@anthropic-ai/sdk 0.121.0 → 0.123.0

package/src/resources/beta/memory-stores/memories.ts

@@ -367,7 +367,8 @@ export interface MemoryCreateParams {
    * Body param: Hierarchical path for the new memory, e.g. `/projects/foo/notes.md`.
    * Must start with `/`, contain at least one non-empty segment, and be at most
    * 1,024 bytes. Must not contain empty segments, `.` or `..` segments, control or
-   * format characters, and must be NFC-normalized. Paths are case-sensitive.
+   * format characters, or the Unicode line and paragraph separators (U+2028,
+   * U+2029), and must be NFC-normalized. Paths are case-sensitive.
    */
   path: string;
 
@@ -419,9 +420,10 @@ export interface MemoryUpdateParams {
   /**
    * Body param: New path for the memory (a rename). Must start with `/`, contain at
    * least one non-empty segment, and be at most 1,024 bytes. Must not contain empty
-   * segments, `.` or `..` segments, control or format characters, and must be
-   * NFC-normalized. Paths are case-sensitive. The memory's `id` is preserved across
-   * renames. Omit to leave the path unchanged.
+   * segments, `.` or `..` segments, control or format characters, or the Unicode
+   * line and paragraph separators (U+2028, U+2029), and must be NFC-normalized.
+   * Paths are case-sensitive. The memory's `id` is preserved across renames. Omit to
+   * leave the path unchanged.
    */
   path?: string | null;
 

package/src/resources/beta/messages/index.ts

@@ -148,6 +148,7 @@ export {
   type BetaComputerZoomConfig,
   type BetaContainer,
   type BetaContainerParams,
+  type BetaContainerSkill,
   type BetaContainerUploadBlock,
   type BetaContainerUploadBlockParam,
   type BetaContentBlock,
@@ -229,9 +230,9 @@ export {
   type BetaServerToolUseBlock,
   type BetaServerToolUseBlockParam,
   type BetaSignatureDelta,
-  type BetaSkill,
   type BetaSkillParams,
   type BetaStopReason,
+  type BetaSystemMessageOutputConfig,
   type BetaTextBlock,
   type BetaTextBlockParam,
   type BetaTextCitation,
@@ -248,12 +249,15 @@ export {
   type BetaTextEditorCodeExecutionViewResultBlock,
   type BetaTextEditorCodeExecutionViewResultBlockParam,
   type BetaThinkingBlock,
+  type BetaThinkingBlockBinding,
   type BetaThinkingBlockParam,
   type BetaThinkingConfigAdaptive,
   type BetaThinkingConfigDisabled,
   type BetaThinkingConfigEnabled,
   type BetaThinkingConfigParam,
   type BetaThinkingDelta,
+  type BetaThinkingDroppedInputTransformation,
+  type BetaThinkingPrefixMismatchBehavior,
   type BetaThinkingTurns,
   type BetaTokenTaskBudget,
   type BetaTool,

package/src/resources/beta/messages/messages.ts

@@ -1221,10 +1221,6 @@ export interface BetaBrowserSwitchTabConfig {
 export interface BetaBrowserToolset20260801 {
   type: 'browser_toolset_20260801';
 
-  allowed_callers?: Array<
-    'direct' | 'code_execution_20250825' | 'code_execution_20260120' | 'code_execution_20260521'
-  >;
-
   /**
    * Create a cache control breakpoint at this content block.
    */
@@ -2472,10 +2468,6 @@ export interface BetaComputerScrollConfig {
 export interface BetaComputerToolset20260801 {
   type: 'computer_toolset_20260801';
 
-  allowed_callers?: Array<
-    'direct' | 'code_execution_20250825' | 'code_execution_20260120' | 'code_execution_20260521'
-  >;
-
   /**
    * Create a cache control breakpoint at this content block.
    */
@@ -2675,7 +2667,7 @@ export interface BetaContainer {
   /**
    * Skills loaded in the container
    */
-  skills: Array<BetaSkill> | null;
+  skills: Array<BetaContainerSkill> | null;
 }
 
 /**
@@ -2693,6 +2685,26 @@ export interface BetaContainerParams {
   skills?: Array<BetaSkillParams> | null;
 }
 
