@anthropic-ai/sdk 0.120.0 → 0.121.0

package/resources/beta/organization/api-keys.d.ts

@@ -0,0 +1,177 @@
+import { APIResource } from "../../../core/resource.js";
+import { APIPromise } from "../../../core/api-promise.js";
+import { Page, type PageParams, PagePromise } from "../../../core/pagination.js";
+import { RequestOptions } from "../../../internal/request-options.js";
+export declare class APIKeys extends APIResource {
+    /**
+     * Get API Key
+     *
+     * @example
+     * ```ts
+     * const betaAPIKey =
+     *   await client.beta.organization.apiKeys.retrieve(
+     *     'api_key_id',
+     *   );
+     * ```
+     */
+    retrieve(apiKeyID: string, options?: RequestOptions): APIPromise<BetaAPIKey>;
+    /**
+     * Update API Key
+     *
+     * @example
+     * ```ts
+     * const betaAPIKey =
+     *   await client.beta.organization.apiKeys.update(
+     *     'api_key_id',
+     *   );
+     * ```
+     */
+    update(apiKeyID: string, body: APIKeyUpdateParams, options?: RequestOptions): APIPromise<BetaAPIKey>;
+    /**
+     * List API Keys
+     *
+     * @example
+     * ```ts
+     * // Automatically fetches more pages as needed.
+     * for await (const betaAPIKey of client.beta.organization.apiKeys.list()) {
+     *   // ...
+     * }
+     * ```
+     */
+    list(query?: APIKeyListParams | null | undefined, options?: RequestOptions): PagePromise<BetaAPIKeysPage, BetaAPIKey>;
+}
+export type BetaAPIKeysPage = Page<BetaAPIKey>;
+export interface BetaAPIKey {
+    /**
+     * ID of the API key.
+     */
+    id: string;
+    /**
+     * RFC 3339 datetime string indicating when the API Key was created.
+     */
+    created_at: string;
+    /**
+     * The ID and type of the actor that created the API key, or `null` when the
+     * creator is not recorded (legacy, workload-identity-federated, or system-created
+     * keys).
+     */
+    created_by: BetaAPIKeyCreatedBy | null;
+    /**
+     * RFC 3339 datetime string indicating when the API Key expires, or `null` if it
+     * never expires.
+     */
+    expires_at: string | null;
+    /**
+     * Name of the API key.
+     */
+    name: string;
+    /**
+     * Partially redacted hint for the API key.
+     */
+    partial_key_hint: string | null;
+    /**
+     * The principal the API key acts as (a User or a Service Account), or `null` if
+     * the API key is not bound to a principal.
+     */
+    principal: BetaAPIKeyUserActor | BetaAPIKeyServiceAccountActor | null;
+    /**
+     * Where the API key belongs: its Workspace
+     * (`{"type": "workspace", "workspace_id": "wrkspc_..."}`, with the Workspace's
+     * real ID even when it is the organization's default Workspace), or the
+     * organization (`{"type": "organization"}`) for a principal-bound API key that has
+     * no Workspace.
+     */
+    scope: BetaAPIKeyOrganizationScope | BetaAPIKeyWorkspaceScope;
+    /**
+     * Status of the API key.
+     */
+    status: 'active' | 'archived' | 'expired' | 'inactive';
+    /**
+     * Object type.
+     *
+     * For API Keys, this is always `"api_key"`.
+     */
+    type: 'api_key';
+    /**
+     * @deprecated Use `scope` instead. `workspace_id` is `null` both for an API key in
+     * the default Workspace and for a principal-bound API key that has no Workspace.
+     */
+    workspace_id: string | null;
+}
+export interface BetaAPIKeyCreatedBy {
+    /**
+     * ID of the actor that created the object.
+     */
+    id: string;
+    /**
+     * Type of the actor that created the object.
+     */
+    type: 'service_account' | 'user';
+}
+export interface BetaAPIKeyOrganizationScope {
+    /**
+     * Scope type. Always `"organization"`: the API key has no Workspace. Only a
+     * principal-bound API key can have this scope.
