@code-yeongyu/senpi 2026.9.4 → 2026.9.5

package/node_modules/@anthropic-ai/sdk/resources/beta/organization/federation/issuers.d.ts

@@ -0,0 +1,353 @@
+import { APIResource } from "../../../../core/resource.js";
+import * as BetaAPI from "../../beta.js";
+import { APIPromise } from "../../../../core/api-promise.js";
+import { PageCursor, type PageCursorParams, PagePromise } from "../../../../core/pagination.js";
+import { RequestOptions } from "../../../../internal/request-options.js";
+export declare class Issuers extends APIResource {
+    /**
+     * **Requires an OAuth access token with the `org:admin` scope**, from
+     * `ant auth login --scope org:admin` or a workload identity federation rule; Admin
+     * API keys are not accepted. See
+     * [Manage WIF with the Admin API](/docs/en/manage-claude/wif-admin-api).
+     *
+     * Register an OIDC issuer that Anthropic will trust for workload identity
+     * federation in your organization.
+     *
+     * The `jwks` field controls how the issuer's signing keys are obtained and takes
+     * one of three shapes selected by `type`: `discovery` (resolve keys through OIDC
+     * discovery), `explicit_url` (fetch keys from a fixed JWKS URL), or `inline`
+     * (provide a static key set). When `jwks.type` is `discovery` and no
+     * `discovery_base` is set, the issuer URL must be publicly reachable over HTTPS so
+     * Anthropic can fetch the discovery document; for `explicit_url` and `inline`
+     * modes the issuer URL is only matched as the JWT's `iss` claim and is not
+     * fetched.
+     *
+     * @example
+     * ```ts
+     * const betaFederationIssuer =
+     *   await client.beta.organization.federation.issuers.create({
+     *     issuer_url: 'x',
+     *     name: 'x',
+     *   });
+     * ```
+     */
+    create(params: IssuerCreateParams, options?: RequestOptions): APIPromise<BetaFederationIssuer>;
+    /**
+     * **Requires an OAuth access token with the `org:admin` scope**, from
+     * `ant auth login --scope org:admin` or a workload identity federation rule; Admin
+     * API keys are not accepted. See
+     * [Manage WIF with the Admin API](/docs/en/manage-claude/wif-admin-api).
+     *
+     * Retrieve a federation issuer by its ID (`fdis_...`).
+     *
+     * @example
+     * ```ts
+     * const betaFederationIssuer =
+     *   await client.beta.organization.federation.issuers.retrieve(
+     *     'federation_issuer_id',
+     *   );
+     * ```
+     */
+    retrieve(federationIssuerID: string, params?: IssuerRetrieveParams | null | undefined, options?: RequestOptions): APIPromise<BetaFederationIssuer>;
+    /**
+     * **Requires an OAuth access token with the `org:admin` scope**, from
+     * `ant auth login --scope org:admin` or a workload identity federation rule; Admin
+     * API keys are not accepted. See
+     * [Manage WIF with the Admin API](/docs/en/manage-claude/wif-admin-api).
+     *
+     * Partially update a federation issuer.
+     *
+     * Setting `jwks` replaces the full JWKS shape at once. Archived issuers cannot be
+     * updated; this returns 400. Create a new issuer instead.
+     *
+     * Updating an issuer that backs a rule with a scope outside `workspace:developer`
+     * or `workspace:inference` requires a Console session.
+     *
+     * @example
+     * ```ts
+     * const betaFederationIssuer =
+     *   await client.beta.organization.federation.issuers.update(
+     *     'federation_issuer_id',
+     *   );
+     * ```
+     */
+    update(federationIssuerID: string, params: IssuerUpdateParams, options?: RequestOptions): APIPromise<BetaFederationIssuer>;
+    /**
+     * **Requires an OAuth access token with the `org:admin` scope**, from
+     * `ant auth login --scope org:admin` or a workload identity federation rule; Admin
+     * API keys are not accepted. See
+     * [Manage WIF with the Admin API](/docs/en/manage-claude/wif-admin-api).
+     *
+     * List federation issuers in your organization.
+     *
+     * Archived issuers are excluded unless `include_archived=true`.
+     *
+     * @example
+     * ```ts
+     * // Automatically fetches more pages as needed.
+     * for await (const betaFederationIssuer of client.beta.organization.federation.issuers.list()) {
+     *   // ...
