openai 0.69.0 → 0.71.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: bbc95cabd7267bdcb79b50ffebb3e11579e47ccbe7d4e1c3a619647908a68abe
-  data.tar.gz: 3db020bf00a1ff077a23842a0391e388a0a7ca0070af312e100e8b866630127e
+  metadata.gz: d45de13708938c3dc943b2853f9f5117a2dbc8d857c1baeef8495122171a128e
+  data.tar.gz: 3606a6326a4ae576e012802835943bd21b1c1806bef44814579b2c2368230417
 SHA512:
-  metadata.gz: 7a357a83fe7d2db2cf7091e0c7eaff4f09520bcb464594f21cdab1904ba9487b71fec7ac5a0c970db4f9a1be7e135d8b1ec79776d60646dca0eea70cec48567c
-  data.tar.gz: c82dbd05da4e69a2ec45d36e1ee67f7bbdb31c45f851984a91553a0784004696cb53f6fac30ceb0d504713a39170e548c50f4e693bddd0ce51407108c7085b5a
+  metadata.gz: 898be95f8919ba95d82f477624721355a3d8657cc6cdcf240ecc2c48b835322e54f3293559a1402ae9f5e9a3029d731bc58a796ba4432869e4008772ec74439d
+  data.tar.gz: b19fcdc7009017b028bcbe99d8e20496f9955509b59507ff3f28917bf7bc89d22fd9aa53f28b0ed07812707dab7ff2622de595efafc547a958ad13dcb24c7df4

data/CHANGELOG.md

@@ -1,5 +1,32 @@
 # Changelog
 
+## 0.71.0 (2026-07-17)
+
+Full Changelog: [v0.70.0...v0.71.0](https://github.com/openai/openai-ruby/compare/v0.70.0...v0.71.0)
+
+### Features
+
+* **api:** /organization/projects/{project_id}/service_accounts/{service_account_id}/api_keys" endpoint ([fc60012](https://github.com/openai/openai-ruby/commit/fc6001297f385326c0b9d9c9cbf7f7bd66620c11))
+* **api:** manual updates ([4e499e5](https://github.com/openai/openai-ruby/commit/4e499e5e0ecee6306bde22b2b77cad619395a6cb))
+* **api:** manual updates ([2be1795](https://github.com/openai/openai-ruby/commit/2be179523d2d2838982ce8d6831c49fd324ccf35))
+
+## 0.70.0 (2026-07-14)
+
+Full Changelog: [v0.69.0...v0.70.0](https://github.com/openai/openai-ruby/compare/v0.69.0...v0.70.0)
+
+### Features
+
+* **api:** add owner_project_access to APIKeyListParams ([2741c65](https://github.com/openai/openai-ruby/commit/2741c6534029f6bb2fb26e3390bbffd30b7febc7))
+
+
+### Chores
+
+* **deps-dev:** bump activesupport from 8.1.1 to 8.1.2.1 ([#301](https://github.com/openai/openai-ruby/issues/301)) ([78727df](https://github.com/openai/openai-ruby/commit/78727dfdce3b6b890dbaabc2e55d17f72e4448ba))
+* **deps-dev:** bump addressable from 2.8.7 to 2.9.0 ([#298](https://github.com/openai/openai-ruby/issues/298)) ([6737a88](https://github.com/openai/openai-ruby/commit/6737a8875d5322bf63cc7721fee9cb69742c58b6))
+* **deps-dev:** bump yard from 0.9.37 to 0.9.44 ([#297](https://github.com/openai/openai-ruby/issues/297)) ([857dd68](https://github.com/openai/openai-ruby/commit/857dd6896271218715fc2187bbc918fabb4dba61))
+* fix CodeQL parsing of Sorbet fallback ([#303](https://github.com/openai/openai-ruby/issues/303)) ([7d0dcaf](https://github.com/openai/openai-ruby/commit/7d0dcaf72eafaa7184e2945a8f051ecb8395c158))
+* Harden GitHub Actions permissions ([#292](https://github.com/openai/openai-ruby/issues/292)) ([0a478dc](https://github.com/openai/openai-ruby/commit/0a478dca89668d9d1de58d710822810922189871))
+
 ## 0.69.0 (2026-07-09)
 
 Full Changelog: [v0.68.0...v0.69.0](https://github.com/openai/openai-ruby/compare/v0.68.0...v0.69.0)

data/README.md

@@ -15,7 +15,7 @@ To use this gem, install via Bundler by adding the following to your application
 <!-- x-release-please-start-version -->
 
 ```ruby
-gem "openai", "~> 0.69.0"
+gem "openai", "~> 0.71.0"
 ```
 
 <!-- x-release-please-end -->
@@ -107,6 +107,56 @@ puts(edited.data.first)
 
 Note that you can also pass a raw `IO` descriptor, but this disables retries, as the library can't be sure if the descriptor is a file or pipe (which cannot be rewound).
 
