@code-yeongyu/senpi 2026.8.24 → 2026.8.26

package/node_modules/@anthropic-ai/sdk/src/resources/beta/tunnels/certificates.ts

@@ -0,0 +1,252 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+import { APIResource } from '../../../core/resource';
+import * as BetaAPI from '../beta';
+import { APIPromise } from '../../../core/api-promise';
+import { PageCursor, type PageCursorParams, PagePromise } from '../../../core/pagination';
+import { buildHeaders } from '../../../internal/headers';
+import { RequestOptions } from '../../../internal/request-options';
+import { path } from '../../../internal/utils/path';
+
+export class Certificates extends APIResource {
+  /**
+   * The Tunnels API is in research preview. It requires the
+   * `anthropic-beta: mcp-tunnels-2026-06-22` header and may change without a
+   * deprecation period. It supersedes the Admin API endpoints at
+   * `/v1/organizations/tunnels`, which remain available during a migration window.
+   *
+   * Registers a public CA certificate on a tunnel. Anthropic verifies the gateway's
+   * server certificate against this CA when it terminates the inner TLS session. A
+   * tunnel holds at most two non-archived certificates.
+   *
+   * @example
+   * ```ts
+   * const betaTunnelCertificate =
+   *   await client.beta.tunnels.certificates.create(
+   *     'tunnel_id',
+   *     { ca_certificate_pem: 'ca_certificate_pem' },
+   *   );
+   * ```
+   */
+  create(
+    tunnelID: string,
+    params: CertificateCreateParams,
+    options?: RequestOptions,
+  ): APIPromise<BetaTunnelCertificate> {
+    const { betas, ...body } = params;
+    return this._client.post(path`/v1/tunnels/${tunnelID}/certificates?beta=true`, {
+      body,
+      ...options,
+      headers: buildHeaders([
+        { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
+        options?.headers,
+      ]),
+    });
+  }
+
+  /**
+   * The Tunnels API is in research preview. It requires the
+   * `anthropic-beta: mcp-tunnels-2026-06-22` header and may change without a
+   * deprecation period. It supersedes the Admin API endpoints at
+   * `/v1/organizations/tunnels`, which remain available during a migration window.
+   *
+   * Fetches a tunnel certificate by ID.
+   *
+   * @example
+   * ```ts
+   * const betaTunnelCertificate =
+   *   await client.beta.tunnels.certificates.retrieve(
+   *     'certificate_id',
+   *     { tunnel_id: 'tunnel_id' },
+   *   );
+   * ```
+   */
+  retrieve(
+    certificateID: string,
+    params: CertificateRetrieveParams,
+    options?: RequestOptions,
+  ): APIPromise<BetaTunnelCertificate> {
+    const { tunnel_id, betas } = params;
+    return this._client.get(path`/v1/tunnels/${tunnel_id}/certificates/${certificateID}?beta=true`, {
+      ...options,
+      headers: buildHeaders([
+        { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
+        options?.headers,
+      ]),
+    });
+  }
+
+  /**
+   * The Tunnels API is in research preview. It requires the
+   * `anthropic-beta: mcp-tunnels-2026-06-22` header and may change without a
+   * deprecation period. It supersedes the Admin API endpoints at
+   * `/v1/organizations/tunnels`, which remain available during a migration window.
+   *
+   * Lists the certificates registered on a tunnel. Archived certificates are
+   * excluded unless include_archived is set.
+   *
+   * @example
+   * ```ts
+   * // Automatically fetches more pages as needed.
+   * for await (const betaTunnelCertificate of client.beta.tunnels.certificates.list(
+   *   'tunnel_id',
+   * )) {
+   *   // ...
+   * }
+   * ```
+   */
+  list(
+    tunnelID: string,
+    params: CertificateListParams | null | undefined = {},
+    options?: RequestOptions,
+  ): PagePromise<BetaTunnelCertificatesPageCursor, BetaTunnelCertificate> {
+    const { betas, ...query } = params ?? {};
+    return this._client.getAPIList(
+      path`/v1/tunnels/${tunnelID}/certificates?beta=true`,
+      PageCursor<BetaTunnelCertificate>,
+      {
+        query,
+        ...options,
+        headers: buildHeaders([
+          { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
+          options?.headers,
+        ]),
+      },
+    );
+  }
+
+  /**
+   * The Tunnels API is in research preview. It requires the
+   * `anthropic-beta: mcp-tunnels-2026-06-22` header and may change without a
+   * deprecation period. It supersedes the Admin API endpoints at
+   * `/v1/organizations/tunnels`, which remain available during a migration window.
