@anthropic-ai/sdk 0.119.0 → 0.121.0

package/resources/beta/organization/federation/issuers.mjs

@@ -0,0 +1,165 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+import { APIResource } from "../../../../core/resource.mjs";
+import { PageCursor } from "../../../../core/pagination.mjs";
+import { buildHeaders } from "../../../../internal/headers.mjs";
+import { path } from "../../../../internal/utils/path.mjs";
+export class Issuers extends APIResource {
+    /**
+     * **Requires an OAuth access token with the `org:admin` scope**, from
+     * `ant auth login --scope org:admin` or a workload identity federation rule; Admin
+     * API keys are not accepted. See
+     * [Manage WIF with the Admin API](/docs/en/manage-claude/wif-admin-api).
+     *
+     * Register an OIDC issuer that Anthropic will trust for workload identity
+     * federation in your organization.
+     *
+     * The `jwks` field controls how the issuer's signing keys are obtained and takes
+     * one of three shapes selected by `type`: `discovery` (resolve keys through OIDC
+     * discovery), `explicit_url` (fetch keys from a fixed JWKS URL), or `inline`
+     * (provide a static key set). When `jwks.type` is `discovery` and no
+     * `discovery_base` is set, the issuer URL must be publicly reachable over HTTPS so
+     * Anthropic can fetch the discovery document; for `explicit_url` and `inline`
+     * modes the issuer URL is only matched as the JWT's `iss` claim and is not
+     * fetched.
+     *
+     * @example
+     * ```ts
+     * const betaFederationIssuer =
+     *   await client.beta.organization.federation.issuers.create({
+     *     issuer_url: 'x',
+     *     name: 'x',
+     *   });
+     * ```
+     */
+    create(params, options) {
+        const { betas, ...body } = params;
+        return this._client.post('/v1/organizations/federation_issuers?beta=true', {
+            body,
+            ...options,
+            headers: buildHeaders([
+                { ...(betas?.toString() != null ? { 'anthropic-beta': betas?.toString() } : undefined) },
+                options?.headers,
+            ]),
+        });
+    }
+    /**
+     * **Requires an OAuth access token with the `org:admin` scope**, from
+     * `ant auth login --scope org:admin` or a workload identity federation rule; Admin
+     * API keys are not accepted. See
+     * [Manage WIF with the Admin API](/docs/en/manage-claude/wif-admin-api).
+     *
+     * Retrieve a federation issuer by its ID (`fdis_...`).
+     *
+     * @example
+     * ```ts
+     * const betaFederationIssuer =
+     *   await client.beta.organization.federation.issuers.retrieve(
+     *     'federation_issuer_id',
+     *   );
+     * ```
+     */
+    retrieve(federationIssuerID, params = {}, options) {
+        const { betas } = params ?? {};
+        return this._client.get(path `/v1/organizations/federation_issuers/${federationIssuerID}?beta=true`, {
+            ...options,
+            headers: buildHeaders([
+                { ...(betas?.toString() != null ? { 'anthropic-beta': betas?.toString() } : undefined) },
+                options?.headers,
+            ]),
+        });
+    }
+    /**
+     * **Requires an OAuth access token with the `org:admin` scope**, from
+     * `ant auth login --scope org:admin` or a workload identity federation rule; Admin
+     * API keys are not accepted. See
+     * [Manage WIF with the Admin API](/docs/en/manage-claude/wif-admin-api).
+     *
+     * Partially update a federation issuer.
+     *
+     * Setting `jwks` replaces the full JWKS shape at once. Archived issuers cannot be
+     * updated; this returns 400. Create a new issuer instead.
+     *
+     * Updating an issuer that backs a rule with a scope outside `workspace:developer`
+     * or `workspace:inference` requires a Console session.
+     *
+     * @example
+     * ```ts
+     * const betaFederationIssuer =
+     *   await client.beta.organization.federation.issuers.update(
+     *     'federation_issuer_id',
+     *   );
+     * ```
+     */
+    update(federationIssuerID, params, options) {
+        const { betas, ...body } = params;
+        return this._client.post(path `/v1/organizations/federation_issuers/${federationIssuerID}?beta=true`, {
+            body,
+            ...options,
+            headers: buildHeaders([
+                { ...(betas?.toString() != null ? { 'anthropic-beta': betas?.toString() } : undefined) },
+                options?.headers,
+            ]),
+        });
+    }
+    /**
+     * **Requires an OAuth access token with the `org:admin` scope**, from
+     * `ant auth login --scope org:admin` or a workload identity federation rule; Admin
+     * API keys are not accepted. See
+     * [Manage WIF with the Admin API](/docs/en/manage-claude/wif-admin-api).
+     *
+     * List federation issuers in your organization.
+     *
+     * Archived issuers are excluded unless `include_archived=true`.
+     *
+     * @example
+     * ```ts
+     * // Automatically fetches more pages as needed.
+     * for await (const betaFederationIssuer of client.beta.organization.federation.issuers.list()) {
+     *   // ...
+     * }
+     * ```
+     */
+    list(params = {}, options) {
+        const { betas, ...query } = params ?? {};
+        return this._client.getAPIList('/v1/organizations/federation_issuers?beta=true', (PageCursor), {
+            query,
+            ...options,
+            headers: buildHeaders([
+                { ...(betas?.toString() != null ? { 'anthropic-beta': betas?.toString() } : undefined) },
+                options?.headers,
+            ]),
+        });
+    }
+    /**
+     * **Requires an OAuth access token with the `org:admin` scope**, from
+     * `ant auth login --scope org:admin` or a workload identity federation rule; Admin
+     * API keys are not accepted. See
+     * [Manage WIF with the Admin API](/docs/en/manage-claude/wif-admin-api).
+     *
+     * Archive a federation issuer.
+     *
+     * Idempotent; re-archiving returns the issuer with its original `archived_at`.
+     * Rejected with 400 if any live (non-archived) federation rule still references
+     * the issuer; archive those rules first (a rule's issuer cannot be changed), or
+     * recreate them against another issuer.
+     *
+     * @example
+     * ```ts
+     * const betaFederationIssuer =
+     *   await client.beta.organization.federation.issuers.archive(
+     *     'federation_issuer_id',
+     *   );
+     * ```
+     */
+    archive(federationIssuerID, params = {}, options) {
+        const { betas } = params ?? {};
+        return this._client.post(path `/v1/organizations/federation_issuers/${federationIssuerID}/archive?beta=true`, {
+            ...options,
+            headers: buildHeaders([
+                { ...(betas?.toString() != null ? { 'anthropic-beta': betas?.toString() } : undefined) },
+                options?.headers,
+            ]),
+        });
+    }
+}
+//# sourceMappingURL=issuers.mjs.map

