anthropic 2.3.0 → 2.4.0

data/rbi/anthropic/models/organization/workspace.rbi

@@ -21,17 +21,17 @@ module Anthropic
         sig { returns(T.nilable(Time)) }
         attr_accessor :archived_at
 
-        # Identifier for this Workspace's encryption compartment. When you configure a
-        # customer-managed encryption key (CMEK) on AWS, reference this value in your KMS
-        # key-policy condition so the key is scoped to this compartment. On GCP and Azure,
-        # Anthropic enforces the compartment binding automatically; you do not need to
-        # reference this value in your key configuration. See the CMEK integration guide
-        # for the required key configuration; unless your organization is on Claude
-        # Platform on AWS, it includes a separate value used during key validation. On
-        # Claude Platform on AWS there is no separate validation value: the key is
-        # validated against this Workspace's own value when it is attached, so if your key
-        # policy uses the compartment condition, add this value to it before attaching the
-        # key.
+        # Identifier for this Workspace's encryption compartment. When you configure an
+        # AWS KMS customer-managed encryption key (CMEK) that isn't bound to a user
+        # profile, reference this value in your KMS key-policy condition so the key is
+        # scoped to this compartment. On GCP and Azure, Anthropic enforces the compartment
+        # binding automatically; you do not need to reference this value in your key
+        # configuration. See the CMEK integration guide for the required key
+        # configuration; unless your organization is on Claude Platform on AWS, it
+        # includes a separate value used during key validation. On Claude Platform on AWS
+        # there is no separate validation value: your organization's own key is validated
+        # against this Workspace's own value when it is attached, so if its key policy
+        # uses the compartment condition, add this value to it before attaching the key.
         sig { returns(String) }
         attr_accessor :compartment_id
 
@@ -58,13 +58,13 @@ module Anthropic
         # Workspace. Setting this field requires CMEK to be enabled for your organization.
         # When set, data stored for this Workspace is encrypted with the referenced key.
         # Create key configurations with the External Keys API. On Claude Platform on AWS
-        # the value is the AWS KMS key ARN, and the key must be a single-Region key in the
-        # same AWS account and Region as the Workspace. On that platform the key is
-        # validated against this Workspace when it is attached, so a key-policy problem is
-        # reported as an error on this request. This field is write-once: once a key is
-        # attached to a Workspace it cannot be detached or replaced. To rotate key
-        # material, rotate the underlying key on your cloud KMS; the `external_key_id`
-        # stays the same.
+        # the value for an AWS KMS key is the key's ARN, and your organization's own key
+        # must be a single-Region key in the same AWS account and Region as the Workspace.
+        # On that platform the key is validated against this Workspace when it is
+        # attached, so a key-policy problem is reported as an error on this request. This
+        # field is write-once: once a key is attached to a Workspace it cannot be detached
+        # or replaced. To rotate key material, rotate the underlying key on your cloud
+        # KMS; the `external_key_id` stays the same.
         sig { returns(T.nilable(String)) }
         attr_accessor :external_key_id
 
@@ -83,6 +83,12 @@ module Anthropic
         sig { returns(Symbol) }
         attr_accessor :type
 
