chore: import upstream snapshot with attribution

apps/sim/app/api/tools/workday/assign-onboarding/route.ts

@@ -0,0 +1,61 @@
+import { createLogger } from '@sim/logger'
+import { getErrorMessage } from '@sim/utils/errors'
+import { type NextRequest, NextResponse } from 'next/server'
+import { workdayAssignOnboardingContract } from '@/lib/api/contracts/tools/workday'
+import { parseRequest } from '@/lib/api/server'
+import { checkInternalAuth } from '@/lib/auth/hybrid'
+import { generateRequestId } from '@/lib/core/utils/request'
+import { withRouteHandler } from '@/lib/core/utils/with-route-handler'
+import { createWorkdaySoapClient, extractRefId, wdRef } from '@/tools/workday/soap'
+
+export const dynamic = 'force-dynamic'
+
+const logger = createLogger('WorkdayAssignOnboardingAPI')
+
+export const POST = withRouteHandler(async (request: NextRequest) => {
+  const requestId = generateRequestId()
+
+  try {
+    const authResult = await checkInternalAuth(request, { requireWorkflowId: false })
+    if (!authResult.success) {
+      return NextResponse.json({ success: false, error: 'Unauthorized' }, { status: 401 })
+    }
+
+    const parsed = await parseRequest(workdayAssignOnboardingContract, request, {})
+    if (!parsed.success) return parsed.response
+    const data = parsed.data.body
+
+    const client = await createWorkdaySoapClient(
+      data.tenantUrl,
+      data.tenant,
+      'humanResources',
+      data.username,
+      data.password
+    )
+
+    const [result] = await client.Put_Onboarding_Plan_AssignmentAsync({
+      Onboarding_Plan_Assignment_Data: {
+        Onboarding_Plan_Reference: wdRef('Onboarding_Plan_ID', data.onboardingPlanId),
+        Person_Reference: wdRef('WID', data.workerId),
+        Action_Event_Reference: wdRef('WID', data.actionEventId),
+        Assignment_Effective_Moment: new Date().toISOString(),
+        Active: true,
+      },
+    })
+
+    return NextResponse.json({
+      success: true,
+      output: {
+        assignmentId: extractRefId(result?.Onboarding_Plan_Assignment_Reference),
+        workerId: data.workerId,
+        planId: data.onboardingPlanId,
+      },
+    })
+  } catch (error) {
+    logger.error(`[${requestId}] Workday assign onboarding failed`, { error })
+    return NextResponse.json(
+      { success: false, error: getErrorMessage(error, 'Unknown error') },
+      { status: 500 }
+    )
+  }
+})

