openai 0.91.0 → 0.93.0

data/lib/openai/models/beta/agent_tool_param.rb

@@ -139,7 +139,9 @@ module OpenAI
           optional :allowed_tools, OpenAI::Internal::Type::ArrayOf[String], nil?: true
 
           # @!attribute connection_origin
-          #   Where outbound MCP HTTP connections originate.
+          #   Selects where outbound MCP HTTP connections originate. Omitted or `service` uses
+          #   the Managed Agents service network; `environment` uses the session's selected
+          #   environment.
           #
           #   @return [Symbol, OpenAI::Models::Beta::AgentToolParam::Mcp::ConnectionOrigin, nil]
           optional(
@@ -187,7 +189,9 @@ module OpenAI
           #     The MCP tools the agent may call. All server tools are allowed when omitted.
           #
           #   @param connection_origin [Symbol, OpenAI::Models::Beta::AgentToolParam::Mcp::ConnectionOrigin, nil]
-          #     Where outbound MCP HTTP connections originate.
+          #     Selects where outbound MCP HTTP connections originate. Omitted or `service` uses
+          #     the Managed Agents service network; `environment` uses the session's selected
+          #     environment.
           #
           #   @param credential_id [String, nil]
           #     The attached vault credential used to authenticate this MCP server. Optional
@@ -203,7 +207,9 @@ module OpenAI
           #   @param type [Symbol, :mcp]
           #     The type of the object. Always `mcp`.
 
-          # Where outbound MCP HTTP connections originate.
+          # Selects where outbound MCP HTTP connections originate. Omitted or `service` uses
+          # the Managed Agents service network; `environment` uses the session's selected
+          # environment.
           #
           # @see OpenAI::Models::Beta::AgentToolParam::Mcp#connection_origin
           module ConnectionOrigin
@@ -234,7 +240,7 @@ module OpenAI
           optional :allowed_domains, OpenAI::Internal::Type::ArrayOf[String], nil?: true
 
           # @!attribute context_size
-          #   The amount of web search context made available to the model.
+          #   The amount of search context made available to the model. Defaults to `medium`.
           #
           #   @return [Symbol, OpenAI::Models::Beta::AgentToolParam::WebSearch::ContextSize, nil]
           optional(
@@ -246,13 +252,13 @@ module OpenAI
           )
 
           # @!attribute location
-          #   Approximate user location used to localize web search results.
+          #   Approximate location used to localize search results.
           #
           #   @return [OpenAI::Models::Beta::AgentToolParam::WebSearch::Location, nil]
           optional :location, -> { OpenAI::Beta::AgentToolParam::WebSearch::Location }, nil?: true
 
           # @!attribute mode
-          #   The source used for web search results.
+          #   The source used for web search results. Defaults to `live`.
           #
           #   @return [Symbol, OpenAI::Models::Beta::AgentToolParam::WebSearch::Mode, nil]
           optional :mode, enum: -> { OpenAI::Beta::AgentToolParam::WebSearch::Mode }, nil?: true
@@ -264,18 +270,18 @@ module OpenAI
           #     Domains the search may include.
           #
           #   @param context_size [Symbol, OpenAI::Models::Beta::AgentToolParam::WebSearch::ContextSize, nil]
-          #     The amount of web search context made available to the model.
+          #     The amount of search context made available to the model. Defaults to `medium`.
           #
           #   @param location [OpenAI::Models::Beta::AgentToolParam::WebSearch::Location, nil]
-          #     Approximate user location used to localize web search results.
+          #     Approximate location used to localize search results.
           #
           #   @param mode [Symbol, OpenAI::Models::Beta::AgentToolParam::WebSearch::Mode, nil]
-          #     The source used for web search results.
+          #     The source used for web search results. Defaults to `live`.
           #
           #   @param type [Symbol, :web_search]
           #     The type of the object. Always `web_search`.
 
