openai 7.14.0 → 7.16.0

package/resources/beta/agents/vaults/credentials.d.ts

@@ -0,0 +1,526 @@
+import { APIResource } from "../../../../core/resource.js";
+import * as CredentialsAPI from "./credentials.js";
+import * as VaultsAPI from "./vaults.js";
+import { APIPromise } from "../../../../core/api-promise.js";
+import { CursorPage, type CursorPageParams, PagePromise } from "../../../../core/pagination.js";
+import { RequestOptions } from "../../../../internal/request-options.js";
+export declare class Credentials extends APIResource {
+    /**
+     * Creates a vault credential. Secret values are write-only and are never returned.
+     * See
+     * [vaults](https://developers.openai.com/api/docs/guides/agents-api/tools/vaults).
+     *
+     * @example
+     * ```ts
+     * const credential =
+     *   await client.beta.agents.vaults.credentials.create(
+     *     'vault_id',
+     *     {
+     *       auth: {
+     *         access_token: 'access_token',
+     *         mcp_server_url: 'mcp_server_url',
+     *         type: 'mcp_oauth',
+     *       },
+     *       name: 'x',
+     *     },
+     *   );
+     * ```
+     */
+    create(vaultID: string, body: CredentialCreateParams, options?: RequestOptions): APIPromise<Credential>;
+    /**
+     * Retrieves vault credential metadata without returning secret values. See
+     * [vaults](https://developers.openai.com/api/docs/guides/agents-api/tools/vaults).
+     *
+     * @example
+     * ```ts
+     * const credential =
+     *   await client.beta.agents.vaults.credentials.retrieve(
+     *     'credential_id',
+     *     { vault_id: 'vault_id' },
+     *   );
+     * ```
+     */
+    retrieve(credentialID: string, params: CredentialRetrieveParams, options?: RequestOptions): APIPromise<Credential>;
+    /**
+     * Rotates a vault credential's write-only secret and returns only credential
+     * metadata. See
+     * [vaults](https://developers.openai.com/api/docs/guides/agents-api/tools/vaults).
+     *
+     * @example
+     * ```ts
+     * const credential =
+     *   await client.beta.agents.vaults.credentials.update(
+     *     'credential_id',
+     *     {
+     *       vault_id: 'vault_id',
+     *       auth: { type: 'mcp_oauth' },
+     *     },
+     *   );
+     * ```
+     */
+    update(credentialID: string, params: CredentialUpdateParams, options?: RequestOptions): APIPromise<Credential>;
+    /**
+     * Lists a vault's credentials using ID-based pagination without returning secret
+     * values. See
+     * [vaults](https://developers.openai.com/api/docs/guides/agents-api/tools/vaults).
+     *
+     * @example
+     * ```ts
+     * // Automatically fetches more pages as needed.
+     * for await (const credential of client.beta.agents.vaults.credentials.list(
+     *   'vault_id',
+     * )) {
+     *   // ...
+     * }
+     * ```
+     */
+    list(vaultID: string, query?: CredentialListParams | null | undefined, options?: RequestOptions): PagePromise<CredentialsPage, Credential>;
+    /**
+     * Deletes a vault credential. See
+     * [vaults](https://developers.openai.com/api/docs/guides/agents-api/tools/vaults).
+     *
+     * @example
+     * ```ts
+     * const credentialDeleted =
+     *   await client.beta.agents.vaults.credentials.delete(
+     *     'credential_id',
+     *     { vault_id: 'vault_id' },
+     *   );
+     * ```
+     */
+    delete(credentialID: string, params: CredentialDeleteParams, options?: RequestOptions): APIPromise<CredentialDeleted>;
+}
+export type CredentialsPage = CursorPage<Credential>;
+/**
+ * Metadata for a stored MCP server credential. Secret values are never returned.
+ */
+export interface Credential {
+    /**
+     * The ID of the credential.
+     */
+    id: string;
+    /**
+     * The authentication method and non-secret configuration for the MCP server.
+     */
+    auth: CredentialAuth;
+    /**
+     * The Unix timestamp, in seconds, when the credential was created.
+     */
+    created_at: number;
+    /**
+     * The human-readable name of the credential.
+     */
+    name: string;
+    /**
+     * The object type. Always `vault.credential`.
+     */
+    object: 'vault.credential';
+    /**
+     * The Unix timestamp, in seconds, when the credential was last updated.
+     */
+    updated_at: number;
+    /**
+     * The ID of the vault containing this credential.
+     */
+    vault_id: string;
+}
+/**
+ * The MCP server and authentication configuration of a vault credential, excluding
+ * secrets.
