@code-yeongyu/senpi 2026.9.4 → 2026.9.5

package/node_modules/@anthropic-ai/sdk/resources/beta/organization/external-keys.d.mts

@@ -0,0 +1,272 @@
+import { APIResource } from "../../../core/resource.mjs";
+import { APIPromise } from "../../../core/api-promise.mjs";
+import { PageCursor, type PageCursorParams, PagePromise } from "../../../core/pagination.mjs";
+import { RequestOptions } from "../../../internal/request-options.mjs";
+export declare class ExternalKeys extends APIResource {
+    /**
+     * Create an external key config owned by the caller's organization.
+     *
+     * @example
+     * ```ts
+     * const betaExternalKey =
+     *   await client.beta.organization.externalKeys.create({
+     *     provider_config: {
+     *       kms_arn:
+     *         'arn:aws:kms:us-east-1:111122223333:key/abcd1234-5678-90ab-cdef-000011112222',
+     *       type: 'aws',
+     *     },
+     *   });
+     * ```
+     */
+    create(body: ExternalKeyCreateParams, options?: RequestOptions): APIPromise<BetaExternalKey>;
+    /**
+     * Retrieve a single external key config in the caller's organization by ID.
+     *
+     * @example
+     * ```ts
+     * const betaExternalKey =
+     *   await client.beta.organization.externalKeys.retrieve(
+     *     'external_key_id',
+     *   );
+     * ```
+     */
+    retrieve(externalKeyID: string, options?: RequestOptions): APIPromise<BetaExternalKey>;
+    /**
+     * Partially update an external key config. Omitted fields are left unchanged.
+     *
+     * `display_name` is always editable. `geo` and `provider_config` cannot be changed
+     * once any workspace references this config, because previously encrypted data
+     * requires the original key identity to decrypt.
+     *
+     * @example
+     * ```ts
+     * const betaExternalKey =
+     *   await client.beta.organization.externalKeys.update(
+     *     'external_key_id',
+     *   );
+     * ```
+     */
+    update(externalKeyID: string, body: ExternalKeyUpdateParams, options?: RequestOptions): APIPromise<BetaExternalKey>;
+    /**
+     * List external key configs in the caller's organization.
+     *
+     * Results are ordered by creation time (newest first). Use the `next_page` cursor
+     * from the response to fetch subsequent pages.
+     *
+     * @example
+     * ```ts
+     * // Automatically fetches more pages as needed.
+     * for await (const betaExternalKey of client.beta.organization.externalKeys.list()) {
+     *   // ...
+     * }
+     * ```
+     */
+    list(query?: ExternalKeyListParams | null | undefined, options?: RequestOptions): PagePromise<BetaExternalKeysPageCursor, BetaExternalKey>;
+    /**
+     * Delete an external key config.
+     *
+     * The request is rejected if any workspace still references this config.
+     *
+     * @example
+     * ```ts
+     * const externalKey =
+     *   await client.beta.organization.externalKeys.delete(
+     *     'external_key_id',
+     *   );
+     * ```
+     */
+    delete(externalKeyID: string, options?: RequestOptions): APIPromise<ExternalKeyDeleteResponse>;
+    /**
+     * Validate an external key config against the customer's KMS.
+     *
+     * Anthropic performs an encrypt/decrypt roundtrip against the configured KMS key
+     * and waits up to 30 seconds for the result. The response status is `success` if
+     * the roundtrip succeeded, or `failure` with an error message if it failed or
+     * timed out.
+     *
+     * @example
+     * ```ts
+     * const response =
+     *   await client.beta.organization.externalKeys.validate(
+     *     'external_key_id',
+     *   );
+     * ```
+     */
+    validate(externalKeyID: string, options?: RequestOptions): APIPromise<ExternalKeyValidateResponse>;
+}
+export type BetaExternalKeysPageCursor = PageCursor<BetaExternalKey>;
+export interface BetaAWSExternalKeyConfig {
+    /**
+     * Full ARN of the AWS KMS key. On Claude Platform on AWS the key must be a
+     * single-Region key in your organization's own AWS account; cross-account keys,
+     * multi-Region keys, and alias ARNs are rejected.
+     */
+    kms_arn: string;
+    type: 'aws';
+    /**
+     * AWS region. Derived from `kms_arn` if omitted.
+     */
+    region?: string | null;
+    /**
+     * @deprecated IAM role ARN. Deprecated — Anthropic reaches the KMS key through its
+     * own intermediate role (or, on Claude Platform on AWS, with credentials AWS
+     * issues for the Workspace); this field is ignored.
+     */
+    role_arn?: string | null;
+}
+export interface BetaAzureExternalKeyConfig {
+    /**
+     * Name of the key within the vault.
+     */
+    key_name: string;
+    /**
+     * Azure AD tenant ID.
