@workos/openapi-spec 0.18.0 → 0.20.0

package/dist/types.d.ts

@@ -1053,6 +1053,58 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/data-integrations": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List data integrations
+         * @description Lists the environment's data integrations configured with `custom` or `organization` credentials, including custom providers.
+         */
+        get: operations["DataIntegrationsManagementController_listDataIntegrations"];
+        put?: never;
+        /**
+         * Create a data integration
+         * @description Creates a data integration for a provider. Set `credentials.type` to `custom` to use your own OAuth app credentials, or `organization` to have each organization supply its own. For a built-in provider, pass its slug as `provider`. For a custom provider, pass a new slug plus a `custom_provider` definition.
+         */
+        post: operations["DataIntegrationsManagementController_createDataIntegration"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/data-integrations/{slug}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get a data integration
+         * @description Retrieves a data integration by its slug.
+         */
+        get: operations["DataIntegrationsManagementController_getDataIntegration"];
+        /**
+         * Update a data integration
+         * @description Updates the description, enabled state, or custom credentials of a data integration. For custom providers, `custom_provider` updates the OAuth definition.
+         */
+        put: operations["DataIntegrationsManagementController_updateDataIntegration"];
+        post?: never;
+        /**
+         * Delete a data integration
+         * @description Deletes a data integration and all of its connected installations. For a custom provider, also deletes the custom provider definition.
+         */
+        delete: operations["DataIntegrationsManagementController_deleteDataIntegration"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/data-integrations/{slug}/api-key": {
         parameters: {
             query?: never;
@@ -2423,6 +2475,26 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/user_management/radar_challenges": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Send a Radar SMS challenge
+         * @description Sends a one-time verification code over SMS to a user as part of a Radar challenge. Use the returned `verification_id` to authenticate the user with the `urn:workos:oauth:grant-type:radar-sms-challenge:code` grant type.
+         */
+        post: operations["PublicRadarChallengesController_sendRadarSmsChallenge"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/user_management/redirect_uris": {
         parameters: {
             query?: never;
@@ -2775,8 +2847,16 @@ export interface paths {
          * @description Retrieves a user's [connected account](/reference/pipes/connected-account) for a specific provider.
          */
         get: operations["DataIntegrationsUserManagementController_getUserDataInstallation"];
-        put?: never;
-        post?: never;
+        /**
+         * Update a connected account
+         * @description Updates a user's [connected account](/reference/pipes/connected-account) tokens, scopes, or state for a specific provider.
+         */
+        put: operations["DataIntegrationsUserManagementController_updateUserDataInstallation"];
+        /**
+         * Import a connected account
+         * @description Imports a [connected account](/reference/pipes/connected-account) for a user by providing OAuth tokens directly. Use this to migrate existing connections or set up connections without going through the OAuth flow.
+         */
+        post: operations["DataIntegrationsUserManagementController_createUserDataInstallation"];
         /**
          * Delete a connected account
          * @description Disconnects WorkOS's account for the user, including removing any stored access and refresh tokens. The user will need to reauthorize if they want to reconnect. This does not revoke access on the provider side.
@@ -4037,6 +4117,239 @@ export interface components {
              */
             external_id?: string | null;
         };
+        DataIntegrationCredentialsDto: {
+            /**
+             * @description The credentials type. `custom` uses your own OAuth app credentials; `organization` has each organization supply its own credentials (configured per-organization).
+             * @example custom
+             * @enum {string}
+             */
+            type: "custom" | "organization";
+            /**
+             * @description OAuth client ID for the provider app. Required when `type` is `custom`; omit for `organization`.
+             * @example Iv1.abc123
+             */
+            client_id?: string;
+            /**
+             * @description OAuth client secret for the provider app. Required when `type` is `custom`; omit for `organization`.
+             * @example secret_…
+             */
+            client_secret?: string;
+        };
+        CustomProviderDefinitionDto: {
+            /**
+             * @description A descriptive name for the custom provider.
+             * @example My OAuth App
+             */
+            name: string;
+            /**
+             * Format: uri
+             * @description The provider's OAuth authorization endpoint.
+             * @example https://provider.example.com/oauth/authorize
+             */
+            authorization_url: string;
+            /**
+             * Format: uri
+             * @description The provider's OAuth token endpoint.