+   *
+   * Archives a tunnel certificate, removing it from the set Anthropic trusts for the
+   * tunnel. The certificate record is retained. Archiving the last non-archived
+   * certificate is permitted; the tunnel rejects MCP traffic until a new certificate
+   * is added.
+   *
+   * @example
+   * ```ts
+   * const betaTunnelCertificate =
+   *   await client.beta.tunnels.certificates.archive(
+   *     'certificate_id',
+   *     { tunnel_id: 'tunnel_id' },
+   *   );
+   * ```
+   */
+  archive(
+    certificateID: string,
+    params: CertificateArchiveParams,
+    options?: RequestOptions,
+  ): APIPromise<BetaTunnelCertificate> {
+    const { tunnel_id, betas } = params;
+    return this._client.post(path`/v1/tunnels/${tunnel_id}/certificates/${certificateID}/archive?beta=true`, {
+      ...options,
+      headers: buildHeaders([
+        { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
+        options?.headers,
+      ]),
+    });
+  }
+}
+
+export type BetaTunnelCertificatesPageCursor = PageCursor<BetaTunnelCertificate>;
+
+/**
+ * A CA certificate attached to a tunnel.
+ */
+export interface BetaTunnelCertificate {
+  /**
+   * Unique identifier for the certificate, prefixed with `tcrt_`.
+   */
+  id: string;
+
+  /**
+   * A timestamp in RFC 3339 format
+   */
+  archived_at: string | null;
+
+  /**
+   * A timestamp in RFC 3339 format
+   */
+  created_at: string;
+
+  /**
+   * A timestamp in RFC 3339 format
+   */
+  expires_at: string | null;
+
+  /**
+   * Lowercase hex SHA-256 fingerprint of the certificate's DER encoding.
+   */
+  fingerprint: string;
+
+  /**
+   * ID of the tunnel the certificate is registered against.
+   */
+  tunnel_id: string;
+
+  type: 'tunnel_certificate';
+}
+
+export interface CertificateCreateParams {
+  /**
+   * Body param: PEM-encoded X.509 CA certificate. Must contain exactly one
+   * certificate and no private-key material. Maximum 8KB.
+   */
+  ca_certificate_pem: string;
+
+  /**
+   * Header param: Optional header to specify the beta version(s) you want to use.
+   */
+  betas?: Array<BetaAPI.AnthropicBeta>;
+}
+
+export interface CertificateRetrieveParams {
+  /**
+   * Path param: Path parameter tunnel_id
+   */
+  tunnel_id: string;
+
+  /**
+   * Header param: Optional header to specify the beta version(s) you want to use.
+   */
+  betas?: Array<BetaAPI.AnthropicBeta>;
+}
+
+export interface CertificateListParams extends PageCursorParams {
+  /**
+   * Query param: Whether to include archived certificates in the results. Defaults
+   * to false.
+   */
+  include_archived?: boolean;
+
+  /**
+   * Header param: Optional header to specify the beta version(s) you want to use.
+   */
+  betas?: Array<BetaAPI.AnthropicBeta>;
+}
+
+export interface CertificateArchiveParams {
+  /**
+   * Path param: Path parameter tunnel_id
+   */
+  tunnel_id: string;
+
+  /**
+   * Header param: Optional header to specify the beta version(s) you want to use.