apps/sim/app/api/tools/workday/change-job/route.ts

@@ -0,0 +1,88 @@
+import { createLogger } from '@sim/logger'
+import { getErrorMessage } from '@sim/utils/errors'
+import { type NextRequest, NextResponse } from 'next/server'
+import { workdayChangeJobContract } from '@/lib/api/contracts/tools/workday'
+import { parseRequest } from '@/lib/api/server'
+import { checkInternalAuth } from '@/lib/auth/hybrid'
+import { generateRequestId } from '@/lib/core/utils/request'
+import { withRouteHandler } from '@/lib/core/utils/with-route-handler'
+import { createWorkdaySoapClient, extractRefId, wdRef } from '@/tools/workday/soap'
+
+export const dynamic = 'force-dynamic'
+
+const logger = createLogger('WorkdayChangeJobAPI')
+
+export const POST = withRouteHandler(async (request: NextRequest) => {
+  const requestId = generateRequestId()
+
+  try {
+    const authResult = await checkInternalAuth(request, { requireWorkflowId: false })
+    if (!authResult.success) {
+      return NextResponse.json({ success: false, error: 'Unauthorized' }, { status: 401 })
+    }
+
+    const parsed = await parseRequest(workdayChangeJobContract, request, {})
+    if (!parsed.success) return parsed.response
+    const data = parsed.data.body
+
+    const changeJobDetailData: Record<string, unknown> = {
+      Reason_Reference: wdRef('Change_Job_Subcategory_ID', data.reason),
+    }
+    if (data.newSupervisoryOrgId) {
+      changeJobDetailData.Supervisory_Organization_Reference = wdRef(
+        'Organization_Reference_ID',
+        data.newSupervisoryOrgId
+      )
+    }
+    if (data.newPositionId) {
+      changeJobDetailData.Proposed_Position_Reference = wdRef('Position_ID', data.newPositionId)
+    }
+    const jobDetailsData: Record<string, unknown> = {}
+    if (data.newJobProfileId) {
+      jobDetailsData.Job_Profile_Reference = wdRef('Job_Profile_ID', data.newJobProfileId)
+    }
+    if (data.newLocationId) {
+      jobDetailsData.Location_Reference = wdRef('Location_ID', data.newLocationId)
+    }
+    if (Object.keys(jobDetailsData).length > 0) {
+      changeJobDetailData.Job_Details_Data = jobDetailsData
+    }
+
+    const client = await createWorkdaySoapClient(
+      data.tenantUrl,
+      data.tenant,
+      'staffing',
+      data.username,
+      data.password
+    )
+
+    const [result] = await client.Change_JobAsync({
+      Business_Process_Parameters: {
+        Auto_Complete: true,
+        Run_Now: true,
+      },
+      Change_Job_Data: {
+        Worker_Reference: wdRef('Employee_ID', data.workerId),
+        Effective_Date: data.effectiveDate,
+        Change_Job_Detail_Data: changeJobDetailData,
+      },
+    })
+
+    const eventRef = result?.Event_Reference
+
+    return NextResponse.json({
+      success: true,
+      output: {
+        eventId: extractRefId(eventRef),
+        workerId: data.workerId,
+        effectiveDate: data.effectiveDate,
+      },
+    })
+  } catch (error) {
+    logger.error(`[${requestId}] Workday change job failed`, { error })
+    return NextResponse.json(
+      { success: false, error: getErrorMessage(error, 'Unknown error') },
+      { status: 500 }
+    )
+  }
+})

