anthropic 2.3.0 → 2.4.0

data/rbi/anthropic/models/beta/organization/beta_analytics_skill_group_by.rbi

@@ -0,0 +1,49 @@
+# typed: strong
+
+module Anthropic
+  module Models
+    module Beta
+      module Organization
+        # A dimension to group skill activity by.
+        module BetaAnalyticsSkillGroupBy
+          extend Anthropic::Internal::Type::Enum
+
+          TaggedSymbol =
+            T.type_alias do
+              T.all(
+                Symbol,
+                Anthropic::Beta::Organization::BetaAnalyticsSkillGroupBy
+              )
+            end
+          OrSymbol = T.type_alias { T.any(Symbol, String) }
+
+          PRODUCT =
+            T.let(
+              :product,
+              Anthropic::Beta::Organization::BetaAnalyticsSkillGroupBy::TaggedSymbol
+            )
+          RBAC_GROUP_ID =
+            T.let(
+              :rbac_group_id,
+              Anthropic::Beta::Organization::BetaAnalyticsSkillGroupBy::TaggedSymbol
+            )
+          USER_ID =
+            T.let(
+              :user_id,
+              Anthropic::Beta::Organization::BetaAnalyticsSkillGroupBy::TaggedSymbol
+            )
+
+          sig do
+            override.returns(
+              T::Array[
+                Anthropic::Beta::Organization::BetaAnalyticsSkillGroupBy::TaggedSymbol
+              ]
+            )
+          end
+          def self.values
+          end
+        end
+      end
+    end
+  end
+end

data/rbi/anthropic/models/beta/organization/beta_analytics_user_activity.rbi

@@ -71,6 +71,13 @@ module Anthropic
           end
           attr_writer :design_metrics
 
+          # Number of distinct active users represented by this row. Only set for grouped
+          # rollups (`group_by[]`); null for per-user rows. In date-range mode, recomputed
+          # as an exact distinct count of the group's active members over the requested
+          # window, never a sum of per-day values.
+          sig { returns(T.nilable(Integer)) }
+          attr_accessor :distinct_user_count
+
           # Office Agent activity metrics for a single user on a given day, broken out by
           # Office product.
           sig do
@@ -100,6 +107,22 @@ module Anthropic
           end
           attr_writer :science_metrics
 
+          # The user this row describes. Null on rows aggregated across users.
+          sig do
+            returns(T.nilable(Anthropic::Beta::Organization::BetaAnalyticsUser))
+          end
+          attr_reader :user
+
+          sig do
+            params(
+              user:
+                T.nilable(
+                  Anthropic::Beta::Organization::BetaAnalyticsUser::OrHash
+                )
+            ).void
+          end
+          attr_writer :user
+
           # Number of web searches performed
           sig { returns(Integer) }
           attr_accessor :web_search_count
@@ -111,7 +134,7 @@ module Anthropic
           sig do
             returns(
               T.nilable(
-                Anthropic::Beta::Organization::BetaAnalyticsUserActivity::ChatCoworkUnifiedMetrics
+                Anthropic::Beta::Organization::BetaAnalyticsChatCoworkUnifiedMetrics
               )
             )
           end
@@ -121,19 +144,12 @@ module Anthropic
             params(
               chat_cowork_unified_metrics:
                 T.nilable(
-                  Anthropic::Beta::Organization::BetaAnalyticsUserActivity::ChatCoworkUnifiedMetrics::OrHash
+                  Anthropic::Beta::Organization::BetaAnalyticsChatCoworkUnifiedMetrics::OrHash
                 )
             ).void
           end
           attr_writer :chat_cowork_unified_metrics
 
