anthropic 1.74.0 → 1.76.0

data/rbi/anthropic/models/organization/data_residency_update_config.rbi

@@ -0,0 +1,161 @@
+# typed: strong
+
+module Anthropic
+  module Models
+    module Organization
+      class DataResidencyUpdateConfig < Anthropic::Internal::Type::BaseModel
+        OrHash =
+          T.type_alias do
+            T.any(
+              Anthropic::Organization::DataResidencyUpdateConfig,
+              Anthropic::Internal::AnyHash
+            )
+          end
+
+        # Permitted inference geo values. Use 'unrestricted' to allow all geos, or a list
+        # of specific geos.
+        sig do
+          returns(
+            T.nilable(
+              T.any(
+                Symbol,
+                T::Array[Anthropic::Organization::AllowedInferenceGeo::OrSymbol]
+              )
+            )
+          )
+        end
+        attr_accessor :allowed_inference_geos
+
+        # Default inference geo applied when requests omit the parameter. Must be a member
+        # of `allowed_inference_geos` unless `allowed_inference_geos` is `"unrestricted"`.
+        sig do
+          returns(
+            T.nilable(
+              Anthropic::Organization::DataResidencyUpdateConfig::DefaultInferenceGeo::OrSymbol
+            )
+          )
+        end
+        attr_accessor :default_inference_geo
+
+        sig do
+          params(
+            allowed_inference_geos:
+              T.nilable(
+                T.any(
+                  Symbol,
+                  T::Array[
+                    Anthropic::Organization::AllowedInferenceGeo::OrSymbol
+                  ]
+                )
+              ),
+            default_inference_geo:
+              T.nilable(
+                Anthropic::Organization::DataResidencyUpdateConfig::DefaultInferenceGeo::OrSymbol
+              )
+          ).returns(T.attached_class)
+        end
+        def self.new(
+          # Permitted inference geo values. Use 'unrestricted' to allow all geos, or a list
+          # of specific geos.
+          allowed_inference_geos: nil,
+          # Default inference geo applied when requests omit the parameter. Must be a member
+          # of `allowed_inference_geos` unless `allowed_inference_geos` is `"unrestricted"`.
+          default_inference_geo: nil
+        )
+        end
+
+        sig do
+          override.returns(
+            {
+              allowed_inference_geos:
+                T.nilable(
+                  T.any(
+                    Symbol,
+                    T::Array[
+                      Anthropic::Organization::AllowedInferenceGeo::OrSymbol
+                    ]
+                  )
+                ),
+              default_inference_geo:
+                T.nilable(
+                  Anthropic::Organization::DataResidencyUpdateConfig::DefaultInferenceGeo::OrSymbol
+                )
+            }
+          )
+        end
+        def to_hash
+        end
+
+        # Permitted inference geo values. Use 'unrestricted' to allow all geos, or a list
+        # of specific geos.
+        module AllowedInferenceGeos
+          extend Anthropic::Internal::Type::Union
+
+          Variants =
+            T.type_alias do
+              T.any(
+                Symbol,
+                T::Array[
+                  Anthropic::Organization::AllowedInferenceGeo::TaggedSymbol
+                ]
+              )
+            end
+
+          sig do
+            override.returns(
+              T::Array[
+                Anthropic::Organization::DataResidencyUpdateConfig::AllowedInferenceGeos::Variants
+              ]
+            )
+          end
+          def self.variants
+          end
+
+          AllowedInferenceGeoArray =
+            T.let(
+              Anthropic::Internal::Type::ArrayOf[
+                enum: Anthropic::Organization::AllowedInferenceGeo
+              ],
+              Anthropic::Internal::Type::Converter
+            )
+        end
+
+        # Default inference geo applied when requests omit the parameter. Must be a member
+        # of `allowed_inference_geos` unless `allowed_inference_geos` is `"unrestricted"`.