apps/sim/app/api/tools/workday/create-prehire/route.ts

@@ -0,0 +1,126 @@
+import { createLogger } from '@sim/logger'
+import { getErrorMessage } from '@sim/utils/errors'
+import { type NextRequest, NextResponse } from 'next/server'
+import { workdayCreatePrehireContract } from '@/lib/api/contracts/tools/workday'
+import { parseRequest } from '@/lib/api/server'
+import { checkInternalAuth } from '@/lib/auth/hybrid'
+import { generateRequestId } from '@/lib/core/utils/request'
+import { withRouteHandler } from '@/lib/core/utils/with-route-handler'
+import { createWorkdaySoapClient, extractRefId, wdRef } from '@/tools/workday/soap'
+
+export const dynamic = 'force-dynamic'
+
+const logger = createLogger('WorkdayCreatePrehireAPI')
+
+export const POST = withRouteHandler(async (request: NextRequest) => {
+  const requestId = generateRequestId()
+
+  try {
+    const authResult = await checkInternalAuth(request, { requireWorkflowId: false })
+    if (!authResult.success) {
+      return NextResponse.json({ success: false, error: 'Unauthorized' }, { status: 401 })
+    }
+
+    const parsed = await parseRequest(workdayCreatePrehireContract, request, {})
+    if (!parsed.success) return parsed.response
+    const data = parsed.data.body
+
+    if (!data.email && !data.phoneNumber && !data.address) {
+      return NextResponse.json(
+        {
+          success: false,
+          error: 'At least one contact method (email, phone, or address) is required',
+        },
+        { status: 400 }
+      )
+    }
+
+    const parts = data.legalName.trim().split(/\s+/)
+    const firstName = parts[0] ?? ''
+    const lastName = parts.length > 1 ? parts.slice(1).join(' ') : ''
+
+    if (!lastName) {
+      return NextResponse.json(
+        { success: false, error: 'Legal name must include both a first name and last name' },
+        { status: 400 }
+      )
+    }
+
+    const client = await createWorkdaySoapClient(
+      data.tenantUrl,
+      data.tenant,
+      'recruiting',
+      data.username,
+      data.password
+    )
+
+    const contactData: Record<string, unknown> = {}
+    if (data.email) {
+      contactData.Email_Address_Data = [
+        {
+          Email_Address: data.email,
+          Usage_Data: {
+            Type_Data: { Type_Reference: wdRef('Communication_Usage_Type_ID', 'WORK') },
+            Public: true,
+          },
+        },
+      ]
+    }
+    if (data.phoneNumber) {
+      contactData.Phone_Data = [
+        {
+          Phone_Number: data.phoneNumber,
+          Phone_Device_Type_Reference: wdRef('Phone_Device_Type_ID', 'Landline'),
+          Usage_Data: {
+            Type_Data: { Type_Reference: wdRef('Communication_Usage_Type_ID', 'WORK') },
+            Public: true,
+          },
+        },
+      ]
+    }
+    if (data.address) {
+      contactData.Address_Data = [
+        {
+          Formatted_Address: data.address,
+          Usage_Data: {
+            Type_Data: { Type_Reference: wdRef('Communication_Usage_Type_ID', 'WORK') },
+            Public: true,
+          },
+        },
+      ]
+    }
+
+    const [result] = await client.Put_ApplicantAsync({
+      Applicant_Data: {
+        Personal_Data: {
+          Name_Data: {
+            Legal_Name_Data: {
+              Name_Detail_Data: {
+                Country_Reference: wdRef('ISO_3166-1_Alpha-2_Code', data.countryCode ?? 'US'),
+                First_Name: firstName,
+                Last_Name: lastName,
+              },
+            },
+          },
+          Contact_Information_Data: contactData,
+        },
+      },
+    })
+
+    const applicantRef = result?.Applicant_Reference
+
+    return NextResponse.json({
+      success: true,
+      output: {
+        preHireId: extractRefId(applicantRef),
+        descriptor: applicantRef?.attributes?.Descriptor ?? null,
+      },
+    })
+  } catch (error) {
+    logger.error(`[${requestId}] Workday create prehire failed`, { error })
+    return NextResponse.json(
+      { success: false, error: getErrorMessage(error, 'Unknown error') },
+      { status: 500 }
+    )
+  }
+})