+     * }
+     * ```
+     */
+    list(params?: IssuerListParams | null | undefined, options?: RequestOptions): PagePromise<BetaFederationIssuersPageCursor, BetaFederationIssuer>;
+    /**
+     * **Requires an OAuth access token with the `org:admin` scope**, from
+     * `ant auth login --scope org:admin` or a workload identity federation rule; Admin
+     * API keys are not accepted. See
+     * [Manage WIF with the Admin API](/docs/en/manage-claude/wif-admin-api).
+     *
+     * Archive a federation issuer.
+     *
+     * Idempotent; re-archiving returns the issuer with its original `archived_at`.
+     * Rejected with 400 if any live (non-archived) federation rule still references
+     * the issuer; archive those rules first (a rule's issuer cannot be changed), or
+     * recreate them against another issuer.
+     *
+     * @example
+     * ```ts
+     * const betaFederationIssuer =
+     *   await client.beta.organization.federation.issuers.archive(
+     *     'federation_issuer_id',
+     *   );
+     * ```
+     */
+    archive(federationIssuerID: string, params?: IssuerArchiveParams | null | undefined, options?: RequestOptions): APIPromise<BetaFederationIssuer>;
+}
+export type BetaFederationIssuersPageCursor = PageCursor<BetaFederationIssuer>;
+/**
+ * Registered external OIDC identity provider.
+ *
+ * Records an external IdP the organization trusts for the RFC 7523 jwt-bearer
+ * grant. The `issuer_url` must match the JWT `iss` claim exactly.
+ */
+export interface BetaFederationIssuer {
+    /**
+     * Tagged ID of the federation issuer.
+     */
+    id: string;
+    /**
+     * If set, all rules referencing this issuer reject token exchange.
+     */
+    archived_at: string | null;
+    /**
+     * Tagged ID (`user_`/`svac_`) of the actor that archived this issuer.
+     */
+    archived_by_actor_id: string | null;
+    /**
+     * Whether the jwt-bearer exchange enforces JTI single-use (replay protection) for
+     * tokens from this issuer. Applies only to assertions carrying a `jti` claim;
+     * tokens without one are accepted without single-use enforcement.
+     */
+    check_jti: boolean;
+    /**
+     * When this issuer was created.
+     */
+    created_at: string;
+    /**
+     * Tagged ID (`user_`/`svac_`) of the actor that created this issuer.
+     */
+    created_by_actor_id: string | null;
+    /**
+     * The `iss` claim value. Incoming JWTs must match exactly.
+     */
+    issuer_url: string;
+    /**
+     * How signing keys are obtained for signature verification.
+     */
+    jwks: BetaJWKSDiscovery | BetaJWKSExplicitURL | BetaJWKSInline;
+    /**
+     * If set, Anthropic's JWKS poller has paused polling for this issuer after
+     * repeated fetch failures. Re-enable by sending `jwks_polling_disabled: false` via
+     * the issuer update endpoint (POST) once the upstream JWKS endpoint is fixed. An
+     * OAuth caller cannot send this when the issuer backs a rule with any scope other
+     * than `workspace:developer` or `workspace:inference`; use a Console session.
+     */
+    jwks_polling_disabled_at: string | null;
+    /**
+     * Maximum allowed iat→exp spread for assertions from this issuer (1-176400
+     * seconds, i.e. up to 49h). Assertions must carry both `iat` and `exp`; a missing
+     * `iat` is rejected.
+     */
+    max_jwt_lifetime_seconds: number;
+    /**
+     * Admin-chosen slug identifier.
+     */
+    name: string;
+    /**
+     * Status of automatic JWKS polling for a federation issuer.
+     *
+     * Anthropic periodically fetches the issuer's signing keys in the background.
+     * These fields summarize the most recent fetches so the health of the JWKS
+     * endpoint can be monitored.
+     */
+    poll_status: BetaFederationIssuerPollStatus | null;
+    type: 'federation_issuer';
+    /**
+     * When this issuer was last updated.
+     */
+    updated_at: string;
+    /**
+     * Tagged ID (`user_`/`svac_`) of the actor that last updated this issuer.
+     */
+    updated_by_actor_id: string | null;
+}
+/**
+ * Status of automatic JWKS polling for a federation issuer.
+ *
+ * Anthropic periodically fetches the issuer's signing keys in the background.