+        module DefaultInferenceGeo
+          extend Anthropic::Internal::Type::Enum
+
+          TaggedSymbol =
+            T.type_alias do
+              T.all(
+                Symbol,
+                Anthropic::Organization::DataResidencyUpdateConfig::DefaultInferenceGeo
+              )
+            end
+          OrSymbol = T.type_alias { T.any(Symbol, String) }
+
+          GLOBAL =
+            T.let(
+              :global,
+              Anthropic::Organization::DataResidencyUpdateConfig::DefaultInferenceGeo::TaggedSymbol
+            )
+          US =
+            T.let(
+              :us,
+              Anthropic::Organization::DataResidencyUpdateConfig::DefaultInferenceGeo::TaggedSymbol
+            )
+
+          sig do
+            override.returns(
+              T::Array[
+                Anthropic::Organization::DataResidencyUpdateConfig::DefaultInferenceGeo::TaggedSymbol
+              ]
+            )
+          end
+          def self.values
+          end
+        end
+      end
+    end
+  end
+end

data/rbi/anthropic/models/organization/external_key.rbi

@@ -0,0 +1,298 @@
+# typed: strong
+
+module Anthropic
+  module Models
+    module Organization
+      class ExternalKey < Anthropic::Internal::Type::BaseModel
+        OrHash =
+          T.type_alias do
+            T.any(
+              Anthropic::Organization::ExternalKey,
+              Anthropic::Internal::AnyHash
+            )
+          end
+
+        # Identifier of the external key config. A tagged ID prefixed `ekey_`, or — for
+        # organizations on the Claude Platform on AWS — the AWS KMS key ARN.
+        sig { returns(String) }
+        attr_accessor :id
+
+        # Whether any workspace uses this config to encrypt its data — counting live and
+        # archived workspaces (an archived workspace's data remains encrypted under the
+        # config), excluding deleted ones. Only an attached config is used by the
+        # encryption path; an `unattached` config is inert and can be deleted.
+        sig do
+          returns(Anthropic::Organization::ExternalKey::Attachment::Variants)
+        end
+        attr_accessor :attachment
+
+        sig { returns(Time) }
+        attr_accessor :created_at
+
+        # Human-friendly display name. Null if none was set.
+        sig { returns(T.nilable(String)) }
+        attr_accessor :display_name
+
+        # Data residency geo. Selects which regional validator handles this key's
+        # encrypt/decrypt roundtrips.
+        sig { returns(String) }
+        attr_accessor :geo
+
+        # KMS provider identity and auth coordinates.
+        sig do
+          returns(
+            Anthropic::Organization::ExternalKey::ProviderConfig::Variants
+          )
+        end
+        attr_accessor :provider_config
+
+        sig { returns(Symbol) }
+        attr_accessor :type
+
+        sig { returns(Time) }
+        attr_accessor :updated_at
+
+        # CMEK external key config belonging to the caller's organization.
+        #
+        # Configs are organization-scoped. Workspaces attach to a config; once any
+        # workspace references it, the provider fields become effectively immutable
+        # (existing encrypted data needs the config for decrypt).
+        sig do
+          params(
+            id: String,
+            attachment:
+              T.any(
+                Anthropic::Organization::ExternalKeyAttachedAttachment::OrHash,
+                Anthropic::Organization::ExternalKeyUnattachedAttachment::OrHash
+              ),
+            created_at: Time,
+            display_name: T.nilable(String),
+            geo: String,
+            provider_config:
+              T.any(
+                Anthropic::Organization::AWSExternalKeyConfig::OrHash,
+                Anthropic::Organization::GCPExternalKeyConfig::OrHash,
+                Anthropic::Organization::AzureExternalKeyConfig::OrHash
+              ),
+            updated_at: Time,
+            type: Symbol
+          ).returns(T.attached_class)
+        end
+        def self.new(
+          # Identifier of the external key config. A tagged ID prefixed `ekey_`, or — for
+          # organizations on the Claude Platform on AWS — the AWS KMS key ARN.
+          id:,
+          # Whether any workspace uses this config to encrypt its data — counting live and
+          # archived workspaces (an archived workspace's data remains encrypted under the
+          # config), excluding deleted ones. Only an attached config is used by the
+          # encryption path; an `unattached` config is inert and can be deleted.
+          attachment:,
+          created_at:,
+          # Human-friendly display name. Null if none was set.
+          display_name:,
+          # Data residency geo. Selects which regional validator handles this key's
+          # encrypt/decrypt roundtrips.
+          geo:,
+          # KMS provider identity and auth coordinates.