+             * @example https://provider.example.com/oauth/token
+             */
+            token_url: string;
+            /**
+             * Format: uri
+             * @description The endpoint used to refresh tokens, if different from the token endpoint.
+             * @example https://provider.example.com/oauth/token
+             */
+            refresh_token_url?: string | null;
+            /**
+             * @description Whether PKCE is used during the authorization code flow. Defaults to `true`.
+             * @example true
+             */
+            pkce_enabled?: boolean;
+            /**
+             * @description The separator used to join requested scopes. Defaults to a space.
+             * @example
+             */
+            request_scope_separator?: string;
+            /**
+             * @description Whether at least one scope must be selected when connecting an account. Defaults to `false`.
+             * @example false
+             */
+            scopes_required?: boolean;
+            /**
+             * @description Whether a client secret is required for this provider. Defaults to `true`.
+             * @example true
+             */
+            client_secret_required?: boolean;
+            /**
+             * @description Additional static query parameters appended to the authorization request.
+             * @example {
+             *       "prompt": "consent"
+             *     }
+             */
+            additional_authorization_parameters?: {
+                [key: string]: string;
+            };
+            /**
+             * @description The Content-Type used when exchanging the token request.
+             * @example application/x-www-form-urlencoded
+             */
+            token_body_content_type?: string;
+            /**
+             * @description How client credentials are sent when exchanging authorization codes and refreshing tokens.
+             * @example request_body
+             * @enum {string}
+             */
+            authenticate_via?: "request_body" | "basic_auth_header";
+        };
+        CreateDataIntegrationDto: {
+            /**
+             * @description The provider to create a Data Integration for. For a built-in provider use its slug (e.g. `github`, `slack`). For a custom provider, this is the new provider slug and `custom_provider` must be supplied. A custom provider slug cannot shadow an existing global provider slug.
+             * @example github
+             */
+            provider: string;
+            /**
+             * @description An optional description of the Data Integration.
+             * @example Production GitHub app
+             */
+            description?: string | null;
+            /**
+             * @description Whether the Data Integration is enabled. Defaults to `false`.
+             * @example true
+             */
+            enabled?: boolean;
+            /**
+             * @description The OAuth scopes to request for the Data Integration. Defaults to the provider's configured scopes when omitted.
+             * @example [
+             *       "repo",
+             *       "read:org"
+             *     ]
+             */
+            scopes?: string[] | null;
+            /** @description The credentials to configure for the Data Integration. Required for both built-in and custom providers. */
+            credentials?: components["schemas"]["DataIntegrationCredentialsDto"];
+            /** @description The OAuth definition for a custom provider. Supply this to define a custom provider; omit it to create an integration for a built-in provider. */
+            custom_provider?: components["schemas"]["CustomProviderDefinitionDto"];
+        };
+        UpdateCustomProviderDefinitionDto: {
+            /**
+             * @description A descriptive name for the custom provider.
+             * @example My OAuth App
+             */
+            name?: string;
+            /**
+             * Format: uri
+             * @description The provider's OAuth authorization endpoint.
+             * @example https://provider.example.com/oauth/authorize
+             */
+            authorization_url?: string;
+            /**
+             * Format: uri
+             * @description The provider's OAuth token endpoint.
+             * @example https://provider.example.com/oauth/token
+             */
+            token_url?: string;
+            /**
+             * Format: uri
+             * @description The endpoint used to refresh tokens, if different from the token endpoint.
+             * @example https://provider.example.com/oauth/token
+             */
+            refresh_token_url?: string | null;
+            /**
+             * @description Whether PKCE is used during the authorization code flow.
+             * @example true
+             */
+            pkce_enabled?: boolean;
+            /**
+             * @description The separator used to join requested scopes.
+             * @example
+             */
+            request_scope_separator?: string;
+            /**
+             * @description Whether at least one scope must be selected when connecting an account.
+             * @example false
+             */
+            scopes_required?: boolean;
+            /**
+             * @description Whether a client secret is required for this provider.
+             * @example true
+             */
+            client_secret_required?: boolean;
+            /**
+             * @description Additional static query parameters appended to the authorization request.
