@workos/openapi-spec 0.32.0 → 0.34.0

package/dist/open-api-spec.yaml

@@ -33777,6 +33777,63 @@ components:
                 - data
                 - created_at
                 - object
+            - type: object
+              properties:
+                id:
+                  type: string
+                  description: Unique identifier for the event.
+                  example: event_01EHZNVPK3SFK441A1RGBFSHRT
+                event:
+                  type: string
+                  const: vault.kek.deleted
+                data:
+                  type: object
+                  properties:
+                    actor_id:
+                      type: string
+                      description: The unique identifier of the actor.
+                      example: user_01EHWNCE74X7JSDV0X3SZ3KJNY
+                    actor_source:
+                      type: string
+                      enum:
+                        - api
+                        - dashboard
+                    actor_name:
+                      type: string
+                      description: The name of the actor.
+                      example: Jane Doe
+                    key_name:
+                      type: string
+                      description: The name of the key encryption key.
+                      example: production-kek
+                    key_id:
+                      type: string
+                      description: The unique identifier of the key encryption key.
+                      example: key_01EHWNCE74X7JSDV0X3SZ3KJNY
+                  required:
+                    - actor_id
+                    - actor_source
+                    - actor_name
+                    - key_name
+                    - key_id
+                  description: The event payload.
+                created_at:
+                  format: date-time
+                  type: string
+                  description: An ISO 8601 timestamp.
+                  example: '2026-01-15T12:00:00.000Z'
+                context:
+                  $ref: '#/components/schemas/EventContextDto'
+                object:
+                  type: string
+                  description: Distinguishes the Event object.
+                  const: event
+              required:
+                - id
+                - event
+                - data
+                - created_at
+                - object
             - type: object
               properties:
                 id:

package/dist/policy.d.mts

@@ -56,6 +56,14 @@ declare const operationHints: Record<string, OperationHint>;
  * Service-level remounting. Maps IR service name → target service/namespace
  * (PascalCase). All operations in the source service are mounted on the
  * target unless overridden per-operation in {@link operationHints}.
+ *
+ * Keys may be exact service names or trailing-`*` prefix patterns
+ * (requires @workos/oagen >= 0.25.0). Precedence: an exact key always wins;
+ * among wildcards the longest prefix wins. Matching is plain `startsWith` —
+ * no regex. Note that a wildcard also absorbs future spec tags under its
+ * prefix, so review `oagen diff` output when tags are added: a new tag that
+ * does not belong to its prefix family (cf. UserManagementDataProviders →
+ * Pipes) needs its own exact entry here.
  */
 declare const mountRules: Record<string, string>;
 //#endregion

package/dist/policy.mjs

@@ -326,6 +326,14 @@ const operationHints = {
 * Service-level remounting. Maps IR service name → target service/namespace
 * (PascalCase). All operations in the source service are mounted on the
 * target unless overridden per-operation in {@link operationHints}.
+*
+* Keys may be exact service names or trailing-`*` prefix patterns
+* (requires @workos/oagen >= 0.25.0). Precedence: an exact key always wins;
+* among wildcards the longest prefix wins. Matching is plain `startsWith` —
+* no regex. Note that a wildcard also absorbs future spec tags under its
+* prefix, so review `oagen diff` output when tags are added: a new tag that
+* does not belong to its prefix family (cf. UserManagementDataProviders →
+* Pipes) needs its own exact entry here.
 */
 const mountRules = {
 	Client: "ClientApi",
@@ -335,24 +343,13 @@ const mountRules = {
 	Applications: "Connect",
 	ApplicationClientSecrets: "Connect",
 	Connections: "SSO",
-	Directories: "DirectorySync",
-	DirectoryGroups: "DirectorySync",
-	DirectoryUsers: "DirectorySync",
+	"Director*": "DirectorySync",
 	FeatureFlagsTargets: "FeatureFlags",
 	OrganizationsFeatureFlags: "FeatureFlags",
 	UserManagementUsersFeatureFlags: "FeatureFlags",
 	OrganizationsApiKeys: "ApiKeys",
-	UserManagementSessionTokens: "UserManagement",
-	UserManagementAuthentication: "UserManagement",
-	UserManagementCorsOrigins: "UserManagement",
-	UserManagementUsers: "UserManagement",
-	UserManagementInvitations: "UserManagement",
-	UserManagementJWTTemplate: "UserManagement",
-	UserManagementMagicAuth: "UserManagement",
-	UserManagementOrganizationMembership: "OrganizationMembership",
-	UserManagementOrganizationMembershipGroups: "OrganizationMembership",
-	UserManagementRedirectUris: "UserManagement",
-	UserManagementUsersAuthorizedApplications: "UserManagement",
+	"UserManagement*": "UserManagement",
+	"UserManagementOrganizationMembership*": "OrganizationMembership",
 	UserManagementDataProviders: "Pipes",
 	UserManagementMultiFactorAuthentication: "MultiFactorAuth"
 };

package/dist/types.d.ts

@@ -14202,6 +14202,51 @@ export interface components {
              * @constant
              */
             object: "event";
+        } | {
+            /**
+             * @description Unique identifier for the event.
+             * @example event_01EHZNVPK3SFK441A1RGBFSHRT
+             */
+            id: string;
+            /** @constant */
+            event: "vault.kek.deleted";
+            /** @description The event payload. */
+            data: {
+                /**
+                 * @description The unique identifier of the actor.
+                 * @example user_01EHWNCE74X7JSDV0X3SZ3KJNY
+                 */
+                actor_id: string;
+                /** @enum {string} */
+                actor_source: "api" | "dashboard";
+                /**
+                 * @description The name of the actor.
+                 * @example Jane Doe
+                 */
+                actor_name: string;
+                /**
+                 * @description The name of the key encryption key.
+                 * @example production-kek
+                 */
+                key_name: string;
+                /**
+                 * @description The unique identifier of the key encryption key.
+                 * @example key_01EHWNCE74X7JSDV0X3SZ3KJNY
+                 */
+                key_id: string;
+            };
+            /**
+             * Format: date-time
+             * @description An ISO 8601 timestamp.
+             * @example 2026-01-15T12:00:00.000Z
+             */
+            created_at: string;
+            context?: components["schemas"]["EventContextDto"];
+            /**
+             * @description Distinguishes the Event object.
+             * @constant
+             */
+            object: "event";
         } | {
             /**
              * @description Unique identifier for the event.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@workos/openapi-spec",
-  "version": "0.32.0",
+  "version": "0.34.0",
   "type": "module",
   "description": "WorkOS OpenAPI specification, TypeScript types, and SDK resolution policy",
   "license": "MIT",
@@ -30,7 +30,7 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@workos/oagen": "^0.24.6"
+    "@workos/oagen": "^0.25.0"
   },
   "scripts": {
     "generate:services": "node scripts/generate-services.mjs",
@@ -60,8 +60,8 @@
   },
   "devDependencies": {
     "@types/js-yaml": "^4.0.9",
-    "@types/node": "^26.1.0",
-    "@workos/oagen-emitters": "^0.19.9",
+    "@types/node": "^26.1.1",
+    "@workos/oagen-emitters": "^0.19.10",
     "diff2html": "^3.4.56",
     "husky": "^9.1.7",
     "js-yaml": "^4.1.1",