+ */
+export type CredentialAuth = CredentialAuth.VaultCredentialAuthResourceMcpOauth | CredentialAuth.VaultCredentialAuthResourceStaticBearer;
+export declare namespace CredentialAuth {
+    /**
+     * Public metadata for an OAuth credential; tokens and client secrets are never
+     * returned.
+     */
+    interface VaultCredentialAuthResourceMcpOauth {
+        /**
+         * When the OAuth access token expires, as an RFC 3339 timestamp, if known.
+         */
+        expires_at: string | null;
+        /**
+         * The HTTPS MCP server URL authorized by this credential.
+         */
+        mcp_server_url: string;
+        /**
+         * Configuration used to refresh an MCP OAuth access token, excluding secret
+         * values.
+         */
+        refresh: VaultCredentialAuthResourceMcpOauth.Refresh | null;
+        /**
+         * The type of the object. Always `mcp_oauth`.
+         */
+        type: 'mcp_oauth';
+    }
+    namespace VaultCredentialAuthResourceMcpOauth {
+        /**
+         * Configuration used to refresh an MCP OAuth access token, excluding secret
+         * values.
+         */
+        interface Refresh {
+            /**
+             * The OAuth client ID used when requesting a new access token.
+             */
+            client_id: string;
+            /**
+             * The resource URI sent to the OAuth token endpoint during refresh, if configured.
+             */
+            resource: string | null;
+            /**
+             * Space-separated OAuth scopes requested during refresh, if configured.
+             */
+            scope: string | null;
+            /**
+             * The HTTPS OAuth token endpoint used for refresh.
+             */
+            token_endpoint: string;
+            /**
+             * How the OAuth client authenticates to the token endpoint, excluding its client
+             * secret.
+             */
+            token_endpoint_auth: CredentialsAPI.McpOauthTokenEndpointAuth;
+        }
+    }
+    /**
+     * Metadata for a bearer-token credential, without automatic OAuth refresh.
+     */
+    interface VaultCredentialAuthResourceStaticBearer {
+        /**
+         * The HTTPS MCP server URL authorized by this credential.
+         */
+        mcp_server_url: string;
+        /**
+         * The type of the object. Always `static_bearer`.
+         */
+        type: 'static_bearer';
+    }
+}
+/**
+ * Authentication credentials for an MCP server used by agent tools.
+ */
+export type CredentialAuthCreateParam = CredentialAuthCreateParam.CreateVaultCredentialAuthParamMcpOauth | CredentialAuthCreateParam.CreateVaultCredentialAuthParamStaticBearer;
+export declare namespace CredentialAuthCreateParam {
+    /**
+     * An OAuth credential for an HTTPS MCP destination.
+     */
+    interface CreateVaultCredentialAuthParamMcpOauth {
+        /**
+         * A write-only OAuth access token; never returned by credential resources.
+         */
+        access_token: string;
+        /**
+         * The HTTPS MCP server URL authorized by this credential.
+         */
+        mcp_server_url: string;
+        /**
+         * The type of the object. Always `mcp_oauth`.
+         */
+        type: 'mcp_oauth';
+        /**
+         * When the OAuth access token expires, as an RFC 3339 timestamp, if known.
+         */
+        expires_at?: string | null;
+        /**
+         * Configuration for refreshing the access token of an MCP OAuth credential.
+         */
+        refresh?: CreateVaultCredentialAuthParamMcpOauth.Refresh | null;
+    }
+    namespace CreateVaultCredentialAuthParamMcpOauth {
+        /**
+         * Configuration for refreshing the access token of an MCP OAuth credential.
+         */
+        interface Refresh {
+            /**
+             * The OAuth client ID used when requesting a new access token.
+             */
+            client_id: string;
+            /**
+             * The refresh token to store. This secret is never returned in credential
+             * resources.
+             */
+            refresh_token: string;
+            /**
+             * The HTTPS OAuth token endpoint used to exchange the refresh token for a new
+             * access token.
+             */
+            token_endpoint: string;
+            /**
+             * How the OAuth client authenticates to the token endpoint.
+             */
+            token_endpoint_auth: CredentialsAPI.McpOauthTokenEndpointAuthCreateParam;
+            /**
+             * The resource URI to send to the OAuth token endpoint during refresh, if
+             * required.
+             */
+            resource?: string | null;
+            /**
+             * Space-separated OAuth scopes to request during refresh, if required.
+             */
+            scope?: string | null;
+        }
+    }
+    /**
+     * A bearer token for an MCP server, without automatic OAuth refresh.
+     */
+    interface CreateVaultCredentialAuthParamStaticBearer {
+        /**
+         * The bearer token to store. This secret is never returned in credential
+         * resources.
+         */
+        token: string;
+        /**
+         * The HTTPS MCP server URL authorized by this credential.
+         */
+        mcp_server_url: string;
+        /**
+         * The type of the object. Always `static_bearer`.
