openai 0.57.0 → 0.59.0

data/lib/openai/client.rb

@@ -15,6 +15,8 @@ module OpenAI
     # Default max retry delay in seconds.
     DEFAULT_MAX_RETRY_DELAY = 8.0
 
+    WORKLOAD_IDENTITY_API_KEY_PLACEHOLDER = "workload-identity-auth"
+
     # @return [String]
     attr_reader :api_key
 
@@ -27,6 +29,10 @@ module OpenAI
     # @return [String, nil]
     attr_reader :webhook_secret
 
+    # @return [OpenAI::Auth::WorkloadIdentityAuth, nil]
+    # @api private
+    attr_reader :workload_identity_auth
+
     # Given a prompt, the model will return one or more predicted completions, and can
     # also return the probabilities of alternative tokens at each position.
     # @return [OpenAI::Resources::Completions]
@@ -116,13 +122,48 @@ module OpenAI
       {"authorization" => "Bearer #{@api_key}"}
     end
 
+    # @api private
+    private def request_replayable?(request)
+      body = request[:body]
+      return true if body.nil? || body.is_a?(String)
+      return false if body.respond_to?(:read)
+      true
+    end
+
+    # @api private
+    private def send_request(request, redirect_count:, retry_count:, send_retry_header:)
+      return super unless @workload_identity_auth
+
+      token = @workload_identity_auth.get_token
+      updated_headers = request[:headers].merge("authorization" => "Bearer #{token}")
+      updated_request = request.merge(headers: updated_headers)
+
+      begin
+        super(updated_request, redirect_count: redirect_count, retry_count: retry_count, send_retry_header: send_retry_header)
+      rescue OpenAI::Errors::AuthenticationError
+        raise unless retry_count.zero? && request_replayable?(request)
+        @workload_identity_auth.invalidate_token
+
+        fresh_token = @workload_identity_auth.get_token
+        refreshed_headers = request[:headers].merge("authorization" => "Bearer #{fresh_token}")
+        refreshed_request = request.merge(headers: refreshed_headers)
+
+        super(refreshed_request, redirect_count: redirect_count, retry_count: retry_count + 1, send_retry_header: send_retry_header)
+      end
+    end
+
     # Creates and returns a new client for interacting with the API.
     #
-    # @param api_key [String, nil] Defaults to `ENV["OPENAI_API_KEY"]`
+    # @param api_key [String, nil] Defaults to `ENV["OPENAI_API_KEY"]`.
+    #   Mutually exclusive with `workload_identity`.
+    #
+    # @param workload_identity [OpenAI::Auth::WorkloadIdentity, nil]
+    #   OAuth2 workload identity configuration for token exchange authentication.
+    #   Mutually exclusive with `api_key`.
     #
-    # @param organization [String, nil] Defaults to `ENV["OPENAI_ORG_ID"]`
+    # @param organization [String, nil] Defaults to `ENV["OPENAI_ORG_ID"]`.
     #
-    # @param project [String, nil] Defaults to `ENV["OPENAI_PROJECT_ID"]`
+    # @param project [String, nil] Defaults to `ENV["OPENAI_PROJECT_ID"]`.
     #
     # @param webhook_secret [String, nil] Defaults to `ENV["OPENAI_WEBHOOK_SECRET"]`
     #
@@ -138,6 +179,7 @@ module OpenAI
     # @param max_retry_delay [Float]
     def initialize(
       api_key: ENV["OPENAI_API_KEY"],
+      workload_identity: nil,
       organization: ENV["OPENAI_ORG_ID"],
       project: ENV["OPENAI_PROJECT_ID"],
       webhook_secret: ENV["OPENAI_WEBHOOK_SECRET"],
@@ -149,7 +191,20 @@ module OpenAI
     )
       base_url ||= "https://api.openai.com/v1"
 