+        # ID of the user profile attached to the Workspace, or null if it has none. Every
+        # inference request through a Workspace that has a user profile must name that
+        # profile.
+        sig { returns(T.nilable(String)) }
+        attr_accessor :user_profile_id
+
         sig do
           params(
             id: String,
@@ -94,6 +100,7 @@ module Anthropic
             external_key_id: T.nilable(String),
             name: String,
             tags: T::Hash[Symbol, String],
+            user_profile_id: T.nilable(String),
             type: Symbol
           ).returns(T.attached_class)
         end
@@ -103,17 +110,17 @@ module Anthropic
           # RFC 3339 datetime string indicating when the Workspace was archived, or `null`
           # if the Workspace is not archived.
           archived_at:,
-          # Identifier for this Workspace's encryption compartment. When you configure a
-          # customer-managed encryption key (CMEK) on AWS, reference this value in your KMS
-          # key-policy condition so the key is scoped to this compartment. On GCP and Azure,
-          # Anthropic enforces the compartment binding automatically; you do not need to
-          # reference this value in your key configuration. See the CMEK integration guide
-          # for the required key configuration; unless your organization is on Claude
-          # Platform on AWS, it includes a separate value used during key validation. On
-          # Claude Platform on AWS there is no separate validation value: the key is
-          # validated against this Workspace's own value when it is attached, so if your key
-          # policy uses the compartment condition, add this value to it before attaching the
-          # key.
+          # Identifier for this Workspace's encryption compartment. When you configure an
+          # AWS KMS customer-managed encryption key (CMEK) that isn't bound to a user
+          # profile, reference this value in your KMS key-policy condition so the key is
+          # scoped to this compartment. On GCP and Azure, Anthropic enforces the compartment
+          # binding automatically; you do not need to reference this value in your key
+          # configuration. See the CMEK integration guide for the required key
+          # configuration; unless your organization is on Claude Platform on AWS, it
+          # includes a separate value used during key validation. On Claude Platform on AWS
+          # there is no separate validation value: your organization's own key is validated
+          # against this Workspace's own value when it is attached, so if its key policy
+          # uses the compartment condition, add this value to it before attaching the key.
           compartment_id:,
           # RFC 3339 datetime string indicating when the Workspace was created.
           created_at:,
@@ -125,19 +132,23 @@ module Anthropic
           # Workspace. Setting this field requires CMEK to be enabled for your organization.
           # When set, data stored for this Workspace is encrypted with the referenced key.
           # Create key configurations with the External Keys API. On Claude Platform on AWS
-          # the value is the AWS KMS key ARN, and the key must be a single-Region key in the
-          # same AWS account and Region as the Workspace. On that platform the key is
-          # validated against this Workspace when it is attached, so a key-policy problem is
-          # reported as an error on this request. This field is write-once: once a key is
-          # attached to a Workspace it cannot be detached or replaced. To rotate key
-          # material, rotate the underlying key on your cloud KMS; the `external_key_id`
-          # stays the same.
+          # the value for an AWS KMS key is the key's ARN, and your organization's own key
+          # must be a single-Region key in the same AWS account and Region as the Workspace.
+          # On that platform the key is validated against this Workspace when it is
+          # attached, so a key-policy problem is reported as an error on this request. This
+          # field is write-once: once a key is attached to a Workspace it cannot be detached
+          # or replaced. To rotate key material, rotate the underlying key on your cloud
+          # KMS; the `external_key_id` stays the same.
           external_key_id:,
           # Name of the Workspace.
           name:,
           # User-defined tags as string key-value pairs. Keys may not begin with
           # `anthropic`.
           tags:,
+          # ID of the user profile attached to the Workspace, or null if it has none. Every
+          # inference request through a Workspace that has a user profile must name that
+          # profile.
+          user_profile_id:,
           # Object type.
           #
           # For Workspaces, this is always `"workspace"`.
@@ -157,7 +168,8 @@ module Anthropic
               external_key_id: T.nilable(String),
               name: String,
               tags: T::Hash[Symbol, String],
-              type: Symbol
+              type: Symbol,
+              user_profile_id: T.nilable(String)
             }
           )
         end

data/rbi/anthropic/models/organization/workspace_create_params.rbi

@@ -45,13 +45,13 @@ module Anthropic
         # Workspace. Setting this field requires CMEK to be enabled for your organization.
         # When set, data stored for this Workspace is encrypted with the referenced key.
         # Create key configurations with the External Keys API. On Claude Platform on AWS
-        # the value is the AWS KMS key ARN, and the key must be a single-Region key in the
-        # same AWS account and Region as the Workspace. On that platform the key is
-        # validated against this Workspace when it is attached, so a key-policy problem is
-        # reported as an error on this request. This field is write-once: once a key is
-        # attached to a Workspace it cannot be detached or replaced. To rotate key
-        # material, rotate the underlying key on your cloud KMS; the `external_key_id`
-        # stays the same.
+        # the value for an AWS KMS key is the key's ARN, and your organization's own key
+        # must be a single-Region key in the same AWS account and Region as the Workspace.
+        # On that platform the key is validated against this Workspace when it is
+        # attached, so a key-policy problem is reported as an error on this request. This
+        # field is write-once: once a key is attached to a Workspace it cannot be detached
+        # or replaced. To rotate key material, rotate the underlying key on your cloud
+        # KMS; the `external_key_id` stays the same.
         sig { returns(T.nilable(String)) }
         attr_accessor :external_key_id
 