+## Amazon Bedrock
+
+Use the standard client with the Bedrock provider to call OpenAI models through Amazon Bedrock's OpenAI-compatible API. Add `aws-sdk-core` to your application for AWS credential discovery and SigV4 signing:
+
+```ruby
+gem "openai"
+gem "aws-sdk-core", "~> 3"
+```
+
+With your normal AWS credentials configured, only the region is required:
+
+```ruby
+require "openai"
+
+client = OpenAI::Client.new(
+  provider: OpenAI::Providers.bedrock(region: "us-west-2")
+)
+
+response = client.responses.create(
+  model: ENV.fetch("BEDROCK_MODEL"),
+  input: "Say hello!"
+)
+
+puts(response.output_text)
+```
+
+The provider uses the standard AWS credential chain, including environment credentials, `~/.aws/credentials`, `~/.aws/config`, `AWS_PROFILE`, named profiles, SSO and assume-role profiles, and workload credentials. Select a profile explicitly with:
+
+```ruby
+client = OpenAI::Client.new(
+  provider: OpenAI::Providers.bedrock(
+    region: "us-west-2",
+    profile: "engineering"
+  )
+)
+```
+
+`AWS_BEARER_TOKEN_BEDROCK` and explicit Bedrock bearer credentials are also supported. Bearer authentication does not load or require `aws-sdk-core`:
+
+```ruby
+client = OpenAI::Client.new(
+  provider: OpenAI::Providers.bedrock(
+    region: "us-west-2",
+    api_key: ENV.fetch("AWS_BEARER_TOKEN_BEDROCK")
+  )
+)
+```
+
+See [bedrock.md](bedrock.md) for authentication precedence, static and refreshable credentials, endpoint configuration, and SigV4 request constraints.
+
 ## Workload Identity Authentication
 
 For secure, automated environments like cloud-managed Kubernetes, Azure, and GCP, you can use workload identity authentication with short-lived tokens from cloud identity providers instead of long-lived API keys.

data/lib/openai/client.rb

@@ -125,6 +125,8 @@ module OpenAI
     #
     # @return [Hash{String=>String}]
     private def auth_headers(security:)
+      return {} if @provider_runtime
+
       enabled_security = security.select { |_, enabled| enabled }
       headers = {bearer_auth:, admin_api_key_auth:}.slice(*enabled_security.keys).values.reduce({}, :merge)
       if headers.empty? && enabled_security.any?
@@ -166,6 +168,13 @@ module OpenAI
       true
     end
 
+    # @api private
+    private def prepare_request(request, redirect_count:, retry_count:)
+      preparer = @provider_runtime&.prepare_request
+      return super unless preparer
+      preparer.call(request)
+    end
+
     # @api private
     private def send_request(request, redirect_count:, retry_count:, send_retry_header:)
       return super unless @workload_identity_auth
@@ -218,6 +227,10 @@ module OpenAI
     #
     # @param webhook_secret [String, nil] Defaults to `ENV["OPENAI_WEBHOOK_SECRET"]`
     #
+    # @param provider [OpenAI::Provider, nil] Configure a supported
+    #   third-party provider. Provider authentication and routing cannot be combined
+    #   with top-level `api_key`, `admin_api_key`, `workload_identity`, or `base_url`.
+    #
     # @param base_url [String, nil] Override the default base URL for the API, e.g.,
     # `"https://api.example.com/v2/"`. Defaults to `ENV["OPENAI_BASE_URL"]`
     #
@@ -229,25 +242,65 @@ module OpenAI
     #
     # @param max_retry_delay [Float]
     def initialize(
-      api_key: ENV["OPENAI_API_KEY"],
-      admin_api_key: ENV["OPENAI_ADMIN_KEY"],
+      api_key: OpenAI::Internal::OMIT,
+      admin_api_key: OpenAI::Internal::OMIT,
       workload_identity: nil,
-      organization: ENV["OPENAI_ORG_ID"],
-      project: ENV["OPENAI_PROJECT_ID"],
-      webhook_secret: ENV["OPENAI_WEBHOOK_SECRET"],
-      base_url: ENV["OPENAI_BASE_URL"],
+      organization: OpenAI::Internal::OMIT,
+      project: OpenAI::Internal::OMIT,
+      webhook_secret: OpenAI::Internal::OMIT,
+      provider: nil,
+      base_url: OpenAI::Internal::OMIT,
       max_retries: self.class::DEFAULT_MAX_RETRIES,
       timeout: self.class::DEFAULT_TIMEOUT_IN_SECONDS,
       initial_retry_delay: self.class::DEFAULT_INITIAL_RETRY_DELAY,
       max_retry_delay: self.class::DEFAULT_MAX_RETRY_DELAY
     )
+      provider_runtime = nil
+      unless provider.nil?
+        provider_name = OpenAI::Internal::Provider.name(provider)
+        conflicts = {
+          api_key: api_key,
+          admin_api_key: admin_api_key,
+          workload_identity: workload_identity,
+          base_url: base_url
+        }.filter_map do |name, value|
+          name unless value.equal?(OpenAI::Internal::OMIT) || value.nil?
+        end
+        unless conflicts.empty?
+          formatted = conflicts.map { "`#{_1}`" }.join(", ")
+          message =
+            "`provider` cannot be combined with top-level #{formatted}. Move provider " \
+            "authentication and routing options into `#{provider_name}(...)`."
+          raise ArgumentError, message
+        end
+        provider_runtime = OpenAI::Internal::Provider.configure(provider)
+      end
+
+      api_key = ENV["OPENAI_API_KEY"] if api_key.equal?(OpenAI::Internal::OMIT) && provider_runtime.nil?
+      if admin_api_key.equal?(OpenAI::Internal::OMIT) && provider_runtime.nil?
+        admin_api_key = ENV["OPENAI_ADMIN_KEY"]
+      end
+      if organization.equal?(OpenAI::Internal::OMIT) && provider_runtime.nil?
+        organization = ENV["OPENAI_ORG_ID"]
+      end
+      project = ENV["OPENAI_PROJECT_ID"] if project.equal?(OpenAI::Internal::OMIT) && provider_runtime.nil?
+      webhook_secret = ENV["OPENAI_WEBHOOK_SECRET"] if webhook_secret.equal?(OpenAI::Internal::OMIT)
+      base_url = ENV["OPENAI_BASE_URL"] if base_url.equal?(OpenAI::Internal::OMIT) && provider_runtime.nil?
+
+      api_key = nil if api_key.equal?(OpenAI::Internal::OMIT)
+      admin_api_key = nil if admin_api_key.equal?(OpenAI::Internal::OMIT)
+      organization = nil if organization.equal?(OpenAI::Internal::OMIT)
+      project = nil if project.equal?(OpenAI::Internal::OMIT)
+      webhook_secret = nil if webhook_secret.equal?(OpenAI::Internal::OMIT)
+      base_url = provider_runtime.base_url if provider_runtime
+      base_url = nil if base_url.equal?(OpenAI::Internal::OMIT)
       base_url ||= "https://api.openai.com/v1"
 
