openai 0.89.0 → 0.90.0

data/rbi/openai/models/beta/agents/vaults/credential_auth_rotate_param.rbi

@@ -0,0 +1,252 @@
+# typed: strong
+
+module OpenAI
+  module Models
+
+    module Beta
+
+      module Agents
+
+        module Vaults
+
+          # Updates to a vault credential without changing its authentication method or MCP
+          # server.
+          module CredentialAuthRotateParam
+            extend OpenAI::Internal::Type::Union
+
+            Variants = T.type_alias do
+              T.any(
+                OpenAI::Beta::Agents::Vaults::CredentialAuthRotateParam::McpOauth,
+                OpenAI::Beta::Agents::Vaults::CredentialAuthRotateParam::StaticBearer
+              )
+            end
+
+            class McpOauth < OpenAI::Internal::Type::BaseModel
+              OrHash = T.type_alias do
+                T.any(
+                  OpenAI::Beta::Agents::Vaults::CredentialAuthRotateParam::McpOauth,
+                  OpenAI::Internal::AnyHash
+                )
+              end
+
+              # The type of the object. Always `mcp_oauth`.
+              sig { returns(Symbol) }
+              attr_accessor :type
+
+              # A write-only replacement OAuth access token.
+              sig { returns(T.nilable(String)) }
+              attr_accessor :access_token
+
+              # The replacement expiry as an RFC 3339 timestamp, or `null` to clear it. Omitting
+              # this field preserves the expiry unless a new access token is supplied, in which
+              # case the expiry is cleared.
+              sig { returns(T.nilable(String)) }
+              attr_accessor :expires_at
+
+              # Updates to an MCP credential's existing OAuth refresh configuration.
+              sig { returns(T.nilable(OpenAI::Beta::Agents::Vaults::CredentialAuthRotateParam::McpOauth::Refresh)) }
+              attr_reader :refresh
+
+              sig {
+                params(
+                  refresh: T.nilable(OpenAI::Beta::Agents::Vaults::CredentialAuthRotateParam::McpOauth::Refresh::OrHash)
+                )
+                  .void
+              }
+              attr_writer :refresh
+
+              # Rotate an OAuth credential for an HTTPS MCP destination.
+              sig do
+                params(
+
+                  access_token: T.nilable(String),
+
+                  expires_at: T.nilable(String),
+
+                  refresh: T.nilable(OpenAI::Beta::Agents::Vaults::CredentialAuthRotateParam::McpOauth::Refresh::OrHash),
+
+                  type: Symbol
+                )
+                  .returns(T.attached_class)
+              end
+              def self.new(
+
+                # A write-only replacement OAuth access token.
+                access_token: nil,
+
+                # The replacement expiry as an RFC 3339 timestamp, or `null` to clear it. Omitting
+                # this field preserves the expiry unless a new access token is supplied, in which
+                # case the expiry is cleared.
+                expires_at: nil,
+
+                # Updates to an MCP credential's existing OAuth refresh configuration.
+                refresh: nil,
+
+                # The type of the object. Always `mcp_oauth`.
+
+                type: :mcp_oauth
+              )
+              end
+
+              sig do
+                override.returns(
+                  {
+                    type: Symbol,
+                    access_token: T.nilable(String),
+                    expires_at: T.nilable(String),
+                    refresh: T.nilable(OpenAI::Beta::Agents::Vaults::CredentialAuthRotateParam::McpOauth::Refresh)
+                  }
+                )
+              end
+              def to_hash
+              end
+
+              class Refresh < OpenAI::Internal::Type::BaseModel
+                OrHash = T.type_alias do
+                  T.any(
+                    OpenAI::Beta::Agents::Vaults::CredentialAuthRotateParam::McpOauth::Refresh,
+                    OpenAI::Internal::AnyHash
+                  )
+                end
+
+                # The replacement refresh token. Omit or pass `null` to keep the stored token.
+                # This secret is never returned in resources.
+                sig { returns(T.nilable(String)) }
+                attr_accessor :refresh_token
+
+                # Replacement space-separated OAuth scopes for refresh requests. Omit to keep the
+                # scopes, or pass `null` to stop sending a scope parameter.
+                sig { returns(T.nilable(String)) }
+                attr_accessor :scope
+
+                # Client-secret updates that preserve the credential's OAuth authentication
+                # method.
+                sig {
+                  returns(
+                    T.nilable(
+                      T.any(
+                        OpenAI::Beta::Agents::Vaults::McpOauthTokenEndpointAuthRotateParam::ClientSecretBasic,
+                        OpenAI::Beta::Agents::Vaults::McpOauthTokenEndpointAuthRotateParam::ClientSecretPost
+                      )
+                    )
+                  )
+                }
+                attr_accessor :token_endpoint_auth
+
+                # Updates to an MCP credential's existing OAuth refresh configuration.
+                sig do
+                  params(
+
+                    refresh_token: T.nilable(String),
+
+                    scope: T.nilable(String),
+
+                    token_endpoint_auth: T.nilable(
+                      T.any(
+                        OpenAI::Beta::Agents::Vaults::McpOauthTokenEndpointAuthRotateParam::ClientSecretBasic::OrHash,
+                        OpenAI::Beta::Agents::Vaults::McpOauthTokenEndpointAuthRotateParam::ClientSecretPost::OrHash
+                      )
+                    )
+                  )
+                    .returns(T.attached_class)
+                end
+                def self.new(
+
+                  # The replacement refresh token. Omit or pass `null` to keep the stored token.
+                  # This secret is never returned in resources.
+                  refresh_token: nil,
+
+                  # Replacement space-separated OAuth scopes for refresh requests. Omit to keep the
+                  # scopes, or pass `null` to stop sending a scope parameter.
+                  scope: nil,
+
+                  # Client-secret updates that preserve the credential's OAuth authentication
+                  # method.
+
+                  token_endpoint_auth: nil
+                )
+                end
+
+                sig do
+                  override.returns(
+                    {
+                      refresh_token: T.nilable(String),
+                      scope: T.nilable(String),
+                      token_endpoint_auth: T.nilable(
+                        T.any(
+                          OpenAI::Beta::Agents::Vaults::McpOauthTokenEndpointAuthRotateParam::ClientSecretBasic,
+                          OpenAI::Beta::Agents::Vaults::McpOauthTokenEndpointAuthRotateParam::ClientSecretPost
+                        )
+                      )
+                    }
+                  )
+                end
+                def to_hash
+                end
+
+              end
+            end
+
+            class StaticBearer < OpenAI::Internal::Type::BaseModel
+              OrHash = T.type_alias do
+                T.any(
+                  OpenAI::Beta::Agents::Vaults::CredentialAuthRotateParam::StaticBearer,
+                  OpenAI::Internal::AnyHash
+                )
+              end
+
+              # The replacement bearer token. This secret is never returned in credential
+              # resources.
+              sig { returns(String) }
+              attr_accessor :token
+
+              # The type of the object. Always `static_bearer`.
+              sig { returns(Symbol) }
+              attr_accessor :type
+
+              # Replace the bearer token for the credential's MCP server.
+              sig do
+                params(
+
+                  token: String,
+
+                  type: Symbol
+                )
+                  .returns(T.attached_class)
+              end
+              def self.new(
+
+                # The replacement bearer token. This secret is never returned in credential
+                # resources.
+                token:,
+
+                # The type of the object. Always `static_bearer`.
+
+                type: :static_bearer
+              )
+              end
+
+              sig do
+                override.returns(
+                  {token: String, type: Symbol}
+                )
+              end
+              def to_hash
+              end
+
+            end
+
+            sig { override.returns(T::Array[OpenAI::Beta::Agents::Vaults::CredentialAuthRotateParam::Variants]) }
+            def self.variants
+            end
+
+          end
+
+        end
+
+      end
+
+    end
+
+  end
+end