-          # Number of distinct active users represented by this row. Only set for grouped
-          # rollups (`group_by[]`); null for per-user rows. In date-range mode, recomputed
-          # as an exact distinct count of the group's active members over the requested
-          # window, never a sum of per-day values.
-          sig { returns(T.nilable(Integer)) }
-          attr_accessor :distinct_user_count
-
           # Most recent UTC day (YYYY-MM-DD) on which the user had any counted activity,
           # within the requested window: equal to the requested `date` in single-day mode,
           # and to the latest active day from `starting_date` (inclusive) to `ending_date`
@@ -158,22 +174,6 @@ module Anthropic
           sig { returns(T.nilable(String)) }
           attr_accessor :rbac_group_name
 
-          # The user this row describes. Null on rows aggregated across users.
-          sig do
-            returns(T.nilable(Anthropic::Beta::Organization::BetaAnalyticsUser))
-          end
-          attr_reader :user
-
-          sig do
-            params(
-              user:
-                T.nilable(
-                  Anthropic::Beta::Organization::BetaAnalyticsUser::OrHash
-                )
-            ).void
-          end
-          attr_writer :user
-
           # Per-user activity data for a given day.
           sig do
             params(
@@ -185,23 +185,23 @@ module Anthropic
                 Anthropic::Beta::Organization::BetaAnalyticsCoworkMetrics::OrHash,
               design_metrics:
                 Anthropic::Beta::Organization::BetaAnalyticsDesignMetrics::OrHash,
+              distinct_user_count: T.nilable(Integer),
               office_metrics:
                 Anthropic::Beta::Organization::BetaAnalyticsOfficeMetrics::OrHash,
               science_metrics:
                 Anthropic::Beta::Organization::BetaAnalyticsScienceMetrics::OrHash,
+              user:
+                T.nilable(
+                  Anthropic::Beta::Organization::BetaAnalyticsUser::OrHash
+                ),
               web_search_count: Integer,
               chat_cowork_unified_metrics:
                 T.nilable(
-                  Anthropic::Beta::Organization::BetaAnalyticsUserActivity::ChatCoworkUnifiedMetrics::OrHash
+                  Anthropic::Beta::Organization::BetaAnalyticsChatCoworkUnifiedMetrics::OrHash
                 ),
-              distinct_user_count: T.nilable(Integer),
               last_activity_date: T.nilable(Date),
               rbac_group_id: T.nilable(String),
-              rbac_group_name: T.nilable(String),
-              user:
-                T.nilable(
-                  Anthropic::Beta::Organization::BetaAnalyticsUser::OrHash
-                )
+              rbac_group_name: T.nilable(String)
             ).returns(T.attached_class)
           end
           def self.new(
@@ -213,11 +213,18 @@ module Anthropic
             cowork_metrics:,
             # Claude Design activity metrics for a single user on a given day.
             design_metrics:,
+            # Number of distinct active users represented by this row. Only set for grouped
+            # rollups (`group_by[]`); null for per-user rows. In date-range mode, recomputed
+            # as an exact distinct count of the group's active members over the requested
+            # window, never a sum of per-day values.
+            distinct_user_count:,
             # Office Agent activity metrics for a single user on a given day, broken out by
             # Office product.
             office_metrics:,
             # Claude Science activity metrics for a single user on a given day.
             science_metrics:,
+            # The user this row describes. Null on rows aggregated across users.
+            user:,
             # Number of web searches performed
             web_search_count:,
             # Activity recorded while the member had Chat and Cowork unified (Cowork's
@@ -225,11 +232,6 @@ module Anthropic
             # `sessions` (Cowork activity). Omitted from the response on deployments that do
             # not offer Chat and Cowork unified.
             chat_cowork_unified_metrics: nil,
-            # Number of distinct active users represented by this row. Only set for grouped
-            # rollups (`group_by[]`); null for per-user rows. In date-range mode, recomputed
-            # as an exact distinct count of the group's active members over the requested
-            # window, never a sum of per-day values.
-            distinct_user_count: nil,
             # Most recent UTC day (YYYY-MM-DD) on which the user had any counted activity,
             # within the requested window: equal to the requested `date` in single-day mode,
             # and to the latest active day from `starting_date` (inclusive) to `ending_date`
@@ -247,9 +249,7 @@ module Anthropic
             # Resolved RBAC group display name, alongside `rbac_group_id` when name resolution
             # is available. Null if the group has been deleted or its name could not be
             # resolved; `rbac_group_id` remains the stable key.
-            rbac_group_name: nil,
-            # The user this row describes. Null on rows aggregated across users.
-            user: nil
+            rbac_group_name: nil
           )
           end
 
