openai 0.85.0 → 0.87.0

data/lib/openai/request_options.rb

@@ -7,6 +7,16 @@ module OpenAI
   # When making a request, you can pass an actual {RequestOptions} instance, or
   # simply pass a Hash with symbol keys matching the attributes on this class.
   class RequestOptions < OpenAI::Internal::Type::BaseModel
+    # @api private
+    module ExtraQueryValue
+      extend OpenAI::Internal::Type::Union
+
+      variant String
+      variant OpenAI::Internal::Type::ArrayOf[String]
+    end
+
+    private_constant :ExtraQueryValue
+
     # @api private
     #
     # @param opts [OpenAI::RequestOptions, Hash{Symbol=>Object}]
@@ -37,7 +47,10 @@ module OpenAI
     #   `query` given at the client level.
     #
     #   @return [Hash{String=>Array<String>, String, nil}, nil]
-    optional :extra_query, OpenAI::Internal::Type::HashOf[OpenAI::Internal::Type::ArrayOf[String]]
+    optional(
+      :extra_query,
+      OpenAI::Internal::Type::HashOf[{union: ExtraQueryValue}, nil?: true]
+    )
 
     # @!attribute extra_headers
     #   Extra headers to send with the request. These are `.merged`’d into any
@@ -66,9 +79,10 @@ module OpenAI
     optional :timeout, Float
 
     # @!attribute include_raw_body
-    #   Retain the exact successful HTTP response body on the returned model or
-    #   page through `last_response.body`. Body retention is disabled by default
-    #   and cannot be enabled for streaming responses.
+    #   Retain the exact successful HTTP response body on the returned model,
+    #   page, or direct binary StringIO response through `last_response.body`.
+    #   Body retention is disabled by default and cannot be enabled for
+    #   streaming responses.
     #
     #   @return [Boolean, nil]
     optional :include_raw_body, OpenAI::Internal::Type::Boolean

data/lib/openai/resources/admin/organization/projects/service_accounts/api_keys.rb

@@ -9,12 +9,14 @@ module OpenAI
             class APIKeys
               # Creates an API key for a service account in the project.
               #
-              # @overload create(service_account_id, project_id:, name: nil, scopes: nil, request_options: {})
+              # @overload create(service_account_id, project_id:, expires_in_seconds: nil, name: nil, scopes: nil, request_options: {})
               #
               # @param service_account_id [String] Path param: The ID of the service account.
               #
               # @param project_id [String] Path param: The ID of the project.
               #
+              # @param expires_in_seconds [Integer, nil] Body param: Number of seconds until the API key expires.
+              #
               # @param name [String] Body param: API key name.
               #
               # @param scopes [Array<String>] Body param: API key scopes.

data/lib/openai/resources/containers/files.rb

@@ -37,6 +37,7 @@ module OpenAI
           @client.request(
             method: :post,
             path: ["containers/%1$s/files", container_id],
+            headers: parsed[:file].nil? ? nil : {"content-type" => "multipart/form-data"},
             body: parsed,
             model: OpenAI::Models::Containers::FileCreateResponse,
             security: {bearer_auth: true},