data/rbi/openai/models/beta/agents/vaults/credential_create_params.rbi

@@ -0,0 +1,99 @@
+# typed: strong
+
+module OpenAI
+  module Models
+
+    module Beta
+
+      module Agents
+
+        module Vaults
+
+          class CredentialCreateParams < OpenAI::Internal::Type::BaseModel
+
+            extend OpenAI::Internal::Type::RequestParameters::Converter
+            include OpenAI::Internal::Type::RequestParameters
+
+            OrHash = T.type_alias do
+              T.any(
+                OpenAI::Beta::Agents::Vaults::CredentialCreateParams,
+                OpenAI::Internal::AnyHash
+              )
+            end
+
+            sig { returns(String) }
+            attr_accessor :vault_id
+
+            # The authentication method and secret values to store for the MCP server.
+            sig {
+              returns(
+                T.any(
+                  OpenAI::Beta::Agents::Vaults::CredentialAuthCreateParam::McpOauth,
+                  OpenAI::Beta::Agents::Vaults::CredentialAuthCreateParam::StaticBearer
+                )
+              )
+            }
+            attr_accessor :auth
+
+            # The name is trimmed before storage. It must contain 1 to 256 UTF-8 bytes after
+            # trimming.
+            sig { returns(String) }
+            attr_accessor :name
+
+            sig do
+              params(
+
+                vault_id: String,
+
+                auth: T.any(
+                  OpenAI::Beta::Agents::Vaults::CredentialAuthCreateParam::McpOauth::OrHash,
+                  OpenAI::Beta::Agents::Vaults::CredentialAuthCreateParam::StaticBearer::OrHash
+                ),
+
+                name: String,
+
+                request_options: OpenAI::RequestOptions::OrHash
+              )
+                .returns(T.attached_class)
+            end
+            def self.new(
+
+              vault_id:,
+
+              # The authentication method and secret values to store for the MCP server.
+              auth:,
+
+              # The name is trimmed before storage. It must contain 1 to 256 UTF-8 bytes after
+              # trimming.
+              name:,
+
+              request_options: {}
+            )
+            end
+
+            sig do
+              override.returns(
+                {
+                  vault_id: String,
+                  auth: T.any(
+                    OpenAI::Beta::Agents::Vaults::CredentialAuthCreateParam::McpOauth,
+                    OpenAI::Beta::Agents::Vaults::CredentialAuthCreateParam::StaticBearer
+                  ),
+                  name: String,
+                  request_options: OpenAI::RequestOptions
+                }
+              )
+            end
+            def to_hash
+            end
+
+          end
+
+        end
+
+      end
+
+    end
+
+  end
+end