+     */
+    tenant_id: string;
+    type: 'azure';
+    /**
+     * Key Vault data-plane URI — `https://{vault-name}.vault.azure.net` or
+     * `https://{hsm-name}.managedhsm.azure.net`.
+     */
+    vault_uri: string;
+    /**
+     * Azure AD application (client) ID. Omit to use Anthropic's multitenant app.
+     * Provide only if using a single-tenant app registration in the customer's
+     * directory.
+     */
+    client_id?: string | null;
+}
+/**
+ * Azure Key Vault provider configuration.
+ */
+export interface BetaAzureExternalKeyConfigParam {
+    /**
+     * Name of the key within the vault.
+     */
+    key_name: string;
+    /**
+     * Azure AD tenant ID.
+     */
+    tenant_id: string;
+    type: 'azure';
+    /**
+     * Key Vault data-plane URI — `https://{vault-name}.vault.azure.net` or
+     * `https://{hsm-name}.managedhsm.azure.net`.
+     */
+    vault_uri: string;
+    /**
+     * Azure AD application (client) ID. Omit to use Anthropic's multitenant app.
+     * Provide only if using a single-tenant app registration in the customer's
+     * directory.
+     */
+    client_id?: string | null;
+}
+/**
+ * CMEK external key config belonging to the caller's organization.
+ *
+ * Configs are organization-scoped. Workspaces attach to a config; once any
+ * workspace references it, the provider fields become effectively immutable
+ * (existing encrypted data needs the config for decrypt).
+ */
+export interface BetaExternalKey {
+    /**
+     * Identifier of the external key config. A tagged ID prefixed `ekey_`, or — for
+     * organizations on the Claude Platform on AWS — the AWS KMS key ARN.
+     */
+    id: string;
+    /**
+     * Whether any workspace uses this config to encrypt its data — counting live and
+     * archived workspaces (an archived workspace's data remains encrypted under the
+     * config), excluding deleted ones. Only an attached config is used by the
+     * encryption path; an `unattached` config is inert and can be deleted.
+     */
+    attachment: BetaExternalKeyAttachedAttachment | BetaExternalKeyUnattachedAttachment;
+    created_at: string;
+    /**
+     * Human-friendly display name. Null if none was set.
+     */
+    display_name: string | null;
+    /**
+     * Data residency geo. Selects which regional validator handles this key's
+     * encrypt/decrypt roundtrips.
+     */
+    geo: string;
+    /**
+     * KMS provider identity and auth coordinates.
+     */
+    provider_config: BetaAWSExternalKeyConfig | BetaGCPExternalKeyConfig | BetaAzureExternalKeyConfig;
+    type: 'external_key';
+    updated_at: string;
+}
+export interface BetaExternalKeyAttachedAttachment {
+    type: 'attached';
+}
+export interface BetaExternalKeyUnattachedAttachment {
+    type: 'unattached';
+}
+export interface BetaGCPExternalKeyConfig {
+    /**
+     * Full resource name of the Cloud KMS key.
+     */
+    key_name: string;
+    type: 'gcp';
+}
+export interface ExternalKeyDeleteResponse {
+    /**
+     * ID of the deleted External Key.
+     */
+    id: string;
+    type: 'external_key_deleted';
+}
+/**
+ * Result of a validation roundtrip against the customer's KMS.
+ *
+ * HTTP 200 for both outcomes — the operation completed; `status` says whether the
+ * key works.
+ */
+export interface ExternalKeyValidateResponse {
+    /**
+     * Error message when status is `failure`. Null otherwise.
+     */
+    error: string | null;
+    /**
+     * `success` — encrypt/decrypt roundtrip succeeded. `failure` — the roundtrip
+     * failed or timed out; see `error`.
+     */
+    status: 'failure' | 'success';
+    type: 'external_key_validation';
+}
+export interface ExternalKeyCreateParams {
+    /**
+     * KMS provider identity and auth coordinates.
+     */
+    provider_config: BetaAWSExternalKeyConfig | BetaGCPExternalKeyConfig | BetaAzureExternalKeyConfigParam;
+    /**
+     * Human-friendly display name.
+     */
+    display_name?: string | null;
+    /**
+     * Data residency geo. Only `us` is supported.
+     */
+    geo?: 'us';
+}
+export interface ExternalKeyUpdateParams {
+    /**
+     * Human-friendly display name.
+     */
+    display_name?: string | null;
+    /**
+     * Data residency geo. Only `us` is supported.
+     */
+    geo?: 'us' | null;
+    /**
+     * KMS provider identity and auth coordinates.
