cadenya 0.17.0 → 0.18.0

data/lib/cadenya/resources/tool_sets/secrets.rb

@@ -0,0 +1,224 @@
+# frozen_string_literal: true
+
+module Cadenya
+  module Resources
+    class ToolSets
+      # Manage tool sets and the tools they contain. Tool sets group related tools, and
+      # tools define specific capabilities available to agents.
+      #
+      # When a tool set is managed, only API key actors can modify its tools; human
+      # (profile) actors cannot.
+      class Secrets
+        # Some parameter documentations has been truncated, see
+        # {Cadenya::Models::ToolSets::SecretCreateParams} for more details.
+        #
+        # Creates a new secret scoped to the tool set
+        #
+        # @overload create(tool_set_id, workspace_id:, metadata:, spec:, request_options: {})
+        #
+        # @param tool_set_id [String] Path param: The tool set that will own this secret. Accepts the canonical ts\_…
+        # f
+        #
+        # @param workspace_id [String] Path param: The workspace that owns the tool set.
+        #
+        # @param metadata [Cadenya::Models::CreateResourceMetadata] Body param: CreateResourceMetadata contains the user-provided fields for creatin
+        #
+        # @param spec [Cadenya::Models::ToolSets::ToolSetSecretSpec] Body param
+        #
+        # @param request_options [Cadenya::RequestOptions, Hash{Symbol=>Object}, nil]
+        #
+        # @return [Cadenya::Models::ToolSets::ToolSetSecret]
+        #
+        # @see Cadenya::Models::ToolSets::SecretCreateParams
+        def create(tool_set_id, params)
+          parsed, options = Cadenya::ToolSets::SecretCreateParams.dump_request(params)
+          workspace_id =
+            parsed.delete(:workspace_id) do
+              raise ArgumentError.new("missing required path argument #{_1}")
+            end
+          @client.request(
+            method: :post,
+            path: ["v1/workspaces/%1$s/tool_sets/%2$s/secrets", workspace_id, tool_set_id],
+            body: parsed,
+            model: Cadenya::ToolSets::ToolSetSecret,
+            options: options
+          )
+        end
+
+        # Some parameter documentations has been truncated, see
+        # {Cadenya::Models::ToolSets::SecretRetrieveParams} for more details.
+        #
+        # Retrieves a tool set secret by ID from the tool set
+        #
+        # @overload retrieve(id, workspace_id:, tool_set_id:, request_options: {})
+        #
+        # @param id [String] The secret to retrieve.
+        #
+        # @param workspace_id [String] The workspace that owns the tool set.
+        #
+        # @param tool_set_id [String] The tool set the secret belongs to. Accepts the canonical ts\_… form
+        #
+        # @param request_options [Cadenya::RequestOptions, Hash{Symbol=>Object}, nil]
+        #
+        # @return [Cadenya::Models::ToolSets::ToolSetSecret]
+        #
+        # @see Cadenya::Models::ToolSets::SecretRetrieveParams
+        def retrieve(id, params)
+          parsed, options = Cadenya::ToolSets::SecretRetrieveParams.dump_request(params)
+          workspace_id =
+            parsed.delete(:workspace_id) do
+              raise ArgumentError.new("missing required path argument #{_1}")
+            end
+          tool_set_id =
+            parsed.delete(:tool_set_id) do
+              raise ArgumentError.new("missing required path argument #{_1}")
+            end
+          @client.request(
+            method: :get,
+            path: ["v1/workspaces/%1$s/tool_sets/%2$s/secrets/%3$s", workspace_id, tool_set_id, id],
+            model: Cadenya::ToolSets::ToolSetSecret,
+            options: options
+          )
+        end
+
+        # Some parameter documentations has been truncated, see
+        # {Cadenya::Models::ToolSets::SecretUpdateParams} for more details.
+        #
+        # Updates a secret scoped to the tool set
+        #
+        # @overload update(id, workspace_id:, tool_set_id:, metadata: nil, spec: nil, update_mask: nil, request_options: {})
+        #
+        # @param id [String] Path param: The secret to update.
+        #
+        # @param workspace_id [String] Path param: The workspace that owns the tool set.
+        #
+        # @param tool_set_id [String] Path param: The tool set the secret belongs to. Accepts the canonical ts\_… form
+        #
+        # @param metadata [Cadenya::Models::UpdateResourceMetadata] Body param: UpdateResourceMetadata contains the user-provided fields for updatin
+        #
+        # @param spec [Cadenya::Models::ToolSets::ToolSetSecretSpec] Body param
+        #
+        # @param update_mask [String] Body param: Fields to update.
+        #
+        # @param request_options [Cadenya::RequestOptions, Hash{Symbol=>Object}, nil]
+        #
+        # @return [Cadenya::Models::ToolSets::ToolSetSecret]
+        #
+        # @see Cadenya::Models::ToolSets::SecretUpdateParams