apps/sim/app/api/tools/workday/get-compensation/route.ts

@@ -0,0 +1,102 @@
+import { createLogger } from '@sim/logger'
+import { getErrorMessage } from '@sim/utils/errors'
+import { type NextRequest, NextResponse } from 'next/server'
+import { workdayGetCompensationContract } from '@/lib/api/contracts/tools/workday'
+import { parseRequest } from '@/lib/api/server'
+import { checkInternalAuth } from '@/lib/auth/hybrid'
+import { generateRequestId } from '@/lib/core/utils/request'
+import { withRouteHandler } from '@/lib/core/utils/with-route-handler'
+import {
+  createWorkdaySoapClient,
+  extractRefId,
+  normalizeSoapArray,
+  parseSoapNumber,
+  type WorkdayCompensationDataSoap,
+  type WorkdayCompensationPlanSoap,
+  type WorkdayWorkerSoap,
+} from '@/tools/workday/soap'
+
+export const dynamic = 'force-dynamic'
+
+const logger = createLogger('WorkdayGetCompensationAPI')
+
+export const POST = withRouteHandler(async (request: NextRequest) => {
+  const requestId = generateRequestId()
+
+  try {
+    const authResult = await checkInternalAuth(request, { requireWorkflowId: false })
+    if (!authResult.success) {
+      return NextResponse.json({ success: false, error: 'Unauthorized' }, { status: 401 })
+    }
+
+    const parsed = await parseRequest(workdayGetCompensationContract, request, {})
+    if (!parsed.success) return parsed.response
+    const data = parsed.data.body
+
+    const client = await createWorkdaySoapClient(
+      data.tenantUrl,
+      data.tenant,
+      'humanResources',
+      data.username,
+      data.password
+    )
+
+    const [result] = await client.Get_WorkersAsync({
+      Request_References: {
+        Worker_Reference: {
+          ID: { attributes: { 'wd:type': 'Employee_ID' }, $value: data.workerId },
+        },
+      },
+      Response_Group: {
+        Include_Reference: true,
+        Include_Compensation: true,
+      },
+    })
+
+    const worker =
+      normalizeSoapArray(
+        result?.Response_Data?.Worker as WorkdayWorkerSoap | WorkdayWorkerSoap[] | undefined
+      )[0] ?? null
+    const compensationData = worker?.Worker_Data?.Compensation_Data
+
+    const mapPlan = (p: WorkdayCompensationPlanSoap) => ({
+      id: extractRefId(p.Compensation_Plan_Reference) ?? null,
+      planName: p.Compensation_Plan_Reference?.attributes?.Descriptor ?? null,
+      amount:
+        parseSoapNumber(p.Amount) ??
+        parseSoapNumber(p.Per_Unit_Amount) ??
+        parseSoapNumber(p.Individual_Target_Amount) ??
+        null,
+      currency: extractRefId(p.Currency_Reference) ?? null,
+      frequency: extractRefId(p.Frequency_Reference) ?? null,
+    })
+
+    const planTypeKeys: (keyof WorkdayCompensationDataSoap)[] = [
+      'Employee_Base_Pay_Plan_Assignment_Data',
+      'Employee_Salary_Unit_Plan_Assignment_Data',
+      'Employee_Bonus_Plan_Assignment_Data',
+      'Employee_Allowance_Plan_Assignment_Data',
+      'Employee_Commission_Plan_Assignment_Data',
+      'Employee_Stock_Plan_Assignment_Data',
+      'Employee_Period_Salary_Plan_Assignment_Data',
+    ]
+
+    const compensationPlans: ReturnType<typeof mapPlan>[] = []
+    for (const key of planTypeKeys) {
+      for (const plan of normalizeSoapArray(compensationData?.[key])) {
+        compensationPlans.push(mapPlan(plan))
+      }
+    }
+
+    return NextResponse.json({
+      success: true,
+      output: { compensationPlans },
+    })
+  } catch (error) {
+    logger.error(`[${requestId}] Workday get compensation failed`, { error })
+    return NextResponse.json(
+      { success: false, error: getErrorMessage(error, 'Unknown error') },
+      { status: 500 }
+    )
+  }
+})

