feat(generated): Changes to events and pipes (#533)

Co-authored-by: workos-sdk-automation[bot] <255426317+workos-sdk-automation[bot]@users.noreply.github.com>

Author: workos-sdk-automation[bot]

.changelog-pending/2026-08-11T17-12-44-c4d55e190f0f722ec4b6c901f4305221e86fb8f7.md

@@ -0,0 +1,53 @@
+* [#533](https://github.com/workos/workos-ruby/pull/533) feat(generated)!: regenerate from spec (2 changes)
+
+  **⚠️ Breaking**
+  * **[events](https://workos.com/docs/reference/events)**:
+    * Changed required status for parameter `Events.list.events`
+
+  **Features**
+  * **[groups](https://workos.com/docs/reference/groups)**:
+    * Added parameter `Groups.list.search`
+  * **[connect](https://workos.com/docs/reference/workos-connect/standalone)**:
+    * Added `client_id` to `ConnectedAccount`
+    * Added `client_secret_last_4` to `ConnectedAccount`
+    * Added `config` to `ConnectedAccount`
+  * **[pipes](https://workos.com/docs/reference/pipes)**:
+    * Added `client_id` to `DataIntegrationsListResponseDataConnectedAccount`
+    * Added `client_secret_last_4` to `DataIntegrationsListResponseDataConnectedAccount`
+    * Added `config` to `DataIntegrationsListResponseDataConnectedAccount`
+    * Changed errors for endpoint `POST /data-integrations/{slug}/credentials`
+    * Made `CustomProviderDefinition.authorization_url` optional
+    * Made `CustomProviderDefinition.token_url` optional
+    * Added model `DataIntegrationsUpsertClientCredentialsRequest`
+    * Added `client_credentials` to `CreateDataIntegrationAuthMethods`
+    * Added endpoint `PUT /data-integrations/{slug}/client-credentials`
+  * **[sso](https://workos.com/docs/reference/sso)**:
+    * Added `XOAuth` to `ConnectionType`
+    * Added `XOAuth` to `ProfileConnectionType`
+    * Added `XOAuth` to `ConnectionsConnectionType`
+    * Added `GrokOAuth` to `ConnectionType`
+    * Added `GrokOAuth` to `ProfileConnectionType`
+    * Added `GrokOAuth` to `ConnectionsConnectionType`
+  * **[user_management](https://workos.com/docs/reference/authkit/user)**:
+    * Changed errors for endpoint `DELETE /user_management/users/{id}`
+    * Added `password_salt_position` to `CreateUser`
+    * Added `password_salt_position` to `UpdateUser`
+    * Made `RadarSmsChallengeCodeSessionAuthenticateRequest.verification_id` optional
+    * Made `RadarSmsChallengeCodeSessionAuthenticateRequest.phone_number` optional
+    * Added enum `CreateUserPasswordSaltPosition`
+    * Added enum `UpdateUserPasswordSaltPosition`
+    * Added `XOAuth` to `AuthenticateResponseAuthenticationMethod`
+    * Added `XOAuth` to `UserIdentitiesGetItemProvider`
+    * Added `GrokOAuth` to `AuthenticateResponseAuthenticationMethod`
+    * Added `GrokOAuth` to `UserIdentitiesGetItemProvider`
+  * **[webhooks](https://workos.com/docs/reference/webhooks)**:
+    * Added `agent.registration.refreshed` to `CreateWebhookEndpointEvents`
+    * Added `agent.registration.refreshed` to `UpdateWebhookEndpointEvents`
+
+  **Fixes**
+  * **[pipes](https://workos.com/docs/reference/pipes)**:
+    * Changed the type of `DataIntegration.credentials`
+  * **[user_management](https://workos.com/docs/reference/authkit/user)**:
+    * Changed errors for endpoint `POST /user_management/authenticate`
+    * Changed errors for endpoint `POST /user_management/users`
+    * Changed errors for endpoint `PUT /user_management/users/{id}`

.last-synced-sha

@@ -1 +1 @@
-ae3ebbb08d9b4bf9b2391558e820b7eb6f511fb9
+a07d8e7988d035c2d727787f18f64d71b4b89a84

