openai 0.115.1 → 0.117.0

data/lib/openai/resources/admin/organization/workload_identity_providers/federation_rules.rb

@@ -0,0 +1,198 @@
+# frozen_string_literal: true
+
+module OpenAI
+  module Resources
+    class Admin
+      class Organization
+        class WorkloadIdentityProviders
+          class FederationRules
+            # Bind verified token attributes to an existing project service account.
+            #
+            # @overload create(workload_identity_provider_id, attribute_matchers:, project_id:, service_account_id:, description: nil, enabled: nil, name: nil, permissions: nil, request_options: {})
+            #
+            # @param workload_identity_provider_id [String]
+            # @param attribute_matchers [Hash{Symbol=>String, Boolean, Integer, Float}]
+            # @param project_id [String]
+            # @param service_account_id [String]
+            # @param description [String]
+            # @param enabled [Boolean]
+            # @param name [String]
+            # @param permissions [OpenAI::Models::Admin::Organization::WorkloadIdentityProviders::FederationRuleCreateParams::Permissions::ServiceAccountDefault, OpenAI::Models::Admin::Organization::WorkloadIdentityProviders::FederationRuleCreateParams::Permissions::Restricted]
+            # @param request_options [OpenAI::RequestOptions, Hash{Symbol=>Object}, nil]
+            #
+            # @return [OpenAI::Models::Admin::Organization::WorkloadIdentityProviders::FederationRule]
+            #
+            # @see OpenAI::Models::Admin::Organization::WorkloadIdentityProviders::FederationRuleCreateParams
+            def create(workload_identity_provider_id, params)
+              parsed, options = OpenAI::Admin::Organization::WorkloadIdentityProviders::FederationRuleCreateParams
+                .dump_request(params)
+              @client.request(
+                method: :post,
+                path: [
+                  "organization/workload_identity_providers/%1$s/federation_rules",
+                  workload_identity_provider_id
+                ],
+                body: parsed,
+                model: OpenAI::Admin::Organization::WorkloadIdentityProviders::FederationRule,
+                security: {admin_api_key_auth: true},
+                options: options
+              )
+            end
+
+            # Retrieve a federation rule owned by the authenticated organization and provider.
+            #
+            # @overload retrieve(workload_identity_federation_rule_id, workload_identity_provider_id:, request_options: {})
+            #
+            # @param workload_identity_federation_rule_id [String]
+            # @param workload_identity_provider_id [String]
+            # @param request_options [OpenAI::RequestOptions, Hash{Symbol=>Object}, nil]
+            #
+            # @return [OpenAI::Models::Admin::Organization::WorkloadIdentityProviders::FederationRule]
+            #
+            # @see OpenAI::Models::Admin::Organization::WorkloadIdentityProviders::FederationRuleRetrieveParams
+            def retrieve(workload_identity_federation_rule_id, params)
+              parsed, options = OpenAI::Admin::Organization::WorkloadIdentityProviders::FederationRuleRetrieveParams
+                .dump_request(params)
+              workload_identity_provider_id = parsed.delete(:workload_identity_provider_id) do
+                raise ArgumentError.new("missing required path argument #{_1}")
+              end
+
+              @client.request(
+                method: :get,
+                path: [
+                  "organization/workload_identity_providers/%1$s/federation_rules/%2$s",
+                  workload_identity_provider_id,
+                  workload_identity_federation_rule_id
+                ],
+                model: OpenAI::Admin::Organization::WorkloadIdentityProviders::FederationRule,
+                security: {admin_api_key_auth: true},
+                options: options
+              )
+            end
+
+            # Update supplied matcher, permission, metadata, or enabled fields.
+            #
+            # @overload update(workload_identity_federation_rule_id, workload_identity_provider_id:, attribute_matchers: nil, description: nil, enabled: nil, name: nil, permissions: nil, request_options: {})
+            #
+            # @param workload_identity_federation_rule_id [String]
+            #   Path param
+            #
+            # @param workload_identity_provider_id [String]
+            #   Path param
+            #
+            # @param attribute_matchers [Hash{Symbol=>String, Boolean, Integer, Float}]
+            #   Body param
+            #
+            # @param description [String, nil]
+            #   Body param
+            #
+            # @param enabled [Boolean]
+            #   Body param
+            #
+            # @param name [String, nil]
+            #   Body param
+            #
+            # @param permissions [OpenAI::Models::Admin::Organization::WorkloadIdentityProviders::FederationRuleUpdateParams::Permissions::DefaultPermissionsParam, OpenAI::Models::Admin::Organization::WorkloadIdentityProviders::FederationRuleUpdateParams::Permissions::RestrictedPermissionsParam]
