@depup/openai 7.34.0-depup.0 → 7.36.0-depup.0

package/internal/ws-connection.mjs

@@ -0,0 +1,88 @@
+import { OpenAIError } from "../core/error.mjs";
+import { ReadyState } from "./ws-adapter.mjs";
+import { flattenRawData } from "./ws.mjs";
+/** Sends or queues an application event using the existing connection state. */
+export function sendWebSocketEvent(owner, event, queue, isReconnecting, onError) {
+    if (!owner.socket) {
+        throw new OpenAIError('Internal error: failed to initialize socket. Please report this issue.');
+    }
+    if (isReconnecting() || owner.socket.readyState === ReadyState.CONNECTING) {
+        if (!queue.enqueue(event)) {
+            onError('send queue is full, message discarded');
+        }
+        return;
+    }
+    if (owner.socket.readyState !== ReadyState.OPEN) {
+        onError('cannot send on a closed WebSocket');
+        return;
+    }
+    try {
+        owner.socket.send(JSON.stringify(event));
+    }
+    catch (error) {
+        onError('could not send data', error);
+    }
+}
+/** Sends or snapshots a raw frame using the same admission rules as application events. */
+export function sendRawWebSocketData(owner, data, queue, isReconnecting, onError) {
+    if (!owner.socket) {
+        throw new OpenAIError('Internal error: failed to initialize socket. Please report this issue.');
+    }
+    if (isReconnecting() || owner.socket.readyState === ReadyState.CONNECTING) {
+        if (!queue.enqueueRaw(data)) {
+            onError('send queue is full, message discarded');
+        }
+        return;
+    }
+    if (owner.socket.readyState !== ReadyState.OPEN) {
+        onError('cannot send on a closed WebSocket');
+        return;
+    }
+    try {
+        owner.socket.send(flattenRawData(data));
+    }
+    catch (error) {
+        onError('could not send data', error);
+    }
+}
+/** Flushes queued frames with the caller's existing failed-send policy. */
+export function flushWebSocketSendQueue(owner, queue, onError, options) {
+    if (!owner.socket) {
+        throw new OpenAIError('Internal error: failed to initialize socket. Please report this issue.');
+    }
+    try {
+        queue.flush((data) => owner.socket.send(flattenRawData(data)), options);
+    }
+    catch (error) {
+        onError('could not send queued data', error);
+    }
+}
+/** Resolves when the socket opens, or rejects if it errors or closes first. */
+export function waitForWebSocketOpen(socket) {
+    // oxlint-disable-next-line promise/avoid-new -- Convert the existing socket event callbacks into the connection attempt's promise.
+    return new Promise((resolve, reject) => {
+        /* oxlint-disable eslint/no-use-before-define -- All mutually dependent callbacks are initialized before socket listeners are registered. */
+        const cleanup = () => {
+            socket.off('open', onOpen);
+            socket.off('error', onError);
+            socket.off('close', onFail);
+        };
+        /* oxlint-enable eslint/no-use-before-define */
+        const onOpen = () => {
+            cleanup();
+            resolve();
+        };
+        const onError = (error) => {
+            cleanup();
+            reject(error);
+        };
+        const onFail = () => {
+            cleanup();
+            reject(new Error('socket closed before open'));
+        };
+        socket.once('open', onOpen);
+        socket.once('error', onError);
+        socket.once('close', onFail);
+    });
+}
+//# sourceMappingURL=ws-connection.mjs.map

package/internal/ws-connection.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ws-connection.mjs","sourceRoot":"","sources":["../src/internal/ws-connection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,0BAAsB;AAC5C,OAAO,EAAE,UAAU,EAAE,yBAAqB;AAE1C,OAAO,EAAE,cAAc,EAAE,iBAAa;AAStC,gFAAgF;AAChF,MAAM,UAAU,kBAAkB,CAChC,KAAkB,EAClB,KAAQ,EACR,KAAmB,EACnB,cAA6B,EAC7B,OAAgB;IAEhB,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,IAAI,WAAW,CAAC,wEAAwE,CAAC,CAAC;IAClG,CAAC;IAED,IAAI,cAAc,EAAE,IAAI,KAAK,CAAC,MAAM,CAAC,UAAU,KAAK,UAAU,CAAC,UAAU,EAAE,CAAC;QAC1E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,uCAAuC,CAAC,CAAC;QACnD,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,CAAC,UAAU,KAAK,UAAU,CAAC,IAAI,EAAE,CAAC;QAChD,OAAO,CAAC,mCAAmC,CAAC,CAAC;QAC7C,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;IACxC,CAAC;AACH,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,oBAAoB,CAClC,KAAkB,EAClB,IAAsB,EACtB,KAAmB,EACnB,cAA6B,EAC7B,OAAgB;IAEhB,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,IAAI,WAAW,CAAC,wEAAwE,CAAC,CAAC;IAClG,CAAC;IAED,IAAI,cAAc,EAAE,IAAI,KAAK,CAAC,MAAM,CAAC,UAAU,KAAK,UAAU,CAAC,UAAU,EAAE,CAAC;QAC1E,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,uCAAuC,CAAC,CAAC;QACnD,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,CAAC,UAAU,KAAK,UAAU,CAAC,IAAI,EAAE,CAAC;QAChD,OAAO,CAAC,mCAAmC,CAAC,CAAC;QAC7C,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;IACxC,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,uBAAuB,CACrC,KAAkB,EAClB,KAAmB,EACnB,OAAgB,EAChB,OAAqC;IAErC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,IAAI,WAAW,CAAC,wEAAwE,CAAC,CAAC;IAClG,CAAC;IAED,IAAI,CAAC;QACH,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAC1E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,oBAAoB,CAAC,MAAqB;IACxD,mIAAmI;IACnI,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,4IAA4I;QAC5I,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC3B,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC9B,CAAC,CAAC;QACF,+CAA+C;QAC/C,MAAM,MAAM,GAAG,GAAG,EAAE;YAClB,OAAO,EAAE,CAAC;YACV,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,CAAC,KAAY,EAAE,EAAE;YAC/B,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,GAAG,EAAE;YAClB,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC;QACjD,CAAC,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/internal/ws-credentials.d.mts

@@ -0,0 +1,25 @@
+import type { OpenAI } from "../client.mjs";
+import type { CredentialedWebSocketOptions } from "./ws.mjs";
+/** Per-connection credential snapshots shared by Node WebSocket bindings. */
+export declare class WebSocketCredentials {
+    private readonly connectionName;
+    constructor(connectionName: string);
+    private initialAuthUsedAPIKey;
+    private initialAPIKey;
+    private prepared;
+    get preparedAPIKey(): string | null | undefined;
+    trackInitialHeaders(client: OpenAI, headers: Record<string, string>, hasSocket: () => boolean): void;
+    usesAPIKey(client: OpenAI, headers: Record<string, string>): boolean;
+    build<Options extends CredentialedWebSocketOptions>(client: OpenAI, authHeaders: Record<string, string>, options: Options | null | undefined, initialAuthUsedAPIKey?: boolean): {
+        headers: {
+            [k: string]: string;
+        };
+        followRedirects: boolean;
+    } & {
+        headers: {
+            [k: string]: string;
+        };
+    };
+    prepare<Socket, Options extends CredentialedWebSocketOptions>(client: OpenAI, socketOptions: Options | null | undefined, authHeaders: (apiKey?: string | null) => Record<string, string>, createSocket: (url: URL, headers: Record<string, string>) => Socket): Promise<(url: URL) => Socket>;
+}
+//# sourceMappingURL=ws-credentials.d.mts.map

package/internal/ws-credentials.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ws-credentials.d.mts","sourceRoot":"","sources":["../src/internal/ws-credentials.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,sBAAkB;AAQxC,OAAO,KAAK,EAAE,4BAA4B,EAAE,iBAAa;AAyDzD,6EAA6E;AAC7E,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;gBAE5B,cAAc,EAAE,MAAM;IAGlC,OAAO,CAAC,qBAAqB,CAAS;IACtC,OAAO,CAAC,aAAa,CAAqB;IAC1C,OAAO,CAAC,QAAQ,CAMF;IAEd,IAAI,cAAc,IAAI,MAAM,GAAG,IAAI,GAAG,SAAS,CAE9C;IAED,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,MAAM,OAAO,GAAG,IAAI;IAMpG,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO;IAoBpE,KAAK,CAAC,OAAO,SAAS,4BAA4B,EAChD,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACnC,OAAO,EAAE,OAAO,GAAG,IAAI,GAAG,SAAS,EACnC,qBAAqB,CAAC,EAAE,OAAO;;;;;;;;;;IAmB3B,OAAO,CAAC,MAAM,EAAE,OAAO,SAAS,4BAA4B,EAChE,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,OAAO,GAAG,IAAI,GAAG,SAAS,EACzC,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/D,YAAY,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,MAAM,GAClE,OAAO,CAAC,CAAC,GAAG,EAAE,GAAG,KAAK,MAAM,CAAC;CAuBjC"}

