feat(generated): regenerate from spec (9 changes) (#665)

Co-authored-by: workos-sdk-automation[bot] <255426317+workos-sdk-automation[bot]@users.noreply.github.com>
Co-authored-by: Garen J. Torikian <gjtorikian@users.noreply.github.com>

Author: workos-sdk-automation[bot]

.changelog-pending/2026-06-03T19-20-22-dee95fc33c4f813ac60adfa8c57d210db8183dd8.md

@@ -0,0 +1,39 @@
+- [#665](https://github.com/workos/workos-python/pull/665) feat(generated)!: regenerate from spec (9 changes)
+
+  **⚠️ Breaking**
+  - **[api_keys](https://workos.com/docs/reference/authkit/api-keys)**:
+    - Made `expires_at` required in API key models
+  - **[directory_sync](https://workos.com/docs/reference/directory-sync)**:
+    - Removed model `DsyncDeactivated`
+    - Removed model `DsyncDeactivatedData`
+    - Removed model `DsyncDeactivatedDataDomain`
+    - Removed enum `DsyncDeactivatedDataType`
+    - Removed enum `DsyncDeactivatedDataState`
+  - **[radar](https://workos.com/docs/reference/radar)**:
+    - Removed `domain_sign_up_rate_limit` from `RadarStandaloneResponseControl`
+  - **[user_management](https://workos.com/docs/reference/authkit/user)**:
+    - Removed `return_to` from `RevokeSession`
+
+  **Features**
+  - **[api_keys](https://workos.com/docs/reference/authkit/api-keys)**:
+    - Added model `ExpireApiKey`
+    - Added model `ApiKeyUpdated`
+    - Added model `ApiKeyUpdatedData`
+    - Added model `ApiKeyUpdatedDataOwner`
+    - Added model `UserApiKeyUpdatedDataOwner`
+    - Added model `ApiKeyUpdatedDataPreviousAttribute`
+    - Added endpoint `POST /api_keys/{id}/expire`
+  - **[audit_logs](https://workos.com/docs/reference/audit-logs)**:
+    - Added `Snowflake` to `AuditLogConfigurationLogStreamType`
+  - **[connect](https://workos.com/docs/reference/workos-connect/standalone)**:
+    - Added `name` to `UserObject`
+  - **[directory_sync](https://workos.com/docs/reference/directory-sync)**:
+    - Added model `DsyncTokenCreated`
+    - Added model `DsyncTokenCreatedData`
+    - Added model `DsyncTokenRevoked`
+    - Added model `DsyncTokenRevokedData`
+  - **[user_management](https://workos.com/docs/reference/authkit/user)**:
+    - Added `name` to user management models
+  - **[webhooks](https://workos.com/docs/reference/webhooks)**:
+    - Added `api_key.updated` to `CreateWebhookEndpointEvents`
+    - Added `api_key.updated` to `UpdateWebhookEndpointEvents`

.last-synced-sha

@@ -1 +1 @@
-cb6857d51b453e3cbdb5bf3647d3ca229dd8af65
+d8c5a7de598792b1cee18d4a9842825110e5c74a