+             * @example {
+             *       "prompt": "consent"
+             *     }
+             */
+            additional_authorization_parameters?: {
+                [key: string]: string;
+            };
+            /**
+             * @description The Content-Type used when exchanging the token request.
+             * @example application/x-www-form-urlencoded
+             */
+            token_body_content_type?: string;
+            /**
+             * @description How client credentials are sent when exchanging authorization codes and refreshing tokens.
+             * @example request_body
+             * @enum {string}
+             */
+            authenticate_via?: "request_body" | "basic_auth_header";
+        };
+        UpdateDataIntegrationDto: {
+            /**
+             * @description An optional description of the Data Integration.
+             * @example Production GitHub app
+             */
+            description?: string | null;
+            /**
+             * @description Whether the Data Integration is enabled.
+             * @example true
+             */
+            enabled?: boolean;
+            /**
+             * @description The OAuth scopes to request for the Data Integration. Pass `null` to reset to the provider's configured scopes.
+             * @example [
+             *       "repo",
+             *       "read:org"
+             *     ]
+             */
+            scopes?: string[] | null;
+            /** @description New credentials for the Data Integration. When provided, rotates the stored client secret. */
+            credentials?: components["schemas"]["DataIntegrationCredentialsDto"];
+            /** @description Updates to a custom provider's OAuth definition. Only valid for custom-provider integrations. */
+            custom_provider?: components["schemas"]["UpdateCustomProviderDefinitionDto"];
+        };
+        ConnectedAccountDto: {
+            /**
+             * @description The OAuth access token for the connected account.
+             * @example gho_16C7e42F292c6912E7710c838347Ae178B4a
+             */
+            access_token?: string;
+            /**
+             * @description The OAuth refresh token for the connected account.
+             * @example ghr_xxxxxxxxxxxxxxxxxxxx
+             */
+            refresh_token?: string;
+            /**
+             * Format: date-time
+             * @description The ISO-8601 timestamp when the access token expires. Required when `access_token` is provided for tokens that expire.
+             * @example 2025-12-31T23:59:59.000Z
+             */
+            expires_at?: string;
+            /**
+             * @description The OAuth scopes granted for this connection.
+             * @example [
+             *       "repo",
+             *       "user:email"
+             *     ]
+             */
+            scopes?: string[];
+            /**
+             * @description Explicitly set the state of the connected account. When omitted, the state is derived from the token combination provided.
+             * @example connected
+             * @enum {string}
+             */
+            state?: "connected" | "needs_reauthorization";
+        };
         GenerateLinkDto: {
             /**
              * @description The URL to go to when an admin clicks on your logo in the Admin Portal. If not specified, the return URL configured on the [Redirects](https://dashboard.workos.com/redirects) page will be used.
@@ -4074,6 +4387,33 @@ export interface components {
              */
             it_contact_emails?: string[];
         };
+        SendRadarSmsChallengeDto: {
+            /**
+             * @description The ID of the user to send the SMS challenge to.
+             * @example user_01E4ZCR3C56J083X43JQXF3JK5
+             */
+            user_id: string;
+            /**
+             * @description The pending authentication token from a previous authentication attempt that triggered the Radar challenge.
+             * @example cTDQJTTkTkkVYxbn...
+             */
+            pending_authentication_token: string;
+            /**
+             * @description The phone number to send the SMS verification code to.
+             * @example +15555550123
+             */
+            phone_number: string;
+            /**
+             * @description The IP address of the user's request.
+             * @example 203.0.113.42
+             */
+            ip_address?: string;
+            /**
+             * @description The user agent string from the user's request.
+             * @example Mozilla/5.0
+             */
+            user_agent?: string;
+        };
         CreateRedirectUriDto: {
             /**
              * @description The redirect URI to create.
@@ -4116,6 +4456,26 @@ export interface components {
              * @example Z1Y2X3W4V5U6T7S8R9Q0P1O2N3
              */
             invitation_token?: string;
+            /**
+             * @description The IP address of the user's request.
+             * @example 203.0.113.42
+             */
+            ip_address?: string;
+            /**
+             * @description The user agent string from the user's request.