-          # The amount of web search context made available to the model.
+          # The amount of search context made available to the model. Defaults to `medium`.
           #
           # @see OpenAI::Models::Beta::AgentToolParam::WebSearch#context_size
           module ContextSize
@@ -316,7 +322,7 @@ module OpenAI
             optional :timezone, String, nil?: true
 
             # @!method initialize(city: nil, country: nil, region: nil, timezone: nil)
-            #   Approximate user location used to localize web search results.
+            #   Approximate location used to localize search results.
             #
             #   @param city [String, nil]
             #     The city name.
@@ -331,7 +337,7 @@ module OpenAI
             #     The IANA timezone, such as `America/Los_Angeles`.
           end
 
-          # The source used for web search results.
+          # The source used for web search results. Defaults to `live`.
           #
           # @see OpenAI::Models::Beta::AgentToolParam::WebSearch#mode
           module Mode

data/lib/openai/models/beta/agent_update_params.rb

@@ -35,7 +35,7 @@ module OpenAI
         optional :model, String
 
         # @!attribute multi_agent
-        #   Explicit configuration for creating and coordinating subagents.
+        #   Configuration for creating and coordinating subagents.
         #
         #   @return [OpenAI::Models::Beta::MultiAgentConfigParam, nil]
         optional :multi_agent, -> { OpenAI::Beta::MultiAgentConfigParam }, nil?: true
@@ -47,7 +47,8 @@ module OpenAI
         optional :name, String, nil?: true
 
         # @!attribute reasoning
-        #   Reasoning configuration for the agent.
+        #   Configuration for model reasoning. Omit to keep the current settings; pass
+        #   `null` to reset to the model's default effort.
         #
         #   @return [OpenAI::Models::Beta::AgentReasoningParam, nil]
         optional :reasoning, -> { OpenAI::Beta::AgentReasoningParam }, nil?: true
@@ -90,13 +91,14 @@ module OpenAI
         #     The model to use for the agent. The requested model name is preserved.
         #
         #   @param multi_agent [OpenAI::Models::Beta::MultiAgentConfigParam, nil]
-        #     Explicit configuration for creating and coordinating subagents.
+        #     Configuration for creating and coordinating subagents.
         #
         #   @param name [String, nil]
         #     A replacement name. Omit to leave unchanged, or pass null to clear it.
         #
         #   @param reasoning [OpenAI::Models::Beta::AgentReasoningParam, nil]
-        #     Reasoning configuration for the agent.
+        #     Configuration for model reasoning. Omit to keep the current settings; pass
+        #     `null` to reset to the model's default effort.
         #
         #   @param service_tier [Symbol, OpenAI::Models::Beta::AgentUpdateParams::ServiceTier, nil]
         #     The service tier used for model requests.

data/lib/openai/models/beta/agent_web_search_call_item.rb

@@ -11,7 +11,7 @@ module OpenAI
         required :id, String
 
         # @!attribute action
-        #   An action performed by the web search tool.
+        #   The action performed by the web search tool.
         #
         #   @return [OpenAI::Models::Beta::WebSearchAction::Search, OpenAI::Models::Beta::WebSearchAction::OpenPage, OpenAI::Models::Beta::WebSearchAction::FindInPage, OpenAI::Models::Beta::WebSearchAction::Other, nil]
         required :action, union: -> { OpenAI::Beta::WebSearchAction }, nil?: true
@@ -41,7 +41,7 @@ module OpenAI
         #     The ID of the web search call.
         #
         #   @param action [OpenAI::Models::Beta::WebSearchAction::Search, OpenAI::Models::Beta::WebSearchAction::OpenPage, OpenAI::Models::Beta::WebSearchAction::FindInPage, OpenAI::Models::Beta::WebSearchAction::Other, nil]
-        #     An action performed by the web search tool.
+        #     The action performed by the web search tool.
         #
         #   @param status [Symbol, OpenAI::Models::Beta::AgentOutputItemStatus]
         #     The status of the web search call.

data/lib/openai/models/beta/agents/environments/template_create_params.rb

@@ -40,7 +40,8 @@ module OpenAI
             optional :name, String, nil?: true
 
             # @!attribute network
-            #   Network access for an OpenAI-hosted environment.
+            #   Network access policy for the environment. Defaults to disabled for GA requests
+            #   and enabled for alpha/beta requests.
             #
             #   @return [OpenAI::Models::Beta::Agents::Environments::TemplateCreateParams::Network, nil]
             optional(
@@ -52,7 +53,7 @@ module OpenAI
             )
 