data/lib/openai/resources/images.rb

@@ -51,8 +51,7 @@ module OpenAI
       # {OpenAI::Models::ImageEditParams} for more details.
       #
       # Creates an edited or extended image given one or more source images and a
-      # prompt. This endpoint supports GPT Image models (`gpt-image-1.5`, `gpt-image-1`,
-      # `gpt-image-1-mini`, and `chatgpt-image-latest`) and `dall-e-2`.
+      # prompt. This endpoint supports GPT Image models and `dall-e-2`.
       #
       # `String`, `StringIO`, and pathless `IO` inputs are sent with generic upload
       # metadata. Use `OpenAI::FilePart` when you need to override the filename or
@@ -64,7 +63,7 @@ module OpenAI
       #
       # @param prompt [String] A text description of the desired image(s). The maximum length is 1000 character
       #
-      # @param background [Symbol, OpenAI::Models::ImageEditParams::Background, nil] Allows to set transparency for the background of the generated image(s).
+      # @param background [Symbol, OpenAI::Models::ImageEditParams::Background, nil] Allows to set transparency for the background of the generated image(s). Must
       #
       # @param input_fidelity [Symbol, OpenAI::Models::ImageEditParams::InputFidelity, nil] Control how much effort the model will exert to match the style and features, es
       #
@@ -80,11 +79,11 @@ module OpenAI
       #
       # @param partial_images [Integer, nil] The number of partial images to generate. This parameter is used for
       #
-      # @param quality [Symbol, OpenAI::Models::ImageEditParams::Quality, nil] The quality of the image that will be generated for GPT image models. Defaults t
+      # @param quality [Symbol, OpenAI::Models::ImageEditParams::Quality, nil] The quality of the image that will be generated for GPT image models. The GPT im
       #
       # @param response_format [Symbol, OpenAI::Models::ImageEditParams::ResponseFormat, nil] The format in which the generated images are returned. Must be one of `url` or `
       #
-      # @param size [String, Symbol, OpenAI::Models::ImageEditParams::Size, nil] The size of the generated images. For `gpt-image-2` and `gpt-image-2-2026-04-21`
+      # @param size [String, Symbol, OpenAI::Models::ImageEditParams::Size, nil] The size of the generated images. For `gpt-image-2`, `gpt-image-2-2026-04-21`, `
       #
       # @param user [String] A unique identifier representing your end-user, which can help OpenAI to monitor
       #
@@ -117,8 +116,7 @@ module OpenAI
       # {OpenAI::Models::ImageEditParams} for more details.
       #
       # Creates an edited or extended image given one or more source images and a
-      # prompt. This endpoint supports GPT Image models (`gpt-image-1.5`, `gpt-image-1`,
-      # `gpt-image-1-mini`, and `chatgpt-image-latest`) and `dall-e-2`.
+      # prompt. This endpoint supports GPT Image models and `dall-e-2`.
       #
       # `String`, `StringIO`, and pathless `IO` inputs are sent with generic upload
       # metadata. Use `OpenAI::FilePart` when you need to override the filename or
@@ -130,7 +128,7 @@ module OpenAI
       #
       # @param prompt [String] A text description of the desired image(s). The maximum length is 1000 character
       #
-      # @param background [Symbol, OpenAI::Models::ImageEditParams::Background, nil] Allows to set transparency for the background of the generated image(s).
+      # @param background [Symbol, OpenAI::Models::ImageEditParams::Background, nil] Allows to set transparency for the background of the generated image(s). Must
       #
       # @param input_fidelity [Symbol, OpenAI::Models::ImageEditParams::InputFidelity, nil] Control how much effort the model will exert to match the style and features, es
       #
@@ -146,11 +144,11 @@ module OpenAI
       #
       # @param partial_images [Integer, nil] The number of partial images to generate. This parameter is used for