+ * These fields summarize the most recent fetches so the health of the JWKS
+ * endpoint can be monitored.
+ */
+export interface BetaFederationIssuerPollStatus {
+    /**
+     * Consecutive fetch failures since the last success.
+     */
+    consecutive_failures: number;
+    /**
+     * When the last successful fetch completed.
+     */
+    last_fetched_at: string | null;
+    /**
+     * When the next fetch is scheduled. Null if paused.
+     */
+    next_poll_at: string | null;
+}
+/**
+ * JWKS via the issuer's OIDC discovery document.
+ */
+export interface BetaJWKSDiscovery {
+    type: 'discovery';
+    /**
+     * Optional custom CA (PEM) for TLS verification of the JWKS fetch.
+     */
+    ca_cert_pem?: string | null;
+    /**
+     * Set when the discovery URL differs from `issuer_url`.
+     */
+    discovery_base?: string | null;
+}
+/**
+ * JWKS fetched from a fixed endpoint.
+ */
+export interface BetaJWKSExplicitURL {
+    type: 'explicit_url';
+    /**
+     * JWKS endpoint.
+     */
+    url: string;
+    /**
+     * Optional custom CA (PEM) for TLS verification of the JWKS fetch.
+     */
+    ca_cert_pem?: string | null;
+}
+/**
+ * JWKS supplied directly; no network fetch.
+ */
+export interface BetaJWKSInline {
+    /**
+     * Inline JWK objects.
+     */
+    keys: Array<{
+        [key: string]: unknown;
+    }>;
+    type: 'inline';
+}
+export interface IssuerCreateParams {
+    /**
+     * Body param: The `iss` claim value to match against.
+     */
+    issuer_url: string;
+    /**
+     * Body param: Slug identifier (lowercase, digits, hyphens). Unique within the
+     * organization; a duplicate name returns 409.
+     */
+    name: string;
+    /**
+     * Body param: Whether the jwt-bearer exchange enforces JTI single-use (replay
+     * protection) for tokens from this issuer. Defaults to true. Applies only to
+     * assertions carrying a `jti` claim; tokens without one are accepted without
+     * single-use enforcement.
+     */
+    check_jti?: boolean | null;
+    /**
+     * Body param: How signing keys are obtained. Defaults to OIDC discovery.
+     */
+    jwks?: BetaJWKSDiscovery | BetaJWKSExplicitURL | BetaJWKSInline;
+    /**
+     * Body param: Maximum allowed iat→exp spread for assertions from this issuer
+     * (1-176400 seconds, i.e. up to 49h). Defaults to 3600 (1h). Assertions must carry
+     * both `iat` and `exp`; a missing `iat` is rejected.
+     */
+    max_jwt_lifetime_seconds?: number | null;
+    /**
+     * Header param: Optional header to specify the beta version(s) you want to use.
+     */
+    betas?: Array<BetaAPI.AnthropicBeta>;
+}
+export interface IssuerRetrieveParams {
+    /**
+     * Optional header to specify the beta version(s) you want to use.
+     */
+    betas?: Array<BetaAPI.AnthropicBeta>;
+}
+export interface IssuerUpdateParams {
+    /**
+     * Body param: Whether the jwt-bearer exchange enforces JTI single-use (replay
+     * protection) for tokens from this issuer. Applies only to assertions carrying a
+     * `jti` claim; tokens without one are accepted without single-use enforcement.
+     */
+    check_jti?: boolean | null;
+    /**
+     * Body param: Replaces the `iss` claim value to match against. For discovery-mode
+     * issuers without a `discovery_base`, this is also the URL Anthropic fetches the
+     * OIDC discovery document and signing keys from, so changing it repoints the JWKS
+     * source. Changing the issuer URL to a well-known shared platform is rejected
+     * while any live rule under this issuer would not constrain tenant identity.
+     */
+    issuer_url?: string | null;
+    /**
+     * Body param: Replaces the entire JWKS configuration.
+     */
+    jwks?: BetaJWKSDiscovery | BetaJWKSExplicitURL | BetaJWKSInline | null;
+    /**
+     * Body param: Only `false` is accepted, to re-enable polling after the system
+     * pauses it. Polling is paused automatically; sending `true` is rejected.