@@ -60,6 +60,13 @@ module Anthropic
         sig { returns(T.nilable(T::Hash[Symbol, String])) }
         attr_accessor :tags
 
+        # ID of a user profile to attach to the Workspace. Every inference request through
+        # the Workspace must then name this user profile; the API rejects a request that
+        # names none or a different one. The user profile can't be replaced or removed
+        # later; only deleting the user profile clears it.
+        sig { returns(T.nilable(String)) }
+        attr_accessor :user_profile_id
+
         sig do
           params(
             name: String,
@@ -70,6 +77,7 @@ module Anthropic
             display_color: T.nilable(String),
             external_key_id: T.nilable(String),
             tags: T.nilable(T::Hash[Symbol, String]),
+            user_profile_id: T.nilable(String),
             request_options: Anthropic::RequestOptions::OrHash
           ).returns(T.attached_class)
         end
@@ -86,17 +94,22 @@ module Anthropic
           # Workspace. Setting this field requires CMEK to be enabled for your organization.
           # When set, data stored for this Workspace is encrypted with the referenced key.
           # Create key configurations with the External Keys API. On Claude Platform on AWS
-          # the value is the AWS KMS key ARN, and the key must be a single-Region key in the
-          # same AWS account and Region as the Workspace. On that platform the key is
-          # validated against this Workspace when it is attached, so a key-policy problem is
-          # reported as an error on this request. This field is write-once: once a key is
-          # attached to a Workspace it cannot be detached or replaced. To rotate key
-          # material, rotate the underlying key on your cloud KMS; the `external_key_id`
-          # stays the same.
+          # the value for an AWS KMS key is the key's ARN, and your organization's own key
+          # must be a single-Region key in the same AWS account and Region as the Workspace.
+          # On that platform the key is validated against this Workspace when it is
+          # attached, so a key-policy problem is reported as an error on this request. This
+          # field is write-once: once a key is attached to a Workspace it cannot be detached
+          # or replaced. To rotate key material, rotate the underlying key on your cloud
+          # KMS; the `external_key_id` stays the same.
           external_key_id: nil,
           # User-defined tags as string key-value pairs. Keys may not begin with
           # `anthropic`.
           tags: nil,
+          # ID of a user profile to attach to the Workspace. Every inference request through
+          # the Workspace must then name this user profile; the API rejects a request that
+          # names none or a different one. The user profile can't be replaced or removed
+          # later; only deleting the user profile clears it.
+          user_profile_id: nil,
           request_options: {}
         )
         end
@@ -110,6 +123,7 @@ module Anthropic
               display_color: T.nilable(String),
               external_key_id: T.nilable(String),
               tags: T.nilable(T::Hash[Symbol, String]),
+              user_profile_id: T.nilable(String),
               request_options: Anthropic::RequestOptions
             }
           )

data/rbi/anthropic/models/organization/workspace_update_params.rbi

@@ -45,13 +45,13 @@ module Anthropic
         # Workspace. Setting this field requires CMEK to be enabled for your organization.
         # When set, data stored for this Workspace is encrypted with the referenced key.
         # Create key configurations with the External Keys API. On Claude Platform on AWS
-        # the value is the AWS KMS key ARN, and the key must be a single-Region key in the
-        # same AWS account and Region as the Workspace. On that platform the key is
-        # validated against this Workspace when it is attached, so a key-policy problem is
-        # reported as an error on this request. This field is write-once: once a key is
-        # attached to a Workspace it cannot be detached or replaced. To rotate key
-        # material, rotate the underlying key on your cloud KMS; the `external_key_id`
-        # stays the same.
+        # the value for an AWS KMS key is the key's ARN, and your organization's own key
+        # must be a single-Region key in the same AWS account and Region as the Workspace.
+        # On that platform the key is validated against this Workspace when it is
+        # attached, so a key-policy problem is reported as an error on this request. This
+        # field is write-once: once a key is attached to a Workspace it cannot be detached
+        # or replaced. To rotate key material, rotate the underlying key on your cloud
+        # KMS; the `external_key_id` stays the same.
         sig { returns(T.nilable(String)) }
         attr_reader :external_key_id
 