+          provider_config:,
+          updated_at:,
+          type: :external_key
+        )
+        end
+
+        sig do
+          override.returns(
+            {
+              id: String,
+              attachment:
+                Anthropic::Organization::ExternalKey::Attachment::Variants,
+              created_at: Time,
+              display_name: T.nilable(String),
+              geo: String,
+              provider_config:
+                Anthropic::Organization::ExternalKey::ProviderConfig::Variants,
+              type: Symbol,
+              updated_at: Time
+            }
+          )
+        end
+        def to_hash
+        end
+
+        # Whether any workspace uses this config to encrypt its data — counting live and
+        # archived workspaces (an archived workspace's data remains encrypted under the
+        # config), excluding deleted ones. Only an attached config is used by the
+        # encryption path; an `unattached` config is inert and can be deleted.
+        module Attachment
+          extend Anthropic::Internal::Type::Union
+
+          Variants =
+            T.type_alias do
+              T.any(
+                Anthropic::Organization::ExternalKeyAttachedAttachment,
+                Anthropic::Organization::ExternalKeyUnattachedAttachment
+              )
+            end
+
+          module Type
+            extend Anthropic::Internal::Type::Enum
+
+            TaggedSymbol =
+              T.type_alias do
+                T.all(
+                  Symbol,
+                  Anthropic::Organization::ExternalKey::Attachment::Type
+                )
+              end
+            OrSymbol = T.type_alias { T.any(Symbol, String) }
+
+            ATTACHED =
+              T.let(
+                :attached,
+                Anthropic::Organization::ExternalKey::Attachment::Type::TaggedSymbol
+              )
+            UNATTACHED =
+              T.let(
+                :unattached,
+                Anthropic::Organization::ExternalKey::Attachment::Type::TaggedSymbol
+              )
+
+            sig do
+              override.returns(
+                T::Array[
+                  Anthropic::Organization::ExternalKey::Attachment::Type::TaggedSymbol
+                ]
+              )
+            end
+            def self.values
+            end
+          end
+
+          sig do
+            override.returns(
+              T::Array[
+                Anthropic::Organization::ExternalKey::Attachment::Variants
+              ]
+            )
+          end
+          def self.variants
+          end
+
+          # Creates a new instance of the variant class whose `type` matches the given
+          # value, passing the remaining arguments to its constructor.
+          sig do
+            params(
+              type:
+                Anthropic::Organization::ExternalKey::Attachment::Type::OrSymbol
+            ).returns(
+              Anthropic::Organization::ExternalKey::Attachment::Variants
+            )
+          end
+          def self.new(type:)
+          end
+        end
+
+        # KMS provider identity and auth coordinates.
+        module ProviderConfig
+          extend Anthropic::Internal::Type::Union
+
+          Variants =
+            T.type_alias do
+              T.any(
+                Anthropic::Organization::AWSExternalKeyConfig,
+                Anthropic::Organization::GCPExternalKeyConfig,
+                Anthropic::Organization::AzureExternalKeyConfig
+              )
+            end
+
+          module Type
+            extend Anthropic::Internal::Type::Enum
+
+            TaggedSymbol =
+              T.type_alias do
+                T.all(
+                  Symbol,
+                  Anthropic::Organization::ExternalKey::ProviderConfig::Type
+                )
+              end
+            OrSymbol = T.type_alias { T.any(Symbol, String) }
+
+            AWS =
+              T.let(
+                :aws,
+                Anthropic::Organization::ExternalKey::ProviderConfig::Type::TaggedSymbol
+              )
+            GCP =
+              T.let(
+                :gcp,
+                Anthropic::Organization::ExternalKey::ProviderConfig::Type::TaggedSymbol
+              )
+            AZURE =
+              T.let(
+                :azure,
+                Anthropic::Organization::ExternalKey::ProviderConfig::Type::TaggedSymbol
+              )
+
+            sig do
+              override.returns(
+                T::Array[
+                  Anthropic::Organization::ExternalKey::ProviderConfig::Type::TaggedSymbol
+                ]
+              )
+            end
+            def self.values
+            end
+          end
+
+          sig do
+            override.returns(
+              T::Array[
+                Anthropic::Organization::ExternalKey::ProviderConfig::Variants
+              ]
+            )
+          end
+          def self.variants
+          end
+
+          # Creates a new instance of the variant class whose `type` matches the given
+          # value, passing the remaining arguments to its constructor.
+          sig do
+            params(
+              type:
+                Anthropic::Organization::ExternalKey::ProviderConfig::Type::OrSymbol,
+              kms_arn: String,
+              region: T.nilable(String),
+              key_name: String,
+              tenant_id: String,
+              vault_uri: String,
+              client_id: T.nilable(String)
+            ).returns(
+              Anthropic::Organization::ExternalKey::ProviderConfig::Variants
+            )
+          end
+          def self.new(
+            type:,
+            # Full ARN of the AWS KMS key. On Claude Platform on AWS the key must be a
+            # single-Region key in your organization's own AWS account; cross-account keys,
+            # multi-Region keys, and alias ARNs are rejected.