package/resources/beta/organization/federation/issuers.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"issuers.mjs","sourceRoot":"","sources":["../../../../src/resources/beta/organization/federation/issuers.ts"],"names":[],"mappings":"AAAA,sFAAsF;AAEtF,OAAO,EAAE,WAAW,EAAE,sCAAkC;AAGxD,OAAO,EAAE,UAAU,EAAsC,wCAAoC;AAC7F,OAAO,EAAE,YAAY,EAAE,yCAAqC;AAE5D,OAAO,EAAE,IAAI,EAAE,4CAAwC;AAEvD,MAAM,OAAO,OAAQ,SAAQ,WAAW;IACtC;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,MAAM,CAAC,MAA0B,EAAE,OAAwB;QACzD,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;QAClC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,gDAAgD,EAAE;YACzE,IAAI;YACJ,GAAG,OAAO;YACV,OAAO,EAAE,YAAY,CAAC;gBACpB,EAAE,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE;gBACxF,OAAO,EAAE,OAAO;aACjB,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CACN,kBAA0B,EAC1B,SAAkD,EAAE,EACpD,OAAwB;QAExB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAA,wCAAwC,kBAAkB,YAAY,EAAE;YAClG,GAAG,OAAO;YACV,OAAO,EAAE,YAAY,CAAC;gBACpB,EAAE,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE;gBACxF,OAAO,EAAE,OAAO;aACjB,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,MAAM,CACJ,kBAA0B,EAC1B,MAA0B,EAC1B,OAAwB;QAExB,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;QAClC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAA,wCAAwC,kBAAkB,YAAY,EAAE;YACnG,IAAI;YACJ,GAAG,OAAO;YACV,OAAO,EAAE,YAAY,CAAC;gBACpB,EAAE,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE;gBACxF,OAAO,EAAE,OAAO;aACjB,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACH,IAAI,CACF,SAA8C,EAAE,EAChD,OAAwB;QAExB,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;QACzC,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAC5B,gDAAgD,EAChD,CAAA,UAAgC,CAAA,EAChC;YACE,KAAK;YACL,GAAG,OAAO;YACV,OAAO,EAAE,YAAY,CAAC;gBACpB,EAAE,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE;gBACxF,OAAO,EAAE,OAAO;aACjB,CAAC;SACH,CACF,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,OAAO,CACL,kBAA0B,EAC1B,SAAiD,EAAE,EACnD,OAAwB;QAExB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CACtB,IAAI,CAAA,wCAAwC,kBAAkB,oBAAoB,EAClF;YACE,GAAG,OAAO;YACV,OAAO,EAAE,YAAY,CAAC;gBACpB,EAAE,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE;gBACxF,OAAO,EAAE,OAAO;aACjB,CAAC;SACH,CACF,CAAC;IACJ,CAAC;CACF"}