+        def update(id, params)
+          parsed, options = Cadenya::ToolSets::SecretUpdateParams.dump_request(params)
+          workspace_id =
+            parsed.delete(:workspace_id) do
+              raise ArgumentError.new("missing required path argument #{_1}")
+            end
+          tool_set_id =
+            parsed.delete(:tool_set_id) do
+              raise ArgumentError.new("missing required path argument #{_1}")
+            end
+          @client.request(
+            method: :patch,
+            path: ["v1/workspaces/%1$s/tool_sets/%2$s/secrets/%3$s", workspace_id, tool_set_id, id],
+            body: parsed,
+            model: Cadenya::ToolSets::ToolSetSecret,
+            options: options
+          )
+        end
+
+        # Some parameter documentations has been truncated, see
+        # {Cadenya::Models::ToolSets::SecretListParams} for more details.
+        #
+        # Lists all secrets scoped to the tool set
+        #
+        # @overload list(tool_set_id, workspace_id:, bundle_key: nil, cursor: nil, include_info: nil, limit: nil, prefix: nil, query: nil, sort_order: nil, request_options: {})
+        #
+        # @param tool_set_id [String] Path param: The tool set whose secrets will be listed. Accepts the canonical
+        # ts\_
+        #
+        # @param workspace_id [String] Path param: The workspace that owns the tool set.
+        #
+        # @param bundle_key [String] Query param: Filter by bundle_key — return only resources owned by this bundle.
+        #
+        # @param cursor [String] Query param: Pagination cursor from previous response
+        #
+        # @param include_info [Boolean] Query param: When set to true you may use more of your alloted API rate-limit
+        #
+        # @param limit [Integer] Query param: Maximum number of results to return
+        #
+        # @param prefix [String] Query param: Filter expression (query param: prefix)
+        #
+        # @param query [String] Query param: Free-form search query
+        #
+        # @param sort_order [String] Query param: Sort order for results (asc or desc by creation time)
+        #
+        # @param request_options [Cadenya::RequestOptions, Hash{Symbol=>Object}, nil]
+        #
+        # @return [Cadenya::Internal::CursorPagination<Cadenya::Models::ToolSets::ToolSetSecret>]
+        #
+        # @see Cadenya::Models::ToolSets::SecretListParams
+        def list(tool_set_id, params)
+          parsed, options = Cadenya::ToolSets::SecretListParams.dump_request(params)
+          query = Cadenya::Internal::Util.encode_query_params(parsed)
+          workspace_id =
+            parsed.delete(:workspace_id) do
+              raise ArgumentError.new("missing required path argument #{_1}")
+            end
+          @client.request(
+            method: :get,
+            path: ["v1/workspaces/%1$s/tool_sets/%2$s/secrets", workspace_id, tool_set_id],
+            query: query.transform_keys(
+              bundle_key: "bundleKey",
+              include_info: "includeInfo",
+              sort_order: "sortOrder"
+            ),
+            page: Cadenya::Internal::CursorPagination,
+            model: Cadenya::ToolSets::ToolSetSecret,
+            options: options
+          )
+        end
+
+        # Some parameter documentations has been truncated, see
+        # {Cadenya::Models::ToolSets::SecretDeleteParams} for more details.
+        #
+        # Deletes a secret scoped to the tool set
+        #
+        # @overload delete(id, workspace_id:, tool_set_id:, request_options: {})
+        #
+        # @param id [String] The secret to delete.
+        #
+        # @param workspace_id [String] The workspace that owns the tool set.
+        #
+        # @param tool_set_id [String] The tool set the secret belongs to. Accepts the canonical ts\_… form
+        #
+        # @param request_options [Cadenya::RequestOptions, Hash{Symbol=>Object}, nil]
+        #
+        # @return [nil]
+        #
+        # @see Cadenya::Models::ToolSets::SecretDeleteParams
+        def delete(id, params)
+          parsed, options = Cadenya::ToolSets::SecretDeleteParams.dump_request(params)
+          workspace_id =
+            parsed.delete(:workspace_id) do
+              raise ArgumentError.new("missing required path argument #{_1}")
+            end
+          tool_set_id =
+            parsed.delete(:tool_set_id) do
+              raise ArgumentError.new("missing required path argument #{_1}")
+            end
+          @client.request(
+            method: :delete,
+            path: ["v1/workspaces/%1$s/tool_sets/%2$s/secrets/%3$s", workspace_id, tool_set_id, id],
+            model: NilClass,
+            options: options
+          )
+        end
+
+        # @api private
+        #
+        # @param client [Cadenya::Client]
+        def initialize(client:)
+          @client = client
+        end
+      end
+    end
+  end
+end

