openai 0.116.0 → 0.117.0

data/rbi/openai/resources/admin/organization/workload_identity_providers.rbi

@@ -0,0 +1,123 @@
+# typed: strong
+
+module OpenAI
+  module Resources
+
+    class Admin
+
+      class Organization
+
+        class WorkloadIdentityProviders
+
+          sig { returns(OpenAI::Resources::Admin::Organization::WorkloadIdentityProviders::FederationRules) }
+          attr_reader :federation_rules
+
+          # Register an OIDC provider for keyless project service-account authentication.
+          sig {
+            params(
+              audience: String,
+              issuer: String,
+              name: String,
+              attribute_transformations: T::Array[
+                OpenAI::Admin::Organization::WorkloadIdentityProviderCreateParams::AttributeTransformation::OrHash
+              ],
+              description: String,
+              enabled: T::Boolean,
+              verification: T.any(
+                OpenAI::Admin::Organization::WorkloadIdentityProviderCreateParams::Verification::Discovery::OrHash,
+                OpenAI::Admin::Organization::WorkloadIdentityProviderCreateParams::Verification::UploadedJwks::OrHash
+              ),
+              type: Symbol,
+              request_options: OpenAI::RequestOptions::OrHash
+            )
+              .returns(OpenAI::Admin::Organization::WorkloadIdentityProvider)
+          }
+          def create(
+            audience:,
+            issuer:,
+            name:,
+            attribute_transformations: nil,
+            description: nil,
+            enabled: nil,
+            verification: nil,
+            type: :oidc,
+            request_options: {}
+          )
+          end
+
+          # Retrieve an OIDC provider in the authenticated organization.
+          sig {
+            params(workload_identity_provider_id: String, request_options: OpenAI::RequestOptions::OrHash).returns(
+              OpenAI::Admin::Organization::WorkloadIdentityProvider
+            )
+          }
+          def retrieve(workload_identity_provider_id, request_options: {})
+          end
+
+          # Update supplied provider fields, preserving omitted fields.
+          sig {
+            params(
+              workload_identity_provider_id: String,
+              attribute_transformations: T::Array[
+                OpenAI::Admin::Organization::WorkloadIdentityProviderUpdateParams::AttributeTransformation::OrHash
+              ],
+              audience: String,
+              description: T.nilable(String),
+              enabled: T::Boolean,
+              issuer: String,
+              name: String,
+              verification: T.any(
+                OpenAI::Admin::Organization::WorkloadIdentityProviderUpdateParams::Verification::DiscoveryVerificationParam::OrHash,
+                OpenAI::Admin::Organization::WorkloadIdentityProviderUpdateParams::Verification::UploadedJwksVerificationParam::OrHash
+              ),
+              request_options: OpenAI::RequestOptions::OrHash
+            )
+              .returns(OpenAI::Admin::Organization::WorkloadIdentityProvider)
+          }
+          def update(
+            workload_identity_provider_id,
+            attribute_transformations: nil,
+            audience: nil,
+            description: nil,
+            enabled: nil,
+            issuer: nil,
+            name: nil,
+            verification: nil,
+            request_options: {}
+          )
+          end
+
+          # List OIDC providers in the authenticated Admin API key's organization.
+          sig {
+            params(
+              after: String,
+              limit: Integer,
+              order: OpenAI::Admin::Organization::WorkloadIdentityProviderListParams::Order::OrSymbol,
+              request_options: OpenAI::RequestOptions::OrHash
+            )
+              .returns(OpenAI::Internal::CursorPage[OpenAI::Admin::Organization::WorkloadIdentityProvider])
+          }
+          def list(after: nil, limit: nil, order: nil, request_options: {})
+          end
+
+          # Delete a provider after deleting all its federation rules.
+          sig {
+            params(workload_identity_provider_id: String, request_options: OpenAI::RequestOptions::OrHash).returns(
+              OpenAI::Admin::Organization::WorkloadIdentityProviderDeleted
+            )
+          }
+          def delete(workload_identity_provider_id, request_options: {})
+          end
+
+          # @api private
+          sig { params(client: OpenAI::Client).returns(T.attached_class) }
+          def self.new(client:)
+          end
+        end
+
+      end
+
+    end
+
+  end
+end

data/rbi/openai/resources/admin/organization.rbi

@@ -50,6 +50,9 @@ module OpenAI
         sig { returns(OpenAI::Resources::Admin::Organization::Projects) }
         attr_reader :projects
 
