feat(generated): Sync with spec: agents, SSO connections, and more

[workos-sdk-automation]

Summary

This regeneration brings the SDK in sync with several OpenAPI spec releases, so it contains far more than the auto-generated summary suggested. What's actually included:

Added

• Agents: blueprint, instance, session, and blueprint-token endpoints mounted onto the existing Agents service (AgentBlueprint, AgentInstance, AgentInstanceSession, AgentToken, and related request models/enums). The changelog's "Removed service Agents" is a tag reorganization in the spec — no agent endpoints or methods were removed; the existing registration/claim methods are unchanged.
• SSO: connection management (POST /connections, PATCH /connections/{id}) and SAML certificate endpoints (IdP signing certs, SP encryption certs, SP signing cert).
• Organizations: IT contacts endpoints (create/list/invite/revoke/delete).
• Platform Teams: new service (Team, CreateTeam).
• User Management: new email-completion grant for POST /user_management/authenticate (EmailCompletionSessionAuthenticateRequest) plus the email_completion_required error response, and waitlist endpoints.
• Audit Logs: new retention_period month/year enum option on the update-retention endpoint (see breaking changes below for the parameter shape).
• Webhooks: agent.instance.* and agent.blueprint.* event types.

Removed

• DiscordOAuth, GrokOAuth, and XOAuth values from the connection type / profile connection type / authentication method enums. These are true removals.

Moved or reorganized (listed as "removed" in the changelog, but not actually gone)

• The changelog fragment's "Removed service Agents" + "Added service AgentsBlueprints/AgentsInstances/..." entries reflect the spec re-tagging agent endpoints under sub-resource tags — the endpoints themselves were added or kept, not removed.
• The TokenBody/TokenQuery removed-then-added entries are churn from the SSO token endpoint's request moving between body and query representations; the endpoint's surface is intact.

Breaking changes in this SDK

• AuditLogs.updateOrganizationAuditLogsRetention: the retentionPeriodInDays parameter was replaced by retention, a union accepting either the old days-based value (now deprecated upstream) or the new month/year retention period enum. The days-based option moved into the union rather than being removed.
• SSO.getProfileAndToken: code is now optional, since the token endpoint supports additional grant types (e.g. PKCE) where it isn't required.
• DiscordOAuth, GrokOAuth, and XOAuth were removed from the connection type / profile connection type / authentication method enums.

Triggered by workos/openapi-spec@6676276

BEGIN_COMMIT_OVERRIDE
feat(agents): Add blueprint, instance, and session endpoints (#435)
feat(sso): Add connection management and SAML certificate endpoints (#435)
feat(organizations): Add IT contacts endpoints (#435)
feat(platform_teams): Add Platform Teams service (#435)
feat(user_management): Add email-completion grant and waitlist endpoints (#435)
feat(audit_logs): Replace retentionPeriodInDays param with retention union supporting retention periods (#435)
feat(sso): Make code optional on getProfileAndToken (#435)
feat(webhooks): Add agent instance and blueprint webhook event types (#435)
fix(sso): Remove DiscordOAuth, GrokOAuth, and XOAuth from connection type enums (#435)
END_COMMIT_OVERRIDE

Link to Devin session: https://app.devin.ai/sessions/151cadc0bb534027a325939c3c68c0d3
Open in Devin Desktop: https://app.devin.ai/desktop/session/151cadc0bb534027a325939c3c68c0d3?variant=devin
Requested by: @m0tzy

[greptile-apps]

Too many files changed for review (197 files, 100 file limit).

Bypass the limit by tagging @greptile-apps to review.