       if !api_key.nil? && !workload_identity.nil?
         raise ArgumentError, "`api_key` and `workload_identity` are mutually exclusive"
       end
 
-      if api_key.nil? && admin_api_key.nil? && workload_identity.nil?
+      if provider_runtime.nil? && api_key.nil? && admin_api_key.nil? && workload_identity.nil?
         raise ArgumentError,
               "Missing credentials. Please pass an `api_key`, `workload_identity`, `admin_api_key`, or set the `OPENAI_API_KEY` or `OPENAI_ADMIN_KEY` environment variable."
       end
@@ -256,7 +309,7 @@ module OpenAI
         "openai-organization" => (@organization = organization&.to_s),
         "openai-project" => (@project = project&.to_s)
       }
-      custom_headers_env = ENV["OPENAI_CUSTOM_HEADERS"]
+      custom_headers_env = ENV["OPENAI_CUSTOM_HEADERS"] unless provider_runtime
       unless custom_headers_env.nil?
         parsed = {}
         custom_headers_env.split("\n").each do |line|
@@ -280,6 +333,7 @@ module OpenAI
       end
       @admin_api_key = admin_api_key&.to_s
       @webhook_secret = webhook_secret&.to_s
+      @provider_runtime = provider_runtime
 
       super(
         base_url: base_url,

data/lib/openai/internal/provider.rb

@@ -0,0 +1,31 @@
+# frozen_string_literal: true
+
+module OpenAI
+  module Internal
+    # Private registry for OpenAI-owned provider configurations.
+    #
+    # Provider factories return opaque OpenAI::Provider instances whose public
+    # representation does not expose their definition.
+    module Provider
+      Runtime = Struct.new(:name, :base_url, :prepare_request, keyword_init: true)
+
+      class << self
+        # @api private
+        def create(definition)
+          OpenAI::Provider.send(:new, definition.freeze).freeze
+        end
+
+        # @api private
+        def name(provider) = definition(provider).name
+
+        # @api private
+        def configure(provider) = definition(provider).configure
+
+        private def definition(provider)
+          return provider.send(:definition) if provider.instance_of?(OpenAI::Provider)
+          raise ArgumentError, "Invalid provider. Providers must be created by an OpenAI provider factory."
+        end
+      end
+    end
+  end
+end

data/lib/openai/internal/transport/base_client.rb

@@ -232,6 +232,14 @@ module OpenAI
         # @return [Hash{String=>String}]
         private def auth_headers = {}
 
+        # Apply final per-attempt request transformations after retry headers are
+        # set and immediately before the request reaches the transport.
+        #
+        # @api private
+        private def prepare_request(request, **_context)
+          request
+        end
+
         # @api private
         #
         # @return [String]
@@ -371,6 +379,24 @@ module OpenAI
           (@initial_retry_delay * scale * jitter).clamp(0, @max_retry_delay)
         end
 