             # @!attribute packages
-            #   Packages to install in an OpenAI-hosted environment.
+            #   Packages to install in the environment. Defaults to empty package lists.
             #
             #   @return [OpenAI::Models::Beta::Agents::Environments::TemplateCreateParams::Packages, nil]
             optional(
@@ -111,10 +112,11 @@ module OpenAI
             #     An optional human-readable display name for the template.
             #
             #   @param network [OpenAI::Models::Beta::Agents::Environments::TemplateCreateParams::Network, nil]
-            #     Network access for an OpenAI-hosted environment.
+            #     Network access policy for the environment. Defaults to disabled for GA requests
+            #     and enabled for alpha/beta requests.
             #
             #   @param packages [OpenAI::Models::Beta::Agents::Environments::TemplateCreateParams::Packages, nil]
-            #     Packages to install in an OpenAI-hosted environment.
+            #     Packages to install in the environment. Defaults to empty package lists.
             #
             #   @param plugins [Array<OpenAI::Models::Beta::HostedPluginParam>, nil]
             #     Plugins provided as inline ZIP archives. Defaults to an empty list.
@@ -142,7 +144,8 @@ module OpenAI
               optional :allowed_domains, OpenAI::Internal::Type::ArrayOf[String], nil?: true
 
               # @!method initialize(access:, allowed_domains: nil)
-              #   Network access for an OpenAI-hosted environment.
+              #   Network access policy for the environment. Defaults to disabled for GA requests
+              #   and enabled for alpha/beta requests.
               #
               #   @param access [Symbol, OpenAI::Models::Beta::Agents::Environments::TemplateCreateParams::Network::Access]
               #     The environment's network access mode.
@@ -156,7 +159,7 @@ module OpenAI
               module Access
                 extend OpenAI::Internal::Type::Enum
 
-                # Allows unrestricted network access, matching an omitted network policy.
+                # Allows unrestricted network access.
                 ENABLED = :enabled
 
                 # Disables network access.
@@ -190,7 +193,7 @@ module OpenAI
               optional :system_, OpenAI::Internal::Type::ArrayOf[String], api_name: :system, nil?: true
 
               # @!method initialize(npm: nil, python: nil, system_: nil)
-              #   Packages to install in an OpenAI-hosted environment.
+              #   Packages to install in the environment. Defaults to empty package lists.
               #
               #   @param npm [Array<String>, nil]
               #     npm packages to install globally. Defaults to an empty list.

data/lib/openai/models/beta/agents/environments/template_update_params.rb

@@ -44,7 +44,9 @@ module OpenAI
             optional :name, String, nil?: true
 
             # @!attribute network
-            #   Network access for an OpenAI-hosted environment.
+            #   Network access available after setup completes. Omit to preserve the current
+            #   policy, or pass `null` to reset to disabled for GA requests or enabled for
+            #   alpha/beta requests.
             #
             #   @return [OpenAI::Models::Beta::Agents::Environments::TemplateUpdateParams::Network, nil]
             optional(
@@ -56,7 +58,7 @@ module OpenAI
             )
 
             # @!attribute packages
-            #   Packages to install in an OpenAI-hosted environment.
+            #   Packages installed before the runtime network policy applies.
             #
             #   @return [OpenAI::Models::Beta::Agents::Environments::TemplateUpdateParams::Packages, nil]
             optional(
@@ -115,10 +117,12 @@ module OpenAI
             #     A replacement human-readable display name, or `null` to clear the name.
             #
             #   @param network [OpenAI::Models::Beta::Agents::Environments::TemplateUpdateParams::Network, nil]
-            #     Network access for an OpenAI-hosted environment.
+            #     Network access available after setup completes. Omit to preserve the current
+            #     policy, or pass `null` to reset to disabled for GA requests or enabled for
+            #     alpha/beta requests.
             #
             #   @param packages [OpenAI::Models::Beta::Agents::Environments::TemplateUpdateParams::Packages, nil]
-            #     Packages to install in an OpenAI-hosted environment.
+            #     Packages installed before the runtime network policy applies.
             #
             #   @param plugins [Array<OpenAI::Models::Beta::HostedPluginParam>, nil]
             #     Replacement plugin configuration installed for each new session.
@@ -145,7 +149,9 @@ module OpenAI
               optional :allowed_domains, OpenAI::Internal::Type::ArrayOf[String], nil?: true
 
