@workos/openapi-spec 0.7.0 → 0.9.0

package/dist/types.d.ts

@@ -287,6 +287,62 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/authorization/groups/{group_id}/role_assignments": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List role assignments for a group
+         * @description List all role assignments granted to a group. Each assignment represents a role granted to the group on a resource.
+         */
+        get: operations["AuthorizationGroupRoleAssignmentsController_list"];
+        /**
+         * Replace all role assignments for a group
+         * @description Replace all role assignments for a group with the provided list. Existing assignments not in the list will be removed.
+         */
+        put: operations["AuthorizationGroupRoleAssignmentsController_replaceGroupRoleAssignments"];
+        /**
+         * Assign a role to a group
+         * @description Assign a role to a group on a specific resource.
+         */
+        post: operations["AuthorizationGroupRoleAssignmentsController_create"];
+        /**
+         * Remove group role assignments by criteria
+         * @description Remove role assignments from a group that match the provided criteria. Returns 404 when no matching active assignment is found.
+         */
+        delete: operations["AuthorizationGroupRoleAssignmentsController_removeGroupRoleAssignments"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/authorization/groups/{group_id}/role_assignments/{role_assignment_id}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get a group role assignment
+         * @description Get a specific role assignment for a group by its ID.
+         */
+        get: operations["AuthorizationGroupRoleAssignmentsController_get"];
+        put?: never;
+        post?: never;
+        /**
+         * Remove a group role assignment
+         * @description Remove a specific role assignment from a group by its ID.
+         */
+        delete: operations["AuthorizationGroupRoleAssignmentsController_removeGroupRoleAssignment"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/authorization/organization_memberships/{organization_membership_id}/check": {
         parameters: {
             query?: never;
@@ -797,6 +853,26 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/client/token": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Generate a Client API token
+         * @description Generate a short-lived, session-bound token for the Client GraphQL API, scoped to an organization and user.
+         */
+        post: operations["ClientApiTokenController_issueClientApiToken"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/connect/applications": {
         parameters: {
             query?: never;
@@ -1429,6 +1505,46 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/organizations/{organizationId}/data_integration_configurations": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List providers for an organization
+         * @description Returns a list of all providers available to the specified organization, along with any configured custom OAuth scopes, enabled state, and organization-managed credentials where applicable.
+         */
+        get: operations["ProviderController_listForOrganization"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/organizations/{organizationId}/data_integration_configurations/{slug}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        /**
+         * Configure a provider for an organization
+         * @description Creates or updates an organization's provider configuration. Use this endpoint to enable or disable a provider, set custom OAuth scopes, or supply organization-managed OAuth credentials.
+         */
+        put: operations["ProviderController_configure"];
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/organizations/{organizationId}/feature-flags": {
         parameters: {
             query?: never;
@@ -2234,7 +2350,7 @@ export interface paths {
         put?: never;
         /**
          * Create a redirect URI
-         * @description Creates a new redirect URI for an environment.
+         * @description Creates a new redirect URI for an application.
          */
         post: operations["RedirectUrisController_create"];
         delete?: never;
@@ -2426,7 +2542,7 @@ export interface paths {
         put?: never;
         /**
          * Send verification email
-         * @description Sends an email that contains a one-time code used to verify a user’s email address.
+         * @description Sends an email that contains a one-time code used to verify a user's email address.
          */
         post: operations["UserlandUsersController_sendVerificationEmail[0]"];
         delete?: never;
@@ -2591,7 +2707,7 @@ export interface paths {
             cookie?: never;
         };
         /**
-         * List providers
+         * List providers for a user
          * @description Retrieves a list of available providers and the user's connection status for each. Returns all providers configured for your environment, along with the user's [connected account](/reference/pipes/connected-account) information where applicable.
          */
         get: operations["DataIntegrationsUserManagementController_getUserDataIntegrations"];
@@ -3352,6 +3468,76 @@ export interface components {
              */
             resource_type_slug: string;
         });
+        CreateGroupRoleAssignmentDto: {
+            /**
+             * @description The slug of the role to assign to the group.