-      if api_key.nil?
+      if workload_identity && api_key && api_key != WORKLOAD_IDENTITY_API_KEY_PLACEHOLDER
+        raise ArgumentError.new(
+          "The `api_key` and `workload_identity` arguments are mutually exclusive; " \
+          "only one can be passed at a time."
+        )
+      end
+
+      if workload_identity
+        @workload_identity_auth = OpenAI::Auth::WorkloadIdentityAuth.new(
+          workload_identity,
+          organization
+        )
+        api_key = WORKLOAD_IDENTITY_API_KEY_PLACEHOLDER
+      elsif api_key.nil?
         raise ArgumentError.new("api_key is required, and can be set via environ: \"OPENAI_API_KEY\"")
       end
 

data/lib/openai/errors.rb

@@ -263,5 +263,44 @@ module OpenAI
     class InternalServerError < OpenAI::Errors::APIStatusError
       HTTP_STATUS = (500..)
     end
+
+    class OAuthError < OpenAI::Errors::APIStatusError
+      # @return [OpenAI::Models::OAuthErrorCode::Variants, nil]
+      attr_reader :error_code
+
+      def initialize(status:, body:, headers:)
+        @error_code = OpenAI::Internal::Type::Converter.coerce(OpenAI::Models::OAuthErrorCode, body&.dig(:error))
+
+        message =
+          if body&.dig(:error_description)
+            body[:error_description]
+          elsif @error_code
+            @error_code
+          else
+            "OAuth2 authentication error"
+          end
+
+        super(
+          url: URI("https://auth.openai.com/oauth/token"),
+          status: status,
+          headers: headers,
+          body: body,
+          request: nil,
+          response: nil,
+          message: message
+        )
+      end
+    end
+
+    class SubjectTokenProviderError < OpenAI::Errors::Error
+      attr_reader :provider
+      attr_accessor :cause
+
+      def initialize(message:, provider:, cause: nil)
+        super(message)
+        @provider = provider
+        @cause = cause
+      end
+    end
   end
 end

data/lib/openai/internal/util.rb

@@ -157,7 +157,7 @@ module OpenAI
           in Hash | nil => coerced
             coerced
           else
-            message = "Expected a #{Hash} or #{OpenAI::Internal::Type::BaseModel}, got #{data.inspect}"
+            message = "Expected a #{Hash} or #{OpenAI::Internal::Type::BaseModel}, got #{input.inspect}"
             raise ArgumentError.new(message)
           end
         end
@@ -237,6 +237,11 @@ module OpenAI
         end
       end
 
+      # @type [Regexp]
+      #
+      # https://www.rfc-editor.org/rfc/rfc3986.html#section-3.3
+      RFC_3986_NOT_PCHARS = /[^A-Za-z0-9\-._~!$&'()*+,;=:@]+/
+
       class << self
         # @api private
         #
@@ -247,6 +252,15 @@ module OpenAI
           "#{uri.scheme}://#{uri.host}#{":#{uri.port}" unless uri.port == uri.default_port}"
         end
 
+        # @api private
+        #
+        # @param path [String, Integer]
+        #
+        # @return [String]
+        def encode_path(path)
+          path.to_s.gsub(OpenAI::Internal::Util::RFC_3986_NOT_PCHARS) { ERB::Util.url_encode(_1) }
+        end
+
         # @api private
         #
         # @param path [String, Array<String>]
@@ -259,7 +273,7 @@ module OpenAI
           in []
             ""
           in [String => p, *interpolations]
-            encoded = interpolations.map { ERB::Util.url_encode(_1) }
+            encoded = interpolations.map { encode_path(_1) }
             format(p, *encoded)
           end
         end
@@ -571,16 +585,15 @@ module OpenAI
           y << "Content-Disposition: form-data"
 
           unless key.nil?
-            name = ERB::Util.url_encode(key.to_s)
-            y << "; name=\"#{name}\""
+            y << "; name=\"#{key}\""
           end
 
           case val
           in OpenAI::FilePart unless val.filename.nil?
-            filename = ERB::Util.url_encode(val.filename)
+            filename = encode_path(val.filename)
             y << "; filename=\"#{filename}\""
           in Pathname | IO
-            filename = ERB::Util.url_encode(::File.basename(val.to_path))
+            filename = encode_path(::File.basename(val.to_path))
             y << "; filename=\"#{filename}\""
           else
           end
@@ -597,6 +610,7 @@ module OpenAI
         #
         # @return [Array(String, Enumerable<String>)]
         private def encode_multipart_streaming(body)
+          # rubocop:disable Style/CaseEquality
           # RFC 1521 Section 7.2.1 says we should have 70 char maximum for boundary length
           boundary = SecureRandom.urlsafe_base64(46)
 
