clerk
diff --git a/‎.speakeasy/gen.lock‎
Lines changed: 603 additions & 669 deletions b/‎.speakeasy/gen.lock‎
Lines changed: 603 additions & 669 deletions
diff --git a/‎.speakeasy/gen.yaml‎
Lines changed: 1 addition & 1 deletion b/‎.speakeasy/gen.yaml‎
Lines changed: 1 addition & 1 deletion
diff --git a/‎.speakeasy/out.openapi.yaml‎
Lines changed: 94 additions & 34 deletions b/‎.speakeasy/out.openapi.yaml‎
Lines changed: 94 additions & 34 deletions
@@ -31,7 +31,7 @@ generation:
     generateNewTests: true
     skipResponseBodyAssertions: false
 ruby:
-  version: 7.0.0
+  version: 7.0.1
   additionalDependencies:
     development:
       activesupport: ~> 8.0.0
 
@@ -3319,7 +3319,10 @@ paths:
       x-speakeasy-group: users
       x-speakeasy-name-override: unsetPasswordCompromised
       summary: Unset a user's password as compromised
-      description: Sets the given user's password as no longer compromised. The user will no longer be prompted to reset their password on their next sign-in.
+      description: |-
+        Sets the given user's password as no longer compromised. The user will no longer be prompted to reset their password on their next sign-in.
+
+        If the user is in reserved-email password quarantine, the quarantine is preserved and the returned user will still have `requires_password_reset` set to `true`. Reserved-email password quarantine can only be cleared by completing a password reset or changing/removing the password.
       tags:
         - Users
       parameters:
@@ -6578,7 +6581,7 @@ paths:
                   nullable: false
                 enrollment_mode:
                   type: string
-                  description: The enrollment_mode for the new domain. This can be `automatic_invitation`, `automatic_suggestion` or `manual_invitation`
+                  description: The enrollment_mode for the new domain. This can be `automatic_invitation`, `automatic_suggestion`, `manual_invitation` or `enterprise_sso`
                   nullable: false
                 verified:
                   type: boolean
@@ -6619,7 +6622,9 @@ paths:
         - in: query
           required: false
           name: enrollment_mode
-          description: Filter domains by their enrollment mode
+          description: |-
+            Filter domains by their enrollment mode. Accepts `automatic_invitation`, `automatic_suggestion`, `manual_invitation` or `enterprise_sso`.
+            Prefix a value with `-` to exclude it instead (e.g. `-enterprise_sso`). Include and exclude filters can be combined and compose as AND.
           schema:
             type: string
         - $ref: '#/components/parameters/LimitParameter'
@@ -6662,7 +6667,7 @@ paths:
               properties:
                 enrollment_mode:
                   type: string
-                  description: The enrollment_mode for the new domain. This can be `automatic_invitation`, `automatic_suggestion` or `manual_invitation`
+                  description: The enrollment_mode for the new domain. This can be `automatic_invitation`, `automatic_suggestion`, `manual_invitation` or `enterprise_sso`
                   nullable: true
                 verified:
                   type: boolean
@@ -6673,6 +6678,8 @@ paths:
           $ref: '#/components/responses/OrganizationDomain'
         '400':
           $ref: '#/components/responses/ClerkErrors'
+        '403':
+          $ref: '#/components/responses/ClerkErrors'
         '404':
           $ref: '#/components/responses/ResourceNotFound'
         '422':
@@ -6705,6 +6712,8 @@ paths:
           $ref: '#/components/responses/ClerkErrors'
         '401':
           $ref: '#/components/responses/AuthenticationInvalid'
+        '403':
+          $ref: '#/components/responses/ClerkErrors'
         '404':
           $ref: '#/components/responses/ResourceNotFound'
   /organizations/{organization_id}/domains/{domain_id}/verify_ownership:
@@ -6779,7 +6788,9 @@ paths:
               - 'false'
         - in: query
           name: enrollment_mode
-          description: Filter by enrollment mode
+          description: |-
+            Filter by enrollment mode. Prefix a value with `-` to exclude it instead
+            (e.g. `-enterprise_sso`). Include and exclude filters can be combined and compose as AND.
           required: false
           style: form
           explode: false
@@ -6791,6 +6802,11 @@ paths:
                 - manual_invitation
                 - automatic_invitation
                 - automatic_suggestion
+                - enterprise_sso
+                - '-manual_invitation'
+                - '-automatic_invitation'
+                - '-automatic_suggestion'
+                - '-enterprise_sso'
         - in: query
           name: query
           description: |
@@ -7371,6 +7387,49 @@ paths:
           $ref: '#/components/responses/AuthorizationInvalid'
         '404':
           $ref: '#/components/responses/ResourceNotFound'
+  /oauth_applications/{oauth_application_id}/revoke_token:
+    post:
+      operationId: RevokeOAuthApplicationToken
+      x-speakeasy-group: oauthApplications
+      x-speakeasy-name-override: revokeToken
+      summary: Revoke an OAuth application token
+      description: |-
+        Revoke both OAuth access token and refresh token for the associated grant for the given OAuth application.