+             * @example admin
+             */
+            role_slug: string;
+            /**
+             * @description The ID of the resource. Omit along with the external-id fields to target the organization itself.
+             * @example authz_resource_01HXYZ123456789ABCDEFGH
+             */
+            resource_id?: string;
+            /**
+             * @description The external ID of the resource.
+             * @example proj-456
+             */
+            resource_external_id?: string;
+            /**
+             * @description The resource type slug.
+             * @example project
+             */
+            resource_type_slug?: string;
+        };
+        ReplaceGroupRoleAssignmentEntryDto: {
+            /**
+             * @description The slug of the role to assign to the group.
+             * @example admin
+             */
+            role_slug: string;
+            /**
+             * @description The ID of the resource. Omit along with the external-id fields to target the organization itself.
+             * @example authz_resource_01HXYZ123456789ABCDEFGH
+             */
+            resource_id?: string;
+            /**
+             * @description The external ID of the resource.
+             * @example proj-456
+             */
+            resource_external_id?: string;
+            /**
+             * @description The resource type slug.
+             * @example project
+             */
+            resource_type_slug?: string;
+        };
+        ReplaceGroupRoleAssignmentsDto: {
+            /** @description The list of role assignments that should exist for the group. All existing assignments will be replaced. */
+            role_assignments: components["schemas"]["ReplaceGroupRoleAssignmentEntryDto"][];
+        };
+        DeleteGroupRoleAssignmentsByCriteriaDto: {
+            /**
+             * @description The slug of the role to remove assignments for.
+             * @example admin
+             */
+            role_slug: string;
+            /**
+             * @description The ID of the resource. Mutually exclusive with `resource_external_id` and `resource_type_slug`.
+             * @example authz_resource_01HXYZ123456789ABCDEFGH
+             */
+            resource_id?: string;
+            /**
+             * @description The external ID of the resource.
+             * @example proj-456
+             */
+            resource_external_id?: string;
+            /**
+             * @description The resource type slug.
+             * @example project
+             */
+            resource_type_slug?: string;
+        };
         AssignRoleDto: {
             /**
              * @description The slug of the role to assign.
@@ -4204,7 +4390,19 @@ export interface components {
              *       "widgets:users-table:manage"
              *     ]
              */
-            scopes?: ("widgets:users-table:manage" | "widgets:domain-verification:manage" | "widgets:sso:manage" | "widgets:api-keys:manage" | "widgets:dsync:manage" | "widgets:audit-log-streaming:manage")[];
+            scopes?: ("widgets:users-table:manage" | "widgets:domain-verification:manage" | "widgets:sso:manage" | "widgets:api-keys:manage" | "widgets:dsync:manage" | "widgets:audit-log-streaming:manage" | "widgets:pipes:manage")[];
+        };
+        ClientApiTokenDto: {
+            /**
+             * @description The ID of the organization to scope the Client API token to.
+             * @example org_01EHZNVPK3SFK441A1RGBFSHRT
+             */
+            organization_id: string;
+            /**
+             * @description The ID of the user to issue the Client API token for.
+             * @example user_01E4ZCR3C56J083X43JQXF3JK5
+             */
+            user_id: string;
         };
         TokenQueryDto: {
             /**
@@ -5383,6 +5581,77 @@ export interface components {
              */
             slug: string;
         };
+        GroupRoleAssignment: {
+            /**
+             * @description Distinguishes the group role assignment object.
+             * @constant
+             */
+            object: "group_role_assignment";
+            /**
+             * @description Unique identifier of the group role assignment.
+             * @example gra_01HXYZ123456789ABCDEFGH
+             */
+            id: string;
+            /**
+             * @description The ID of the group the role is assigned to.
+             * @example group_01HXYZ123456789ABCDEFGHIJ
+             */
+            group_id: string;
+            /** @description The role included in the assignment. */
+            role: components["schemas"]["SlimRole"];
+            /** @description The resource the role is assigned on. */
+            resource: {
+                /**
+                 * @description The unique ID of the Resource.