+     */
+    provider_config?: BetaAWSExternalKeyConfig | BetaGCPExternalKeyConfig | BetaAzureExternalKeyConfigParam | null;
+}
+export interface ExternalKeyListParams extends PageCursorParams {
+}
+export declare namespace ExternalKeys {
+    export { type BetaAWSExternalKeyConfig as BetaAWSExternalKeyConfig, type BetaAzureExternalKeyConfig as BetaAzureExternalKeyConfig, type BetaAzureExternalKeyConfigParam as BetaAzureExternalKeyConfigParam, type BetaExternalKey as BetaExternalKey, type BetaExternalKeyAttachedAttachment as BetaExternalKeyAttachedAttachment, type BetaExternalKeyUnattachedAttachment as BetaExternalKeyUnattachedAttachment, type BetaGCPExternalKeyConfig as BetaGCPExternalKeyConfig, type ExternalKeyDeleteResponse as ExternalKeyDeleteResponse, type ExternalKeyValidateResponse as ExternalKeyValidateResponse, type BetaExternalKeysPageCursor as BetaExternalKeysPageCursor, type ExternalKeyCreateParams as ExternalKeyCreateParams, type ExternalKeyUpdateParams as ExternalKeyUpdateParams, type ExternalKeyListParams as ExternalKeyListParams, };
+}
+//# sourceMappingURL=external-keys.d.mts.map

package/node_modules/@anthropic-ai/sdk/resources/beta/organization/external-keys.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-keys.d.mts","sourceRoot":"","sources":["../../../src/resources/beta/organization/external-keys.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,mCAA+B;AACrD,OAAO,EAAE,UAAU,EAAE,sCAAkC;AACvD,OAAO,EAAE,UAAU,EAAE,KAAK,gBAAgB,EAAE,WAAW,EAAE,qCAAiC;AAC1F,OAAO,EAAE,cAAc,EAAE,8CAA0C;AAGnE,qBAAa,YAAa,SAAQ,WAAW;IAC3C;;;;;;;;;;;;;;OAcG;IACH,MAAM,CAAC,IAAI,EAAE,uBAAuB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,eAAe,CAAC;IAI5F;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,eAAe,CAAC;IAItF;;;;;;;;;;;;;;OAcG;IACH,MAAM,CACJ,aAAa,EAAE,MAAM,EACrB,IAAI,EAAE,uBAAuB,EAC7B,OAAO,CAAC,EAAE,cAAc,GACvB,UAAU,CAAC,eAAe,CAAC;IAO9B;;;;;;;;;;;;;OAaG;IACH,IAAI,CACF,KAAK,GAAE,qBAAqB,GAAG,IAAI,GAAG,SAAc,EACpD,OAAO,CAAC,EAAE,cAAc,GACvB,WAAW,CAAC,0BAA0B,EAAE,eAAe,CAAC;IAO3D;;;;;;;;;;;;OAYG;IACH,MAAM,CAAC,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,yBAAyB,CAAC;IAI9F;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,2BAA2B,CAAC;CAMnG;AAED,MAAM,MAAM,0BAA0B,GAAG,UAAU,CAAC,eAAe,CAAC,CAAC;AAErE,MAAM,WAAW,wBAAwB;IACvC;;;;OAIG;IACH,OAAO,EAAE,MAAM,CAAC;IAEhB,IAAI,EAAE,KAAK,CAAC;IAEZ;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAEvB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,0BAA0B;IACzC;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IAEjB;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB,IAAI,EAAE,OAAO,CAAC;IAEd;;;OAGG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,+BAA+B;IAC9C;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IAEjB;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB,IAAI,EAAE,OAAO,CAAC;IAEd;;;OAGG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC9B;;;OAGG;IACH,EAAE,EAAE,MAAM,CAAC;IAEX;;;;;OAKG;IACH,UAAU,EAAE,iCAAiC,GAAG,mCAAmC,CAAC;IAEpF,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAE5B;;;OAGG;IACH,GAAG,EAAE,MAAM,CAAC;IAEZ;;OAEG;IACH,eAAe,EAAE,wBAAwB,GAAG,wBAAwB,GAAG,0BAA0B,CAAC;IAElG,IAAI,EAAE,cAAc,CAAC;IAErB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,iCAAiC;IAChD,IAAI,EAAE,UAAU,CAAC;CAClB;AAED,MAAM,WAAW,mCAAmC;IAClD,IAAI,EAAE,YAAY,CAAC;CACpB;AAED,MAAM,WAAW,wBAAwB;IACvC;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IAEjB,IAAI,EAAE,KAAK,CAAC;CACb;AAED,MAAM,WAAW,yBAAyB;IACxC;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IAEX,IAAI,EAAE,sBAAsB,CAAC;CAC9B;AAED;;;;;GAKG;AACH,MAAM,WAAW,2BAA2B;IAC1C;;OAEG;IACH,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAErB;;;OAGG;IACH,MAAM,EAAE,SAAS,GAAG,SAAS,CAAC;IAE9B,IAAI,EAAE,yBAAyB,CAAC;CACjC;AAED,MAAM,WAAW,uBAAuB;IACtC;;OAEG;IACH,eAAe,EAAE,wBAAwB,GAAG,wBAAwB,GAAG,+BAA+B,CAAC;IAEvG;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAE7B;;OAEG;IACH,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ;AAED,MAAM,WAAW,uBAAuB;IACtC;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAE7B;;OAEG;IACH,GAAG,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IAElB;;OAEG;IACH,eAAe,CAAC,EACZ,wBAAwB,GACxB,wBAAwB,GACxB,+BAA+B,GAC/B,IAAI,CAAC;CACV;AAED,MAAM,WAAW,qBAAsB,SAAQ,gBAAgB;CAAG;AAElE,MAAM,CAAC,OAAO,WAAW,YAAY,CAAC;IACpC,OAAO,EACL,KAAK,wBAAwB,IAAI,wBAAwB,EACzD,KAAK,0BAA0B,IAAI,0BAA0B,EAC7D,KAAK,+BAA+B,IAAI,+BAA+B,EACvE,KAAK,eAAe,IAAI,eAAe,EACvC,KAAK,iCAAiC,IAAI,iCAAiC,EAC3E,KAAK,mCAAmC,IAAI,mCAAmC,EAC/E,KAAK,wBAAwB,IAAI,wBAAwB,EACzD,KAAK,yBAAyB,IAAI,yBAAyB,EAC3D,KAAK,2BAA2B,IAAI,2BAA2B,EAC/D,KAAK,0BAA0B,IAAI,0BAA0B,EAC7D,KAAK,uBAAuB,IAAI,uBAAuB,EACvD,KAAK,uBAAuB,IAAI,uBAAuB,EACvD,KAAK,qBAAqB,IAAI,qBAAqB,GACpD,CAAC;CACH"}

package/node_modules/@anthropic-ai/sdk/resources/beta/organization/external-keys.d.ts

@@ -0,0 +1,272 @@
+import { APIResource } from "../../../core/resource.js";
+import { APIPromise } from "../../../core/api-promise.js";
+import { PageCursor, type PageCursorParams, PagePromise } from "../../../core/pagination.js";
+import { RequestOptions } from "../../../internal/request-options.js";
+export declare class ExternalKeys extends APIResource {
+    /**
+     * Create an external key config owned by the caller's organization.
+     *
+     * @example
+     * ```ts
+     * const betaExternalKey =
+     *   await client.beta.organization.externalKeys.create({
+     *     provider_config: {
+     *       kms_arn:
+     *         'arn:aws:kms:us-east-1:111122223333:key/abcd1234-5678-90ab-cdef-000011112222',
+     *       type: 'aws',
+     *     },
+     *   });
+     * ```
+     */
+    create(body: ExternalKeyCreateParams, options?: RequestOptions): APIPromise<BetaExternalKey>;
+    /**
+     * Retrieve a single external key config in the caller's organization by ID.
+     *
+     * @example
+     * ```ts
+     * const betaExternalKey =
+     *   await client.beta.organization.externalKeys.retrieve(
+     *     'external_key_id',
+     *   );
+     * ```
+     */
+    retrieve(externalKeyID: string, options?: RequestOptions): APIPromise<BetaExternalKey>;
+    /**
+     * Partially update an external key config. Omitted fields are left unchanged.
+     *
+     * `display_name` is always editable. `geo` and `provider_config` cannot be changed
+     * once any workspace references this config, because previously encrypted data
+     * requires the original key identity to decrypt.
+     *
+     * @example
+     * ```ts
+     * const betaExternalKey =
+     *   await client.beta.organization.externalKeys.update(
+     *     'external_key_id',
+     *   );
+     * ```
+     */
+    update(externalKeyID: string, body: ExternalKeyUpdateParams, options?: RequestOptions): APIPromise<BetaExternalKey>;
+    /**
+     * List external key configs in the caller's organization.
+     *
+     * Results are ordered by creation time (newest first). Use the `next_page` cursor
+     * from the response to fetch subsequent pages.
+     *
+     * @example
+     * ```ts
+     * // Automatically fetches more pages as needed.
+     * for await (const betaExternalKey of client.beta.organization.externalKeys.list()) {
+     *   // ...
+     * }
+     * ```
+     */
+    list(query?: ExternalKeyListParams | null | undefined, options?: RequestOptions): PagePromise<BetaExternalKeysPageCursor, BetaExternalKey>;
+    /**
+     * Delete an external key config.
+     *
+     * The request is rejected if any workspace still references this config.