+             * @example Mozilla/5.0
+             */
+            user_agent?: string;
+            /**
+             * @description The ID of an existing Radar authentication attempt to associate with this request.
+             * @example radar_auth_attempt_01HXYZ123456789ABCDEFGHIJ
+             */
+            radar_auth_attempt_id?: string;
+            /**
+             * @description An optional Radar signals ID to correlate client-side signals with this request.
+             * @example 01JBS0GN92GC2RJQS4X9DBPQ2A
+             */
+            signals_id?: string;
         };
         CreateUserlandUserInviteOptionsDto: {
             /**
@@ -4267,6 +4627,21 @@ export interface components {
              * @example f1ffa2b2-c20b-4d39-be5c-212726e11222
              */
             external_id?: string | null;
+            /**
+             * @description The IP address of the user's request.
+             * @example 203.0.113.42
+             */
+            ip_address?: string | null;
+            /**
+             * @description The user agent string from the user's request.
+             * @example Mozilla/5.0
+             */
+            user_agent?: string | null;
+            /**
+             * @description An optional Radar signals ID to correlate client-side signals with this request.
+             * @example 01JBS0GN92GC2RJQS4X9DBPQ2A
+             */
+            signals_id?: string;
         } & (Record<string, never> | {
             /**
              * @description The password to set for the user. Mutually exclusive with `password_hash` and `password_hash_type`.
@@ -14514,47 +14889,215 @@ export interface components {
              */
             client_secret?: string;
         };
-        DataIntegrationAuthorizeUrlResponse: {
+        DataIntegration: {
             /**
-             * @description The OAuth authorization URL to redirect the user to.
-             * @example https://api.workos.com/data-integrations/q2czJKmVAraSBg8xFpT7M9uR/authorize-redirect
+             * @description Distinguishes the Data Integration object.
+             * @example data_integration
+             * @constant
              */
-            url: string;
-        };
-        DataIntegrationAccessTokenResponse: {
+            object: "data_integration";
             /**
-             * @description Indicates whether the access token is valid and ready for use, or if reauthorization is required.
-             * @constant
+             * @description Unique identifier of the Data Integration.
+             * @example data_integration_01EHZNVPK3SFK441A1RGBFSHRT
              */
-            active: true;
-            /** @description The [access token](/reference/pipes/access-token) object, present when `active` is `true`. */
-            access_token: {
-                /**
-                 * @description Distinguishes the access token object.
-                 * @constant
-                 */
-                object: "access_token";
-                /**
-                 * @description The OAuth access token for the connected integration.
-                 * @example gho_16C7e42F292c6912E7710c838347Ae178B4a
-                 */
-                access_token: string;
-                /**
-                 * @description The ISO-8601 formatted timestamp indicating when the access token expires.
-                 * @example 2025-12-31T23:59:59.000Z
-                 */
-                expires_at: string | null;
-                /**
-                 * @description The scopes granted to the access token.
-                 * @example [
-                 *       "repo",
-                 *       "user:email"
-                 *     ]
-                 */
-                scopes: string[];
-                /**
-                 * @description If the integration has requested scopes that aren't present on the access token, they're listed here.
-                 * @example []
+            id: string;
+            /**
+             * @description The provider slug for this Data Integration.
+             * @example github
+             */
+            slug: string;
+            /**
+             * @description The integration type derived from the provider.
+             * @example github
+             */
+            integration_type: string;
+            /**
+             * @description An optional description of the Data Integration.
+             * @example Production GitHub app
+             */
+            description: string | null;
+            /**
+             * @description Whether the Data Integration is enabled.
+             * @example true
+             */
+            enabled: boolean;
+            /**
+             * @description The state of the Data Integration.
+             * @example valid
+             * @enum {string}
+             */
+            state: "valid" | "invalid" | "requested";
+            /**
+             * @description The OAuth scopes configured for the Data Integration. `null` when the provider's configured scopes are used.
+             * @example [
+             *       "repo",
+             *       "read:org"
+             *     ]
+             */
+            scopes: string[] | null;
+            /**
+             * @description The OAuth redirect URI to register with the provider when configuring the custom application.