package/resources/beta/organization/federation/rules/index.d.mts

@@ -0,0 +1,3 @@
+export { Rules, type BetaFederationRule, type BetaFederationRuleMatch, type BetaFederationRuleWorkspace, type BetaServiceAccountTarget, type RuleCreateParams, type RuleRetrieveParams, type RuleUpdateParams, type RuleListParams, type RuleArchiveParams, type BetaFederationRuleWorkspacesPageCursor, type BetaFederationRulesPageCursor, } from "./rules.mjs";
+export { Workspaces, type WorkspaceRemoveResponse, type WorkspaceListParams, type WorkspaceAddParams, type WorkspaceRemoveParams, } from "./workspaces.mjs";
+//# sourceMappingURL=index.d.mts.map

package/resources/beta/organization/federation/rules/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","sourceRoot":"","sources":["../../../../../src/resources/beta/organization/federation/rules/index.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,KAAK,EACL,KAAK,kBAAkB,EACvB,KAAK,uBAAuB,EAC5B,KAAK,2BAA2B,EAChC,KAAK,wBAAwB,EAC7B,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,sCAAsC,EAC3C,KAAK,6BAA6B,GACnC,oBAAgB;AACjB,OAAO,EACL,UAAU,EACV,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,GAC3B,yBAAqB"}

package/resources/beta/organization/federation/rules/index.d.ts

@@ -0,0 +1,3 @@
+export { Rules, type BetaFederationRule, type BetaFederationRuleMatch, type BetaFederationRuleWorkspace, type BetaServiceAccountTarget, type RuleCreateParams, type RuleRetrieveParams, type RuleUpdateParams, type RuleListParams, type RuleArchiveParams, type BetaFederationRuleWorkspacesPageCursor, type BetaFederationRulesPageCursor, } from "./rules.js";
+export { Workspaces, type WorkspaceRemoveResponse, type WorkspaceListParams, type WorkspaceAddParams, type WorkspaceRemoveParams, } from "./workspaces.js";
+//# sourceMappingURL=index.d.ts.map

package/resources/beta/organization/federation/rules/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/resources/beta/organization/federation/rules/index.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,KAAK,EACL,KAAK,kBAAkB,EACvB,KAAK,uBAAuB,EAC5B,KAAK,2BAA2B,EAChC,KAAK,wBAAwB,EAC7B,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,sCAAsC,EAC3C,KAAK,6BAA6B,GACnC,mBAAgB;AACjB,OAAO,EACL,UAAU,EACV,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,GAC3B,wBAAqB"}

package/resources/beta/organization/federation/rules/index.js

@@ -0,0 +1,9 @@
+"use strict";
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Workspaces = exports.Rules = void 0;
+var rules_1 = require("./rules.js");
+Object.defineProperty(exports, "Rules", { enumerable: true, get: function () { return rules_1.Rules; } });
+var workspaces_1 = require("./workspaces.js");
+Object.defineProperty(exports, "Workspaces", { enumerable: true, get: function () { return workspaces_1.Workspaces; } });
+//# sourceMappingURL=index.js.map

package/resources/beta/organization/federation/rules/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/resources/beta/organization/federation/rules/index.ts"],"names":[],"mappings":";AAAA,sFAAsF;;;AAEtF,oCAaiB;AAZf,8FAAA,KAAK,OAAA;AAaP,8CAMsB;AALpB,wGAAA,UAAU,OAAA"}

package/resources/beta/organization/federation/rules/index.mjs

@@ -0,0 +1,4 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+export { Rules, } from "./rules.mjs";
+export { Workspaces, } from "./workspaces.mjs";
+//# sourceMappingURL=index.mjs.map

package/resources/beta/organization/federation/rules/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","sourceRoot":"","sources":["../../../../../src/resources/beta/organization/federation/rules/index.ts"],"names":[],"mappings":"AAAA,sFAAsF;AAEtF,OAAO,EACL,KAAK,GAYN,oBAAgB;AACjB,OAAO,EACL,UAAU,GAKX,yBAAqB"}