telnyx 5.169.0 → 5.171.0

data/rbi/telnyx/resources/enterprises.rbi

@@ -13,6 +13,11 @@ module Telnyx
       sig { returns(Telnyx::Resources::Enterprises::Dir) }
       attr_reader :dir
 
+      # Verify ownership of a DIR's authorizer email. A short code is emailed and
+      # confirmed; the email must be verified before references can be submitted.
+      sig { returns(Telnyx::Resources::Enterprises::VerifyEmail) }
+      attr_reader :verify_email
+
       # Create the legal entity (enterprise) that represents your business on the Telnyx
       # platform.
       #
@@ -59,13 +64,20 @@ module Telnyx
         billing_contact:,
         # ISO 3166-1 alpha-2 country code. Currently `US` and `CA` are supported.
         country_code:,
+        # The trade name your business operates under if it is different from your legal
+        # name, also called a Doing Business As (DBA) name. Leave blank if you only use
+        # your legal name.
         doing_business_as:,
         # US Federal Employer Identification Number (`NN-NNNNNNN`) or Canadian equivalent.
         fein:,
-        # Industry classification.
+        # The industry your business operates in. Choose the closest match from the list;
+        # if your value is not accepted, pick the nearest category.
         industry:,
+        # The state, province, or country where your business was legally incorporated,
+        # for example Delaware.
         jurisdiction_of_incorporation:,
-        # Legal name of the enterprise.
+        # Your business's full registered legal name, exactly as it appears on your
+        # incorporation or tax documents, 3 to 64 characters.
         legal_name:,
         # Approximate headcount range. Used for vetting heuristics; pick the bucket that
         # contains your current employee count.
@@ -90,20 +102,35 @@ module Telnyx
         # - `non_profit` - registered 501(c)(3)/equivalent (incl. educational
         #   institutions, charities, religious organisations).
         organization_type:,
+        # Your business's public website address, including https://. Leave blank if your
+        # business has no website.
         website:,
-        # Optional corporate-registration / company-number identifier.
+        # The official number your company received when it was legally registered or
+        # incorporated (for example from your state or national business registry). It is
+        # on your certificate of incorporation.
         corporate_registration_number: nil,
-        # Optional free-form string the caller can attach for their own bookkeeping.
-        # Telnyx does not interpret it.
+        # Your own label for this account. Enter any reference that helps you find it in
+        # your records. Telnyx does not use it during vetting.
         customer_reference: nil,
-        # Optional D-U-N-S Number.
+        # Your optional 9-digit D-U-N-S Number issued by Dun & Bradstreet, a unique
+        # identifier for your business. Leave blank if you do not have one.
         dun_bradstreet_number: nil,
-        # Optional SIC code for the primary line of business.
+        # The 4-digit Standard Industrial Classification code for your main line of
+        # business, which tells us what industry you operate in. Look it up in the SIC
+        # code directory if you are unsure.
         primary_business_domain_sic_code: nil,
-        # Optional professional-license number for regulated industries.
+        # If your business operates under a professional license (for example legal,
+        # medical, or financial services), enter the license number issued by the
+        # licensing authority. Leave blank if it does not apply.
         professional_license_number: nil,
-        # `enterprise` for an organization registering its own DIRs; `bpo` for a Business
-        # Process Outsourcer placing calls on behalf of one or more enterprises.
+        # `enterprise` for an organization registering its own DIRs (the default, and the
+        # right choice when the calls display your own brand). `bpo` for a Business
+        # Process Outsourcer: a call center that places calls on behalf of other
+        # enterprises and displays their brand. A `bpo` enterprise describes the call
+        # center itself and cannot own a DIR. Each client the call center calls for gets
+        # its own `enterprise` in the same account, with the client's DIR under it; that
+        # DIR is then linked to the `bpo` enterprise through `bpo_authorizations`. Fixed
+        # at creation.