+             * @example https://api.workos.com/data-integrations/github/dik_01EHZNVPK3SFK441A1RGBFSHRT/callback
+             */
+            redirect_uri: string;
+            /** @description The credentials configured for the Data Integration. */
+            credentials: {
+                /**
+                 * @description The credentials type. `custom` uses your own OAuth app credentials; `organization` has each organization supply its own credentials (so `client_id`/`redacted_client_secret` are null on the integration itself).
+                 * @example custom
+                 * @enum {string}
+                 */
+                type: "custom" | "organization";
+                /**
+                 * @description The OAuth client ID configured for the provider app. Null for `organization` credentials.
+                 * @example Iv1.abc123
+                 */
+                client_id: string | null;
+                /**
+                 * @description The last four characters of the OAuth client secret. The full secret is never returned. Null for `organization` credentials.
+                 * @example 6789
+                 */
+                redacted_client_secret: string | null;
+            };
+            /** @description The OAuth definition when this is a custom provider; `null` for built-in providers. */
+            custom_provider: {
+                /**
+                 * @description A descriptive name for the custom provider.
+                 * @example My OAuth App
+                 */
+                name: string;
+                /**
+                 * @description The provider's OAuth authorization endpoint.
+                 * @example https://provider.example.com/oauth/authorize
+                 */
+                authorization_url: string | null;
+                /**
+                 * @description The provider's OAuth token endpoint.
+                 * @example https://provider.example.com/oauth/token
+                 */
+                token_url: string | null;
+                /**
+                 * @description The endpoint used to refresh tokens, if different from the token endpoint.
+                 * @example https://provider.example.com/oauth/token
+                 */
+                refresh_token_url: string | null;
+                /**
+                 * @description Whether PKCE is used during the authorization code flow.
+                 * @example true
+                 */
+                pkce_enabled: boolean;
+                /**
+                 * @description The separator used to join requested scopes.
+                 * @example
+                 */
+                request_scope_separator: string;
+                /**
+                 * @description Whether at least one scope must be selected when connecting an account.
+                 * @example false
+                 */
+                scopes_required: boolean;
+                /**
+                 * @description Whether a client secret is required for this provider.
+                 * @example true
+                 */
+                client_secret_required: boolean;
+                /**
+                 * @description Additional static query parameters appended to the authorization request.
+                 * @example {
+                 *       "prompt": "consent"
+                 *     }
+                 */
+                additional_authorization_parameters: {
+                    [key: string]: string;
+                };
+                /**
+                 * @description The Content-Type used when exchanging the token request.
+                 * @example application/x-www-form-urlencoded
+                 */
+                token_body_content_type: string;
+                /**
+                 * @description How client credentials are sent when exchanging authorization codes and refreshing tokens.
+                 * @example request_body
+                 * @enum {string}
+                 */
+                authenticate_via: "request_body" | "basic_auth_header";
+            } | null;
+            /**
+             * Format: date-time
+             * @description An ISO 8601 timestamp.
+             * @example 2026-01-15T12:00:00.000Z
+             */
+            created_at: string;
+            /**
+             * Format: date-time
+             * @description An ISO 8601 timestamp.
+             * @example 2026-01-15T12:00:00.000Z
+             */
+            updated_at: string;
+        };
+        DataIntegrationList: {
+            /**
+             * @description Indicates this is a list response.
+             * @constant
+             */
+            object: "list";
+            /** @description The list of records for the current page. */
+            data: components["schemas"]["DataIntegration"][];
+            /** @description Pagination cursors for navigating between pages of results. */
+            list_metadata: {
+                /**
+                 * @description An object ID that defines your place in the list. When the ID is not present, you are at the start of the list.
+                 * @example data_integration_01HXYZ123456789ABCDEFGHIJ
+                 */
+                before: string | null;
+                /**
+                 * @description An object ID that defines your place in the list. When the ID is not present, you are at the end of the list.
+                 * @example data_integration_01HXYZ987654321KJIHGFEDCBA
+                 */
+                after: string | null;
+            };
+        };
+        DataIntegrationAuthorizeUrlResponse: {
+            /**
+             * @description The OAuth authorization URL to redirect the user to.
+             * @example https://api.workos.com/data-integrations/q2czJKmVAraSBg8xFpT7M9uR/authorize-redirect
+             */
+            url: string;
+        };
+        DataIntegrationAccessTokenResponse: {
+            /**
+             * @description Indicates whether the access token is valid and ready for use, or if reauthorization is required.
