feat(generated)!: SDK surface change: Symbol "PermissionCreatedData" was removed (+2 more) (#524)

Co-authored-by: workos-sdk-automation[bot] <255426317+workos-sdk-automation[bot]@users.noreply.github.com>

Author: workos-sdk-automation[bot]

.changelog-pending/2026-07-21T17-10-38-341b7f0f1ea67e05b14ab5014622e1f93182cdff.md

@@ -0,0 +1,66 @@
+* [#524](https://github.com/workos/workos-ruby/pull/524) feat(generated)!: regenerate from spec (3 changes)
+
+  **Features**
+  * **agents**:
+    * Added model `ClaimViewResponse`
+    * Added model `ClaimViewResponseOrganization`
+    * Added model `AgentAdminLinkClaimAttemptToExternalUserRequest`
+    * Added model `AgentAdminLinkClaimAttemptToExternalUserRequestUser`
+    * Added enum `ClaimViewResponseStatus`
+    * Added endpoint `PATCH /agents/claims/attempts`
+    * Added model `AgentRegistration`
+    * Added model `AgentCredentialValidation`
+    * Added model `AgentRegistrationAgentIdentity`
+    * Added model `AgentRegistrationClaim`
+    * Added model `AgentAdminValidateCredentialRequest`
+    * Added model `AgentRegistrationClaimClaimCompletion`
+    * Added enum `AgentRegistrationStatus`
+    * Added enum `AgentRegistrationKind`
+    * Added enum `AgentAdminValidateCredentialRequestType`
+    * Added service `Agents`
+  * **[api_keys](https://workos.com/docs/reference/authkit/api-keys)**:
+    * Added `agent_registration_id` to `ApiKeyValidationResponse`
+  * **[connect](https://workos.com/docs/reference/workos-connect/standalone)**:
+    * Added enum `ApplicationsRegistrationTypes`
+    * Added parameter `Applications.list.registration_types`
+  * **[directory_sync](https://workos.com/docs/reference/directory-sync)**:
+    * Added parameter `DirectoryUsers.list.idp_id`
+    * Added parameter `DirectoryUsers.list.email`
+  * **[organizations](https://workos.com/docs/reference/organization)**:
+    * Added model `OrganizationAuthorizedConnectApplicationList`
+    * Added model `OrganizationAuthorizedConnectApplicationListData`
+    * Added model `OrganizationAuthorizedConnectApplicationListListMetadata`
+    * Added service `OrganizationsAuthorizedApplications`
+  * **[pipes](https://workos.com/docs/reference/pipes)**:
+    * Added model `DataIntegrationInstallation`
+    * Added `auth_methods` to `CreateDataIntegration`
+    * Added `api_key` to `CreateDataIntegration`
+    * Added `api_key` to `UpdateDataIntegration`
+    * Added `auth_methods` to `DataIntegration`
+    * Added `installation` to `DataIntegration`
+    * Added enum `CreateDataIntegrationAuthMethods`
+    * Added enum `DataIntegrationAuthMethods`
+    * Added model `DataIntegrationCredentialsResponse`
+    * Added model `DataIntegrationCredentialsResponseCredential`
+    * Added model `DataIntegrationsUpsertApiKeyRequest`
+    * Added model `DataIntegrationsVendCredentialsRequest`
+    * Added enum `DataIntegrationCredentialsResponseError`
+    * Added endpoint `PUT /data-integrations/{slug}/api-key`
+    * Added endpoint `POST /data-integrations/{slug}/credentials`
+  * **[sso](https://workos.com/docs/reference/sso)**:
+    * Added parameter `SSO.authorize.prompt`
+  * **[user_management](https://workos.com/docs/reference/authkit/user)**:
+    * Added `ssha256` to `CreateUserPasswordHashType`
+    * Added `ssha256` to `UpdateUserPasswordHashType`
+    * Added endpoint `GET /user_management/radar_challenges/{id}`
+  * **[webhooks](https://workos.com/docs/reference/webhooks)**:
+    * Added `agent.registration.revoked` to `CreateWebhookEndpointEvents`
+    * Added `agent.registration.revoked` to `UpdateWebhookEndpointEvents`
+    * Added `agent.registration.deleted` to `CreateWebhookEndpointEvents`
+    * Added `agent.registration.deleted` to `UpdateWebhookEndpointEvents`
+    * Added `radar.challenge_created` to `CreateWebhookEndpointEvents`
+    * Added `radar.challenge_created` to `UpdateWebhookEndpointEvents`
+    * Added `agent.registration.expired` to `CreateWebhookEndpointEvents`
+    * Added `agent.registration.expired` to `UpdateWebhookEndpointEvents`
+  * **[widgets](https://workos.com/docs/reference/widgets)**:
+    * Made `WidgetSessionToken.organization_id` optional