       #
-      # @param quality [Symbol, OpenAI::Models::ImageEditParams::Quality, nil] The quality of the image that will be generated for GPT image models. Defaults t
+      # @param quality [Symbol, OpenAI::Models::ImageEditParams::Quality, nil] The quality of the image that will be generated for GPT image models. The GPT im
       #
       # @param response_format [Symbol, OpenAI::Models::ImageEditParams::ResponseFormat, nil] The format in which the generated images are returned. Must be one of `url` or `
       #
-      # @param size [String, Symbol, OpenAI::Models::ImageEditParams::Size, nil] The size of the generated images. For `gpt-image-2` and `gpt-image-2-2026-04-21`
+      # @param size [String, Symbol, OpenAI::Models::ImageEditParams::Size, nil] The size of the generated images. For `gpt-image-2`, `gpt-image-2-2026-04-21`, `
       #
       # @param user [String] A unique identifier representing your end-user, which can help OpenAI to monitor
       #
@@ -195,7 +193,7 @@ module OpenAI
       #
       # @param prompt [String] A text description of the desired image(s). The maximum length is 32000 characte
       #
-      # @param background [Symbol, OpenAI::Models::ImageGenerateParams::Background, nil] Allows to set transparency for the background of the generated image(s).
+      # @param background [Symbol, OpenAI::Models::ImageGenerateParams::Background, nil] Allows to set transparency for the background of the generated image(s). Must
       #
       # @param model [String, Symbol, OpenAI::Models::ImageModel, nil] The model to use for image generation. One of `dall-e-2`, `dall-e-3`, or a GPT i
       #
@@ -213,7 +211,7 @@ module OpenAI
       #
       # @param response_format [Symbol, OpenAI::Models::ImageGenerateParams::ResponseFormat, nil] The format in which generated images with `dall-e-2` and `dall-e-3` are returned
       #
-      # @param size [String, Symbol, OpenAI::Models::ImageGenerateParams::Size, nil] The size of the generated images. For `gpt-image-2` and `gpt-image-2-2026-04-21`
+      # @param size [String, Symbol, OpenAI::Models::ImageGenerateParams::Size, nil] The size of the generated images. For `gpt-image-2`, `gpt-image-2-2026-04-21`, `
       #
       # @param style [Symbol, OpenAI::Models::ImageGenerateParams::Style, nil] The style of the generated images. This parameter is only supported for `dall-e-
       #
@@ -253,7 +251,7 @@ module OpenAI
       #
       # @param prompt [String] A text description of the desired image(s). The maximum length is 32000 characte
       #
-      # @param background [Symbol, OpenAI::Models::ImageGenerateParams::Background, nil] Allows to set transparency for the background of the generated image(s).
+      # @param background [Symbol, OpenAI::Models::ImageGenerateParams::Background, nil] Allows to set transparency for the background of the generated image(s). Must
       #
       # @param model [String, Symbol, OpenAI::Models::ImageModel, nil] The model to use for image generation. One of `dall-e-2`, `dall-e-3`, or a GPT i
       #
@@ -271,7 +269,7 @@ module OpenAI
       #
       # @param response_format [Symbol, OpenAI::Models::ImageGenerateParams::ResponseFormat, nil] The format in which generated images with `dall-e-2` and `dall-e-3` are returned
       #
-      # @param size [String, Symbol, OpenAI::Models::ImageGenerateParams::Size, nil] The size of the generated images. For `gpt-image-2` and `gpt-image-2-2026-04-21`
+      # @param size [String, Symbol, OpenAI::Models::ImageGenerateParams::Size, nil] The size of the generated images. For `gpt-image-2`, `gpt-image-2-2026-04-21`, `
       #
       # @param style [Symbol, OpenAI::Models::ImageGenerateParams::Style, nil] The style of the generated images. This parameter is only supported for `dall-e-
       #