+        sig { returns(OpenAI::Resources::Admin::Organization::WorkloadIdentityProviders) }
+        attr_reader :workload_identity_providers
+
         # @api private
         sig { params(client: OpenAI::Client).returns(T.attached_class) }
         def self.new(client:)

data/sig/openai/models/admin/organization/external_key_create_params.rbs

@@ -22,7 +22,7 @@ module OpenAI
               name: String,
               role_arn: String,
               type: :aws,
-              ?purpose: :ekm | :psp_decryption
+              ?purpose: OpenAI::Models::Admin::Organization::ExternalKeyCreateParams::Body::Aws::purpose
             }
             | {
               audience: String,
@@ -36,7 +36,7 @@ module OpenAI
               workload_identity_project_number: String,
               workload_identity_provider_id: String,
               ?kms_key_version: String,
-              ?purpose: :ekm | :psp_decryption
+              ?purpose: OpenAI::Models::Admin::Organization::ExternalKeyCreateParams::Body::Gcp::purpose
             }
             | {
               key_name: String,
@@ -45,7 +45,7 @@ module OpenAI
               type: :azure,
               vault_uri: String,
               ?key_version: String,
-              ?purpose: :ekm | :psp_decryption
+              ?purpose: OpenAI::Models::Admin::Organization::ExternalKeyCreateParams::Body::Azure::purpose
             }
           ) -> (OpenAI::Models::Admin::Organization::ExternalKeyCreateParams::body
           | {
@@ -54,7 +54,7 @@ module OpenAI
             name: String,
             role_arn: String,
             type: :aws,
-            ?purpose: (:ekm | :psp_decryption)
+            ?purpose: OpenAI::Models::Admin::Organization::ExternalKeyCreateParams::Body::Aws::purpose
           }
           | {
             audience: String,
@@ -68,7 +68,7 @@ module OpenAI
             workload_identity_project_number: String,
             workload_identity_provider_id: String,
             ?kms_key_version: String,
-            ?purpose: (:ekm | :psp_decryption)
+            ?purpose: OpenAI::Models::Admin::Organization::ExternalKeyCreateParams::Body::Gcp::purpose
           }
           | {
             key_name: String,
@@ -77,7 +77,7 @@ module OpenAI
             type: :azure,
             vault_uri: String,
             ?key_version: String,
-            ?purpose: (:ekm | :psp_decryption)
+            ?purpose: OpenAI::Models::Admin::Organization::ExternalKeyCreateParams::Body::Azure::purpose
           })
 
           def initialize: (
@@ -88,7 +88,7 @@ module OpenAI
               name: String,
               role_arn: String,
               type: :aws,
-              ?purpose: :ekm | :psp_decryption
+              ?purpose: OpenAI::Models::Admin::Organization::ExternalKeyCreateParams::Body::Aws::purpose
             }
             | {
               audience: String,
@@ -102,7 +102,7 @@ module OpenAI
               workload_identity_project_number: String,
               workload_identity_provider_id: String,
               ?kms_key_version: String,
-              ?purpose: :ekm | :psp_decryption
+              ?purpose: OpenAI::Models::Admin::Organization::ExternalKeyCreateParams::Body::Gcp::purpose
             }
             | {
               key_name: String,
@@ -111,7 +111,7 @@ module OpenAI
               type: :azure,
               vault_uri: String,
               ?key_version: String,
-              ?purpose: :ekm | :psp_decryption
+              ?purpose: OpenAI::Models::Admin::Organization::ExternalKeyCreateParams::Body::Azure::purpose
             },
             ?request_options: OpenAI::request_opts
           ) -> void