+     *
+     * @example
+     * ```ts
+     * const externalKey =
+     *   await client.beta.organization.externalKeys.delete(
+     *     'external_key_id',
+     *   );
+     * ```
+     */
+    delete(externalKeyID: string, options?: RequestOptions): APIPromise<ExternalKeyDeleteResponse>;
+    /**
+     * Validate an external key config against the customer's KMS.
+     *
+     * Anthropic performs an encrypt/decrypt roundtrip against the configured KMS key
+     * and waits up to 30 seconds for the result. The response status is `success` if
+     * the roundtrip succeeded, or `failure` with an error message if it failed or
+     * timed out.
+     *
+     * @example
+     * ```ts
+     * const response =
+     *   await client.beta.organization.externalKeys.validate(
+     *     'external_key_id',
+     *   );
+     * ```
+     */
+    validate(externalKeyID: string, options?: RequestOptions): APIPromise<ExternalKeyValidateResponse>;
+}
+export type BetaExternalKeysPageCursor = PageCursor<BetaExternalKey>;
+export interface BetaAWSExternalKeyConfig {
+    /**
+     * Full ARN of the AWS KMS key. On Claude Platform on AWS the key must be a
+     * single-Region key in your organization's own AWS account; cross-account keys,
+     * multi-Region keys, and alias ARNs are rejected.
+     */
+    kms_arn: string;
+    type: 'aws';
+    /**
+     * AWS region. Derived from `kms_arn` if omitted.
+     */
+    region?: string | null;
+    /**
+     * @deprecated IAM role ARN. Deprecated — Anthropic reaches the KMS key through its
+     * own intermediate role (or, on Claude Platform on AWS, with credentials AWS
+     * issues for the Workspace); this field is ignored.
+     */
+    role_arn?: string | null;
+}
+export interface BetaAzureExternalKeyConfig {
+    /**
+     * Name of the key within the vault.
+     */
+    key_name: string;
+    /**
+     * Azure AD tenant ID.
+     */
+    tenant_id: string;
+    type: 'azure';
+    /**
+     * Key Vault data-plane URI — `https://{vault-name}.vault.azure.net` or
+     * `https://{hsm-name}.managedhsm.azure.net`.
+     */
+    vault_uri: string;
+    /**
+     * Azure AD application (client) ID. Omit to use Anthropic's multitenant app.
+     * Provide only if using a single-tenant app registration in the customer's
+     * directory.
+     */
+    client_id?: string | null;
+}
+/**
+ * Azure Key Vault provider configuration.
+ */
+export interface BetaAzureExternalKeyConfigParam {
+    /**
+     * Name of the key within the vault.
+     */
+    key_name: string;
+    /**
+     * Azure AD tenant ID.
+     */
+    tenant_id: string;
+    type: 'azure';
+    /**
+     * Key Vault data-plane URI — `https://{vault-name}.vault.azure.net` or
+     * `https://{hsm-name}.managedhsm.azure.net`.
+     */
+    vault_uri: string;
+    /**
+     * Azure AD application (client) ID. Omit to use Anthropic's multitenant app.
+     * Provide only if using a single-tenant app registration in the customer's
+     * directory.
+     */
+    client_id?: string | null;
+}
+/**
+ * CMEK external key config belonging to the caller's organization.
+ *
+ * Configs are organization-scoped. Workspaces attach to a config; once any
+ * workspace references it, the provider fields become effectively immutable
+ * (existing encrypted data needs the config for decrypt).
+ */
+export interface BetaExternalKey {
+    /**
+     * Identifier of the external key config. A tagged ID prefixed `ekey_`, or — for
+     * organizations on the Claude Platform on AWS — the AWS KMS key ARN.
+     */
+    id: string;
+    /**
+     * Whether any workspace uses this config to encrypt its data — counting live and
+     * archived workspaces (an archived workspace's data remains encrypted under the
+     * config), excluding deleted ones. Only an attached config is used by the
+     * encryption path; an `unattached` config is inert and can be deleted.
+     */
+    attachment: BetaExternalKeyAttachedAttachment | BetaExternalKeyUnattachedAttachment;
+    created_at: string;
+    /**
+     * Human-friendly display name. Null if none was set.
+     */
+    display_name: string | null;
+    /**
+     * Data residency geo. Selects which regional validator handles this key's
+     * encrypt/decrypt roundtrips.
+     */
+    geo: string;
+    /**
+     * KMS provider identity and auth coordinates.
+     */
+    provider_config: BetaAWSExternalKeyConfig | BetaGCPExternalKeyConfig | BetaAzureExternalKeyConfig;
+    type: 'external_key';
+    updated_at: string;
+}
+export interface BetaExternalKeyAttachedAttachment {
+    type: 'attached';
+}
+export interface BetaExternalKeyUnattachedAttachment {
+    type: 'unattached';
+}
+export interface BetaGCPExternalKeyConfig {
+    /**
+     * Full resource name of the Cloud KMS key.