data/lib/cadenya/resources/tool_sets.rb

@@ -16,6 +16,14 @@ module Cadenya
       # @return [Cadenya::Resources::ToolSets::Tools]
       attr_reader :tools
 
+      # Manage tool sets and the tools they contain. Tool sets group related tools, and
+      # tools define specific capabilities available to agents.
+      #
+      # When a tool set is managed, only API key actors can modify its tools; human
+      # (profile) actors cannot.
+      # @return [Cadenya::Resources::ToolSets::Secrets]
+      attr_reader :secrets
+
       # Some parameter documentations has been truncated, see
       # {Cadenya::Models::ToolSetCreateParams} for more details.
       #
@@ -333,6 +341,7 @@ module Cadenya
       def initialize(client:)
         @client = client
         @tools = Cadenya::Resources::ToolSets::Tools.new(client: client)
+        @secrets = Cadenya::Resources::ToolSets::Secrets.new(client: client)
       end
     end
   end

data/lib/cadenya/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Cadenya
-  VERSION = "0.17.0"
+  VERSION = "0.18.0"
 end

data/lib/cadenya.rb

@@ -230,6 +230,7 @@ require_relative "cadenya/models/objectives/objective_tool_call_result_content_b
 require_relative "cadenya/models/objectives/objective_tool_call_result_image_block"
 require_relative "cadenya/models/objectives/objective_tool_call_result_text_block"
 require_relative "cadenya/models/objectives/objective_tool_call_with_result"
+require_relative "cadenya/models/objectives/resolved_secret"
 require_relative "cadenya/models/objectives/task_list_params"
 require_relative "cadenya/models/objectives/task_retrieve_params"
 require_relative "cadenya/models/objectives/tool_call_approve_params"
@@ -281,6 +282,11 @@ require_relative "cadenya/models/tool_set_retrieve_params"
 require_relative "cadenya/models/tool_sets/config_http"
 require_relative "cadenya/models/tool_sets/config_mcp"
 require_relative "cadenya/models/tool_sets/config_openapi"
+require_relative "cadenya/models/tool_sets/secret_create_params"
+require_relative "cadenya/models/tool_sets/secret_delete_params"
+require_relative "cadenya/models/tool_sets/secret_list_params"
+require_relative "cadenya/models/tool_sets/secret_retrieve_params"
+require_relative "cadenya/models/tool_sets/secret_update_params"
 require_relative "cadenya/models/tool_sets/tool"
 require_relative "cadenya/models/tool_sets/tool_create_params"
 require_relative "cadenya/models/tool_sets/tool_delete_params"
@@ -289,6 +295,9 @@ require_relative "cadenya/models/tool_sets/tool_list_params"
 require_relative "cadenya/models/tool_sets/tool_omit_params"
 require_relative "cadenya/models/tool_sets/tool_restore_params"
 require_relative "cadenya/models/tool_sets/tool_retrieve_params"
+require_relative "cadenya/models/tool_sets/tool_set_secret"
+require_relative "cadenya/models/tool_sets/tool_set_secret_info"
+require_relative "cadenya/models/tool_sets/tool_set_secret_spec"
 require_relative "cadenya/models/tool_sets/tool_spec"
 require_relative "cadenya/models/tool_sets/tool_spec_config"
 require_relative "cadenya/models/tool_sets/tool_update_params"
@@ -353,6 +362,7 @@ require_relative "cadenya/resources/objectives/tools"
 require_relative "cadenya/resources/profiles"
 require_relative "cadenya/resources/search"
 require_relative "cadenya/resources/tool_sets"
+require_relative "cadenya/resources/tool_sets/secrets"
 require_relative "cadenya/resources/tool_sets/tools"
 require_relative "cadenya/resources/uploads"
 require_relative "cadenya/resources/webhooks"

data/rbi/cadenya/models/objectives/objective_tool_call_data.rbi

@@ -38,6 +38,20 @@ module Cadenya
         sig { params(memo: String).void }
         attr_writer :memo
 