+                 * @example authz_resource_01HXYZ123456789ABCDEFGH
+                 */
+                id: string;
+                /**
+                 * @description An identifier you provide to reference the resource in your system.
+                 * @example proj-456
+                 */
+                external_id: string;
+                /**
+                 * @description The slug of the resource type this resource belongs to.
+                 * @example project
+                 */
+                resource_type_slug: string;
+            };
+            /**
+             * Format: date-time
+             * @description An ISO 8601 timestamp.
+             * @example 2026-01-15T12:00:00.000Z
+             */
+            created_at: string;
+            /**
+             * Format: date-time
+             * @description An ISO 8601 timestamp.
+             * @example 2026-01-15T12:00:00.000Z
+             */
+            updated_at: string;
+        };
+        GroupRoleAssignmentList: {
+            /**
+             * @description Indicates this is a list response.
+             * @constant
+             */
+            object: "list";
+            /** @description The list of records for the current page. */
+            data: components["schemas"]["GroupRoleAssignment"][];
+            /** @description Pagination cursors for navigating between pages of results. */
+            list_metadata: {
+                /**
+                 * @description An object ID that defines your place in the list. When the ID is not present, you are at the start of the list.
+                 * @example gra_01HXYZ123456789ABCDEFGHIJ
+                 */
+                before: string | null;
+                /**
+                 * @description An object ID that defines your place in the list. When the ID is not present, you are at the end of the list.
+                 * @example gra_01HXYZ987654321KJIHGFEDCBA
+                 */
+                after: string | null;
+            };
+        };
         UserRoleAssignment: {
             /**
              * @description Distinguishes the role assignment object.
@@ -13441,68 +13710,182 @@ export interface components {
                 created_at: string;
             };
         };
-        DataIntegrationAuthorizeUrlResponse: {
+        /** @description Organization-managed OAuth credential configuration. Present only for integrations whose credentials are supplied by the organization; absent otherwise. */
+        DataIntegrationCredentials: {
             /**
-             * @description The OAuth authorization URL to redirect the user to.
-             * @example https://api.workos.com/data-integrations/q2czJKmVAraSBg8xFpT7M9uR/authorize-redirect
+             * @description The credentials type for this integration (e.g., `shared`, `custom`, or `organization`).
+             * @example organization
+             * @enum {string}
              */
-            url: string;
-        };
-        DataIntegrationAccessTokenResponse: {
+            credentials_type: "shared" | "custom" | "organization";
             /**
-             * @description Indicates whether the access token is valid and ready for use, or if reauthorization is required.
-             * @constant
+             * @description Whether the organization has supplied OAuth credentials for this integration.
+             * @example true
              */
-            active: true;
-            /** @description The [access token](/reference/pipes/access-token) object, present when `active` is `true`. */
-            access_token: {
-                /**
-                 * @description Distinguishes the access token object.
-                 * @constant
-                 */
-                object: "access_token";
-                /**
-                 * @description The OAuth access token for the connected integration.
-                 * @example gho_16C7e42F292c6912E7710c838347Ae178B4a
-                 */
-                access_token: string;
-                /**
-                 * @description The ISO-8601 formatted timestamp indicating when the access token expires.
-                 * @example 2025-12-31T23:59:59.000Z
-                 */
-                expires_at: string | null;
-                /**
-                 * @description The scopes granted to the access token.
-                 * @example [
-                 *       "repo",
-                 *       "user:email"
-                 *     ]
-                 */
-                scopes: string[];
-                /**
-                 * @description If the integration has requested scopes that aren't present on the access token, they're listed here.
-                 * @example []
-                 */
-                missing_scopes: string[];
-            };
-        } | {
+            has_credentials: boolean;
             /**
-             * @description Indicates whether the access token is valid and ready for use, or if reauthorization is required.