@@ -606,7 +620,7 @@ module OpenAI
             in Hash
               body.each do |key, val|
                 case val
-                in Array if val.all? { primitive?(_1) }
+                in Array if val.all? { primitive?(_1) || OpenAI::Internal::Type::FileInput === _1 }
                   val.each do |v|
                     write_multipart_chunk(y, boundary: boundary, key: key, val: v, closing: closing)
                   end
@@ -622,6 +636,7 @@ module OpenAI
 
           fused_io = fused_enum(strio) { closing.each(&:call) }
           [boundary, fused_io]
+          # rubocop:enable Style/CaseEquality
         end
 
         # @api private

data/lib/openai/models/conversations/message.rb

@@ -36,7 +36,16 @@ module OpenAI
         #   @return [Symbol, :message]
         required :type, const: :message
 
-        # @!method initialize(id:, content:, role:, status:, type: :message)
+        # @!attribute phase
+        #   Labels an `assistant` message as intermediate commentary (`commentary`) or the
+        #   final answer (`final_answer`). For models like `gpt-5.3-codex` and beyond, when
+        #   sending follow-up requests, preserve and resend phase on all assistant messages
+        #   — dropping it can degrade performance. Not used for user messages.
+        #
+        #   @return [Symbol, OpenAI::Models::Conversations::Message::Phase, nil]
+        optional :phase, enum: -> { OpenAI::Conversations::Message::Phase }, nil?: true
+
+        # @!method initialize(id:, content:, role:, status:, phase: nil, type: :message)
         #   Some parameter documentations has been truncated, see
         #   {OpenAI::Models::Conversations::Message} for more details.
         #
@@ -50,6 +59,8 @@ module OpenAI
         #
         #   @param status [Symbol, OpenAI::Models::Conversations::Message::Status] The status of item. One of `in_progress`, `completed`, or `incomplete`. Populate
         #
+        #   @param phase [Symbol, OpenAI::Models::Conversations::Message::Phase, nil] Labels an `assistant` message as intermediate commentary (`commentary`) or the f
+        #
         #   @param type [Symbol, :message] The type of the message. Always set to `message`.
 
         # A content part that makes up an input or output item.
@@ -144,6 +155,22 @@ module OpenAI
           # @!method self.values
           #   @return [Array<Symbol>]
         end
+
+        # Labels an `assistant` message as intermediate commentary (`commentary`) or the
+        # final answer (`final_answer`). For models like `gpt-5.3-codex` and beyond, when
+        # sending follow-up requests, preserve and resend phase on all assistant messages
+        # — dropping it can degrade performance. Not used for user messages.
+        #
+        # @see OpenAI::Models::Conversations::Message#phase
+        module Phase
+          extend OpenAI::Internal::Type::Enum
+
+          COMMENTARY = :commentary
+          FINAL_ANSWER = :final_answer
+
+          # @!method self.values
+          #   @return [Array<Symbol>]
+        end
       end
     end
   end

data/lib/openai/models/oauth_error_code.rb

@@ -0,0 +1,29 @@
+# frozen_string_literal: true
+
+module OpenAI
+  module Models
+    module OAuthErrorCode
+      extend OpenAI::Internal::Type::Union
+
+      variant const: -> { OpenAI::Models::OAuthErrorCode::INVALID_GRANT }
+
+      variant const: -> { OpenAI::Models::OAuthErrorCode::INVALID_SUBJECT_TOKEN }
+
+      variant String
+
+      # @!method self.variants
+      #   @return [Array(Symbol, String)]
+
+      define_sorbet_constant!(:Variants) do
+        T.type_alias { T.any(OpenAI::OAuthErrorCode::TaggedSymbol, String) }
+      end
+
+      # @!group
+
+      INVALID_GRANT = :invalid_grant
+      INVALID_SUBJECT_TOKEN = :invalid_subject_token
+
+      # @!endgroup
+    end
+  end
+end