.oagen-manifest.json

@@ -279,6 +279,7 @@
     "lib/workos/pipes/data_integrations_list_response_data.rb",
     "lib/workos/pipes/data_integrations_list_response_data_connected_account.rb",
     "lib/workos/pipes/data_integrations_upsert_api_key_request.rb",
+    "lib/workos/pipes/data_integrations_upsert_client_credentials_request.rb",
     "lib/workos/pipes/data_integrations_vend_credentials_request.rb",
     "lib/workos/pipes/update_custom_provider_definition.rb",
     "lib/workos/pipes/update_data_integration.rb",
@@ -312,6 +313,8 @@
     "lib/workos/shared/agent_registration_expired_data.rb",
     "lib/workos/shared/agent_registration_organization_switched.rb",
     "lib/workos/shared/agent_registration_organization_switched_data.rb",
+    "lib/workos/shared/agent_registration_refreshed.rb",
+    "lib/workos/shared/agent_registration_refreshed_data.rb",
     "lib/workos/shared/agent_registration_revoked.rb",
     "lib/workos/shared/agent_registration_revoked_data.rb",
     "lib/workos/shared/auth_method_mismatch_error.rb",
@@ -405,6 +408,7 @@
     "lib/workos/types/create_data_integration_auth_methods.rb",
     "lib/workos/types/create_user_invite_options_locale.rb",
     "lib/workos/types/create_user_password_hash_type.rb",
+    "lib/workos/types/create_user_password_salt_position.rb",
     "lib/workos/types/create_webhook_endpoint_events.rb",
     "lib/workos/types/custom_provider_definition_authenticate_via.rb",
     "lib/workos/types/data_integration_access_token_response_error.rb",
@@ -484,6 +488,7 @@
     "lib/workos/types/sso_provider.rb",
     "lib/workos/types/update_custom_provider_definition_authenticate_via.rb",
     "lib/workos/types/update_user_password_hash_type.rb",
+    "lib/workos/types/update_user_password_salt_position.rb",
     "lib/workos/types/update_webhook_endpoint_events.rb",
     "lib/workos/types/update_webhook_endpoint_status.rb",
     "lib/workos/types/user_identities_get_item_provider.rb",
@@ -732,6 +737,8 @@
     "rbi/workos/agent_registration_expired_data.rbi",
     "rbi/workos/agent_registration_organization_switched.rbi",
     "rbi/workos/agent_registration_organization_switched_data.rbi",
+    "rbi/workos/agent_registration_refreshed.rbi",
+    "rbi/workos/agent_registration_refreshed_data.rbi",
     "rbi/workos/agent_registration_revoked.rbi",
     "rbi/workos/agent_registration_revoked_data.rbi",
     "rbi/workos/agents.rbi",
@@ -921,6 +928,7 @@
     "rbi/workos/data_integrations_list_response_data.rbi",
     "rbi/workos/data_integrations_list_response_data_connected_account.rbi",
     "rbi/workos/data_integrations_upsert_api_key_request.rbi",
+    "rbi/workos/data_integrations_upsert_client_credentials_request.rbi",
     "rbi/workos/data_integrations_vend_credentials_request.rbi",
     "rbi/workos/decrypt_request.rbi",
     "rbi/workos/decrypt_response.rbi",
@@ -2186,6 +2194,10 @@
     "GET /audit_logs/exports/{auditLogExportId}": {
       "sdkMethod": "get_export",
       "service": "audit_logs"
+    },
+    "PUT /data-integrations/{slug}/client-credentials": {
+      "sdkMethod": "update_data_integration_client_credentials",
+      "service": "pipes"
     }
   }
 }

lib/workos/connect.rb

@@ -135,7 +135,7 @@ def create_application(
       result
     end
 
-    # Create oauth application.
+    # Create OAuth application.
     # @param name [String]
     # @param is_first_party [Boolean]
     # @param description [String, nil]
@@ -175,7 +175,7 @@ def create_oauth_application(
       WorkOS::ConnectApplication.new(response.body)
     end
 