@@ -264,103 +264,26 @@ module Anthropic
                   Anthropic::Beta::Organization::BetaAnalyticsCoworkMetrics,
                 design_metrics:
                   Anthropic::Beta::Organization::BetaAnalyticsDesignMetrics,
+                distinct_user_count: T.nilable(Integer),
                 office_metrics:
                   Anthropic::Beta::Organization::BetaAnalyticsOfficeMetrics,
                 science_metrics:
                   Anthropic::Beta::Organization::BetaAnalyticsScienceMetrics,
+                user:
+                  T.nilable(Anthropic::Beta::Organization::BetaAnalyticsUser),
                 web_search_count: Integer,
                 chat_cowork_unified_metrics:
                   T.nilable(
-                    Anthropic::Beta::Organization::BetaAnalyticsUserActivity::ChatCoworkUnifiedMetrics
+                    Anthropic::Beta::Organization::BetaAnalyticsChatCoworkUnifiedMetrics
                   ),
-                distinct_user_count: T.nilable(Integer),
                 last_activity_date: T.nilable(Date),
                 rbac_group_id: T.nilable(String),
-                rbac_group_name: T.nilable(String),
-                user:
-                  T.nilable(Anthropic::Beta::Organization::BetaAnalyticsUser)
+                rbac_group_name: T.nilable(String)
               }
             )
           end
           def to_hash
           end
-
-          class ChatCoworkUnifiedMetrics < Anthropic::Internal::Type::BaseModel
-            OrHash =
-              T.type_alias do
-                T.any(
-                  Anthropic::Beta::Organization::BetaAnalyticsUserActivity::ChatCoworkUnifiedMetrics,
-                  Anthropic::Internal::AnyHash
-                )
-              end
-
-            # Chat activity recorded while members had Chat and Cowork unified turned on.
-            sig do
-              returns(
-                Anthropic::Beta::Organization::BetaAnalyticsChatCoworkUnifiedChatMetrics
-              )
-            end
-            attr_reader :chat
-
-            sig do
-              params(
-                chat:
-                  Anthropic::Beta::Organization::BetaAnalyticsChatCoworkUnifiedChatMetrics::OrHash
-              ).void
-            end
-            attr_writer :chat
-
-            # Cowork session activity recorded while members had Chat and Cowork unified
-            # turned on.
-            sig do
-              returns(
-                Anthropic::Beta::Organization::BetaAnalyticsChatCoworkUnifiedSessionsMetrics
-              )
-            end
-            attr_reader :sessions
-
-            sig do
-              params(
-                sessions:
-                  Anthropic::Beta::Organization::BetaAnalyticsChatCoworkUnifiedSessionsMetrics::OrHash
-              ).void
-            end
-            attr_writer :sessions
-
-            # Activity recorded while the member had Chat and Cowork unified (Cowork's
-            # features inside claude.ai chat) turned on, split into `chat` (chat activity) and
-            # `sessions` (Cowork activity). Omitted from the response on deployments that do
-            # not offer Chat and Cowork unified.
-            sig do
-              params(
-                chat:
-                  Anthropic::Beta::Organization::BetaAnalyticsChatCoworkUnifiedChatMetrics::OrHash,
-                sessions:
-                  Anthropic::Beta::Organization::BetaAnalyticsChatCoworkUnifiedSessionsMetrics::OrHash
-              ).returns(T.attached_class)
-            end
-            def self.new(
-              # Chat activity recorded while members had Chat and Cowork unified turned on.
-              chat:,
-              # Cowork session activity recorded while members had Chat and Cowork unified
-              # turned on.
-              sessions:
-            )
-            end
-
-            sig do
-              override.returns(
-                {
-                  chat:
-                    Anthropic::Beta::Organization::BetaAnalyticsChatCoworkUnifiedChatMetrics,
-                  sessions:
-                    Anthropic::Beta::Organization::BetaAnalyticsChatCoworkUnifiedSessionsMetrics
-                }
-              )
-            end
-            def to_hash
-            end
-          end
         end
       end
     end