+        # @api private
+        private def raise_status_error!(url:, status:, headers:, response:, stream:)
+          decoded = Kernel.then do
+            OpenAI::Internal::Util.decode_content(headers, stream: stream, suppress_error: true)
+          ensure
+            self.class.reap_connection!(status, stream: stream)
+          end
+
+          raise OpenAI::Errors::APIStatusError.for(
+            url: url,
+            status: status,
+            headers: headers,
+            body: decoded,
+            request: nil,
+            response: response
+          )
+        end
+
         # @api private
         #
         # @param request [Hash{Symbol=>Object}] .
@@ -396,13 +422,23 @@ module OpenAI
         # @raise [OpenAI::Errors::APIError]
         # @return [Array(Integer, Net::HTTPResponse, Enumerable<String>)]
         def send_request(request, redirect_count:, retry_count:, send_retry_header:)
-          url, headers, max_retries, timeout = request.fetch_values(:url, :headers, :max_retries, :timeout)
-          input = {**request.except(:timeout), deadline: OpenAI::Internal::Util.monotonic_secs + timeout}
-
           if send_retry_header
-            headers["x-stainless-retry-count"] = retry_count.to_s
+            request = request.merge(
+              headers: request.fetch(:headers).merge("x-stainless-retry-count" => retry_count.to_s)
+            )
           end
 
+          prepared_request = prepare_request(
+            request,
+            redirect_count: redirect_count,
+            retry_count: retry_count
+          )
+          url, max_retries, timeout = prepared_request.fetch_values(:url, :max_retries, :timeout)
+          input = {
+            **prepared_request.except(:timeout, :follow_redirects, :provider_auth),
+            deadline: OpenAI::Internal::Util.monotonic_secs + timeout
+          }
+
           begin
             status, response, stream = @requester.execute(input)
           rescue OpenAI::Errors::APIConnectionError => e
@@ -410,6 +446,25 @@ module OpenAI
           end
           headers = OpenAI::Internal::Util.normalized_headers(response&.each_header&.to_h)
 
+          terminal_status =
+            case status
+            in 300..399
+              prepared_request[:follow_redirects] == false
+            in (400..)
+              retry_count >= max_retries || !self.class.should_retry?(status, headers: headers)
+            else
+              false
+            end
+          if terminal_status
+            raise_status_error!(
+              url: url,
+              status: status,
+              headers: headers,
+              response: response,
+              stream: stream
+            )
+          end
+
           case status
           in ..299
             [status, response, stream]
@@ -421,30 +476,19 @@ module OpenAI
           in 300..399
             self.class.reap_connection!(status, stream: stream)
 
-            request = self.class.follow_redirect(request, status: status, response_headers: headers)
+            redirected_request = self.class.follow_redirect(
+              prepared_request,
+              status: status,
+              response_headers: headers
+            )
             send_request(
-              request,
+              redirected_request,
               redirect_count: redirect_count + 1,
               retry_count: retry_count,
               send_retry_header: send_retry_header
             )
           in OpenAI::Errors::APIConnectionError if retry_count >= max_retries
             raise status
-          in (400..) if retry_count >= max_retries || !self.class.should_retry?(status, headers: headers)
-            decoded = Kernel.then do
-              OpenAI::Internal::Util.decode_content(headers, stream: stream, suppress_error: true)
-            ensure
-              self.class.reap_connection!(status, stream: stream)
-            end
-
-            raise OpenAI::Errors::APIStatusError.for(
-              url: url,
-              status: status,
-              headers: headers,
-              body: decoded,
-              request: nil,
-              response: response
-            )
           in (400..) | OpenAI::Errors::APIConnectionError
             self.class.reap_connection!(status, stream: stream)
 

data/lib/openai/internal/util.rb

@@ -926,7 +926,7 @@ module OpenAI
         # @api private
         #
         # @return [Object]
-        def to_sorbet_type = raise NotImplementedError
+        def to_sorbet_type = raise(NotImplementedError)
 