-    # Create m2m application.
+    # Create M2M application.
     # @param name [String]
     # @param organization_id [String]
     # @param description [String, nil]

lib/workos/events.rb

@@ -15,18 +15,18 @@ def initialize(client)
     # @param after [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
     # @param limit [Integer, nil] Upper limit on the number of objects to return, between `1` and `100`.
     # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records).
-    # @param events [Array<String>, nil] Filter events by one or more event types (e.g. `dsync.user.created`).
+    # @param events [Array<String>] Filter events by one or more event types (e.g. `dsync.user.created`).
     # @param range_start [String, nil] ISO-8601 date string to filter events created after this date.
     # @param range_end [String, nil] ISO-8601 date string to filter events created before this date.
     # @param organization_id [String, nil] Filter events by the [Organization](https://workos.com/docs/reference/organization) that the event is associated with.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
     # @return [WorkOS::Types::ListStruct<WorkOS::EventSchema>]
     def list_events(
+      events:,
       before: nil,
       after: nil,
       limit: 10,
       order: "desc",
-      events: nil,
       range_start: nil,
       range_end: nil,
       organization_id: nil,

lib/workos/groups.rb

@@ -16,6 +16,7 @@ def initialize(client)
     # @param after [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
     # @param limit [Integer, nil] Upper limit on the number of objects to return, between `1` and `100`.
     # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records).
+    # @param search [String, nil] Search groups by name or by group ID.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
     # @return [WorkOS::Types::ListStruct<WorkOS::Group>]
     def list_organization_groups(
@@ -24,13 +25,15 @@ def list_organization_groups(
       after: nil,
       limit: 10,
       order: "desc",
+      search: nil,
       request_options: {}
     )
       params = {
         "before" => before,
         "after" => after,
         "limit" => limit,
-        "order" => order
+        "order" => order,
+        "search" => search
       }.compact
       response = @client.request(
         method: :get,
@@ -46,13 +49,14 @@ def list_organization_groups(
           after: cursor,
           limit: limit,
           order: order,
+          search: search,
           request_options: request_options
         )
       }
       WorkOS::Types::ListStruct.from_response(
         response,
         model: WorkOS::Group,
-        filters: {organization_id: organization_id, before: before, limit: limit, order: order},
+        filters: {organization_id: organization_id, before: before, limit: limit, order: order, search: search},
         fetch_next: fetch_next
       )
     end

lib/workos/pipes.rb

@@ -59,8 +59,8 @@ def list_data_integrations(
     # @param description [String, nil] An optional description of the Data Integration.
     # @param enabled [Boolean, nil] Whether the Data Integration is enabled. Defaults to `false`.
     # @param scopes [Array<String>, nil] The OAuth scopes to request for the Data Integration. Defaults to the provider's configured scopes when omitted.
-    # @param auth_methods [Array<WorkOS::Types::CreateDataIntegrationAuthMethods>, nil] How accounts authenticate with the provider. Defaults to `["oauth"]`. Use `["api_key"]` to declare an API key integration; `credentials` is then not required and keys are supplied per-tenant (optionally via `api_key` on this request).
-    # @param config [Hash{String => String}, nil] Provider-specific config values (e.g. a Snowflake `account_identifier`), keyed by the config field. Only fields the built-in provider declares are accepted.
+    # @param auth_methods [Array<WorkOS::Types::CreateDataIntegrationAuthMethods>, nil] How accounts authenticate with the provider. Defaults to `["oauth"]`. Use `["api_key"]` to declare an API key integration; `credentials` is then not required and keys are supplied per-tenant (optionally via `api_key` on this request). Use `["client_credentials"]` to declare a client-credentials integration; `credentials` is likewise not required and client credentials are supplied per-tenant.
+    # @param config [Hash{String => String}, nil] Provider-specific config values (e.g. a Snowflake `account`), keyed by the config field. Only fields the built-in provider declares are accepted.
     # @param credentials [WorkOS::DataIntegrationCredentialsInput, nil] The OAuth credentials to configure for the Data Integration. Required for OAuth integrations; omit when `auth_methods` is `["api_key"]`.
     # @param api_key [WorkOS::ApiKeyInstallation, nil] An optional API key to install for the first tenant on an `api_key` integration. Omit to declare a keyless integration; tenants can be added later via the per-installation API key path.
     # @param custom_provider [WorkOS::CustomProviderDefinition, nil] The OAuth definition for a custom provider. Supply this to define a custom provider; omit it to create an integration for a built-in provider.
@@ -242,6 +242,43 @@ def authorize_data_integration(
       result
     end
 