@@ -70,6 +70,17 @@ module Anthropic
         sig { returns(T.nilable(T::Hash[Symbol, T.nilable(String)])) }
         attr_accessor :tags
 
+        # ID of a user profile to attach to the Workspace. Every inference request through
+        # the Workspace must then name this user profile; the API rejects a request that
+        # names none or a different one. Once set, it can't be replaced or removed
+        # (sending the same ID again changes nothing); only deleting the user profile
+        # clears it. The default Workspace can't have a user profile.
+        sig { returns(T.nilable(String)) }
+        attr_reader :user_profile_id
+
+        sig { params(user_profile_id: String).void }
+        attr_writer :user_profile_id
+
         sig do
           params(
             workspace_id: String,
@@ -81,6 +92,7 @@ module Anthropic
             external_key_id: String,
             name: String,
             tags: T.nilable(T::Hash[Symbol, T.nilable(String)]),
+            user_profile_id: String,
             request_options: Anthropic::RequestOptions::OrHash
           ).returns(T.attached_class)
         end
@@ -94,19 +106,25 @@ module Anthropic
           # Workspace. Setting this field requires CMEK to be enabled for your organization.
           # When set, data stored for this Workspace is encrypted with the referenced key.
           # Create key configurations with the External Keys API. On Claude Platform on AWS
-          # the value is the AWS KMS key ARN, and the key must be a single-Region key in the
-          # same AWS account and Region as the Workspace. On that platform the key is
-          # validated against this Workspace when it is attached, so a key-policy problem is
-          # reported as an error on this request. This field is write-once: once a key is
-          # attached to a Workspace it cannot be detached or replaced. To rotate key
-          # material, rotate the underlying key on your cloud KMS; the `external_key_id`
-          # stays the same.
+          # the value for an AWS KMS key is the key's ARN, and your organization's own key
+          # must be a single-Region key in the same AWS account and Region as the Workspace.
+          # On that platform the key is validated against this Workspace when it is
+          # attached, so a key-policy problem is reported as an error on this request. This
+          # field is write-once: once a key is attached to a Workspace it cannot be detached
+          # or replaced. To rotate key material, rotate the underlying key on your cloud
+          # KMS; the `external_key_id` stays the same.
           external_key_id: nil,
           # Name of the Workspace.
           name: nil,
           # User-defined tags as string key-value pairs. Keys may not begin with
           # `anthropic`.
           tags: nil,
+          # ID of a user profile to attach to the Workspace. Every inference request through
+          # the Workspace must then name this user profile; the API rejects a request that
+          # names none or a different one. Once set, it can't be replaced or removed
+          # (sending the same ID again changes nothing); only deleting the user profile
+          # clears it. The default Workspace can't have a user profile.
+          user_profile_id: nil,
           request_options: {}
         )
         end
@@ -121,6 +139,7 @@ module Anthropic
               external_key_id: String,
               name: String,
               tags: T.nilable(T::Hash[Symbol, T.nilable(String)]),
+              user_profile_id: String,
               request_options: Anthropic::RequestOptions
             }
           )

data/rbi/anthropic/request_options.rbi

@@ -30,7 +30,7 @@ module Anthropic
     end
     attr_accessor :extra_query
 
-    # Extra headers to send with the request. These are `.merged`’d into any
+    # Extra headers to send with the request. These are `.merge`’d into any
     # `extra_headers` given at the client level.
     sig { returns(T.nilable(T::Hash[String, T.nilable(String)])) }
     attr_accessor :extra_headers