               # @!method initialize(access:, allowed_domains: nil)
-              #   Network access for an OpenAI-hosted environment.
+              #   Network access available after setup completes. Omit to preserve the current
+              #   policy, or pass `null` to reset to disabled for GA requests or enabled for
+              #   alpha/beta requests.
               #
               #   @param access [Symbol, OpenAI::Models::Beta::Agents::Environments::TemplateUpdateParams::Network::Access]
               #     The environment's network access mode.
@@ -159,7 +165,7 @@ module OpenAI
               module Access
                 extend OpenAI::Internal::Type::Enum
 
-                # Allows unrestricted network access, matching an omitted network policy.
+                # Allows unrestricted network access.
                 ENABLED = :enabled
 
                 # Disables network access.
@@ -193,7 +199,7 @@ module OpenAI
               optional :system_, OpenAI::Internal::Type::ArrayOf[String], api_name: :system, nil?: true
 
               # @!method initialize(npm: nil, python: nil, system_: nil)
-              #   Packages to install in an OpenAI-hosted environment.
+              #   Packages installed before the runtime network policy applies.
               #
               #   @param npm [Array<String>, nil]
               #     npm packages to install globally. Defaults to an empty list.

data/lib/openai/models/beta/agents/session_create_params.rb

@@ -32,7 +32,10 @@ module OpenAI
           optional :agent_id, String
 
           # @!attribute input
-          #   Initial input submitted when creating a session.
+          #   Initial input to submit when the session is created. A string is shorthand for a
+          #   single user message. Required when `environment.type` is `none`, or when
+          #   `stream` is `true` for an environment that is not `self_hosted`; optional for
+          #   self-hosted and non-streaming execution environments.
           #
           #   @return [String, Array<OpenAI::Models::Beta::AgentSessionInputMessageParam>, nil]
           optional :input, union: -> { OpenAI::Beta::Agents::SessionCreateParams::Input }, nil?: true
@@ -63,7 +66,10 @@ module OpenAI
           #     unchanged.
           #
           #   @param input [String, Array<OpenAI::Models::Beta::AgentSessionInputMessageParam>, nil]
-          #     Initial input submitted when creating a session.
+          #     Initial input to submit when the session is created. A string is shorthand for a
+          #     single user message. Required when `environment.type` is `none`, or when
+          #     `stream` is `true` for an environment that is not `self_hosted`; optional for
+          #     self-hosted and non-streaming execution environments.
           #
           #   @param metadata [Hash{Symbol=>String}, nil]
           #     Up to 16 string key-value pairs, with keys up to 64 and values up to 512
@@ -89,13 +95,14 @@ module OpenAI
             optional :model, String
 
             # @!attribute multi_agent
-            #   Explicit configuration for creating and coordinating subagents.
+            #   Configuration for creating and coordinating subagents.
             #
             #   @return [OpenAI::Models::Beta::MultiAgentConfigParam, nil]
             optional :multi_agent, -> { OpenAI::Beta::MultiAgentConfigParam }, nil?: true
 
             # @!attribute reasoning
-            #   Reasoning configuration for the agent.
+            #   Configuration for model reasoning. Omit to keep the current settings; pass
+            #   `null` to reset to the model's default effort.
             #
             #   @return [OpenAI::Models::Beta::AgentReasoningParam, nil]
             optional :reasoning, -> { OpenAI::Beta::AgentReasoningParam }, nil?: true
@@ -140,10 +147,11 @@ module OpenAI
             #     The model to use for the agent. The requested model name is preserved.
             #
             #   @param multi_agent [OpenAI::Models::Beta::MultiAgentConfigParam, nil]
-            #     Explicit configuration for creating and coordinating subagents.
+            #     Configuration for creating and coordinating subagents.
             #
             #   @param reasoning [OpenAI::Models::Beta::AgentReasoningParam, nil]
-            #     Reasoning configuration for the agent.
+            #     Configuration for model reasoning. Omit to keep the current settings; pass
+            #     `null` to reset to the model's default effort.
             #
             #   @param service_tier [Symbol, OpenAI::Models::Beta::Agents::SessionCreateParams::Agent::ServiceTier, nil]
             #     The service tier used for model requests.
@@ -180,7 +188,10 @@ module OpenAI
             end
           end
 