+     */
+    key_name: string;
+    type: 'gcp';
+}
+export interface ExternalKeyDeleteResponse {
+    /**
+     * ID of the deleted External Key.
+     */
+    id: string;
+    type: 'external_key_deleted';
+}
+/**
+ * Result of a validation roundtrip against the customer's KMS.
+ *
+ * HTTP 200 for both outcomes — the operation completed; `status` says whether the
+ * key works.
+ */
+export interface ExternalKeyValidateResponse {
+    /**
+     * Error message when status is `failure`. Null otherwise.
+     */
+    error: string | null;
+    /**
+     * `success` — encrypt/decrypt roundtrip succeeded. `failure` — the roundtrip
+     * failed or timed out; see `error`.
+     */
+    status: 'failure' | 'success';
+    type: 'external_key_validation';
+}
+export interface ExternalKeyCreateParams {
+    /**
+     * KMS provider identity and auth coordinates.
+     */
+    provider_config: BetaAWSExternalKeyConfig | BetaGCPExternalKeyConfig | BetaAzureExternalKeyConfigParam;
+    /**
+     * Human-friendly display name.
+     */
+    display_name?: string | null;
+    /**
+     * Data residency geo. Only `us` is supported.
+     */
+    geo?: 'us';
+}
+export interface ExternalKeyUpdateParams {
+    /**
+     * Human-friendly display name.
+     */
+    display_name?: string | null;
+    /**
+     * Data residency geo. Only `us` is supported.
+     */
+    geo?: 'us' | null;
+    /**
+     * KMS provider identity and auth coordinates.
+     */
+    provider_config?: BetaAWSExternalKeyConfig | BetaGCPExternalKeyConfig | BetaAzureExternalKeyConfigParam | null;
+}
+export interface ExternalKeyListParams extends PageCursorParams {
+}
+export declare namespace ExternalKeys {
+    export { type BetaAWSExternalKeyConfig as BetaAWSExternalKeyConfig, type BetaAzureExternalKeyConfig as BetaAzureExternalKeyConfig, type BetaAzureExternalKeyConfigParam as BetaAzureExternalKeyConfigParam, type BetaExternalKey as BetaExternalKey, type BetaExternalKeyAttachedAttachment as BetaExternalKeyAttachedAttachment, type BetaExternalKeyUnattachedAttachment as BetaExternalKeyUnattachedAttachment, type BetaGCPExternalKeyConfig as BetaGCPExternalKeyConfig, type ExternalKeyDeleteResponse as ExternalKeyDeleteResponse, type ExternalKeyValidateResponse as ExternalKeyValidateResponse, type BetaExternalKeysPageCursor as BetaExternalKeysPageCursor, type ExternalKeyCreateParams as ExternalKeyCreateParams, type ExternalKeyUpdateParams as ExternalKeyUpdateParams, type ExternalKeyListParams as ExternalKeyListParams, };
+}
+//# sourceMappingURL=external-keys.d.ts.map

package/node_modules/@anthropic-ai/sdk/resources/beta/organization/external-keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-keys.d.ts","sourceRoot":"","sources":["../../../src/resources/beta/organization/external-keys.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,kCAA+B;AACrD,OAAO,EAAE,UAAU,EAAE,qCAAkC;AACvD,OAAO,EAAE,UAAU,EAAE,KAAK,gBAAgB,EAAE,WAAW,EAAE,oCAAiC;AAC1F,OAAO,EAAE,cAAc,EAAE,6CAA0C;AAGnE,qBAAa,YAAa,SAAQ,WAAW;IAC3C;;;;;;;;;;;;;;OAcG;IACH,MAAM,CAAC,IAAI,EAAE,uBAAuB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,eAAe,CAAC;IAI5F;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,eAAe,CAAC;IAItF;;;;;;;;;;;;;;OAcG;IACH,MAAM,CACJ,aAAa,EAAE,MAAM,EACrB,IAAI,EAAE,uBAAuB,EAC7B,OAAO,CAAC,EAAE,cAAc,GACvB,UAAU,CAAC,eAAe,CAAC;IAO9B;;;;;;;;;;;;;OAaG;IACH,IAAI,CACF,KAAK,GAAE,qBAAqB,GAAG,IAAI,GAAG,SAAc,EACpD,OAAO,CAAC,EAAE,cAAc,GACvB,WAAW,CAAC,0BAA0B,EAAE,eAAe,CAAC;IAO3D;;;;;;;;;;;;OAYG;IACH,MAAM,CAAC,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,yBAAyB,CAAC;IAI9F;