+     */
+    jwks_polling_disabled?: boolean | null;
+    /**
+     * Body param: Maximum allowed iat→exp spread for assertions from this issuer
+     * (1-176400 seconds, i.e. up to 49h). Assertions must carry both `iat` and `exp`;
+     * a missing `iat` is rejected.
+     */
+    max_jwt_lifetime_seconds?: number | null;
+    /**
+     * Body param: Replaces the slug identifier (lowercase, digits, hyphens). Unique
+     * within the organization; a duplicate name returns 409.
+     */
+    name?: string | null;
+    /**
+     * Header param: Optional header to specify the beta version(s) you want to use.
+     */
+    betas?: Array<BetaAPI.AnthropicBeta>;
+}
+export interface IssuerListParams extends PageCursorParams {
+    /**
+     * Query param: Include archived resources. Defaults to false.
+     */
+    include_archived?: boolean;
+    /**
+     * Header param: Optional header to specify the beta version(s) you want to use.
+     */
+    betas?: Array<BetaAPI.AnthropicBeta>;
+}
+export interface IssuerArchiveParams {
+    /**
+     * Optional header to specify the beta version(s) you want to use.
+     */
+    betas?: Array<BetaAPI.AnthropicBeta>;
+}
+export declare namespace Issuers {
+    export { type BetaFederationIssuer as BetaFederationIssuer, type BetaFederationIssuerPollStatus as BetaFederationIssuerPollStatus, type BetaJWKSDiscovery as BetaJWKSDiscovery, type BetaJWKSExplicitURL as BetaJWKSExplicitURL, type BetaJWKSInline as BetaJWKSInline, type BetaFederationIssuersPageCursor as BetaFederationIssuersPageCursor, type IssuerCreateParams as IssuerCreateParams, type IssuerRetrieveParams as IssuerRetrieveParams, type IssuerUpdateParams as IssuerUpdateParams, type IssuerListParams as IssuerListParams, type IssuerArchiveParams as IssuerArchiveParams, };
+}
+//# sourceMappingURL=issuers.d.ts.map

package/node_modules/@anthropic-ai/sdk/resources/beta/organization/federation/issuers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"issuers.d.ts","sourceRoot":"","sources":["../../../../src/resources/beta/organization/federation/issuers.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,qCAAkC;AACxD,OAAO,KAAK,OAAO,sBAAmB;AACtC,OAAO,EAAE,UAAU,EAAE,wCAAqC;AAC1D,OAAO,EAAE,UAAU,EAAE,KAAK,gBAAgB,EAAE,WAAW,EAAE,uCAAoC;AAE7F,OAAO,EAAE,cAAc,EAAE,gDAA6C;AAGtE,qBAAa,OAAQ,SAAQ,WAAW;IACtC;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,MAAM,CAAC,MAAM,EAAE,kBAAkB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,oBAAoB,CAAC;IAY9F;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CACN,kBAAkB,EAAE,MAAM,EAC1B,MAAM,GAAE,oBAAoB,GAAG,IAAI,GAAG,SAAc,EACpD,OAAO,CAAC,EAAE,cAAc,GACvB,UAAU,CAAC,oBAAoB,CAAC;IAWnC;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,MAAM,CACJ,kBAAkB,EAAE,MAAM,EAC1B,MAAM,EAAE,kBAAkB,EAC1B,OAAO,CAAC,EAAE,cAAc,GACvB,UAAU,CAAC,oBAAoB,CAAC;IAYnC;;;;;;;;;;;;;;;;;OAiBG;IACH,IAAI,CACF,MAAM,GAAE,gBAAgB,GAAG,IAAI,GAAG,SAAc,EAChD,OAAO,CAAC,EAAE,cAAc,GACvB,WAAW,CAAC,+BAA+B,EAAE,oBAAoB,CAAC;IAgBrE;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,OAAO,CACL,kBAAkB,EAAE,MAAM,EAC1B,MAAM,GAAE,mBAAmB,GAAG,IAAI,GAAG,SAAc,EACnD,OAAO,CAAC,EAAE,cAAc,GACvB,UAAU,CAAC,oBAAoB,CAAC;CAapC;AAED,MAAM,MAAM,+BAA+B,GAAG,UAAU,CAAC,oBAAoB,CAAC,CAAC;AAE/E;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IAEX;;OAEG;IACH,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAE3B;;OAEG;IACH,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IAEpC;;;;OAIG;IACH,SAAS,EAAE,OAAO,CAAC;IAEnB;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IAEnC;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,IAAI,EAAE,iBAAiB,GAAG,mBAAmB,GAAG,cAAc,CAAC;IAE/D;;;;;;OAMG;IACH,wBAAwB,EAAE,MAAM,GAAG,IAAI,CAAC;IAExC;;;;OAIG;IACH,wBAAwB,EAAE,MAAM,CAAC;IAEjC;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