apps/sim/app/api/tools/workday/get-organizations/route.ts

@@ -0,0 +1,93 @@
+import { createLogger } from '@sim/logger'
+import { getErrorMessage } from '@sim/utils/errors'
+import { type NextRequest, NextResponse } from 'next/server'
+import { workdayGetOrganizationsContract } from '@/lib/api/contracts/tools/workday'
+import { parseRequest } from '@/lib/api/server'
+import { checkInternalAuth } from '@/lib/auth/hybrid'
+import { generateRequestId } from '@/lib/core/utils/request'
+import { withRouteHandler } from '@/lib/core/utils/with-route-handler'
+import {
+  createWorkdaySoapClient,
+  extractRefId,
+  normalizeSoapArray,
+  parseSoapBoolean,
+  parseSoapNumber,
+  type WorkdayOrganizationSoap,
+} from '@/tools/workday/soap'
+
+export const dynamic = 'force-dynamic'
+
+const logger = createLogger('WorkdayGetOrganizationsAPI')
+
+export const POST = withRouteHandler(async (request: NextRequest) => {
+  const requestId = generateRequestId()
+
+  try {
+    const authResult = await checkInternalAuth(request, { requireWorkflowId: false })
+    if (!authResult.success) {
+      return NextResponse.json({ success: false, error: 'Unauthorized' }, { status: 401 })
+    }
+
+    const parsed = await parseRequest(workdayGetOrganizationsContract, request, {})
+    if (!parsed.success) return parsed.response
+    const data = parsed.data.body
+
+    const client = await createWorkdaySoapClient(
+      data.tenantUrl,
+      data.tenant,
+      'humanResources',
+      data.username,
+      data.password
+    )
+
+    const limit = data.limit ?? 20
+    const offset = data.offset ?? 0
+    const page = offset > 0 ? Math.floor(offset / limit) + 1 : 1
+
+    const [result] = await client.Get_OrganizationsAsync({
+      Response_Filter: { Page: page, Count: limit },
+      Request_Criteria: data.type
+        ? {
+            Organization_Type_Reference: {
+              ID: {
+                attributes: { 'wd:type': 'Organization_Type_ID' },
+                $value: data.type,
+              },
+            },
+          }
+        : undefined,
+      Response_Group: { Include_Hierarchy_Data: true },
+    })
+
+    const orgsArray = normalizeSoapArray(
+      result?.Response_Data?.Organization as
+        | WorkdayOrganizationSoap
+        | WorkdayOrganizationSoap[]
+        | undefined
+    )
+
+    const organizations = orgsArray.map((o) => {
+      const inactive = parseSoapBoolean(o.Organization_Data?.Inactive)
+      return {
+        id: extractRefId(o.Organization_Reference) ?? null,
+        descriptor: o.Organization_Descriptor ?? null,
+        type: extractRefId(o.Organization_Data?.Organization_Type_Reference) ?? null,
+        subtype: extractRefId(o.Organization_Data?.Organization_Subtype_Reference) ?? null,
+        isActive: inactive == null ? null : !inactive,
+      }
+    })
+
+    const total = parseSoapNumber(result?.Response_Results?.Total_Results) ?? organizations.length
+
+    return NextResponse.json({
+      success: true,
+      output: { organizations, total },
+    })
+  } catch (error) {
+    logger.error(`[${requestId}] Workday get organizations failed`, { error })
+    return NextResponse.json(
+      { success: false, error: getErrorMessage(error, 'Unknown error') },
+      { status: 500 }
+    )
+  }
+})

apps/sim/app/api/tools/workday/get-worker/route.ts

@@ -0,0 +1,83 @@
+import { createLogger } from '@sim/logger'
+import { getErrorMessage } from '@sim/utils/errors'
+import { type NextRequest, NextResponse } from 'next/server'
+import { workdayGetWorkerContract } from '@/lib/api/contracts/tools/workday'
+import { parseRequest } from '@/lib/api/server'
+import { checkInternalAuth } from '@/lib/auth/hybrid'
+import { generateRequestId } from '@/lib/core/utils/request'
+import { withRouteHandler } from '@/lib/core/utils/with-route-handler'
+import {
+  createWorkdaySoapClient,
+  extractRefId,
+  normalizeSoapArray,
+  type WorkdayWorkerSoap,
+} from '@/tools/workday/soap'
+
+export const dynamic = 'force-dynamic'
+
+const logger = createLogger('WorkdayGetWorkerAPI')
+
+export const POST = withRouteHandler(async (request: NextRequest) => {
+  const requestId = generateRequestId()
+
+  try {
+    const authResult = await checkInternalAuth(request, { requireWorkflowId: false })
+    if (!authResult.success) {
+      return NextResponse.json({ success: false, error: 'Unauthorized' }, { status: 401 })
+    }
+
+    const parsed = await parseRequest(workdayGetWorkerContract, request, {})
+    if (!parsed.success) return parsed.response
+    const data = parsed.data.body
+
+    const client = await createWorkdaySoapClient(
+      data.tenantUrl,
+      data.tenant,
+      'humanResources',
+      data.username,
+      data.password
+    )
+
+    const [result] = await client.Get_WorkersAsync({
+      Request_References: {
+        Worker_Reference: {
+          ID: { attributes: { 'wd:type': 'Employee_ID' }, $value: data.workerId },
+        },
+      },
+      Response_Group: {
+        Include_Reference: true,
+        Include_Personal_Information: true,
+        Include_Employment_Information: true,
+        Include_Compensation: true,
+        Include_Organizations: true,
+      },
+    })
+
+    const worker =
+      normalizeSoapArray(
+        result?.Response_Data?.Worker as WorkdayWorkerSoap | WorkdayWorkerSoap[] | undefined
+      )[0] ?? null
+
+    return NextResponse.json({
+      success: true,
+      output: {
+        worker: worker
+          ? {
+              id: extractRefId(worker.Worker_Reference) ?? null,
+              descriptor: worker.Worker_Descriptor ?? null,
+              personalData: worker.Worker_Data?.Personal_Data ?? null,
+              employmentData: worker.Worker_Data?.Employment_Data ?? null,
+              compensationData: worker.Worker_Data?.Compensation_Data ?? null,
+              organizationData: worker.Worker_Data?.Organization_Data ?? null,
+            }
+          : null,
+      },
+    })
+  } catch (error) {
+    logger.error(`[${requestId}] Workday get worker failed`, { error })
+    return NextResponse.json(
+      { success: false, error: getErrorMessage(error, 'Unknown error') },
+      { status: 500 }
+    )
+  }
+})