data/lib/openai/models/realtime/realtime_session_create_request.rb

@@ -88,8 +88,9 @@ module OpenAI
 
         # @!attribute tracing
         #   Realtime API can write session traces to the
-        #   [Traces Dashboard](/logs?api=traces). Set to null to disable tracing. Once
-        #   tracing is enabled for a session, the configuration cannot be modified.
+        #   [Traces Dashboard](https://platform.openai.com/logs?api=traces). Set to null to
+        #   disable tracing. Once tracing is enabled for a session, the configuration cannot
+        #   be modified.
         #
         #   `auto` will create a trace for the session with default values for the workflow
         #   name, group id, and metadata.
@@ -144,7 +145,7 @@ module OpenAI
         #
         #   @param tools [Array<OpenAI::Models::Realtime::RealtimeFunctionTool, OpenAI::Models::Realtime::RealtimeToolsConfigUnion::Mcp>] Tools available to the model.
         #
-        #   @param tracing [Symbol, :auto, OpenAI::Models::Realtime::RealtimeTracingConfig::TracingConfiguration, nil] Realtime API can write session traces to the [Traces Dashboard](/logs?api=traces
+        #   @param tracing [Symbol, :auto, OpenAI::Models::Realtime::RealtimeTracingConfig::TracingConfiguration, nil] Realtime API can write session traces to the [Traces Dashboard](https://platform
         #
         #   @param truncation [Symbol, OpenAI::Models::Realtime::RealtimeTruncation::RealtimeTruncationStrategy, OpenAI::Models::Realtime::RealtimeTruncationRetentionRatio] When the number of tokens in a conversation exceeds the model's input token limi
         #

data/lib/openai/models/realtime/realtime_session_create_response.rb

@@ -96,8 +96,9 @@ module OpenAI
 
         # @!attribute tracing
         #   Realtime API can write session traces to the
-        #   [Traces Dashboard](/logs?api=traces). Set to null to disable tracing. Once
-        #   tracing is enabled for a session, the configuration cannot be modified.
+        #   [Traces Dashboard](https://platform.openai.com/logs?api=traces). Set to null to
+        #   disable tracing. Once tracing is enabled for a session, the configuration cannot
+        #   be modified.
         #
         #   `auto` will create a trace for the session with default values for the workflow
         #   name, group id, and metadata.
@@ -155,7 +156,7 @@ module OpenAI
         #
         #   @param tools [Array<OpenAI::Models::Realtime::RealtimeFunctionTool, OpenAI::Models::Realtime::RealtimeSessionCreateResponse::Tool::McpTool>] Tools available to the model.
         #
-        #   @param tracing [Symbol, :auto, OpenAI::Models::Realtime::RealtimeSessionCreateResponse::Tracing::TracingConfiguration, nil] Realtime API can write session traces to the [Traces Dashboard](/logs?api=traces
+        #   @param tracing [Symbol, :auto, OpenAI::Models::Realtime::RealtimeSessionCreateResponse::Tracing::TracingConfiguration, nil] Realtime API can write session traces to the [Traces Dashboard](https://platform
         #
         #   @param truncation [Symbol, OpenAI::Models::Realtime::RealtimeTruncation::RealtimeTruncationStrategy, OpenAI::Models::Realtime::RealtimeTruncationRetentionRatio] When the number of tokens in a conversation exceeds the model's input token limi
         #
@@ -1024,8 +1025,9 @@ module OpenAI
         end
 
         # Realtime API can write session traces to the
-        # [Traces Dashboard](/logs?api=traces). Set to null to disable tracing. Once
-        # tracing is enabled for a session, the configuration cannot be modified.
+        # [Traces Dashboard](https://platform.openai.com/logs?api=traces). Set to null to
+        # disable tracing. Once tracing is enabled for a session, the configuration cannot
+        # be modified.
         #
         # `auto` will create a trace for the session with default values for the workflow
         # name, group id, and metadata.

data/lib/openai/models/realtime/realtime_tracing_config.rb

@@ -4,8 +4,9 @@ module OpenAI
   module Models
     module Realtime
       # Realtime API can write session traces to the
-      # [Traces Dashboard](/logs?api=traces). Set to null to disable tracing. Once
-      # tracing is enabled for a session, the configuration cannot be modified.
+      # [Traces Dashboard](https://platform.openai.com/logs?api=traces). Set to null to
+      # disable tracing. Once tracing is enabled for a session, the configuration cannot
+      # be modified.
       #
       # `auto` will create a trace for the session with default values for the workflow
       # name, group id, and metadata.