         class << self
           # @api private

data/lib/openai/models/admin/organization/audit_log_list_params.rb

@@ -218,6 +218,90 @@ module OpenAI
             USER_ADDED = :"user.added"
             USER_UPDATED = :"user.updated"
             USER_DELETED = :"user.deleted"
+            TENANT_METADATA_UPDATED = :"tenant.metadata.updated"
+            TENANT_MICROSOFT_ENTRA_MAPPING_UPSERTED = :"tenant.microsoft_entra_mapping.upserted"
+            TENANT_MICROSOFT_ENTRA_MAPPING_DELETED = :"tenant.microsoft_entra_mapping.deleted"
+            TENANT_WORKLOAD_IDENTITY_PROVIDER_CREATED = :"tenant.workload_identity.provider.created"
+            TENANT_WORKLOAD_IDENTITY_PROVIDER_UPDATED = :"tenant.workload_identity.provider.updated"
+            TENANT_WORKLOAD_IDENTITY_PROVIDER_ARCHIVED = :"tenant.workload_identity.provider.archived"
+            TENANT_WORKLOAD_IDENTITY_MAPPING_CREATED = :"tenant.workload_identity.mapping.created"
+            TENANT_WORKLOAD_IDENTITY_MAPPING_UPDATED = :"tenant.workload_identity.mapping.updated"
+            TENANT_WORKLOAD_IDENTITY_MAPPING_ARCHIVED = :"tenant.workload_identity.mapping.archived"
+            TENANT_WORKLOAD_IDENTITY_BINDING_CREATED = :"tenant.workload_identity.binding.created"
+            TENANT_WORKLOAD_IDENTITY_PRINCIPAL_PROVISIONED = :"tenant.workload_identity.principal.provisioned"
+            TENANT_ADMIN_API_KEY_CREATED = :"tenant.admin_api_key.created"
+            TENANT_ADMIN_API_KEY_UPDATED = :"tenant.admin_api_key.updated"
+            TENANT_ADMIN_API_KEY_DELETED = :"tenant.admin_api_key.deleted"
+            TENANT_PROJECT_API_KEY_CREATED = :"tenant.project_api_key.created"
+            TENANT_CHATGPT_ACCESS_TOKEN_REVOKED = :"tenant.chatgpt_access_token.revoked"
+            TENANT_MIGRATION_COMPLETED = :"tenant.migration.completed"
+            TENANT_SSO_MIGRATED = :"tenant.sso.migrated"
+            TENANT_DOMAINS_MIGRATED = :"tenant.domains.migrated"
+            TENANT_SSO_CONNECTION_CREATED = :"tenant.sso_connection.created"
+            TENANT_SSO_CONNECTION_UPDATED = :"tenant.sso_connection.updated"
+            TENANT_SSO_CONNECTION_DELETED = :"tenant.sso_connection.deleted"
+            TENANT_SSO_CONNECTION_SETUP_STARTED = :"tenant.sso_connection.setup.started"
+            TENANT_POLICY_CREATED = :"tenant.policy.created"
+            TENANT_POLICY_UPDATED = :"tenant.policy.updated"
+            TENANT_POLICY_DELETED = :"tenant.policy.deleted"
+            TENANT_POLICY_ATTACHED = :"tenant.policy.attached"
+            TENANT_POLICY_DETACHED = :"tenant.policy.detached"
+            TENANT_PRINCIPAL_AUTHENTICATION_POLICY_RESOLVED = :"tenant.principal_authentication_policy.resolved"
+            TENANT_SCIM_SETUP_STARTED = :"tenant.scim.setup.started"
+            TENANT_SCIM_DELETION_REQUESTED = :"tenant.scim.deletion.requested"
+            TENANT_SCIM_DIRECTORY_CREATED = :"tenant.scim.directory.created"
+            TENANT_PRODUCT_ACCESS_POLICY_UPDATED = :"tenant.product_access_policy.updated"
+            TENANT_RESOURCE_SHARE_GRANT_CREATED = :"tenant.resource_share_grant.created"
+            TENANT_RESOURCE_SHARE_GRANT_UPDATED = :"tenant.resource_share_grant.updated"
+            TENANT_RESOURCE_SHARE_GRANT_ACCEPTED = :"tenant.resource_share_grant.accepted"
+            TENANT_RESOURCE_SHARE_GRANT_DECLINED = :"tenant.resource_share_grant.declined"
+            TENANT_RESOURCE_SHARE_GRANT_REVOKED = :"tenant.resource_share_grant.revoked"
+            TENANT_RESOURCE_SHARE_GRANT_DELETED = :"tenant.resource_share_grant.deleted"
+            TENANT_SERVICE_ACCOUNT_UPDATED = :"tenant.service_account.updated"
+            TENANT_SERVICE_ACCOUNT_DELETED = :"tenant.service_account.deleted"
+            TENANT_SERVICE_ACCOUNT_TOKEN_REVOKED = :"tenant.service_account.token.revoked"
+            TENANT_BILLING_OVERAGE_LIMIT_UPDATED = :"tenant.billing.overage_limit.updated"
+            TENANT_BILLING_ALERTS_UPDATED = :"tenant.billing.alerts.updated"
+            TENANT_BILLING_INFO_UPDATED = :"tenant.billing.info.updated"
+            TENANT_USAGE_LIMIT_WORKSPACE_UPDATED = :"tenant.usage_limit.workspace.updated"
+            TENANT_USAGE_LIMIT_GROUP_UPDATED = :"tenant.usage_limit.group.updated"
+            TENANT_USAGE_LIMIT_USER_UPDATED = :"tenant.usage_limit.user.updated"
+            TENANT_USAGE_LIMIT_INCREASE_REQUEST_UPDATED = :"tenant.usage_limit.increase_request.updated"
+            TENANT_USAGE_LIMIT_INCREASE_REQUEST_RESOLVED = :"tenant.usage_limit.increase_request.resolved"
+            TENANT_GROUP_CREATED = :"tenant.group.created"
+            TENANT_GROUP_UPDATED = :"tenant.group.updated"
+            TENANT_GROUP_DELETED = :"tenant.group.deleted"
+            TENANT_GROUP_MEMBER_ADDED = :"tenant.group.member.added"
+            TENANT_GROUP_MEMBER_REMOVED = :"tenant.group.member.removed"
+            TENANT_MIGRATION_ROLLOUT_STATUS_UPDATED = :"tenant.migration_rollout.status.updated"
+            TENANT_MIGRATION_ROLLOUT_TIER_UPDATED = :"tenant.migration_rollout.tier.updated"
+            TENANT_ROLE_METADATA_UPDATED = :"tenant.role.metadata.updated"
+            TENANT_CUSTOM_ROLE_CREATED = :"tenant.custom_role.created"
+            TENANT_CUSTOM_ROLE_UPDATED = :"tenant.custom_role.updated"
+            TENANT_CUSTOM_ROLE_DELETED = :"tenant.custom_role.deleted"
+            TENANT_ROLE_ASSIGNMENT_CREATED = :"tenant.role_assignment.created"
+            TENANT_ROLE_ASSIGNMENT_DELETED = :"tenant.role_assignment.deleted"
+            TENANT_RESOURCE_ROLE_ASSIGNMENT_CREATED = :"tenant.resource_role_assignment.created"
+            TENANT_RESOURCE_ROLE_ASSIGNMENT_DELETED = :"tenant.resource_role_assignment.deleted"
+            TENANT_RESOURCE_ACCESS_UPDATED = :"tenant.resource_access.updated"
+            TENANT_RESOURCE_ACCESS_DELETED = :"tenant.resource_access.deleted"
+            TENANT_SESSION_POLICY_CREATED = :"tenant.session_policy.created"
+            TENANT_SESSION_POLICY_UPDATED = :"tenant.session_policy.updated"
+            TENANT_SESSION_POLICY_DELETED = :"tenant.session_policy.deleted"
+            TENANT_SESSION_REVOCATION_STARTED = :"tenant.session_revocation.started"
+            TENANT_THIRD_PARTY_APP_POLICY_UPDATED = :"tenant.third_party_app_policy.updated"
+            TENANT_USER_ADDED = :"tenant.user.added"
+            TENANT_USER_UPDATED = :"tenant.user.updated"
+            TENANT_USER_REMOVED = :"tenant.user.removed"
+            TENANT_USER_LOOKED_UP = :"tenant.user.looked_up"
+            TENANT_USER_INVITED = :"tenant.user.invited"
+            TENANT_MEMBERSHIP_REVOKED = :"tenant.membership.revoked"
+            TENANT_API_ORGANIZATION_INVITE_UPSERTED = :"tenant.api_organization_invite.upserted"
+            TENANT_API_ORGANIZATION_INVITE_DELETED = :"tenant.api_organization_invite.deleted"
+            TENANT_CHATGPT_WORKSPACE_INVITE_UPSERTED = :"tenant.chatgpt_workspace_invite.upserted"
+            TENANT_MEMBERSHIP_ACCEPTED = :"tenant.membership.accepted"
+            TENANT_MEMBERSHIP_DECLINED = :"tenant.membership.declined"
+            TENANT_WORKSPACE_INVITE_EMAIL_SETTINGS_UPDATED = :"tenant.workspace_invite_email_settings.updated"
 