+            #   Body param
+            #
+            # @param request_options [OpenAI::RequestOptions, Hash{Symbol=>Object}, nil]
+            #
+            # @return [OpenAI::Models::Admin::Organization::WorkloadIdentityProviders::FederationRule]
+            #
+            # @see OpenAI::Models::Admin::Organization::WorkloadIdentityProviders::FederationRuleUpdateParams
+            def update(workload_identity_federation_rule_id, params)
+              parsed, options = OpenAI::Admin::Organization::WorkloadIdentityProviders::FederationRuleUpdateParams
+                .dump_request(params)
+              workload_identity_provider_id = parsed.delete(:workload_identity_provider_id) do
+                raise ArgumentError.new("missing required path argument #{_1}")
+              end
+
+              @client.request(
+                method: :post,
+                path: [
+                  "organization/workload_identity_providers/%1$s/federation_rules/%2$s",
+                  workload_identity_provider_id,
+                  workload_identity_federation_rule_id
+                ],
+                body: parsed,
+                model: OpenAI::Admin::Organization::WorkloadIdentityProviders::FederationRule,
+                security: {admin_api_key_auth: true},
+                options: options
+              )
+            end
+
+            # List the provider's federation rules to project service accounts.
+            #
+            # @overload list(workload_identity_provider_id, after: nil, limit: nil, order: nil, service_account_id: nil, request_options: {})
+            #
+            # @param workload_identity_provider_id [String]
+            # @param after [String]
+            # @param limit [Integer]
+            # @param order [Symbol, OpenAI::Models::Admin::Organization::WorkloadIdentityProviders::FederationRuleListParams::Order]
+            # @param service_account_id [String]
+            # @param request_options [OpenAI::RequestOptions, Hash{Symbol=>Object}, nil]
+            #
+            # @return [OpenAI::Internal::CursorPage<OpenAI::Models::Admin::Organization::WorkloadIdentityProviders::FederationRule>]
+            #
+            # @see OpenAI::Models::Admin::Organization::WorkloadIdentityProviders::FederationRuleListParams
+            def list(workload_identity_provider_id, params = {})
+              parsed, options = OpenAI::Admin::Organization::WorkloadIdentityProviders::FederationRuleListParams
+                .dump_request(params)
+              query = OpenAI::Internal::Util.encode_query_params(parsed)
+              @client.request(
+                method: :get,
+                path: [
+                  "organization/workload_identity_providers/%1$s/federation_rules",
+                  workload_identity_provider_id
+                ],
+                query: query,
+                page: OpenAI::Internal::CursorPage,
+                model: OpenAI::Admin::Organization::WorkloadIdentityProviders::FederationRule,
+                security: {admin_api_key_auth: true},
+                options: options
+              )
+            end
+
+            # Delete a federation rule to a project service account.
+            #
+            # @overload delete(workload_identity_federation_rule_id, workload_identity_provider_id:, request_options: {})
+            #
+            # @param workload_identity_federation_rule_id [String]
+            # @param workload_identity_provider_id [String]
+            # @param request_options [OpenAI::RequestOptions, Hash{Symbol=>Object}, nil]
+            #
+            # @return [OpenAI::Models::Admin::Organization::WorkloadIdentityProviders::FederationRuleDeleted]
+            #
+            # @see OpenAI::Models::Admin::Organization::WorkloadIdentityProviders::FederationRuleDeleteParams
+            def delete(workload_identity_federation_rule_id, params)
+              parsed, options = OpenAI::Admin::Organization::WorkloadIdentityProviders::FederationRuleDeleteParams
+                .dump_request(params)
+              workload_identity_provider_id = parsed.delete(:workload_identity_provider_id) do
+                raise ArgumentError.new("missing required path argument #{_1}")
+              end
+
+              @client.request(
+                method: :delete,
+                path: [
+                  "organization/workload_identity_providers/%1$s/federation_rules/%2$s",
+                  workload_identity_provider_id,
+                  workload_identity_federation_rule_id
+                ],
+                model: OpenAI::Admin::Organization::WorkloadIdentityProviders::FederationRuleDeleted,
+                security: {admin_api_key_auth: true},
+                options: options
+              )
+            end
+
+            # @api private
+            #
+            # @param client [OpenAI::Client]
+            def initialize(client:)
+              @client = client
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/lib/openai/resources/admin/organization/workload_identity_providers.rb