-             * @constant
+             * @description The OAuth client ID supplied by the organization, or `null` when none is configured.
+             * @example client_01EHZNVPK3SFK441A1RGBFSHRT
              */
-            active: false;
+            client_id: string | null;
             /**
-             * @description - `"not_installed"`: The user does not have the integration installed.
-             *     - `"needs_reauthorization"`: The user needs to reauthorize the integration.
-             * @example not_installed
-             * @enum {string}
+             * @description The last four characters of the organization-supplied OAuth client secret, or `null` when none is configured.
+             * @example 1a2b
              */
-            error: "needs_reauthorization" | "not_installed";
-        };
-        ConnectedAccount: {
+            client_secret_last_four: string | null;
             /**
-             * @description Distinguishes the connected account object.
-             * @constant
+             * @description The redirect URI to register with the provider when configuring the organization-managed OAuth application.
+             * @example https://api.workos.com/data-integrations/github/dik_01EHZNVPK3SFK441A1RGBFSHRT/callback
+             */
+            redirect_uri: string;
+        };
+        DataIntegrationConfigurationResponse: {
+            /**
+             * @description Distinguishes the data integration configuration object.
+             * @constant
+             */
+            object: "data_integration_configuration";
+            /**
+             * @description The unique identifier of the data integration.
+             * @example data_integration_01EHZNVPK3SFK441A1RGBFSHRT
+             */
+            id: string;
+            /**
+             * @description The [Organization](/reference/organization) this configuration applies to.
+             * @example org_01EHZNVPK3SFK441A1RGBFSHRT
+             */
+            organization_id: string;
+            /**
+             * @description The slug identifier of the provider (e.g., `github`, `slack`, `notion`).
+             * @example github
+             */
+            slug: string;
+            /**
+             * @description The display name of the data integration.
+             * @example GitHub
+             */
+            name: string;
+            /**
+             * @description Whether the integration is enabled for this organization. Reflects the organization override when one exists, otherwise the provider default.
+             * @example true
+             */
+            enabled: boolean;
+            /**
+             * @description The OAuth scopes in effect for this organization. Reflects the organization override when one is set, otherwise the provider scopes, or `null` when none are configured.
+             * @example [
+             *       "repo",
+             *       "user:email"
+             *     ]
+             */
+            scopes: string[] | null;
+            /**
+             * @description The timestamp when the configuration was created.
+             * @example 2024-01-15T10:30:00.000Z
+             */
+            created_at: string;
+            /**
+             * @description The timestamp when the configuration was last updated.
+             * @example 2024-01-15T10:30:00.000Z
+             */
+            updated_at: string;
+            credentials?: components["schemas"]["DataIntegrationCredentials"];
+        };
+        DataIntegrationConfigurationListResponse: {
+            /**
+             * @description Indicates this is a list response.
+             * @constant
+             */
+            object: "list";
+            /** @description A list of data integration configurations for the organization. */
+            data: components["schemas"]["DataIntegrationConfigurationResponse"][];
+        };
+        ConfigureDataIntegrationBody: {
+            /**
+             * @description Whether the provider is enabled for the organization.
+             * @example true
+             */
+            enabled?: boolean;
+            /**
+             * @description The OAuth scopes to request for the organization. Pass `null` to inherit the provider scopes.
+             * @example [
+             *       "repo",
+             *       "user:email"
+             *     ]
+             */
+            scopes?: string[] | null;
+            /**
+             * @description The OAuth client ID of the organization's own application. Must be provided together with `client_secret`, and only for providers whose credentials are supplied by the organization.
+             * @example client_01EHZNVPK3SFK441A1RGBFSHRT
+             */
+            client_id?: string;
+            /**
+             * @description The OAuth client secret of the organization's own application. Must be provided together with `client_id`.
+             * @example ••••••••
+             */
+            client_secret?: string;
+        };
+        DataIntegrationAuthorizeUrlResponse: {
+            /**
+             * @description The OAuth authorization URL to redirect the user to.
