[dandorman]

Description

Regenerates the Pipes service from the current OpenAPI spec with oagen (npm run sdk:generate -- --lang node --services Pipes in openapi-spec, with workos/openapi-spec#248 applied), plus the Pipes event changes the generator doesn't cover.

Generated (Pipes service)

• New pipes.finishConnection({ connectCode, codeVerifier, state }) → POST /data-integrations/finish.
• getDataIntegrationAuthorizeUrl accepts accountDisplayName, codeChallenge, codeChallengeMethod, connectionIntent (add | reauthorize) and connectedAccountId; the response gains completion.
• ConnectedAccount (and its list/org variants) gain establishedByUserId, stateReason and warnings; connect/upsert inputs gain accountDisplayName.
• All new fields are optional, and no existing method is renamed or removed.

Hand-written (events)
PipesConnectedAccount, the payload for the pipes.connected_account.* and pipes.account_connection.* events, was missing 7 optional fields the spec defines: connectionRole, accountIdentifier, accountDisplayName, authMethod, apiKeyLast4, establishedByUserId, stateReason. They're added to the type and deserializeEvent, and only set when present in the payload, so older events deserialize as before. The 9 Pipes event names and the connection-failed payload already matched the spec.

Generator output I didn't keep
The raw regen also broke existing behavior, so I reverted these parts:

• dropped exports from the Pipes barrels (serializeConnectedAccountDto, DataIntegrationCredentialsResponse, …)
• expiresAt deserialized as a string instead of Date
• authMethods / config defaulting to [] / {} instead of undefined
• a missing null guard on connected_accounts
• regenerated pipes.spec.ts / serializers.spec.ts and some fixtures that switched timestamps to strings, used placeholder values like "test_createdAt", or produced invalid active: true + error credential responses

The scoped run also rewrote some non-Pipes index.ts barrels, which I dropped (including their .oagen-manifest.json entries). The existing specs are kept, with new tests for finishConnection and the new event fields.

Documentation

Does this require changes to the WorkOS Docs? E.g. the API Reference or code snippets need updates.

[ ] Yes

If yes, link a related docs PR and add a docs maintainer as a reviewer. Their approval is required.

Link to Devin session: https://app.devin.ai/sessions/bf88ed3db48d4419b9b38b37abc715d7
Open in Devin Desktop: https://app.devin.ai/desktop/session/bf88ed3db48d4419b9b38b37abc715d7?variant=devin
Requested by: @dandorman

[devin-ai-integration]

I'll fix CI failures and address comments from users with write access. I'll skip comments containing "(aside)".

• Disable automatic comment, CI, and merge conflict monitoring

---

Original prompt from dan

no immediate action required: if i want you to make a new PR for the Node SDK that basically uses the oagen tooling to make it, can you do that?

[greptile-apps]

Confidence Score: 5/5

[Medium impact] The PR appears safe to merge; the earlier findings are addressed and no new actionable issues remain.

Summary

Adds finishConnection and expands Pipes request, response, and event fields.

• Pipes authorization can wait for the app to finish saving a connection.
• Connected accounts expose their labels, status reasons, and non-blocking warnings.
• Pipes events include the latest optional connected-account details.
• The bundled jose dependency uses a newer patch version.

_{Reviews (2) · Last reviewed commit: "fix(pipes): send account labels on upser..." · Reviewed by Greptile}