data/rbi/anthropic/resources/beta/dreams.rbi

@@ -47,7 +47,7 @@ module Anthropic
           # In the object form, `speed` can only be `standard`.
           #
           # The
-          # [limits table in the Dreams guide](https://platform.claude.com/docs/en/managed-agents/dreams#limits)
+          # [Availability section of the Dreams guide](https://platform.claude.com/docs/en/managed-agents/dreams#feature-availability)
           # lists the supported models.
           model:,
           # Body param: Guidance that steers how the dream reads the sessions and organizes

data/rbi/anthropic/resources/beta/organization/analytics/apps/chat/projects.rbi

@@ -23,13 +23,13 @@ module Anthropic
                     group_by:
                       T.nilable(
                         T::Array[
-                          Anthropic::Beta::Organization::Analytics::Apps::Chat::ProjectListParams::GroupBy::OrSymbol
+                          Anthropic::Beta::Organization::BetaAnalyticsProjectGroupBy::OrSymbol
                         ]
                       ),
                     limit: T.nilable(Integer),
                     order:
                       T.nilable(
-                        Anthropic::Beta::Organization::Analytics::Apps::Chat::ProjectListParams::Order::OrSymbol
+                        Anthropic::Beta::Organization::BetaAnalyticsOrder::OrSymbol
                       ),
                     order_by: T.nilable(String),
                     page: T.nilable(String),

data/rbi/anthropic/resources/beta/organization/analytics/artifacts.rbi

@@ -19,7 +19,7 @@ module Anthropic
                 group_by:
                   T.nilable(
                     T::Array[
-                      Anthropic::Beta::Organization::Analytics::ArtifactListParams::GroupBy::OrSymbol
+                      Anthropic::Beta::Organization::BetaAnalyticsArtifactGroupBy::OrSymbol
                     ]
                   ),
                 limit: T.nilable(Integer),

data/rbi/anthropic/resources/beta/organization/analytics/connectors.rbi

@@ -23,13 +23,13 @@ module Anthropic
                 group_by:
                   T.nilable(
                     T::Array[
-                      Anthropic::Beta::Organization::Analytics::ConnectorListParams::GroupBy::OrSymbol
+                      Anthropic::Beta::Organization::BetaAnalyticsConnectorGroupBy::OrSymbol
                     ]
                   ),
                 limit: T.nilable(Integer),
                 order:
                   T.nilable(
-                    Anthropic::Beta::Organization::Analytics::ConnectorListParams::Order::OrSymbol
+                    Anthropic::Beta::Organization::BetaAnalyticsOrder::OrSymbol
                   ),
                 order_by: T.nilable(String),
                 page: T.nilable(String),

data/rbi/anthropic/resources/beta/organization/analytics/plugins.rbi

@@ -26,13 +26,13 @@ module Anthropic
                 group_by:
                   T.nilable(
                     T::Array[
-                      Anthropic::Beta::Organization::Analytics::PluginListParams::GroupBy::OrSymbol
+                      Anthropic::Beta::Organization::BetaAnalyticsPluginGroupBy::OrSymbol
                     ]
                   ),
                 limit: T.nilable(Integer),
                 order:
                   T.nilable(
-                    Anthropic::Beta::Organization::Analytics::PluginListParams::Order::OrSymbol
+                    Anthropic::Beta::Organization::BetaAnalyticsOrder::OrSymbol
                   ),
                 order_by: T.nilable(String),
                 page: T.nilable(String),

data/rbi/anthropic/resources/beta/organization/analytics/skills.rbi

@@ -21,13 +21,13 @@ module Anthropic
                 group_by:
                   T.nilable(
                     T::Array[
-                      Anthropic::Beta::Organization::Analytics::SkillListParams::GroupBy::OrSymbol
+                      Anthropic::Beta::Organization::BetaAnalyticsSkillGroupBy::OrSymbol
                     ]
                   ),
                 limit: T.nilable(Integer),
                 order:
                   T.nilable(
-                    Anthropic::Beta::Organization::Analytics::SkillListParams::Order::OrSymbol
+                    Anthropic::Beta::Organization::BetaAnalyticsOrder::OrSymbol
                   ),
                 order_by: T.nilable(String),
                 page: T.nilable(String),