data/sig/openai/models/admin/organization/workload_identity_provider.rbs

@@ -0,0 +1,136 @@
+module OpenAI
+  module Models
+    module Admin
+      module Organization
+        type workload_identity_provider =
+          {
+            id: String,
+            attribute_transformations: ::Array[OpenAI::Admin::Organization::WorkloadIdentityProvider::AttributeTransformation],
+            audience: String,
+            created_at: Integer,
+            description: String?,
+            enabled: bool,
+            issuer: String,
+            name: String,
+            ?object: :"organization.workload_identity_provider",
+            ?type: :oidc,
+            updated_at: Integer,
+            verification: OpenAI::Models::Admin::Organization::WorkloadIdentityProvider::verification
+          }
+
+        class WorkloadIdentityProvider < OpenAI::Internal::Type::BaseModel
+          attr_accessor id: String
+
+          attr_accessor attribute_transformations: ::Array[OpenAI::Admin::Organization::WorkloadIdentityProvider::AttributeTransformation]
+
+          attr_accessor audience: String
+
+          attr_accessor created_at: Integer
+
+          attr_accessor description: String?
+
+          attr_accessor enabled: bool
+
+          attr_accessor issuer: String
+
+          attr_accessor name: String
+
+          attr_accessor object: :"organization.workload_identity_provider"
+
+          attr_accessor type: :oidc
+
+          attr_accessor updated_at: Integer
+
+          attr_accessor verification: OpenAI::Models::Admin::Organization::WorkloadIdentityProvider::verification
+
+          def initialize: (
+            id: String,
+            attribute_transformations: ::Array[OpenAI::Admin::Organization::WorkloadIdentityProvider::AttributeTransformation],
+            audience: String,
+            created_at: Integer,
+            description: String?,
+            enabled: bool,
+            issuer: String,
+            name: String,
+            updated_at: Integer,
+            verification: OpenAI::Models::Admin::Organization::WorkloadIdentityProvider::verification,
+            ?object: :"organization.workload_identity_provider",
+            ?type: :oidc
+          ) -> void
+
+          def to_hash: -> {
+            id: String,
+            attribute_transformations: ::Array[OpenAI::Admin::Organization::WorkloadIdentityProvider::AttributeTransformation],
+            audience: String,
+            created_at: Integer,
+            description: String?,
+            enabled: bool,
+            issuer: String,
+            name: String,
+            ?object: :"organization.workload_identity_provider",
+            ?type: :oidc,
+            updated_at: Integer,
+            verification: OpenAI::Models::Admin::Organization::WorkloadIdentityProvider::verification
+          }
+
+          type attribute_transformation =
+            { attribute: String, expression: String }
+
+          class AttributeTransformation < OpenAI::Internal::Type::BaseModel
+            attr_accessor attribute: String
+
+            attr_accessor expression: String
+
+            def initialize: (attribute: String, expression: String) -> void
+
+            def to_hash: -> { attribute: String, expression: String }
+          end
+
+          type verification =
+            OpenAI::Admin::Organization::WorkloadIdentityProvider::Verification::Discovery
+            | OpenAI::Admin::Organization::WorkloadIdentityProvider::Verification::UploadedJwks
+
+          module Verification
+            extend OpenAI::Internal::Type::Union
+
+            type discovery = { discovery_url: String?, ?type: :discovery }
+
+            class Discovery < OpenAI::Internal::Type::BaseModel
+              attr_accessor discovery_url: String?
+
+              attr_accessor type: :discovery
+
+              def initialize: (
+                discovery_url: String?,
+                ?type: :discovery
+              ) -> void
+
+              def to_hash: -> { discovery_url: String?, ?type: :discovery }
+            end
+
+            type uploaded_jwks =
+              { jwks: ::Hash[Symbol, top], ?type: :uploaded_jwks }
+
+            class UploadedJwks < OpenAI::Internal::Type::BaseModel
+              attr_accessor jwks: ::Hash[Symbol, top]
+
+              attr_accessor type: :uploaded_jwks
+
+              def initialize: (
+                jwks: ::Hash[Symbol, top],
+                ?type: :uploaded_jwks
+              ) -> void
+
+              def to_hash: -> {
+                jwks: ::Hash[Symbol, top],
+                ?type: :uploaded_jwks
+              }
+            end
+
+            def self?.variants: -> ::Array[OpenAI::Models::Admin::Organization::WorkloadIdentityProvider::verification]
+          end
+        end
+      end
+    end
+  end
+end

data/sig/openai/models/admin/organization/workload_identity_provider_create_params.rbs