data/lib/openai/resources/responses.rb

@@ -136,7 +136,7 @@ module OpenAI
       # [file search](https://platform.openai.com/docs/guides/tools-file-search) to use
       # your own data as input for the model's response.
       #
-      # @overload stream(background: nil, context_management: nil, conversation: nil, include: nil, input: nil, instructions: nil, max_output_tokens: nil, max_tool_calls: nil, metadata: nil, model: nil, moderation: nil, parallel_tool_calls: nil, previous_response_id: nil, prompt: nil, prompt_cache_key: nil, prompt_cache_options: nil, prompt_cache_retention: nil, reasoning: nil, safety_identifier: nil, service_tier: nil, store: nil, stream_options: nil, temperature: nil, text: nil, tool_choice: nil, tools: nil, top_logprobs: nil, top_p: nil, truncation: nil, user: nil, request_options: {})
+      # @overload stream(background: nil, context_management: nil, conversation: nil, include: nil, input: nil, instructions: nil, max_output_tokens: nil, max_tool_calls: nil, metadata: nil, model: nil, moderation: nil, parallel_tool_calls: nil, previous_response_id: nil, prompt: nil, prompt_cache_key: nil, prompt_cache_options: nil, prompt_cache_retention: nil, reasoning: nil, response_id: nil, safety_identifier: nil, service_tier: nil, starting_after: nil, store: nil, stream_options: nil, temperature: nil, text: nil, tool_choice: nil, tools: nil, top_logprobs: nil, top_p: nil, truncation: nil, user: nil, request_options: {})
       #
       # @param background [Boolean, nil] Whether to run the model response in the background.
       #
@@ -162,7 +162,7 @@ module OpenAI
       #
       # @param parallel_tool_calls [Boolean, nil] Whether to allow the model to run tool calls in parallel.
       #
-      # @param previous_response_id [String, nil] The unique ID of the previous response to the response to the model. Use this to resume streams from a given response.
+      # @param previous_response_id [String, nil] The unique ID of the previous response to the model. Use this to create multi-turn conversations.
       #
       # @param prompt [OpenAI::Models::Responses::ResponsePrompt, nil] Reference to a prompt template and its variables.
       #
@@ -174,10 +174,14 @@ module OpenAI
       #
       # @param reasoning [OpenAI::Models::Reasoning, nil] **o-series models only**
       #
+      # @param response_id [String, nil] The ID of the response whose stream to resume.
+      #
       # @param safety_identifier [String] A stable identifier used to help detect users of your application that may be vi
       #
       # @param service_tier [Symbol, OpenAI::Models::Responses::ResponseCreateParams::ServiceTier, nil] Specifies the processing type used for serving the request.
       #
+      # @param starting_after [Integer, nil] The sequence number of the event after which to resume streaming. Can only be used with `response_id`.
+      #
       # @param store [Boolean, nil] Whether to store the generated model response for later retrieval via
       #
       # @param temperature [Float, nil] What sampling temperature to use, between 0 and 2. Higher values like 0.8 will m
@@ -288,7 +292,7 @@ module OpenAI
       #
       # @param parallel_tool_calls [Boolean, nil] Whether to allow the model to run tool calls in parallel.
       #
-      # @param previous_response_id [String, nil] The unique ID of the previous response to the response to the model. Use this to resume streams from a given response.
+      # @param previous_response_id [String, nil] The unique ID of the previous response to the model. Use this to create multi-turn conversations.
       #
       # @param prompt [OpenAI::Models::Responses::ResponsePrompt, nil] Reference to a prompt template and its variables.
       #
@@ -356,7 +360,7 @@ module OpenAI
       #
       # Retrieves a model response with the given ID.
       #
-      # @overload retrieve(response_id, include: nil, include_obfuscation: nil, starting_after: nil, request_options: {})
+      # @overload retrieve(response_id, include: nil, include_obfuscation: nil, starting_after: nil, text: nil, tools: nil, request_options: {})
       #
       # @param response_id [String] The ID of the response to retrieve.
       #
@@ -366,6 +370,14 @@ module OpenAI
       #
       # @param starting_after [Integer] The sequence number of the event after which to start streaming.
       #
+      # @param text [OpenAI::Responses::ResponseTextConfig, OpenAI::StructuredOutput::JsonSchemaConverter, Hash, nil] The structured-output model,
+      #   or the same typed/hash text configuration accepted by creation, used to parse retrieved text output. This is a local parsing hint and is not
+      #   sent to the API.
+      #
+      # @param tools [Array<OpenAI::Responses::FunctionTool, OpenAI::StructuredOutput::JsonSchemaConverter, Hash>, nil] Structured-output models, or
+      #   the same typed/hash function-tool definitions accepted by creation, used to parse retrieved function tool calls. These are local parsing hints
+      #   and are not sent to the API.
+      #
       # @param request_options [OpenAI::RequestOptions, Hash{Symbol=>Object}, nil]
       #
       # @return [OpenAI::Models::Responses::Response]
@@ -373,16 +385,28 @@ module OpenAI
       # @see OpenAI::Models::Responses::ResponseRetrieveParams
       def retrieve(response_id, params = {})
         parsed, options = OpenAI::Responses::ResponseRetrieveParams.dump_request(params)
+        structured_output_params = parsed.slice(:text, :tools)
+        parsed.delete(:text)
+        parsed.delete(:tools)
         query = OpenAI::Internal::Util.encode_query_params(parsed)
         if parsed[:stream]
           message = "Please use `#retrieve_streaming` for the streaming use case."
           raise ArgumentError.new(message)
         end
 
+        model, tool_models = get_retrieval_structured_output_models(structured_output_params)
+
+        unwrap = if model || !tool_models.empty?
+          -> (raw) do
+            parse_retrieved_structured_outputs!(raw, model, tool_models)
+          end
+        end
+
         @client.request(
           method: :get,
           path: ["responses/%1$s", response_id],
           query: query,
+          unwrap: unwrap,
           model: OpenAI::Responses::Response,
           security: {bearer_auth: true},
           options: options
@@ -552,9 +576,17 @@ module OpenAI
         OpenAI::Helpers::StructuredOutput::ResponseParser.parse!(raw, model, tool_models)
       end
 