+             * @example https://api.workos.com/data-integrations/q2czJKmVAraSBg8xFpT7M9uR/authorize-redirect
+             */
+            url: string;
+        };
+        DataIntegrationAccessTokenResponse: {
+            /**
+             * @description Indicates whether the access token is valid and ready for use, or if reauthorization is required.
+             * @constant
+             */
+            active: true;
+            /** @description The [access token](/reference/pipes/access-token) object, present when `active` is `true`. */
+            access_token: {
+                /**
+                 * @description Distinguishes the access token object.
+                 * @constant
+                 */
+                object: "access_token";
+                /**
+                 * @description The OAuth access token for the connected integration.
+                 * @example gho_16C7e42F292c6912E7710c838347Ae178B4a
+                 */
+                access_token: string;
+                /**
+                 * @description The ISO-8601 formatted timestamp indicating when the access token expires.
+                 * @example 2025-12-31T23:59:59.000Z
+                 */
+                expires_at: string | null;
+                /**
+                 * @description The scopes granted to the access token.
+                 * @example [
+                 *       "repo",
+                 *       "user:email"
+                 *     ]
+                 */
+                scopes: string[];
+                /**
+                 * @description If the integration has requested scopes that aren't present on the access token, they're listed here.
+                 * @example []
+                 */
+                missing_scopes: string[];
+            };
+        } | {
+            /**
+             * @description Indicates whether the access token is valid and ready for use, or if reauthorization is required.
+             * @constant
+             */
+            active: false;
+            /**
+             * @description - `"not_installed"`: The user does not have the integration installed.
+             *     - `"needs_reauthorization"`: The user needs to reauthorize the integration.
+             * @example not_installed
+             * @enum {string}
+             */
+            error: "needs_reauthorization" | "not_installed";
+        };
+        ConnectedAccount: {
+            /**
+             * @description Distinguishes the connected account object.
+             * @constant
              */
             object: "connected_account";
             /**
@@ -13528,6 +13911,17 @@ export interface components {
              *     ]
              */
             scopes: string[];
+            /**
+             * @description The authentication method used for this connection (`oauth` or `api_key`). Defaults to `oauth` if absent.
+             * @example oauth
+             * @enum {string}
+             */
+            auth_method?: "oauth" | "api_key";
+            /**
+             * @description The last four characters of the API key, or `null` for OAuth connections.
+             * @example null
+             */
+            api_key_last_4?: string | null;
             /**
              * @description The state of the connected account:
              *     - `connected`: The connection is active and tokens are valid.
@@ -13599,6 +13993,13 @@ export interface components {
                  *     ]
                  */
                 scopes: string[] | null;
+                /**
+                 * @description The authentication methods supported by this provider (`oauth`, `api_key`, or both). Defaults to `["oauth"]` if absent.
+                 * @example [
+                 *       "oauth"
+                 *     ]
+                 */
+                auth_methods?: ("oauth" | "api_key")[];
                 /**
                  * @description Whether the provider is owned by a user or organization.
                  * @enum {string}
@@ -13664,6 +14065,17 @@ export interface components {
                      *     ]
                      */
                     scopes: string[];
+                    /**
+                     * @description The authentication method used for this connection (`oauth` or `api_key`). Defaults to `oauth` if absent.
+                     * @example oauth
+                     * @enum {string}
+                     */
+                    auth_method?: "oauth" | "api_key";
+                    /**
+                     * @description The last four characters of the API key, or `null` for OAuth connections.
+                     * @example null
+                     */
+                    api_key_last_4?: string | null;
                     /**
                      * @description The state of the connected account:
                      *     - `connected`: The connection is active and tokens are valid.
@@ -13938,6 +14350,28 @@ export interface components {
              */
             accept_invitation_url: string;
         };
+        UserlandUserInviteList: {
+            /**
+             * @description Indicates this is a list response.