;;;;;OAMG;IACH,WAAW,EAAE,8BAA8B,GAAG,IAAI,CAAC;IAEnD,IAAI,EAAE,mBAAmB,CAAC;IAE1B;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,8BAA8B;IAC7C;;OAEG;IACH,oBAAoB,EAAE,MAAM,CAAC;IAE7B;;OAEG;IACH,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAE/B;;OAEG;IACH,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,WAAW,CAAC;IAElB;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAE5B;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,cAAc,CAAC;IAErB;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IAEZ;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B;;OAEG;IACH,IAAI,EAAE,KAAK,CAAC;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC,CAAC;IAExC,IAAI,EAAE,QAAQ,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;;;;OAKG;IACH,SAAS,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IAE3B;;OAEG;IACH,IAAI,CAAC,EAAE,iBAAiB,GAAG,mBAAmB,GAAG,cAAc,CAAC;IAEhE;;;;OAIG;IACH,wBAAwB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAEzC;;OAEG;IACH,KAAK,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,KAAK,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,kBAAkB;IACjC;;;;OAIG;IACH,SAAS,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IAE3B;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAE3B;;OAEG;IACH,IAAI,CAAC,EAAE,iBAAiB,GAAG,mBAAmB,GAAG,cAAc,GAAG,IAAI,CAAC;IAEvE;;;OAGG;IACH,qBAAqB,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IAEvC;;;;OAIG;IACH,wBAAwB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAEzC;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAErB;;OAEG;IACH,KAAK,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,gBAAiB,SAAQ,gBAAgB;IACxD;;OAEG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAE3B;;OAEG;IACH,KAAK,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,mBAAmB;IAClC;;OAEG;IACH,KAAK,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;CACtC;AAED,MAAM,CAAC,OAAO,WAAW,OAAO,CAAC;IAC/B,OAAO,EACL,KAAK,oBAAoB,IAAI,oBAAoB,EACjD,KAAK,8BAA8B,IAAI,8BAA8B,EACrE,KAAK,iBAAiB,IAAI,iBAAiB,EAC3C,KAAK,mBAAmB,IAAI,mBAAmB,EAC/C,KAAK,cAAc,IAAI,cAAc,EACrC,KAAK,+BAA+B,IAAI,+BAA+B,EACvE,KAAK,kBAAkB,IAAI,kBAAkB,EAC7C,KAAK,oBAAoB,IAAI,oBAAoB,EACjD,KAAK,kBAAkB,IAAI,kBAAkB,EAC7C,KAAK,gBAAgB,IAAI,gBAAgB,EACzC,KAAK,mBAAmB,IAAI,mBAAmB,GAChD,CAAC;CACH"}

package/node_modules/@anthropic-ai/sdk/resources/beta/organization/federation/issuers.js

@@ -0,0 +1,169 @@
+"use strict";
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Issuers = void 0;
+const resource_1 = require("../../../../core/resource.js");
+const pagination_1 = require("../../../../core/pagination.js");
+const headers_1 = require("../../../../internal/headers.js");
+const path_1 = require("../../../../internal/utils/path.js");
+class Issuers extends resource_1.APIResource {
+    /**
+     * **Requires an OAuth access token with the `org:admin` scope**, from
+     * `ant auth login --scope org:admin` or a workload identity federation rule; Admin
+     * API keys are not accepted. See
+     * [Manage WIF with the Admin API](/docs/en/manage-claude/wif-admin-api).
+     *
+     * Register an OIDC issuer that Anthropic will trust for workload identity
+     * federation in your organization.
+     *
+     * The `jwks` field controls how the issuer's signing keys are obtained and takes
+     * one of three shapes selected by `type`: `discovery` (resolve keys through OIDC
+     * discovery), `explicit_url` (fetch keys from a fixed JWKS URL), or `inline`
+     * (provide a static key set). When `jwks.type` is `discovery` and no
+     * `discovery_base` is set, the issuer URL must be publicly reachable over HTTPS so
+     * Anthropic can fetch the discovery document; for `explicit_url` and `inline`
+     * modes the issuer URL is only matched as the JWT's `iss` claim and is not
+     * fetched.