data/lib/openai/models/responses/response_input_file.rb

@@ -10,6 +10,14 @@ module OpenAI
         #   @return [Symbol, :input_file]
         required :type, const: :input_file
 
+        # @!attribute detail
+        #   The detail level of the file to be sent to the model. Use `low` for the default
+        #   rendering behavior, or `high` to render the file at higher quality. Defaults to
+        #   `low`.
+        #
+        #   @return [Symbol, OpenAI::Models::Responses::ResponseInputFile::Detail, nil]
+        optional :detail, enum: -> { OpenAI::Responses::ResponseInputFile::Detail }
+
         # @!attribute file_data
         #   The content of the file to be sent to the model.
         #
@@ -34,12 +42,14 @@ module OpenAI
         #   @return [String, nil]
         optional :filename, String
 
-        # @!method initialize(file_data: nil, file_id: nil, file_url: nil, filename: nil, type: :input_file)
+        # @!method initialize(detail: nil, file_data: nil, file_id: nil, file_url: nil, filename: nil, type: :input_file)
         #   Some parameter documentations has been truncated, see
         #   {OpenAI::Models::Responses::ResponseInputFile} for more details.
         #
         #   A file input to the model.
         #
+        #   @param detail [Symbol, OpenAI::Models::Responses::ResponseInputFile::Detail] The detail level of the file to be sent to the model. Use `low` for the default
+        #
         #   @param file_data [String] The content of the file to be sent to the model.
         #
         #   @param file_id [String, nil] The ID of the file to be sent to the model.
@@ -49,6 +59,21 @@ module OpenAI
         #   @param filename [String] The name of the file to be sent to the model.
         #
         #   @param type [Symbol, :input_file] The type of the input item. Always `input_file`.
+
+        # The detail level of the file to be sent to the model. Use `low` for the default
+        # rendering behavior, or `high` to render the file at higher quality. Defaults to
+        # `low`.
+        #
+        # @see OpenAI::Models::Responses::ResponseInputFile#detail
+        module Detail
+          extend OpenAI::Internal::Type::Enum
+
+          LOW = :low
+          HIGH = :high
+
+          # @!method self.values
+          #   @return [Array<Symbol>]
+        end
       end
     end
   end

data/lib/openai/models/responses/response_input_file_content.rb

@@ -10,6 +10,14 @@ module OpenAI
         #   @return [Symbol, :input_file]
         required :type, const: :input_file
 
+        # @!attribute detail
+        #   The detail level of the file to be sent to the model. Use `low` for the default
+        #   rendering behavior, or `high` to render the file at higher quality. Defaults to
+        #   `low`.
+        #
+        #   @return [Symbol, OpenAI::Models::Responses::ResponseInputFileContent::Detail, nil]
+        optional :detail, enum: -> { OpenAI::Responses::ResponseInputFileContent::Detail }
+
         # @!attribute file_data
         #   The base64-encoded data of the file to be sent to the model.
         #
@@ -34,9 +42,14 @@ module OpenAI
         #   @return [String, nil]
         optional :filename, String, nil?: true
 
-        # @!method initialize(file_data: nil, file_id: nil, file_url: nil, filename: nil, type: :input_file)
+        # @!method initialize(detail: nil, file_data: nil, file_id: nil, file_url: nil, filename: nil, type: :input_file)
+        #   Some parameter documentations has been truncated, see
+        #   {OpenAI::Models::Responses::ResponseInputFileContent} for more details.
+        #
         #   A file input to the model.
         #
+        #   @param detail [Symbol, OpenAI::Models::Responses::ResponseInputFileContent::Detail] The detail level of the file to be sent to the model. Use `low` for the default
+        #
         #   @param file_data [String, nil] The base64-encoded data of the file to be sent to the model.
         #
         #   @param file_id [String, nil] The ID of the file to be sent to the model.
@@ -46,6 +59,21 @@ module OpenAI
         #   @param filename [String, nil] The name of the file to be sent to the model.
         #
         #   @param type [Symbol, :input_file] The type of the input item. Always `input_file`.
+
+        # The detail level of the file to be sent to the model. Use `low` for the default
+        # rendering behavior, or `high` to render the file at higher quality. Defaults to
+        # `low`.
+        #
+        # @see OpenAI::Models::Responses::ResponseInputFileContent#detail
+        module Detail
+          extend OpenAI::Internal::Type::Enum
+
+          LOW = :low
+          HIGH = :high
+
+          # @!method self.values
+          #   @return [Array<Symbol>]
+        end
       end
     end
   end