data/rbi/anthropic/resources/beta/organization/analytics/users.rbi

@@ -21,13 +21,13 @@ module Anthropic
                 group_by:
                   T.nilable(
                     T::Array[
-                      Anthropic::Beta::Organization::Analytics::UserListParams::GroupBy::OrSymbol
+                      Anthropic::Beta::Organization::BetaAnalyticsUserGroupBy::OrSymbol
                     ]
                   ),
                 limit: T.nilable(Integer),
                 order:
                   T.nilable(
-                    Anthropic::Beta::Organization::Analytics::UserListParams::Order::OrSymbol
+                    Anthropic::Beta::Organization::BetaAnalyticsOrder::OrSymbol
                   ),
                 order_by: T.nilable(String),
                 page: T.nilable(String),

data/rbi/anthropic/resources/beta/organization/compliance_settings.rbi

@@ -22,8 +22,11 @@ module Anthropic
           # Update your organization's Compliance Settings.
           #
           # Setting `state` to `enabled` turns on the Compliance API and begins capturing
-          # organization activity events. Setting it to `disabled` turns both off. `state`
-          # reflects whether the Compliance API is enabled.
+          # organization activity events. Setting it to `disabled` turns both off. Access
+          # Transparency events are an exception: they are still captured while the
+          # Compliance API is disabled, and the Compliance API activity feed returns them
+          # once it is enabled again. `state` reflects whether the Compliance API is
+          # enabled.
           #
           # A request that sets `state` to its current value succeeds and leaves the
           # resource unchanged. A `disabled` request stays in effect until a later `enabled`

data/rbi/anthropic/resources/beta/organization/external_keys.rbi

@@ -17,6 +17,7 @@ module Anthropic
               display_name: T.nilable(String),
               geo:
                 Anthropic::Beta::Organization::ExternalKeyCreateParams::Geo::OrSymbol,
+              user_profile_id: T.nilable(String),
               request_options: Anthropic::RequestOptions::OrHash
             ).returns(Anthropic::Beta::Organization::BetaExternalKey)
           end
@@ -27,6 +28,11 @@ module Anthropic
             display_name: nil,
             # Data residency geo. Only `us` is supported.
             geo: nil,
+            # ID of a user profile to bind the key to. Omit this field for a key that isn't
+            # bound to a user profile. Such a key can be attached to a Workspace whatever its
+            # user profile. The binding cannot be changed later. A key bound to a user profile
+            # can only be attached to a Workspace that has the same user profile.
+            user_profile_id: nil,
             request_options: {}
           )
           end

data/rbi/anthropic/resources/beta/organization/rbac_groups/members.rbi

@@ -68,7 +68,7 @@ module Anthropic
                 rbac_group_id: String,
                 request_options: Anthropic::RequestOptions::OrHash
               ).returns(
-                Anthropic::Models::Beta::Organization::RBACGroups::MemberRemoveResponse
+                Anthropic::Beta::Organization::RBACGroups::BetaDeletedRBACGroupMember
               )
             end
             def remove(

data/rbi/anthropic/resources/beta/organization/rbac_groups.rbi

@@ -100,9 +100,7 @@ module Anthropic
             params(
               rbac_group_id: String,
               request_options: Anthropic::RequestOptions::OrHash
-            ).returns(
-              Anthropic::Models::Beta::Organization::RBACGroupDeleteResponse
-            )
+            ).returns(Anthropic::Beta::Organization::BetaDeletedRBACGroup)
           end
           def delete(
             # ID of the RBAC Group.

data/rbi/anthropic/resources/beta/organization/spend_limits/effective.rbi

@@ -19,7 +19,7 @@ module Anthropic
                 period:
                   T.nilable(
                     T::Array[
-                      Anthropic::Beta::Organization::SpendLimits::EffectiveListParams::Period::OrSymbol
+                      Anthropic::Beta::Organization::BetaSpendLimitPeriod::OrSymbol
                     ]
                   ),
                 user_ids: T.nilable(T::Array[String]),