+            kms_arn: nil,
+            # AWS region. Derived from `kms_arn` if omitted.
+            region: nil,
+            # Full resource name of the Cloud KMS key.
+            key_name: nil,
+            # Azure AD tenant ID.
+            tenant_id: nil,
+            # Key Vault data-plane URI — `https://{vault-name}.vault.azure.net` or
+            # `https://{hsm-name}.managedhsm.azure.net`.
+            vault_uri: nil,
+            # Azure AD application (client) ID. Omit to use Anthropic's multitenant app.
+            # Provide only if using a single-tenant app registration in the customer's
+            # directory.
+            client_id: nil
+          )
+          end
+        end
+      end
+    end
+  end
+end

data/rbi/anthropic/models/organization/external_key_attached_attachment.rbi

@@ -0,0 +1,28 @@
+# typed: strong
+
+module Anthropic
+  module Models
+    module Organization
+      class ExternalKeyAttachedAttachment < Anthropic::Internal::Type::BaseModel
+        OrHash =
+          T.type_alias do
+            T.any(
+              Anthropic::Organization::ExternalKeyAttachedAttachment,
+              Anthropic::Internal::AnyHash
+            )
+          end
+
+        sig { returns(Symbol) }
+        attr_accessor :type
+
+        sig { params(type: Symbol).returns(T.attached_class) }
+        def self.new(type: :attached)
+        end
+
+        sig { override.returns({ type: Symbol }) }
+        def to_hash
+        end
+      end
+    end
+  end
+end

data/rbi/anthropic/models/organization/external_key_create_params.rbi

@@ -0,0 +1,228 @@
+# typed: strong
+
+module Anthropic
+  module Models
+    module Organization
+      class ExternalKeyCreateParams < Anthropic::Internal::Type::BaseModel
+        extend Anthropic::Internal::Type::RequestParameters::Converter
+        include Anthropic::Internal::Type::RequestParameters
+
+        OrHash =
+          T.type_alias do
+            T.any(
+              Anthropic::Organization::ExternalKeyCreateParams,
+              Anthropic::Internal::AnyHash
+            )
+          end
+
+        # KMS provider identity and auth coordinates.
+        sig do
+          returns(
+            T.any(
+              Anthropic::Organization::AWSExternalKeyConfig,
+              Anthropic::Organization::GCPExternalKeyConfig,
+              Anthropic::Organization::AzureExternalKeyConfigParam
+            )
+          )
+        end
+        attr_accessor :provider_config
+
+        # Human-friendly display name.
+        sig { returns(T.nilable(String)) }
+        attr_accessor :display_name
+
+        # Data residency geo. Only `us` is supported.
+        sig do
+          returns(
+            T.nilable(
+              Anthropic::Organization::ExternalKeyCreateParams::Geo::OrSymbol
+            )
+          )
+        end
+        attr_reader :geo
+
+        sig do
+          params(
+            geo: Anthropic::Organization::ExternalKeyCreateParams::Geo::OrSymbol
+          ).void
+        end
+        attr_writer :geo
+
+        sig do
+          params(
+            provider_config:
+              T.any(
+                Anthropic::Organization::AWSExternalKeyConfig::OrHash,
+                Anthropic::Organization::GCPExternalKeyConfig::OrHash,
+                Anthropic::Organization::AzureExternalKeyConfigParam::OrHash
+              ),
+            display_name: T.nilable(String),
+            geo:
+              Anthropic::Organization::ExternalKeyCreateParams::Geo::OrSymbol,
+            request_options: Anthropic::RequestOptions::OrHash
+          ).returns(T.attached_class)
+        end
+        def self.new(
+          # KMS provider identity and auth coordinates.
+          provider_config:,
+          # Human-friendly display name.
+          display_name: nil,
+          # Data residency geo. Only `us` is supported.