package/internal/ws-credentials.d.ts

@@ -0,0 +1,25 @@
+import type { OpenAI } from "../client.js";
+import type { CredentialedWebSocketOptions } from "./ws.js";
+/** Per-connection credential snapshots shared by Node WebSocket bindings. */
+export declare class WebSocketCredentials {
+    private readonly connectionName;
+    constructor(connectionName: string);
+    private initialAuthUsedAPIKey;
+    private initialAPIKey;
+    private prepared;
+    get preparedAPIKey(): string | null | undefined;
+    trackInitialHeaders(client: OpenAI, headers: Record<string, string>, hasSocket: () => boolean): void;
+    usesAPIKey(client: OpenAI, headers: Record<string, string>): boolean;
+    build<Options extends CredentialedWebSocketOptions>(client: OpenAI, authHeaders: Record<string, string>, options: Options | null | undefined, initialAuthUsedAPIKey?: boolean): {
+        headers: {
+            [k: string]: string;
+        };
+        followRedirects: boolean;
+    } & {
+        headers: {
+            [k: string]: string;
+        };
+    };
+    prepare<Socket, Options extends CredentialedWebSocketOptions>(client: OpenAI, socketOptions: Options | null | undefined, authHeaders: (apiKey?: string | null) => Record<string, string>, createSocket: (url: URL, headers: Record<string, string>) => Socket): Promise<(url: URL) => Socket>;
+}
+//# sourceMappingURL=ws-credentials.d.ts.map

package/internal/ws-credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ws-credentials.d.ts","sourceRoot":"","sources":["../src/internal/ws-credentials.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,qBAAkB;AAQxC,OAAO,KAAK,EAAE,4BAA4B,EAAE,gBAAa;AAyDzD,6EAA6E;AAC7E,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;gBAE5B,cAAc,EAAE,MAAM;IAGlC,OAAO,CAAC,qBAAqB,CAAS;IACtC,OAAO,CAAC,aAAa,CAAqB;IAC1C,OAAO,CAAC,QAAQ,CAMF;IAEd,IAAI,cAAc,IAAI,MAAM,GAAG,IAAI,GAAG,SAAS,CAE9C;IAED,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,MAAM,OAAO,GAAG,IAAI;IAMpG,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO;IAoBpE,KAAK,CAAC,OAAO,SAAS,4BAA4B,EAChD,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACnC,OAAO,EAAE,OAAO,GAAG,IAAI,GAAG,SAAS,EACnC,qBAAqB,CAAC,EAAE,OAAO;;;;;;;;;;IAmB3B,OAAO,CAAC,MAAM,EAAE,OAAO,SAAS,4BAA4B,EAChE,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,OAAO,GAAG,IAAI,GAAG,SAAS,EACzC,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/D,YAAY,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,MAAM,GAClE,OAAO,CAAC,CAAC,GAAG,EAAE,GAAG,KAAK,MAAM,CAAC;CAuBjC"}

package/internal/ws-credentials.js

@@ -0,0 +1,109 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WebSocketCredentials = void 0;
+const error_1 = require("../core/error.js");
+const realtime_credentials_1 = require("./realtime-credentials.js");
+const ws_1 = require("./ws.js");
+/**
+ * Keep caller credential admission distinct from the hook's final provider-key transform.
+ * The latter reuses captured base headers so no caller getters are reread after the refresh.
+ */
+function buildCredentialedWebSocketOptions(client, authHeaders, options, prepared) {
+    if (prepared) {
+        return prepared.apiKey === undefined
+            ? (0, ws_1.mergeWebSocketAuthHeaders)(prepared.options, authHeaders, prepared.removedHeaders)
+            : (0, ws_1.buildWebSocketOptions)(client, authHeaders, prepared.options, prepared.removedHeaders, true);
+    }
+    if (!client._hasApiKeyProvider()) {
+        return (0, ws_1.buildWebSocketOptions)(client, authHeaders, options);
+    }
+    const removedHeaders = new Set();
+    const provided = (0, ws_1.buildWebSocketOptions)(client, {}, options, removedHeaders);
+    return (0, ws_1.snapshotWebSocketCredentials)(provided, ws_1.WEBSOCKET_METADATA_HEADERS)
+        ? provided
+        : (0, ws_1.buildWebSocketOptions)(client, authHeaders, provided, removedHeaders, true);
+}
+/**
+ * Classify reconnect credentials without treating the previous SDK key as a caller override.
+ * Capture routing and caller options before any asynchronous key refresh.
+ */
+function prepareWebSocketReconnect(client, socketOptions, initialAuthUsedAPIKey) {
+    const removedHeaders = new Set();
+    const options = (0, ws_1.buildWebSocketOptions)(client, {}, socketOptions, removedHeaders);
+    let authentication;
+    if ((0, ws_1.snapshotWebSocketCredentials)(options, ws_1.WEBSOCKET_METADATA_HEADERS)) {
+        authentication = 'provided';
+    }
+    else if (removedHeaders.has('authorization') ||
+        options.headers?.['authorization'] !== undefined ||
+        !initialAuthUsedAPIKey) {
+        authentication = 'cached';
+    }
+    else {
+        authentication = 'refresh';
+    }
+    return { options, removedHeaders, authentication };
+}
+/** Per-connection credential snapshots shared by Node WebSocket bindings. */
+class WebSocketCredentials {
+    constructor(connectionName) {
+        this.initialAuthUsedAPIKey = false;
+        this.connectionName = connectionName;
+    }
+    get preparedAPIKey() {
+        return this.prepared?.apiKey;
+    }
+    trackInitialHeaders(client, headers, hasSocket) {
+        if (!hasSocket() && client._hasApiKeyProvider()) {
+            this.initialAPIKey = headers['Authorization']?.slice('Bearer '.length);
+        }
+    }
+    usesAPIKey(client, headers) {
+        // Hooks can read the SDK key without delegating. Only use an ordinary cached property here:
+        // invoking custom/Bedrock getters could validate credentials a caller-owned socket never sends.
+        const apiKey = this.initialAPIKey ??
+            (client._hasApiKeyProvider() ? Object.getOwnPropertyDescriptor(client, 'apiKey')?.value : undefined);
+        if (!apiKey) {
+            return false;
+        }
+        // Metadata containing a copy of a credential does not make it the socket's authentication.
+        return (0, ws_1.snapshotWebSocketCredentials)({
+            headers: Object.fromEntries(Object.entries(headers).map(([name, value]) => [name, value?.includes(apiKey) ? value : ''])),
+        }, ws_1.WEBSOCKET_METADATA_HEADERS);
+    }
+    build(client, authHeaders, options, initialAuthUsedAPIKey) {
+        if (initialAuthUsedAPIKey !== undefined) {
+            this.initialAuthUsedAPIKey = initialAuthUsedAPIKey;
+            this.initialAPIKey = undefined;
+        }
+        const socketOptions = buildCredentialedWebSocketOptions(client, authHeaders, options, this.prepared);
+        if (client._hasApiKeyProvider() &&
+            !authHeaders['Authorization'] &&
+            !(0, ws_1.snapshotWebSocketCredentials)(socketOptions, ws_1.WEBSOCKET_METADATA_HEADERS)) {
+            throw new error_1.OpenAIError(`Cannot open a ${this.connectionName} WebSocket with an unresolved function-based apiKey. Resolve it before constructing the WebSocket or provide explicit WebSocket credentials.`);
+        }
+        return socketOptions;
+    }
+    async prepare(client, socketOptions, authHeaders, createSocket) {
+        const { options, removedHeaders, authentication } = prepareWebSocketReconnect(client, socketOptions, this.initialAuthUsedAPIKey);
+        const createPreparedSocket = (url, headers, apiKey) => {
+            const previous = this.prepared;
+            this.prepared = { options, removedHeaders, apiKey };
+            try {
+                // Resolve headers inside the scope so legacy zero-argument overrides see this attempt's key.
+                return createSocket(url, apiKey === undefined ? headers : authHeaders(apiKey));
+            }
+            finally {
+                this.prepared = previous;
+            }
+        };
+        if (authentication !== 'refresh') {
+            const headers = authentication === 'provided' ? {} : authHeaders();
+            return (url) => createPreparedSocket(url, headers);
+        }
+        const { commit } = await (0, realtime_credentials_1.resolveRealtimeAPIKey)(client, true);
+        return (url) => createPreparedSocket(url, {}, commit());
+    }
+}
+exports.WebSocketCredentials = WebSocketCredentials;
+//# sourceMappingURL=ws-credentials.js.map