         role_type: nil,
         request_options: {}
       )
@@ -129,6 +156,21 @@ module Telnyx
       # `updated_at`, status fields, `organization_type`, `country_code`, `role_type`)
       # cannot be changed: including any of them in the body is rejected with
       # `400 Bad Request` (`Field 'X' is not allowed in this request`).
+      #
+      # For an approved BPO enterprise (`role_type` `bpo`), changing any identity field
+      # (legal name, DBA, website, FEIN, industry, number of employees, physical
+      # address, organization contact, D-U-N-S number, legal type, SIC code, corporate
+      # registration number, professional license number, or jurisdiction of
+      # incorporation) resets `bpo_verification_status` to `pending` for re-approval and
+      # sets every DIR authorization for that BPO to `rejected`. After re-approval, link
+      # it again with a newly signed LOA (a new `loa_document_id`); resending the old
+      # one keeps the authorization `rejected`. Re-sending an unchanged value does not
+      # reset anything.
+      #
+      # If Number Reputation is enabled on the enterprise, `legal_name`,
+      # `doing_business_as`, `website`, `fein`, `industry`, `number_of_employees`,
+      # `organization_physical_address`, `organization_contact`, and
+      # `dun_bradstreet_number` cannot be changed: the request is rejected with `400`.
       sig do
         params(
           enterprise_id: String,
@@ -157,22 +199,56 @@ module Telnyx
         enterprise_id,
         billing_address: nil,
         billing_contact: nil,
+        # The official number your company received when it was legally registered or
+        # incorporated (for example from your state or national business registry). It is
+        # on your certificate of incorporation.
         corporate_registration_number: nil,
+        # Your own label for this account. Enter any reference that helps you find it in
+        # your records. Telnyx does not use it during vetting.
         customer_reference: nil,
+        # The trade name your business operates under if it is different from your legal
+        # name, also called a Doing Business As (DBA) name. Leave blank if you only use
+        # your legal name.
         doing_business_as: nil,
+        # Your optional 9-digit D-U-N-S Number issued by Dun & Bradstreet, a unique
+        # identifier for your business. Leave blank if you do not have one.
         dun_bradstreet_number: nil,
+        # US Federal Employer Identification Number (`NN-NNNNNNN`) or Canadian equivalent.
         fein: nil,
+        # The industry your business operates in. Choose the closest match from the list;
+        # if your value is not accepted, pick the nearest category.
         industry: nil,
-        # Updated state/province/country of incorporation. Optional on update.
+        # The state, province, or country where your business was legally incorporated,
+        # for example Delaware.
         jurisdiction_of_incorporation: nil,
-        # Legal name of the enterprise.
+        # Your business's full registered legal name, exactly as it appears on your
+        # incorporation or tax documents, 3 to 64 characters.
         legal_name: nil,
+        # Approximate headcount range. Used for vetting heuristics; pick the bucket that
+        # contains your current employee count.
         number_of_employees: nil,
         organization_contact: nil,
+        # Legal-entity form. Pick the form that matches your incorporation documents:
+        #
+        # - `corporation` - C-corp or S-corp.
+        # - `llc` - limited liability company.
+        # - `partnership` - general/limited partnership.
+        # - `nonprofit` - non-profit corporation, charitable trust, or
+        #   501(c)(3)/equivalent.
+        # - `other` - anything else (sole proprietorships, government bodies, DBAs, etc.).
+        #   You may be asked for additional documents during vetting.
         organization_legal_type: nil,
         organization_physical_address: nil,
+        # The 4-digit Standard Industrial Classification code for your main line of
+        # business, which tells us what industry you operate in. Look it up in the SIC
+        # code directory if you are unsure.
         primary_business_domain_sic_code: nil,
+        # If your business operates under a professional license (for example legal,
+        # medical, or financial services), enter the license number issued by the
+        # licensing authority. Leave blank if it does not apply.
         professional_license_number: nil,
+        # Your business's public website address, including https://. Leave blank if your
+        # business has no website.
         website: nil,
         request_options: {}
       )
@@ -183,6 +259,8 @@ module Telnyx
       sig do
         params(
           filter_legal_name_contains: String,
+          filter_role_type:
+            Telnyx::EnterpriseListParams::FilterRoleType::OrSymbol,
           legal_name: String,
           page_number: Integer,
           page_size: Integer,
@@ -194,6 +272,9 @@ module Telnyx
       def list(
         # Case-insensitive partial match on legal name.
         filter_legal_name_contains: nil,
+        # Only return enterprises of this type: `bpo` for call-center (BPO) enterprises,
+        # `enterprise` for normal enterprises. Omit to return both.