+          geo: nil,
+          request_options: {}
+        )
+        end
+
+        sig do
+          override.returns(
+            {
+              provider_config:
+                T.any(
+                  Anthropic::Organization::AWSExternalKeyConfig,
+                  Anthropic::Organization::GCPExternalKeyConfig,
+                  Anthropic::Organization::AzureExternalKeyConfigParam
+                ),
+              display_name: T.nilable(String),
+              geo:
+                Anthropic::Organization::ExternalKeyCreateParams::Geo::OrSymbol,
+              request_options: Anthropic::RequestOptions
+            }
+          )
+        end
+        def to_hash
+        end
+
+        # KMS provider identity and auth coordinates.
+        module ProviderConfig
+          extend Anthropic::Internal::Type::Union
+
+          Variants =
+            T.type_alias do
+              T.any(
+                Anthropic::Organization::AWSExternalKeyConfig,
+                Anthropic::Organization::GCPExternalKeyConfig,
+                Anthropic::Organization::AzureExternalKeyConfigParam
+              )
+            end
+
+          module Type
+            extend Anthropic::Internal::Type::Enum
+
+            TaggedSymbol =
+              T.type_alias do
+                T.all(
+                  Symbol,
+                  Anthropic::Organization::ExternalKeyCreateParams::ProviderConfig::Type
+                )
+              end
+            OrSymbol = T.type_alias { T.any(Symbol, String) }
+
+            AWS =
+              T.let(
+                :aws,
+                Anthropic::Organization::ExternalKeyCreateParams::ProviderConfig::Type::TaggedSymbol
+              )
+            GCP =
+              T.let(
+                :gcp,
+                Anthropic::Organization::ExternalKeyCreateParams::ProviderConfig::Type::TaggedSymbol
+              )
+            AZURE =
+              T.let(
+                :azure,
+                Anthropic::Organization::ExternalKeyCreateParams::ProviderConfig::Type::TaggedSymbol
+              )
+
+            sig do
+              override.returns(
+                T::Array[
+                  Anthropic::Organization::ExternalKeyCreateParams::ProviderConfig::Type::TaggedSymbol
+                ]
+              )
+            end
+            def self.values
+            end
+          end
+
+          sig do
+            override.returns(
+              T::Array[
+                Anthropic::Organization::ExternalKeyCreateParams::ProviderConfig::Variants
+              ]
+            )
+          end
+          def self.variants
+          end
+
+          # Creates a new instance of the variant class whose `type` matches the given
+          # value, passing the remaining arguments to its constructor.
+          sig do
+            params(
+              type:
+                Anthropic::Organization::ExternalKeyCreateParams::ProviderConfig::Type::OrSymbol,
+              kms_arn: String,
+              region: T.nilable(String),
+              key_name: String,
+              tenant_id: String,
+              vault_uri: String,
+              client_id: T.nilable(String)
+            ).returns(
+              Anthropic::Organization::ExternalKeyCreateParams::ProviderConfig::Variants
+            )
+          end
+          def self.new(
+            type:,
+            # Full ARN of the AWS KMS key. On Claude Platform on AWS the key must be a
+            # single-Region key in your organization's own AWS account; cross-account keys,
+            # multi-Region keys, and alias ARNs are rejected.
+            kms_arn: nil,
+            # AWS region. Derived from `kms_arn` if omitted.
+            region: nil,
+            # Full resource name of the Cloud KMS key.
+            key_name: nil,
+            # Azure AD tenant ID.
+            tenant_id: nil,
+            # Key Vault data-plane URI — `https://{vault-name}.vault.azure.net` or
+            # `https://{hsm-name}.managedhsm.azure.net`.
+            vault_uri: nil,
+            # Azure AD application (client) ID. Omit to use Anthropic's multitenant app.
+            # Provide only if using a single-tenant app registration in the customer's
+            # directory.
+            client_id: nil
+          )
+          end
+        end
+
+        # Data residency geo. Only `us` is supported.
+        module Geo
+          extend Anthropic::Internal::Type::Enum
+
+          TaggedSymbol =
+            T.type_alias do
+              T.all(
+                Symbol,
+                Anthropic::Organization::ExternalKeyCreateParams::Geo
+              )
+            end
+          OrSymbol = T.type_alias { T.any(Symbol, String) }
+
+          US =
+            T.let(
+              :us,
+              Anthropic::Organization::ExternalKeyCreateParams::Geo::TaggedSymbol
+            )
+
+          sig do
+            override.returns(
+              T::Array[
+                Anthropic::Organization::ExternalKeyCreateParams::Geo::TaggedSymbol
+              ]
+            )
+          end
+          def self.values
+          end
+        end
+      end
+    end
+  end
+end