+     *
+     * @example
+     * ```ts
+     * const betaFederationIssuer =
+     *   await client.beta.organization.federation.issuers.create({
+     *     issuer_url: 'x',
+     *     name: 'x',
+     *   });
+     * ```
+     */
+    create(params, options) {
+        const { betas, ...body } = params;
+        return this._client.post('/v1/organizations/federation_issuers?beta=true', {
+            body,
+            ...options,
+            headers: (0, headers_1.buildHeaders)([
+                { ...(betas?.toString() != null ? { 'anthropic-beta': betas?.toString() } : undefined) },
+                options?.headers,
+            ]),
+        });
+    }
+    /**
+     * **Requires an OAuth access token with the `org:admin` scope**, from
+     * `ant auth login --scope org:admin` or a workload identity federation rule; Admin
+     * API keys are not accepted. See
+     * [Manage WIF with the Admin API](/docs/en/manage-claude/wif-admin-api).
+     *
+     * Retrieve a federation issuer by its ID (`fdis_...`).
+     *
+     * @example
+     * ```ts
+     * const betaFederationIssuer =
+     *   await client.beta.organization.federation.issuers.retrieve(
+     *     'federation_issuer_id',
+     *   );
+     * ```
+     */
+    retrieve(federationIssuerID, params = {}, options) {
+        const { betas } = params ?? {};
+        return this._client.get((0, path_1.path) `/v1/organizations/federation_issuers/${federationIssuerID}?beta=true`, {
+            ...options,
+            headers: (0, headers_1.buildHeaders)([
+                { ...(betas?.toString() != null ? { 'anthropic-beta': betas?.toString() } : undefined) },
+                options?.headers,
+            ]),
+        });
+    }
+    /**
+     * **Requires an OAuth access token with the `org:admin` scope**, from
+     * `ant auth login --scope org:admin` or a workload identity federation rule; Admin
+     * API keys are not accepted. See
+     * [Manage WIF with the Admin API](/docs/en/manage-claude/wif-admin-api).
+     *
+     * Partially update a federation issuer.
+     *
+     * Setting `jwks` replaces the full JWKS shape at once. Archived issuers cannot be
+     * updated; this returns 400. Create a new issuer instead.
+     *
+     * Updating an issuer that backs a rule with a scope outside `workspace:developer`
+     * or `workspace:inference` requires a Console session.
+     *
+     * @example
+     * ```ts
+     * const betaFederationIssuer =
+     *   await client.beta.organization.federation.issuers.update(
+     *     'federation_issuer_id',
+     *   );
+     * ```
+     */
+    update(federationIssuerID, params, options) {
+        const { betas, ...body } = params;
+        return this._client.post((0, path_1.path) `/v1/organizations/federation_issuers/${federationIssuerID}?beta=true`, {
+            body,
+            ...options,
+            headers: (0, headers_1.buildHeaders)([
+                { ...(betas?.toString() != null ? { 'anthropic-beta': betas?.toString() } : undefined) },
+                options?.headers,
+            ]),
+        });
+    }
+    /**
+     * **Requires an OAuth access token with the `org:admin` scope**, from
+     * `ant auth login --scope org:admin` or a workload identity federation rule; Admin
+     * API keys are not accepted. See
+     * [Manage WIF with the Admin API](/docs/en/manage-claude/wif-admin-api).
+     *
+     * List federation issuers in your organization.
+     *
+     * Archived issuers are excluded unless `include_archived=true`.
+     *
+     * @example
+     * ```ts
+     * // Automatically fetches more pages as needed.
+     * for await (const betaFederationIssuer of client.beta.organization.federation.issuers.list()) {
+     *   // ...