+             * @constant
+             */
+            object: "list";
+            /** @description The list of records for the current page. */
+            data: components["schemas"]["UserlandUserInvite"][];
+            /** @description Pagination cursors for navigating between pages of results. */
+            list_metadata: {
+                /**
+                 * @description An object ID that defines your place in the list. When the ID is not present, you are at the start of the list.
+                 * @example invitation_01HXYZ123456789ABCDEFGHIJ
+                 */
+                before: string | null;
+                /**
+                 * @description An object ID that defines your place in the list. When the ID is not present, you are at the end of the list.
+                 * @example invitation_01HXYZ987654321KJIHGFEDCBA
+                 */
+                after: string | null;
+            };
+        };
         UserlandUserOrganizationMembership: {
             /**
              * @description Distinguishes the organization membership object.
@@ -14003,6 +14437,28 @@ export interface components {
             /** @description The user that belongs to the organization through this membership. */
             user: components["schemas"]["UserlandUser"];
         };
+        UserlandUserOrganizationMembershipList: {
+            /**
+             * @description Indicates this is a list response.
+             * @constant
+             */
+            object: "list";
+            /** @description The list of records for the current page. */
+            data: components["schemas"]["UserlandUserOrganizationMembership"][];
+            /** @description Pagination cursors for navigating between pages of results. */
+            list_metadata: {
+                /**
+                 * @description An object ID that defines your place in the list. When the ID is not present, you are at the start of the list.
+                 * @example om_01HXYZ123456789ABCDEFGHIJ
+                 */
+                before: string | null;
+                /**
+                 * @description An object ID that defines your place in the list. When the ID is not present, you are at the end of the list.
+                 * @example om_01HXYZ987654321KJIHGFEDCBA
+                 */
+                after: string | null;
+            };
+        };
         UserApiKey: {
             /**
              * @description Distinguishes the API Key object.
@@ -14510,6 +14966,13 @@ export interface components {
              */
             token: string;
         };
+        ClientApiTokenResponse: {
+            /**
+             * @description The Client API token.
+             * @example eyJhbGciOiJSUzI1NiIsImtpZCI6InNlc3Npb24...
+             */
+            token: string;
+        };
         SsoAuthorizeUrlResponse: {
             /**
              * Format: uri
@@ -15771,8 +16234,412 @@ export interface operations {
                     };
                 };
             };
-            /** @description Not Found */
-            404: {
+            /** @description Not Found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
+                         */
+                        message: string;
+                    };
+                };
+            };
+            /** @description Unprocessable Entity */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
+                         */
+                        message: string;
+                    };
+                };
+            };
+        };
+    };
+    AuthorizationGroupRoleAssignmentsController_list: {
+        parameters: {
+            query?: {
+                /** @description An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`. */
+                before?: string;
+                /** @description An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`. */
+                after?: string;
+                /** @description Upper limit on the number of objects to return, between `1` and `100`. */
+                limit?: number;
+                /** @description Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). */
+                order?: components["schemas"]["PaginationOrder"];
+            };
+            header?: never;
+            path: {
+                /** @description The ID of the group. */
+                group_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["GroupRoleAssignmentList"];
+                };
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
+                         */
+                        message: string;
+                    };
+                };
+            };
+            /** @description Not Found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
+                         */
+                        message: string;
+                    };
+                };
+            };
+        };
+    };
+    AuthorizationGroupRoleAssignmentsController_replaceGroupRoleAssignments: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The ID of the group. */
+                group_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["ReplaceGroupRoleAssignmentsDto"];
+            };
+        };
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["GroupRoleAssignmentList"];
+                };
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
+                         */
+                        message: string;
+                    };
+                };
+            };
+            /** @description Not Found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
+                         */
+                        message: string;
+                    };
+                };
+            };
+            /** @description Unprocessable Entity */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
+                         */
+                        message: string;
+                    };
+                };
+            };
+        };
+    };
+    AuthorizationGroupRoleAssignmentsController_create: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The ID of the group. */
+                group_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["CreateGroupRoleAssignmentDto"];
+            };
+        };
+        responses: {
+            /** @description Created */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["GroupRoleAssignment"];
+                };
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
+                         */
+                        message: string;
+                    };
+                };
+            };
+            /** @description Not Found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
+                         */
+                        message: string;
+                    };
+                };
+            };
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description The error code identifying the type of error.