-          # Initial input submitted when creating a session.
+          # Initial input to submit when the session is created. A string is shorthand for a
+          # single user message. Required when `environment.type` is `none`, or when
+          # `stream` is `true` for an environment that is not `self_hosted`; optional for
+          # self-hosted and non-streaming execution environments.
           module Input
             extend OpenAI::Internal::Type::Union
 

data/lib/openai/models/beta/agents/session_update_params.rb

@@ -55,7 +55,7 @@ module OpenAI
             optional :reasoning, -> { OpenAI::Beta::Agents::SessionUpdateParams::Agent::Reasoning }
 
             # @!attribute service_tier
-            #   The service tier used for model requests.
+            #   Omit to keep the current tier. Null resets it to auto.
             #
             #   @return [Symbol, OpenAI::Models::Beta::Agents::SessionUpdateParams::Agent::ServiceTier, nil]
             optional(
@@ -74,12 +74,12 @@ module OpenAI
             #     Reasoning settings to update. Omit to keep the current effort.
             #
             #   @param service_tier [Symbol, OpenAI::Models::Beta::Agents::SessionUpdateParams::Agent::ServiceTier, nil]
-            #     The service tier used for model requests.
+            #     Omit to keep the current tier. Null resets it to auto.
 
             # @see OpenAI::Models::Beta::Agents::SessionUpdateParams::Agent#reasoning
             class Reasoning < OpenAI::Internal::Type::BaseModel
               # @!attribute effort
-              #   The amount of reasoning effort the model should use.
+              #   Omit to keep the current effort. Null selects the model's default effort.
               #
               #   @return [Symbol, OpenAI::Models::Beta::Agents::SessionUpdateParams::Agent::Reasoning::Effort, nil]
               optional(
@@ -92,9 +92,9 @@ module OpenAI
               #   Reasoning settings to update. Omit to keep the current effort.
               #
               #   @param effort [Symbol, OpenAI::Models::Beta::Agents::SessionUpdateParams::Agent::Reasoning::Effort, nil]
-              #     The amount of reasoning effort the model should use.
+              #     Omit to keep the current effort. Null selects the model's default effort.
 
-              # The amount of reasoning effort the model should use.
+              # Omit to keep the current effort. Null selects the model's default effort.
               #
               # @see OpenAI::Models::Beta::Agents::SessionUpdateParams::Agent::Reasoning#effort
               module Effort
@@ -113,7 +113,7 @@ module OpenAI
               end
             end
 
-            # The service tier used for model requests.
+            # Omit to keep the current tier. Null resets it to auto.
             #
             # @see OpenAI::Models::Beta::Agents::SessionUpdateParams::Agent#service_tier
             module ServiceTier

data/lib/openai/models/beta/agents/sessions/turn.rb

@@ -34,7 +34,7 @@ module OpenAI
             required :created_at, Integer
 
             # @!attribute error
-            #   A customer-safe error describing why a session request failed.
+            #   A customer-safe error. Non-null only for a failed turn.
             #
             #   @return [OpenAI::Models::Beta::SessionTurnError, nil]
             required :error, -> { OpenAI::Beta::SessionTurnError }, nil?: true
@@ -70,7 +70,8 @@ module OpenAI
             required :subagent_id, String, nil?: true
 
             # @!attribute usage
-            #   Recorded token usage for a session or turn. Usage is best effort and may change.
+            #   Best-effort token usage for the turn, or null if unknown. Recorded usage may
+            #   change.
             #
             #   @return [OpenAI::Models::Beta::TokenUsage, nil]
             required :usage, -> { OpenAI::Beta::TokenUsage }, nil?: true
@@ -93,7 +94,7 @@ module OpenAI
             #     subagent opening time when the preceding timestamps are unavailable.
             #
             #   @param error [OpenAI::Models::Beta::SessionTurnError, nil]
-            #     A customer-safe error describing why a session request failed.
+            #     A customer-safe error. Non-null only for a failed turn.
             #
             #   @param session_id [String]
             #     The ID of the session that owns the turn.
@@ -108,7 +109,8 @@ module OpenAI
             #     The ID of the subagent that ran the turn, if applicable.
             #
             #   @param usage [OpenAI::Models::Beta::TokenUsage, nil]
-            #     Recorded token usage for a session or turn. Usage is best effort and may change.
+            #     Best-effort token usage for the turn, or null if unknown. Recorded usage may
+            #     change.
             #
             #   @param object [Symbol, :"agent.session.turn"]
             #     The object type. Always `agent.session.turn`.