             # @!method self.values
             #   @return [Array<Symbol>]

data/lib/openai/models/admin/organization/audit_log_list_response.rb

@@ -666,6 +666,90 @@ module OpenAI
             USER_ADDED = :"user.added"
             USER_UPDATED = :"user.updated"
             USER_DELETED = :"user.deleted"
+            TENANT_METADATA_UPDATED = :"tenant.metadata.updated"
+            TENANT_MICROSOFT_ENTRA_MAPPING_UPSERTED = :"tenant.microsoft_entra_mapping.upserted"
+            TENANT_MICROSOFT_ENTRA_MAPPING_DELETED = :"tenant.microsoft_entra_mapping.deleted"
+            TENANT_WORKLOAD_IDENTITY_PROVIDER_CREATED = :"tenant.workload_identity.provider.created"
+            TENANT_WORKLOAD_IDENTITY_PROVIDER_UPDATED = :"tenant.workload_identity.provider.updated"
+            TENANT_WORKLOAD_IDENTITY_PROVIDER_ARCHIVED = :"tenant.workload_identity.provider.archived"
+            TENANT_WORKLOAD_IDENTITY_MAPPING_CREATED = :"tenant.workload_identity.mapping.created"
+            TENANT_WORKLOAD_IDENTITY_MAPPING_UPDATED = :"tenant.workload_identity.mapping.updated"
+            TENANT_WORKLOAD_IDENTITY_MAPPING_ARCHIVED = :"tenant.workload_identity.mapping.archived"
+            TENANT_WORKLOAD_IDENTITY_BINDING_CREATED = :"tenant.workload_identity.binding.created"
+            TENANT_WORKLOAD_IDENTITY_PRINCIPAL_PROVISIONED = :"tenant.workload_identity.principal.provisioned"
+            TENANT_ADMIN_API_KEY_CREATED = :"tenant.admin_api_key.created"
+            TENANT_ADMIN_API_KEY_UPDATED = :"tenant.admin_api_key.updated"
+            TENANT_ADMIN_API_KEY_DELETED = :"tenant.admin_api_key.deleted"
+            TENANT_PROJECT_API_KEY_CREATED = :"tenant.project_api_key.created"
+            TENANT_CHATGPT_ACCESS_TOKEN_REVOKED = :"tenant.chatgpt_access_token.revoked"
+            TENANT_MIGRATION_COMPLETED = :"tenant.migration.completed"
+            TENANT_SSO_MIGRATED = :"tenant.sso.migrated"
+            TENANT_DOMAINS_MIGRATED = :"tenant.domains.migrated"
+            TENANT_SSO_CONNECTION_CREATED = :"tenant.sso_connection.created"
+            TENANT_SSO_CONNECTION_UPDATED = :"tenant.sso_connection.updated"
+            TENANT_SSO_CONNECTION_DELETED = :"tenant.sso_connection.deleted"
+            TENANT_SSO_CONNECTION_SETUP_STARTED = :"tenant.sso_connection.setup.started"
+            TENANT_POLICY_CREATED = :"tenant.policy.created"
+            TENANT_POLICY_UPDATED = :"tenant.policy.updated"
+            TENANT_POLICY_DELETED = :"tenant.policy.deleted"
+            TENANT_POLICY_ATTACHED = :"tenant.policy.attached"
+            TENANT_POLICY_DETACHED = :"tenant.policy.detached"
+            TENANT_PRINCIPAL_AUTHENTICATION_POLICY_RESOLVED = :"tenant.principal_authentication_policy.resolved"
+            TENANT_SCIM_SETUP_STARTED = :"tenant.scim.setup.started"
+            TENANT_SCIM_DELETION_REQUESTED = :"tenant.scim.deletion.requested"
+            TENANT_SCIM_DIRECTORY_CREATED = :"tenant.scim.directory.created"
+            TENANT_PRODUCT_ACCESS_POLICY_UPDATED = :"tenant.product_access_policy.updated"
+            TENANT_RESOURCE_SHARE_GRANT_CREATED = :"tenant.resource_share_grant.created"
+            TENANT_RESOURCE_SHARE_GRANT_UPDATED = :"tenant.resource_share_grant.updated"
+            TENANT_RESOURCE_SHARE_GRANT_ACCEPTED = :"tenant.resource_share_grant.accepted"
+            TENANT_RESOURCE_SHARE_GRANT_DECLINED = :"tenant.resource_share_grant.declined"
+            TENANT_RESOURCE_SHARE_GRANT_REVOKED = :"tenant.resource_share_grant.revoked"
+            TENANT_RESOURCE_SHARE_GRANT_DELETED = :"tenant.resource_share_grant.deleted"