+        filter_role_type: nil,
         # Filter by legal name (partial match).
         legal_name: nil,
         # 1-based page number. Out-of-range values return an empty page with correct meta.
@@ -227,14 +308,15 @@ module Telnyx
       )
       end
 
-      # Branded Calling is a paid product that must be activated on each enterprise.
-      # Activation is idempotent:
+      # Branded Calling must be activated on each enterprise. Activation is idempotent:
       #
-      # - First call: marks the enterprise as activated and begins onboarding it with
-      #   the Branded Calling platform asynchronously. Returns `200` with
+      # - First call: marks the enterprise as activated, effective immediately; you can
+      #   create a DIR right away. The enterprise is registered with the Branded Calling
+      #   platform later, after its first DIR is approved. Returns `200` with
       #   `branded_calling_enabled: true`.
       # - Re-call after success: no-op, returns the same enterprise body.
-      # - Re-call after a prior failure: re-queues onboarding, returns `200`.
+      # - Re-call after a failed registration: re-queues the registration, returns
+      #   `200`.
       #
       # Prerequisite: the calling user must have agreed to the Branded Calling Terms of
       # Service (`POST /terms_of_service/branded_calling/agree`). Without that, this
@@ -242,11 +324,15 @@ module Telnyx
       #
       # Failure modes:
       #
+      # - `400` - the account has no available credit. Add funds and retry.
+      # - `400` - the enterprise is not in the United States. Branded Calling is
+      #   currently available only to US enterprises.
       # - `403` - Branded Calling Terms of Service not accepted.
       # - `404` - enterprise does not exist or does not belong to your account.
       #
-      # **Pricing:** This is a billable action. See https://telnyx.com/pricing/numbers
-      # for current pricing.
+      # **Pricing:** Activation itself is free, but the account must have available
+      # credit. Branded Calling fees are charged per DIR and per branded call. See
+      # https://telnyx.com/pricing/branded-calling for current pricing.
       sig do
         params(
           enterprise_id: String,

data/rbi/telnyx/resources/llm_token_gateway/spend.rbi

@@ -0,0 +1,116 @@
+# typed: strong
+
+module Telnyx
+  module Resources
+    class LlmTokenGateway
+      # Manage and report AI Gateway usage.
+      class Spend
+        # Return request-level usage history for the authenticated account. Supply both
+        # UTC dates or neither; omitting both returns the previous full UTC day. Dates use
+        # a half-open range [start_date, end_date) of at most 31 days. Cost reflects
+        # budget reference rates, not invoice charges. Unknown spend is excluded and
+        # reported separately. The report snapshot supports at most 10,000 matching
+        # requests, independently of page size. Exceeding this bound returns HTTP 503
+        # without partial results. Narrow the date range or resource filters before
+        # retrying. A failed report must not be interpreted as zero usage. Request tags
+        # can filter either report and metadata:<key> can group the summary.