@@ -0,0 +1,140 @@
+module OpenAI
+  module Models
+    module Admin
+      module Organization
+        type workload_identity_provider_create_params =
+          {
+            audience: String,
+            issuer: String,
+            name: String,
+            ?type: :oidc,
+            ?attribute_transformations: ::Array[OpenAI::Admin::Organization::WorkloadIdentityProviderCreateParams::AttributeTransformation],
+            ?description: String,
+            ?enabled: bool,
+            ?verification: OpenAI::Models::Admin::Organization::WorkloadIdentityProviderCreateParams::verification,
+            ?request_options: OpenAI::request_opts
+          }
+
+        class WorkloadIdentityProviderCreateParams < OpenAI::Internal::Type::BaseModel
+          extend OpenAI::Internal::Type::RequestParameters::Converter
+          include OpenAI::Internal::Type::RequestParameters
+
+          attr_accessor audience: String
+
+          attr_accessor issuer: String
+
+          attr_accessor name: String
+
+          attr_accessor type: :oidc
+
+          attr_reader attribute_transformations: ::Array[OpenAI::Admin::Organization::WorkloadIdentityProviderCreateParams::AttributeTransformation]?
+
+          def attribute_transformations=: (
+            ::Array[OpenAI::Admin::Organization::WorkloadIdentityProviderCreateParams::AttributeTransformation]
+          ) -> ::Array[OpenAI::Admin::Organization::WorkloadIdentityProviderCreateParams::AttributeTransformation]
+
+          attr_reader description: String?
+
+          def description=: (String) -> String
+
+          attr_reader enabled: bool?
+
+          def enabled=: (bool) -> bool
+
+          attr_reader verification: OpenAI::Models::Admin::Organization::WorkloadIdentityProviderCreateParams::verification?
+
+          def verification=: (
+            OpenAI::Models::Admin::Organization::WorkloadIdentityProviderCreateParams::verification
+            | { discovery_url: String?, type: :discovery }
+            | { jwks: ::Hash[Symbol, top], type: :uploaded_jwks }
+          ) -> (OpenAI::Models::Admin::Organization::WorkloadIdentityProviderCreateParams::verification
+          | { discovery_url: String?, type: :discovery }
+          | { jwks: ::Hash[Symbol, top], type: :uploaded_jwks })
+
+          def initialize: (
+            audience: String,
+            issuer: String,
+            name: String,
+            ?attribute_transformations: ::Array[OpenAI::Admin::Organization::WorkloadIdentityProviderCreateParams::AttributeTransformation],
+            ?description: String,
+            ?enabled: bool,
+            ?verification: OpenAI::Models::Admin::Organization::WorkloadIdentityProviderCreateParams::verification
+            | { discovery_url: String?, type: :discovery }
+            | { jwks: ::Hash[Symbol, top], type: :uploaded_jwks },
+            ?type: :oidc,
+            ?request_options: OpenAI::request_opts
+          ) -> void
+
+          def to_hash: -> {
+            audience: String,
+            issuer: String,
+            name: String,
+            ?type: :oidc,
+            ?attribute_transformations: ::Array[OpenAI::Admin::Organization::WorkloadIdentityProviderCreateParams::AttributeTransformation],
+            ?description: String,
+            ?enabled: bool,
+            ?verification: OpenAI::Models::Admin::Organization::WorkloadIdentityProviderCreateParams::verification,
+            ?request_options: OpenAI::RequestOptions
+          }
+
+          type attribute_transformation =
+            { attribute: String, expression: String }
+
+          class AttributeTransformation < OpenAI::Internal::Type::BaseModel
+            attr_accessor attribute: String
+
+            attr_accessor expression: String
+
+            def initialize: (attribute: String, expression: String) -> void
+
+            def to_hash: -> { attribute: String, expression: String }
+          end
+
+          type verification =
+            OpenAI::Admin::Organization::WorkloadIdentityProviderCreateParams::Verification::Discovery
+            | OpenAI::Admin::Organization::WorkloadIdentityProviderCreateParams::Verification::UploadedJwks
+
+          module Verification
+            extend OpenAI::Internal::Type::Union
+
+            type discovery = { discovery_url: String?, ?type: :discovery }
+
+            class Discovery < OpenAI::Internal::Type::BaseModel
+              attr_accessor discovery_url: String?
+
+              attr_accessor type: :discovery
+
+              def initialize: (
+                discovery_url: String?,
+                ?type: :discovery
+              ) -> void
+
+              def to_hash: -> { discovery_url: String?, ?type: :discovery }
+            end
+
+            type uploaded_jwks =
+              { jwks: ::Hash[Symbol, top], ?type: :uploaded_jwks }
+
+            class UploadedJwks < OpenAI::Internal::Type::BaseModel
+              attr_accessor jwks: ::Hash[Symbol, top]
+
+              attr_accessor type: :uploaded_jwks
+
+              def initialize: (
+                jwks: ::Hash[Symbol, top],
+                ?type: :uploaded_jwks
+              ) -> void
+
+              def to_hash: -> {
+                jwks: ::Hash[Symbol, top],
+                ?type: :uploaded_jwks
+              }
+            end
+
+            def self?.variants: -> ::Array[OpenAI::Models::Admin::Organization::WorkloadIdentityProviderCreateParams::verification]
+          end
+        end
+      end
+    end
+  end
+end

data/sig/openai/models/admin/organization/workload_identity_provider_delete_params.rbs