@@ -0,0 +1,148 @@
+# frozen_string_literal: true
+
+module OpenAI
+  module Resources
+    class Admin
+      class Organization
+        class WorkloadIdentityProviders
+          # @return [OpenAI::Resources::Admin::Organization::WorkloadIdentityProviders::FederationRules]
+          attr_reader :federation_rules
+
+          # Register an OIDC provider for keyless project service-account authentication.
+          #
+          # @overload create(audience:, issuer:, name:, attribute_transformations: nil, description: nil, enabled: nil, verification: nil, type: :oidc, request_options: {})
+          #
+          # @param audience [String]
+          # @param issuer [String]
+          # @param name [String]
+          # @param attribute_transformations [Array<OpenAI::Models::Admin::Organization::WorkloadIdentityProviderCreateParams::AttributeTransformation>]
+          # @param description [String]
+          # @param enabled [Boolean]
+          # @param verification [OpenAI::Models::Admin::Organization::WorkloadIdentityProviderCreateParams::Verification::Discovery, OpenAI::Models::Admin::Organization::WorkloadIdentityProviderCreateParams::Verification::UploadedJwks]
+          # @param type [Symbol, :oidc]
+          # @param request_options [OpenAI::RequestOptions, Hash{Symbol=>Object}, nil]
+          #
+          # @return [OpenAI::Models::Admin::Organization::WorkloadIdentityProvider]
+          #
+          # @see OpenAI::Models::Admin::Organization::WorkloadIdentityProviderCreateParams
+          def create(params)
+            parsed, options = OpenAI::Admin::Organization::WorkloadIdentityProviderCreateParams.dump_request(params)
+            @client.request(
+              method: :post,
+              path: "organization/workload_identity_providers",
+              body: parsed,
+              model: OpenAI::Admin::Organization::WorkloadIdentityProvider,
+              security: {admin_api_key_auth: true},
+              options: options
+            )
+          end
+
+          # Retrieve an OIDC provider in the authenticated organization.
+          #
+          # @overload retrieve(workload_identity_provider_id, request_options: {})
+          #
+          # @param workload_identity_provider_id [String]
+          # @param request_options [OpenAI::RequestOptions, Hash{Symbol=>Object}, nil]
+          #
+          # @return [OpenAI::Models::Admin::Organization::WorkloadIdentityProvider]
+          #
+          # @see OpenAI::Models::Admin::Organization::WorkloadIdentityProviderRetrieveParams
+          def retrieve(workload_identity_provider_id, params = {})
+            @client.request(
+              method: :get,
+              path: ["organization/workload_identity_providers/%1$s", workload_identity_provider_id],
+              model: OpenAI::Admin::Organization::WorkloadIdentityProvider,
+              security: {admin_api_key_auth: true},
+              options: params[:request_options]
+            )
+          end
+
+          # Update supplied provider fields, preserving omitted fields.
+          #
+          # @overload update(workload_identity_provider_id, attribute_transformations: nil, audience: nil, description: nil, enabled: nil, issuer: nil, name: nil, verification: nil, request_options: {})
+          #
+          # @param workload_identity_provider_id [String]
+          # @param attribute_transformations [Array<OpenAI::Models::Admin::Organization::WorkloadIdentityProviderUpdateParams::AttributeTransformation>]
+          # @param audience [String]
+          # @param description [String, nil]
+          # @param enabled [Boolean]
+          # @param issuer [String]
+          # @param name [String]