apps/sim/app/api/tools/workday/hire/route.ts

@@ -0,0 +1,71 @@
+import { createLogger } from '@sim/logger'
+import { getErrorMessage } from '@sim/utils/errors'
+import { type NextRequest, NextResponse } from 'next/server'
+import { workdayHireContract } from '@/lib/api/contracts/tools/workday'
+import { parseRequest } from '@/lib/api/server'
+import { checkInternalAuth } from '@/lib/auth/hybrid'
+import { generateRequestId } from '@/lib/core/utils/request'
+import { withRouteHandler } from '@/lib/core/utils/with-route-handler'
+import { createWorkdaySoapClient, extractRefId, wdRef } from '@/tools/workday/soap'
+
+export const dynamic = 'force-dynamic'
+
+const logger = createLogger('WorkdayHireAPI')
+
+export const POST = withRouteHandler(async (request: NextRequest) => {
+  const requestId = generateRequestId()
+
+  try {
+    const authResult = await checkInternalAuth(request, { requireWorkflowId: false })
+    if (!authResult.success) {
+      return NextResponse.json({ success: false, error: 'Unauthorized' }, { status: 401 })
+    }
+
+    const parsed = await parseRequest(workdayHireContract, request, {})
+    if (!parsed.success) return parsed.response
+    const data = parsed.data.body
+
+    const client = await createWorkdaySoapClient(
+      data.tenantUrl,
+      data.tenant,
+      'staffing',
+      data.username,
+      data.password
+    )
+
+    const [result] = await client.Hire_EmployeeAsync({
+      Business_Process_Parameters: {
+        Auto_Complete: true,
+        Run_Now: true,
+      },
+      Hire_Employee_Data: {
+        Applicant_Reference: wdRef('Applicant_ID', data.preHireId),
+        Position_Reference: wdRef('Position_ID', data.positionId),
+        Hire_Date: data.hireDate,
+        Hire_Employee_Event_Data: {
+          Employee_Type_Reference: wdRef('Employee_Type_ID', data.employeeType ?? 'Regular'),
+          First_Day_of_Work: data.hireDate,
+        },
+      },
+    })
+
+    const employeeRef = result?.Employee_Reference
+    const eventRef = result?.Event_Reference
+
+    return NextResponse.json({
+      success: true,
+      output: {
+        workerId: extractRefId(employeeRef),
+        employeeId: extractRefId(employeeRef),
+        eventId: extractRefId(eventRef),
+        hireDate: data.hireDate,
+      },
+    })
+  } catch (error) {
+    logger.error(`[${requestId}] Workday hire employee failed`, { error })
+    return NextResponse.json(
+      { success: false, error: getErrorMessage(error, 'Unknown error') },
+      { status: 500 }
+    )
+  }
+})