+         */
+        type: 'static_bearer';
+    }
+}
+/**
+ * Updates to a vault credential without changing its authentication method or MCP
+ * server.
+ */
+export type CredentialAuthRotateParam = CredentialAuthRotateParam.RotateVaultCredentialAuthParamMcpOauth | CredentialAuthRotateParam.RotateVaultCredentialAuthParamStaticBearer;
+export declare namespace CredentialAuthRotateParam {
+    /**
+     * Rotate an OAuth credential for an HTTPS MCP destination.
+     */
+    interface RotateVaultCredentialAuthParamMcpOauth {
+        /**
+         * The type of the object. Always `mcp_oauth`.
+         */
+        type: 'mcp_oauth';
+        /**
+         * A write-only replacement OAuth access token.
+         */
+        access_token?: string | null;
+        /**
+         * The replacement expiry as an RFC 3339 timestamp, or `null` to clear it. Omitting
+         * this field preserves the expiry unless a new access token is supplied, in which
+         * case the expiry is cleared.
+         */
+        expires_at?: string | null;
+        /**
+         * Updates to an MCP credential's existing OAuth refresh configuration.
+         */
+        refresh?: RotateVaultCredentialAuthParamMcpOauth.Refresh | null;
+    }
+    namespace RotateVaultCredentialAuthParamMcpOauth {
+        /**
+         * Updates to an MCP credential's existing OAuth refresh configuration.
+         */
+        interface Refresh {
+            /**
+             * The replacement refresh token. Omit or pass `null` to keep the stored token.
+             * This secret is never returned in resources.
+             */
+            refresh_token?: string | null;
+            /**
+             * Replacement space-separated OAuth scopes for refresh requests. Omit to keep the
+             * scopes, or pass `null` to stop sending a scope parameter.
+             */
+            scope?: string | null;
+            /**
+             * Client-secret updates that preserve the credential's OAuth authentication
+             * method.
+             */
+            token_endpoint_auth?: CredentialsAPI.McpOauthTokenEndpointAuthRotateParam | null;
+        }
+    }
+    /**
+     * Replace the bearer token for the credential's MCP server.
+     */
+    interface RotateVaultCredentialAuthParamStaticBearer {
+        /**
+         * The replacement bearer token. This secret is never returned in credential
+         * resources.
+         */
+        token: string;
+        /**
+         * The type of the object. Always `static_bearer`.
+         */
+        type: 'static_bearer';
+    }
+}
+/**
+ * Confirmation that a vault credential was deleted.
+ */
+export interface CredentialDeleted {
+    /**
+     * The ID of the deleted credential.
+     */
+    id: string;
+    /**
+     * Whether the resource was deleted. Always `true`.
+     */
+    deleted: boolean;
+    /**
+     * The object type. Always `vault.credential.deleted`.
+     */
+    object: 'vault.credential.deleted';
+}
+/**
+ * The client authentication method used for OAuth token refresh.
+ */
+export type McpOauthTokenEndpointAuth = McpOauthTokenEndpointAuth.McpOauthTokenEndpointAuthResourceNone | McpOauthTokenEndpointAuth.McpOauthTokenEndpointAuthResourceClientSecretBasic | McpOauthTokenEndpointAuth.McpOauthTokenEndpointAuthResourceClientSecretPost;
+export declare namespace McpOauthTokenEndpointAuth {
+    /**
+     * Sends the client ID without a client secret.
+     */
+    interface McpOauthTokenEndpointAuthResourceNone {
+        /**
+         * The type of the object. Always `none`.
+         */
+        type: 'none';
+    }
+    /**
+     * Sends the client ID and secret using HTTP Basic authentication.
+     */
+    interface McpOauthTokenEndpointAuthResourceClientSecretBasic {
+        /**
+         * The type of the object. Always `client_secret_basic`.
+         */
+        type: 'client_secret_basic';
+    }
+    /**
+     * Sends the client ID and secret in the token request body.
+     */
+    interface McpOauthTokenEndpointAuthResourceClientSecretPost {
+        /**
+         * The type of the object. Always `client_secret_post`.
+         */
+        type: 'client_secret_post';
+    }
+}
+/**
+ * Client authentication credentials for OAuth token refresh.
+ */
+export type McpOauthTokenEndpointAuthCreateParam = McpOauthTokenEndpointAuthCreateParam.CreateMcpOauthTokenEndpointAuthParamNone | McpOauthTokenEndpointAuthCreateParam.CreateMcpOauthTokenEndpointAuthParamClientSecretBasic | McpOauthTokenEndpointAuthCreateParam.CreateMcpOauthTokenEndpointAuthParamClientSecretPost;
+export declare namespace McpOauthTokenEndpointAuthCreateParam {
+    /**
+     * Sends the client ID without a client secret.