+     */
+    type: 'organization';
+}
+export interface BetaAPIKeyServiceAccountActor {
+    /**
+     * ID of the Service Account the API key acts as.
+     */
+    service_account_id: string;
+    /**
+     * Principal type. Always `"service_account_actor"` for a Service Account.
+     */
+    type: 'service_account_actor';
+}
+export interface BetaAPIKeyUserActor {
+    /**
+     * Principal type. Always `"user_actor"` for a User.
+     */
+    type: 'user_actor';
+    /**
+     * ID of the User the API key acts as.
+     */
+    user_id: string;
+}
+export interface BetaAPIKeyWorkspaceScope {
+    /**
+     * Scope type. Always `"workspace"`: the API key belongs to one Workspace.
+     */
+    type: 'workspace';
+    /**
+     * ID of the Workspace the API key belongs to. Unlike the deprecated top-level
+     * `workspace_id`, this is the Workspace's real ID even for the organization's
+     * default Workspace.
+     */
+    workspace_id: string;
+}
+export interface APIKeyUpdateParams {
+    /**
+     * Name of the API key.
+     */
+    name?: string | null;
+    /**
+     * Status of the API key.
+     */
+    status?: 'active' | 'archived' | 'inactive' | null;
+}
+export interface APIKeyListParams extends PageParams {
+    /**
+     * Filter by the ID of the User who created the object.
+     */
+    created_by_user_id?: string | null;
+    /**
+     * Filter by API key status.
+     */
+    status?: 'active' | 'archived' | 'expired' | 'inactive' | null;
+    /**
+     * Filter by Workspace ID.
+     */
+    workspace_id?: string | null;
+}
+export declare namespace APIKeys {
+    export { type BetaAPIKey as BetaAPIKey, type BetaAPIKeyCreatedBy as BetaAPIKeyCreatedBy, type BetaAPIKeyOrganizationScope as BetaAPIKeyOrganizationScope, type BetaAPIKeyServiceAccountActor as BetaAPIKeyServiceAccountActor, type BetaAPIKeyUserActor as BetaAPIKeyUserActor, type BetaAPIKeyWorkspaceScope as BetaAPIKeyWorkspaceScope, type BetaAPIKeysPage as BetaAPIKeysPage, type APIKeyUpdateParams as APIKeyUpdateParams, type APIKeyListParams as APIKeyListParams, };
+}
+//# sourceMappingURL=api-keys.d.ts.map

package/resources/beta/organization/api-keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-keys.d.ts","sourceRoot":"","sources":["../../../src/resources/beta/organization/api-keys.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,kCAA+B;AACrD,OAAO,EAAE,UAAU,EAAE,qCAAkC;AACvD,OAAO,EAAE,IAAI,EAAE,KAAK,UAAU,EAAE,WAAW,EAAE,oCAAiC;AAC9E,OAAO,EAAE,cAAc,EAAE,6CAA0C;AAGnE,qBAAa,OAAQ,SAAQ,WAAW;IACtC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,UAAU,CAAC;IAI5E;;;;;;;;;;OAUG;IACH,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,UAAU,CAAC;IAIpG;;;;;;;;;;OAUG;IACH,IAAI,CACF,KAAK,GAAE,gBAAgB,GAAG,IAAI,GAAG,SAAc,EAC/C,OAAO,CAAC,EAAE,cAAc,GACvB,WAAW,CAAC,eAAe,EAAE,UAAU,CAAC;CAM5C;AAED,MAAM,MAAM,eAAe,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;AAE/C,MAAM,WAAW,UAAU;IACzB;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IAEX;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;;;OAIG;IACH,UAAU,EAAE,mBAAmB,GAAG,IAAI,CAAC;IAEvC;;;OAGG;IACH,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAE1B;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAEhC;;;OAGG;IACH,SAAS,EAAE,mBAAmB,GAAG,6BAA6B,GAAG,IAAI,CAAC;IAEtE;;;;;;OAMG;IACH,KAAK,EAAE,2BAA2B,GAAG,wBAAwB,CAAC;IAE9D;;OAEG;IACH,MAAM,EAAE,QAAQ,GAAG,UAAU,GAAG,SAAS,GAAG,UAAU,CAAC;IAEvD;;;;OAIG;IACH,IAAI,EAAE,SAAS,CAAC;IAEhB;;;OAGG;IACH,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,mBAAmB;IAClC;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IAEX;;OAEG;IACH,IAAI,EAAE,iBAAiB,GAAG,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,2BAA2B;IAC1C;;;OAGG;IACH,IAAI,EAAE,cAAc,CAAC;CACtB;AAED,MAAM,WAAW,6BAA6B;IAC5C;;OAEG;IACH,kBAAkB,EAAE,MAAM,CAAC;IAE3B;;OAEG;IACH,IAAI,EAAE,uBAAuB,CAAC;CAC/B;AAED,MAAM,WAAW,mBAAmB;IAClC;;OAEG;IACH,IAAI,EAAE,YAAY,CAAC;IAEnB;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,wBAAwB;IACvC;;OAEG;IACH,IAAI,EAAE,WAAW,CAAC;IAElB;;;;OAIG;IACH,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAErB;;OAEG;IACH,MAAM,CAAC,EAAE,QAAQ,GAAG,UAAU,GAAG,UAAU,GAAG,IAAI,CAAC;CACpD;AAED,MAAM,WAAW,gBAAiB,SAAQ,UAAU;IAClD;;OAEG;IACH,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAEnC;;OAEG;IACH,MAAM,CAAC,EAAE,QAAQ,GAAG,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,IAAI,CAAC;IAE/D;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,MAAM,CAAC,OAAO,WAAW,OAAO,CAAC;IAC/B,OAAO,EACL,KAAK,UAAU,IAAI,UAAU,EAC7B,KAAK,mBAAmB,IAAI,mBAAmB,EAC/C,KAAK,2BAA2B,IAAI,2BAA2B,EAC/D,KAAK,6BAA6B,IAAI,6BAA6B,EACnE,KAAK,mBAAmB,IAAI,mBAAmB,EAC/C,KAAK,wBAAwB,IAAI,wBAAwB,EACzD,KAAK,eAAe,IAAI,eAAe,EACvC,KAAK,kBAAkB,IAAI,kBAAkB,EAC7C,KAAK,gBAAgB,IAAI,gBAAgB,GAC1C,CAAC;CACH"}

package/resources/beta/organization/api-keys.js

@@ -0,0 +1,56 @@
+"use strict";
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.APIKeys = void 0;
+const resource_1 = require("../../../core/resource.js");
+const pagination_1 = require("../../../core/pagination.js");
+const path_1 = require("../../../internal/utils/path.js");
+class APIKeys extends resource_1.APIResource {
+    /**
+     * Get API Key
+     *
+     * @example
+     * ```ts
+     * const betaAPIKey =
+     *   await client.beta.organization.apiKeys.retrieve(
+     *     'api_key_id',
+     *   );
+     * ```
+     */
+    retrieve(apiKeyID, options) {
+        return this._client.get((0, path_1.path) `/v1/organizations/api_keys/${apiKeyID}?beta=true`, options);
+    }
+    /**
+     * Update API Key
+     *
+     * @example
+     * ```ts
+     * const betaAPIKey =
+     *   await client.beta.organization.apiKeys.update(
+     *     'api_key_id',
+     *   );
+     * ```
+     */
+    update(apiKeyID, body, options) {
+        return this._client.post((0, path_1.path) `/v1/organizations/api_keys/${apiKeyID}?beta=true`, { body, ...options });
+    }
+    /**
+     * List API Keys
+     *
+     * @example
+     * ```ts
+     * // Automatically fetches more pages as needed.
+     * for await (const betaAPIKey of client.beta.organization.apiKeys.list()) {
+     *   // ...