.oagen-manifest.json

@@ -1,7 +1,7 @@
 {
   "version": 2,
   "language": "python",
-  "generatedAt": "2026-05-26T19:47:29.645Z",
+  "generatedAt": "2026-06-03T19:19:55.137Z",
   "files": [
     "src/workos/_client.py",
     "src/workos/admin_portal/__init__.py",
@@ -19,6 +19,7 @@
     "src/workos/api_keys/models/api_key_owner.py",
     "src/workos/api_keys/models/api_key_validation_response.py",
     "src/workos/api_keys/models/create_organization_api_key.py",
+    "src/workos/api_keys/models/expire_api_key.py",
     "src/workos/api_keys/models/organization_api_key.py",
     "src/workos/api_keys/models/organization_api_key_owner.py",
     "src/workos/api_keys/models/organization_api_key_with_value.py",
@@ -79,6 +80,10 @@
     "src/workos/common/models/api_key_revoked.py",
     "src/workos/common/models/api_key_revoked_data.py",
     "src/workos/common/models/api_key_revoked_data_owner.py",
+    "src/workos/common/models/api_key_updated.py",
+    "src/workos/common/models/api_key_updated_data.py",
+    "src/workos/common/models/api_key_updated_data_owner.py",
+    "src/workos/common/models/api_key_updated_data_previous_attribute.py",
     "src/workos/common/models/audit_log_configuration_log_stream_state.py",
     "src/workos/common/models/audit_log_configuration_log_stream_type.py",
     "src/workos/common/models/audit_log_configuration_state.py",
@@ -195,11 +200,6 @@
     "src/workos/common/models/dsync_activated_data_domain.py",
     "src/workos/common/models/dsync_activated_data_state.py",
     "src/workos/common/models/dsync_activated_data_type.py",
-    "src/workos/common/models/dsync_deactivated.py",
-    "src/workos/common/models/dsync_deactivated_data.py",
-    "src/workos/common/models/dsync_deactivated_data_domain.py",
-    "src/workos/common/models/dsync_deactivated_data_state.py",
-    "src/workos/common/models/dsync_deactivated_data_type.py",
     "src/workos/common/models/dsync_deleted.py",
     "src/workos/common/models/dsync_deleted_data.py",
     "src/workos/common/models/dsync_deleted_data_state.py",
@@ -212,6 +212,10 @@
     "src/workos/common/models/dsync_group_user_added_data.py",
     "src/workos/common/models/dsync_group_user_removed.py",
     "src/workos/common/models/dsync_group_user_removed_data.py",
+    "src/workos/common/models/dsync_token_created.py",
+    "src/workos/common/models/dsync_token_created_data.py",
+    "src/workos/common/models/dsync_token_revoked.py",
+    "src/workos/common/models/dsync_token_revoked_data.py",
     "src/workos/common/models/dsync_user_created.py",
     "src/workos/common/models/dsync_user_deleted.py",
     "src/workos/common/models/dsync_user_updated.py",
@@ -396,6 +400,7 @@
     "src/workos/common/models/user.py",
     "src/workos/common/models/user_api_key_created_data_owner.py",
     "src/workos/common/models/user_api_key_revoked_data_owner.py",
+    "src/workos/common/models/user_api_key_updated_data_owner.py",
     "src/workos/common/models/user_created.py",
     "src/workos/common/models/user_deleted.py",
     "src/workos/common/models/user_identities_get_item_provider.py",
@@ -674,6 +679,10 @@
     "tests/fixtures/api_key_revoked.json",
     "tests/fixtures/api_key_revoked_data.json",
     "tests/fixtures/api_key_revoked_data_owner.json",
+    "tests/fixtures/api_key_updated.json",
+    "tests/fixtures/api_key_updated_data.json",
+    "tests/fixtures/api_key_updated_data_owner.json",
+    "tests/fixtures/api_key_updated_data_previous_attribute.json",
     "tests/fixtures/api_key_validation_response.json",
     "tests/fixtures/application_credentials_list_item.json",
     "tests/fixtures/assign_role.json",
@@ -835,9 +844,6 @@
     "tests/fixtures/dsync_activated.json",
     "tests/fixtures/dsync_activated_data.json",
     "tests/fixtures/dsync_activated_data_domain.json",
-    "tests/fixtures/dsync_deactivated.json",
-    "tests/fixtures/dsync_deactivated_data.json",
-    "tests/fixtures/dsync_deactivated_data_domain.json",
     "tests/fixtures/dsync_deleted.json",
     "tests/fixtures/dsync_deleted_data.json",
     "tests/fixtures/dsync_group_created.json",
@@ -848,6 +854,10 @@
     "tests/fixtures/dsync_group_user_added_data.json",
     "tests/fixtures/dsync_group_user_removed.json",
     "tests/fixtures/dsync_group_user_removed_data.json",
+    "tests/fixtures/dsync_token_created.json",
+    "tests/fixtures/dsync_token_created_data.json",
+    "tests/fixtures/dsync_token_revoked.json",
+    "tests/fixtures/dsync_token_revoked_data.json",
     "tests/fixtures/dsync_user_created.json",
     "tests/fixtures/dsync_user_deleted.json",
     "tests/fixtures/dsync_user_updated.json",
@@ -867,6 +877,7 @@
     "tests/fixtures/event_context_google_analytics_session.json",
     "tests/fixtures/event_list_list_metadata.json",
     "tests/fixtures/event_schema.json",
+    "tests/fixtures/expire_api_key.json",
     "tests/fixtures/external_auth_complete_response.json",
     "tests/fixtures/feature_flag.json",
     "tests/fixtures/feature_flag_owner.json",
@@ -1081,6 +1092,7 @@
     "tests/fixtures/user_api_key_created_data_owner.json",
     "tests/fixtures/user_api_key_owner.json",
     "tests/fixtures/user_api_key_revoked_data_owner.json",
+    "tests/fixtures/user_api_key_updated_data_owner.json",
     "tests/fixtures/user_api_key_with_value.json",
     "tests/fixtures/user_api_key_with_value_owner.json",
     "tests/fixtures/user_authentication_factor_enroll_response.json",
@@ -1856,6 +1868,10 @@
       "sdkMethod": "delete_api_key",
       "service": "api_keys"
     },
+    "POST /api_keys/{id}/expire": {
+      "sdkMethod": "create_api_key_expire",
+      "service": "api_keys"
+    },
     "GET /user_management/users/{userId}/api_keys": {
       "sdkMethod": "list_user_api_keys",
       "service": "user_management"

src/workos/api_keys/_resource.py

@@ -9,6 +9,7 @@
 
 from .._types import RequestOptions, enum_value
 from .models import (
+    ApiKey,
     ApiKeyValidationResponse,
     OrganizationApiKey,
     OrganizationApiKeyWithValue,
@@ -179,6 +180,48 @@ def delete_api_key(
             request_options=request_options,
         )
 