+                         * @example duplicate_group_role_assignment
+                         * @constant
+                         */
+                        code: "duplicate_group_role_assignment";
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Request could not be processed.
+                         */
+                        message: string;
+                    };
+                };
+            };
+            /** @description Unprocessable Entity */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
+                         */
+                        message: string;
+                    };
+                };
+            };
+        };
+    };
+    AuthorizationGroupRoleAssignmentsController_removeGroupRoleAssignments: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The ID of the group. */
+                group_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["DeleteGroupRoleAssignmentsByCriteriaDto"];
+            };
+        };
+        responses: {
+            /** @description No Content */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
+                         */
+                        message: string;
+                    };
+                };
+            };
+            /** @description Not Found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
+                         */
+                        message: string;
+                    };
+                };
+            };
+            /** @description Unprocessable Entity */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
+                         */
+                        message: string;
+                    };
+                };
+            };
+        };
+    };
+    AuthorizationGroupRoleAssignmentsController_get: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The ID of the group. */
+                group_id: string;
+                /** @description The ID of the group role assignment. */
+                role_assignment_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["GroupRoleAssignment"];
+                };
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
+                         */
+                        message: string;
+                    };
+                };
+            };
+            /** @description Not Found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
+                         */
+                        message: string;
+                    };
+                };
+            };
+        };
+    };
+    AuthorizationGroupRoleAssignmentsController_removeGroupRoleAssignment: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The ID of the group. */
+                group_id: string;
+                /** @description The ID of the group role assignment to remove. */
+                role_assignment_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description No Content */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Forbidden */
+            403: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -15786,8 +16653,8 @@ export interface operations {
                     };
                 };
             };
-            /** @description Unprocessable Entity */
-            422: {
+            /** @description Not Found */
+            404: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -18259,6 +19126,27 @@ export interface operations {
                     "application/json": components["schemas"]["AuthorizationResourceList"];
                 };
             };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description The error code identifying the type of error.
+                         * @example missing_organization_id_or_resource_type_slug
+                         * @constant
+                         */
+                        code: "missing_organization_id_or_resource_type_slug";
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Request could not be processed.
+                         */
+                        message: string;
+                    };
+                };
+            };
             /** @description Forbidden */
             403: {
                 headers: {
@@ -19695,6 +20583,75 @@ export interface operations {
             };
         };
     };
+    ClientApiTokenController_issueClientApiToken: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["ClientApiTokenDto"];
+            };
+        };
+        responses: {
+            /** @description Created */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ClientApiTokenResponse"];
+                };
+            };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
+                         */
+                        message: string;
+                    };
+                };
+            };
+            /** @description Not Found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
+                         */
+                        message: string;
+                    };
+                };
+            };
+            /** @description Unprocessable Entity */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
+                         */
+                        message: string;
+                    };
+                };
+            };
+        };
+    };
     ApplicationsController_list: {
         parameters: {
             query?: {
@@ -22357,6 +23314,132 @@ export interface operations {
             };
         };
     };
+    ProviderController_listForOrganization: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description An [Organization](/reference/organization) identifier to list provider configurations for. */
+                organizationId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description A list of provider configurations for the organization. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["DataIntegrationConfigurationListResponse"];
+                };
+            };
+            /** @description The request is missing a valid API key. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description The organization was not found. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
+                         */
+                        message: string;
+                    };
+                };
+            };
+        };
+    };
+    ProviderController_configure: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description An [Organization](/reference/organization) identifier to configure the provider for. */
+                organizationId: string;
+                /** @description The slug identifier of the provider to configure (e.g., `github`, `slack`, `notion`). */
+                slug: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["ConfigureDataIntegrationBody"];
+            };
+        };
+        responses: {
+            /** @description The provider configuration that was created or updated. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["DataIntegrationConfigurationResponse"];
+                };
+            };
+            /** @description The request body is invalid. Possible reasons: the body is empty (at least one of `enabled`, `scopes`, or `client_id` must be provided); `client_id` and `client_secret` are not provided together; or `client_id`/`client_secret` were supplied for a provider that does not support organization-managed credentials. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
+                         */
+                        message: string;
+                    };
+                };
+            };
+            /** @description The request is missing a valid API key. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description The organization or provider was not found. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
+                         */
+                        message: string;
+                    };
+                };
+            };
+            /** @description One or more of the supplied `scopes` are not valid for the provider. Only scopes configured on the provider may be used. */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description A human-readable description of the error.