+     * }
+     * ```
+     */
+    list(query = {}, options) {
+        return this._client.getAPIList('/v1/organizations/api_keys?beta=true', (pagination_1.Page), {
+            query,
+            ...options,
+        });
+    }
+}
+exports.APIKeys = APIKeys;
+//# sourceMappingURL=api-keys.js.map

package/resources/beta/organization/api-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-keys.js","sourceRoot":"","sources":["../../../src/resources/beta/organization/api-keys.ts"],"names":[],"mappings":";AAAA,sFAAsF;;;AAEtF,wDAAqD;AAErD,4DAA8E;AAE9E,0DAAoD;AAEpD,MAAa,OAAQ,SAAQ,sBAAW;IACtC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,QAAgB,EAAE,OAAwB;QACjD,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAA,WAAI,EAAA,8BAA8B,QAAQ,YAAY,EAAE,OAAO,CAAC,CAAC;IAC3F,CAAC;IAED;;;;;;;;;;OAUG;IACH,MAAM,CAAC,QAAgB,EAAE,IAAwB,EAAE,OAAwB;QACzE,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAA,WAAI,EAAA,8BAA8B,QAAQ,YAAY,EAAE,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IACzG,CAAC;IAED;;;;;;;;;;OAUG;IACH,IAAI,CACF,QAA6C,EAAE,EAC/C,OAAwB;QAExB,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,sCAAsC,EAAE,CAAA,iBAAgB,CAAA,EAAE;YACvF,KAAK;YACL,GAAG,OAAO;SACX,CAAC,CAAC;IACL,CAAC;CACF;AAnDD,0BAmDC"}

package/resources/beta/organization/api-keys.mjs

@@ -0,0 +1,52 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+import { APIResource } from "../../../core/resource.mjs";
+import { Page } from "../../../core/pagination.mjs";
+import { path } from "../../../internal/utils/path.mjs";
+export class APIKeys extends APIResource {
+    /**
+     * Get API Key
+     *
+     * @example
+     * ```ts
+     * const betaAPIKey =
+     *   await client.beta.organization.apiKeys.retrieve(
+     *     'api_key_id',
+     *   );
+     * ```
+     */
+    retrieve(apiKeyID, options) {
+        return this._client.get(path `/v1/organizations/api_keys/${apiKeyID}?beta=true`, options);
+    }
+    /**
+     * Update API Key
+     *
+     * @example
+     * ```ts
+     * const betaAPIKey =
+     *   await client.beta.organization.apiKeys.update(
+     *     'api_key_id',
+     *   );
+     * ```
+     */
+    update(apiKeyID, body, options) {
+        return this._client.post(path `/v1/organizations/api_keys/${apiKeyID}?beta=true`, { body, ...options });
+    }
+    /**
+     * List API Keys
+     *
+     * @example
+     * ```ts
+     * // Automatically fetches more pages as needed.
+     * for await (const betaAPIKey of client.beta.organization.apiKeys.list()) {
+     *   // ...
+     * }
+     * ```
+     */
+    list(query = {}, options) {
+        return this._client.getAPIList('/v1/organizations/api_keys?beta=true', (Page), {
+            query,
+            ...options,
+        });
+    }
+}
+//# sourceMappingURL=api-keys.mjs.map

package/resources/beta/organization/api-keys.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-keys.mjs","sourceRoot":"","sources":["../../../src/resources/beta/organization/api-keys.ts"],"names":[],"mappings":"AAAA,sFAAsF;AAEtF,OAAO,EAAE,WAAW,EAAE,mCAA+B;AAErD,OAAO,EAAE,IAAI,EAAgC,qCAAiC;AAE9E,OAAO,EAAE,IAAI,EAAE,yCAAqC;AAEpD,MAAM,OAAO,OAAQ,SAAQ,WAAW;IACtC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,QAAgB,EAAE,OAAwB;QACjD,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAA,8BAA8B,QAAQ,YAAY,EAAE,OAAO,CAAC,CAAC;IAC3F,CAAC;IAED;;;;;;;;;;OAUG;IACH,MAAM,CAAC,QAAgB,EAAE,IAAwB,EAAE,OAAwB;QACzE,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAA,8BAA8B,QAAQ,YAAY,EAAE,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IACzG,CAAC;IAED;;;;;;;;;;OAUG;IACH,IAAI,CACF,QAA6C,EAAE,EAC/C,OAAwB;QAExB,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,sCAAsC,EAAE,CAAA,IAAgB,CAAA,EAAE;YACvF,KAAK;YACL,GAAG,OAAO;SACX,CAAC,CAAC;IACL,CAAC;CACF"}

package/resources/beta/organization/external-keys.d.mts

@@ -0,0 +1,269 @@
+import { APIResource } from "../../../core/resource.mjs";
+import { APIPromise } from "../../../core/api-promise.mjs";
+import { PageCursor, type PageCursorParams, PagePromise } from "../../../core/pagination.mjs";
+import { RequestOptions } from "../../../internal/request-options.mjs";
+export declare class ExternalKeys extends APIResource {
+    /**
+     * Create an external key config owned by the caller's organization.