+/**
+ * A skill that was loaded in a container (response model).
+ */
+export interface BetaContainerSkill {
+  /**
+   * Skill ID
+   */
+  skill_id: string;
+
+  /**
+   * Type of skill - either 'anthropic' (built-in) or 'custom' (user-defined)
+   */
+  type: 'anthropic' | 'custom';
+
+  /**
+   * The resolved version: a skill version ID for custom skills.
+   */
+  version: string;
+}
+
 /**
  * Response model for a file uploaded to the container.
  */
@@ -3672,6 +3684,25 @@ export interface BetaMessage {
    * `cache_creation_input_tokens`, and `cache_read_input_tokens`.
    */
   usage: BetaUsage;
+
+  /**
+   * Changes the API made to the request's input before showing it to the model: one
+   * entry per change, in request order. Today the only entry type is
+   * `thinking_dropped` — a `thinking`, `redacted_thinking` or `connector_text` block
+   * from the request's `messages` that was removed from the prompt instead of being
+   * shown to the model because it failed a binding check. More entry types may be
+   * added over time; ignore types you do not recognize.
+   *
+   * Requires `anthropic-beta: thinking-binding-controls-2026-08-01`. Present on
+   * every such response from a model that supports extended thinking, as `[]` when
+   * nothing was changed; without the beta, blocks are removed all the same but
+   * nothing is reported. Removed blocks contribute nothing to `usage.input_tokens`.
+   * When streaming, the array is final in `message_start`; the final `message_delta`
+   * event carries it only when a server-side model fallback happened mid-stream, in
+   * which case it holds the serving model's entries and replaces the one in
+   * `message_start`.
+   */
+  input_transformations?: Array<BetaThinkingDroppedInputTransformation> | null;
 }
 
 export interface BetaMessageDeltaUsage {
@@ -3789,6 +3820,25 @@ export interface BetaMessageParam {
   content: string | Array<BetaContentBlockParam>;
 
   role: 'user' | 'assistant' | 'system';
+
+  /**
+   * How long this system message's text stays in front of the model. `"never"` (the
+   * default) renders it on every request that includes it. `"next_user_message"`
+   * renders it only for the user turn it follows: once a later `role: "user"`
+   * message exists in `messages` the message stays in the array (send it unchanged)
+   * but is no longer shown to the model. Only permitted on `role: "system"`
+   * messages.
+   */
+  clear_at?: 'next_user_message' | 'never' | null;
+
+  /**
+   * Per-message output configuration on a role:"system" input message.
+   *
+   * Fields here apply per-turn; `format` remains top-level only. An empty `{}` is
+   * accepted on a message that carries content; a message with neither content nor
+   * output_config fields is rejected.
+   */
+  output_config?: BetaSystemMessageOutputConfig | null;
 }
 
 export interface BetaMessageTokensCount {
@@ -3933,6 +3983,25 @@ export interface BetaRawMessageDeltaEvent {
    * `cache_creation_input_tokens`, and `cache_read_input_tokens`.
    */
   usage: BetaMessageDeltaUsage;
+
+  /**
+   * Changes the API made to the request's input before showing it to the model: one
+   * entry per change, in request order. Today the only entry type is
+   * `thinking_dropped` — a `thinking`, `redacted_thinking` or `connector_text` block
+   * from the request's `messages` that was removed from the prompt instead of being
+   * shown to the model because it failed a binding check. More entry types may be
+   * added over time; ignore types you do not recognize.
+   *
+   * Requires `anthropic-beta: thinking-binding-controls-2026-08-01`. Present on
+   * every such response from a model that supports extended thinking, as `[]` when
+   * nothing was changed; without the beta, blocks are removed all the same but
+   * nothing is reported. Removed blocks contribute nothing to `usage.input_tokens`.
+   * When streaming, the array is final in `message_start`; the final `message_delta`
+   * event carries it only when a server-side model fallback happened mid-stream, in
+   * which case it holds the serving model's entries and replaces the one in
+   * `message_start`.
+   */
+  input_transformations?: Array<BetaThinkingDroppedInputTransformation> | null;
 }
 
 export namespace BetaRawMessageDeltaEvent {
@@ -4293,26 +4362,6 @@ export interface BetaSignatureDelta {
   type: 'signature_delta';
 }
 