+     * }
+     * ```
+     */
+    list(params = {}, options) {
+        const { betas, ...query } = params ?? {};
+        return this._client.getAPIList('/v1/organizations/federation_issuers?beta=true', (pagination_1.PageCursor), {
+            query,
+            ...options,
+            headers: (0, headers_1.buildHeaders)([
+                { ...(betas?.toString() != null ? { 'anthropic-beta': betas?.toString() } : undefined) },
+                options?.headers,
+            ]),
+        });
+    }
+    /**
+     * **Requires an OAuth access token with the `org:admin` scope**, from
+     * `ant auth login --scope org:admin` or a workload identity federation rule; Admin
+     * API keys are not accepted. See
+     * [Manage WIF with the Admin API](/docs/en/manage-claude/wif-admin-api).
+     *
+     * Archive a federation issuer.
+     *
+     * Idempotent; re-archiving returns the issuer with its original `archived_at`.
+     * Rejected with 400 if any live (non-archived) federation rule still references
+     * the issuer; archive those rules first (a rule's issuer cannot be changed), or
+     * recreate them against another issuer.
+     *
+     * @example
+     * ```ts
+     * const betaFederationIssuer =
+     *   await client.beta.organization.federation.issuers.archive(
+     *     'federation_issuer_id',
+     *   );
+     * ```
+     */
+    archive(federationIssuerID, params = {}, options) {
+        const { betas } = params ?? {};
+        return this._client.post((0, path_1.path) `/v1/organizations/federation_issuers/${federationIssuerID}/archive?beta=true`, {
+            ...options,
+            headers: (0, headers_1.buildHeaders)([
+                { ...(betas?.toString() != null ? { 'anthropic-beta': betas?.toString() } : undefined) },
+                options?.headers,
+            ]),
+        });
+    }
+}
+exports.Issuers = Issuers;
+//# sourceMappingURL=issuers.js.map

package/node_modules/@anthropic-ai/sdk/resources/beta/organization/federation/issuers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"issuers.js","sourceRoot":"","sources":["../../../../src/resources/beta/organization/federation/issuers.ts"],"names":[],"mappings":";AAAA,sFAAsF;;;AAEtF,2DAAwD;AAGxD,+DAA6F;AAC7F,6DAA4D;AAE5D,6DAAuD;AAEvD,MAAa,OAAQ,SAAQ,sBAAW;IACtC;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,MAAM,CAAC,MAA0B,EAAE,OAAwB;QACzD,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;QAClC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,gDAAgD,EAAE;YACzE,IAAI;YACJ,GAAG,OAAO;YACV,OAAO,EAAE,IAAA,sBAAY,EAAC;gBACpB,EAAE,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE;gBACxF,OAAO,EAAE,OAAO;aACjB,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CACN,kBAA0B,EAC1B,SAAkD,EAAE,EACpD,OAAwB;QAExB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAA,WAAI,EAAA,wCAAwC,kBAAkB,YAAY,EAAE;YAClG,GAAG,OAAO;YACV,OAAO,EAAE,IAAA,sBAAY,EAAC;gBACpB,EAAE,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE;gBACxF,OAAO,EAAE,OAAO;aACjB,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,MAAM,CACJ,kBAA0B,EAC1B,MAA0B,EAC1B,OAAwB;QAExB,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;QAClC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAA,WAAI,EAAA,wCAAwC,kBAAkB,YAAY,EAAE;YACnG,IAAI;YACJ,GAAG,OAAO;YACV,OAAO,EAAE,IAAA,sBAAY,EAAC;gBACpB,EAAE,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE;gBACxF,OAAO,EAAE,OAAO;aACjB,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACH,IAAI,CACF,SAA8C,EAAE,EAChD,OAAwB;QAExB,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;QACzC,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAC5B,gDAAgD,EAChD,CAAA,uBAAgC,CAAA,EAChC;YACE,KAAK;YACL,GAAG,OAAO;YACV,OAAO,EAAE,IAAA,sBAAY,EAAC;gBACpB,EAAE,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE;gBACxF,OAAO,EAAE,OAAO;aACjB,CAAC;SACH,CACF,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,OAAO,CACL,kBAA0B,EAC1B,SAAiD,EAAE,EACnD,OAAwB;QAExB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CACtB,IAAA,WAAI,EAAA,wCAAwC,kBAAkB,oBAAoB,EAClF;YACE,GAAG,OAAO;YACV,OAAO,EAAE,IAAA,sBAAY,EAAC;gBACpB,EAAE,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE;gBACxF,OAAO,EAAE,OAAO;aACjB,CAAC;SACH,CACF,CAAC;IACJ,CAAC;CACF;AAxLD,0BAwLC"}