data/rbi/anthropic/resources/beta/organization/workspaces.rbi

@@ -37,6 +37,7 @@ module Anthropic
               display_color: T.nilable(String),
               external_key_id: T.nilable(String),
               tags: T.nilable(T::Hash[Symbol, String]),
+              user_profile_id: T.nilable(String),
               betas:
                 T::Array[T.any(Anthropic::AnthropicBeta::OrSymbol, String)],
               request_options: Anthropic::RequestOptions::OrHash
@@ -55,17 +56,22 @@ module Anthropic
             # use for this Workspace. Setting this field requires CMEK to be enabled for your
             # organization. When set, data stored for this Workspace is encrypted with the
             # referenced key. Create key configurations with the External Keys API. On Claude
-            # Platform on AWS the value is the AWS KMS key ARN, and the key must be a
-            # single-Region key in the same AWS account and Region as the Workspace. On that
-            # platform the key is validated against this Workspace when it is attached, so a
-            # key-policy problem is reported as an error on this request. This field is
-            # write-once: once a key is attached to a Workspace it cannot be detached or
-            # replaced. To rotate key material, rotate the underlying key on your cloud KMS;
-            # the `external_key_id` stays the same.
+            # Platform on AWS the value for an AWS KMS key is the key's ARN, and your
+            # organization's own key must be a single-Region key in the same AWS account and
+            # Region as the Workspace. On that platform the key is validated against this
+            # Workspace when it is attached, so a key-policy problem is reported as an error
+            # on this request. This field is write-once: once a key is attached to a Workspace
+            # it cannot be detached or replaced. To rotate key material, rotate the underlying
+            # key on your cloud KMS; the `external_key_id` stays the same.
             external_key_id: nil,
             # Body param: User-defined tags as string key-value pairs. Keys may not begin with
             # `anthropic`.
             tags: nil,
+            # Body param: ID of a user profile to attach to the Workspace. Every inference
+            # request through the Workspace must then name this user profile; the API rejects
+            # a request that names none or a different one. The user profile can't be replaced
+            # or removed later; only deleting the user profile clears it.
+            user_profile_id: nil,
             # Header param: Optional header to specify the beta version(s) you want to use.
             betas: nil,
             request_options: {}
@@ -98,6 +104,7 @@ module Anthropic
               external_key_id: String,
               name: String,
               tags: T.nilable(T::Hash[Symbol, T.nilable(String)]),
+              user_profile_id: String,
               request_options: Anthropic::RequestOptions::OrHash
             ).returns(Anthropic::Beta::Organization::BetaWorkspace)
           end
@@ -111,19 +118,25 @@ module Anthropic
             # Workspace. Setting this field requires CMEK to be enabled for your organization.
             # When set, data stored for this Workspace is encrypted with the referenced key.
             # Create key configurations with the External Keys API. On Claude Platform on AWS
-            # the value is the AWS KMS key ARN, and the key must be a single-Region key in the
-            # same AWS account and Region as the Workspace. On that platform the key is
-            # validated against this Workspace when it is attached, so a key-policy problem is
-            # reported as an error on this request. This field is write-once: once a key is
-            # attached to a Workspace it cannot be detached or replaced. To rotate key
-            # material, rotate the underlying key on your cloud KMS; the `external_key_id`
-            # stays the same.
+            # the value for an AWS KMS key is the key's ARN, and your organization's own key
+            # must be a single-Region key in the same AWS account and Region as the Workspace.
+            # On that platform the key is validated against this Workspace when it is
+            # attached, so a key-policy problem is reported as an error on this request. This
+            # field is write-once: once a key is attached to a Workspace it cannot be detached
+            # or replaced. To rotate key material, rotate the underlying key on your cloud
+            # KMS; the `external_key_id` stays the same.
             external_key_id: nil,
             # Name of the Workspace.
             name: nil,
             # User-defined tags as string key-value pairs. Keys may not begin with
             # `anthropic`.
             tags: nil,
+            # ID of a user profile to attach to the Workspace. Every inference request through
+            # the Workspace must then name this user profile; the API rejects a request that
+            # names none or a different one. Once set, it can't be replaced or removed
+            # (sending the same ID again changes nothing); only deleting the user profile
+            # clears it. The default Workspace can't have a user profile.
+            user_profile_id: nil,
             request_options: {}
           )
           end