data/rbi/anthropic/models/beta/organization/beta_analytics_user_group_by.rbi

@@ -0,0 +1,39 @@
+# typed: strong
+
+module Anthropic
+  module Models
+    module Beta
+      module Organization
+        # A dimension to group user activity by.
+        module BetaAnalyticsUserGroupBy
+          extend Anthropic::Internal::Type::Enum
+
+          TaggedSymbol =
+            T.type_alias do
+              T.all(
+                Symbol,
+                Anthropic::Beta::Organization::BetaAnalyticsUserGroupBy
+              )
+            end
+          OrSymbol = T.type_alias { T.any(Symbol, String) }
+
+          RBAC_GROUP_ID =
+            T.let(
+              :rbac_group_id,
+              Anthropic::Beta::Organization::BetaAnalyticsUserGroupBy::TaggedSymbol
+            )
+
+          sig do
+            override.returns(
+              T::Array[
+                Anthropic::Beta::Organization::BetaAnalyticsUserGroupBy::TaggedSymbol
+              ]
+            )
+          end
+          def self.values
+          end
+        end
+      end
+    end
+  end
+end

data/rbi/anthropic/models/beta/organization/beta_aws_external_key_config.rbi

@@ -13,9 +13,9 @@ module Anthropic
               )
             end
 
-          # Full ARN of the AWS KMS key. On Claude Platform on AWS the key must be a
-          # single-Region key in your organization's own AWS account; cross-account keys,
-          # multi-Region keys, and alias ARNs are rejected.
+          # Full ARN of the AWS KMS key. On Claude Platform on AWS, alias ARNs are rejected,
+          # and your organization's own key must be a single-Region key in your
+          # organization's AWS account.
           sig { returns(String) }
           attr_accessor :kms_arn
 
@@ -26,9 +26,7 @@ module Anthropic
           sig { returns(T.nilable(String)) }
           attr_accessor :region
 
-          # IAM role ARN. Deprecated — Anthropic reaches the KMS key through its own
-          # intermediate role (or, on Claude Platform on AWS, with credentials AWS issues
-          # for the Workspace); this field is ignored.
+          # IAM role ARN. Deprecated; this field is ignored.
           sig { returns(T.nilable(String)) }
           attr_accessor :role_arn
 
@@ -41,15 +39,13 @@ module Anthropic
             ).returns(T.attached_class)
           end
           def self.new(
-            # Full ARN of the AWS KMS key. On Claude Platform on AWS the key must be a
-            # single-Region key in your organization's own AWS account; cross-account keys,
-            # multi-Region keys, and alias ARNs are rejected.
+            # Full ARN of the AWS KMS key. On Claude Platform on AWS, alias ARNs are rejected,
+            # and your organization's own key must be a single-Region key in your
+            # organization's AWS account.
             kms_arn:,
             # AWS region. Derived from `kms_arn` if omitted.
             region: nil,
-            # IAM role ARN. Deprecated — Anthropic reaches the KMS key through its own
-            # intermediate role (or, on Claude Platform on AWS, with credentials AWS issues
-            # for the Workspace); this field is ignored.
+            # IAM role ARN. Deprecated; this field is ignored.
             role_arn: nil,
             type: :aws
           )

data/rbi/anthropic/models/beta/organization/{rbac_group_delete_response.rbi → beta_deleted_rbac_group.rbi}