+        # List of resolved secrets used by the tool call
+        sig do
+          returns(T.nilable(T::Array[Cadenya::Objectives::ResolvedSecret]))
+        end
+        attr_reader :resolved_secrets
+
+        sig do
+          params(
+            resolved_secrets:
+              T::Array[Cadenya::Objectives::ResolvedSecret::OrHash]
+          ).void
+        end
+        attr_writer :resolved_secrets
+
         # A profile identifies a user or non-human principal (such as an API key) at the
         # account level. Profiles are account-scoped and can be granted access to multiple
         # workspaces.
@@ -52,6 +66,8 @@ module Cadenya
             callable: Cadenya::CallableTool::OrHash,
             arguments: T::Hash[Symbol, T.anything],
             memo: String,
+            resolved_secrets:
+              T::Array[Cadenya::Objectives::ResolvedSecret::OrHash],
             status_changed_by: Cadenya::Profile::OrHash
           ).returns(T.attached_class)
         end
@@ -65,6 +81,8 @@ module Cadenya
           arguments: nil,
           # A memo supplied by the reviewer when denying the tool call
           memo: nil,
+          # List of resolved secrets used by the tool call
+          resolved_secrets: nil,
           # A profile identifies a user or non-human principal (such as an API key) at the
           # account level. Profiles are account-scoped and can be granted access to multiple
           # workspaces.
@@ -78,6 +96,7 @@ module Cadenya
               callable: Cadenya::CallableTool,
               arguments: T::Hash[Symbol, T.anything],
               memo: String,
+              resolved_secrets: T::Array[Cadenya::Objectives::ResolvedSecret],
               status_changed_by: Cadenya::Profile
             }
           )

data/rbi/cadenya/models/objectives/objective_tool_call_info.rbi

@@ -31,10 +31,36 @@ module Cadenya
         sig { params(objective: Cadenya::OperationMetadata::OrHash).void }
         attr_writer :objective
 
+        # BareMetadata contains the minimal metadata for a resource: the ID and an
+        # optional human-readable name. These are used for reference fields where the full
+        # metadata (account scoping, timestamps, labels, external IDs) is not needed —
+        # e.g., the tool references inside an agent variation spec or the tools assigned
+        # to an objective. Both fields are server-populated; clients provide IDs through
+        # sibling fields rather than by constructing a BareMetadata themselves.
+        sig { returns(T.nilable(Cadenya::BareMetadata)) }
+        attr_reader :tool
+
+        sig { params(tool: Cadenya::BareMetadata::OrHash).void }
+        attr_writer :tool
+
+        # BareMetadata contains the minimal metadata for a resource: the ID and an
+        # optional human-readable name. These are used for reference fields where the full
+        # metadata (account scoping, timestamps, labels, external IDs) is not needed —
+        # e.g., the tool references inside an agent variation spec or the tools assigned
+        # to an objective. Both fields are server-populated; clients provide IDs through
+        # sibling fields rather than by constructing a BareMetadata themselves.
+        sig { returns(T.nilable(Cadenya::BareMetadata)) }
+        attr_reader :tool_set
+
+        sig { params(tool_set: Cadenya::BareMetadata::OrHash).void }
+        attr_writer :tool_set
+
         sig do
           params(
             created_by: Cadenya::Profile::OrHash,
-            objective: Cadenya::OperationMetadata::OrHash
+            objective: Cadenya::OperationMetadata::OrHash,
+            tool: Cadenya::BareMetadata::OrHash,
+            tool_set: Cadenya::BareMetadata::OrHash
           ).returns(T.attached_class)
         end
         def self.new(
@@ -44,7 +70,21 @@ module Cadenya
           created_by: nil,
           # Metadata for ephemeral operations and activities (e.g., objectives, executions,
           # runs)
-          objective: nil
+          objective: nil,
+          # BareMetadata contains the minimal metadata for a resource: the ID and an
+          # optional human-readable name. These are used for reference fields where the full
+          # metadata (account scoping, timestamps, labels, external IDs) is not needed —
+          # e.g., the tool references inside an agent variation spec or the tools assigned
+          # to an objective. Both fields are server-populated; clients provide IDs through
+          # sibling fields rather than by constructing a BareMetadata themselves.
+          tool: nil,
+          # BareMetadata contains the minimal metadata for a resource: the ID and an
+          # optional human-readable name. These are used for reference fields where the full
+          # metadata (account scoping, timestamps, labels, external IDs) is not needed —
+          # e.g., the tool references inside an agent variation spec or the tools assigned
+          # to an objective. Both fields are server-populated; clients provide IDs through
+          # sibling fields rather than by constructing a BareMetadata themselves.
+          tool_set: nil
         )
         end
 