data/lib/openai/models/beta/agents/vault.rb

@@ -38,8 +38,7 @@ module OpenAI
           required :object, const: :vault
 
           # @!method initialize(id:, created_at:, metadata:, name:, object: :vault)
-          #   A collection of credentials that agent tools can use to authenticate to MCP
-          #   servers.
+          #   A collection of credentials for MCP servers and OpenAI-hosted environments.
           #
           #   @param id [String]
           #     The ID of the vault.

data/lib/openai/models/beta/agents/vaults/credential.rb

@@ -14,9 +14,9 @@ module OpenAI
             required :id, String
 
             # @!attribute auth
-            #   The authentication method and non-secret configuration for the MCP server.
+            #   The authentication method and non-secret configuration of the credential.
             #
-            #   @return [OpenAI::Models::Beta::Agents::Vaults::CredentialAuth::McpOauth, OpenAI::Models::Beta::Agents::Vaults::CredentialAuth::StaticBearer]
+            #   @return [OpenAI::Models::Beta::Agents::Vaults::CredentialAuth::McpOauth, OpenAI::Models::Beta::Agents::Vaults::CredentialAuth::StaticBearer, OpenAI::Models::Beta::Agents::Vaults::CredentialAuth::EnvironmentVariable]
             required :auth, union: -> { OpenAI::Beta::Agents::Vaults::CredentialAuth }
 
             # @!attribute created_at
@@ -50,13 +50,13 @@ module OpenAI
             required :vault_id, String
 
             # @!method initialize(id:, auth:, created_at:, name:, updated_at:, vault_id:, object: :"vault.credential")
-            #   Metadata for a stored MCP server credential. Secret values are never returned.
+            #   Metadata for a stored credential. Secret values are never returned.
             #
             #   @param id [String]
             #     The ID of the credential.
             #
-            #   @param auth [OpenAI::Models::Beta::Agents::Vaults::CredentialAuth::McpOauth, OpenAI::Models::Beta::Agents::Vaults::CredentialAuth::StaticBearer]
-            #     The authentication method and non-secret configuration for the MCP server.
+            #   @param auth [OpenAI::Models::Beta::Agents::Vaults::CredentialAuth::McpOauth, OpenAI::Models::Beta::Agents::Vaults::CredentialAuth::StaticBearer, OpenAI::Models::Beta::Agents::Vaults::CredentialAuth::EnvironmentVariable]
+            #     The authentication method and non-secret configuration of the credential.
             #
             #   @param created_at [Integer]
             #     The Unix timestamp, in seconds, when the credential was created.

data/lib/openai/models/beta/agents/vaults/credential_auth.rb

@@ -5,8 +5,7 @@ module OpenAI
     module Beta
       module Agents
         module Vaults
-          # The MCP server and authentication configuration of a vault credential, excluding
-          # secrets.
+          # The authentication configuration of a vault credential, excluding secrets.
           module CredentialAuth
             extend OpenAI::Internal::Type::Union
 
@@ -18,6 +17,9 @@ module OpenAI
             # Metadata for a bearer-token credential, without automatic OAuth refresh.
             variant :static_bearer, -> { OpenAI::Beta::Agents::Vaults::CredentialAuth::StaticBearer }
 
+            # Metadata for an HTTP credential used only in OpenAI-hosted environments. Sandbox code receives a placeholder. The proxy substitutes the secret for allowed HTTPS destinations on ports 443 and 8443. The real secret is not available to sandbox code for local computation and is never returned in this resource.
+            variant :environment_variable, -> { OpenAI::Beta::Agents::Vaults::CredentialAuth::EnvironmentVariable }
+
             class McpOauth < OpenAI::Internal::Type::BaseModel
               # @!attribute expires_at
               #   When the OAuth access token expires, as an RFC 3339 timestamp, if known.
@@ -32,8 +34,7 @@ module OpenAI
               required :mcp_server_url, String
 