package/internal/ws-credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ws-credentials.js","sourceRoot":"","sources":["../src/internal/ws-credentials.ts"],"names":[],"mappings":";;;AAAA,4CAA4C;AAE5C,oEAA+D;AAC/D,gCAKc;AAGd;;;GAGG;AACH,SAAS,iCAAiC,CACxC,MAAc,EACd,WAAmC,EACnC,OAAmC,EACnC,QAIC;IAED,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC,MAAM,KAAK,SAAS;YAClC,CAAC,CAAC,IAAA,8BAAyB,EAAC,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,cAAc,CAAC;YACnF,CAAC,CAAC,IAAA,0BAAqB,EAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;IAClG,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,EAAE,CAAC;QACjC,OAAO,IAAA,0BAAqB,EAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IACzC,MAAM,QAAQ,GAAG,IAAA,0BAAqB,EAAC,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;IAC5E,OAAO,IAAA,iCAA4B,EAAC,QAAQ,EAAE,+BAA0B,CAAC;QACvE,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,IAAA,0BAAqB,EAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;AACjF,CAAC;AAED;;;GAGG;AACH,SAAS,yBAAyB,CAChC,MAAc,EACd,aAAyC,EACzC,qBAA8B;IAE9B,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IACzC,MAAM,OAAO,GAAG,IAAA,0BAAqB,EAAC,MAAM,EAAE,EAAE,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC;IACjF,IAAI,cAAiD,CAAC;IACtD,IAAI,IAAA,iCAA4B,EAAC,OAAO,EAAE,+BAA0B,CAAC,EAAE,CAAC;QACtE,cAAc,GAAG,UAAU,CAAC;IAC9B,CAAC;SAAM,IACL,cAAc,CAAC,GAAG,CAAC,eAAe,CAAC;QACnC,OAAO,CAAC,OAAO,EAAE,CAAC,eAAe,CAAC,KAAK,SAAS;QAChD,CAAC,qBAAqB,EACtB,CAAC;QACD,cAAc,GAAG,QAAQ,CAAC;IAC5B,CAAC;SAAM,CAAC;QACN,cAAc,GAAG,SAAS,CAAC;IAC7B,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,CAAC;AACrD,CAAC;AAED,6EAA6E;AAC7E,MAAa,oBAAoB;IAG/B,YAAY,cAAsB;QAG1B,0BAAqB,GAAG,KAAK,CAAC;QAFpC,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;IACvC,CAAC;IAWD,IAAI,cAAc;QAChB,OAAO,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC/B,CAAC;IAED,mBAAmB,CAAC,MAAc,EAAE,OAA+B,EAAE,SAAwB;QAC3F,IAAI,CAAC,SAAS,EAAE,IAAI,MAAM,CAAC,kBAAkB,EAAE,EAAE,CAAC;YAChD,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,eAAe,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAED,UAAU,CAAC,MAAc,EAAE,OAA+B;QACxD,4FAA4F;QAC5F,gGAAgG;QAChG,MAAM,MAAM,GACV,IAAI,CAAC,aAAa;YAClB,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,wBAAwB,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACvG,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,KAAK,CAAC;QACf,CAAC;QACD,2FAA2F;QAC3F,OAAO,IAAA,iCAA4B,EACjC;YACE,OAAO,EAAE,MAAM,CAAC,WAAW,CACzB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAC7F;SACF,EACD,+BAA0B,CAC3B,CAAC;IACJ,CAAC;IAED,KAAK,CACH,MAAc,EACd,WAAmC,EACnC,OAAmC,EACnC,qBAA+B;QAE/B,IAAI,qBAAqB,KAAK,SAAS,EAAE,CAAC;YACxC,IAAI,CAAC,qBAAqB,GAAG,qBAAqB,CAAC;YACnD,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC;QACjC,CAAC;QACD,MAAM,aAAa,GAAG,iCAAiC,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrG,IACE,MAAM,CAAC,kBAAkB,EAAE;YAC3B,CAAC,WAAW,CAAC,eAAe,CAAC;YAC7B,CAAC,IAAA,iCAA4B,EAAC,aAAa,EAAE,+BAA0B,CAAC,EACxE,CAAC;YACD,MAAM,IAAI,mBAAW,CACnB,iBAAiB,IAAI,CAAC,cAAc,8IAA8I,CACnL,CAAC;QACJ,CAAC;QACD,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,OAAO,CACX,MAAc,EACd,aAAyC,EACzC,WAA+D,EAC/D,YAAmE;QAEnE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,GAAG,yBAAyB,CAC3E,MAAM,EACN,aAAa,EACb,IAAI,CAAC,qBAAqB,CAC3B,CAAC;QACF,MAAM,oBAAoB,GAAG,CAAC,GAAQ,EAAE,OAA+B,EAAE,MAAsB,EAAE,EAAE;YACjG,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;YAC/B,IAAI,CAAC,QAAQ,GAAG,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC;YACpD,IAAI,CAAC;gBACH,6FAA6F;gBAC7F,OAAO,YAAY,CAAC,GAAG,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;YACjF,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;YAC3B,CAAC;QACH,CAAC,CAAC;QACF,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,cAAc,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YACnE,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAA,4CAAqB,EAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1D,CAAC;CACF;AAjGD,oDAiGC"}

package/internal/ws-credentials.mjs

@@ -0,0 +1,105 @@
+import { OpenAIError } from "../core/error.mjs";
+import { resolveRealtimeAPIKey } from "./realtime-credentials.mjs";
+import { buildWebSocketOptions, mergeWebSocketAuthHeaders, snapshotWebSocketCredentials, WEBSOCKET_METADATA_HEADERS, } from "./ws.mjs";
+/**
+ * Keep caller credential admission distinct from the hook's final provider-key transform.
+ * The latter reuses captured base headers so no caller getters are reread after the refresh.
+ */
+function buildCredentialedWebSocketOptions(client, authHeaders, options, prepared) {
+    if (prepared) {
+        return prepared.apiKey === undefined
+            ? mergeWebSocketAuthHeaders(prepared.options, authHeaders, prepared.removedHeaders)
+            : buildWebSocketOptions(client, authHeaders, prepared.options, prepared.removedHeaders, true);
+    }
+    if (!client._hasApiKeyProvider()) {
+        return buildWebSocketOptions(client, authHeaders, options);
+    }
+    const removedHeaders = new Set();
+    const provided = buildWebSocketOptions(client, {}, options, removedHeaders);
+    return snapshotWebSocketCredentials(provided, WEBSOCKET_METADATA_HEADERS)
+        ? provided
+        : buildWebSocketOptions(client, authHeaders, provided, removedHeaders, true);
+}
+/**
+ * Classify reconnect credentials without treating the previous SDK key as a caller override.
+ * Capture routing and caller options before any asynchronous key refresh.
+ */
+function prepareWebSocketReconnect(client, socketOptions, initialAuthUsedAPIKey) {
+    const removedHeaders = new Set();
+    const options = buildWebSocketOptions(client, {}, socketOptions, removedHeaders);
+    let authentication;
+    if (snapshotWebSocketCredentials(options, WEBSOCKET_METADATA_HEADERS)) {
+        authentication = 'provided';
+    }
+    else if (removedHeaders.has('authorization') ||
+        options.headers?.['authorization'] !== undefined ||
+        !initialAuthUsedAPIKey) {
+        authentication = 'cached';
+    }
+    else {
+        authentication = 'refresh';
+    }
+    return { options, removedHeaders, authentication };
+}
+/** Per-connection credential snapshots shared by Node WebSocket bindings. */
+export class WebSocketCredentials {
+    constructor(connectionName) {
+        this.initialAuthUsedAPIKey = false;
+        this.connectionName = connectionName;
+    }
+    get preparedAPIKey() {
+        return this.prepared?.apiKey;
+    }
+    trackInitialHeaders(client, headers, hasSocket) {
+        if (!hasSocket() && client._hasApiKeyProvider()) {
+            this.initialAPIKey = headers['Authorization']?.slice('Bearer '.length);
+        }
+    }
+    usesAPIKey(client, headers) {
+        // Hooks can read the SDK key without delegating. Only use an ordinary cached property here:
+        // invoking custom/Bedrock getters could validate credentials a caller-owned socket never sends.
+        const apiKey = this.initialAPIKey ??
+            (client._hasApiKeyProvider() ? Object.getOwnPropertyDescriptor(client, 'apiKey')?.value : undefined);
+        if (!apiKey) {
+            return false;
+        }
+        // Metadata containing a copy of a credential does not make it the socket's authentication.
+        return snapshotWebSocketCredentials({
+            headers: Object.fromEntries(Object.entries(headers).map(([name, value]) => [name, value?.includes(apiKey) ? value : ''])),
+        }, WEBSOCKET_METADATA_HEADERS);
+    }
+    build(client, authHeaders, options, initialAuthUsedAPIKey) {
+        if (initialAuthUsedAPIKey !== undefined) {
+            this.initialAuthUsedAPIKey = initialAuthUsedAPIKey;
+            this.initialAPIKey = undefined;
+        }
+        const socketOptions = buildCredentialedWebSocketOptions(client, authHeaders, options, this.prepared);
+        if (client._hasApiKeyProvider() &&
+            !authHeaders['Authorization'] &&
+            !snapshotWebSocketCredentials(socketOptions, WEBSOCKET_METADATA_HEADERS)) {
+            throw new OpenAIError(`Cannot open a ${this.connectionName} WebSocket with an unresolved function-based apiKey. Resolve it before constructing the WebSocket or provide explicit WebSocket credentials.`);
+        }
+        return socketOptions;
+    }
+    async prepare(client, socketOptions, authHeaders, createSocket) {
+        const { options, removedHeaders, authentication } = prepareWebSocketReconnect(client, socketOptions, this.initialAuthUsedAPIKey);
+        const createPreparedSocket = (url, headers, apiKey) => {
+            const previous = this.prepared;
+            this.prepared = { options, removedHeaders, apiKey };
+            try {
+                // Resolve headers inside the scope so legacy zero-argument overrides see this attempt's key.
+                return createSocket(url, apiKey === undefined ? headers : authHeaders(apiKey));
+            }
+            finally {
+                this.prepared = previous;
+            }
+        };
+        if (authentication !== 'refresh') {
+            const headers = authentication === 'provided' ? {} : authHeaders();
+            return (url) => createPreparedSocket(url, headers);
+        }
+        const { commit } = await resolveRealtimeAPIKey(client, true);
+        return (url) => createPreparedSocket(url, {}, commit());
+    }
+}
+//# sourceMappingURL=ws-credentials.mjs.map

