feat: add group, pipes, and authorization additive API support

[workos-sdk-automation]

A user wrote in noting that some data was missing; this was due to a slight error in the oagen-emitter logic.

[greptile-apps]

Greptile Summary

This auto-generated PR adds resource classes for Group events, GroupMemberAdded/Removed payloads, PasswordHashed, PasswordPlaintext, and RoleMultiple/Single service DTOs, along with supporting DataIntegrationAccessTokenResponseAccessToken and DataIntegrationAccessTokenResponseError types for the Pipes API.

• The core data-missing bug described in the PR description appears not yet fixed: DataIntegrationAccessTokenResponse (the class returned by Pipes::createDataIntegrationToken) is still an empty class with no properties and deserializes nothing. The newly added DataIntegrationAccessTokenResponseAccessToken and DataIntegrationAccessTokenResponseError are unreferenced from it, so callers still cannot read the access token, active flag, or error from the response.

Confidence Score: 4/5

The group and authorization classes look correct, but the Pipes access token fix is incomplete — the parent response class is still empty and the new nested types are never wired in.

One P1 finding: the primary motivation of the PR (fixing missing data in the access token response) does not appear to be addressed in DataIntegrationAccessTokenResponse itself, which remains a no-op class.

lib/Resource/DataIntegrationAccessTokenResponse.php (not in the diff but should be) and lib/Resource/DataIntegrationAccessTokenResponseAccessToken.php

Important Files Changed

Filename	Overview
lib/Resource/DataIntegrationAccessTokenResponseAccessToken.php	New class representing the access_token sub-object, but the parent DataIntegrationAccessTokenResponse is still empty and never uses it — the data-missing bug is not resolved.
lib/Resource/DataIntegrationAccessTokenResponseError.php	Correct enum for error values; unreferenced by parent class in this PR.
lib/Resource/Group.php	New Group resource class with correct fromArray/toArray round-trip and DateTimeImmutable handling.
lib/Resource/GroupCreated.php	GroupCreated event wrapper; correct structure mirroring existing DsyncGroupCreated pattern.
lib/Resource/GroupMemberAdded.php	GroupMemberAdded event wrapper using GroupMemberAddedData; correct fromArray delegation.
lib/Resource/GroupMemberAddedData.php	Payload DTO with group_id and organization_membership_id fields; consistent with fixture.
lib/Service/RoleMultiple.php	Previously flagged type bug (string vs array) is now fixed — $slugs is correctly typed as array.
lib/Service/PasswordHashed.php	Simple request DTO holding hash and hashType; no issues.
lib/Service/PasswordPlaintext.php	Simple request DTO holding plaintext password; no issues with the class itself.

Class Diagram

%%{init: {'theme': 'neutral'}}%%
classDiagram
    class DataIntegrationAccessTokenResponse {
        +fromArray(array data) self
        +toArray() array
    }
    class DataIntegrationAccessTokenResponseAccessToken {
        +string object
        +string accessToken
        +string|null expiresAt
        +array scopes
        +array missingScopes
    }
    class DataIntegrationAccessTokenResponseError {
        <<enumeration>>
        NeedsReauthorization
        NotInstalled
    }
    DataIntegrationAccessTokenResponse ..> DataIntegrationAccessTokenResponseAccessToken : missing link
    DataIntegrationAccessTokenResponse ..> DataIntegrationAccessTokenResponseError : missing link
    class Group {
        +string object
        +string id
        +string organizationId
        +string name
        +string|null description
        +DateTimeImmutable createdAt
        +DateTimeImmutable updatedAt
    }
    class GroupCreated { +Group data }
    class GroupDeleted { +Group data }
    class GroupUpdated { +Group data }
    class GroupMemberAdded { +GroupMemberAddedData data }
    class GroupMemberRemoved { +GroupMemberRemovedData data }
    class GroupMemberAddedData {
        +string groupId
        +string organizationMembershipId
    }
    class GroupMemberRemovedData {
        +string groupId
        +string organizationMembershipId
    }
    GroupCreated --> Group
    GroupDeleted --> Group
    GroupUpdated --> Group
    GroupMemberAdded --> GroupMemberAddedData
    GroupMemberRemoved --> GroupMemberRemovedData

Loading

_{Reviews (2): Last reviewed commit: "fix core array issue" | Re-trigger Greptile}

[greptile-apps]

New nested types never wired into parent class

DataIntegrationAccessTokenResponse (the class actually returned by Pipes::createDataIntegrationToken) is still completely empty — it has no constructor properties and deserializes nothing. The two new classes added in this PR (DataIntegrationAccessTokenResponseAccessToken, DataIntegrationAccessTokenResponseError) exist in isolation but are never referenced from DataIntegrationAccessTokenResponse, so callers still cannot access the access token, active flag, or error from the API response. The original "data was missing" bug is not fixed.