+      def parse_retrieved_structured_outputs!(raw, model, tool_models)
+        OpenAI::Helpers::StructuredOutput::ResponseParser.parse_retrieved!(raw, model, tool_models)
+      end
+
       def get_structured_output_models(parsed)
         OpenAI::Helpers::StructuredOutput::ResponseParser.get_models(parsed)
       end
+
+      def get_retrieval_structured_output_models(parsed)
+        OpenAI::Helpers::StructuredOutput::ResponseParser.get_retrieval_models(parsed)
+      end
     end
   end
 end

data/lib/openai/response_carrier.rb

@@ -0,0 +1,42 @@
+# frozen_string_literal: true
+
+module OpenAI
+  # Shared response metadata interface for SDK values that are not model
+  # objects, such as binary StringIO responses.
+  module ResponseCarrier
+    # The ID of the API request, returned via the x-request-id response
+    # header. This is only populated on top-level response objects returned
+    # by the client.
+    #
+    # @api public
+    #
+    # @return [String, nil]
+    def _request_id = last_response&.request_id
+
+    # Metadata from the HTTP response that produced this value.
+    #
+    # @api public
+    #
+    # @return [OpenAI::ResponseMetadata, nil]
+    attr_reader :last_response
+
+    # @api private
+    #
+    # @param response [OpenAI::ResponseMetadata]
+    # @return [self]
+    def _set_last_response(response)
+      @last_response = response
+      self
+    end
+
+    # Keep transport metadata outside Psych's object serialization path.
+    #
+    # @api private
+    #
+    # @param _coder [Psych::Coder]
+    # @return [void]
+    def encode_with(_coder)
+      nil
+    end
+  end
+end

data/lib/openai/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module OpenAI
-  VERSION = "0.85.0"
+  VERSION = "0.87.0"
 end

data/lib/openai.rb

@@ -54,6 +54,7 @@ require_relative "openai/internal/type/base_stream"
 require_relative "openai/internal/type/request_parameters"
 require_relative "openai/internal"
 require_relative "openai/request_options"
+require_relative "openai/response_carrier"
 require_relative "openai/file_part"
 require_relative "openai/errors"
 require_relative "openai/http_client"
@@ -68,6 +69,7 @@ require_relative "openai/provider"
 require_relative "openai/internal/provider"
 require_relative "openai/providers/azure"
 require_relative "openai/providers/bedrock"
+require_relative "openai/internal/transport/request_body_merge"
 require_relative "openai/internal/transport/base_client"
 require_relative "openai/helpers/client_options"
 require_relative "openai/client"
@@ -1315,4 +1317,6 @@ require_relative "openai/helpers/streaming/exceptions"
 require_relative "openai/helpers/streaming/chat_events"
 require_relative "openai/helpers/streaming/chat_completion_stream"
 require_relative "openai/streaming"
+require_relative "openai/helpers/websocket"
 require_relative "openai/helpers/realtime"
+require_relative "openai/helpers/responses_websocket"