+            TENANT_SERVICE_ACCOUNT_UPDATED = :"tenant.service_account.updated"
+            TENANT_SERVICE_ACCOUNT_DELETED = :"tenant.service_account.deleted"
+            TENANT_SERVICE_ACCOUNT_TOKEN_REVOKED = :"tenant.service_account.token.revoked"
+            TENANT_BILLING_OVERAGE_LIMIT_UPDATED = :"tenant.billing.overage_limit.updated"
+            TENANT_BILLING_ALERTS_UPDATED = :"tenant.billing.alerts.updated"
+            TENANT_BILLING_INFO_UPDATED = :"tenant.billing.info.updated"
+            TENANT_USAGE_LIMIT_WORKSPACE_UPDATED = :"tenant.usage_limit.workspace.updated"
+            TENANT_USAGE_LIMIT_GROUP_UPDATED = :"tenant.usage_limit.group.updated"
+            TENANT_USAGE_LIMIT_USER_UPDATED = :"tenant.usage_limit.user.updated"
+            TENANT_USAGE_LIMIT_INCREASE_REQUEST_UPDATED = :"tenant.usage_limit.increase_request.updated"
+            TENANT_USAGE_LIMIT_INCREASE_REQUEST_RESOLVED = :"tenant.usage_limit.increase_request.resolved"
+            TENANT_GROUP_CREATED = :"tenant.group.created"
+            TENANT_GROUP_UPDATED = :"tenant.group.updated"
+            TENANT_GROUP_DELETED = :"tenant.group.deleted"
+            TENANT_GROUP_MEMBER_ADDED = :"tenant.group.member.added"
+            TENANT_GROUP_MEMBER_REMOVED = :"tenant.group.member.removed"
+            TENANT_MIGRATION_ROLLOUT_STATUS_UPDATED = :"tenant.migration_rollout.status.updated"
+            TENANT_MIGRATION_ROLLOUT_TIER_UPDATED = :"tenant.migration_rollout.tier.updated"
+            TENANT_ROLE_METADATA_UPDATED = :"tenant.role.metadata.updated"
+            TENANT_CUSTOM_ROLE_CREATED = :"tenant.custom_role.created"
+            TENANT_CUSTOM_ROLE_UPDATED = :"tenant.custom_role.updated"
+            TENANT_CUSTOM_ROLE_DELETED = :"tenant.custom_role.deleted"
+            TENANT_ROLE_ASSIGNMENT_CREATED = :"tenant.role_assignment.created"
+            TENANT_ROLE_ASSIGNMENT_DELETED = :"tenant.role_assignment.deleted"
+            TENANT_RESOURCE_ROLE_ASSIGNMENT_CREATED = :"tenant.resource_role_assignment.created"
+            TENANT_RESOURCE_ROLE_ASSIGNMENT_DELETED = :"tenant.resource_role_assignment.deleted"
+            TENANT_RESOURCE_ACCESS_UPDATED = :"tenant.resource_access.updated"
+            TENANT_RESOURCE_ACCESS_DELETED = :"tenant.resource_access.deleted"
+            TENANT_SESSION_POLICY_CREATED = :"tenant.session_policy.created"
+            TENANT_SESSION_POLICY_UPDATED = :"tenant.session_policy.updated"
+            TENANT_SESSION_POLICY_DELETED = :"tenant.session_policy.deleted"
+            TENANT_SESSION_REVOCATION_STARTED = :"tenant.session_revocation.started"
+            TENANT_THIRD_PARTY_APP_POLICY_UPDATED = :"tenant.third_party_app_policy.updated"
+            TENANT_USER_ADDED = :"tenant.user.added"
+            TENANT_USER_UPDATED = :"tenant.user.updated"
+            TENANT_USER_REMOVED = :"tenant.user.removed"
+            TENANT_USER_LOOKED_UP = :"tenant.user.looked_up"
+            TENANT_USER_INVITED = :"tenant.user.invited"
+            TENANT_MEMBERSHIP_REVOKED = :"tenant.membership.revoked"
+            TENANT_API_ORGANIZATION_INVITE_UPSERTED = :"tenant.api_organization_invite.upserted"
+            TENANT_API_ORGANIZATION_INVITE_DELETED = :"tenant.api_organization_invite.deleted"
+            TENANT_CHATGPT_WORKSPACE_INVITE_UPSERTED = :"tenant.chatgpt_workspace_invite.upserted"
+            TENANT_MEMBERSHIP_ACCEPTED = :"tenant.membership.accepted"
+            TENANT_MEMBERSHIP_DECLINED = :"tenant.membership.declined"
+            TENANT_WORKSPACE_INVITE_EMAIL_SETTINGS_UPDATED = :"tenant.workspace_invite_email_settings.updated"
 