+        sig do
+          params(
+            end_date: Date,
+            end_user_id: String,
+            metadata: T::Hash[Symbol, String],
+            page_number: Integer,
+            page_size: Integer,
+            page_snapshot: String,
+            start_date: Date,
+            token_group_id: String,
+            token_key_id: String,
+            token_user_id: String,
+            request_options: Telnyx::RequestOptions::OrHash
+          ).returns(
+            Telnyx::Models::LlmTokenGateway::SpendRetrieveEventsResponse
+          )
+        end
+        def retrieve_events(
+          end_date: nil,
+          end_user_id: nil,
+          # Request tag filters as metadata[<key>]=<value>, at most 5, combined with AND. A
+          # value matches the tag's text form exactly (booleans as true/false, integers in
+          # decimal), so metadata[flag]=true matches both boolean true and the string
+          # "true". Keys are case-sensitive; reserved-prefix keys are rejected. Unindexed:
+          # bounded by the account, the date range and the report timeout.
+          metadata: nil,
+          page_number: nil,
+          page_size: nil,
+          # Required after page 1; account/filter-bound 15-minute stable snapshot;
+          # expired/mismatch 409.
+          page_snapshot: nil,
+          start_date: nil,
+          token_group_id: nil,
+          token_key_id: nil,
+          token_user_id: nil,
+          request_options: {}
+        )
+        end
+
+        # Return request counts, token counts and reference spend grouped by one
+        # attribution dimension. Both UTC dates and group_by are required. Dates use a
+        # half-open range [start_date, end_date) of at most 31 days. Cost reflects budget
+        # reference rates, not invoice charges. Unknown spend is excluded and reported
+        # separately. The report snapshot supports at most 10,000 matching requests,
+        # independently of page size. Exceeding this bound returns HTTP 503 without
+        # partial results. Narrow the date range or resource filters before retrying. A
+        # failed report must not be interpreted as zero usage. Request tags can filter
+        # either report and metadata:<key> can group the summary.
+        sig do
+          params(
+            end_date: Date,
+            group_by:
+              T.any(Telnyx::LlmTokenGateway::SpendGroupBy::OrSymbol, String),
+            start_date: Date,
+            end_user_id: String,
+            metadata: T::Hash[Symbol, String],
+            page_number: Integer,
+            page_size: Integer,
+            page_snapshot: String,
+            token_group_id: String,
+            token_key_id: String,
+            token_user_id: String,
+            request_options: Telnyx::RequestOptions::OrHash
+          ).returns(
+            Telnyx::Models::LlmTokenGateway::SpendRetrieveSummaryResponse
+          )
+        end
+        def retrieve_summary(
+          end_date:,
+          # A scope, or metadata:<key> to group by one request tag's text-form value;
+          # requests without the key form one group with a null dimension_id.
+          group_by:,
+          start_date:,
+          end_user_id: nil,
+          # Request tag filters as metadata[<key>]=<value>, at most 5, combined with AND. A
+          # value matches the tag's text form exactly (booleans as true/false, integers in
+          # decimal), so metadata[flag]=true matches both boolean true and the string
+          # "true". Keys are case-sensitive; reserved-prefix keys are rejected. Unindexed:
+          # bounded by the account, the date range and the report timeout.
+          metadata: nil,
+          page_number: nil,
+          page_size: nil,
+          # Required after page 1; account/filter-bound 15-minute stable snapshot;
+          # expired/mismatch 409.
+          page_snapshot: nil,
+          token_group_id: nil,
+          token_key_id: nil,
+          token_user_id: nil,
+          request_options: {}
+        )
+        end
+
+        # @api private
+        sig { params(client: Telnyx::Client).returns(T.attached_class) }
+        def self.new(client:)
+        end
+      end
+    end
+  end
+end

data/rbi/telnyx/resources/llm_token_gateway/token_groups.rbi

@@ -0,0 +1,278 @@
+# typed: strong
+
+module Telnyx
+  module Resources
+    class LlmTokenGateway
+      # Manage and report AI Gateway usage.
+      class TokenGroups
+        # Create gateway token group within the authenticated Telnyx account. Foreign and
+        # unknown resource IDs return the same 404 response.