-/**
- * A skill that was loaded in a container (response model).
- */
-export interface BetaSkill {
-  /**
-   * Skill ID
-   */
-  skill_id: string;
-
-  /**
-   * Type of skill - either 'anthropic' (built-in) or 'custom' (user-defined)
-   */
-  type: 'anthropic' | 'custom';
-
-  /**
-   * The resolved version: a skill version ID for custom skills.
-   */
-  version: string;
-}
-
 /**
  * Specification for a skill to be loaded in a container (request model).
  */
@@ -4343,6 +4392,20 @@ export type BetaStopReason =
   | 'refusal'
   | 'model_context_window_exceeded';
 
+/**
+ * Per-message output configuration on a role:"system" input message.
+ *
+ * Fields here apply per-turn; `format` remains top-level only. An empty `{}` is
+ * accepted on a message that carries content; a message with neither content nor
+ * output_config fields is rejected.
+ */
+export interface BetaSystemMessageOutputConfig {
+  /**
+   * All possible effort levels.
+   */
+  effort?: 'low' | 'medium' | 'high' | 'xhigh' | 'max' | null;
+}
+
 export interface BetaTextBlock {
   /**
    * Citations supporting the text block.
@@ -4537,6 +4600,22 @@ export interface BetaThinkingBlock {
   type: 'thinking';
 }
 
+/**
+ * Controls for block binding: what happens when a thinking block this request
+ * sends back fails the conversation check. Every field is optional; an empty
+ * object means every default.
+ */
+export interface BetaThinkingBlockBinding {
+  /**
+   * What happens when a thinking block in `messages` fails the conversation check:
+   * it was created in a different conversation, or the messages before it have
+   * changed since. `"error"` (the default) fails the request with a 400 error.
+   * `"drop_block"` removes the failing blocks and the request proceeds; the model no
+   * longer sees the dropped reasoning.
+   */
+  prefix_mismatch_behavior?: BetaThinkingPrefixMismatchBehavior | null;
+}
+
 export interface BetaThinkingBlockParam {
   /**
    * The `signature` value of this thinking block, exactly as returned by the API in
@@ -4558,6 +4637,13 @@ export interface BetaThinkingBlockParam {
 export interface BetaThinkingConfigAdaptive {
   type: 'adaptive';
 
+  /**
+   * Controls for block binding: what happens when a thinking block this request
+   * sends back fails the conversation check. Every field is optional; an empty
+   * object means every default.
+   */
+  block_binding?: BetaThinkingBlockBinding | null;
+
   /**
    * Controls how thinking content appears in the response. When set to `summarized`,
    * thinking is returned normally. When set to `omitted`, thinking content is
@@ -4587,6 +4673,13 @@ export interface BetaThinkingConfigEnabled {
 
   type: 'enabled';
 
+  /**
+   * Controls for block binding: what happens when a thinking block this request
+   * sends back fails the conversation check. Every field is optional; an empty
+   * object means every default.
+   */
+  block_binding?: BetaThinkingBlockBinding | null;
+
   /**
    * Controls how thinking content appears in the response. When set to `summarized`,
    * thinking is returned normally. When set to `omitted`, thinking content is
@@ -4635,6 +4728,50 @@ export interface BetaThinkingDelta {
   type: 'thinking_delta';
 }
 
+export interface BetaThinkingDroppedInputTransformation {
+  /**
+   * Where the removed block was in your request, as `messages.{i}.content.{j}`: `i`
+   * indexes the `messages` array you sent and `j` that message's `content` array —
+   * the same form error messages use.
+   */
+  path: string;
+
+  /**
+   * Which binding check removed the block: `model_binding_mismatch` — it was created
+   * by a model whose reasoning the requested model may not read;
+   * `prefix_binding_mismatch` — the conversation before it differs from the
+   * conversation it was created in (the rest of that turn's consecutive thinking
+   * blocks are removed with it, each with this reason);
+   * `organization_binding_mismatch` — it was created under a different organization
+   * (an Anthropic organization, AWS account or Google Cloud project) and this
+   * organization is not one of its additional organizations;
+   * `end_user_binding_mismatch` — it was created for a different end user, or was
+   * removed by the consumer-organization binding. A block that would fail several
+   * checks reports one reason, in this order of precedence:
+   * `organization_binding_mismatch`, `end_user_binding_mismatch`,
+   * `model_binding_mismatch`, `prefix_binding_mismatch`.
+   */
+  reason:
+    | 'model_binding_mismatch'
+    | 'prefix_binding_mismatch'
+    | 'organization_binding_mismatch'
+    | 'end_user_binding_mismatch';
+
+  /**
+   * Always `thinking_dropped` for this entry type.
+   */
+  type: 'thinking_dropped';
+}
+
+/**
+ * What happens when a thinking block in `messages` fails the conversation check:
+ * it was created in a different conversation, or the messages before it have
+ * changed since. `"error"` (the default) fails the request with a 400 error.
+ * `"drop_block"` removes the failing blocks and the request proceeds; the model no
+ * longer sees the dropped reasoning.
+ */
+export type BetaThinkingPrefixMismatchBehavior = 'error' | 'drop_block';
+
 export interface BetaThinkingTurns {
   type: 'thinking_turns';
 