@@ -4,11 +4,11 @@ module Anthropic
   module Models
     module Beta
       module Organization
-        class RBACGroupDeleteResponse < Anthropic::Internal::Type::BaseModel
+        class BetaDeletedRBACGroup < Anthropic::Internal::Type::BaseModel
           OrHash =
             T.type_alias do
               T.any(
-                Anthropic::Models::Beta::Organization::RBACGroupDeleteResponse,
+                Anthropic::Beta::Organization::BetaDeletedRBACGroup,
                 Anthropic::Internal::AnyHash
               )
             end

data/rbi/anthropic/models/beta/organization/beta_external_key.rbi

@@ -13,8 +13,8 @@ module Anthropic
               )
             end
 
-          # Identifier of the external key config. A tagged ID prefixed `ekey_`, or — for
-          # organizations on the Claude Platform on AWS — the AWS KMS key ARN.
+          # Identifier of the external key config: a tagged ID prefixed `ekey_`, or, on
+          # Claude Platform on AWS, an AWS KMS key's ARN.
           sig { returns(String) }
           attr_accessor :id
 
@@ -55,6 +55,13 @@ module Anthropic
           sig { returns(Time) }
           attr_accessor :updated_at
 
+          # ID of the user profile the key is bound to, or null if the key is not bound to
+          # one. A key bound to a user profile can only be attached to a Workspace that has
+          # the same user profile. A key that isn't bound can be attached to a Workspace
+          # whatever its user profile.
+          sig { returns(T.nilable(String)) }
+          attr_accessor :user_profile_id
+
           # CMEK external key config belonging to the caller's organization.
           #
           # Configs are organization-scoped. Workspaces attach to a config; once any
@@ -78,12 +85,13 @@ module Anthropic
                   Anthropic::Beta::Organization::BetaAzureExternalKeyConfig::OrHash
                 ),
               updated_at: Time,
+              user_profile_id: T.nilable(String),
               type: Symbol
             ).returns(T.attached_class)
           end
           def self.new(
-            # Identifier of the external key config. A tagged ID prefixed `ekey_`, or — for
-            # organizations on the Claude Platform on AWS — the AWS KMS key ARN.
+            # Identifier of the external key config: a tagged ID prefixed `ekey_`, or, on
+            # Claude Platform on AWS, an AWS KMS key's ARN.
             id:,
             # Whether any workspace uses this config to encrypt its data — counting live and
             # archived workspaces (an archived workspace's data remains encrypted under the
@@ -99,6 +107,11 @@ module Anthropic
             # KMS provider identity and auth coordinates.
             provider_config:,
             updated_at:,
+            # ID of the user profile the key is bound to, or null if the key is not bound to
+            # one. A key bound to a user profile can only be attached to a Workspace that has
+            # the same user profile. A key that isn't bound can be attached to a Workspace
+            # whatever its user profile.
+            user_profile_id:,
             type: :external_key
           )
           end
@@ -115,7 +128,8 @@ module Anthropic
                 provider_config:
                   Anthropic::Beta::Organization::BetaExternalKey::ProviderConfig::Variants,
                 type: Symbol,
-                updated_at: Time
+                updated_at: Time,
+                user_profile_id: T.nilable(String)
               }
             )
           end
@@ -276,15 +290,13 @@ module Anthropic
             end
             def self.new(
               type:,
-              # Full ARN of the AWS KMS key. On Claude Platform on AWS the key must be a
-              # single-Region key in your organization's own AWS account; cross-account keys,
-              # multi-Region keys, and alias ARNs are rejected.
+              # Full ARN of the AWS KMS key. On Claude Platform on AWS, alias ARNs are rejected,
+              # and your organization's own key must be a single-Region key in your
+              # organization's AWS account.
               kms_arn: nil,
               # AWS region. Derived from `kms_arn` if omitted.
               region: nil,
-              # IAM role ARN. Deprecated — Anthropic reaches the KMS key through its own
-              # intermediate role (or, on Claude Platform on AWS, with credentials AWS issues
-              # for the Workspace); this field is ignored.
+              # IAM role ARN. Deprecated; this field is ignored.
               role_arn: nil,
               # Full resource name of the Cloud KMS key.
               key_name: nil,