package/internal/ws-credentials.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ws-credentials.mjs","sourceRoot":"","sources":["../src/internal/ws-credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,0BAAsB;AAE5C,OAAO,EAAE,qBAAqB,EAAE,mCAA+B;AAC/D,OAAO,EACL,qBAAqB,EACrB,yBAAyB,EACzB,4BAA4B,EAC5B,0BAA0B,GAC3B,iBAAa;AAGd;;;GAGG;AACH,SAAS,iCAAiC,CACxC,MAAc,EACd,WAAmC,EACnC,OAAmC,EACnC,QAIC;IAED,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC,MAAM,KAAK,SAAS;YAClC,CAAC,CAAC,yBAAyB,CAAC,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,cAAc,CAAC;YACnF,CAAC,CAAC,qBAAqB,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;IAClG,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,EAAE,CAAC;QACjC,OAAO,qBAAqB,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IACzC,MAAM,QAAQ,GAAG,qBAAqB,CAAC,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;IAC5E,OAAO,4BAA4B,CAAC,QAAQ,EAAE,0BAA0B,CAAC;QACvE,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,qBAAqB,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;AACjF,CAAC;AAED;;;GAGG;AACH,SAAS,yBAAyB,CAChC,MAAc,EACd,aAAyC,EACzC,qBAA8B;IAE9B,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IACzC,MAAM,OAAO,GAAG,qBAAqB,CAAC,MAAM,EAAE,EAAE,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC;IACjF,IAAI,cAAiD,CAAC;IACtD,IAAI,4BAA4B,CAAC,OAAO,EAAE,0BAA0B,CAAC,EAAE,CAAC;QACtE,cAAc,GAAG,UAAU,CAAC;IAC9B,CAAC;SAAM,IACL,cAAc,CAAC,GAAG,CAAC,eAAe,CAAC;QACnC,OAAO,CAAC,OAAO,EAAE,CAAC,eAAe,CAAC,KAAK,SAAS;QAChD,CAAC,qBAAqB,EACtB,CAAC;QACD,cAAc,GAAG,QAAQ,CAAC;IAC5B,CAAC;SAAM,CAAC;QACN,cAAc,GAAG,SAAS,CAAC;IAC7B,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,CAAC;AACrD,CAAC;AAED,6EAA6E;AAC7E,MAAM,OAAO,oBAAoB;IAG/B,YAAY,cAAsB;QAG1B,0BAAqB,GAAG,KAAK,CAAC;QAFpC,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;IACvC,CAAC;IAWD,IAAI,cAAc;QAChB,OAAO,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC/B,CAAC;IAED,mBAAmB,CAAC,MAAc,EAAE,OAA+B,EAAE,SAAwB;QAC3F,IAAI,CAAC,SAAS,EAAE,IAAI,MAAM,CAAC,kBAAkB,EAAE,EAAE,CAAC;YAChD,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,eAAe,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAED,UAAU,CAAC,MAAc,EAAE,OAA+B;QACxD,4FAA4F;QAC5F,gGAAgG;QAChG,MAAM,MAAM,GACV,IAAI,CAAC,aAAa;YAClB,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,wBAAwB,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACvG,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,KAAK,CAAC;QACf,CAAC;QACD,2FAA2F;QAC3F,OAAO,4BAA4B,CACjC;YACE,OAAO,EAAE,MAAM,CAAC,WAAW,CACzB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAC7F;SACF,EACD,0BAA0B,CAC3B,CAAC;IACJ,CAAC;IAED,KAAK,CACH,MAAc,EACd,WAAmC,EACnC,OAAmC,EACnC,qBAA+B;QAE/B,IAAI,qBAAqB,KAAK,SAAS,EAAE,CAAC;YACxC,IAAI,CAAC,qBAAqB,GAAG,qBAAqB,CAAC;YACnD,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC;QACjC,CAAC;QACD,MAAM,aAAa,GAAG,iCAAiC,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrG,IACE,MAAM,CAAC,kBAAkB,EAAE;YAC3B,CAAC,WAAW,CAAC,eAAe,CAAC;YAC7B,CAAC,4BAA4B,CAAC,aAAa,EAAE,0BAA0B,CAAC,EACxE,CAAC;YACD,MAAM,IAAI,WAAW,CACnB,iBAAiB,IAAI,CAAC,cAAc,8IAA8I,CACnL,CAAC;QACJ,CAAC;QACD,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,OAAO,CACX,MAAc,EACd,aAAyC,EACzC,WAA+D,EAC/D,YAAmE;QAEnE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,GAAG,yBAAyB,CAC3E,MAAM,EACN,aAAa,EACb,IAAI,CAAC,qBAAqB,CAC3B,CAAC;QACF,MAAM,oBAAoB,GAAG,CAAC,GAAQ,EAAE,OAA+B,EAAE,MAAsB,EAAE,EAAE;YACjG,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;YAC/B,IAAI,CAAC,QAAQ,GAAG,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC;YACpD,IAAI,CAAC;gBACH,6FAA6F;gBAC7F,OAAO,YAAY,CAAC,GAAG,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;YACjF,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;YAC3B,CAAC;QACH,CAAC,CAAC;QACF,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,cAAc,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YACnE,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,qBAAqB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1D,CAAC;CACF"}

package/lib/live/webrtc.d.mts

@@ -1,9 +1,13 @@
-import type { ConnectClientEvent as ClientEvent, ConnectServerEvent as ServerEvent } from "../../resources/live/sideband/sideband.mjs";
+import type { ConnectClientEvent, ConnectServerEvent as ServerEvent } from "../../resources/live/sideband/sideband.mjs";
 import { WebRTCConnection } from "../webrtc/connection.mjs";
 import { DataChannel } from "../webrtc/data-channel.mjs";
 export { WebRTCError } from "../webrtc/errors.mjs";
 export type { WebRTCErrorCode, WebRTCErrorPhase } from "../webrtc/errors.mjs";
 export type { ExchangeSdp, WebRTCConnectOptions, WebRTCConnectionEvent, WebRTCConfiguration, WebRTCState, } from "../webrtc/types.mjs";
+/** Fixture playback requires a primary WebSocket or server sideband. */
+type ClientEvent = Exclude<ConnectClientEvent, {
+    type: 'session.output_audio.fixture.play';
+}>;
 /** Browser Live connection with application-owned SDP exchange and typed server-event subscriptions. */
 export declare class OpenAILiveWebRTC extends WebRTCConnection<ClientEvent, ServerEvent> {
 }

package/lib/live/webrtc.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"webrtc.d.mts","sourceRoot":"","sources":["../../src/lib/live/webrtc.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,kBAAkB,IAAI,WAAW,EACjC,kBAAkB,IAAI,WAAW,EAClC,mDAA+C;AAChD,OAAO,EAAE,gBAAgB,EAAE,iCAA6B;AACxD,OAAO,EAAE,WAAW,EAAE,mCAA+B;AAErD,OAAO,EAAE,WAAW,EAAE,6BAAyB;AAC/C,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,6BAAyB;AAC1E,YAAY,EACV,WAAW,EACX,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,EACnB,WAAW,GACZ,4BAAwB;AAEzB,wGAAwG;AACxG,qBAAa,gBAAiB,SAAQ,gBAAgB,CAAC,WAAW,EAAE,WAAW,CAAC;CAAG;AAEnF,kGAAkG;AAClG,qBAAa,eAAgB,SAAQ,WAAW,CAAC,WAAW,EAAE,WAAW,CAAC;CAAG"}
+{"version":3,"file":"webrtc.d.mts","sourceRoot":"","sources":["../../src/lib/live/webrtc.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,kBAAkB,EAClB,kBAAkB,IAAI,WAAW,EAClC,mDAA+C;AAChD,OAAO,EAAE,gBAAgB,EAAE,iCAA6B;AACxD,OAAO,EAAE,WAAW,EAAE,mCAA+B;AAErD,OAAO,EAAE,WAAW,EAAE,6BAAyB;AAC/C,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,6BAAyB;AAC1E,YAAY,EACV,WAAW,EACX,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,EACnB,WAAW,GACZ,4BAAwB;AAEzB,wEAAwE;AACxE,KAAK,WAAW,GAAG,OAAO,CAAC,kBAAkB,EAAE;IAAE,IAAI,EAAE,mCAAmC,CAAA;CAAE,CAAC,CAAC;AAE9F,wGAAwG;AACxG,qBAAa,gBAAiB,SAAQ,gBAAgB,CAAC,WAAW,EAAE,WAAW,CAAC;CAAG;AAEnF,kGAAkG;AAClG,qBAAa,eAAgB,SAAQ,WAAW,CAAC,WAAW,EAAE,WAAW,CAAC;CAAG"}