@@ -6974,6 +7111,7 @@ export declare namespace Messages {
     type BetaComputerZoomConfig as BetaComputerZoomConfig,
     type BetaContainer as BetaContainer,
     type BetaContainerParams as BetaContainerParams,
+    type BetaContainerSkill as BetaContainerSkill,
     type BetaContainerUploadBlock as BetaContainerUploadBlock,
     type BetaContainerUploadBlockParam as BetaContainerUploadBlockParam,
     type BetaContentBlock as BetaContentBlock,
@@ -7057,9 +7195,9 @@ export declare namespace Messages {
     type BetaServerToolUseBlock as BetaServerToolUseBlock,
     type BetaServerToolUseBlockParam as BetaServerToolUseBlockParam,
     type BetaSignatureDelta as BetaSignatureDelta,
-    type BetaSkill as BetaSkill,
     type BetaSkillParams as BetaSkillParams,
     type BetaStopReason as BetaStopReason,
+    type BetaSystemMessageOutputConfig as BetaSystemMessageOutputConfig,
     type BetaTextBlock as BetaTextBlock,
     type BetaTextBlockParam as BetaTextBlockParam,
     type BetaTextCitation as BetaTextCitation,
@@ -7076,12 +7214,15 @@ export declare namespace Messages {
     type BetaTextEditorCodeExecutionViewResultBlock as BetaTextEditorCodeExecutionViewResultBlock,
     type BetaTextEditorCodeExecutionViewResultBlockParam as BetaTextEditorCodeExecutionViewResultBlockParam,
     type BetaThinkingBlock as BetaThinkingBlock,
+    type BetaThinkingBlockBinding as BetaThinkingBlockBinding,
     type BetaThinkingBlockParam as BetaThinkingBlockParam,
     type BetaThinkingConfigAdaptive as BetaThinkingConfigAdaptive,
     type BetaThinkingConfigDisabled as BetaThinkingConfigDisabled,
     type BetaThinkingConfigEnabled as BetaThinkingConfigEnabled,
     type BetaThinkingConfigParam as BetaThinkingConfigParam,
     type BetaThinkingDelta as BetaThinkingDelta,
+    type BetaThinkingDroppedInputTransformation as BetaThinkingDroppedInputTransformation,
+    type BetaThinkingPrefixMismatchBehavior as BetaThinkingPrefixMismatchBehavior,
     type BetaThinkingTurns as BetaThinkingTurns,
     type BetaTokenTaskBudget as BetaTokenTaskBudget,
     type BetaTool as BetaTool,