data/rbi/anthropic/models/beta/organization/beta_workspace.rbi

@@ -22,17 +22,17 @@ module Anthropic
           sig { returns(T.nilable(Time)) }
           attr_accessor :archived_at
 
-          # Identifier for this Workspace's encryption compartment. When you configure a
-          # customer-managed encryption key (CMEK) on AWS, reference this value in your KMS
-          # key-policy condition so the key is scoped to this compartment. On GCP and Azure,
-          # Anthropic enforces the compartment binding automatically; you do not need to
-          # reference this value in your key configuration. See the CMEK integration guide
-          # for the required key configuration; unless your organization is on Claude
-          # Platform on AWS, it includes a separate value used during key validation. On
-          # Claude Platform on AWS there is no separate validation value: the key is
-          # validated against this Workspace's own value when it is attached, so if your key
-          # policy uses the compartment condition, add this value to it before attaching the
-          # key.
+          # Identifier for this Workspace's encryption compartment. When you configure an
+          # AWS KMS customer-managed encryption key (CMEK) that isn't bound to a user
+          # profile, reference this value in your KMS key-policy condition so the key is
+          # scoped to this compartment. On GCP and Azure, Anthropic enforces the compartment
+          # binding automatically; you do not need to reference this value in your key
+          # configuration. See the CMEK integration guide for the required key
+          # configuration; unless your organization is on Claude Platform on AWS, it
+          # includes a separate value used during key validation. On Claude Platform on AWS
+          # there is no separate validation value: your organization's own key is validated
+          # against this Workspace's own value when it is attached, so if its key policy
+          # uses the compartment condition, add this value to it before attaching the key.
           sig { returns(String) }
           attr_accessor :compartment_id
 
@@ -60,13 +60,13 @@ module Anthropic
           # Workspace. Setting this field requires CMEK to be enabled for your organization.
           # When set, data stored for this Workspace is encrypted with the referenced key.
           # Create key configurations with the External Keys API. On Claude Platform on AWS
-          # the value is the AWS KMS key ARN, and the key must be a single-Region key in the
-          # same AWS account and Region as the Workspace. On that platform the key is
-          # validated against this Workspace when it is attached, so a key-policy problem is
-          # reported as an error on this request. This field is write-once: once a key is
-          # attached to a Workspace it cannot be detached or replaced. To rotate key
-          # material, rotate the underlying key on your cloud KMS; the `external_key_id`
-          # stays the same.
+          # the value for an AWS KMS key is the key's ARN, and your organization's own key
+          # must be a single-Region key in the same AWS account and Region as the Workspace.
+          # On that platform the key is validated against this Workspace when it is
+          # attached, so a key-policy problem is reported as an error on this request. This
+          # field is write-once: once a key is attached to a Workspace it cannot be detached
+          # or replaced. To rotate key material, rotate the underlying key on your cloud
+          # KMS; the `external_key_id` stays the same.
           sig { returns(T.nilable(String)) }
           attr_accessor :external_key_id
 
@@ -85,6 +85,12 @@ module Anthropic
           sig { returns(Symbol) }
           attr_accessor :type
 