+   */
+  betas?: Array<BetaAPI.AnthropicBeta>;
+}
+
+export declare namespace Certificates {
+  export {
+    type BetaTunnelCertificate as BetaTunnelCertificate,
+    type BetaTunnelCertificatesPageCursor as BetaTunnelCertificatesPageCursor,
+    type CertificateCreateParams as CertificateCreateParams,
+    type CertificateRetrieveParams as CertificateRetrieveParams,
+    type CertificateListParams as CertificateListParams,
+    type CertificateArchiveParams as CertificateArchiveParams,
+  };
+}

package/node_modules/@anthropic-ai/sdk/src/resources/beta/tunnels/index.ts

@@ -0,0 +1,23 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+export {
+  Certificates,
+  type BetaTunnelCertificate,
+  type CertificateCreateParams,
+  type CertificateRetrieveParams,
+  type CertificateListParams,
+  type CertificateArchiveParams,
+  type BetaTunnelCertificatesPageCursor,
+} from './certificates';
+export {
+  Tunnels,
+  type BetaTunnel,
+  type BetaTunnelToken,
+  type TunnelCreateParams,
+  type TunnelRetrieveParams,
+  type TunnelListParams,
+  type TunnelArchiveParams,
+  type TunnelRevealTokenParams,
+  type TunnelRotateTokenParams,
+  type BetaTunnelsPageCursor,
+} from './tunnels';

package/node_modules/@anthropic-ai/sdk/src/resources/beta/tunnels/tunnels.ts

@@ -0,0 +1,347 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+import { APIResource } from '../../../core/resource';
+import * as BetaAPI from '../beta';
+import * as CertificatesAPI from './certificates';
+import {
+  BetaTunnelCertificate,
+  BetaTunnelCertificatesPageCursor,
+  CertificateArchiveParams,
+  CertificateCreateParams,
+  CertificateListParams,
+  CertificateRetrieveParams,
+  Certificates,
+} from './certificates';
+import { APIPromise } from '../../../core/api-promise';
+import { PageCursor, type PageCursorParams, PagePromise } from '../../../core/pagination';
+import { buildHeaders } from '../../../internal/headers';
+import { RequestOptions } from '../../../internal/request-options';
+import { path } from '../../../internal/utils/path';
+
+export class Tunnels extends APIResource {
+  certificates: CertificatesAPI.Certificates = new CertificatesAPI.Certificates(this._client);
+
+  /**
+   * The Tunnels API is in research preview. It requires the
+   * `anthropic-beta: mcp-tunnels-2026-06-22` header and may change without a
+   * deprecation period. It supersedes the Admin API endpoints at
+   * `/v1/organizations/tunnels`, which remain available during a migration window.
+   *
+   * Creates a tunnel. Creation allocates a fresh hostname and provisions the tunnel;
+   * it is not idempotent. The new tunnel rejects MCP traffic until at least one CA
+   * certificate is added.
+   *
+   * @example
+   * ```ts
+   * const betaTunnel = await client.beta.tunnels.create();
+   * ```
+   */
+  create(params: TunnelCreateParams, options?: RequestOptions): APIPromise<BetaTunnel> {
+    const { betas, ...body } = params;
+    return this._client.post('/v1/tunnels?beta=true', {
+      body,
+      ...options,
+      headers: buildHeaders([
+        { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
+        options?.headers,
+      ]),
+    });
+  }
+
+  /**
+   * The Tunnels API is in research preview. It requires the
+   * `anthropic-beta: mcp-tunnels-2026-06-22` header and may change without a
+   * deprecation period. It supersedes the Admin API endpoints at
+   * `/v1/organizations/tunnels`, which remain available during a migration window.
+   *
+   * Fetches a tunnel by ID.
+   *
+   * @example
+   * ```ts
+   * const betaTunnel = await client.beta.tunnels.retrieve(
+   *   'tunnel_id',
+   * );
+   * ```
+   */
+  retrieve(
+    tunnelID: string,
+    params: TunnelRetrieveParams | null | undefined = {},
+    options?: RequestOptions,
+  ): APIPromise<BetaTunnel> {
+    const { betas } = params ?? {};
+    return this._client.get(path`/v1/tunnels/${tunnelID}?beta=true`, {
+      ...options,
+      headers: buildHeaders([
+        { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
+        options?.headers,
+      ]),
+    });
+  }
+
+  /**
+   * The Tunnels API is in research preview. It requires the
+   * `anthropic-beta: mcp-tunnels-2026-06-22` header and may change without a
+   * deprecation period. It supersedes the Admin API endpoints at
+   * `/v1/organizations/tunnels`, which remain available during a migration window.
+   *
+   * Lists tunnels. Results are ordered by creation time, newest first; archived
+   * tunnels are excluded unless include_archived is set.
+   *
+   * @example
+   * ```ts
+   * // Automatically fetches more pages as needed.