             # @!method self.values
             #   @return [Array<Symbol>]

data/lib/openai/models/admin/organization/projects/api_key_list_params.rb

@@ -31,7 +31,18 @@ module OpenAI
             #   @return [Integer, nil]
             optional :limit, Integer
 
-            # @!method initialize(project_id:, after: nil, limit: nil, request_options: {})
+            # @!attribute owner_project_access
+            #   Filter API keys by whether the owner currently has effective access to the
+            #   project. Use `active` for owners with access, `inactive` for owners without
+            #   access, or `any` for all enabled project API keys. If omitted, the endpoint
+            #   applies its existing membership-based visibility rules, which may exclude some
+            #   enabled keys.
+            #
+            #   @return [Symbol, OpenAI::Models::Admin::Organization::Projects::APIKeyListParams::OwnerProjectAccess, nil]
+            optional :owner_project_access,
+                     enum: -> { OpenAI::Admin::Organization::Projects::APIKeyListParams::OwnerProjectAccess }
+
+            # @!method initialize(project_id:, after: nil, limit: nil, owner_project_access: nil, request_options: {})
             #   Some parameter documentations has been truncated, see
             #   {OpenAI::Models::Admin::Organization::Projects::APIKeyListParams} for more
             #   details.
@@ -42,7 +53,25 @@ module OpenAI
             #
             #   @param limit [Integer] A limit on the number of objects to be returned. Limit can range between 1 and 1
             #
+            #   @param owner_project_access [Symbol, OpenAI::Models::Admin::Organization::Projects::APIKeyListParams::OwnerProjectAccess] Filter API keys by whether the owner currently has effective access to the proje
+            #
             #   @param request_options [OpenAI::RequestOptions, Hash{Symbol=>Object}]
+
+            # Filter API keys by whether the owner currently has effective access to the
+            # project. Use `active` for owners with access, `inactive` for owners without
+            # access, or `any` for all enabled project API keys. If omitted, the endpoint
+            # applies its existing membership-based visibility rules, which may exclude some
+            # enabled keys.
+            module OwnerProjectAccess
+              extend OpenAI::Internal::Type::Enum
+
+              ACTIVE = :active
+              INACTIVE = :inactive
+              ANY = :any
+
+              # @!method self.values
+              #   @return [Array<Symbol>]
+            end
           end
         end
       end