+     */
+    interface CreateMcpOauthTokenEndpointAuthParamNone {
+        /**
+         * The type of the object. Always `none`.
+         */
+        type: 'none';
+    }
+    /**
+     * Sends the client ID and secret using HTTP Basic authentication.
+     */
+    interface CreateMcpOauthTokenEndpointAuthParamClientSecretBasic {
+        /**
+         * The OAuth client secret to store. Never returned in credential resources.
+         */
+        client_secret: string;
+        /**
+         * The type of the object. Always `client_secret_basic`.
+         */
+        type: 'client_secret_basic';
+    }
+    /**
+     * Sends the client ID and secret in the token request body.
+     */
+    interface CreateMcpOauthTokenEndpointAuthParamClientSecretPost {
+        /**
+         * The OAuth client secret to store. Never returned in credential resources.
+         */
+        client_secret: string;
+        /**
+         * The type of the object. Always `client_secret_post`.
+         */
+        type: 'client_secret_post';
+    }
+}
+/**
+ * Client-secret updates that preserve the credential's OAuth authentication
+ * method.
+ */
+export type McpOauthTokenEndpointAuthRotateParam = McpOauthTokenEndpointAuthRotateParam.RotateMcpOauthTokenEndpointAuthParamClientSecretBasic | McpOauthTokenEndpointAuthRotateParam.RotateMcpOauthTokenEndpointAuthParamClientSecretPost;
+export declare namespace McpOauthTokenEndpointAuthRotateParam {
+    /**
+     * Updates credentials sent using HTTP Basic authentication.
+     */
+    interface RotateMcpOauthTokenEndpointAuthParamClientSecretBasic {
+        /**
+         * The type of the object. Always `client_secret_basic`.
+         */
+        type: 'client_secret_basic';
+        /**
+         * The replacement OAuth client secret. Omit or pass `null` to keep the stored
+         * secret. This secret is never returned in resources.
+         */
+        client_secret?: string | null;
+    }
+    /**
+     * Updates credentials sent in the token request body.
+     */
+    interface RotateMcpOauthTokenEndpointAuthParamClientSecretPost {
+        /**
+         * The type of the object. Always `client_secret_post`.
+         */
+        type: 'client_secret_post';
+        /**
+         * The replacement OAuth client secret. Omit or pass `null` to keep the stored
+         * secret. This secret is never returned in resources.
+         */
+        client_secret?: string | null;
+    }
+}
+export interface CredentialCreateParams {
+    /**
+     * The authentication method and secret values to store for the MCP server.
+     */
+    auth: CredentialAuthCreateParam;
+    /**
+     * The name is trimmed before storage. It must contain 1 to 256 UTF-8 bytes after
+     * trimming.
+     */
+    name: string;
+}
+export interface CredentialRetrieveParams {
+    /**
+     * The ID of the vault.
+     */
+    vault_id: string;
+}
+export interface CredentialUpdateParams {
+    /**
+     * Path param: The ID of the vault.
+     */
+    vault_id: string;
+    /**
+     * Body param: Replacement values for the credential's existing authentication
+     * method.
+     */
+    auth: CredentialAuthRotateParam;
+}
+export interface CredentialListParams extends CursorPageParams {
+    /**
+     * Sort order by the `created_at` timestamp. Use `asc` for ascending order or
+     * `desc` for descending order. Defaults to `desc`.
+     *
+     * - `asc` - Returns resources in ascending order.
+     * - `desc` - Returns resources in descending order.
+     */
+    order?: 'asc' | 'desc';
+    /**
+     * Filter by one status or a list, such as `status=active` or
+     * `status[]=active&status[]=archived`. Both statuses are included by default.
+     */
+    status?: VaultsAPI.VaultStatusFilter;
+}
+export interface CredentialDeleteParams {
+    /**
+     * The ID of the vault.