               # @!attribute refresh
-              #   Configuration used to refresh an MCP OAuth access token, excluding secret
-              #   values.
+              #   Public refresh metadata without refresh tokens or OAuth client secrets.
               #
               #   @return [OpenAI::Models::Beta::Agents::Vaults::CredentialAuth::McpOauth::Refresh, nil]
               required(
@@ -61,8 +62,7 @@ module OpenAI
               #     The HTTPS MCP server URL authorized by this credential.
               #
               #   @param refresh [OpenAI::Models::Beta::Agents::Vaults::CredentialAuth::McpOauth::Refresh, nil]
-              #     Configuration used to refresh an MCP OAuth access token, excluding secret
-              #     values.
+              #     Public refresh metadata without refresh tokens or OAuth client secrets.
               #
               #   @param type [Symbol, :mcp_oauth]
               #     The type of the object. Always `mcp_oauth`.
@@ -101,8 +101,7 @@ module OpenAI
                 required :token_endpoint_auth, union: -> { OpenAI::Beta::Agents::Vaults::McpOauthTokenEndpointAuth }
 
                 # @!method initialize(client_id:, resource:, scope:, token_endpoint:, token_endpoint_auth:)
-                #   Configuration used to refresh an MCP OAuth access token, excluding secret
-                #   values.
+                #   Public refresh metadata without refresh tokens or OAuth client secrets.
                 #
                 #   @param client_id [String]
                 #     The OAuth client ID used when requesting a new access token.
@@ -145,8 +144,45 @@ module OpenAI
               #     The type of the object. Always `static_bearer`.
             end
 
+            class EnvironmentVariable < OpenAI::Internal::Type::BaseModel
+              # @!attribute networking
+              #   The destinations where the proxy can substitute the secret, subject to the
+              #   environment network policy.
+              #
+              #   @return [OpenAI::Models::Beta::Agents::Vaults::CredentialNetworking::Unrestricted, OpenAI::Models::Beta::Agents::Vaults::CredentialNetworking::Limited]
+              required :networking, union: -> { OpenAI::Beta::Agents::Vaults::CredentialNetworking }
+
+              # @!attribute secret_name
+              #   The environment variable name that receives the placeholder in the sandbox.
+              #
+              #   @return [String]
+              required :secret_name, String
+
+              # @!attribute type
+              #   The type of the object. Always `environment_variable`.
+              #
+              #   @return [Symbol, :environment_variable]
+              required :type, const: :environment_variable
+
+              # @!method initialize(networking:, secret_name:, type: :environment_variable)
+              #   Metadata for an HTTP credential used only in OpenAI-hosted environments. Sandbox
+              #   code receives a placeholder. The proxy substitutes the secret for allowed HTTPS
+              #   destinations on ports 443 and 8443. The real secret is not available to sandbox
+              #   code for local computation and is never returned in this resource.
+              #
+              #   @param networking [OpenAI::Models::Beta::Agents::Vaults::CredentialNetworking::Unrestricted, OpenAI::Models::Beta::Agents::Vaults::CredentialNetworking::Limited]
+              #     The destinations where the proxy can substitute the secret, subject to the
+              #     environment network policy.
+              #
+              #   @param secret_name [String]
+              #     The environment variable name that receives the placeholder in the sandbox.
+              #
+              #   @param type [Symbol, :environment_variable]
+              #     The type of the object. Always `environment_variable`.
+            end
+
             # @!method self.variants
-            #   @return [Array(OpenAI::Models::Beta::Agents::Vaults::CredentialAuth::McpOauth, OpenAI::Models::Beta::Agents::Vaults::CredentialAuth::StaticBearer)]
+            #   @return [Array(OpenAI::Models::Beta::Agents::Vaults::CredentialAuth::McpOauth, OpenAI::Models::Beta::Agents::Vaults::CredentialAuth::StaticBearer, OpenAI::Models::Beta::Agents::Vaults::CredentialAuth::EnvironmentVariable)]
           end
         end
       end