@@ -0,0 +1,30 @@
+module OpenAI
+  module Models
+    module Admin
+      module Organization
+        type workload_identity_provider_delete_params =
+          {
+            workload_identity_provider_id: String,
+            ?request_options: OpenAI::request_opts
+          }
+
+        class WorkloadIdentityProviderDeleteParams < OpenAI::Internal::Type::BaseModel
+          extend OpenAI::Internal::Type::RequestParameters::Converter
+          include OpenAI::Internal::Type::RequestParameters
+
+          attr_accessor workload_identity_provider_id: String
+
+          def initialize: (
+            workload_identity_provider_id: String,
+            ?request_options: OpenAI::request_opts
+          ) -> void
+
+          def to_hash: -> {
+            workload_identity_provider_id: String,
+            ?request_options: OpenAI::RequestOptions
+          }
+        end
+      end
+    end
+  end
+end

data/sig/openai/models/admin/organization/workload_identity_provider_deleted.rbs

@@ -0,0 +1,34 @@
+module OpenAI
+  module Models
+    module Admin
+      module Organization
+        type workload_identity_provider_deleted =
+          {
+            id: String,
+            deleted: bool,
+            ?object: :"organization.workload_identity_provider.deleted"
+          }
+
+        class WorkloadIdentityProviderDeleted < OpenAI::Internal::Type::BaseModel
+          attr_accessor id: String
+
+          attr_accessor deleted: bool
+
+          attr_accessor object: :"organization.workload_identity_provider.deleted"
+
+          def initialize: (
+            id: String,
+            deleted: bool,
+            ?object: :"organization.workload_identity_provider.deleted"
+          ) -> void
+
+          def to_hash: -> {
+            id: String,
+            deleted: bool,
+            ?object: :"organization.workload_identity_provider.deleted"
+          }
+        end
+      end
+    end
+  end
+end

data/sig/openai/models/admin/organization/workload_identity_provider_list_params.rbs

@@ -0,0 +1,59 @@
+module OpenAI
+  module Models
+    module Admin
+      module Organization
+        type workload_identity_provider_list_params =
+          {
+            ?after: String,
+            ?limit: Integer,
+            ?order: OpenAI::Models::Admin::Organization::WorkloadIdentityProviderListParams::order,
+            ?request_options: OpenAI::request_opts
+          }
+
+        class WorkloadIdentityProviderListParams < OpenAI::Internal::Type::BaseModel
+          extend OpenAI::Internal::Type::RequestParameters::Converter
+          include OpenAI::Internal::Type::RequestParameters
+
+          attr_reader after: String?
+
+          def after=: (String) -> String
+
+          attr_reader limit: Integer?
+
+          def limit=: (Integer) -> Integer
+
+          attr_reader order: OpenAI::Models::Admin::Organization::WorkloadIdentityProviderListParams::order?
+
+          def order=: (
+            OpenAI::Models::Admin::Organization::WorkloadIdentityProviderListParams::order
+          ) -> OpenAI::Models::Admin::Organization::WorkloadIdentityProviderListParams::order
+
+          def initialize: (
+            ?after: String,
+            ?limit: Integer,
+            ?order: OpenAI::Models::Admin::Organization::WorkloadIdentityProviderListParams::order,
+            ?request_options: OpenAI::request_opts
+          ) -> void
+
+          def to_hash: -> {
+            ?after: String,
+            ?limit: Integer,
+            ?order: OpenAI::Models::Admin::Organization::WorkloadIdentityProviderListParams::order,
+            ?request_options: OpenAI::RequestOptions
+          }
+
+          type order = :asc | :desc
+
+          module Order
+            extend OpenAI::Internal::Type::Union
+
+            def self?.variants: -> ::Array[OpenAI::Models::Admin::Organization::WorkloadIdentityProviderListParams::order]
+
+            ASC: :asc
+            DESC: :desc
+          end
+        end
+      end
+    end
+  end
+end

data/sig/openai/models/admin/organization/workload_identity_provider_retrieve_params.rbs

@@ -0,0 +1,30 @@
+module OpenAI
+  module Models
+    module Admin
+      module Organization
+        type workload_identity_provider_retrieve_params =
+          {
+            workload_identity_provider_id: String,
+            ?request_options: OpenAI::request_opts
+          }
+
+        class WorkloadIdentityProviderRetrieveParams < OpenAI::Internal::Type::BaseModel
+          extend OpenAI::Internal::Type::RequestParameters::Converter
+          include OpenAI::Internal::Type::RequestParameters
+
+          attr_accessor workload_identity_provider_id: String
+
+          def initialize: (
+            workload_identity_provider_id: String,
+            ?request_options: OpenAI::request_opts
+          ) -> void
+
+          def to_hash: -> {
+            workload_identity_provider_id: String,
+            ?request_options: OpenAI::RequestOptions
+          }
+        end
+      end
+    end
+  end
+end