@@ -52,7 +92,9 @@ module Cadenya
           override.returns(
             {
               created_by: Cadenya::Profile,
-              objective: Cadenya::OperationMetadata
+              objective: Cadenya::OperationMetadata,
+              tool: Cadenya::BareMetadata,
+              tool_set: Cadenya::BareMetadata
             }
           )
         end

data/rbi/cadenya/models/objectives/objective_tool_call_with_result.rbi

@@ -53,6 +53,20 @@ module Cadenya
         end
         attr_accessor :execution_status
 
+        # List of resolved secrets used by the tool call
+        sig do
+          returns(T.nilable(T::Array[Cadenya::Objectives::ResolvedSecret]))
+        end
+        attr_reader :resolved_secrets
+
+        sig do
+          params(
+            resolved_secrets:
+              T::Array[Cadenya::Objectives::ResolvedSecret::OrHash]
+          ).void
+        end
+        attr_writer :resolved_secrets
+
         # ObjectiveToolCallResult is the content a tool returned after execution. Tools
         # can return multiple content blocks, and blocks can be multi-modal (text, image,
         # audio). Media blocks are stored by Cadenya and served as short-lived signed URLs
@@ -78,6 +92,8 @@ module Cadenya
             metadata: Cadenya::OperationMetadata::OrHash,
             status:
               Cadenya::Objectives::ObjectiveToolCallWithResult::Status::OrSymbol,
+            resolved_secrets:
+              T::Array[Cadenya::Objectives::ResolvedSecret::OrHash],
             result: Cadenya::Objectives::ObjectiveToolCallResult::OrHash
           ).returns(T.attached_class)
         end
@@ -90,6 +106,8 @@ module Cadenya
           metadata:,
           # Current status of the tool call
           status:,
+          # List of resolved secrets used by the tool call
+          resolved_secrets: nil,
           # ObjectiveToolCallResult is the content a tool returned after execution. Tools
           # can return multiple content blocks, and blocks can be multi-modal (text, image,
           # audio). Media blocks are stored by Cadenya and served as short-lived signed URLs
@@ -108,6 +126,7 @@ module Cadenya
               metadata: Cadenya::OperationMetadata,
               status:
                 Cadenya::Objectives::ObjectiveToolCallWithResult::Status::TaggedSymbol,
+              resolved_secrets: T::Array[Cadenya::Objectives::ResolvedSecret],
               result: Cadenya::Objectives::ObjectiveToolCallResult
             }
           )