+             * @constant
+             */
+            active: true;
+            /** @description The [access token](/reference/pipes/access-token) object, present when `active` is `true`. */
+            access_token: {
+                /**
+                 * @description Distinguishes the access token object.
+                 * @constant
+                 */
+                object: "access_token";
+                /**
+                 * @description The OAuth access token for the connected integration.
+                 * @example gho_16C7e42F292c6912E7710c838347Ae178B4a
+                 */
+                access_token: string;
+                /**
+                 * @description The ISO-8601 formatted timestamp indicating when the access token expires.
+                 * @example 2025-12-31T23:59:59.000Z
+                 */
+                expires_at: string | null;
+                /**
+                 * @description The scopes granted to the access token.
+                 * @example [
+                 *       "repo",
+                 *       "user:email"
+                 *     ]
+                 */
+                scopes: string[];
+                /**
+                 * @description If the integration has requested scopes that aren't present on the access token, they're listed here.
+                 * @example []
                  */
                 missing_scopes: string[];
             };
@@ -14909,6 +15452,18 @@ export interface components {
              */
             link: string;
         };
+        SendRadarSmsChallengeResponse: {
+            /**
+             * @description The ID of the SMS verification. Pass this to the authenticate endpoint to verify the code.
+             * @example vrf_01HXYZ123456789ABCDEFGHIJ
+             */
+            verification_id: string;
+            /**
+             * @description The phone number the verification code was sent to.
+             * @example +15555550123
+             */
+            phone_number: string;
+        };
         RadarStandaloneResponse: {
             /**
              * @description The verdict of the risk assessment.
@@ -22118,6 +22673,285 @@ export interface operations {
             };
         };
     };
+    DataIntegrationsManagementController_listDataIntegrations: {
+        parameters: {
+            query?: {
+                /** @description An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`. */
+                before?: string;
+                /** @description An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`. */
+                after?: string;
+                /** @description Upper limit on the number of objects to return, between `1` and `100`. */
+                limit?: number;
+                /** @description Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). */
+                order?: components["schemas"]["PaginationOrder"];
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["DataIntegrationList"];
+                };
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    DataIntegrationsManagementController_createDataIntegration: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["CreateDataIntegrationDto"];
+            };
+        };
+        responses: {
+            /** @description Created */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["DataIntegration"];
+                };
+            };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
+                         */
+                        message: string;
+                    };
+                };
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Not Found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
+                         */
+                        message: string;
+                    };
+                };
+            };
+            /** @description Unprocessable Entity */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
+                         */
+                        message: string;
+                    };
+                };
+            };
+        };
+    };
+    DataIntegrationsManagementController_getDataIntegration: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The slug identifier of the data integration. */
+                slug: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["DataIntegration"];
+                };
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Not Found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
+                         */
+                        message: string;
+                    };
+                };
+            };
+        };
+    };
+    DataIntegrationsManagementController_updateDataIntegration: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The slug identifier of the data integration. */
+                slug: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["UpdateDataIntegrationDto"];
+            };
+        };
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["DataIntegration"];
+                };
+            };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
+                         */
+                        message: string;
+                    };
+                };
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Not Found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
+                         */
+                        message: string;
+                    };
+                };
+            };
+            /** @description Unprocessable Entity */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
+                         */
+                        message: string;
+                    };
+                };
+            };
+        };
+    };
+    DataIntegrationsManagementController_deleteDataIntegration: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The slug identifier of the data integration. */
+                slug: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description No Content */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Not Found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
+                         */
+                        message: string;
+                    };
+                };
+            };
+        };
+    };
     DataIntegrationsController_upsertApiKey: {
         parameters: {
             query?: never;
@@ -25571,6 +26405,8 @@ export interface operations {
                 login_hint?: string;
                 /** @description A random string generated by the client that is used to mitigate replay attacks. */
                 nonce?: string;
+                /** @description If set to `login`, forces re-authentication at the identity provider. For SAML connections this sets `ForceAuthn="true"` in the SAML request. */
+                prompt?: "login";
             };
             header?: never;
             path?: never;
@@ -25964,6 +26800,11 @@ export interface operations {
                      * @example Mozilla/5.0
                      */
                     user_agent?: string;
+                    /**
+                     * @description An optional Radar signals ID to correlate client-side signals with this authentication attempt.