+                         * @example Organization not found: 'org_01EHQMYV6MBK39QC5PZXHY59C3'.
+                         */
+                        message: string;
+                    };
+                };
+            };
+        };
+    };
     OrganizationFeatureFlagsController_list: {
         parameters: {
             query?: {
@@ -23726,10 +24809,10 @@ export interface operations {
                      */
                     client_id: string;
                     /**
-                     * @description The client secret of the application.
+                     * @description The client secret of the application. May be omitted by public clients that authenticate through other means, such as a PKCE `code_verifier`.
                      * @example sk_test_....
                      */
-                    client_secret: string;
+                    client_secret?: string;
                     /** @constant */
                     grant_type: "authorization_code";
                     /**
@@ -23812,10 +24895,10 @@ export interface operations {
                      */
                     client_id: string;
                     /**
-                     * @description The client secret of the application.
+                     * @description The client secret of the application. May be omitted by public clients that authenticate through other means, such as a PKCE `code_verifier`.
                      * @example sk_test_....
                      */
-                    client_secret: string;
+                    client_secret?: string;
                     /** @constant */
                     grant_type: "refresh_token";
                     /**
@@ -24902,29 +25985,7 @@ export interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": {
-                        /**
-                         * @description Indicates this is a list response.
-                         * @constant
-                         */
-                        object?: "list";
-                        /** @description Pagination cursors for navigating between pages of results. */
-                        list_metadata?: {
-                            /**
-                             * @description An object ID that defines your place in the list. When the ID is not present, you are at the start of the list.
-                             * @example invitation_01HXYZ123456789ABCDEFGHIJ
-                             */
-                            before: string | null;
-                            /**
-                             * @description An object ID that defines your place in the list. When the ID is not present, you are at the end of the list.
-                             * @example invitation_01HXYZ987654321KJIHGFEDCBA
-                             */
-                            after: string | null;
-                        };
-                    } & {
-                        /** @description The list of records for the current page. */
-                        data?: components["schemas"]["UserlandUserInvite"][];
-                    };
+                    "application/json": components["schemas"]["UserlandUserInviteList"];
                 };
             };
             /** @description Unprocessable Entity */
@@ -25790,29 +26851,7 @@ export interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": {
-                        /**
-                         * @description Indicates this is a list response.
-                         * @constant
-                         */
-                        object?: "list";
-                        /** @description Pagination cursors for navigating between pages of results. */
-                        list_metadata?: {
-                            /**
-                             * @description An object ID that defines your place in the list. When the ID is not present, you are at the start of the list.
-                             * @example om_01HXYZ123456789ABCDEFGHIJ
-                             */
-                            before: string | null;
-                            /**
-                             * @description An object ID that defines your place in the list. When the ID is not present, you are at the end of the list.
-                             * @example om_01HXYZ987654321KJIHGFEDCBA
-                             */
-                            after: string | null;
-                        };
-                    } & {
-                        /** @description The list of records for the current page. */
-                        data?: components["schemas"]["UserlandUserOrganizationMembership"][];
-                    };
+                    "application/json": components["schemas"]["UserlandUserOrganizationMembershipList"];
                 };
             };
             /** @description Bad Request */