data/local-audio.md

@@ -0,0 +1,146 @@
+# Local recording and playback
+
+Use `OpenAI::LocalAudio` to record a finite microphone clip or play generated
+speech. These helpers run separately installed FFmpeg and FFplay executables.
+They do not add native gem dependencies. Loading `openai` or the helper does not
+open a device; calling `record` or `play` starts the corresponding operation.
+
+## Setup
+
+Install FFmpeg and FFplay and make both executables available on `PATH`. Your
+FFmpeg build must include the capture backend for your operating system. Allow
+microphone access in your operating system when recording.
+
+With `OPENAI_API_KEY` configured, run:
+
+```sh
+bundle exec ruby examples/audio/record_and_play.rb
+```
+
+The example records five seconds, uploads the clip for transcription, prints the
+transcript, and plays generated speech. Models and voice are constants at the top
+of the example so they are easy to change.
+
+## Record a clip
+
+```ruby
+require "openai"
+require "openai/helpers/local_audio"
+
+client = OpenAI::Client.new
+clip = OpenAI::LocalAudio.record(duration: 5, timeout: 10)
+transcript = client.audio.transcriptions.create(model: "gpt-transcribe", file: clip)
+puts(transcript.text)
+```
+
+`record(duration:, device: nil, timeout: nil)` returns an `OpenAI::FilePart`
+containing a rewound `StringIO`, named `audio.wav` with content type `audio/wav`.
+The audio is mono, 24 kHz, signed 16-bit PCM. The helper buffers the recording in
+memory, so memory use grows with recording duration.
+
+`duration` is required and must be positive and finite. `timeout` is an optional
+positive, finite wall-clock deadline in seconds. An expired deadline raises an
+error rather than returning a partial recording.
+
+### Choose a microphone
+
+On macOS and Linux, omitting `device:` uses the capture backend's default device.
+To select another microphone, pass `device:` directly:
+
+```ruby
+# macOS: AVFoundation audio device index (or its device name).
+clip = OpenAI::LocalAudio.record(duration: 5, device: 0)
+
+# Linux: ALSA device name; integer 0 is shorthand for "hw:0".
+clip = OpenAI::LocalAudio.record(duration: 5, device: "hw:0")
+
+# Windows: DirectShow requires an explicit audio device name.
+clip = OpenAI::LocalAudio.record(duration: 5, device: "Microphone (USB Audio)")
+```
+
+For Windows, add the appropriate `device:` argument to the example's `record`
+call. There is no device environment variable to configure. Device names and
+indices are local to your machine and may change when hardware is reconnected.
+
+List capture devices using your platform's tools:
+
+```sh
+# macOS (FFmpeg prints the list and exits without recording)
+ffmpeg -f avfoundation -list_devices true -i ""
+
+# Linux
+arecord -L
+
+# Windows (FFmpeg prints the list and exits without recording)
+ffmpeg -list_devices true -f dshow -i dummy
+```
+
+## Play speech
+
+```ruby
+speech = client.audio.speech.create(
+  model: "gpt-4o-mini-tts",
+  voice: "marin",
+  input: "Recording complete."
+)
+OpenAI::LocalAudio.play(speech, timeout: 30)
+```
+
+`play(source, format: :auto, timeout: nil)` waits for FFplay to finish and returns
+`nil`. It accepts `IO`, `StringIO`, or a `FilePart` containing IO or binary bytes.
+It reads from the source's current position and leaves caller-owned IO open. Bare
+strings are not interpreted as file paths or URLs.
+
+The default `format: :auto` supports self-contained WAV, MP3, Ogg, AAC and FLAC
+streams. For headerless mono 24 kHz signed little-endian PCM16, pass
+`format: :pcm`. PCM must end on a complete two-byte sample. Playback uses FFplay's
+configured output device; this helper has no output-device selector.
+
+Both methods close their pipes and terminate/reap owned subprocesses on errors
+or interruption. Errors are under `OpenAI::LocalAudio::Error`:
+`DependencyError`, `UnsupportedPlatformError`, `DeviceError`, `PlaybackError`,
+`FormatError`, and `TimeoutError`. Media subprocesses receive a restricted
+environment without the API key, and their diagnostics are not included in
+exceptions. FFplay can exit successfully despite a decoder or device error, so
+the helper drains error-level diagnostics through a pipe, retaining only whether
+an error occurred. Diagnostic contents are discarded and never written to disk.
+
+## Model choices
+
+Checked against OpenAI documentation on September 8, 2026:
+
+- [`gpt-transcribe`](https://developers.openai.com/api/docs/guides/speech-to-text) is the recommended model for general-purpose file transcription.
+- [`gpt-4o-mini-tts`](https://developers.openai.com/api/docs/guides/text-to-speech) is the current recommended speech-generation model; `marin` is one of the recommended voices for quality.
+
+## Realtime applications
+
+For streaming audio and conversation events, use the existing
+[Realtime API helpers](realtime.md) and [Realtime examples](examples/realtime/README.md).
+The finite helpers here do not manage a continuous microphone stream,
+interruptible voice conversation, echo cancellation, or playback-position tracking.
+
+## End-to-end verification
+
+Run the actual recording example against the live API without opening physical
+devices:
+
+```sh
+bundle exec ruby scripts/test-local-audio-examples.rb
+```
+
+To also run the invalid-audio regression against installed FFplay:
+
+```sh
+OPENAI_AUDIO_FFPLAY_TEST=1 bundle exec ruby test/openai/helpers/local_audio_test.rb
+```
+
+This opt-in test requires `OPENAI_API_KEY`, FFmpeg and FFplay and makes paid API
+calls. It generates synthetic speech, substitutes that file for microphone input,
+runs real FFmpeg capture and transcription, generates speech, and plays it through
+FFplay's dummy output driver. It checks the transcription and successful example
+completion with a 90-second example deadline. Captured API output is not logged;
+temporary synthetic media is removed on normal exit or exceptions.
+
+This verifies the software flow, not physical microphone permissions, speaker
+output, or device compatibility. Physical hardware and platform behavior must be
+checked on the intended host.