+                     * @example 01JBS0GN92GC2RJQS4X9DBPQ2A
+                     */
+                    signals_id?: string;
                 } | {
                     /**
                      * @description The client ID of the application.
@@ -26007,6 +26848,16 @@ export interface operations {
                      * @example Mozilla/5.0
                      */
                     user_agent?: string;
+                    /**
+                     * @description An optional Radar signals ID to correlate client-side signals with this authentication attempt.
+                     * @example 01JBS0GN92GC2RJQS4X9DBPQ2A
+                     */
+                    signals_id?: string;
+                    /**
+                     * @description The ID of an existing Radar authentication attempt to associate with this authentication.
+                     * @example radar_auth_attempt_01HXYZ123456789ABCDEFGHIJ
+                     */
+                    radar_auth_attempt_id?: string;
                 } | {
                     /**
                      * @description The client ID of the application.
@@ -26088,6 +26939,11 @@ export interface operations {
                      * @example Mozilla/5.0
                      */
                     user_agent?: string;
+                    /**
+                     * @description The ID of an existing Radar authentication attempt to associate with this authentication.
+                     * @example radar_auth_attempt_01HXYZ123456789ABCDEFGHIJ
+                     */
+                    radar_auth_attempt_id?: string;
                 } | {
                     /**
                      * @description The client ID of the application.
@@ -26207,6 +27063,97 @@ export interface operations {
                      * @example Mozilla/5.0
                      */
                     user_agent?: string;
+                } | {
+                    /**
+                     * @description The client ID of the application.
+                     * @example client_01HXYZ123456789ABCDEFGHIJ
+                     */
+                    client_id: string;
+                    /**
+                     * @description The client secret of the application.
+                     * @example sk_test_....
+                     */
+                    client_secret: string;
+                    /** @constant */
+                    grant_type: "urn:workos:oauth:grant-type:radar-email-challenge:code";
+                    /**
+                     * @description The one-time code from the Radar email challenge.
+                     * @example 123456
+                     */
+                    code: string;
+                    /**
+                     * @description The ID of the Radar email challenge being verified.
+                     * @example radar_challenge_01HXYZ123456789ABCDEFGHIJ
+                     */
+                    radar_challenge_id: string;
+                    /**
+                     * @description The pending authentication token from a previous authentication attempt.
+                     * @example cTDQJTTkTkkVYxbn...
+                     */
+                    pending_authentication_token: string;
+                    /**
+                     * @description The IP address of the user's request.
+                     * @example 203.0.113.42
+                     */
+                    ip_address?: string;
+                    /**
+                     * @description A unique identifier for the device.
+                     * @example device_01HXYZ123456789ABCDEFGHIJ
+                     */
+                    device_id?: string;
+                    /**
+                     * @description The user agent string from the user's browser.
+                     * @example Mozilla/5.0
+                     */
+                    user_agent?: string;
+                } | {
+                    /**
+                     * @description The client ID of the application.
+                     * @example client_01HXYZ123456789ABCDEFGHIJ
+                     */
+                    client_id: string;
+                    /**
+                     * @description The client secret of the application.
+                     * @example sk_test_....
+                     */
+                    client_secret: string;
+                    /** @constant */
+                    grant_type: "urn:workos:oauth:grant-type:radar-sms-challenge:code";
+                    /**
+                     * @description The one-time code from the Radar SMS challenge.
+                     * @example 123456
+                     */
+                    code: string;
+                    /**
+                     * @description The ID of the Radar SMS verification being confirmed.
+                     * @example vrf_01HXYZ123456789ABCDEFGHIJ
+                     */
+                    verification_id: string;
+                    /**
+                     * @description The phone number the Radar SMS challenge was sent to.
+                     * @example +15555550123
+                     */
+                    phone_number: string;
+                    /**
+                     * @description The pending authentication token from a previous authentication attempt.
+                     * @example cTDQJTTkTkkVYxbn...