data/lib/openai/models/vector_stores/file_batch_create_params.rb

@@ -38,8 +38,9 @@ module OpenAI
         #   A list of [File](https://platform.openai.com/docs/api-reference/files) IDs that
         #   the vector store should use. Useful for tools like `file_search` that can access
         #   files. If `attributes` or `chunking_strategy` are provided, they will be applied
-        #   to all files in the batch. The maximum batch size is 2000 files. Mutually
-        #   exclusive with `files`.
+        #   to all files in the batch. The maximum batch size is 2000 files. This endpoint
+        #   is recommended for multi-file ingestion and helps reduce per-vector-store write
+        #   request pressure. Mutually exclusive with `files`.
         #
         #   @return [Array<String>, nil]
         optional :file_ids, OpenAI::Internal::Type::ArrayOf[String]
@@ -48,8 +49,9 @@ module OpenAI
         #   A list of objects that each include a `file_id` plus optional `attributes` or
         #   `chunking_strategy`. Use this when you need to override metadata for specific
         #   files. The global `attributes` or `chunking_strategy` will be ignored and must
-        #   be specified for each file. The maximum batch size is 2000 files. Mutually
-        #   exclusive with `file_ids`.
+        #   be specified for each file. The maximum batch size is 2000 files. This endpoint
+        #   is recommended for multi-file ingestion and helps reduce per-vector-store write
+        #   request pressure. Mutually exclusive with `file_ids`.
         #
         #   @return [Array<OpenAI::Models::VectorStores::FileBatchCreateParams::File>, nil]
         optional :files, -> { OpenAI::Internal::Type::ArrayOf[OpenAI::VectorStores::FileBatchCreateParams::File] }
@@ -87,7 +89,9 @@ module OpenAI
           # @!attribute file_id
           #   A [File](https://platform.openai.com/docs/api-reference/files) ID that the
           #   vector store should use. Useful for tools like `file_search` that can access
-          #   files.
+          #   files. For multi-file ingestion, we recommend
+          #   [`file_batches`](https://platform.openai.com/docs/api-reference/vector-stores-file-batches/createBatch)
+          #   to minimize per-vector-store write requests.
           #
           #   @return [String]
           required :file_id, String

data/lib/openai/models/vector_stores/file_create_params.rb

@@ -16,7 +16,9 @@ module OpenAI
         # @!attribute file_id
         #   A [File](https://platform.openai.com/docs/api-reference/files) ID that the
         #   vector store should use. Useful for tools like `file_search` that can access
-        #   files.
+        #   files. For multi-file ingestion, we recommend
+        #   [`file_batches`](https://platform.openai.com/docs/api-reference/vector-stores-file-batches/createBatch)
+        #   to minimize per-vector-store write requests.
         #
         #   @return [String]
         required :file_id, String

data/lib/openai/models.rb

@@ -207,6 +207,8 @@ module OpenAI
 
   ModerationTextInput = OpenAI::Models::ModerationTextInput
 
+  OAuthErrorCode = OpenAI::Models::OAuthErrorCode
+
   OtherFileChunkingStrategyObject = OpenAI::Models::OtherFileChunkingStrategyObject
 