.last-synced-sha

@@ -1 +1 @@
-23faa38318d596e581656934ed72c4a18476d742
+f40851a620a1ba0badec95e80faac475382c8dd0

.oagen-manifest.json

@@ -5,12 +5,23 @@
 require "zeitwerk"
 
 module WorkOS
+  # Sentinel default for nullable optional parameters. Distinguishes an
+  # omitted argument ("leave unchanged") from an explicit `nil`, which
+  # clears the field by sending JSON `null`.
+  OMIT = Object.new
+
+  def OMIT.inspect
+    "WorkOS::OMIT"
+  end
+
+  OMIT.freeze
 end
 
 loader = Zeitwerk::Loader.for_gem
 require_relative "workos/inflections"
 loader.inflector.inflect(WORKOS_INFLECTIONS)
 loader.collapse("#{__dir__}/workos/admin_portal")
+loader.collapse("#{__dir__}/workos/agents")
 loader.collapse("#{__dir__}/workos/api_keys")
 loader.collapse("#{__dir__}/workos/audit_logs")
 loader.collapse("#{__dir__}/workos/authorization")

lib/workos.rb

@@ -0,0 +1,93 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+require "json"
+
+module WorkOS
+  class Agents
+    def initialize(client)
+      @client = client
+    end
+
+    # Link a claim attempt to an external user
+    # @param type [String] The operation to perform on the claim attempt. Currently only `link_external_user` is supported.
+    # @param claim_attempt_token [String] The token identifying the claim attempt.
+    # @param user [WorkOS::AgentAdminLinkClaimAttemptToExternalUserRequestUser] The user to attach to the claim attempt, identified by email and external ID.
+    # @param organization_id [String, nil] The organization to place the agent in. Required when the user belongs to more than one organization.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::ClaimViewResponse]
+    def update_attempts(
+      type:,
+      claim_attempt_token:,
+      user:,
+      organization_id: nil,
+      request_options: {}
+    )
+      body = {
+        "type" => type,
+        "claim_attempt_token" => claim_attempt_token,
+        "user" => user,
+        "organization_id" => organization_id
+      }.compact
+      response = @client.request(
+        method: :patch,
+        path: "/agents/claims/attempts",
+        auth: true,
+        body: body,
+        request_options: request_options
+      )
+      result = WorkOS::ClaimViewResponse.new(response.body)
+      result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
+      result
+    end
+
+    # Validate an agent credential
+    # @param type [WorkOS::Types::AgentAdminValidateCredentialRequestType] The kind of credential being validated — an agent API key or an agent access token.
+    # @param credential [String] The credential value to validate: the API key value for `api_key`, or the access token (JWT) for `access_token`.
+    # @param audience [String, nil] When provided, the access token's `aud` claim is verified against this value. Tokens issued for a different resource are rejected.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::AgentCredentialValidation]
+    def create_validate(
+      type:,
+      credential:,
+      audience: nil,
+      request_options: {}
+    )
+      body = {
+        "type" => type,
+        "credential" => credential,
+        "audience" => audience
+      }.compact
+      response = @client.request(
+        method: :post,
+        path: "/agents/credentials/validate",
+        auth: true,
+        body: body,
+        request_options: request_options
+      )
+      result = WorkOS::AgentCredentialValidation.new(response.body)
+      result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
+      result
+    end
+
+    # Get an agent registration
+    # @param id [String] The unique ID of the agent registration.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::AgentRegistration]
+    def get_registration(
+      id:,
+      request_options: {}
+    )
+      response = @client.request(
+        method: :get,
+        path: "/agents/registrations/#{WorkOS::Util.encode_path(id)}",
+        auth: true,
+        request_options: request_options
+      )
+      result = WorkOS::AgentRegistration.new(response.body)
+      result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
+      result
+    end
+  end
+end

lib/workos/agents.rb

@@ -0,0 +1,28 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class AgentAdminLinkClaimAttemptToExternalUserRequest < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      type: :type,
+      claim_attempt_token: :claim_attempt_token,
+      user: :user,
+      organization_id: :organization_id
+    }.freeze
+
+    attr_accessor \
+      :type,
+      :claim_attempt_token,
+      :user,
+      :organization_id
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @type = hash[:type]
+      @claim_attempt_token = hash[:claim_attempt_token]
+      @user = hash[:user] ? WorkOS::AgentAdminLinkClaimAttemptToExternalUserRequestUser.new(hash[:user]) : nil
+      @organization_id = hash[:organization_id]
+    end
+  end
+end

lib/workos/agents/agent_admin_link_claim_attempt_to_external_user_request.rb

@@ -0,0 +1,22 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class AgentAdminLinkClaimAttemptToExternalUserRequestUser < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      email: :email,
+      external_id: :external_id
+    }.freeze
+
+    attr_accessor \
+      :email,
+      :external_id
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @email = hash[:email]
+      @external_id = hash[:external_id]
+    end
+  end
+end

lib/workos/agents/agent_admin_link_claim_attempt_to_external_user_request_user.rb

@@ -0,0 +1,25 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class AgentAdminValidateCredentialRequest < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      type: :type,
+      credential: :credential,
+      audience: :audience
+    }.freeze
+
+    attr_accessor \
+      :type,
+      :credential,
+      :audience
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @type = hash[:type]
+      @credential = hash[:credential]
+      @audience = hash[:audience]
+    end
+  end
+end

lib/workos/agents/agent_admin_validate_credential_request.rb

@@ -0,0 +1,25 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class AgentCredentialValidation < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      valid: :valid,
+      registration_id: :registration_id,
+      expires_at: :expires_at
+    }.freeze
+
+    attr_accessor \
+      :valid,
+      :registration_id,
+      :expires_at
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @valid = hash[:valid]
+      @registration_id = hash[:registration_id]
+      @expires_at = hash[:expires_at]
+    end
+  end
+end

lib/workos/agents/agent_credential_validation.rb

@@ -0,0 +1,40 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class AgentRegistration < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      id: :id,
+      agent_identity: :agent_identity,
+      organization_id: :organization_id,
+      status: :status,
+      kind: :kind,
+      claim: :claim,
+      created_at: :created_at,
+      updated_at: :updated_at
+    }.freeze
+
+    attr_accessor \
+      :id,
+      :agent_identity,
+      :organization_id,
+      :status,
+      :kind,
+      :claim,
+      :created_at,
+      :updated_at
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @id = hash[:id]
+      @agent_identity = hash[:agent_identity] ? WorkOS::AgentRegistrationAgentIdentity.new(hash[:agent_identity]) : nil
+      @organization_id = hash[:organization_id]
+      @status = hash[:status]
+      @kind = hash[:kind]
+      @claim = hash[:claim] ? WorkOS::AgentRegistrationClaim.new(hash[:claim]) : nil
+      @created_at = hash[:created_at]
+      @updated_at = hash[:updated_at]
+    end
+  end
+end