+     *
+     * @example
+     * ```ts
+     * const betaExternalKey =
+     *   await client.beta.organization.externalKeys.create({
+     *     provider_config: {
+     *       kms_arn:
+     *         'arn:aws:kms:us-east-1:111122223333:key/abcd1234-5678-90ab-cdef-000011112222',
+     *       type: 'aws',
+     *     },
+     *   });
+     * ```
+     */
+    create(body: ExternalKeyCreateParams, options?: RequestOptions): APIPromise<BetaExternalKey>;
+    /**
+     * Retrieve a single external key config in the caller's organization by ID.
+     *
+     * @example
+     * ```ts
+     * const betaExternalKey =
+     *   await client.beta.organization.externalKeys.retrieve(
+     *     'external_key_id',
+     *   );
+     * ```
+     */
+    retrieve(externalKeyID: string, options?: RequestOptions): APIPromise<BetaExternalKey>;
+    /**
+     * Partially update an external key config. Omitted fields are left unchanged.
+     *
+     * `display_name` is always editable. `geo` and `provider_config` cannot be changed
+     * once any workspace references this config, because previously encrypted data
+     * requires the original key identity to decrypt.
+     *
+     * @example
+     * ```ts
+     * const betaExternalKey =
+     *   await client.beta.organization.externalKeys.update(
+     *     'external_key_id',
+     *   );
+     * ```
+     */
+    update(externalKeyID: string, body: ExternalKeyUpdateParams, options?: RequestOptions): APIPromise<BetaExternalKey>;
+    /**
+     * List external key configs in the caller's organization.
+     *
+     * Results are ordered by creation time (newest first). Use the `next_page` cursor
+     * from the response to fetch subsequent pages.
+     *
+     * @example
+     * ```ts
+     * // Automatically fetches more pages as needed.
+     * for await (const betaExternalKey of client.beta.organization.externalKeys.list()) {
+     *   // ...
+     * }
+     * ```
+     */
+    list(query?: ExternalKeyListParams | null | undefined, options?: RequestOptions): PagePromise<BetaExternalKeysPageCursor, BetaExternalKey>;
+    /**
+     * Delete an external key config.
+     *
+     * The request is rejected if any workspace still references this config.
+     *
+     * @example
+     * ```ts
+     * const externalKey =
+     *   await client.beta.organization.externalKeys.delete(
+     *     'external_key_id',
+     *   );
+     * ```
+     */
+    delete(externalKeyID: string, options?: RequestOptions): APIPromise<ExternalKeyDeleteResponse>;
+    /**
+     * Validate an external key config against the customer's KMS.
+     *
+     * Anthropic performs an encrypt/decrypt roundtrip against the configured KMS key
+     * and waits up to 30 seconds for the result. The response status is `success` if
+     * the roundtrip succeeded, or `failure` with an error message if it failed or
+     * timed out.
+     *
+     * @example
+     * ```ts
+     * const response =
+     *   await client.beta.organization.externalKeys.validate(
+     *     'external_key_id',
+     *   );
+     * ```
+     */
+    validate(externalKeyID: string, options?: RequestOptions): APIPromise<ExternalKeyValidateResponse>;
+}
+export type BetaExternalKeysPageCursor = PageCursor<BetaExternalKey>;
+export interface BetaAWSExternalKeyConfig {
+    /**
+     * Full ARN of the AWS KMS key.