data/rbi/openai/models/beta/agents/vaults/credential_delete_params.rbi

@@ -0,0 +1,68 @@
+# typed: strong
+
+module OpenAI
+  module Models
+
+    module Beta
+
+      module Agents
+
+        module Vaults
+
+          class CredentialDeleteParams < OpenAI::Internal::Type::BaseModel
+
+            extend OpenAI::Internal::Type::RequestParameters::Converter
+            include OpenAI::Internal::Type::RequestParameters
+
+            OrHash = T.type_alias do
+              T.any(
+                OpenAI::Beta::Agents::Vaults::CredentialDeleteParams,
+                OpenAI::Internal::AnyHash
+              )
+            end
+
+            sig { returns(String) }
+            attr_accessor :vault_id
+
+            sig { returns(String) }
+            attr_accessor :credential_id
+
+            sig do
+              params(
+
+                vault_id: String,
+
+                credential_id: String,
+
+                request_options: OpenAI::RequestOptions::OrHash
+              )
+                .returns(T.attached_class)
+            end
+            def self.new(
+
+              vault_id:,
+
+              credential_id:,
+
+              request_options: {}
+            )
+            end
+
+            sig do
+              override.returns(
+                {vault_id: String, credential_id: String, request_options: OpenAI::RequestOptions}
+              )
+            end
+            def to_hash
+            end
+
+          end
+
+        end
+
+      end
+
+    end
+
+  end
+end

data/rbi/openai/models/beta/agents/vaults/credential_deleted.rbi

@@ -0,0 +1,76 @@
+# typed: strong
+
+module OpenAI
+  module Models
+
+    module Beta
+
+      module Agents
+
+        module Vaults
+
+          class CredentialDeleted < OpenAI::Internal::Type::BaseModel
+
+            OrHash = T.type_alias do
+              T.any(
+                OpenAI::Beta::Agents::Vaults::CredentialDeleted,
+                OpenAI::Internal::AnyHash
+              )
+            end
+
+            # The ID of the deleted credential.
+            sig { returns(String) }
+            attr_accessor :id
+
+            # Whether the resource was deleted. Always `true`.
+            sig { returns(T::Boolean) }
+            attr_accessor :deleted
+
+            # The object type. Always `vault.credential.deleted`.
+            sig { returns(Symbol) }
+            attr_accessor :object
+
+            # Confirmation that a vault credential was deleted.
+            sig do
+              params(
+
+                id: String,
+
+                deleted: T::Boolean,
+
+                object: Symbol
+              )
+                .returns(T.attached_class)
+            end
+            def self.new(
+
+              # The ID of the deleted credential.
+              id:,
+
+              # Whether the resource was deleted. Always `true`.
+              deleted:,
+
+              # The object type. Always `vault.credential.deleted`.
+
+              object: :"vault.credential.deleted"
+            )
+            end
+
+            sig do
+              override.returns(
+                {id: String, deleted: T::Boolean, object: Symbol}
+              )
+            end
+            def to_hash
+            end
+
+          end
+
+        end
+
+      end
+
+    end
+
+  end
+end