data/rbi/openai/auth/subject_token_providers.rbi

@@ -0,0 +1,72 @@
+# typed: strong
+
+module OpenAI
+  module Auth
+    module SubjectTokenProviders
+      class K8sServiceAccountTokenProvider
+        include OpenAI::Auth::SubjectTokenProvider
+
+        sig { params(token_path: String).void }
+        def initialize(token_path: "/var/run/secrets/kubernetes.io/serviceaccount/token")
+        end
+
+        sig { returns(Symbol) }
+        def token_type
+        end
+
+        sig { returns(String) }
+        def get_token
+        end
+      end
+
+      class AzureManagedIdentityTokenProvider
+        include OpenAI::Auth::SubjectTokenProvider
+
+        sig do
+          params(
+            resource: String,
+            object_id: T.nilable(String),
+            client_id: T.nilable(String),
+            msi_res_id: T.nilable(String),
+            api_version: String,
+            timeout: Float
+          )
+            .void
+        end
+        def initialize(
+          resource: "https://management.azure.com/",
+          object_id: nil,
+          client_id: nil,
+          msi_res_id: nil,
+          api_version: "2018-02-01",
+          timeout: 10.0
+        )
+        end
+
+        sig { returns(Symbol) }
+        def token_type
+        end
+
+        sig { returns(String) }
+        def get_token
+        end
+      end
+
+      class GCPIDTokenProvider
+        include OpenAI::Auth::SubjectTokenProvider
+
+        sig { params(audience: String, timeout: Float).void }
+        def initialize(audience: "https://api.openai.com/v1", timeout: 10.0)
+        end
+
+        sig { returns(Symbol) }
+        def token_type
+        end
+
+        sig { returns(String) }
+        def get_token
+        end
+      end
+    end
+  end
+end

data/rbi/openai/errors.rbi

@@ -7,6 +7,9 @@ module OpenAI
       attr_reader :cause
     end
 
+    class InvalidWebhookSignatureError < OpenAI::Errors::Error
+    end
+
     class PollingError < OpenAI::Errors::Error
     end
 
@@ -120,6 +123,11 @@ module OpenAI
       sig { returns(NilClass) }
       attr_accessor :type
 
+      # @api private
+      sig { returns(T::Boolean) }
+      def request_may_have_been_sent?
+      end
+
       # @api private
       sig do
         params(
@@ -129,7 +137,8 @@ module OpenAI
           body: NilClass,
           request: NilClass,
           response: NilClass,
-          message: T.nilable(String)
+          message: T.nilable(String),
+          request_may_have_been_sent: T::Boolean
         )
           .returns(T.attached_class)
       end
@@ -140,7 +149,8 @@ module OpenAI
         body: nil,
         request: nil,
         response: nil,
-        message: "Connection error."
+        message: "Connection error.",
+        request_may_have_been_sent: true
       )
       end
     end
@@ -155,7 +165,8 @@ module OpenAI
           body: NilClass,
           request: NilClass,
           response: NilClass,
-          message: T.nilable(String)
+          message: T.nilable(String),
+          request_may_have_been_sent: T::Boolean
         )
           .returns(T.attached_class)
       end
@@ -166,7 +177,8 @@ module OpenAI
         body: nil,
         request: nil,
         response: nil,
-        message: "Request timed out."
+        message: "Request timed out.",
+        request_may_have_been_sent: true
       )
       end
     end
@@ -264,5 +276,42 @@ module OpenAI
     class InternalServerError < OpenAI::Errors::APIStatusError
       HTTP_STATUS = T.let((500..), T::Range[Integer])
     end
+
+    class OAuthError < OpenAI::Errors::APIStatusError
+      sig { returns(T.nilable(OpenAI::Models::OAuthErrorCode::Variants)) }
+      attr_reader :error_code
+
+      # @api private
+      sig do
+        params(
+          status: Integer,
+          body: T.nilable(Object),
+          headers: T.nilable(T::Hash[String, String])
+        )
+          .returns(T.attached_class)
+      end
+      def self.new(status:, body:, headers:)
+      end
+    end
+
+    class SubjectTokenProviderError < OpenAI::Errors::Error
+      sig { returns(String) }
+      attr_reader :provider
+
+      sig { returns(T.nilable(StandardError)) }
+      attr_accessor :cause
+
+      # @api private
+      sig do
+        params(
+          message: String,
+          provider: String,
+          cause: T.nilable(StandardError)
+        )
+          .returns(T.attached_class)
+      end
+      def self.new(message:, provider:, cause: nil)
+      end
+    end
   end
 end