+          # @param verification [OpenAI::Models::Admin::Organization::WorkloadIdentityProviderUpdateParams::Verification::DiscoveryVerificationParam, OpenAI::Models::Admin::Organization::WorkloadIdentityProviderUpdateParams::Verification::UploadedJwksVerificationParam]
+          # @param request_options [OpenAI::RequestOptions, Hash{Symbol=>Object}, nil]
+          #
+          # @return [OpenAI::Models::Admin::Organization::WorkloadIdentityProvider]
+          #
+          # @see OpenAI::Models::Admin::Organization::WorkloadIdentityProviderUpdateParams
+          def update(workload_identity_provider_id, params = {})
+            parsed, options = OpenAI::Admin::Organization::WorkloadIdentityProviderUpdateParams.dump_request(params)
+            @client.request(
+              method: :post,
+              path: ["organization/workload_identity_providers/%1$s", workload_identity_provider_id],
+              body: parsed,
+              model: OpenAI::Admin::Organization::WorkloadIdentityProvider,
+              security: {admin_api_key_auth: true},
+              options: options
+            )
+          end
+
+          # List OIDC providers in the authenticated Admin API key's organization.
+          #
+          # @overload list(after: nil, limit: nil, order: nil, request_options: {})
+          #
+          # @param after [String]
+          # @param limit [Integer]
+          # @param order [Symbol, OpenAI::Models::Admin::Organization::WorkloadIdentityProviderListParams::Order]
+          # @param request_options [OpenAI::RequestOptions, Hash{Symbol=>Object}, nil]
+          #
+          # @return [OpenAI::Internal::CursorPage<OpenAI::Models::Admin::Organization::WorkloadIdentityProvider>]
+          #
+          # @see OpenAI::Models::Admin::Organization::WorkloadIdentityProviderListParams
+          def list(params = {})
+            parsed, options = OpenAI::Admin::Organization::WorkloadIdentityProviderListParams.dump_request(params)
+            query = OpenAI::Internal::Util.encode_query_params(parsed)
+            @client.request(
+              method: :get,
+              path: "organization/workload_identity_providers",
+              query: query,
+              page: OpenAI::Internal::CursorPage,
+              model: OpenAI::Admin::Organization::WorkloadIdentityProvider,
+              security: {admin_api_key_auth: true},
+              options: options
+            )
+          end
+
+          # Delete a provider after deleting all its federation rules.
+          #
+          # @overload delete(workload_identity_provider_id, request_options: {})
+          #
+          # @param workload_identity_provider_id [String]
+          # @param request_options [OpenAI::RequestOptions, Hash{Symbol=>Object}, nil]
+          #
+          # @return [OpenAI::Models::Admin::Organization::WorkloadIdentityProviderDeleted]
+          #
+          # @see OpenAI::Models::Admin::Organization::WorkloadIdentityProviderDeleteParams
+          def delete(workload_identity_provider_id, params = {})
+            @client.request(
+              method: :delete,
+              path: ["organization/workload_identity_providers/%1$s", workload_identity_provider_id],
+              model: OpenAI::Admin::Organization::WorkloadIdentityProviderDeleted,
+              security: {admin_api_key_auth: true},
+              options: params[:request_options]
+            )
+          end
+
+          # @api private
+          #
+          # @param client [OpenAI::Client]
+          def initialize(client:)
+            @client = client
+            @federation_rules = OpenAI::Resources::Admin::Organization::WorkloadIdentityProviders::FederationRules.new(
+              client: client
+            )
+          end
+        end
+      end
+    end
+  end
+end