+        The request may specify either token.
+        JWT access tokens cannot be revoked.
+      tags:
+        - OAuth Applications
+      parameters:
+        - name: oauth_application_id
+          in: path
+          description: The ID of the OAuth application for which to revoke the token
+          required: true
+          schema:
+            type: string
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              additionalProperties: false
+              properties:
+                token:
+                  type: string
+                  description: The opaque OAuth access token or refresh token to revoke. All tokens associated with the same OAuth grant are also revoked.
+              required:
+                - token
+      responses:
+        '204':
+          description: Token revoked
+        '400':
+          $ref: '#/components/responses/ClerkErrors'
+        '403':
+          $ref: '#/components/responses/AuthorizationInvalid'
+        '404':
+          $ref: '#/components/responses/ResourceNotFound'
+        '422':
+          $ref: '#/components/responses/UnprocessableEntity'
   /saml_connections:
     get:
       deprecated: true
@@ -8828,7 +8887,7 @@ paths:
               $ref: '#/components/schemas/ExtendFreeTrialRequest'
       responses:
         '200':
-          $ref: '#/components/responses/responses-CommerceSubscriptionItem'
+          $ref: '#/components/responses/CommerceSubscriptionItem-2'
         '400':
           $ref: '#/components/responses/ClerkErrors'
         '401':
@@ -9516,6 +9575,9 @@ paths:
   /audit_logs/{event_time_and_id}: {}
   /scim_directories: {}
   /scim_directories/{scim_directory_id}: {}
+  /scim_directories/{scim_directory_id}/groups: {}
+  /scim_directories/{scim_directory_id}/group_role_mappings: {}
+  /scim_directories/{scim_directory_id}/group_role_mappings/{mapping_id}: {}
   /admin_portal_link_tokens:
     post:
       operationId: createAdminPortalLinkToken
@@ -12282,6 +12344,7 @@ components:
           type: string
         meta:
           type: object
+          additionalProperties: true
       required:
         - message
         - long_message
@@ -12295,6 +12358,7 @@ components:
             $ref: '#/components/schemas/ClerkError'
         meta:
           type: object
+          additionalProperties: true
       required:
         - errors
     verification_otp:
@@ -14303,7 +14367,7 @@ components:
           type: integer
           format: int64
           description: Unix timestamp (in milliseconds) when the payer was last updated.
-    schemas-CommercePerUnitTotalTier:
+    CommercePerUnitTotalTier-2:
       type: object
       additionalProperties: false
       properties:
@@ -14333,11 +14397,11 @@ components:
         tiers:
           type: array
           items:
-            $ref: '#/components/schemas/schemas-CommercePerUnitTotalTier'
+            $ref: '#/components/schemas/CommercePerUnitTotalTier-2'
           description: Per-unit cost breakdown by pricing tier
       required:
         - quantity
-    schemas-CommercePerUnitTotal:
+    CommercePerUnitTotal-2:
       type: object
       additionalProperties: false
       properties:
@@ -14351,7 +14415,7 @@ components:
         tiers:
           type: array
           items:
-            $ref: '#/components/schemas/schemas-CommercePerUnitTotalTier'
+            $ref: '#/components/schemas/CommercePerUnitTotalTier-2'
           description: Computed totals for each pricing tier
       required:
         - name
@@ -14397,7 +14461,7 @@ components:
       required:
         - proration
         - total
-    schemas-CommerceTotalsResponse:
+    CommerceTotalsResponse-2:
       type: object
       additionalProperties: false
       properties:
@@ -14412,7 +14476,7 @@ components:
         per_unit_totals:
           type: array
           items:
-            $ref: '#/components/schemas/schemas-CommercePerUnitTotal'
+            $ref: '#/components/schemas/CommercePerUnitTotal-2'
         credits:
           allOf:
             - $ref: '#/components/schemas/CommerceCreditsResponse'
@@ -14558,7 +14622,7 @@ components:
           description: Seat quantity for seat-based billing.
         totals:
           allOf:
-            - $ref: '#/components/schemas/schemas-CommerceTotalsResponse'
+            - $ref: '#/components/schemas/CommerceTotalsResponse-2'
           nullable: true
           description: Totals for this subscription item.
     CommerceSubscriptionNextPayment:
@@ -14578,11 +14642,11 @@ components:
         per_unit_totals:
           type: array
           items:
-            $ref: '#/components/schemas/schemas-CommercePerUnitTotal'
+            $ref: '#/components/schemas/CommercePerUnitTotal-2'
           description: Per-unit total breakdown (for example, seats) for the next payment.
         totals:
           allOf:
-            - $ref: '#/components/schemas/schemas-CommerceTotalsResponse'
+            - $ref: '#/components/schemas/CommerceTotalsResponse-2'
           nullable: true
           description: Breakdown of the recurring amount that will be billed at renewal (base fee + per-unit charges). Tax and credits are not previewed.