package/lib/live/webrtc.d.ts

@@ -1,9 +1,13 @@
-import type { ConnectClientEvent as ClientEvent, ConnectServerEvent as ServerEvent } from "../../resources/live/sideband/sideband.js";
+import type { ConnectClientEvent, ConnectServerEvent as ServerEvent } from "../../resources/live/sideband/sideband.js";
 import { WebRTCConnection } from "../webrtc/connection.js";
 import { DataChannel } from "../webrtc/data-channel.js";
 export { WebRTCError } from "../webrtc/errors.js";
 export type { WebRTCErrorCode, WebRTCErrorPhase } from "../webrtc/errors.js";
 export type { ExchangeSdp, WebRTCConnectOptions, WebRTCConnectionEvent, WebRTCConfiguration, WebRTCState, } from "../webrtc/types.js";
+/** Fixture playback requires a primary WebSocket or server sideband. */
+type ClientEvent = Exclude<ConnectClientEvent, {
+    type: 'session.output_audio.fixture.play';
+}>;
 /** Browser Live connection with application-owned SDP exchange and typed server-event subscriptions. */
 export declare class OpenAILiveWebRTC extends WebRTCConnection<ClientEvent, ServerEvent> {
 }

package/lib/live/webrtc.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"webrtc.d.ts","sourceRoot":"","sources":["../../src/lib/live/webrtc.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,kBAAkB,IAAI,WAAW,EACjC,kBAAkB,IAAI,WAAW,EAClC,kDAA+C;AAChD,OAAO,EAAE,gBAAgB,EAAE,gCAA6B;AACxD,OAAO,EAAE,WAAW,EAAE,kCAA+B;AAErD,OAAO,EAAE,WAAW,EAAE,4BAAyB;AAC/C,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,4BAAyB;AAC1E,YAAY,EACV,WAAW,EACX,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,EACnB,WAAW,GACZ,2BAAwB;AAEzB,wGAAwG;AACxG,qBAAa,gBAAiB,SAAQ,gBAAgB,CAAC,WAAW,EAAE,WAAW,CAAC;CAAG;AAEnF,kGAAkG;AAClG,qBAAa,eAAgB,SAAQ,WAAW,CAAC,WAAW,EAAE,WAAW,CAAC;CAAG"}
+{"version":3,"file":"webrtc.d.ts","sourceRoot":"","sources":["../../src/lib/live/webrtc.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,kBAAkB,EAClB,kBAAkB,IAAI,WAAW,EAClC,kDAA+C;AAChD,OAAO,EAAE,gBAAgB,EAAE,gCAA6B;AACxD,OAAO,EAAE,WAAW,EAAE,kCAA+B;AAErD,OAAO,EAAE,WAAW,EAAE,4BAAyB;AAC/C,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,4BAAyB;AAC1E,YAAY,EACV,WAAW,EACX,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,EACnB,WAAW,GACZ,2BAAwB;AAEzB,wEAAwE;AACxE,KAAK,WAAW,GAAG,OAAO,CAAC,kBAAkB,EAAE;IAAE,IAAI,EAAE,mCAAmC,CAAA;CAAE,CAAC,CAAC;AAE9F,wGAAwG;AACxG,qBAAa,gBAAiB,SAAQ,gBAAgB,CAAC,WAAW,EAAE,WAAW,CAAC;CAAG;AAEnF,kGAAkG;AAClG,qBAAa,eAAgB,SAAQ,WAAW,CAAC,WAAW,EAAE,WAAW,CAAC;CAAG"}

package/lib/live/webrtc.js.map

@@ -1 +1 @@
-{"version":3,"file":"webrtc.js","sourceRoot":"","sources":["../../src/lib/live/webrtc.ts"],"names":[],"mappings":";;;AAKA,wDAAwD;AACxD,4DAAqD;AAErD,8CAA+C;AAAtC,qGAAA,WAAW,OAAA;AAUpB,wGAAwG;AACxG,MAAa,gBAAiB,SAAQ,6BAA0C;CAAG;AAAnF,4CAAmF;AAEnF,kGAAkG;AAClG,MAAa,eAAgB,SAAQ,0BAAqC;CAAG;AAA7E,0CAA6E"}
+{"version":3,"file":"webrtc.js","sourceRoot":"","sources":["../../src/lib/live/webrtc.ts"],"names":[],"mappings":";;;AAKA,wDAAwD;AACxD,4DAAqD;AAErD,8CAA+C;AAAtC,qGAAA,WAAW,OAAA;AAapB,wGAAwG;AACxG,MAAa,gBAAiB,SAAQ,6BAA0C;CAAG;AAAnF,4CAAmF;AAEnF,kGAAkG;AAClG,MAAa,eAAgB,SAAQ,0BAAqC;CAAG;AAA7E,0CAA6E"}

package/lib/live/webrtc.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"webrtc.mjs","sourceRoot":"","sources":["../../src/lib/live/webrtc.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,gBAAgB,EAAE,iCAA6B;AACxD,OAAO,EAAE,WAAW,EAAE,mCAA+B;AAErD,OAAO,EAAE,WAAW,EAAE,6BAAyB;AAU/C,wGAAwG;AACxG,MAAM,OAAO,gBAAiB,SAAQ,gBAA0C;CAAG;AAEnF,kGAAkG;AAClG,MAAM,OAAO,eAAgB,SAAQ,WAAqC;CAAG"}
+{"version":3,"file":"webrtc.mjs","sourceRoot":"","sources":["../../src/lib/live/webrtc.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,gBAAgB,EAAE,iCAA6B;AACxD,OAAO,EAAE,WAAW,EAAE,mCAA+B;AAErD,OAAO,EAAE,WAAW,EAAE,6BAAyB;AAa/C,wGAAwG;AACxG,MAAM,OAAO,gBAAiB,SAAQ,gBAA0C;CAAG;AAEnF,kGAAkG;AAClG,MAAM,OAAO,eAAgB,SAAQ,WAAqC;CAAG"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@depup/openai",
-  "version": "7.34.0-depup.0",
+  "version": "7.36.0-depup.0",
   "description": "The official TypeScript library for the OpenAI API (with updated dependencies)",
   "author": "OpenAI <support@openai.com>",
   "types": "./index.d.ts",
@@ -321,8 +321,8 @@
     "changes": {},
     "depsUpdated": 0,
     "originalPackage": "openai",
-    "originalVersion": "7.34.0",
-    "processedAt": "2026-10-15T00:29:33.409Z",
+    "originalVersion": "7.36.0",
+    "processedAt": "2026-10-17T08:10:51.026Z",
     "smokeTest": "passed"
   }
 }

package/resources/admin/organization/projects/api-keys.d.mts

@@ -17,8 +17,20 @@ export declare class APIKeys extends APIResource {
      */
     retrieve(apiKeyID: string, params: APIKeyRetrieveParams, options?: RequestOptions): APIPromise<ProjectAPIKey>;
     /**
-     * Updates the expiration of an existing API key in the project, including a
-     * service-account-owned key. Requires permission to write project API keys.
+     * Updates the scopes and/or expiration of an existing API key in the project,
+     * including a service-account-owned key. Requires permission to write project API
+     * keys.
+     *
+     * Provide at least one of `scopes` or `expires_in_seconds`. Omitted fields stay
+     * unchanged; neither field accepts `null`. Both changes are saved together.
+     *
+     * `scopes` replaces the key's scope restrictions using the same scope identifiers
+     * as the dashboard. An empty array means All permissions, subject to the owner's
+     * effective access; it does not mean no access. Use `["api.all.read"]` for
+     * read-only access or specific scopes such as `["api.files.read"]` for restricted
+     * access. This does not change user or service-account roles or grant admin
+     * permissions. Scope changes follow the same authentication-cache propagation as
+     * dashboard edits.
      *
      * Provide `expires_in_seconds` to set the expiration relative to this request. The
      * value must satisfy the organization's and project's expiry policies. Expired
@@ -30,7 +42,10 @@ export declare class APIKeys extends APIResource {
      * const projectAPIKey =
      *   await client.admin.organization.projects.apiKeys.update(
      *     'api_key_id',
-     *     { project_id: 'project_id', expires_in_seconds: 1 },
+     *     {
+     *       project_id: 'project_id',
+     *       scopes: ['api.all.read'],
+     *     },
      *   );
      * ```
      */
@@ -196,9 +211,17 @@ export interface APIKeyUpdateParams {
     /**
      * Body param: Number of seconds from this request until the API key expires. Must
      * comply with the organization and project expiry policies. Expired keys cannot be
-     * updated. Retrying resets the expiry relative to the new request.
+     * updated. Retrying resets the expiry relative to the new request. Omit to keep
+     * the current expiration.
+     */
+    expires_in_seconds?: number;
+    /**
+     * Body param: Replace the API key scope restrictions. Omit to leave scopes
+     * unchanged. An empty array removes key restrictions (All permissions), subject to
+     * the owner's effective permissions. Use ["api.all.read"] for read-only access.
+     * Scopes do not change the owner's roles or grant administrative permissions.
      */
-    expires_in_seconds: number;
+    scopes?: Array<string>;
 }
 export interface APIKeyListParams extends ConversationCursorPageParams {
     /**

