This is a major release that introduces a fully redesigned SDK architecture. The SDK is now generated from the WorkOS OpenAPI spec, bringing type safety, consistent interfaces, and improved developer ergonomics.

• Client-centric architecture: The SDK now revolves around an instantiated WorkOS::Client rather than module-level service calls. All product areas are accessed through client methods (e.g., client.organizations, client.user_management, client.sso).

• Generated request/response models: Typed models replace raw hashes. Response models no longer inherit from Hash — use accessor methods instead of bracket notation.

• Per-request overrides: The new runtime supports request_options: for per-request API key, timeout, base URL, and retry overrides — useful for multi-tenant setups.

• Minimum Ruby 3.3+: The minimum Ruby version has been raised to 3.3.

• Renamed services and methods: Several top-level services were renamed (e.g., WorkOS::Portal → client.admin_portal, WorkOS::MFA → client.multi_factor_auth). Method signatures now use explicit keyword arguments.

• Session management refactor: AuthKit session sealing, refresh, and authentication flows were overhauled with a dedicated SessionManager on the client instance.

• New capabilities: Device code flow, public/PKCE clients, auto_paging_each pagination, and last_response observability on all responses.

For detailed instructions on updating your application, see the v7 Migration Guide.

• user-management: add directory_managed to OrganizationMembership (#446) (914d824)
• user-management: add invitation accept endpoint (#448) (b5b4da1)

• update renovate rules (#443) (f156c79)

• add support for totp_secret (#300) (c0a26bf)
• Include Feature Flags decoded from the JWT in the payload of a Session (#386) (31a0e79)
• workos-ruby: Add connection to authorization_url (#78) (c3a0e8e)

• add invitation_token parameter to authentication methods (#438) (d24e3dc)