     CommerceSubscription:
@@ -14703,7 +14767,6 @@ components:
         - id
         - payer_id
         - amount
-        - currency
         - source_type
         - source_id
         - created_at
@@ -14718,12 +14781,8 @@ components:
           type: string
           description: The ID of the payer whose balance was adjusted.
         amount:
-          type: integer
-          format: int64
-          description: The signed credit amount. Positive for increases, negative for decreases.
-        currency:
-          type: string
-          description: The currency code of the credit adjustment.
+          $ref: '#/components/schemas/CommerceMoneyResponse'
+          description: The credit amount with formatting. Positive for increases, negative for decreases.
         source_type:
           type: string
           description: The type of source that originated the adjustment (e.g. "grant").
@@ -15732,6 +15791,7 @@ components:
             - manual_invitation
             - automatic_invitation
             - automatic_suggestion
+            - enterprise_sso
         affiliation_email_address:
           type: string
           nullable: true
@@ -16871,7 +16931,7 @@ components:
             RFC3339 timestamp to extend the free trial to.
             Must be in the future and not more than 365 days from now.
           example: '2026-01-08T00:00:00Z'
-    schemas-FeatureResponse:
+    FeatureResponse-2:
       type: object
       additionalProperties: false
       required:
@@ -16902,7 +16962,7 @@ components:
         avatar_url:
           type: string
           description: The URL of the feature's avatar image.
-    schemas-CommercePlan:
+    CommercePlan-2:
       type: object
       additionalProperties: false
       required:
@@ -17024,7 +17084,7 @@ components:
         features:
           type: array
           items:
-            $ref: '#/components/schemas/schemas-FeatureResponse'
+            $ref: '#/components/schemas/FeatureResponse-2'
           description: The features included in this plan.
         free_trial_enabled:
           type: boolean
@@ -17116,7 +17176,7 @@ components:
           type: boolean
           nullable: true
           description: Whether this payment source can be removed.
-    schemas-CommercePayerResponse:
+    CommercePayerResponse-2:
       type: object
       additionalProperties: false
       required:
@@ -17173,7 +17233,7 @@ components:
           type: integer
           format: int64
           description: Unix timestamp (in milliseconds) when the payer was last updated.
-    schemas-CommerceSubscriptionItem:
+    CommerceSubscriptionItem-2:
       type: object
       additionalProperties: false
       required:
@@ -17225,7 +17285,7 @@ components:
           description: Unique identifier for the associated price
         plan:
           allOf:
-            - $ref: '#/components/schemas/schemas-CommercePlan'
+            - $ref: '#/components/schemas/CommercePlan-2'
           nullable: true
           description: The associated commerce plan.
         plan_period:
@@ -17267,7 +17327,7 @@ components:
           description: Unique identifier for the payer.
         payer:
           allOf:
-            - $ref: '#/components/schemas/schemas-CommercePayerResponse'
+            - $ref: '#/components/schemas/CommercePayerResponse-2'
           nullable: true
           description: The payer associated with this subscription.
         is_free_trial:
@@ -17335,7 +17395,7 @@ components:
         - previous_subscription_item_id
       properties:
         previous_plan:
-          $ref: '#/components/schemas/schemas-CommercePlan'
+          $ref: '#/components/schemas/CommercePlan-2'
         previous_price:
           $ref: '#/components/schemas/BillingPriceResponse'
         effective_at:
@@ -17385,7 +17445,7 @@ components:
           enum:
             - commerce_price_transition
         subscription_item:
-          $ref: '#/components/schemas/schemas-CommerceSubscriptionItem'
+          $ref: '#/components/schemas/CommerceSubscriptionItem-2'
         transition:
           $ref: '#/components/schemas/CommercePriceTransitionDetails'
     BillingPaymentAttempt:
@@ -17453,7 +17513,7 @@ components:
           description: The amount for this payment attempt.
         totals:
           allOf:
-            - $ref: '#/components/schemas/schemas-CommerceTotalsResponse'
+            - $ref: '#/components/schemas/CommerceTotalsResponse-2'
           nullable: true
           description: Totals breakdown for this payment attempt.
         payment_method_id:
@@ -18532,12 +18592,12 @@ components:
         application/json:
           schema:
             $ref: '#/components/schemas/CommerceSubscriptionItem'
-    responses-CommerceSubscriptionItem:
+    CommerceSubscriptionItem-2:
       description: A commerce subscription item.
       content:
         application/json:
           schema:
-            $ref: '#/components/schemas/schemas-CommerceSubscriptionItem'
+            $ref: '#/components/schemas/CommerceSubscriptionItem-2'
     CommercePriceTransition:
       description: A commerce price transition.
       content: