feat(generated): AuditLogs (batch 56391ebd)

[workos-sdk-automation]

Summary

Regenerated SDK from spec changes.

Triggered by workos/openapi-spec@be67bca

[greptile-apps]

Greptile Summary

This auto-generated PR regenerates the Python SDK from spec changes, primarily adding expired to AuditLogExportState and refactoring several model exports from explicit named imports to wildcard (import *) imports in __init__.py files.

• AuditLogExportState: EXPIRED = "expired" is added to the enum and corresponding AuditLogExportStateLiteral type alias.
• Export pattern change: ConnectedAccountDto, DataIntegrationCredentialsDto, ConnectionOption, and DataIntegrationCredentialsType are switched from explicit re-exports to wildcard re-exports; DataIntegrationCredentialsType alias is removed from workos.common's top-level namespace.
• Manifest update: Two new API endpoints (GET /user_management/radar_challenges/{id} and DELETE /user_management/redirect_uris/{id}) are registered in .oagen-manifest.json.

Confidence Score: 4/5

Safe to merge; the only concern is namespace pollution from wildcard imports in files that lack __all__, which is consistent with an already-established pattern in the same generated files.

The audit log and manifest changes are straightforward. The export refactoring is the riskier part: three of the four new wildcard imports come from files without __all__, meaning stdlib and internal names bleed into the parent module namespace. This is a real but minor API-surface concern rather than a runtime or data correctness issue. The pattern already exists for connected_account.py, so it is consistent, but the new files extend it further.

src/workos/pipes/models/init.py and src/workos/sso/models/init.py — both introduce wildcard imports from source files that do not define __all__.

Important Files Changed

Filename	Overview
src/workos/common/init.py	Removes explicit re-export of DataIntegrationCredentialsType alias from the workos.common top-level namespace; the canonical DataIntegrationCredentialType remains.
src/workos/common/models/init.py	Switches DataIntegrationCredentialsType from an explicit named import to a wildcard; the source file has __all__ defined so namespace pollution is contained.
src/workos/pipes/models/init.py	Switches ConnectedAccountDto and DataIntegrationCredentialsDto to wildcard imports; neither source file defines __all__, so all public names (including Enum, datetime, dataclass, etc.) leak into the module namespace.
src/workos/sso/models/init.py	Switches ConnectionOption to a wildcard import; connection_option.py lacks __all__, exposing dataclass, Any, Dict, Optional into the module namespace.
.oagen-manifest.json	Registers two new API endpoints for get_radar_challenge and delete_redirect_uris in the SDK manifest.
.changelog-pending/2026-07-20T17-46-04-be67bca7f0a48ba858376717a86d7809a41f9786.md	Changelog entry describing the addition of expired to AuditLogExportState.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[oagen spec change\nbe67bca7] --> B[AuditLogExportState\n+ EXPIRED value]
    A --> C[Export refactor:\nexplicit → wildcard imports]
    A --> D[Manifest: 2 new endpoints\nradar_challenges GET\nredirect_uris DELETE]

    C --> E[common/models/__init__.py\nDataIntegrationCredentialsType\nvia * — has __all__ ✅]
    C --> F[pipes/models/__init__.py\nConnectedAccountDto *\nDataIntegrationCredentialsDto *]
    C --> G[sso/models/__init__.py\nConnectionOption *]
    C --> H[common/__init__.py\nRemoves DataIntegrationCredentialsType\nfrom top-level namespace]

    F --> F1[⚠️ no __all__ in source files\n→ namespace pollution]
    G --> G1[⚠️ no __all__ in source file\n→ namespace pollution]

Loading

%%{init: {'theme': 'base', 'themeVariables': {"darkMode": true, "background": "#0d1117", "primaryColor": "#21262d", "primaryTextColor": "#e6edf3", "primaryBorderColor": "#8b949e", "lineColor": "#8b949e", "textColor": "#e6edf3", "edgeLabelBackground": "#161b22", "actorBkg": "#21262d", "actorBorder": "#8b949e", "actorTextColor": "#e6edf3", "actorLineColor": "#8b949e", "signalColor": "#8b949e", "signalTextColor": "#e6edf3", "noteBkgColor": "#373320", "noteBorderColor": "#d4a72c", "noteTextColor": "#f0e6c0", "labelBoxBkgColor": "#21262d", "labelBoxBorderColor": "#8b949e", "labelTextColor": "#e6edf3", "loopTextColor": "#e6edf3", "activationBkgColor": "#30363d", "activationBorderColor": "#8b949e"}}}%%
flowchart TD
    A[oagen spec change\nbe67bca7] --> B[AuditLogExportState\n+ EXPIRED value]
    A --> C[Export refactor:\nexplicit → wildcard imports]
    A --> D[Manifest: 2 new endpoints\nradar_challenges GET\nredirect_uris DELETE]

    C --> E[common/models/__init__.py\nDataIntegrationCredentialsType\nvia * — has __all__ ✅]
    C --> F[pipes/models/__init__.py\nConnectedAccountDto *\nDataIntegrationCredentialsDto *]
    C --> G[sso/models/__init__.py\nConnectionOption *]
    C --> H[common/__init__.py\nRemoves DataIntegrationCredentialsType\nfrom top-level namespace]

    F --> F1[⚠️ no __all__ in source files\n→ namespace pollution]
    G --> G1[⚠️ no __all__ in source file\n→ namespace pollution]

Loading

Prompt To Fix All With AI

Fix the following 2 code review issues. Work through them one at a time, proposing concise fixes.

---

### Issue 1 of 2
src/workos/pipes/models/__init__.py:2-13
**Wildcard imports from files without `__all__` pollute module namespace**

`connected_account_dto.py` and `data_integration_credentials_dto.py` do not define `__all__`, so `from .connected_account_dto import *` and `from .data_integration_credentials_dto import *` will export every public name in those files — including `Enum`, `datetime`, `dataclass`, `Any`, `Dict`, `List`, `Optional`, `ConnectedAccountState`, and `DataIntegrationCredentialsType` — into `workos.pipes.models`. Any downstream `from workos.pipes.models import *` would then unexpectedly pick up these typing/stdlib names. Adding `__all__ = ["ConnectedAccountDto"]` (and similarly for the DTO) to the source files would scope the export correctly, matching the approach already used by `data_integration_credentials_type.py`.

### Issue 2 of 2
src/workos/sso/models/__init__.py:4
**Wildcard import without `__all__` leaks stdlib names into `workos.sso.models`**

`connection_option.py` has no `__all__`, so `from .connection_option import *` exports `ConnectionOption` plus `dataclass`, `Any`, `Dict`, and `Optional` into the `workos.sso.models` namespace. Defining `__all__ = ["ConnectionOption"]` in `connection_option.py` would match the contained pattern already used by `data_integration_credentials_type.py` and avoid unexpected names appearing in the public interface.

_{Reviews (1): Last reviewed commit: "chore(generated): add release notes frag..." | Re-trigger Greptile}

[greptile-apps]

Wildcard imports from files without __all__ pollute module namespace

connected_account_dto.py and data_integration_credentials_dto.py do not define __all__, so from .connected_account_dto import * and from .data_integration_credentials_dto import * will export every public name in those files — including Enum, datetime, dataclass, Any, Dict, List, Optional, ConnectedAccountState, and DataIntegrationCredentialsType — into workos.pipes.models. Any downstream from workos.pipes.models import * would then unexpectedly pick up these typing/stdlib names. Adding __all__ = ["ConnectedAccountDto"] (and similarly for the DTO) to the source files would scope the export correctly, matching the approach already used by data_integration_credentials_type.py.

Prompt To Fix With AI

This is a comment left during a code review.
Path: src/workos/pipes/models/__init__.py
Line: 2-13

Comment:
**Wildcard imports from files without `__all__` pollute module namespace**

`connected_account_dto.py` and `data_integration_credentials_dto.py` do not define `__all__`, so `from .connected_account_dto import *` and `from .data_integration_credentials_dto import *` will export every public name in those files — including `Enum`, `datetime`, `dataclass`, `Any`, `Dict`, `List`, `Optional`, `ConnectedAccountState`, and `DataIntegrationCredentialsType` — into `workos.pipes.models`. Any downstream `from workos.pipes.models import *` would then unexpectedly pick up these typing/stdlib names. Adding `__all__ = ["ConnectedAccountDto"]` (and similarly for the DTO) to the source files would scope the export correctly, matching the approach already used by `data_integration_credentials_type.py`.

How can I resolve this? If you propose a fix, please make it concise.

Note: If this suggestion doesn't match your team's coding style, reply to this and let me know. I'll remember it for next time!

[greptile-apps]

Wildcard import without __all__ leaks stdlib names into workos.sso.models

connection_option.py has no __all__, so from .connection_option import * exports ConnectionOption plus dataclass, Any, Dict, and Optional into the workos.sso.models namespace. Defining __all__ = ["ConnectionOption"] in connection_option.py would match the contained pattern already used by data_integration_credentials_type.py and avoid unexpected names appearing in the public interface.

Prompt To Fix With AI

This is a comment left during a code review.
Path: src/workos/sso/models/__init__.py
Line: 4

Comment:
**Wildcard import without `__all__` leaks stdlib names into `workos.sso.models`**

`connection_option.py` has no `__all__`, so `from .connection_option import *` exports `ConnectionOption` plus `dataclass`, `Any`, `Dict`, and `Optional` into the `workos.sso.models` namespace. Defining `__all__ = ["ConnectionOption"]` in `connection_option.py` would match the contained pattern already used by `data_integration_credentials_type.py` and avoid unexpected names appearing in the public interface.

How can I resolve this? If you propose a fix, please make it concise.

Note: If this suggestion doesn't match your team's coding style, reply to this and let me know. I'll remember it for next time!