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,2BAA2B,CAAC;CAMnG;AAED,MAAM,MAAM,0BAA0B,GAAG,UAAU,CAAC,eAAe,CAAC,CAAC;AAErE,MAAM,WAAW,wBAAwB;IACvC;;;;OAIG;IACH,OAAO,EAAE,MAAM,CAAC;IAEhB,IAAI,EAAE,KAAK,CAAC;IAEZ;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAEvB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,0BAA0B;IACzC;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IAEjB;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB,IAAI,EAAE,OAAO,CAAC;IAEd;;;OAGG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,+BAA+B;IAC9C;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IAEjB;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB,IAAI,EAAE,OAAO,CAAC;IAEd;;;OAGG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC9B;;;OAGG;IACH,EAAE,EAAE,MAAM,CAAC;IAEX;;;;;OAKG;IACH,UAAU,EAAE,iCAAiC,GAAG,mCAAmC,CAAC;IAEpF,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAE5B;;;OAGG;IACH,GAAG,EAAE,MAAM,CAAC;IAEZ;;OAEG;IACH,eAAe,EAAE,wBAAwB,GAAG,wBAAwB,GAAG,0BAA0B,CAAC;IAElG,IAAI,EAAE,cAAc,CAAC;IAErB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,iCAAiC;IAChD,IAAI,EAAE,UAAU,CAAC;CAClB;AAED,MAAM,WAAW,mCAAmC;IAClD,IAAI,EAAE,YAAY,CAAC;CACpB;AAED,MAAM,WAAW,wBAAwB;IACvC;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IAEjB,IAAI,EAAE,KAAK,CAAC;CACb;AAED,MAAM,WAAW,yBAAyB;IACxC;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IAEX,IAAI,EAAE,sBAAsB,CAAC;CAC9B;AAED;;;;;GAKG;AACH,MAAM,WAAW,2BAA2B;IAC1C;;OAEG;IACH,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAErB;;;OAGG;IACH,MAAM,EAAE,SAAS,GAAG,SAAS,CAAC;IAE9B,IAAI,EAAE,yBAAyB,CAAC;CACjC;AAED,MAAM,WAAW,uBAAuB;IACtC;;OAEG;IACH,eAAe,EAAE,wBAAwB,GAAG,wBAAwB,GAAG,+BAA+B,CAAC;IAEvG;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAE7B;;OAEG;IACH,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ;AAED,MAAM,WAAW,uBAAuB;IACtC;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAE7B;;OAEG;IACH,GAAG,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IAElB;;OAEG;IACH,eAAe,CAAC,EACZ,wBAAwB,GACxB,wBAAwB,GACxB,+BAA+B,GAC/B,IAAI,CAAC;CACV;AAED,MAAM,WAAW,qBAAsB,SAAQ,gBAAgB;CAAG;AAElE,MAAM,CAAC,OAAO,WAAW,YAAY,CAAC;IACpC,OAAO,EACL,KAAK,wBAAwB,IAAI,wBAAwB,EACzD,KAAK,0BAA0B,IAAI,0BAA0B,EAC7D,KAAK,+BAA+B,IAAI,+BAA+B,EACvE,KAAK,eAAe,IAAI,eAAe,EACvC,KAAK,iCAAiC,IAAI,iCAAiC,EAC3E,KAAK,mCAAmC,IAAI,mCAAmC,EAC/E,KAAK,wBAAwB,IAAI,wBAAwB,EACzD,KAAK,yBAAyB,IAAI,yBAAyB,EAC3D,KAAK,2BAA2B,IAAI,2BAA2B,EAC/D,KAAK,0BAA0B,IAAI,0BAA0B,EAC7D,KAAK,uBAAuB,IAAI,uBAAuB,EACvD,KAAK,uBAAuB,IAAI,uBAAuB,EACvD,KAAK,qBAAqB,IAAI,qBAAqB,GACpD,CAAC;CACH"}

package/node_modules/@anthropic-ai/sdk/resources/beta/organization/external-keys.js

@@ -0,0 +1,119 @@
+"use strict";
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ExternalKeys = void 0;
+const resource_1 = require("../../../core/resource.js");
+const pagination_1 = require("../../../core/pagination.js");
+const path_1 = require("../../../internal/utils/path.js");
+class ExternalKeys extends resource_1.APIResource {
+    /**
+     * Create an external key config owned by the caller's organization.
+     *
+     * @example
+     * ```ts
+     * const betaExternalKey =
+     *   await client.beta.organization.externalKeys.create({
+     *     provider_config: {
+     *       kms_arn:
+     *         'arn:aws:kms:us-east-1:111122223333:key/abcd1234-5678-90ab-cdef-000011112222',
+     *       type: 'aws',
+     *     },
+     *   });
+     * ```
+     */
+    create(body, options) {
+        return this._client.post('/v1/organizations/external_keys?beta=true', { body, ...options });
+    }
+    /**
+     * Retrieve a single external key config in the caller's organization by ID.
