feat(generated): Sync with spec: agents, SSO connections, and more

[workos-sdk-automation]

Summary

This regeneration brings the SDK in sync with several OpenAPI spec releases, so it contains far more than the auto-generated summary suggested. What's actually included:

Added

• Agents: blueprint, instance, session, and blueprint-token endpoints mounted onto the existing Agents service (AgentBlueprint, AgentInstance, AgentInstanceSession, AgentToken, and related request models/enums). The changelog's "Removed service Agents" is a tag reorganization in the spec — no agent endpoints or methods were removed; the existing registration/claim methods are unchanged.
• SSO: connection management (POST /connections, PATCH /connections/{id}) and SAML certificate endpoints (IdP signing certs, SP encryption certs, SP signing cert).
• Organizations: IT contacts endpoints (create/list/invite/revoke/delete).
• Platform Teams: new service (Team, CreateTeam).
• User Management: new email-completion grant for POST /user_management/authenticate (EmailCompletionSessionAuthenticateRequest) plus the email_completion_required error response, and waitlist endpoints.
• Audit Logs: new retention_period month/year enum option on the update-retention endpoint (see breaking changes below for the parameter shape).
• Webhooks: agent.instance.* and agent.blueprint.* event types.

Removed

• DiscordOAuth, GrokOAuth, and XOAuth values from the connection type / profile connection type / authentication method enums. These are true removals.

Moved or reorganized (listed as "removed" in the changelog, but not actually gone)

• The changelog fragment's "Removed service Agents" + "Added service AgentsBlueprints/AgentsInstances/..." entries reflect the spec re-tagging agent endpoints under sub-resource tags — the endpoints themselves were added or kept, not removed.
• The TokenBody/TokenQuery removed-then-added entries are churn from the SSO token endpoint's request moving between body and query representations; the endpoint's surface is intact.

Breaking changes in this SDK

• AuditLogs.update_organization_audit_logs_retention: the retention_period_in_days parameter was replaced by retention: RetentionPeriod | RetentionPeriodInDays. The days-based value moved into the RetentionPeriodInDays union member (deprecated upstream) rather than being removed; the new RetentionPeriod member takes the month/year enum.
• SSO.get_profile_and_token: code is now optional, and a PKCE variant (get_profile_and_token_pkce) was added.
• UserManagement.create_authenticate: the body union type widened to include EmailCompletionSessionAuthenticateRequest (additive for callers).
• ValidateApiKey is now a TypeAlias of CreateSAMLIdpSigningCertificate — the generator deduplicated structurally identical models. The symbol still exists with the same shape; it was aliased, not removed (the changelog's "Removed symbol" entry is misleading).
• DiscordOAuth, GrokOAuth, and XOAuth were removed from the connection type / profile connection type / authentication method enums.

Triggered by workos/openapi-spec@6676276

BEGIN_COMMIT_OVERRIDE
feat(agents): Add blueprint, instance, and session endpoints (#719)
feat(sso): Add connection management and SAML certificate endpoints (#719)
feat(organizations): Add IT contacts endpoints (#719)
feat(platform_teams): Add Platform Teams service (#719)
feat(user_management): Add email-completion grant and waitlist endpoints (#719)
feat(audit_logs): Replace retention_period_in_days param with retention union supporting retention periods (#719)
feat(sso): Make code optional on get_profile_and_token and add PKCE variant (#719)
feat(api_keys): Alias ValidateApiKey to deduplicated model (#719)
feat(webhooks): Add agent instance and blueprint webhook event types (#719)
fix(sso): Remove DiscordOAuth, GrokOAuth, and XOAuth from connection type enums (#719)
END_COMMIT_OVERRIDE

Link to Devin session: https://app.devin.ai/sessions/151cadc0bb534027a325939c3c68c0d3
Open in Devin Desktop: https://app.devin.ai/desktop/session/151cadc0bb534027a325939c3c68c0d3?variant=devin
Requested by: @m0tzy

[greptile-apps]

Too many files changed for review (228 files, 100 file limit).

Bypass the limit by tagging @greptile-apps to review.