+     */
+    vault_id: string;
+}
+export declare namespace Credentials {
+    export { type Credential as Credential, type CredentialAuth as CredentialAuth, type CredentialAuthCreateParam as CredentialAuthCreateParam, type CredentialAuthRotateParam as CredentialAuthRotateParam, type CredentialDeleted as CredentialDeleted, type McpOauthTokenEndpointAuth as McpOauthTokenEndpointAuth, type McpOauthTokenEndpointAuthCreateParam as McpOauthTokenEndpointAuthCreateParam, type McpOauthTokenEndpointAuthRotateParam as McpOauthTokenEndpointAuthRotateParam, type CredentialsPage as CredentialsPage, type CredentialCreateParams as CredentialCreateParams, type CredentialRetrieveParams as CredentialRetrieveParams, type CredentialUpdateParams as CredentialUpdateParams, type CredentialListParams as CredentialListParams, type CredentialDeleteParams as CredentialDeleteParams, };
+}
+//# sourceMappingURL=credentials.d.ts.map

package/resources/beta/agents/vaults/credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../../../src/resources/beta/agents/vaults/credentials.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,qCAAkC;AACxD,OAAO,KAAK,cAAc,yBAAsB;AAChD,OAAO,KAAK,SAAS,oBAAiB;AACtC,OAAO,EAAE,UAAU,EAAE,wCAAqC;AAC1D,OAAO,EAAE,UAAU,EAAE,KAAK,gBAAgB,EAAE,WAAW,EAAE,uCAAoC;AAE7F,OAAO,EAAE,cAAc,EAAE,gDAA6C;AAGtE,qBAAa,WAAY,SAAQ,WAAW;IAC1C;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,UAAU,CAAC;IASvG;;;;;;;;;;;;OAYG;IACH,QAAQ,CACN,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,wBAAwB,EAChC,OAAO,CAAC,EAAE,cAAc,GACvB,UAAU,CAAC,UAAU,CAAC;IASzB;;;;;;;;;;;;;;;;OAgBG;IACH,MAAM,CACJ,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,sBAAsB,EAC9B,OAAO,CAAC,EAAE,cAAc,GACvB,UAAU,CAAC,UAAU,CAAC;IAUzB;;;;;;;;;;;;;;OAcG;IACH,IAAI,CACF,OAAO,EAAE,MAAM,EACf,KAAK,GAAE,oBAAoB,GAAG,IAAI,GAAG,SAAc,EACnD,OAAO,CAAC,EAAE,cAAc,GACvB,WAAW,CAAC,eAAe,EAAE,UAAU,CAAC;IAS3C;;;;;;;;;;;;OAYG;IACH,MAAM,CACJ,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,sBAAsB,EAC9B,OAAO,CAAC,EAAE,cAAc,GACvB,UAAU,CAAC,iBAAiB,CAAC;CAQjC;AAED,MAAM,MAAM,eAAe,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;AAErD;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IAEX;;OAEG;IACH,IAAI,EAAE,cAAc,CAAC;IAErB;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,MAAM,EAAE,kBAAkB,CAAC;IAE3B;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,MAAM,cAAc,GACtB,cAAc,CAAC,mCAAmC,GAClD,cAAc,CAAC,uCAAuC,CAAC;AAE3D,yBAAiB,cAAc,CAAC;IAC9B;;;OAGG;IACH,UAAiB,mCAAmC;QAClD;;WAEG;QACH,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAE1B;;WAEG;QACH,cAAc,EAAE,MAAM,CAAC;QAEvB;;;WAGG;QACH,OAAO,EAAE,mCAAmC,CAAC,OAAO,GAAG,IAAI,CAAC;QAE5D;;WAEG;QACH,IAAI,EAAE,WAAW,CAAC;KACnB;IAED,UAAiB,mCAAmC,CAAC;QACnD;;;WAGG;QACH,UAAiB,OAAO;YACtB;;eAEG;YACH,SAAS,EAAE,MAAM,CAAC;YAElB;;eAEG;YACH,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;YAExB;;eAEG;YACH,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;YAErB;;eAEG;YACH,cAAc,EAAE,MAAM,CAAC;YAEvB;;;eAGG;YACH,mBAAmB,EAAE,cAAc,CAAC,yBAAyB,CAAC;SAC/D;KACF;IAED;;OAEG;IACH,UAAiB,uCAAuC;QACtD;;WAEG;QACH,cAAc,EAAE,MAAM,CAAC;QAEvB;;WAEG;QACH,IAAI,EAAE,eAAe,CAAC;KACvB;CACF;AAED;;GAEG;AACH,MAAM,MAAM,yBAAyB,GACjC,yBAAyB,CAAC,sCAAsC,GAChE,yBAAyB,CAAC,0CAA0C,CAAC;AAEzE,yBAAiB,