+                     */
+                    pending_authentication_token: string;
+                    /**
+                     * @description The IP address of the user's request.
+                     * @example 203.0.113.42
+                     */
+                    ip_address?: string;
+                    /**
+                     * @description A unique identifier for the device.
+                     * @example device_01HXYZ123456789ABCDEFGHIJ
+                     */
+                    device_id?: string;
+                    /**
+                     * @description The user agent string from the user's browser.
+                     * @example Mozilla/5.0
+                     */
+                    user_agent?: string;
                 } | {
                     /**
                      * @description The client ID of the application.
@@ -27890,7 +28837,13 @@ export interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["MagicAuth"];
+                    "application/json": components["schemas"]["MagicAuth"] & {
+                        /**
+                         * @description The ID of the Radar authentication attempt created for this request when Radar is enabled. Pass this value to the authenticate endpoint to associate the subsequent authentication with this Radar attempt.
+                         * @example radar_auth_attempt_01HXYZ123456789ABCDEFGHIJ
+                         */
+                        radar_auth_attempt_id?: string;
+                    };
                 };
             };
             /** @description Bad Request */
@@ -29016,6 +29969,30 @@ export interface operations {
             };
         };
     };
+    PublicRadarChallengesController_sendRadarSmsChallenge: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["SendRadarSmsChallengeDto"];
+            };
+        };
+        responses: {
+            /** @description Created */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["SendRadarSmsChallengeResponse"];
+                };
+            };
+        };
+    };
     RedirectUrisController_list: {
         parameters: {
             query?: {
@@ -29336,7 +30313,13 @@ export interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["UserlandUser"];
+                    "application/json": components["schemas"]["UserlandUser"] & {
+                        /**
+                         * @description The ID of the Radar authentication attempt created for this request when Radar is enabled. Pass this value to the authenticate endpoint to associate the subsequent authentication with this Radar attempt.
+                         * @example radar_auth_attempt_01HXYZ123456789ABCDEFGHIJ
+                         */
+                        radar_auth_attempt_id?: string;
+                    };
                 };
             };
             /** @description Bad Request */
@@ -30962,6 +31945,144 @@ export interface operations {
             };
         };
     };
+    DataIntegrationsUserManagementController_updateUserDataInstallation: {
+        parameters: {
+            query?: {
+                /** @description An [Organization](/reference/organization) identifier. Optional parameter if the connection is scoped to an organization. */
+                organization_id?: string;
+            };
+            header?: never;
+            path: {
+                /** @description A [User](/reference/authkit/user) identifier. */
+                user_id: string;
+                /** @description The slug identifier of the provider (e.g., `github`, `slack`, `notion`). */
+                slug: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["ConnectedAccountDto"];
+            };
+        };
+        responses: {
+            /** @description The connected account was updated successfully. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ConnectedAccount"];
+                };
+            };
+            /** @description The request is missing a valid API key. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description The user, organization, or connected account was not found. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
+                         */
+                        message: string;
+                    };
+                };
+            };
+        };
+    };
+    DataIntegrationsUserManagementController_createUserDataInstallation: {
+        parameters: {
+            query?: {
+                /** @description An [Organization](/reference/organization) identifier. Optional parameter if the connection is scoped to an organization. */
+                organization_id?: string;
+            };
+            header?: never;
+            path: {
+                /** @description A [User](/reference/authkit/user) identifier. */
+                user_id: string;
+                /** @description The slug identifier of the provider (e.g., `github`, `slack`, `notion`). */
+                slug: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["ConnectedAccountDto"];
+            };
+        };
+        responses: {
+            /** @description The connected account was created successfully. */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ConnectedAccount"];
+                };
+            };
+            /** @description The request is missing a valid API key. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description The user, organization, or data integration was not found. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
+                         */
+                        message: string;
+                    };
+                };
+            };
+            /** @description A connected account already exists for this user, integration, and organization. */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
+                         */
+                        message: string;
+                    };
+                };
+            };
+            /** @description The data integration is not in a valid state or the token combination is invalid. */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
+                         */
+                        message: string;
+                    };
+                };
+            };
+        };
+    };
     DataIntegrationsUserManagementController_deleteUserDataInstallation: {
         parameters: {
             query?: {