data/rbi/openai/models/beta/agents/vaults/credential_list_params.rbi

@@ -0,0 +1,163 @@
+# typed: strong
+
+module OpenAI
+  module Models
+
+    module Beta
+
+      module Agents
+
+        module Vaults
+
+          class CredentialListParams < OpenAI::Internal::Type::BaseModel
+
+            extend OpenAI::Internal::Type::RequestParameters::Converter
+            include OpenAI::Internal::Type::RequestParameters
+
+            OrHash = T.type_alias do
+              T.any(
+                OpenAI::Beta::Agents::Vaults::CredentialListParams,
+                OpenAI::Internal::AnyHash
+              )
+            end
+
+            sig { returns(String) }
+            attr_accessor :vault_id
+
+            # Return resources after this resource ID in the selected order.
+            sig { returns(T.nilable(String)) }
+            attr_reader :after
+
+            sig { params(after: String).void }
+            attr_writer :after
+
+            # The maximum number of resources to return. Defaults to 20. Values are clamped
+            # between 1 and 100.
+            sig { returns(T.nilable(Integer)) }
+            attr_accessor :limit
+
+            # Sort order by the `created_at` timestamp. Use `asc` for ascending order or
+            # `desc` for descending order. Defaults to `desc`.
+            sig { returns(T.nilable(OpenAI::Beta::Agents::Vaults::CredentialListParams::Order::OrSymbol)) }
+            attr_reader :order
+
+            sig { params(order: OpenAI::Beta::Agents::Vaults::CredentialListParams::Order::OrSymbol).void }
+            attr_writer :order
+
+            # Filter by one status or a list, such as `status=active` or
+            # `status[]=active&status[]=archived`. Both statuses are included by default.
+            sig {
+              returns(
+                T.nilable(
+                  T.any(
+                    OpenAI::Beta::Agents::VaultStatus::OrSymbol,
+                    T::Array[OpenAI::Beta::Agents::VaultStatus::OrSymbol]
+                  )
+                )
+              )
+            }
+            attr_reader :status
+
+            sig {
+              params(
+                status: T.any(
+                  OpenAI::Beta::Agents::VaultStatus::OrSymbol,
+                  T::Array[OpenAI::Beta::Agents::VaultStatus::OrSymbol]
+                )
+              )
+                .void
+            }
+            attr_writer :status
+
+            sig do
+              params(
+
+                vault_id: String,
+
+                after: String,
+
+                limit: T.nilable(Integer),
+
+                order: OpenAI::Beta::Agents::Vaults::CredentialListParams::Order::OrSymbol,
+
+                status: T.any(
+                  OpenAI::Beta::Agents::VaultStatus::OrSymbol,
+                  T::Array[OpenAI::Beta::Agents::VaultStatus::OrSymbol]
+                ),
+
+                request_options: OpenAI::RequestOptions::OrHash
+              )
+                .returns(T.attached_class)
+            end
+            def self.new(
+
+              vault_id:,
+
+              # Return resources after this resource ID in the selected order.
+              after: nil,
+
+              # The maximum number of resources to return. Defaults to 20. Values are clamped
+              # between 1 and 100.
+              limit: nil,
+
+              # Sort order by the `created_at` timestamp. Use `asc` for ascending order or
+              # `desc` for descending order. Defaults to `desc`.
+              order: nil,
+
+              # Filter by one status or a list, such as `status=active` or
+              # `status[]=active&status[]=archived`. Both statuses are included by default.
+              status: nil,
+
+              request_options: {}
+            )
+            end
+
+            sig do
+              override.returns(
+                {
+                  vault_id: String,
+                  after: String,
+                  limit: T.nilable(Integer),
+                  order: OpenAI::Beta::Agents::Vaults::CredentialListParams::Order::OrSymbol,
+                  status: T.any(
+                    OpenAI::Beta::Agents::VaultStatus::OrSymbol,
+                    T::Array[OpenAI::Beta::Agents::VaultStatus::OrSymbol]
+                  ),
+                  request_options: OpenAI::RequestOptions
+                }
+              )
+            end
+            def to_hash
+            end
+
+            # Sort order by the `created_at` timestamp. Use `asc` for ascending order or
+            # `desc` for descending order. Defaults to `desc`.
+            module Order
+              extend OpenAI::Internal::Type::Enum
+
+              TaggedSymbol = T.type_alias { T.all(Symbol, OpenAI::Beta::Agents::Vaults::CredentialListParams::Order) }
+              OrSymbol = T.type_alias { T.any(Symbol, String) }
+
+              # Returns resources in ascending order.
+              ASC = T.let(:asc, OpenAI::Beta::Agents::Vaults::CredentialListParams::Order::TaggedSymbol)
+
+              # Returns resources in descending order.
+              DESC = T.let(:desc, OpenAI::Beta::Agents::Vaults::CredentialListParams::Order::TaggedSymbol)
+
+              sig {
+                override.returns(T::Array[OpenAI::Beta::Agents::Vaults::CredentialListParams::Order::TaggedSymbol])
+              }
+              def self.values
+              end
+            end
+
+          end
+
+        end
+
+      end
+
+    end
+
+  end
+end