+     */
+    kms_arn: string;
+    type: 'aws';
+    /**
+     * AWS region. Derived from `kms_arn` if omitted.
+     */
+    region?: string | null;
+    /**
+     * @deprecated IAM role ARN. Deprecated — Anthropic reaches the KMS key via a
+     * managed intermediate role; this field is ignored.
+     */
+    role_arn?: string | null;
+}
+export interface BetaAzureExternalKeyConfig {
+    /**
+     * Name of the key within the vault.
+     */
+    key_name: string;
+    /**
+     * Azure AD tenant ID.
+     */
+    tenant_id: string;
+    type: 'azure';
+    /**
+     * Key Vault data-plane URI — `https://{vault-name}.vault.azure.net` or
+     * `https://{hsm-name}.managedhsm.azure.net`.
+     */
+    vault_uri: string;
+    /**
+     * Azure AD application (client) ID. Omit to use Anthropic's multitenant app.
+     * Provide only if using a single-tenant app registration in the customer's
+     * directory.
+     */
+    client_id?: string | null;
+}
+/**
+ * Azure Key Vault provider configuration.
+ */
+export interface BetaAzureExternalKeyConfigParam {
+    /**
+     * Name of the key within the vault.
+     */
+    key_name: string;
+    /**
+     * Azure AD tenant ID.
+     */
+    tenant_id: string;
+    type: 'azure';
+    /**
+     * Key Vault data-plane URI — `https://{vault-name}.vault.azure.net` or
+     * `https://{hsm-name}.managedhsm.azure.net`.
+     */
+    vault_uri: string;
+    /**
+     * Azure AD application (client) ID. Omit to use Anthropic's multitenant app.
+     * Provide only if using a single-tenant app registration in the customer's
+     * directory.
+     */
+    client_id?: string | null;
+}
+/**
+ * CMEK external key config belonging to the caller's organization.
+ *
+ * Configs are organization-scoped. Workspaces attach to a config; once any
+ * workspace references it, the provider fields become effectively immutable
+ * (existing encrypted data needs the config for decrypt).
+ */
+export interface BetaExternalKey {
+    /**
+     * Identifier of the external key config. A tagged ID prefixed `ekey_`, or — for
+     * organizations on the Claude Platform on AWS — the AWS KMS key ARN.
+     */
+    id: string;
+    /**
+     * Whether any workspace uses this config to encrypt its data — counting live and
+     * archived workspaces (an archived workspace's data remains encrypted under the
+     * config), excluding deleted ones. Only an attached config is used by the
+     * encryption path; an `unattached` config is inert and can be deleted.
+     */
+    attachment: BetaExternalKeyAttachedAttachment | BetaExternalKeyUnattachedAttachment;
+    created_at: string;
+    /**
+     * Human-friendly display name. Null if none was set.
+     */
+    display_name: string | null;
+    /**
+     * Data residency geo. Selects which regional validator handles this key's
+     * encrypt/decrypt roundtrips.
+     */
+    geo: string;
+    /**
+     * KMS provider identity and auth coordinates.
+     */
+    provider_config: BetaAWSExternalKeyConfig | BetaGCPExternalKeyConfig | BetaAzureExternalKeyConfig;
+    type: 'external_key';
+    updated_at: string;
+}
+export interface BetaExternalKeyAttachedAttachment {
+    type: 'attached';
+}
+export interface BetaExternalKeyUnattachedAttachment {
+    type: 'unattached';
+}
+export interface BetaGCPExternalKeyConfig {
+    /**
+     * Full resource name of the Cloud KMS key.
+     */
+    key_name: string;
+    type: 'gcp';
+}
+export interface ExternalKeyDeleteResponse {
+    /**
+     * ID of the deleted External Key.
+     */
+    id: string;
+    type: 'external_key_deleted';
+}
+/**
+ * Result of a validation roundtrip against the customer's KMS.