package/src/resources/beta/organization/compliance-settings.ts

@@ -0,0 +1,96 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+import { APIResource } from '../../../core/resource';
+import { APIPromise } from '../../../core/api-promise';
+import { RequestOptions } from '../../../internal/request-options';
+
+export class ComplianceSettings extends APIResource {
+  /**
+   * Retrieve your organization's Compliance Settings.
+   *
+   * Compliance Settings is a singleton resource: there is exactly one per
+   * organization, addressed without an identifier. The `state` field reflects
+   * whether the Compliance API is enabled. An organization with a parent
+   * organization reads the state inherited from the parent's configuration.
+   *
+   * @example
+   * ```ts
+   * const betaComplianceSettings =
+   *   await client.beta.organization.complianceSettings.retrieve();
+   * ```
+   */
+  retrieve(options?: RequestOptions): APIPromise<BetaComplianceSettings> {
+    return this._client.get('/v1/organizations/compliance_settings?beta=true', options);
+  }
+
+  /**
+   * Update your organization's Compliance Settings.
+   *
+   * Setting `state` to `enabled` turns on the Compliance API and begins capturing
+   * organization activity events. Setting it to `disabled` turns both off. `state`
+   * reflects whether the Compliance API is enabled.
+   *
+   * A request that sets `state` to its current value succeeds and leaves the
+   * resource unchanged. A `disabled` request stays in effect until a later `enabled`
+   * request or the organization's next provisioning action that enables Access
+   * Transparency: enabling Access Transparency also enables the Compliance API,
+   * which serves its activity events, so such provisioning (including re-runs)
+   * re-enables the Compliance API even after a `disabled` request. Automated
+   * provisioning never disables compliance settings.
+   *
+   * @example
+   * ```ts
+   * const betaComplianceSettings =
+   *   await client.beta.organization.complianceSettings.update({
+   *     state: { type: 'enabled' },
+   *   });
+   * ```
+   */
+  update(body: ComplianceSettingUpdateParams, options?: RequestOptions): APIPromise<BetaComplianceSettings> {
+    return this._client.post('/v1/organizations/compliance_settings?beta=true', { body, ...options });
+  }
+}
+
+export interface BetaComplianceSettings {
+  /**
+   * Whether the Compliance API is enabled for this organization.
+   */
+  state: BetaComplianceSettingsStateEnabled | BetaComplianceSettingsStateDisabled;
+
+  type: 'compliance_settings';
+}
+
+export interface BetaComplianceSettingsStateDisabled {
+  type: 'disabled';
+}
+
+export interface BetaComplianceSettingsStateDisabledParam {
+  type: 'disabled';
+}
+
+export interface BetaComplianceSettingsStateEnabled {
+  type: 'enabled';
+}
+
+export interface BetaComplianceSettingsStateEnabledParam {
+  type: 'enabled';
+}
+
+export interface ComplianceSettingUpdateParams {
+  /**
+   * Desired state. Accepts the string shorthand "enabled" or "disabled" in place of
+   * the object form; the response always returns the canonical object form.
+   */
+  state: BetaComplianceSettingsStateEnabledParam | BetaComplianceSettingsStateDisabledParam;
+}
+
+export declare namespace ComplianceSettings {
+  export {
+    type BetaComplianceSettings as BetaComplianceSettings,
+    type BetaComplianceSettingsStateDisabled as BetaComplianceSettingsStateDisabled,
+    type BetaComplianceSettingsStateDisabledParam as BetaComplianceSettingsStateDisabledParam,
+    type BetaComplianceSettingsStateEnabled as BetaComplianceSettingsStateEnabled,
+    type BetaComplianceSettingsStateEnabledParam as BetaComplianceSettingsStateEnabledParam,
+    type ComplianceSettingUpdateParams as ComplianceSettingUpdateParams,
+  };
+}

package/src/resources/beta/organization/external-keys.ts

@@ -136,7 +136,9 @@ export type BetaExternalKeysPageCursor = PageCursor<BetaExternalKey>;
 
 export interface BetaAWSExternalKeyConfig {
   /**
-   * Full ARN of the AWS KMS key.
+   * Full ARN of the AWS KMS key. On Claude Platform on AWS the key must be a
+   * single-Region key in your organization's own AWS account; cross-account keys,
+   * multi-Region keys, and alias ARNs are rejected.
    */
   kms_arn: string;
 
@@ -148,8 +150,9 @@ export interface BetaAWSExternalKeyConfig {
   region?: string | null;
 
   /**
-   * @deprecated IAM role ARN. Deprecated — Anthropic reaches the KMS key via a
-   * managed intermediate role; this field is ignored.
+   * @deprecated IAM role ARN. Deprecated — Anthropic reaches the KMS key through its
+   * own intermediate role (or, on Claude Platform on AWS, with credentials AWS
+   * issues for the Workspace); this field is ignored.
    */
   role_arn?: string | null;
 }

package/src/resources/beta/organization/index.ts

@@ -12,6 +12,15 @@ export {
   type APIKeyListParams,
   type BetaAPIKeysPage,
 } from './api-keys';
+export {
+  ComplianceSettings,
+  type BetaComplianceSettings,
+  type BetaComplianceSettingsStateDisabled,
+  type BetaComplianceSettingsStateDisabledParam,
+  type BetaComplianceSettingsStateEnabled,
+  type BetaComplianceSettingsStateEnabledParam,
+  type ComplianceSettingUpdateParams,
+} from './compliance-settings';
 export {
   ExternalKeys,
   type BetaAWSExternalKeyConfig,

package/src/resources/beta/organization/organization.ts

@@ -14,6 +14,16 @@ import {
   BetaAPIKeyWorkspaceScope,
   BetaAPIKeysPage,
 } from './api-keys';
+import * as ComplianceSettingsAPI from './compliance-settings';
+import {
+  BetaComplianceSettings,
+  BetaComplianceSettingsStateDisabled,
+  BetaComplianceSettingsStateDisabledParam,
+  BetaComplianceSettingsStateEnabled,
+  BetaComplianceSettingsStateEnabledParam,
+  ComplianceSettingUpdateParams,
+  ComplianceSettings,
+} from './compliance-settings';
 import * as ExternalKeysAPI from './external-keys';
 import {
   BetaAWSExternalKeyConfig,
@@ -99,6 +109,9 @@ export class Organization extends APIResource {
   users: UsersAPI.Users = new UsersAPI.Users(this._client);
   workspaces: WorkspacesAPI.Workspaces = new WorkspacesAPI.Workspaces(this._client);
   rateLimits: RateLimitsAPI.RateLimits = new RateLimitsAPI.RateLimits(this._client);
+  complianceSettings: ComplianceSettingsAPI.ComplianceSettings = new ComplianceSettingsAPI.ComplianceSettings(
+    this._client,
+  );
 
   /**
    * Retrieve information about the organization associated with the authenticated
@@ -153,6 +166,7 @@ Organization.ServiceAccounts = ServiceAccounts;
 Organization.Users = Users;
 Organization.Workspaces = Workspaces;
 Organization.RateLimits = RateLimits;
+Organization.ComplianceSettings = ComplianceSettings;
 
 export declare namespace Organization {
   export { type BetaOrganization as BetaOrganization, type BetaOrganizationRole as BetaOrganizationRole };
@@ -242,4 +256,14 @@ export declare namespace Organization {
     type BetaOrganizationRateLimitsPageCursor as BetaOrganizationRateLimitsPageCursor,
     type RateLimitListParams as RateLimitListParams,
   };
+
+  export {
+    ComplianceSettings as ComplianceSettings,
+    type BetaComplianceSettings as BetaComplianceSettings,
+    type BetaComplianceSettingsStateDisabled as BetaComplianceSettingsStateDisabled,
+    type BetaComplianceSettingsStateDisabledParam as BetaComplianceSettingsStateDisabledParam,
+    type BetaComplianceSettingsStateEnabled as BetaComplianceSettingsStateEnabled,
+    type BetaComplianceSettingsStateEnabledParam as BetaComplianceSettingsStateEnabledParam,
+    type ComplianceSettingUpdateParams as ComplianceSettingUpdateParams,
+  };
 }

package/src/resources/beta/organization/rate-limits.ts

@@ -12,9 +12,8 @@ export class RateLimits extends APIResource {
    * API-surface category such as the Files API or Message Batches) and contains the
    * set of limiter values that apply to it.
    *
-   * This endpoint currently returns every matching entry in a single page regardless
-   * of `limit`; follow `next_page` so that clients keep working when pagination is
-   * enabled.
+   * When `limit` is omitted, every matching entry is returned in a single page; when
+   * `limit` truncates the result, follow `next_page` to fetch the remaining entries.
    *
    * @example
    * ```ts

package/src/resources/beta/organization/workspaces/rate-limits.ts

@@ -13,9 +13,8 @@ export class RateLimits extends APIResource {
    * Groups without overrides inherit the organization limits and are not listed; use
    * `GET /v1/organizations/rate_limits` to see those.
    *
-   * This endpoint currently returns every matching entry in a single page regardless
-   * of `limit`; follow `next_page` so that clients keep working when pagination is
-   * enabled.
+   * When `limit` is omitted, every matching entry is returned in a single page; when
+   * `limit` truncates the result, follow `next_page` to fetch the remaining entries.
    *
    * @example
    * ```ts

package/src/resources/beta/organization/workspaces/workspaces.ts

@@ -221,8 +221,12 @@ export interface BetaWorkspace {
    * key-policy condition so the key is scoped to this compartment. On GCP and Azure,
    * Anthropic enforces the compartment binding automatically; you do not need to
    * reference this value in your key configuration. See the CMEK integration guide
-   * for the required key configuration, including the value used during key
-   * validation.
+   * for the required key configuration; unless your organization is on Claude
+   * Platform on AWS, it includes a separate value used during key validation. On
+   * Claude Platform on AWS there is no separate validation value: the key is
+   * validated against this Workspace's own value when it is attached, so if your key
+   * policy uses the compartment condition, add this value to it before attaching the
+   * key.
    */
   compartment_id: string;
 
@@ -245,10 +249,14 @@ export interface BetaWorkspace {
    * ID of the customer-managed encryption key (CMEK) configuration to use for this
    * Workspace. Setting this field requires CMEK to be enabled for your organization.
    * When set, data stored for this Workspace is encrypted with the referenced key.
-   * Create key configurations with the External Keys API. This field is write-once:
-   * once a key is attached to a Workspace it cannot be detached or replaced. To
-   * rotate key material, rotate the underlying key on your cloud KMS; the
-   * `external_key_id` stays the same.
+   * Create key configurations with the External Keys API. On Claude Platform on AWS
+   * the value is the AWS KMS key ARN, and the key must be a single-Region key in the
+   * same AWS account and Region as the Workspace. On that platform the key is
+   * validated against this Workspace when it is attached, so a key-policy problem is
+   * reported as an error on this request. This field is write-once: once a key is
+   * attached to a Workspace it cannot be detached or replaced. To rotate key
+   * material, rotate the underlying key on your cloud KMS; the `external_key_id`
+   * stays the same.
    */
   external_key_id: string | null;
 
@@ -324,8 +332,12 @@ export interface WorkspaceCreateParams {
    * Body param: ID of the customer-managed encryption key (CMEK) configuration to
    * use for this Workspace. Setting this field requires CMEK to be enabled for your
    * organization. When set, data stored for this Workspace is encrypted with the
-   * referenced key. Create key configurations with the External Keys API. This field
-   * is write-once: once a key is attached to a Workspace it cannot be detached or
+   * referenced key. Create key configurations with the External Keys API. On Claude
+   * Platform on AWS the value is the AWS KMS key ARN, and the key must be a
+   * single-Region key in the same AWS account and Region as the Workspace. On that
+   * platform the key is validated against this Workspace when it is attached, so a
+   * key-policy problem is reported as an error on this request. This field is
+   * write-once: once a key is attached to a Workspace it cannot be detached or
    * replaced. To rotate key material, rotate the underlying key on your cloud KMS;
    * the `external_key_id` stays the same.
    */
@@ -358,10 +370,14 @@ export interface WorkspaceUpdateParams {
    * ID of the customer-managed encryption key (CMEK) configuration to use for this
    * Workspace. Setting this field requires CMEK to be enabled for your organization.
    * When set, data stored for this Workspace is encrypted with the referenced key.
-   * Create key configurations with the External Keys API. This field is write-once:
-   * once a key is attached to a Workspace it cannot be detached or replaced. To
-   * rotate key material, rotate the underlying key on your cloud KMS; the
-   * `external_key_id` stays the same.
+   * Create key configurations with the External Keys API. On Claude Platform on AWS
+   * the value is the AWS KMS key ARN, and the key must be a single-Region key in the
+   * same AWS account and Region as the Workspace. On that platform the key is
+   * validated against this Workspace when it is attached, so a key-policy problem is
+   * reported as an error on this request. This field is write-once: once a key is
+   * attached to a Workspace it cannot be detached or replaced. To rotate key
+   * material, rotate the underlying key on your cloud KMS; the `external_key_id`
+   * stays the same.
    */
   external_key_id?: string;
 

package/src/resources/beta/sessions/events.ts

@@ -1977,7 +1977,7 @@ export interface EventListParams extends PageCursorParams {
 
   /**
    * Query param: Sort direction for results, ordered by the event's `processed_at`.
-   * Defaults to asc (chronological).
+   * Defaults to `asc` (chronological).
    */
   order?: 'asc' | 'desc';