+        sig do
+          params(
+            allowed_models: T::Array[String],
+            name: String,
+            idempotency_key: String,
+            blocked: T::Boolean,
+            budget_duration:
+              T.nilable(Telnyx::LlmTokenGateway::BudgetDuration::OrSymbol),
+            cache_ttl: T.nilable(Integer),
+            fallbacks: T.nilable(T::Hash[Symbol, T::Array[String]]),
+            guardrails:
+              T.nilable(
+                Telnyx::LlmTokenGateway::TokenGroupCreateParams::Guardrails::OrHash
+              ),
+            max_budget: T.nilable(Float),
+            max_parallel_requests: T.nilable(Integer),
+            provider_key_ids: T::Array[String],
+            retries:
+              T.nilable(
+                Telnyx::LlmTokenGateway::TokenGroupCreateParams::Retries::OrHash
+              ),
+            rpm_limit: T.nilable(Integer),
+            tpm_limit: T.nilable(Integer),
+            request_options: Telnyx::RequestOptions::OrHash
+          ).returns(Telnyx::LlmTokenGateway::TokenGroupResponse)
+        end
+        def create(
+          # Body param
+          allowed_models:,
+          # Body param
+          name:,
+          # Header param: 24h, scoped by account+method+path. Same key/body returns same
+          # outcome; changed body 409; in-progress 409 with Retry-After. Token-create replay
+          # returns 200 metadata WITHOUT secret.
+          idempotency_key:,
+          # Body param
+          blocked: nil,
+          # Body param
+          budget_duration: nil,
+          # Body param
+          cache_ttl: nil,
+          # Body param: Per-group model fallbacks: primary alias -> ordered list of 1..3
+          # other aliases. Every key and listed alias must be in allowed_models (a PATCH
+          # removing a referenced alias is 400); a chain never lists its own key; wildcards
+          # are rejected. Chains are one level deep (a step's own chain is not expanded).
+          # Fallback is attempted only for managed routes, only before the first provider
+          # event is forwarded, and only to steps the key may use; each attempt is reserved
+          # and recorded. {} and null both disable fallbacks.
+          fallbacks: nil,
+          # Body param: Per-group guardrail policy. Missing actions default to ignore.
+          # profiles may be listed with both dlp actions ignore (staged, inactive) but a
+          # non-ignore dlp action requires at least one profile. streaming defaults to
+          # buffered when any response action is block and passthrough otherwise;
+          # passthrough with a response block is 400. Findings are codes and counts only;
+          # content is never stored. The stored form is echoed back canonicalised (all
+          # actions explicit, profiles sorted); {} is stored as an all-ignore policy, null
+          # disables.
+          guardrails: nil,
+          # Body param: USD, decimal precision at most 6 places; parse exactly to integer
+          # micro-USD, never binary float accounting.
+          max_budget: nil,
+          # Body param: Optional maximum concurrent reserved/dispatched cache misses across
+          # replicas. Null means no concurrency cap. Cache hits do not consume slots;
+          # unknown usage retains its budget hold without a slot.
+          max_parallel_requests: nil,
+          # Body param
+          provider_key_ids: nil,
+          # Body param: Per-group same-route retries. max_attempts counts the first try of
+          # each step (the primary and each fallback) and is the ceiling for the
+          # x-ltg-max-attempts request header. A step is retried only when its attempt
+          # definitely did no provider work (connection failure before dispatch, or 429/529)
+          # before the first provider event; an uncertain failure (timeout,
+          # 408/500/502/503/504) moves to the next fallback step instead. max_attempts x
+          # (1 + the longest fallback chain) must not exceed 8, else 400. The n-th retry
+          # waits retry_delay_ms (constant), retry_delay_ms*n (linear) or
+          # retry_delay_ms*2^(n-1) (exponential), at most 5 s and never past the request
+          # deadline, then jittered uniformly down to half that value so concurrent retries
+          # spread out; a provider Retry-After of at most 5 s is honoured and a longer one
+          # moves to the next step. request_timeout_ms applies to streaming requests only:
+          # it bounds each attempt's time to its first provider event and never applies
+          # after it. Non-stream requests keep the per-attempt hop and idle bounds (their
+          # headers arrive only with the finished completion). retry_delay_ms and backoff
+          # are floors for the request knobs. Each planned attempt is reserved (at most 8
+          # per request); unused reservation is released at settlement. Managed routes only.