+    # Upsert client credentials for a connected account
+    # @param slug [String] The identifier of the integration.
+    # @param user_id [String] A [User](https://workos.com/docs/reference/authkit/user) identifier.
+    # @param organization_id [String, nil] An [Organization](https://workos.com/docs/reference/organization) identifier. Optional parameter to scope the connection to a specific organization.
+    # @param client_id [String] The OAuth client ID to store for this integration.
+    # @param client_secret [String] The OAuth client secret to store for this integration.
+    # @param config [Hash{String => String}, nil] Provider-specific configuration values collected for this installation, keyed by the provider's config field descriptors.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::ConnectedAccount]
+    def update_data_integration_client_credentials(
+      slug:,
+      user_id:,
+      client_id:,
+      client_secret:,
+      organization_id: nil,
+      config: nil,
+      request_options: {}
+    )
+      body = {
+        "user_id" => user_id,
+        "organization_id" => organization_id,
+        "client_id" => client_id,
+        "client_secret" => client_secret,
+        "config" => config
+      }.compact
+      response = @client.request(
+        method: :put,
+        path: "/data-integrations/#{WorkOS::Util.encode_path(slug)}/client-credentials",
+        auth: true,
+        body: body,
+        request_options: request_options
+      )
+      result = WorkOS::ConnectedAccount.new(response.body)
+      result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
+      result
+    end
+
     # Vend credentials for a connected account
     # @param slug [String] The identifier of the integration.
     # @param user_id [String] A [User](https://workos.com/docs/reference/authkit/user) identifier.

lib/workos/pipes/connected_account.rb

@@ -12,6 +12,9 @@ class ConnectedAccount < WorkOS::Types::BaseModel
       scopes: :scopes,
       auth_method: :auth_method,
       api_key_last_4: :api_key_last_4,
+      client_id: :client_id,
+      client_secret_last_4: :client_secret_last_4,
+      config: :config,
       state: :state,
       created_at: :created_at,
       updated_at: :updated_at
@@ -25,6 +28,9 @@ class ConnectedAccount < WorkOS::Types::BaseModel
       :scopes,
       :auth_method,
       :api_key_last_4,
+      :client_id,
+      :client_secret_last_4,
+      :config,
       :state,
       :created_at,
       :updated_at
@@ -38,6 +44,9 @@ def initialize(json)
       @scopes = hash[:scopes] || []
       @auth_method = hash[:auth_method]
       @api_key_last_4 = hash[:api_key_last_4]
+      @client_id = hash[:client_id]
+      @client_secret_last_4 = hash[:client_secret_last_4]
+      @config = hash[:config] || {}
       @state = hash[:state]
       @created_at = hash[:created_at]
       @updated_at = hash[:updated_at]

lib/workos/pipes/data_integrations_list_response_data_connected_account.rb

@@ -12,6 +12,9 @@ class DataIntegrationsListResponseDataConnectedAccount < WorkOS::Types::BaseMode
       scopes: :scopes,
       auth_method: :auth_method,
       api_key_last_4: :api_key_last_4,
+      client_id: :client_id,
+      client_secret_last_4: :client_secret_last_4,
+      config: :config,
       state: :state,
       created_at: :created_at,
       updated_at: :updated_at,
@@ -29,6 +32,9 @@ class DataIntegrationsListResponseDataConnectedAccount < WorkOS::Types::BaseMode
       :scopes,
       :auth_method,
       :api_key_last_4,
+      :client_id,
+      :client_secret_last_4,
+      :config,
       :state,
       :created_at,
       :updated_at
@@ -49,6 +55,9 @@ def initialize(json)
       @scopes = hash[:scopes] || []
       @auth_method = hash[:auth_method]
       @api_key_last_4 = hash[:api_key_last_4]
+      @client_id = hash[:client_id]
+      @client_secret_last_4 = hash[:client_secret_last_4]
+      @config = hash[:config] || {}
       @state = hash[:state]
       @created_at = hash[:created_at]
       @updated_at = hash[:updated_at]

lib/workos/pipes/data_integrations_upsert_client_credentials_request.rb

@@ -0,0 +1,31 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class DataIntegrationsUpsertClientCredentialsRequest < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      user_id: :user_id,
+      organization_id: :organization_id,
+      client_id: :client_id,
+      client_secret: :client_secret,
+      config: :config
+    }.freeze
+
+    attr_accessor \
+      :user_id,
+      :organization_id,
+      :client_id,
+      :client_secret,
+      :config
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @user_id = hash[:user_id]
+      @organization_id = hash[:organization_id]
+      @client_id = hash[:client_id]
+      @client_secret = hash[:client_secret]
+      @config = hash[:config] || {}
+    end
+  end
+end