data/lib/openai/resources/admin/organization.rb

@@ -47,6 +47,9 @@ module OpenAI
         # @return [OpenAI::Resources::Admin::Organization::Projects]
         attr_reader :projects
 
+        # @return [OpenAI::Resources::Admin::Organization::WorkloadIdentityProviders]
+        attr_reader :workload_identity_providers
+
         # @api private
         #
         # @param client [OpenAI::Client]
@@ -66,6 +69,9 @@ module OpenAI
           @spend_alerts = OpenAI::Resources::Admin::Organization::SpendAlerts.new(client: client)
           @certificates = OpenAI::Resources::Admin::Organization::Certificates.new(client: client)
           @projects = OpenAI::Resources::Admin::Organization::Projects.new(client: client)
+          @workload_identity_providers = OpenAI::Resources::Admin::Organization::WorkloadIdentityProviders.new(
+            client: client
+          )
         end
       end
     end

data/lib/openai/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module OpenAI
-  VERSION = "0.115.1"
+  VERSION = "0.117.0"
 end

data/lib/openai.rb

@@ -448,6 +448,20 @@ require_relative "openai/models/admin/organization/users/role_list_response"
 require_relative "openai/models/admin/organization/users/role_retrieve_params"
 require_relative "openai/models/admin/organization/users/role_retrieve_response"
 require_relative "openai/models/admin/organization/user_update_params"
+require_relative "openai/models/admin/organization/workload_identity_provider"
+require_relative "openai/models/admin/organization/workload_identity_provider_create_params"
+require_relative "openai/models/admin/organization/workload_identity_provider_deleted"
+require_relative "openai/models/admin/organization/workload_identity_provider_delete_params"
+require_relative "openai/models/admin/organization/workload_identity_provider_list_params"
+require_relative "openai/models/admin/organization/workload_identity_provider_retrieve_params"
+require_relative "openai/models/admin/organization/workload_identity_providers/federation_rule"
+require_relative "openai/models/admin/organization/workload_identity_providers/federation_rule_create_params"
+require_relative "openai/models/admin/organization/workload_identity_providers/federation_rule_deleted"
+require_relative "openai/models/admin/organization/workload_identity_providers/federation_rule_delete_params"
+require_relative "openai/models/admin/organization/workload_identity_providers/federation_rule_list_params"
+require_relative "openai/models/admin/organization/workload_identity_providers/federation_rule_retrieve_params"
+require_relative "openai/models/admin/organization/workload_identity_providers/federation_rule_update_params"
+require_relative "openai/models/admin/organization/workload_identity_provider_update_params"
 require_relative "openai/models/all_models"
 require_relative "openai/models/audio/speech_create_params"
 require_relative "openai/models/audio/speech_model"
@@ -1588,6 +1602,8 @@ require_relative "openai/resources/admin/organization/spend_limit"
 require_relative "openai/resources/admin/organization/usage"
 require_relative "openai/resources/admin/organization/users"
 require_relative "openai/resources/admin/organization/users/roles"
+require_relative "openai/resources/admin/organization/workload_identity_providers"
+require_relative "openai/resources/admin/organization/workload_identity_providers/federation_rules"
 require_relative "openai/resources/audio"
 require_relative "openai/resources/audio/speech"
 require_relative "openai/resources/audio/transcriptions"

data/rbi/openai/helpers/responses_websocket/incremental.rbi

@@ -15,6 +15,10 @@ module OpenAI
         def output
         end
 
+        sig { returns(T.nilable(T::Hash[Symbol, T.untyped])) }
+        def detailed_snapshot
+        end
+
         sig { returns(T.nilable(Connection::ServerEvent)) }
         def terminal_event
         end