+          # The stored form is echoed back with defaults filled in; null disables retries.
+          retries: nil,
+          # Body param
+          rpm_limit: nil,
+          # Body param
+          tpm_limit: nil,
+          request_options: {}
+        )
+        end
+
+        # Get gateway token group within the authenticated Telnyx account. Foreign and
+        # unknown resource IDs return the same 404 response.
+        sig do
+          params(
+            id: String,
+            request_options: Telnyx::RequestOptions::OrHash
+          ).returns(Telnyx::LlmTokenGateway::TokenGroupResponse)
+        end
+        def retrieve(id, request_options: {})
+        end
+
+        # Update gateway token group within the authenticated Telnyx account. Foreign and
+        # unknown resource IDs return the same 404 response. Omitted fields are preserved.
+        # Null clears the optional concurrency, fallback and retry settings. A stale
+        # If-Match returns 412; read the resource again before updating.
+        sig do
+          params(
+            id: String,
+            idempotency_key: String,
+            if_match: String,
+            allowed_models: T::Array[String],
+            blocked: T::Boolean,
+            budget_duration:
+              T.nilable(Telnyx::LlmTokenGateway::BudgetDuration::OrSymbol),
+            cache_ttl: T.nilable(Integer),
+            fallbacks: T.nilable(T::Hash[Symbol, T::Array[String]]),
+            guardrails:
+              T.nilable(
+                Telnyx::LlmTokenGateway::TokenGroupUpdateParams::Guardrails::OrHash
+              ),
+            max_budget: T.nilable(Float),
+            max_parallel_requests: T.nilable(Integer),
+            name: String,
+            provider_key_ids: T::Array[String],
+            retries:
+              T.nilable(
+                Telnyx::LlmTokenGateway::TokenGroupUpdateParams::Retries::OrHash
+              ),
+            rpm_limit: T.nilable(Integer),
+            tpm_limit: T.nilable(Integer),
+            request_options: Telnyx::RequestOptions::OrHash
+          ).returns(Telnyx::LlmTokenGateway::TokenGroupResponse)
+        end
+        def update(
+          # Path param
+          id,
+          # Header param: 24h, scoped by account+method+path. Same key/body returns same
+          # outcome; changed body 409; in-progress 409 with Retry-After. Token-create replay
+          # returns 200 metadata WITHOUT secret.
+          idempotency_key:,
+          # Header param: Exact quoted resource-version ETag; an exact intermediary-weakened
+          # echo W/"n" is accepted. Wildcard, combined and malformed validators are
+          # rejected; stale 412; missing 428. HTTP field names are case-insensitive.
+          # Replayed idempotent result is checked first.
+          if_match:,
+          # Body param
+          allowed_models: nil,
+          # Body param
+          blocked: nil,
+          # Body param
+          budget_duration: nil,
+          # Body param
+          cache_ttl: nil,
+          # Body param: Per-group model fallbacks: primary alias -> ordered list of 1..3
+          # other aliases. Every key and listed alias must be in allowed_models (a PATCH
+          # removing a referenced alias is 400); a chain never lists its own key; wildcards
+          # are rejected. Chains are one level deep (a step's own chain is not expanded).
+          # Fallback is attempted only for managed routes, only before the first provider
+          # event is forwarded, and only to steps the key may use; each attempt is reserved
+          # and recorded. {} and null both disable fallbacks.
+          fallbacks: nil,
+          # Body param: Per-group guardrail policy. Missing actions default to ignore.
+          # profiles may be listed with both dlp actions ignore (staged, inactive) but a
+          # non-ignore dlp action requires at least one profile. streaming defaults to
+          # buffered when any response action is block and passthrough otherwise;
+          # passthrough with a response block is 400. Findings are codes and counts only;
+          # content is never stored. The stored form is echoed back canonicalised (all
+          # actions explicit, profiles sorted); {} is stored as an all-ignore policy, null
+          # disables.