package/resources/admin/organization/projects/api-keys.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"api-keys.d.mts","sourceRoot":"","sources":["../../../../src/resources/admin/organization/projects/api-keys.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,sCAAkC;AACxD,OAAO,EAAE,UAAU,EAAE,yCAAqC;AAC1D,OAAO,EACL,sBAAsB,EACtB,KAAK,4BAA4B,EACjC,WAAW,EACZ,wCAAoC;AACrC,OAAO,EAAE,cAAc,EAAE,iDAA6C;AAqHtE,qBAAa,OAAQ,SAAQ,WAAW;IACtC;;;;;;;;;;;OAWG;IACH,QAAQ,CACN,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,oBAAoB,EAC5B,OAAO,CAAC,EAAE,cAAc,GACvB,UAAU,CAAC,aAAa,CAAC;IAW5B;;;;;;;;;;;;;;;;;OAiBG;IACH,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,aAAa,CAAC;IAYzG;;;;;;;;;;;;OAYG;IACH,IAAI,CACF,SAAS,EAAE,MAAM,EACjB,KAAK,CAAC,EACF,CAAC,gBAAgB,GACf,CACI;SAEI,CAAC,IACG,QAAQ,GACR,MAAM,GACN,OAAO,GACP,MAAM,GACN,SAAS,GACT,YAAY,GACZ,QAAQ,GACR,SAAS,GACT,WAAW,GACX,cAAc,GACd,QAAQ,GACR,gBAAgB,GAChB,gBAAgB,GAChB,YAAY,GACZ,iBAAiB,GACjB,kBAAkB,GAClB,eAAe,GACf,YAAY,GACZ,uBAAuB,CAC5B,CAAC,EAAE,KAAK;KACV,GACD,IAAI,GACJ,SAAS,CACZ,CAAC,GACJ,IAAI,GACJ,SAAS,EACb,OAAO,CAAC,EAAE,cAAc,GACvB,WAAW,CAAC,kBAAkB,EAAE,aAAa,CAAC;IACjD,IAAI,CACF,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE;SACP,CAAC,IAAI,SAAS,GAAG,YAAY,GAAG,SAAS,GAAG,QAAQ,GAAG,gBAAgB,GAAG,OAAO,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC;KACxG,GAAG;SAEA,CAAC,IACG,QAAQ,GACR,MAAM,GACN,MAAM,GACN,QAAQ,GACR,WAAW,GACX,cAAc,GACd,gBAAgB,GAChB,YAAY,GACZ,iBAAiB,GACjB,kBAAkB,GAClB,eAAe,GACf,YAAY,GACZ,uBAAuB,CAC5B,CAAC,EAAE,KAAK;KACV,GACA,WAAW,CAAC,kBAAkB,EAAE,aAAa,CAAC;IAoDjD;;;;;;;;;;;;;;OAcG;IACH,MAAM,CACJ,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,kBAAkB,EAC1B,OAAO,CAAC,EAAE,cAAc,GACvB,UAAU,CAAC,oBAAoB,CAAC;CAUpC;AAED,MAAM,MAAM,kBAAkB,GAAG,sBAAsB,CAAC,aAAa,CAAC,CAAC;AAEvE;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IAEX;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAE5B;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,MAAM,EAAE,8BAA8B,CAAC;IAEvC,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC;IAE3B;;OAEG;IACH,oBAAoB,EAAE,QAAQ,GAAG,UAAU,CAAC;IAE5C;;OAEG;IACH,cAAc,EAAE,MAAM,CAAC;IAEvB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,yBAAiB,aAAa,CAAC;IAC7B,UAAiB,KAAK;QACpB;;WAEG;QACH,eAAe,CAAC,EAAE,KAAK,CAAC,cAAc,CAAC;QAEvC;;WAEG;QACH,IAAI,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC;QAElC;;WAEG;QACH,IAAI,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC;KACnB;IAED,UAAiB,KAAK,CAAC;QACrB;;WAEG;QACH,UAAiB,cAAc;YAC7B;;eAEG;YACH,EAAE,EAAE,MAAM,CAAC;YAEX;;eAEG;YACH,UAAU,EAAE,MAAM,CAAC;YAEnB;;eAEG;YACH,IAAI,EAAE,MAAM,CAAC;YAEb;;eAEG;YACH,IAAI,EAAE,MAAM,CAAC;SACd;QAED;;WAEG;QACH,UAAiB,IAAI;YACnB;;eAEG;YACH,EAAE,EAAE,MAAM,CAAC;YAEX;;eAEG;YACH,UAAU,EAAE,MAAM,CAAC;YAEnB;;eAEG;YACH,KAAK,EAAE,MAAM,CAAC;YAEd;;eAEG;YACH,IAAI,EAAE,MAAM,CAAC;YAEb;;eAEG;YACH,IAAI,EAAE,MAAM,CAAC;SACd;KACF;CACF;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IAEX,OAAO,EAAE,OAAO,CAAC;IAEjB,MAAM,EAAE,sCAAsC,CAAC;CAChD;AAED,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;;;OAIG;IACH,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,gBAAiB,SAAQ,4BAA4B;IACpE;;;;;;OAMG;IACH,oBAAoB,CAAC,EAAE,QAAQ,GAAG,UAAU,GAAG,KAAK,CAAC;CACtD;AAED,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,CAAC,OAAO,WAAW,OAAO,CAAC;IAC/B,OAAO,EACL,KAAK,aAAa,IAAI,aAAa,EACnC,KAAK,oBAAoB,IAAI,oBAAoB,EACjD,KAAK,kBAAkB,IAAI,kBAAkB,EAC7C,KAAK,oBAAoB,IAAI,oBAAoB,EACjD,KAAK,kBAAkB,IAAI,kBAAkB,EAC7C,KAAK,gBAAgB,IAAI,gBAAgB,EACzC,KAAK,kBAAkB,IAAI,kBAAkB,GAC9C,CAAC;CACH"}
+{"version":3,"file":"api-keys.d.mts","sourceRoot":"","sources":["../../../../src/resources/admin/organization/projects/api-keys.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,sCAAkC;AACxD,OAAO,EAAE,UAAU,EAAE,yCAAqC;AAC1D,OAAO,EACL,sBAAsB,EACtB,KAAK,4BAA4B,EACjC,WAAW,EACZ,wCAAoC;AACrC,OAAO,EAAE,cAAc,EAAE,iDAA6C;AAqHtE,qBAAa,OAAQ,SAAQ,WAAW;IACtC;;;;;;;;;;;OAWG;IACH,QAAQ,CACN,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,oBAAoB,EAC5B,OAAO,CAAC,EAAE,cAAc,GACvB,UAAU,CAAC,aAAa,CAAC;IAW5B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAgCG;IACH,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,aAAa,CAAC;IAYzG;;;;;;;;;;;;OAYG;IACH,IAAI,CACF,SAAS,EAAE,MAAM,EACjB,KAAK,CAAC,EACF,CAAC,gBAAgB,GACf,CACI;SAEI,CAAC,IACG,QAAQ,GACR,MAAM,GACN,OAAO,GACP,MAAM,GACN,SAAS,GACT,YAAY,GACZ,QAAQ,GACR,SAAS,GACT,WAAW,GACX,cAAc,GACd,QAAQ,GACR,gBAAgB,GAChB,gBAAgB,GAChB,YAAY,GACZ,iBAAiB,GACjB,kBAAkB,GAClB,eAAe,GACf,YAAY,GACZ,uBAAuB,CAC5B,CAAC,EAAE,KAAK;KACV,GACD,IAAI,GACJ,SAAS,CACZ,CAAC,GACJ,IAAI,GACJ,SAAS,EACb,OAAO,CAAC,EAAE,cAAc,GACvB,WAAW,CAAC,kBAAkB,EAAE,aAAa,CAAC;IACjD,IAAI,CACF,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE;SACP,CAAC,IAAI,SAAS,GAAG,YAAY,GAAG,SAAS,GAAG,QAAQ,GAAG,gBAAgB,GAAG,OAAO,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC;KACxG,GAAG;SAEA,CAAC,IACG,QAAQ,GACR,MAAM,GACN,MAAM,GACN,QAAQ,GACR,WAAW,GACX,cAAc,GACd,gBAAgB,GAChB,YAAY,GACZ,iBAAiB,GACjB,kBAAkB,GAClB,eAAe,GACf,YAAY,GACZ,uBAAuB,CAC5B,CAAC,EAAE,KAAK;KACV,GACA,WAAW,CAAC,kBAAkB,EAAE,aAAa,CAAC;IAoDjD;;;;;;;;;;;;;;OAcG;IACH,MAAM,CACJ,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,kBAAkB,EAC1B,OAAO,CAAC,EAAE,cAAc,GACvB,UAAU,CAAC,oBAAoB,CAAC;CAUpC;AAED,MAAM,MAAM,kBAAkB,GAAG,sBAAsB,CAAC,aAAa,CAAC,CAAC;AAEvE;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IAEX;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAE5B;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,MAAM,EAAE,8BAA8B,CAAC;IAEvC,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC;IAE3B;;OAEG;IACH,oBAAoB,EAAE,QAAQ,GAAG,UAAU,CAAC;IAE5C;;OAEG;IACH,cAAc,EAAE,MAAM,CAAC;IAEvB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,yBAAiB,aAAa,CAAC;IAC7B,UAAiB,KAAK;QACpB;;WAEG;QACH,eAAe,CAAC,EAAE,KAAK,CAAC,cAAc,CAAC;QAEvC;;WAEG;QACH,IAAI,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC;QAElC;;WAEG;QACH,IAAI,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC;KACnB;IAED,UAAiB,KAAK,CAAC;QACrB;;WAEG;QACH,UAAiB,cAAc;YAC7B;;eAEG;YACH,EAAE,EAAE,MAAM,CAAC;YAEX;;eAEG;YACH,UAAU,EAAE,MAAM,CAAC;YAEnB;;eAEG;YACH,IAAI,EAAE,MAAM,CAAC;YAEb;;eAEG;YACH,IAAI,EAAE,MAAM,CAAC;SACd;QAED;;WAEG;QACH,UAAiB,IAAI;YACnB;;eAEG;YACH,EAAE,EAAE,MAAM,CAAC;YAEX;;eAEG;YACH,UAAU,EAAE,MAAM,CAAC;YAEnB;;eAEG;YACH,KAAK,EAAE,MAAM,CAAC;YAEd;;eAEG;YACH,IAAI,EAAE,MAAM,CAAC;YAEb;;eAEG;YACH,IAAI,EAAE,MAAM,CAAC;SACd;KACF;CACF;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IAEX,OAAO,EAAE,OAAO,CAAC;IAEjB,MAAM,EAAE,sCAAsC,CAAC;CAChD;AAED,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAE5B;;;;;OAKG;IACH,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;CACxB;AAED,MAAM,WAAW,gBAAiB,SAAQ,4BAA4B;IACpE;;;;;;OAMG;IACH,oBAAoB,CAAC,EAAE,QAAQ,GAAG,UAAU,GAAG,KAAK,CAAC;CACtD;AAED,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,CAAC,OAAO,WAAW,OAAO,CAAC;IAC/B,OAAO,EACL,KAAK,aAAa,IAAI,aAAa,EACnC,KAAK,oBAAoB,IAAI,oBAAoB,EACjD,KAAK,kBAAkB,IAAI,kBAAkB,EAC7C,KAAK,oBAAoB,IAAI,oBAAoB,EACjD,KAAK,kBAAkB,IAAI,kBAAkB,EAC7C,KAAK,gBAAgB,IAAI,gBAAgB,EACzC,KAAK,kBAAkB,IAAI,kBAAkB,GAC9C,CAAC;CACH"}