+          # ID of the user profile attached to the Workspace, or null if it has none. Every
+          # inference request through a Workspace that has a user profile must name that
+          # profile.
+          sig { returns(T.nilable(String)) }
+          attr_accessor :user_profile_id
+
           sig do
             params(
               id: String,
@@ -97,6 +103,7 @@ module Anthropic
               external_key_id: T.nilable(String),
               name: String,
               tags: T::Hash[Symbol, String],
+              user_profile_id: T.nilable(String),
               type: Symbol
             ).returns(T.attached_class)
           end
@@ -106,17 +113,17 @@ module Anthropic
             # RFC 3339 datetime string indicating when the Workspace was archived, or `null`
             # if the Workspace is not archived.
             archived_at:,
-            # Identifier for this Workspace's encryption compartment. When you configure a
-            # customer-managed encryption key (CMEK) on AWS, reference this value in your KMS
-            # key-policy condition so the key is scoped to this compartment. On GCP and Azure,
-            # Anthropic enforces the compartment binding automatically; you do not need to
-            # reference this value in your key configuration. See the CMEK integration guide
-            # for the required key configuration; unless your organization is on Claude
-            # Platform on AWS, it includes a separate value used during key validation. On
-            # Claude Platform on AWS there is no separate validation value: the key is
-            # validated against this Workspace's own value when it is attached, so if your key
-            # policy uses the compartment condition, add this value to it before attaching the
-            # key.
+            # Identifier for this Workspace's encryption compartment. When you configure an
+            # AWS KMS customer-managed encryption key (CMEK) that isn't bound to a user
+            # profile, reference this value in your KMS key-policy condition so the key is
+            # scoped to this compartment. On GCP and Azure, Anthropic enforces the compartment
+            # binding automatically; you do not need to reference this value in your key
+            # configuration. See the CMEK integration guide for the required key
+            # configuration; unless your organization is on Claude Platform on AWS, it
+            # includes a separate value used during key validation. On Claude Platform on AWS
+            # there is no separate validation value: your organization's own key is validated
+            # against this Workspace's own value when it is attached, so if its key policy
+            # uses the compartment condition, add this value to it before attaching the key.
             compartment_id:,
             # RFC 3339 datetime string indicating when the Workspace was created.
             created_at:,
@@ -128,19 +135,23 @@ module Anthropic
             # Workspace. Setting this field requires CMEK to be enabled for your organization.
             # When set, data stored for this Workspace is encrypted with the referenced key.
             # Create key configurations with the External Keys API. On Claude Platform on AWS
-            # the value is the AWS KMS key ARN, and the key must be a single-Region key in the
-            # same AWS account and Region as the Workspace. On that platform the key is
-            # validated against this Workspace when it is attached, so a key-policy problem is
-            # reported as an error on this request. This field is write-once: once a key is
-            # attached to a Workspace it cannot be detached or replaced. To rotate key
-            # material, rotate the underlying key on your cloud KMS; the `external_key_id`
-            # stays the same.
+            # the value for an AWS KMS key is the key's ARN, and your organization's own key
+            # must be a single-Region key in the same AWS account and Region as the Workspace.
+            # On that platform the key is validated against this Workspace when it is
+            # attached, so a key-policy problem is reported as an error on this request. This
+            # field is write-once: once a key is attached to a Workspace it cannot be detached
+            # or replaced. To rotate key material, rotate the underlying key on your cloud
+            # KMS; the `external_key_id` stays the same.
             external_key_id:,
             # Name of the Workspace.
             name:,
             # User-defined tags as string key-value pairs. Keys may not begin with
             # `anthropic`.
             tags:,
+            # ID of the user profile attached to the Workspace, or null if it has none. Every
+            # inference request through a Workspace that has a user profile must name that
+            # profile.
+            user_profile_id:,
             # Object type.
             #
             # For Workspaces, this is always `"workspace"`.
@@ -161,7 +172,8 @@ module Anthropic
                 external_key_id: T.nilable(String),
                 name: String,
                 tags: T::Hash[Symbol, String],
-                type: Symbol
+                type: Symbol,
+                user_profile_id: T.nilable(String)
               }
             )
           end