+          guardrails: nil,
+          # Body param: USD, decimal precision at most 6 places; parse exactly to integer
+          # micro-USD, never binary float accounting.
+          max_budget: nil,
+          # Body param: Optional maximum concurrent reserved/dispatched cache misses across
+          # replicas. Null means no concurrency cap. Cache hits do not consume slots;
+          # unknown usage retains its budget hold without a slot.
+          max_parallel_requests: nil,
+          # Body param
+          name: nil,
+          # Body param
+          provider_key_ids: nil,
+          # Body param: Per-group same-route retries. max_attempts counts the first try of
+          # each step (the primary and each fallback) and is the ceiling for the
+          # x-ltg-max-attempts request header. A step is retried only when its attempt
+          # definitely did no provider work (connection failure before dispatch, or 429/529)
+          # before the first provider event; an uncertain failure (timeout,
+          # 408/500/502/503/504) moves to the next fallback step instead. max_attempts x
+          # (1 + the longest fallback chain) must not exceed 8, else 400. The n-th retry
+          # waits retry_delay_ms (constant), retry_delay_ms*n (linear) or
+          # retry_delay_ms*2^(n-1) (exponential), at most 5 s and never past the request
+          # deadline, then jittered uniformly down to half that value so concurrent retries
+          # spread out; a provider Retry-After of at most 5 s is honoured and a longer one
+          # moves to the next step. request_timeout_ms applies to streaming requests only:
+          # it bounds each attempt's time to its first provider event and never applies
+          # after it. Non-stream requests keep the per-attempt hop and idle bounds (their
+          # headers arrive only with the finished completion). retry_delay_ms and backoff
+          # are floors for the request knobs. Each planned attempt is reserved (at most 8
+          # per request); unused reservation is released at settlement. Managed routes only.
+          # The stored form is echoed back with defaults filled in; null disables retries.
+          retries: nil,
+          # Body param
+          rpm_limit: nil,
+          # Body param
+          tpm_limit: nil,
+          request_options: {}
+        )
+        end
+
+        # List gateway token groups within the authenticated Telnyx account. Foreign and
+        # unknown resource IDs return the same 404 response.
+        sig do
+          params(
+            page_number: Integer,
+            page_size: Integer,
+            page_snapshot: String,
+            request_options: Telnyx::RequestOptions::OrHash
+          ).returns(
+            Telnyx::Internal::DefaultFlatPagination[
+              Telnyx::LlmTokenGateway::TokenGroup
+            ]
+          )
+        end
+        def list(
+          page_number: nil,
+          page_size: nil,
+          # Required after page 1; account/filter-bound 15-minute stable snapshot;
+          # expired/mismatch 409.
+          page_snapshot: nil,
+          request_options: {}
+        )
+        end
+
+        # Revoke resource and its keys atomically; retain historical attribution, never
+        # detach into an ungoverned service key.
+        sig do
+          params(
+            id: String,
+            idempotency_key: String,
+            if_match: String,
+            request_options: Telnyx::RequestOptions::OrHash
+          ).void
+        end
+        def delete(
+          id,
+          # 24h, scoped by account+method+path. Same key/body returns same outcome; changed
+          # body 409; in-progress 409 with Retry-After. Token-create replay returns 200
+          # metadata WITHOUT secret.
+          idempotency_key:,
+          # Exact quoted resource-version ETag; an exact intermediary-weakened echo W/"n" is
+          # accepted. Wildcard, combined and malformed validators are rejected; stale 412;
+          # missing 428. HTTP field names are case-insensitive. Replayed idempotent result
+          # is checked first.
+          if_match:,
+          request_options: {}
+        )
+        end
+
+        # @api private
+        sig { params(client: Telnyx::Client).returns(T.attached_class) }
+        def self.new(client:)
+        end
+      end
+    end
+  end
+end