data/rbi/cadenya/models/objectives/resolved_secret.rbi

@@ -0,0 +1,104 @@
+# typed: strong
+
+module Cadenya
+  module Models
+    module Objectives
+      class ResolvedSecret < Cadenya::Internal::Type::BaseModel
+        OrHash =
+          T.type_alias do
+            T.any(
+              Cadenya::Objectives::ResolvedSecret,
+              Cadenya::Internal::AnyHash
+            )
+          end
+
+        sig { returns(T.nilable(String)) }
+        attr_reader :key
+
+        sig { params(key: String).void }
+        attr_writer :key
+
+        sig do
+          returns(
+            T.nilable(Cadenya::Objectives::ResolvedSecret::Source::TaggedSymbol)
+          )
+        end
+        attr_reader :source
+
+        sig do
+          params(
+            source: Cadenya::Objectives::ResolvedSecret::Source::OrSymbol
+          ).void
+        end
+        attr_writer :source
+
+        # ResolvedSecret is a resolved secret value from the workspace, toolset, or
+        # objective. When a tool is called, it will rely on secrets in the order of:
+        #
+        # - Objective
+        # - Toolset
+        # - Workspace
+        sig do
+          params(
+            key: String,
+            source: Cadenya::Objectives::ResolvedSecret::Source::OrSymbol
+          ).returns(T.attached_class)
+        end
+        def self.new(key: nil, source: nil)
+        end
+
+        sig do
+          override.returns(
+            {
+              key: String,
+              source: Cadenya::Objectives::ResolvedSecret::Source::TaggedSymbol
+            }
+          )
+        end
+        def to_hash
+        end
+
+        module Source
+          extend Cadenya::Internal::Type::Enum
+
+          TaggedSymbol =
+            T.type_alias do
+              T.all(Symbol, Cadenya::Objectives::ResolvedSecret::Source)
+            end
+          OrSymbol = T.type_alias { T.any(Symbol, String) }
+
+          RESOLVED_SECRET_SOURCE_UNSPECIFIED =
+            T.let(
+              :RESOLVED_SECRET_SOURCE_UNSPECIFIED,
+              Cadenya::Objectives::ResolvedSecret::Source::TaggedSymbol
+            )
+          RESOLVED_SECRET_SOURCE_WORKSPACE =
+            T.let(
+              :RESOLVED_SECRET_SOURCE_WORKSPACE,
+              Cadenya::Objectives::ResolvedSecret::Source::TaggedSymbol
+            )
+          RESOLVED_SECRET_SOURCE_TOOLSET =
+            T.let(
+              :RESOLVED_SECRET_SOURCE_TOOLSET,
+              Cadenya::Objectives::ResolvedSecret::Source::TaggedSymbol
+            )
+          RESOLVED_SECRET_SOURCE_OBJECTIVE =
+            T.let(
+              :RESOLVED_SECRET_SOURCE_OBJECTIVE,
+              Cadenya::Objectives::ResolvedSecret::Source::TaggedSymbol
+            )
+
+          sig do
+            override.returns(
+              T::Array[
+                Cadenya::Objectives::ResolvedSecret::Source::TaggedSymbol
+              ]
+            )
+          end
+          def self.values
+          end
+        end
+      end
+    end
+  end
+end

data/rbi/cadenya/models/tool_sets/secret_create_params.rbi

@@ -0,0 +1,76 @@
+# typed: strong
+
+module Cadenya
+  module Models
+    module ToolSets
+      class SecretCreateParams < Cadenya::Internal::Type::BaseModel
+        extend Cadenya::Internal::Type::RequestParameters::Converter
+        include Cadenya::Internal::Type::RequestParameters
+
+        OrHash =
+          T.type_alias do
+            T.any(
+              Cadenya::ToolSets::SecretCreateParams,
+              Cadenya::Internal::AnyHash
+            )
+          end
+
+        sig { returns(String) }
+        attr_accessor :workspace_id
+
+        sig { returns(String) }
+        attr_accessor :tool_set_id
+
+        # CreateResourceMetadata contains the user-provided fields for creating a
+        # workspace-scoped resource. Read-only fields (id, account_id, workspace_id,
+        # profile_id, created_at) are excluded since they are set by the server.
+        sig { returns(Cadenya::CreateResourceMetadata) }
+        attr_reader :metadata
+
+        sig { params(metadata: Cadenya::CreateResourceMetadata::OrHash).void }
+        attr_writer :metadata
+
+        sig { returns(Cadenya::ToolSets::ToolSetSecretSpec) }
+        attr_reader :spec
+
+        sig { params(spec: Cadenya::ToolSets::ToolSetSecretSpec::OrHash).void }
+        attr_writer :spec
+
+        sig do
+          params(
+            workspace_id: String,
+            tool_set_id: String,
+            metadata: Cadenya::CreateResourceMetadata::OrHash,
+            spec: Cadenya::ToolSets::ToolSetSecretSpec::OrHash,
+            request_options: Cadenya::RequestOptions::OrHash
+          ).returns(T.attached_class)
+        end
+        def self.new(
+          workspace_id:,
+          tool_set_id:,
+          # CreateResourceMetadata contains the user-provided fields for creating a
+          # workspace-scoped resource. Read-only fields (id, account_id, workspace_id,
+          # profile_id, created_at) are excluded since they are set by the server.
+          metadata:,
+          spec:,
+          request_options: {}
+        )
+        end
+
+        sig do
+          override.returns(
+            {
+              workspace_id: String,
+              tool_set_id: String,
+              metadata: Cadenya::CreateResourceMetadata,
+              spec: Cadenya::ToolSets::ToolSetSecretSpec,
+              request_options: Cadenya::RequestOptions
+            }
+          )
+        end
+        def to_hash
+        end
+      end
+    end
+  end
+end