package/resources/admin/organization/projects/api-keys.d.ts

@@ -17,8 +17,20 @@ export declare class APIKeys extends APIResource {
      */
     retrieve(apiKeyID: string, params: APIKeyRetrieveParams, options?: RequestOptions): APIPromise<ProjectAPIKey>;
     /**
-     * Updates the expiration of an existing API key in the project, including a
-     * service-account-owned key. Requires permission to write project API keys.
+     * Updates the scopes and/or expiration of an existing API key in the project,
+     * including a service-account-owned key. Requires permission to write project API
+     * keys.
+     *
+     * Provide at least one of `scopes` or `expires_in_seconds`. Omitted fields stay
+     * unchanged; neither field accepts `null`. Both changes are saved together.
+     *
+     * `scopes` replaces the key's scope restrictions using the same scope identifiers
+     * as the dashboard. An empty array means All permissions, subject to the owner's
+     * effective access; it does not mean no access. Use `["api.all.read"]` for
+     * read-only access or specific scopes such as `["api.files.read"]` for restricted
+     * access. This does not change user or service-account roles or grant admin
+     * permissions. Scope changes follow the same authentication-cache propagation as
+     * dashboard edits.
      *
      * Provide `expires_in_seconds` to set the expiration relative to this request. The
      * value must satisfy the organization's and project's expiry policies. Expired
@@ -30,7 +42,10 @@ export declare class APIKeys extends APIResource {
      * const projectAPIKey =
      *   await client.admin.organization.projects.apiKeys.update(
      *     'api_key_id',
-     *     { project_id: 'project_id', expires_in_seconds: 1 },
+     *     {
+     *       project_id: 'project_id',
+     *       scopes: ['api.all.read'],
+     *     },
      *   );
      * ```
      */
@@ -196,9 +211,17 @@ export interface APIKeyUpdateParams {
     /**
      * Body param: Number of seconds from this request until the API key expires. Must
      * comply with the organization and project expiry policies. Expired keys cannot be
-     * updated. Retrying resets the expiry relative to the new request.
+     * updated. Retrying resets the expiry relative to the new request. Omit to keep
+     * the current expiration.
+     */
+    expires_in_seconds?: number;
+    /**
+     * Body param: Replace the API key scope restrictions. Omit to leave scopes
+     * unchanged. An empty array removes key restrictions (All permissions), subject to
+     * the owner's effective permissions. Use ["api.all.read"] for read-only access.
+     * Scopes do not change the owner's roles or grant administrative permissions.
      */
-    expires_in_seconds: number;
+    scopes?: Array<string>;
 }
 export interface APIKeyListParams extends ConversationCursorPageParams {
     /**