apps/sim/app/api/tools/workday/list-workers/route.ts

@@ -0,0 +1,79 @@
+import { createLogger } from '@sim/logger'
+import { getErrorMessage } from '@sim/utils/errors'
+import { type NextRequest, NextResponse } from 'next/server'
+import { workdayListWorkersContract } from '@/lib/api/contracts/tools/workday'
+import { parseRequest } from '@/lib/api/server'
+import { checkInternalAuth } from '@/lib/auth/hybrid'
+import { generateRequestId } from '@/lib/core/utils/request'
+import { withRouteHandler } from '@/lib/core/utils/with-route-handler'
+import {
+  createWorkdaySoapClient,
+  extractRefId,
+  normalizeSoapArray,
+  parseSoapNumber,
+  type WorkdayWorkerSoap,
+} from '@/tools/workday/soap'
+
+export const dynamic = 'force-dynamic'
+
+const logger = createLogger('WorkdayListWorkersAPI')
+
+export const POST = withRouteHandler(async (request: NextRequest) => {
+  const requestId = generateRequestId()
+
+  try {
+    const authResult = await checkInternalAuth(request, { requireWorkflowId: false })
+    if (!authResult.success) {
+      return NextResponse.json({ success: false, error: 'Unauthorized' }, { status: 401 })
+    }
+
+    const parsed = await parseRequest(workdayListWorkersContract, request, {})
+    if (!parsed.success) return parsed.response
+    const data = parsed.data.body
+
+    const client = await createWorkdaySoapClient(
+      data.tenantUrl,
+      data.tenant,
+      'humanResources',
+      data.username,
+      data.password
+    )
+
+    const limit = data.limit ?? 20
+    const offset = data.offset ?? 0
+    const page = offset > 0 ? Math.floor(offset / limit) + 1 : 1
+
+    const [result] = await client.Get_WorkersAsync({
+      Response_Filter: { Page: page, Count: limit },
+      Response_Group: {
+        Include_Reference: true,
+        Include_Personal_Information: true,
+        Include_Employment_Information: true,
+      },
+    })
+
+    const workersArray = normalizeSoapArray(
+      result?.Response_Data?.Worker as WorkdayWorkerSoap | WorkdayWorkerSoap[] | undefined
+    )
+
+    const workers = workersArray.map((w) => ({
+      id: extractRefId(w.Worker_Reference) ?? null,
+      descriptor: w.Worker_Descriptor ?? null,
+      personalData: w.Worker_Data?.Personal_Data ?? null,
+      employmentData: w.Worker_Data?.Employment_Data ?? null,
+    }))
+
+    const total = parseSoapNumber(result?.Response_Results?.Total_Results) ?? workers.length
+
+    return NextResponse.json({
+      success: true,
+      output: { workers, total },
+    })
+  } catch (error) {
+    logger.error(`[${requestId}] Workday list workers failed`, { error })
+    return NextResponse.json(
+      { success: false, error: getErrorMessage(error, 'Unknown error') },
+      { status: 500 }
+    )
+  }
+})