+     *
+     * @example
+     * ```ts
+     * const betaExternalKey =
+     *   await client.beta.organization.externalKeys.retrieve(
+     *     'external_key_id',
+     *   );
+     * ```
+     */
+    retrieve(externalKeyID, options) {
+        return this._client.get((0, path_1.path) `/v1/organizations/external_keys/${externalKeyID}?beta=true`, options);
+    }
+    /**
+     * Partially update an external key config. Omitted fields are left unchanged.
+     *
+     * `display_name` is always editable. `geo` and `provider_config` cannot be changed
+     * once any workspace references this config, because previously encrypted data
+     * requires the original key identity to decrypt.
+     *
+     * @example
+     * ```ts
+     * const betaExternalKey =
+     *   await client.beta.organization.externalKeys.update(
+     *     'external_key_id',
+     *   );
+     * ```
+     */
+    update(externalKeyID, body, options) {
+        return this._client.post((0, path_1.path) `/v1/organizations/external_keys/${externalKeyID}?beta=true`, {
+            body,
+            ...options,
+        });
+    }
+    /**
+     * List external key configs in the caller's organization.
+     *
+     * Results are ordered by creation time (newest first). Use the `next_page` cursor
+     * from the response to fetch subsequent pages.
+     *
+     * @example
+     * ```ts
+     * // Automatically fetches more pages as needed.
+     * for await (const betaExternalKey of client.beta.organization.externalKeys.list()) {
+     *   // ...
+     * }
+     * ```
+     */
+    list(query = {}, options) {
+        return this._client.getAPIList('/v1/organizations/external_keys?beta=true', (pagination_1.PageCursor), {
+            query,
+            ...options,
+        });
+    }
+    /**
+     * Delete an external key config.
+     *
+     * The request is rejected if any workspace still references this config.
+     *
+     * @example
+     * ```ts
+     * const externalKey =
+     *   await client.beta.organization.externalKeys.delete(
+     *     'external_key_id',
+     *   );
+     * ```
+     */
+    delete(externalKeyID, options) {
+        return this._client.delete((0, path_1.path) `/v1/organizations/external_keys/${externalKeyID}?beta=true`, options);
+    }
+    /**
+     * Validate an external key config against the customer's KMS.
+     *
+     * Anthropic performs an encrypt/decrypt roundtrip against the configured KMS key
+     * and waits up to 30 seconds for the result. The response status is `success` if
+     * the roundtrip succeeded, or `failure` with an error message if it failed or
+     * timed out.
+     *
+     * @example
+     * ```ts
+     * const response =
+     *   await client.beta.organization.externalKeys.validate(
+     *     'external_key_id',
+     *   );
+     * ```
+     */
+    validate(externalKeyID, options) {
+        return this._client.post((0, path_1.path) `/v1/organizations/external_keys/${externalKeyID}/validate?beta=true`, options);
+    }
+}
+exports.ExternalKeys = ExternalKeys;
+//# sourceMappingURL=external-keys.js.map

package/node_modules/@anthropic-ai/sdk/resources/beta/organization/external-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-keys.js","sourceRoot":"","sources":["../../../src/resources/beta/organization/external-keys.ts"],"names":[],"mappings":";AAAA,sFAAsF;;;AAEtF,wDAAqD;AAErD,4DAA0F;AAE1F,0DAAoD;AAEpD,MAAa,YAAa,SAAQ,sBAAW;IAC3C;;;;;;;;;;;;;;OAcG;IACH,MAAM,CAAC,IAA6B,EAAE,OAAwB;QAC5D,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,2CAA2C,EAAE,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IAC9F,CAAC;IAED;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,aAAqB,EAAE,OAAwB;QACtD,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAA,WAAI,EAAA,mCAAmC,aAAa,YAAY,EAAE,OAAO,CAAC,CAAC;IACrG,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,MAAM,CACJ,aAAqB,EACrB,IAA6B,EAC7B,OAAwB;QAExB,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAA,WAAI,EAAA,mCAAmC,aAAa,YAAY,EAAE;YACzF,IAAI;YACJ,GAAG,OAAO;SACX,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,IAAI,CACF,QAAkD,EAAE,EACpD,OAAwB;QAExB,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,2CAA2C,EAAE,CAAA,uBAA2B,CAAA,EAAE;YACvG,KAAK;YACL,GAAG,OAAO;SACX,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,MAAM,CAAC,aAAqB,EAAE,OAAwB;QACpD,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAA,WAAI,EAAA,mCAAmC,aAAa,YAAY,EAAE,OAAO,CAAC,CAAC;IACxG,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CAAC,aAAqB,EAAE,OAAwB;QACtD,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CACtB,IAAA,WAAI,EAAA,mCAAmC,aAAa,qBAAqB,EACzE,OAAO,CACR,CAAC;IACJ,CAAC;CACF;AA5HD,oCA4HC"}