package/resources/admin/organization/projects/api-keys.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api-keys.d.ts","sourceRoot":"","sources":["../../../../src/resources/admin/organization/projects/api-keys.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,qCAAkC;AACxD,OAAO,EAAE,UAAU,EAAE,wCAAqC;AAC1D,OAAO,EACL,sBAAsB,EACtB,KAAK,4BAA4B,EACjC,WAAW,EACZ,uCAAoC;AACrC,OAAO,EAAE,cAAc,EAAE,gDAA6C;AAqHtE,qBAAa,OAAQ,SAAQ,WAAW;IACtC;;;;;;;;;;;OAWG;IACH,QAAQ,CACN,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,oBAAoB,EAC5B,OAAO,CAAC,EAAE,cAAc,GACvB,UAAU,CAAC,aAAa,CAAC;IAW5B;;;;;;;;;;;;;;;;;OAiBG;IACH,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,aAAa,CAAC;IAYzG;;;;;;;;;;;;OAYG;IACH,IAAI,CACF,SAAS,EAAE,MAAM,EACjB,KAAK,CAAC,EACF,CAAC,gBAAgB,GACf,CACI;SAEI,CAAC,IACG,QAAQ,GACR,MAAM,GACN,OAAO,GACP,MAAM,GACN,SAAS,GACT,YAAY,GACZ,QAAQ,GACR,SAAS,GACT,WAAW,GACX,cAAc,GACd,QAAQ,GACR,gBAAgB,GAChB,gBAAgB,GAChB,YAAY,GACZ,iBAAiB,GACjB,kBAAkB,GAClB,eAAe,GACf,YAAY,GACZ,uBAAuB,CAC5B,CAAC,EAAE,KAAK;KACV,GACD,IAAI,GACJ,SAAS,CACZ,CAAC,GACJ,IAAI,GACJ,SAAS,EACb,OAAO,CAAC,EAAE,cAAc,GACvB,WAAW,CAAC,kBAAkB,EAAE,aAAa,CAAC;IACjD,IAAI,CACF,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE;SACP,CAAC,IAAI,SAAS,GAAG,YAAY,GAAG,SAAS,GAAG,QAAQ,GAAG,gBAAgB,GAAG,OAAO,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC;KACxG,GAAG;SAEA,CAAC,IACG,QAAQ,GACR,MAAM,GACN,MAAM,GACN,QAAQ,GACR,WAAW,GACX,cAAc,GACd,gBAAgB,GAChB,YAAY,GACZ,iBAAiB,GACjB,kBAAkB,GAClB,eAAe,GACf,YAAY,GACZ,uBAAuB,CAC5B,CAAC,EAAE,KAAK;KACV,GACA,WAAW,CAAC,kBAAkB,EAAE,aAAa,CAAC;IAoDjD;;;;;;;;;;;;;;OAcG;IACH,MAAM,CACJ,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,kBAAkB,EAC1B,OAAO,CAAC,EAAE,cAAc,GACvB,UAAU,CAAC,oBAAoB,CAAC;CAUpC;AAED,MAAM,MAAM,kBAAkB,GAAG,sBAAsB,CAAC,aAAa,CAAC,CAAC;AAEvE;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IAEX;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAE5B;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,MAAM,EAAE,8BAA8B,CAAC;IAEvC,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC;IAE3B;;OAEG;IACH,oBAAoB,EAAE,QAAQ,GAAG,UAAU,CAAC;IAE5C;;OAEG;IACH,cAAc,EAAE,MAAM,CAAC;IAEvB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,yBAAiB,aAAa,CAAC;IAC7B,UAAiB,KAAK;QACpB;;WAEG;QACH,eAAe,CAAC,EAAE,KAAK,CAAC,cAAc,CAAC;QAEvC;;WAEG;QACH,IAAI,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC;QAElC;;WAEG;QACH,IAAI,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC;KACnB;IAED,UAAiB,KAAK,CAAC;QACrB;;WAEG;QACH,UAAiB,cAAc;YAC7B;;eAEG;YACH,EAAE,EAAE,MAAM,CAAC;YAEX;;eAEG;YACH,UAAU,EAAE,MAAM,CAAC;YAEnB;;eAEG;YACH,IAAI,EAAE,MAAM,CAAC;YAEb;;eAEG;YACH,IAAI,EAAE,MAAM,CAAC;SACd;QAED;;WAEG;QACH,UAAiB,IAAI;YACnB;;eAEG;YACH,EAAE,EAAE,MAAM,CAAC;YAEX;;eAEG;YACH,UAAU,EAAE,MAAM,CAAC;YAEnB;;eAEG;YACH,KAAK,EAAE,MAAM,CAAC;YAEd;;eAEG;YACH,IAAI,EAAE,MAAM,CAAC;YAEb;;eAEG;YACH,IAAI,EAAE,MAAM,CAAC;SACd;KACF;CACF;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IAEX,OAAO,EAAE,OAAO,CAAC;IAEjB,MAAM,EAAE,sCAAsC,CAAC;CAChD;AAED,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;;;OAIG;IACH,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,gBAAiB,SAAQ,4BAA4B;IACpE;;;;;;OAMG;IACH,oBAAoB,CAAC,EAAE,QAAQ,GAAG,UAAU,GAAG,KAAK,CAAC;CACtD;AAED,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,CAAC,OAAO,WAAW,OAAO,CAAC;IAC/B,OAAO,EACL,KAAK,aAAa,IAAI,aAAa,EACnC,KAAK,oBAAoB,IAAI,oBAAoB,EACjD,KAAK,kBAAkB,IAAI,kBAAkB,EAC7C,KAAK,oBAAoB,IAAI,oBAAoB,EACjD,KAAK,kBAAkB,IAAI,kBAAkB,EAC7C,KAAK,gBAAgB,IAAI,gBAAgB,EACzC,KAAK,kBAAkB,IAAI,kBAAkB,GAC9C,CAAC;CACH"}
+{"version":3,"file":"api-keys.d.ts","sourceRoot":"","sources":["../../../../src/resources/admin/organization/projects/api-keys.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,qCAAkC;AACxD,OAAO,EAAE,UAAU,EAAE,wCAAqC;AAC1D,OAAO,EACL,sBAAsB,EACtB,KAAK,4BAA4B,EACjC,WAAW,EACZ,uCAAoC;AACrC,OAAO,EAAE,cAAc,EAAE,gDAA6C;AAqHtE,qBAAa,OAAQ,SAAQ,WAAW;IACtC;;;;;;;;;;;OAWG;IACH,QAAQ,CACN,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,oBAAoB,EAC5B,OAAO,CAAC,EAAE,cAAc,GACvB,UAAU,CAAC,aAAa,CAAC;IAW5B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAgCG;IACH,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,aAAa,CAAC;IAYzG;;;;;;;;;;;;OAYG;IACH,IAAI,CACF,SAAS,EAAE,MAAM,EACjB,KAAK,CAAC,EACF,CAAC,gBAAgB,GACf,CACI;SAEI,CAAC,IACG,QAAQ,GACR,MAAM,GACN,OAAO,GACP,MAAM,GACN,SAAS,GACT,YAAY,GACZ,QAAQ,GACR,SAAS,GACT,WAAW,GACX,cAAc,GACd,QAAQ,GACR,gBAAgB,GAChB,gBAAgB,GAChB,YAAY,GACZ,iBAAiB,GACjB,kBAAkB,GAClB,eAAe,GACf,YAAY,GACZ,uBAAuB,CAC5B,CAAC,EAAE,KAAK;KACV,GACD,IAAI,GACJ,SAAS,CACZ,CAAC,GACJ,IAAI,GACJ,SAAS,EACb,OAAO,CAAC,EAAE,cAAc,GACvB,WAAW,CAAC,kBAAkB,EAAE,aAAa,CAAC;IACjD,IAAI,CACF,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE;SACP,CAAC,IAAI,SAAS,GAAG,YAAY,GAAG,SAAS,GAAG,QAAQ,GAAG,gBAAgB,GAAG,OAAO,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC;KACxG,GAAG;SAEA,CAAC,IACG,QAAQ,GACR,MAAM,GACN,MAAM,GACN,QAAQ,GACR,WAAW,GACX,cAAc,GACd,gBAAgB,GAChB,YAAY,GACZ,iBAAiB,GACjB,kBAAkB,GAClB,eAAe,GACf,YAAY,GACZ,uBAAuB,CAC5B,CAAC,EAAE,KAAK;KACV,GACA,WAAW,CAAC,kBAAkB,EAAE,aAAa,CAAC;IAoDjD;;;;;;;;;;;;;;OAcG;IACH,MAAM,CACJ,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,kBAAkB,EAC1B,OAAO,CAAC,EAAE,cAAc,GACvB,UAAU,CAAC,oBAAoB,CAAC;CAUpC;AAED,MAAM,MAAM,kBAAkB,GAAG,sBAAsB,CAAC,aAAa,CAAC,CAAC;AAEvE;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IAEX;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAE5B;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,MAAM,EAAE,8BAA8B,CAAC;IAEvC,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC;IAE3B;;OAEG;IACH,oBAAoB,EAAE,QAAQ,GAAG,UAAU,CAAC;IAE5C;;OAEG;IACH,cAAc,EAAE,MAAM,CAAC;IAEvB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,yBAAiB,aAAa,CAAC;IAC7B,UAAiB,KAAK;QACpB;;WAEG;QACH,eAAe,CAAC,EAAE,KAAK,CAAC,cAAc,CAAC;QAEvC;;WAEG;QACH,IAAI,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC;QAElC;;WAEG;QACH,IAAI,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC;KACnB;IAED,UAAiB,KAAK,CAAC;QACrB;;WAEG;QACH,UAAiB,cAAc;YAC7B;;eAEG;YACH,EAAE,EAAE,MAAM,CAAC;YAEX;;eAEG;YACH,UAAU,EAAE,MAAM,CAAC;YAEnB;;eAEG;YACH,IAAI,EAAE,MAAM,CAAC;YAEb;;eAEG;YACH,IAAI,EAAE,MAAM,CAAC;SACd;QAED;;WAEG;QACH,UAAiB,IAAI;YACnB;;eAEG;YACH,EAAE,EAAE,MAAM,CAAC;YAEX;;eAEG;YACH,UAAU,EAAE,MAAM,CAAC;YAEnB;;eAEG;YACH,KAAK,EAAE,MAAM,CAAC;YAEd;;eAEG;YACH,IAAI,EAAE,MAAM,CAAC;YAEb;;eAEG;YACH,IAAI,EAAE,MAAM,CAAC;SACd;KACF;CACF;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IAEX,OAAO,EAAE,OAAO,CAAC;IAEjB,MAAM,EAAE,sCAAsC,CAAC;CAChD;AAED,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAE5B;;;;;OAKG;IACH,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;CACxB;AAED,MAAM,WAAW,gBAAiB,SAAQ,4BAA4B;IACpE;;;;;;OAMG;IACH,oBAAoB,CAAC,EAAE,QAAQ,GAAG,UAAU,GAAG,KAAK,CAAC;CACtD;AAED,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,CAAC,OAAO,WAAW,OAAO,CAAC;IAC/B,OAAO,EACL,KAAK,aAAa,IAAI,aAAa,EACnC,KAAK,oBAAoB,IAAI,oBAAoB,EACjD,KAAK,kBAAkB,IAAI,kBAAkB,EAC7C,KAAK,oBAAoB,IAAI,oBAAoB,EACjD,KAAK,kBAAkB,IAAI,kBAAkB,EAC7C,KAAK,gBAAgB,IAAI,gBAAgB,EACzC,KAAK,kBAAkB,IAAI,kBAAkB,GAC9C,CAAC;CACH"}