+ *
+ * HTTP 200 for both outcomes — the operation completed; `status` says whether the
+ * key works.
+ */
+export interface ExternalKeyValidateResponse {
+    /**
+     * Error message when status is `failure`. Null otherwise.
+     */
+    error: string | null;
+    /**
+     * `success` — encrypt/decrypt roundtrip succeeded. `failure` — the roundtrip
+     * failed or timed out; see `error`.
+     */
+    status: 'failure' | 'success';
+    type: 'external_key_validation';
+}
+export interface ExternalKeyCreateParams {
+    /**
+     * KMS provider identity and auth coordinates.
+     */
+    provider_config: BetaAWSExternalKeyConfig | BetaGCPExternalKeyConfig | BetaAzureExternalKeyConfigParam;
+    /**
+     * Human-friendly display name.
+     */
+    display_name?: string | null;
+    /**
+     * Data residency geo. Only `us` is supported.
+     */
+    geo?: 'us';
+}
+export interface ExternalKeyUpdateParams {
+    /**
+     * Human-friendly display name.
+     */
+    display_name?: string | null;
+    /**
+     * Data residency geo. Only `us` is supported.
+     */
+    geo?: 'us' | null;
+    /**
+     * KMS provider identity and auth coordinates.
+     */
+    provider_config?: BetaAWSExternalKeyConfig | BetaGCPExternalKeyConfig | BetaAzureExternalKeyConfigParam | null;
+}
+export interface ExternalKeyListParams extends PageCursorParams {
+}
+export declare namespace ExternalKeys {
+    export { type BetaAWSExternalKeyConfig as BetaAWSExternalKeyConfig, type BetaAzureExternalKeyConfig as BetaAzureExternalKeyConfig, type BetaAzureExternalKeyConfigParam as BetaAzureExternalKeyConfigParam, type BetaExternalKey as BetaExternalKey, type BetaExternalKeyAttachedAttachment as BetaExternalKeyAttachedAttachment, type BetaExternalKeyUnattachedAttachment as BetaExternalKeyUnattachedAttachment, type BetaGCPExternalKeyConfig as BetaGCPExternalKeyConfig, type ExternalKeyDeleteResponse as ExternalKeyDeleteResponse, type ExternalKeyValidateResponse as ExternalKeyValidateResponse, type BetaExternalKeysPageCursor as BetaExternalKeysPageCursor, type ExternalKeyCreateParams as ExternalKeyCreateParams, type ExternalKeyUpdateParams as ExternalKeyUpdateParams, type ExternalKeyListParams as ExternalKeyListParams, };
+}
+//# sourceMappingURL=external-keys.d.mts.map

package/resources/beta/organization/external-keys.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-keys.d.mts","sourceRoot":"","sources":["../../../src/resources/beta/organization/external-keys.