apps/sim/app/api/tools/workday/terminate/route.ts

@@ -0,0 +1,69 @@
+import { createLogger } from '@sim/logger'
+import { getErrorMessage } from '@sim/utils/errors'
+import { type NextRequest, NextResponse } from 'next/server'
+import { workdayTerminateContract } from '@/lib/api/contracts/tools/workday'
+import { parseRequest } from '@/lib/api/server'
+import { checkInternalAuth } from '@/lib/auth/hybrid'
+import { generateRequestId } from '@/lib/core/utils/request'
+import { withRouteHandler } from '@/lib/core/utils/with-route-handler'
+import { createWorkdaySoapClient, extractRefId, wdRef } from '@/tools/workday/soap'
+
+export const dynamic = 'force-dynamic'
+
+const logger = createLogger('WorkdayTerminateAPI')
+
+export const POST = withRouteHandler(async (request: NextRequest) => {
+  const requestId = generateRequestId()
+
+  try {
+    const authResult = await checkInternalAuth(request, { requireWorkflowId: false })
+    if (!authResult.success) {
+      return NextResponse.json({ success: false, error: 'Unauthorized' }, { status: 401 })
+    }
+
+    const parsed = await parseRequest(workdayTerminateContract, request, {})
+    if (!parsed.success) return parsed.response
+    const data = parsed.data.body
+
+    const client = await createWorkdaySoapClient(
+      data.tenantUrl,
+      data.tenant,
+      'staffing',
+      data.username,
+      data.password
+    )
+
+    const [result] = await client.Terminate_EmployeeAsync({
+      Business_Process_Parameters: {
+        Auto_Complete: true,
+        Run_Now: true,
+      },
+      Terminate_Employee_Data: {
+        Employee_Reference: wdRef('Employee_ID', data.workerId),
+        Termination_Date: data.terminationDate,
+        Terminate_Event_Data: {
+          Primary_Reason_Reference: wdRef('Termination_Subcategory_ID', data.reason),
+          Last_Day_of_Work: data.lastDayOfWork ?? data.terminationDate,
+          Notification_Date: data.notificationDate ?? data.terminationDate,
+        },
+      },
+    })
+
+    const eventRef = result?.Event_Reference
+
+    return NextResponse.json({
+      success: true,
+      output: {
+        eventId: extractRefId(eventRef),
+        workerId: data.workerId,
+        terminationDate: data.terminationDate,
+      },
+    })
+  } catch (error) {
+    logger.error(`[${requestId}] Workday terminate employee failed`, { error })
+    return NextResponse.json(
+      { success: false, error: getErrorMessage(error, 'Unknown error') },
+      { status: 500 }
+    )
+  }
+})

apps/sim/app/api/tools/workday/update-worker/route.ts

@@ -0,0 +1,61 @@
+import { createLogger } from '@sim/logger'
+import { getErrorMessage } from '@sim/utils/errors'
+import { type NextRequest, NextResponse } from 'next/server'
+import { workdayUpdateWorkerContract } from '@/lib/api/contracts/tools/workday'
+import { parseRequest } from '@/lib/api/server'
+import { checkInternalAuth } from '@/lib/auth/hybrid'
+import { generateRequestId } from '@/lib/core/utils/request'
+import { withRouteHandler } from '@/lib/core/utils/with-route-handler'
+import { createWorkdaySoapClient, extractRefId, wdRef } from '@/tools/workday/soap'
+
+export const dynamic = 'force-dynamic'
+
+const logger = createLogger('WorkdayUpdateWorkerAPI')
+
+export const POST = withRouteHandler(async (request: NextRequest) => {
+  const requestId = generateRequestId()
+
+  try {
+    const authResult = await checkInternalAuth(request, { requireWorkflowId: false })
+    if (!authResult.success) {
+      return NextResponse.json({ success: false, error: 'Unauthorized' }, { status: 401 })
+    }
+
+    const parsed = await parseRequest(workdayUpdateWorkerContract, request, {})
+    if (!parsed.success) return parsed.response
+    const data = parsed.data.body
+
+    const client = await createWorkdaySoapClient(
+      data.tenantUrl,
+      data.tenant,
+      'humanResources',
+      data.username,
+      data.password
+    )
+
+    const [result] = await client.Change_Personal_InformationAsync({
+      Business_Process_Parameters: {
+        Auto_Complete: true,
+        Run_Now: true,
+      },
+      Change_Personal_Information_Business_Process_Data: {
+        Person_Reference: wdRef('Employee_ID', data.workerId),
+        Personal_Information_Data: data.fields,
+      },
+    })
+
+    return NextResponse.json({
+      success: true,
+      output: {
+        eventId: extractRefId(result?.Personal_Information_Change_Event_Reference),
+        workerId: data.workerId,
+      },
+    })
+  } catch (error) {
+    logger.error(`[${requestId}] Workday update worker failed`, { error })
+    return NextResponse.json(
+      { success: false, error: getErrorMessage(error, 'Unknown error') },
+      { status: 500 }
+    )
+  }
+})