                         description: The timestamp when the connection was created.
@@ -47547,10 +48567,42 @@ components:
 
                         - `needs_reauthorization`: The user needs to reauthorize
                         the connection, typically because required scopes have
-                        changed.
+                        changed. `state_reason` explains why when WorkOS
+                        invalidated the connection itself.
 
                         - `disconnected`: The connection has been disconnected.
                       example: connected
+                    established_by_user_id:
+                      type:
+                        - string
+                        - 'null'
+                      description: >-
+                        The [User](/reference/authkit/user) whose authorization
+                        established this connection. `null` when the connection
+                        is developer-managed or its establisher is unknown, and
+                        when the establishing member lost access to the
+                        organization — in which case `state_reason` is
+                        `establishing_member_membership_ended`.
+                      example: user_01EHZNVPK3SFK441A1RGBFSHRT
+                    state_reason:
+                      description: >-
+                        Why WorkOS put the connection in its current `state`, or
+                        `null` when there is no WorkOS-recorded reason:
+
+                        - `establishing_member_membership_ended`: The member who
+                        established this organization-owned connection is no
+                        longer an active member of the organization, so its
+                        credentials were cleared. An organization admin must
+                        provide new credentials.
+
+
+                        Additional values may be added; treat an unrecognized
+                        value as an unknown reason.
+                      example: null
+                      oneOf:
+                        - type: string
+                          const: establishing_member_membership_ended
+                        - type: 'null'
                     created_at:
                       type: string
                       description: The timestamp when the connection was created.
@@ -47747,9 +48799,40 @@ components:
 
             - `needs_reauthorization`: The user needs to reauthorize the
             connection, typically because required scopes have changed.
+            `state_reason` explains why when WorkOS invalidated the connection
+            itself.
 
             - `disconnected`: The connection has been disconnected.
           example: connected
+        established_by_user_id:
+          type:
+            - string
+            - 'null'
+          description: >-
+            The [User](/reference/authkit/user) whose authorization established
+            this connection. `null` when the connection is developer-managed or
+            its establisher is unknown, and when the establishing member lost
+            access to the organization — in which case `state_reason` is
+            `establishing_member_membership_ended`.
+          example: user_01EHZNVPK3SFK441A1RGBFSHRT
+        state_reason:
+          description: >-
+            Why WorkOS put the connection in its current `state`, or `null` when
+            there is no WorkOS-recorded reason:
+
+            - `establishing_member_membership_ended`: The member who established
+            this organization-owned connection is no longer an active member of
+            the organization, so its credentials were cleared. An organization
+            admin must provide new credentials.
+
+
+            Additional values may be added; treat an unrecognized value as an
+            unknown reason.
+          example: null
+          oneOf:
+            - type: string
+              const: establishing_member_membership_ended
+            - type: 'null'
         created_at:
           type: string
           description: The timestamp when the connection was created.
@@ -47777,8 +48860,7 @@ components:
           type: string
           format: password
           description: An ephemeral link to initiate the Admin Portal.
-          example: >-
-            https://setup.workos.com?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...
+          example: https://setup.workos.com/init?apiToken=01EHZNVPK3SFK441A1RGBFSHRT
       required:
         - link
     RadarChallenge: