feat(generated): Changes to agents, pipes, and user_management

.changelog-pending/2026-09-14T13-28-03-0b4d419df1198eced531b9867bfbfdee80433fe2.md

@@ -0,0 +1,102 @@
+* [#727](https://github.com/workos/workos-python/pull/727) feat(generated): regenerate from spec (4 changes)
+
+  **Features**
+  * **[admin_portal](https://workos.com/docs/reference/admin-portal)**:
+    * Changed the format of `PortalLinkResponse.link`
+  * **[agents](https://workos.com/docs/reference/agents)**:
+    * Added parameter `AgentsSessions.list.organization_id`
+    * Changed the format of `ClaimViewResponse.user_code`
+    * Changed the format of `AgentAdminValidateCredentialRequest.credential`
+  * **[api_keys](https://workos.com/docs/reference/authkit/api-keys)**:
+    * Changed the format of `ValidateApiKey.value`
+    * Changed the format of `OrganizationApiKeyWithValue.value`
+    * Changed the format of `UserApiKeyWithValue.value`
+  * **[multi_factor_auth](https://workos.com/docs/reference/authkit/mfa)**:
+    * Changed the format of `AuthenticationChallenge.code`
+    * Changed the format of `AuthenticationFactorEnrolledTotp.secret`
+    * Changed the format of `AuthenticationFactorEnrolledTotp.qr_code`
+    * Changed the format of `AuthenticationFactorEnrolledTotp.uri`
+    * Changed the format of `AuthenticationChallengesVerifyRequest.code`
+  * **[pipes](https://workos.com/docs/reference/pipes)**:
+    * Added `supports_multiple_connections` to `DataIntegrationsVendCredentialsRequest`
+    * Added `supports_multiple_connections` to `DataIntegrationsGetUserTokenRequest`
+    * Added parameter `UserManagementDataProviders.getUserDataInstallation.supports_multiple_connections`
+    * Added parameter `UserManagementDataProviders.updateUserDataInstallation.supports_multiple_connections`
+    * Added parameter `UserManagementDataProviders.deleteUserDataInstallation.supports_multiple_connections`
+    * Added parameter `UserManagementDataProviders.getUserDataIntegrations.supports_multiple_connections`
+    * Added enum `PipesOwnership`
+    * Added `user` to `CreateDataIntegrationOwnership`
+    * Added `user` to `DataIntegrationOwnership`
+    * Added endpoint `GET /data-integrations/{slug}/organization`
+    * Added endpoint `PUT /data-integrations/{slug}/organization`
+    * Added endpoint `DELETE /data-integrations/{slug}/organization`
+    * Added parameter `Pipes.listDataIntegrations.ownership`
+    * Changed errors for endpoint `GET /data-integrations`
+    * Changed errors for endpoint `PUT /user_management/users/{user_id}/connected_accounts/{slug}`
+    * Changed errors for endpoint `DELETE /user_management/users/{user_id}/connected_accounts/{slug}`
+    * Changed the format of `DataIntegrationCredentialsResponseCredential.value`
+    * Added `connection_owner` to `DataIntegrationsUpsertApiKeyRequest`
+    * Added `connection_owner` to `DataIntegrationsUpsertClientCredentialsRequest`
+    * Added enum `DataIntegrationsUpsertApiKeyRequestConnectionOwner`
+    * Added enum `DataIntegrationsUpsertClientCredentialsRequestConnectionOwner`
+    * Added model `AccountSelectionRequiredError`
+    * Added `connected_account_id` to `DataIntegrationsUpsertApiKeyRequest`
+    * Added `connected_account_id` to `DataIntegrationsUpsertClientCredentialsRequest`
+    * Added `ownership` to `CreateDataIntegration`
+    * Added `ownership` to `DataIntegration`
+    * Added `connection_owner` to `DataIntegrationsVendCredentialsRequest`
+    * Added `connection_owner` to `DataIntegrationsGetUserTokenRequest`
+    * Added enum `CreateDataIntegrationOwnership`
+    * Added enum `DataIntegrationOwnership`
+    * Added enum `DataIntegrationsVendCredentialsRequestConnectionOwner`
+    * Added enum `DataIntegrationsGetUserTokenRequestConnectionOwner`
+    * Changed errors for endpoint `POST /data-integrations/{slug}/credentials`
+    * Changed errors for endpoint `POST /data-integrations/{provider}/token`
+  * **[sso](https://workos.com/docs/reference/sso)**:
+    * Changed the format of `CreateConnectionKeyPair.key`
+    * Changed the format of `TokenQuery.code`
+    * Changed the format of `SSOLogoutAuthorizeResponse.logout_url`
+  * **[user_management](https://workos.com/docs/reference/authkit/user)**:
+    * Added model `CreateAuthkitOAuthResource`
+    * Added model `AuthkitOAuthResource`
+    * Added service `UserManagementAuthkitOAuthResources`
+    * Changed the format of `DeviceAuthorizationResponse.verification_uri_complete`
+    * Changed the format of `VerifyEmailAddress.code`
+    * Changed the format of `ConfirmEmailChange.code`
+    * Changed the format of `MagicAuth.code`
+    * Changed the format of `UserInvite.accept_invitation_url`
+    * Changed the format of `EmailVerification.code`
+    * Changed the format of `PasswordReset.password_reset_url`
+    * Changed the format of `AuthenticateResponse.authkit_authorization_code`
+    * Changed the format of `DeviceAuthorizationResponse.device_code`
+    * Changed the format of `DeviceAuthorizationResponse.user_code`
+    * Changed the format of `AuthorizationCodeSessionAuthenticateRequest.code`
+    * Changed the format of `AuthorizationCodeSessionAuthenticateRequest.code_verifier`
+    * Changed the format of `MagicAuthCodeSessionAuthenticateRequest.code`
+    * Changed the format of `EmailVerificationCodeSessionAuthenticateRequest.code`
+    * Changed the format of `MfaTotpSessionAuthenticateRequest.code`
+    * Changed the format of `RadarEmailChallengeCodeSessionAuthenticateRequest.code`
+    * Changed the format of `RadarSmsChallengeCodeSessionAuthenticateRequest.code`
+    * Changed the format of `DeviceCodeSessionAuthenticateRequest.device_code`
+    * Changed the format of `Invitation.accept_invitation_url`
+    * Changed the format of `MagicAuthSendMagicAuthCodeAndReturnResponse.code`
+  * **[radar](https://workos.com/docs/reference/radar)**:
+    * Changed the format of `RadarChallenge.code`
+  * **[vault](https://workos.com/docs/reference/vault)**:
+    * Changed the format of `CreateObjectRequest.value`
+    * Changed the format of `VaultObject.value`
+    * Changed the format of `UpdateObjectRequest.value`
+
+  **Fixes**
+  * **[pipes](https://workos.com/docs/reference/pipes)**:
+    * Removed `userland_user` from `CreateDataIntegrationOwnership`
+    * Removed `userland_user` from `DataIntegrationOwnership`
+    * Changed errors for endpoint `POST /user_management/users/{user_id}/connected_accounts/{slug}`
+    * Changed errors for endpoint `PUT /data-integrations/{slug}/api-key`
+    * Changed errors for endpoint `PUT /data-integrations/{slug}/client-credentials`
+    * Changed errors for endpoint `POST /data-integrations/{slug}/credentials`
+    * Changed errors for endpoint `POST /data-integrations/{provider}/token`
+    * Changed errors for endpoint `GET /user_management/users/{user_id}/connected_accounts/{slug}`
+    * Changed errors for endpoint `PUT /user_management/users/{user_id}/connected_accounts/{slug}`
+    * Changed errors for endpoint `DELETE /user_management/users/{user_id}/connected_accounts/{slug}`
+    * Changed the type of `DataIntegrationInstallation.user_id`

.last-synced-sha

@@ -1 +1 @@
-6fba233c50a5b651b2df7b859b75bfe715bc825a
+d3fa61120f8b9e73972b9dc5f4b5ea2bc0526636

.oagen-manifest.json

@@ -106,6 +106,7 @@
     "src/workos/common/__init__.py",
     "src/workos/common/models/__init__.py",
     "src/workos/common/models/access_token_agent_registration_credential_issued_data_detail.py",
+    "src/workos/common/models/account_selection_required_error.py",
     "src/workos/common/models/action_authentication_denied.py",
     "src/workos/common/models/action_authentication_denied_data.py",
     "src/workos/common/models/action_user_registration_denied.py",
@@ -280,6 +281,7 @@
     "src/workos/common/models/create_connection_oidc_options_id_token_signature_algorithm.py",
     "src/workos/common/models/create_connection_oidc_options_token_authentication_method.py",
     "src/workos/common/models/create_data_integration_auth_methods.py",
+    "src/workos/common/models/create_data_integration_ownership.py",
     "src/workos/common/models/create_user_invite_options_locale.py",
     "src/workos/common/models/create_user_password_hash_type.py",
     "src/workos/common/models/create_user_password_salt_position.py",
@@ -292,11 +294,16 @@
     "src/workos/common/models/data_integration_credentials_input_type.py",
     "src/workos/common/models/data_integration_credentials_response_error.py",
     "src/workos/common/models/data_integration_custom_provider_authenticate_via.py",
+    "src/workos/common/models/data_integration_ownership.py",
     "src/workos/common/models/data_integration_state.py",
+    "src/workos/common/models/data_integrations_get_user_token_request_connection_owner.py",
     "src/workos/common/models/data_integrations_list_response_data_auth_methods.py",
     "src/workos/common/models/data_integrations_list_response_data_connected_account_auth_method.py",
     "src/workos/common/models/data_integrations_list_response_data_connected_account_state.py",
     "src/workos/common/models/data_integrations_list_response_data_ownership.py",
+    "src/workos/common/models/data_integrations_upsert_api_key_request_connection_owner.py",
+    "src/workos/common/models/data_integrations_upsert_client_credentials_request_connection_owner.py",
+    "src/workos/common/models/data_integrations_vend_credentials_request_connection_owner.py",
     "src/workos/common/models/directory_group.py",
     "src/workos/common/models/directory_state.py",
     "src/workos/common/models/directory_type.py",
@@ -690,6 +697,7 @@
     "src/workos/pipes/models/data_integrations_upsert_api_key_request.py",
     "src/workos/pipes/models/data_integrations_upsert_client_credentials_request.py",
     "src/workos/pipes/models/data_integrations_vend_credentials_request.py",
+    "src/workos/pipes/models/pipes_ownership.py",
     "src/workos/pipes/models/update_custom_provider_definition.py",
     "src/workos/pipes/models/update_data_integration.py",
     "src/workos/pipes_provider/__init__.py",
@@ -777,10 +785,12 @@
     "src/workos/user_management/models/__init__.py",
     "src/workos/user_management/models/authenticate_response.py",
     "src/workos/user_management/models/authenticate_response_oauth_token.py",
+    "src/workos/user_management/models/authkit_oauth_resource.py",
     "src/workos/user_management/models/authorization_code_session_authenticate_request.py",
     "src/workos/user_management/models/authorized_connect_application_list_data.py",
     "src/workos/user_management/models/confirm_email_change.py",
     "src/workos/user_management/models/cors_origin_response.py",
+    "src/workos/user_management/models/create_authkit_oauth_resource.py",
     "src/workos/user_management/models/create_cors_origin.py",
     "src/workos/user_management/models/create_magic_code_and_return.py",
     "src/workos/user_management/models/create_password_reset.py",
@@ -868,6 +878,7 @@
     "src/workos/widgets/models/widget_session_token.py",
     "src/workos/widgets/models/widget_session_token_response.py",
     "tests/fixtures/access_token_agent_registration_credential_issued_data_detail.json",
+    "tests/fixtures/account_selection_required_error.json",
     "tests/fixtures/action_authentication_denied.json",
     "tests/fixtures/action_authentication_denied_data.json",
     "tests/fixtures/action_user_registration_denied.json",
@@ -1032,6 +1043,7 @@
     "tests/fixtures/authentication_sso_timed_out_data.json",
     "tests/fixtures/authentication_sso_timed_out_data_error.json",
     "tests/fixtures/authentication_sso_timed_out_data_sso.json",
+    "tests/fixtures/authkit_oauth_resource.json",
     "tests/fixtures/authorization_check.json",
     "tests/fixtures/authorization_code_session_authenticate_request.json",
     "tests/fixtures/authorization_permission.json",
@@ -1070,6 +1082,7 @@
     "tests/fixtures/connection_saml_certificate_renewed_data_certificate.json",
     "tests/fixtures/connection_saml_certificate_renewed_data_connection.json",
     "tests/fixtures/cors_origin_response.json",
+    "tests/fixtures/create_authkit_oauth_resource.json",
     "tests/fixtures/create_authorization_permission.json",
     "tests/fixtures/create_authorization_resource.json",
     "tests/fixtures/create_connection.json",
@@ -1249,6 +1262,7 @@
     "tests/fixtures/list_audit_log_action.json",
     "tests/fixtures/list_audit_log_schema.json",
     "tests/fixtures/list_authentication_factor.json",
+    "tests/fixtures/list_authkit_oauth_resource.json",
     "tests/fixtures/list_authorization_permission.json",
     "tests/fixtures/list_authorization_resource.json",
     "tests/fixtures/list_authorized_connect_application_list_data.json",
@@ -2550,6 +2564,30 @@
     "POST /agents/blueprints/{agent_blueprint_id}/tokens/validate": {
       "sdkMethod": "validate_blueprint_token",
       "service": "agents"
+    },
+    "GET /data-integrations/{slug}/organization": {
+      "sdkMethod": "list_data_integration_organization",
+      "service": "pipes"
+    },
+    "PUT /data-integrations/{slug}/organization": {
+      "sdkMethod": "update_data_integration_organization",
+      "service": "pipes"
+    },
+    "DELETE /data-integrations/{slug}/organization": {
+      "sdkMethod": "delete_data_integration_organization",
+      "service": "pipes"
+    },
+    "GET /user_management/authkit_oauth_resources": {
+      "sdkMethod": "list_authkit_oauth_resources",
+      "service": "user_management"
+    },
+    "POST /user_management/authkit_oauth_resources": {
+      "sdkMethod": "create_authkit_oauth_resource",
+      "service": "user_management"
+    },
+    "DELETE /user_management/authkit_oauth_resources/{id}": {
+      "sdkMethod": "delete_authkit_oauth_resource",
+      "service": "user_management"
     }
   }
 }

src/workos/admin_portal/_resource.py

@@ -34,8 +34,8 @@ def generate_link(
         Generate a Portal Link scoped to an Organization.
 
         Args:
-            return_url: The URL to go to when an admin clicks on your logo in the Admin Portal. If not specified, the return URL configured on the [Redirects](https://dashboard.workos.com/redirects) page will be used.
-            success_url: The URL to redirect the admin to when they finish setup. If not specified, the success URL configured on the [Redirects](https://dashboard.workos.com/redirects) page will be used.
+            return_url: The URL to go to when an admin clicks on your logo in the Admin Portal. If not specified, the return URL configured on the [Admin Portal](https://dashboard.workos.com/admin-portal) page will be used.
+            success_url: The URL to redirect the admin to when they finish setup. If not specified, the success URL configured on the [Admin Portal](https://dashboard.workos.com/admin-portal) page will be used.
             organization: An [Organization](https://workos.com/docs/reference/organization) identifier.
             intent: The intent of the Admin Portal.
                 - `sso` - Launch Admin Portal for creating SSO connections
@@ -101,8 +101,8 @@ async def generate_link(
         Generate a Portal Link scoped to an Organization.
 
         Args:
-            return_url: The URL to go to when an admin clicks on your logo in the Admin Portal. If not specified, the return URL configured on the [Redirects](https://dashboard.workos.com/redirects) page will be used.
-            success_url: The URL to redirect the admin to when they finish setup. If not specified, the success URL configured on the [Redirects](https://dashboard.workos.com/redirects) page will be used.
+            return_url: The URL to go to when an admin clicks on your logo in the Admin Portal. If not specified, the return URL configured on the [Admin Portal](https://dashboard.workos.com/admin-portal) page will be used.
+            success_url: The URL to redirect the admin to when they finish setup. If not specified, the success URL configured on the [Admin Portal](https://dashboard.workos.com/admin-portal) page will be used.
             organization: An [Organization](https://workos.com/docs/reference/organization) identifier.
             intent: The intent of the Admin Portal.
                 - `sso` - Launch Admin Portal for creating SSO connections

src/workos/admin_portal/models/generate_link.py

@@ -17,9 +17,9 @@ class GenerateLink:
     organization: str
     """An [Organization](https://workos.com/docs/reference/organization) identifier."""
     return_url: str | None = None
-    """The URL to go to when an admin clicks on your logo in the Admin Portal. If not specified, the return URL configured on the [Redirects](https://dashboard.workos.com/redirects) page will be used."""
+    """The URL to go to when an admin clicks on your logo in the Admin Portal. If not specified, the return URL configured on the [Admin Portal](https://dashboard.workos.com/admin-portal) page will be used."""
     success_url: str | None = None
-    """The URL to redirect the admin to when they finish setup. If not specified, the success URL configured on the [Redirects](https://dashboard.workos.com/redirects) page will be used."""
+    """The URL to redirect the admin to when they finish setup. If not specified, the success URL configured on the [Admin Portal](https://dashboard.workos.com/admin-portal) page will be used."""
     intent: GenerateLinkIntent | None = None
     """
       The intent of the Admin Portal.