+    def create_api_key_expire(
+        self,
+        id: str,
+        *,
+        expires_at: Optional[str] = None,
+        request_options: Optional[RequestOptions] = None,
+    ) -> ApiKey:
+        """Expire an API key
+
+        Expire an API key immediately, schedule a future expiration, or clear a scheduled future expiration.
+
+        Args:
+            id: The unique ID of the API key.
+            expires_at: When the API key should expire. If omitted or in the past, the key expires immediately. Use null to clear a scheduled future expiration.
+            request_options: Per-request options. Supports extra_headers, timeout, max_retries, and base_url override.
+
+        Returns:
+            ApiKey
+
+        Raises:
+            NotFoundError: If the resource is not found (404).
+            ConflictError: If a conflict occurs (409).
+            UnprocessableEntityError: If the request data is unprocessable (422).
+            AuthenticationError: If the API key is invalid (401).
+            RateLimitExceededError: If rate limited (429).
+            ServerError: If the server returns a 5xx error.
+        """
+        body: Dict[str, Any] = {
+            k: v
+            for k, v in {
+                "expires_at": expires_at,
+            }.items()
+            if v is not None
+        }
+        return self._client.request(
+            method="post",
+            path=("api_keys", str(id), "expire"),
+            body=body,
+            model=ApiKey,
+            request_options=request_options,
+        )
+
 
 class AsyncApiKeys:
     """Api Keys API resources (async)."""
@@ -341,3 +384,45 @@ async def delete_api_key(
             path=("api_keys", str(id)),
             request_options=request_options,
         )
+
+    async def create_api_key_expire(
+        self,
+        id: str,
+        *,
+        expires_at: Optional[str] = None,
+        request_options: Optional[RequestOptions] = None,
+    ) -> ApiKey:
+        """Expire an API key
+
+        Expire an API key immediately, schedule a future expiration, or clear a scheduled future expiration.
+
+        Args:
+            id: The unique ID of the API key.
+            expires_at: When the API key should expire. If omitted or in the past, the key expires immediately. Use null to clear a scheduled future expiration.
+            request_options: Per-request options. Supports extra_headers, timeout, max_retries, and base_url override.
+
+        Returns:
+            ApiKey
+
+        Raises:
+            NotFoundError: If the resource is not found (404).
+            ConflictError: If a conflict occurs (409).
+            UnprocessableEntityError: If the request data is unprocessable (422).
+            AuthenticationError: If the API key is invalid (401).
+            RateLimitExceededError: If rate limited (429).
+            ServerError: If the server returns a 5xx error.
+        """
+        body: Dict[str, Any] = {
+            k: v
+            for k, v in {
+                "expires_at": expires_at,
+            }.items()
+            if v is not None
+        }
+        return await self._client.request(
+            method="post",
+            path=("api_keys", str(id), "expire"),
+            body=body,
+            model=ApiKey,
+            request_options=request_options,
+        )

src/workos/api_keys/models/__init__.py

@@ -8,6 +8,7 @@
 from .create_organization_api_key import (
     CreateOrganizationApiKey as CreateOrganizationApiKey,
 )
+from .expire_api_key import ExpireApiKey as ExpireApiKey
 from .organization_api_key import OrganizationApiKey as OrganizationApiKey
 from .organization_api_key_owner import (
     OrganizationApiKeyOwner as OrganizationApiKeyOwner,

src/workos/api_keys/models/expire_api_key.py

@@ -0,0 +1,38 @@
+# This file is auto-generated by oagen. Do not edit.
+
+from __future__ import annotations
+
+from dataclasses import dataclass
+from datetime import datetime
+from typing import Any, Dict, Optional
+from workos._types import _raise_deserialize_error
+from workos._types import _format_datetime, _parse_datetime
+
+
+@dataclass(slots=True)
+class ExpireApiKey:
+    """Expire Api Key model."""
+
+    expires_at: Optional[datetime] = None
+    """When the API key should expire. If omitted or in the past, the key expires immediately. Use null to clear a scheduled future expiration."""
+
+    @classmethod
+    def from_dict(cls, data: Dict[str, Any]) -> "ExpireApiKey":
+        """Deserialize from a dictionary."""
+        try:
+            return cls(
+                expires_at=_parse_datetime(_v_expires_at)
+                if (_v_expires_at := data.get("expires_at")) is not None
+                else None,
+            )
+        except (KeyError, ValueError) as e:
+            _raise_deserialize_error("ExpireApiKey", e)
+
+    def to_dict(self) -> Dict[str, Any]:
+        """Serialize to a dictionary."""
+        result: Dict[str, Any] = {}
+        if self.expires_at is not None:
+            result["expires_at"] = _format_datetime(self.expires_at)
+        else:
+            result["expires_at"] = None
+        return result