+   * for await (const betaTunnel of client.beta.tunnels.list()) {
+   *   // ...
+   * }
+   * ```
+   */
+  list(
+    params: TunnelListParams | null | undefined = {},
+    options?: RequestOptions,
+  ): PagePromise<BetaTunnelsPageCursor, BetaTunnel> {
+    const { betas, ...query } = params ?? {};
+    return this._client.getAPIList('/v1/tunnels?beta=true', PageCursor<BetaTunnel>, {
+      query,
+      ...options,
+      headers: buildHeaders([
+        { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
+        options?.headers,
+      ]),
+    });
+  }
+
+  /**
+   * The Tunnels API is in research preview. It requires the
+   * `anthropic-beta: mcp-tunnels-2026-06-22` header and may change without a
+   * deprecation period. It supersedes the Admin API endpoints at
+   * `/v1/organizations/tunnels`, which remain available during a migration window.
+   *
+   * Archives a tunnel. Archival is irreversible: every non-archived certificate on
+   * the tunnel is archived in the same operation, the hostname is retired and never
+   * re-allocated, and the tunnel token is invalidated. Retrying against an
+   * already-archived tunnel returns the existing record unchanged.
+   *
+   * @example
+   * ```ts
+   * const betaTunnel = await client.beta.tunnels.archive(
+   *   'tunnel_id',
+   * );
+   * ```
+   */
+  archive(
+    tunnelID: string,
+    params: TunnelArchiveParams | null | undefined = {},
+    options?: RequestOptions,
+  ): APIPromise<BetaTunnel> {
+    const { betas } = params ?? {};
+    return this._client.post(path`/v1/tunnels/${tunnelID}/archive?beta=true`, {
+      ...options,
+      headers: buildHeaders([
+        { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
+        options?.headers,
+      ]),
+    });
+  }
+
+  /**
+   * The Tunnels API is in research preview. It requires the
+   * `anthropic-beta: mcp-tunnels-2026-06-22` header and may change without a
+   * deprecation period. It supersedes the Admin API endpoints at
+   * `/v1/organizations/tunnels`, which remain available during a migration window.
+   *
+   * Reveals a tunnel's connector token. The value is fetched live on each call;
+   * Anthropic does not store it. Repeated calls return the same value until the
+   * token is rotated. Exposed as POST so the token does not appear in intermediary
+   * access logs.
+   *
+   * @example
+   * ```ts
+   * const betaTunnelToken =
+   *   await client.beta.tunnels.revealToken('tunnel_id');
+   * ```
+   */
+  revealToken(
+    tunnelID: string,
+    params: TunnelRevealTokenParams | null | undefined = {},
+    options?: RequestOptions,
+  ): APIPromise<BetaTunnelToken> {
+    const { betas } = params ?? {};
+    return this._client.post(path`/v1/tunnels/${tunnelID}/reveal_token?beta=true`, {
+      ...options,
+      headers: buildHeaders([
+        { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
+        options?.headers,
+      ]),
+    });
+  }
+
+  /**
+   * The Tunnels API is in research preview. It requires the
+   * `anthropic-beta: mcp-tunnels-2026-06-22` header and may change without a
+   * deprecation period. It supersedes the Admin API endpoints at
+   * `/v1/organizations/tunnels`, which remain available during a migration window.
+   *
+   * Rotates a tunnel's connector token. Rotation invalidates the current token for
+   * new connections and returns a fresh value; established connections are not
+   * severed. A connector restarted after rotation must use the new value.
+   *
+   * @example
+   * ```ts
+   * const betaTunnelToken =
+   *   await client.beta.tunnels.rotateToken('tunnel_id');
+   * ```
+   */
+  rotateToken(
+    tunnelID: string,
+    params: TunnelRotateTokenParams,
+    options?: RequestOptions,
+  ): APIPromise<BetaTunnelToken> {
+    const { betas, ...body } = params;
+    return this._client.post(path`/v1/tunnels/${tunnelID}/rotate_token?beta=true`, {
+      body,
+      ...options,
+      headers: buildHeaders([
+        { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
+        options?.headers,
+      ]),
+    });
+  }
+}
+
+export type BetaTunnelsPageCursor = PageCursor<BetaTunnel>;
+
+/**
+ * An MCP tunnel.
+ */
+export interface BetaTunnel {
+  /**
+   * Unique identifier for the tunnel, prefixed with `tnl_`.
+   */
+  id: string;
+
+  /**
+   * A timestamp in RFC 3339 format
+   */
+  archived_at: string | null;
+
+  /**
+   * A timestamp in RFC 3339 format
+   */
+  created_at: string;
+
+  /**
+   * Human-readable name for the tunnel (1-255 characters). Null if unset.
+   */
+  display_name: string | null;
+
+  /**
+   * Anthropic-assigned hostname for the tunnel. MCP server URLs whose host is a
+   * subdomain of this value are routed through the tunnel. Globally unique and never
+   * reused, even after the tunnel is archived.
+   */
+  domain: string;
+
+  type: 'tunnel';
+}
+
+/**
+ * A tunnel's connector token.
+ */
+export interface BetaTunnelToken {
+  /**
+   * Stable identifier for the current token value. Changes when the token is
+   * rotated.
+   */
+  id: string;
+
+  /**
+   * The connector token used to run the tunnel. Treat as a credential.
+   */
+  tunnel_token: string;
+
+  type: 'tunnel_token';
+}
+
+export interface TunnelCreateParams {
+  /**
+   * Body param: Optional human-readable name for the tunnel (1-255 characters).
+   */
+  display_name?: string | null;
+
+  /**
+   * Header param: Optional header to specify the beta version(s) you want to use.
+   */
+  betas?: Array<BetaAPI.AnthropicBeta>;
+}
+
+export interface TunnelRetrieveParams {
+  /**
+   * Optional header to specify the beta version(s) you want to use.
+   */
+  betas?: Array<BetaAPI.AnthropicBeta>;
+}
+
+export interface TunnelListParams extends PageCursorParams {
+  /**
+   * Query param: Whether to include archived tunnels in the results. Defaults to
+   * false.
+   */
+  include_archived?: boolean;
+
+  /**
+   * Header param: Optional header to specify the beta version(s) you want to use.
+   */
+  betas?: Array<BetaAPI.AnthropicBeta>;
+}
+
+export interface TunnelArchiveParams {
+  /**
+   * Optional header to specify the beta version(s) you want to use.
+   */
+  betas?: Array<BetaAPI.AnthropicBeta>;
+}
+
+export interface TunnelRevealTokenParams {
+  /**
+   * Optional header to specify the beta version(s) you want to use.
+   */
+  betas?: Array<BetaAPI.AnthropicBeta>;
+}
+
+export interface TunnelRotateTokenParams {
+  /**
+   * Body param: Optional free-text reason for the rotation, recorded for audit.
+   */
+  reason?: string | null;
+
+  /**
+   * Header param: Optional header to specify the beta version(s) you want to use.
+   */
+  betas?: Array<BetaAPI.AnthropicBeta>;
+}
+
+Tunnels.Certificates = Certificates;
+
+export declare namespace Tunnels {
+  export {
+    type BetaTunnel as BetaTunnel,
+    type BetaTunnelToken as BetaTunnelToken,
+    type BetaTunnelsPageCursor as BetaTunnelsPageCursor,
+    type TunnelCreateParams as TunnelCreateParams,
+    type TunnelRetrieveParams as TunnelRetrieveParams,
+    type TunnelListParams as TunnelListParams,
+    type TunnelArchiveParams as TunnelArchiveParams,
+    type TunnelRevealTokenParams as TunnelRevealTokenParams,
+    type TunnelRotateTokenParams as TunnelRotateTokenParams,
+  };
+
+  export {
+    Certificates as Certificates,
+    type BetaTunnelCertificate as BetaTunnelCertificate,
+    type BetaTunnelCertificatesPageCursor as BetaTunnelCertificatesPageCursor,
+    type CertificateCreateParams as CertificateCreateParams,
+    type CertificateRetrieveParams as CertificateRetrieveParams,
+    type CertificateListParams as CertificateListParams,
+    type CertificateArchiveParams as CertificateArchiveParams,
+  };
+}

package/node_modules/@anthropic-ai/sdk/src/resources/beta/tunnels.ts

@@ -0,0 +1,3 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+export * from './tunnels/index';