yBAAyB,CAAC;IACzC;;OAEG;IACH,UAAiB,sCAAsC;QACrD;;WAEG;QACH,YAAY,EAAE,MAAM,CAAC;QAErB;;WAEG;QACH,cAAc,EAAE,MAAM,CAAC;QAEvB;;WAEG;QACH,IAAI,EAAE,WAAW,CAAC;QAElB;;WAEG;QACH,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAE3B;;WAEG;QACH,OAAO,CAAC,EAAE,sCAAsC,CAAC,OAAO,GAAG,IAAI,CAAC;KACjE;IAED,UAAiB,sCAAsC,CAAC;QACtD;;WAEG;QACH,UAAiB,OAAO;YACtB;;eAEG;YACH,SAAS,EAAE,MAAM,CAAC;YAElB;;;eAGG;YACH,aAAa,EAAE,MAAM,CAAC;YAEtB;;;eAGG;YACH,cAAc,EAAE,MAAM,CAAC;YAEvB;;eAEG;YACH,mBAAmB,EAAE,cAAc,CAAC,oCAAoC,CAAC;YAEzE;;;eAGG;YACH,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;YAEzB;;eAEG;YACH,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;SACvB;KACF;IAED;;OAEG;IACH,UAAiB,0CAA0C;QACzD;;;WAGG;QACH,KAAK,EAAE,MAAM,CAAC;QAEd;;WAEG;QACH,cAAc,EAAE,MAAM,CAAC;QAEvB;;WAEG;QACH,IAAI,EAAE,eAAe,CAAC;KACvB;CACF;AAED;;;GAGG;AACH,MAAM,MAAM,yBAAyB,GACjC,yBAAyB,CAAC,sCAAsC,GAChE,yBAAyB,CAAC,0CAA0C,CAAC;AAEzE,yBAAiB,yBAAyB,CAAC;IACzC;;OAEG;IACH,UAAiB,sCAAsC;QACrD;;WAEG;QACH,IAAI,EAAE,WAAW,CAAC;QAElB;;WAEG;QACH,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAE7B;;;;WAIG;QACH,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAE3B;;WAEG;QACH,OAAO,CAAC,EAAE,sCAAsC,CAAC,OAAO,GAAG,IAAI,CAAC;KACjE;IAED,UAAiB,sCAAsC,CAAC;QACtD;;WAEG;QACH,UAAiB,OAAO;YACtB;;;eAGG;YACH,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;YAE9B;;;eAGG;YACH,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;YAEtB;;;eAGG;YACH,mBAAmB,CAAC,EAAE,cAAc,CAAC,oCAAoC,GAAG,IAAI,CAAC;SAClF;KACF;IAED;;OAEG;IACH,UAAiB,0CAA0C;QACzD;;;WAGG;QACH,KAAK,EAAE,MAAM,CAAC;QAEd;;WAEG;QACH,IAAI,EAAE,eAAe,CAAC;KACvB;CACF;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IAEX;;OAEG;IACH,OAAO,EAAE,OAAO,CAAC;IAEjB;;OAEG;IACH,MAAM,EAAE,0BAA0B,CAAC;CACpC;AAED;;GAEG;AACH,MAAM,MAAM,yBAAyB,GACjC,yBAAyB,CAAC,qCAAqC,GAC/D,yBAAyB,CAAC,kDAAkD,GAC5E,yBAAyB,CAAC,iDAAiD,CAAC;AAEhF,yBAAiB,yBAAyB,CAAC;IACzC;;OAEG;IACH,UAAiB,qCAAqC;QACpD;;WAEG;QACH,IAAI,EAAE,MAAM,CAAC;KACd;IAED;;OAEG;IACH,UAAiB,kDAAkD;QACjE;;WAEG;QACH,IAAI,EAAE,qBAAqB,CAAC;KAC7B;IAED;;OAEG;IACH,UAAiB,iDAAiD;QAChE;;WAEG;QACH,IAAI,EAAE,oBAAoB,CAAC;KAC5B;CACF;AAED;;GAEG;AACH,MAAM,MAAM,oCAAoC,GAC5C,oCAAoC,CAAC,wCAAwC,GAC7E,oCAAoC,CAAC,qDAAqD,GAC1F,oCAAoC,CAAC,oDAAoD,CAAC;AAE9F,yBAAiB,oCAAoC,CAAC;IACpD;;OAEG;IACH,UAAiB,wCAAwC;QACvD;;WAEG;QACH,IAAI,EAAE,MAAM,CAAC;KACd;IAED;;OAEG;IACH,UAAiB,qDAAqD;QACpE;;WAEG;QACH,aAAa,EAAE,MAAM,CAAC;QAEtB;;WAEG;QACH,IAAI,EAAE,qBAAqB,CAAC;KAC7B;IAED;;OAEG;IACH,UAAiB,oDAAoD;QACnE;;WAEG;QACH,aAAa,EAAE,MAAM,CAAC;QAEtB;;WAEG;QACH,IAAI,EAAE,oBAAoB,CAAC;KAC5B;CACF;AAED;;;GAGG;AACH,MAAM,MAAM,oCAAoC,GAC5C,oCAAoC,CAAC,qDAAqD,GAC1F,oCAAoC,CAAC,oDAAoD,CAAC;AAE9F,yBAAiB,oCAAoC,CAAC;IACpD;;OAEG;IACH,UAAiB,qDAAqD;QACpE;;WAEG;QACH,IAAI,EAAE,qBAAqB,CAAC;QAE5B;;;WAGG;QACH,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC/B;IAED;;OAEG;IACH,UAAiB,oDAAoD;QACnE;;WAEG;QACH,IAAI,EAAE,oBAAoB,CAAC;QAE3B;;;WAGG;QACH,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC/B;CACF;AAED,MAAM,WAAW,sBAAsB;IACrC;;OAEG;IACH,IAAI,EAAE,yBAAyB,CAAC;IAEhC;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,wBAAwB;IACvC;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,sBAAsB;IACrC;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IAEjB;;;OAGG;IACH,IAAI,EAAE,yBAAyB,CAAC;CACjC;AAED,MAAM,WAAW,oBAAqB,SAAQ,gBAAgB;IAC5D;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IAEvB;;;OAGG;IACH,MAAM,CAAC,EAAE,SAAS,CAAC,iBAAiB,CAAC;CACtC;AAED,MAAM,WAAW,sBAAsB;IACrC;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,CAAC,OAAO,WAAW,WAAW,CAAC;IACnC,OAAO,EACL,KAAK,UAAU,IAAI,UAAU,EAC7B,KAAK,cAAc,IAAI,cAAc,EACrC,KAAK,yBAAyB,IAAI,yBAAyB,EAC3D,KAAK,yBAAyB,IAAI,yBAAyB,EAC3D,KAAK,iBAAiB,IAAI,iBAAiB,EAC3C,KAAK,yBAAyB,IAAI,yBAAyB,EAC3D,KAAK,oCAAoC,IAAI,oCAAoC,EACjF,KAAK,oCAAoC,IAAI,oCAAoC,EACjF,KAAK,eAAe,IAAI,eAAe,EACvC,KAAK,sBAAsB,IAAI,sBAAsB,EACrD,KAAK,wBAAwB,IAAI,wBAAwB,EACzD,KAAK,sBAAsB,IAAI,sBAAsB,EACrD,KAAK,oBAAoB,IAAI,oBAAoB,EACjD,KAAK,sBAAsB,IAAI,sBAAsB,GACtD,CAAC;CACH"}

package/resources/beta/agents/vaults/credentials.js

@@ -0,0 +1,132 @@
+"use strict";
+// File generated from our OpenAPI spec by Castiron. See CONTRIBUTING.md for details.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Credentials = void 0;
+const resource_1 = require("../../../../core/resource.js");
+const pagination_1 = require("../../../../core/pagination.js");
+const headers_1 = require("../../../../internal/headers.js");
+const path_1 = require("../../../../internal/utils/path.js");
+class Credentials extends resource_1.APIResource {
+    /**
+     * Creates a vault credential. Secret values are write-only and are never returned.
+     * See
+     * [vaults](https://developers.openai.com/api/docs/guides/agents-api/tools/vaults).
+     *
+     * @example
+     * ```ts
+     * const credential =
+     *   await client.beta.agents.vaults.credentials.create(
+     *     'vault_id',
+     *     {
+     *       auth: {
+     *         access_token: 'access_token',
+     *         mcp_server_url: 'mcp_server_url',
+     *         type: 'mcp_oauth',
+     *       },
+     *       name: 'x',
+     *     },
+     *   );
+     * ```
+     */
+    create(vaultID, body, options) {
+        return this._client.post((0, path_1.path) `/vaults/${vaultID}/credentials`, {
+            body,
+            ...options,
+            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'agents=v1' }, options?.headers]),
+            __security: { bearerAuth: true },
+        });
+    }
+    /**
+     * Retrieves vault credential metadata without returning secret values. See
+     * [vaults](https://developers.openai.com/api/docs/guides/agents-api/tools/vaults).
+     *
+     * @example
+     * ```ts
+     * const credential =
+     *   await client.beta.agents.vaults.credentials.retrieve(
+     *     'credential_id',
+     *     { vault_id: 'vault_id' },
+     *   );
+     * ```
+     */
+    retrieve(credentialID, params, options) {
+        const { vault_id } = params;
+        return this._client.get((0, path_1.path) `/vaults/${vault_id}/credentials/${credentialID}`, {
+            ...options,
+            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'agents=v1' }, options?.headers]),
+            __security: { bearerAuth: true },
+        });
+    }
+    /**
+     * Rotates a vault credential's write-only secret and returns only credential
+     * metadata. See
+     * [vaults](https://developers.openai.com/api/docs/guides/agents-api/tools/vaults).