   Realtime = OpenAI::Models::Realtime

data/lib/openai/resources/realtime/calls.rb

@@ -32,7 +32,7 @@ module OpenAI
         #
         # @param tools [Array<OpenAI::Models::Realtime::RealtimeFunctionTool, OpenAI::Models::Realtime::RealtimeToolsConfigUnion::Mcp>] Tools available to the model.
         #
-        # @param tracing [Symbol, :auto, OpenAI::Models::Realtime::RealtimeTracingConfig::TracingConfiguration, nil] Realtime API can write session traces to the [Traces Dashboard](/logs?api=traces
+        # @param tracing [Symbol, :auto, OpenAI::Models::Realtime::RealtimeTracingConfig::TracingConfiguration, nil] Realtime API can write session traces to the [Traces Dashboard](https://platform
         #
         # @param truncation [Symbol, OpenAI::Models::Realtime::RealtimeTruncation::RealtimeTruncationStrategy, OpenAI::Models::Realtime::RealtimeTruncationRetentionRatio] When the number of tokens in a conversation exceeds the model's input token limi
         #

data/lib/openai/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module OpenAI
-  VERSION = "0.57.0"
+  VERSION = "0.59.0"
 end

data/lib/openai.rb

@@ -29,6 +29,13 @@ require "connection_pool"
 
 # Package files.
 require_relative "openai/version"
+require_relative "openai/auth/workload_identity"
+require_relative "openai/auth/subject_token_provider"
+require_relative "openai/auth/token_type"
+require_relative "openai/auth/workload_identity_auth"
+require_relative "openai/auth/subject_token_providers/k8s_service_account_token_provider"
+require_relative "openai/auth/subject_token_providers/azure_managed_identity_token_provider"
+require_relative "openai/auth/subject_token_providers/gcp_id_token_provider"
 require_relative "openai/internal/util"
 require_relative "openai/internal/type/converter"
 require_relative "openai/internal/type/unknown"
@@ -421,6 +428,7 @@ require_relative "openai/models/moderation_image_url_input"
 require_relative "openai/models/moderation_model"
 require_relative "openai/models/moderation_multi_modal_input"
 require_relative "openai/models/moderation_text_input"
+require_relative "openai/models/oauth_error_code"
 require_relative "openai/models/other_file_chunking_strategy_object"
 require_relative "openai/models/realtime/audio_transcription"
 require_relative "openai/models/realtime/call_accept_params"

data/rbi/openai/auth.rbi

@@ -0,0 +1,55 @@
+# typed: strong
+
+module OpenAI
+  module Auth
+    module TokenType
+      JWT = T.let(:jwt, Symbol)
+      ID = T.let(:id, Symbol)
+    end
+
+    module SubjectTokenProvider
+      sig { returns(Symbol) }
+      def token_type
+      end
+
+      sig { returns(String) }
+      def get_token
+      end
+    end
+
+    class WorkloadIdentity
+      sig { returns(String) }
+      attr_reader :client_id
+
+      sig { returns(String) }
+      attr_reader :identity_provider_id
+
+      sig { returns(String) }
+      attr_reader :service_account_id
+
+      sig { returns(SubjectTokenProvider) }
+      attr_reader :provider
+
+      sig { returns(Integer) }
+      attr_reader :refresh_buffer_seconds
+
+      sig do
+        params(
+          client_id: T.any(String, Symbol),
+          identity_provider_id: T.any(String, Symbol),
+          service_account_id: T.any(String, Symbol),
+          provider: SubjectTokenProvider,
+          refresh_buffer_seconds: Integer
+        ).void
+      end
+      def initialize(
+        client_id:,
+        identity_provider_id:,
+        service_account_id:,
+        provider:,
+        refresh_buffer_seconds: 1200
+      )
+      end
+    end
+  end
+end

data/rbi/openai/internal/util.rbi

@@ -148,12 +148,20 @@ module OpenAI
         end
       end
 
+      # https://www.rfc-editor.org/rfc/rfc3986.html#section-3.3
+      RFC_3986_NOT_PCHARS = T.let(/[^A-Za-z0-9\-._~!$&'()*+,;=:@]+/, Regexp)
+
       class << self
         # @api private
         sig { params(uri: URI::Generic).returns(String) }
         def uri_origin(uri)
         end
 
+        # @api private
+        sig { params(path: T.any(String, Integer)).returns(String) }
+        def encode_path(path)
+        end
+
         # @api private
         sig { params(path: T.any(String, T::Array[String])).returns(String) }
         def interpolate_path(path)