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,mCAA+B;AACrD,OAAO,EAAE,UAAU,EAAE,sCAAkC;AACvD,OAAO,EAAE,UAAU,EAAE,KAAK,gBAAgB,EAAE,WAAW,EAAE,qCAAiC;AAC1F,OAAO,EAAE,cAAc,EAAE,8CAA0C;AAGnE,qBAAa,YAAa,SAAQ,WAAW;IAC3C;;;;;;;;;;;;;;OAcG;IACH,MAAM,CAAC,IAAI,EAAE,uBAAuB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,eAAe,CAAC;IAI5F;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,eAAe,CAAC;IAItF;;;;;;;;;;;;;;OAcG;IACH,MAAM,CACJ,aAAa,EAAE,MAAM,EACrB,IAAI,EAAE,uBAAuB,EAC7B,OAAO,CAAC,EAAE,cAAc,GACvB,UAAU,CAAC,eAAe,CAAC;IAO9B;;;;;;;;;;;;;OAaG;IACH,IAAI,CACF,KAAK,GAAE,qBAAqB,GAAG,IAAI,GAAG,SAAc,EACpD,OAAO,CAAC,EAAE,cAAc,GACvB,WAAW,CAAC,0BAA0B,EAAE,eAAe,CAAC;IAO3D;;;;;;;;;;;;OAYG;IACH,MAAM,CAAC,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,yBAAyB,CAAC;IAI9F;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,2BAA2B,CAAC;CAMnG;AAED,MAAM,MAAM,0BAA0B,GAAG,UAAU,CAAC,eAAe,CAAC,CAAC;AAErE,MAAM,WAAW,wBAAwB;IACvC;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAEhB,IAAI,EAAE,KAAK,CAAC;IAEZ;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAEvB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,0BAA0B;IACzC;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IAEjB;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB,IAAI,EAAE,OAAO,CAAC;IAEd;;;OAGG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,+BAA+B;IAC9C;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IAEjB;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB,IAAI,EAAE,OAAO,CAAC;IAEd;;;OAGG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC9B;;;OAGG;IACH,EAAE,EAAE,MAAM,CAAC;IAEX;;;;;OAKG;IACH,UAAU,EAAE,iCAAiC,GAAG,mCAAmC,CAAC;IAEpF,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAE5B;;;OAGG;IACH,GAAG,EAAE,MAAM,CAAC;IAEZ;;OAEG;IACH,eAAe,EAAE,wBAAwB,GAAG,wBAAwB,GAAG,0BAA0B,CAAC;IAElG,IAAI,EAAE,cAAc,CAAC;IAErB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,iCAAiC;IAChD,IAAI,EAAE,UAAU,CAAC;CAClB;AAED,MAAM,WAAW,mCAAmC;IAClD,IAAI,EAAE,YAAY,CAAC;CACpB;AAED,MAAM,WAAW,wBAAwB;IACvC;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IAEjB,IAAI,EAAE,KAAK,CAAC;CACb;AAED,MAAM,WAAW,yBAAyB;IACxC;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IAEX,IAAI,EAAE,sBAAsB,CAAC;CAC9B;AAED;;;;;GAKG;AACH,MAAM,WAAW,2BAA2B;IAC1C;;OAEG;IACH,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAErB;;;OAGG;IACH,MAAM,EAAE,SAAS,GAAG,SAAS,CAAC;IAE9B,IAAI,EAAE,yBAAyB,CAAC;CACjC;AAED,MAAM,WAAW,uBAAuB;IACtC;;OAEG;IACH,eAAe,EAAE,wBAAwB,GAAG,wBAAwB,GAAG,+BAA+B,CAAC;IAEvG;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAE7B;;OAEG;IACH,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ;AAED,MAAM,WAAW,uBAAuB;IACtC;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAE7B;;OAEG;IACH,GAAG,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IAElB;;OAEG;IACH,eAAe,CAAC,EACZ,wBAAwB,GACxB,wBAAwB,GACxB,+BAA+B,GAC/B,IAAI,CAAC;CACV;AAED,MAAM,WAAW,qBAAsB,SAAQ,gBAAgB;CAAG;AAElE,MAAM,CAAC,OAAO,WAAW,YAAY,CAAC;IACpC,OAAO,EACL,KAAK,wBAAwB,IAAI,wBAAwB,EACzD,KAAK,0BAA0B,IAAI,0BAA0B,EAC7D,KAAK,+BAA+B,IAAI,+BAA+B,EACvE,KAAK,eAAe,IAAI,eAAe,EACvC,KAAK,iCAAiC,IAAI,iCAAiC,EAC3E,KAAK,mCAAmC,IAAI,mCAAmC,EAC/E,KAAK,wBAAwB,IAAI,wBAAwB,EACzD,KAAK,yBAAyB,IAAI,yBAAyB,EAC3D,KAAK,2BAA2B,IAAI,2BAA2B,EAC/D,KAAK,0BAA0B,IAAI,0BAA0B,EAC7D,KAAK,uBAAuB,IAAI,uBAAuB,EACvD,KAAK,uBAAuB,IAAI,uBAAuB,EACvD,KAAK,qBAAqB,IAAI,qBAAqB,GACpD,CAAC;CACH"}