+     *
+     * @example
+     * ```ts
+     * const credential =
+     *   await client.beta.agents.vaults.credentials.update(
+     *     'credential_id',
+     *     {
+     *       vault_id: 'vault_id',
+     *       auth: { type: 'mcp_oauth' },
+     *     },
+     *   );
+     * ```
+     */
+    update(credentialID, params, options) {
+        const { vault_id, ...body } = params;
+        return this._client.post((0, path_1.path) `/vaults/${vault_id}/credentials/${credentialID}`, {
+            body,
+            ...options,
+            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'agents=v1' }, options?.headers]),
+            __security: { bearerAuth: true },
+        });
+    }
+    /**
+     * Lists a vault's credentials using ID-based pagination without returning secret
+     * values. See
+     * [vaults](https://developers.openai.com/api/docs/guides/agents-api/tools/vaults).
+     *
+     * @example
+     * ```ts
+     * // Automatically fetches more pages as needed.
+     * for await (const credential of client.beta.agents.vaults.credentials.list(
+     *   'vault_id',
+     * )) {
+     *   // ...
+     * }
+     * ```
+     */
+    list(vaultID, query = {}, options) {
+        return this._client.getAPIList((0, path_1.path) `/vaults/${vaultID}/credentials`, (pagination_1.CursorPage), {
+            query,
+            ...options,
+            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'agents=v1' }, options?.headers]),
+            __security: { bearerAuth: true },
+        });
+    }
+    /**
+     * Deletes a vault credential. See
+     * [vaults](https://developers.openai.com/api/docs/guides/agents-api/tools/vaults).
+     *
+     * @example
+     * ```ts
+     * const credentialDeleted =
+     *   await client.beta.agents.vaults.credentials.delete(
+     *     'credential_id',
+     *     { vault_id: 'vault_id' },
+     *   );
+     * ```
+     */
+    delete(credentialID, params, options) {
+        const { vault_id } = params;
+        return this._client.delete((0, path_1.path) `/vaults/${vault_id}/credentials/${credentialID}`, {
+            ...options,
+            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'agents=v1' }, options?.headers]),
+            __security: { bearerAuth: true },
+        });
+    }
+}
+exports.Credentials = Credentials;
+//# sourceMappingURL=credentials.js.map

package/resources/beta/agents/vaults/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../../../src/resources/beta/agents/vaults/credentials.ts"],"names":[],"mappings":";AAAA,qFAAqF;;;AAErF,2DAAwD;AAIxD,+DAA6F;AAC7F,6DAA4D;AAE5D,6DAAuD;AAEvD,MAAa,WAAY,SAAQ,sBAAW;IAC1C;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,MAAM,CAAC,OAAe,EAAE,IAA4B,EAAE,OAAwB;QAC5E,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAA,WAAI,EAAA,WAAW,OAAO,cAAc,EAAE;YAC7D,IAAI;YACJ,GAAG,OAAO;YACV,OAAO,EAAE,IAAA,sBAAY,EAAC,CAAC,EAAE,aAAa,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YACzE,UAAU,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE;SACjC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,QAAQ,CACN,YAAoB,EACpB,MAAgC,EAChC,OAAwB;QAExB,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;QAC5B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAA,WAAI,EAAA,WAAW,QAAQ,gBAAgB,YAAY,EAAE,EAAE;YAC7E,GAAG,OAAO;YACV,OAAO,EAAE,IAAA,sBAAY,EAAC,CAAC,EAAE,aAAa,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YACzE,UAAU,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE;SACjC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,MAAM,CACJ,YAAoB,EACpB,MAA8B,EAC9B,OAAwB;QAExB,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;QACrC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAA,WAAI,EAAA,WAAW,QAAQ,gBAAgB,YAAY,EAAE,EAAE;YAC9E,IAAI;YACJ,GAAG,OAAO;YACV,OAAO,EAAE,IAAA,sBAAY,EAAC,CAAC,EAAE,aAAa,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YACzE,UAAU,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE;SACjC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,IAAI,CACF,OAAe,EACf,QAAiD,EAAE,EACnD,OAAwB;QAExB,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAA,WAAI,EAAA,WAAW,OAAO,cAAc,EAAE,CAAA,uBAAsB,CAAA,EAAE;YAC3F,KAAK;YACL,GAAG,OAAO;YACV,OAAO,EAAE,IAAA,sBAAY,EAAC,CAAC,EAAE,aAAa,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YACzE,UAAU,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE;SACjC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,MAAM,CACJ,YAAoB,EACpB,MAA8B,EAC9B,OAAwB;QAExB,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;QAC5B,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAA,WAAI,EAAA,WAAW,QAAQ,gBAAgB,YAAY,EAAE,EAAE;YAChF,GAAG,OAAO;YACV,OAAO,EAAE,IAAA,sBAAY,EAAC,CAAC,EAAE,aAAa,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YACzE,UAAU,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE;SACjC,CAAC,CAAC;IACL,CAAC;CACF;AA7ID,kCA6IC"}