openai 7.23.0 → 7.25.0

package/src/resources/beta/agents/environments/templates.ts

@@ -414,6 +414,11 @@ export interface EnvironmentTemplate {
    * The Unix timestamp, in seconds, when the template was last updated.
    */
   updated_at: number;
+
+  /**
+   * Desktop configuration for each OpenAI-hosted environment.
+   */
+  desktop?: EnvironmentTemplate.Desktop;
 }
 
 export namespace EnvironmentTemplate {
@@ -466,7 +471,7 @@ export namespace EnvironmentTemplate {
      *
      * - `enabled` - Allows unrestricted network access.
      * - `disabled` - Disables network access.
-     * - `restricted` - Allows access only to configured domains.
+     * - `restricted` - Applies the configured domain restrictions.
      */
     access: 'enabled' | 'disabled' | 'restricted';
 
@@ -535,6 +540,16 @@ export namespace EnvironmentTemplate {
      */
     type: 'inline';
   }
+
+  /**
+   * Desktop configuration for each OpenAI-hosted environment.
+   */
+  export interface Desktop {
+    /**
+     * Whether the environment provisions a desktop and browser proxy.
+     */
+    enabled: boolean;
+  }
 }
 
 /**
@@ -564,6 +579,12 @@ export interface TemplateCreateParams {
    */
   capability_directories?: Array<string> | null;
 
+  /**
+   * Desktop provisioning. Omission or null inherits the template setting, or
+   * defaults to disabled.
+   */
+  desktop?: TemplateCreateParams.Desktop | null;
+
   /**
    * Environment variables made available to the agent.
    */
@@ -581,7 +602,7 @@ export interface TemplateCreateParams {
 
   /**
    * Network access policy for the environment. Defaults to disabled for GA requests
-   * and enabled for alpha/beta requests.
+   * and enabled for beta requests.
    */
   network?: TemplateCreateParams.Network | null;
 
@@ -608,9 +629,20 @@ export interface TemplateCreateParams {
 }
 
 export namespace TemplateCreateParams {
+  /**
+   * Desktop provisioning. Omission or null inherits the template setting, or
+   * defaults to disabled.
+   */
+  export interface Desktop {
+    /**
+     * Whether to provision the desktop and its browser proxy.
+     */
+    enabled: boolean;
+  }
+
   /**
    * Network access policy for the environment. Defaults to disabled for GA requests
-   * and enabled for alpha/beta requests.
+   * and enabled for beta requests.
    */
   export interface Network {
     /**
@@ -618,7 +650,7 @@ export namespace TemplateCreateParams {
      *
      * - `enabled` - Allows unrestricted network access.
      * - `disabled` - Disables network access.
-     * - `restricted` - Allows access only to configured domains.
+     * - `restricted` - Applies the configured domain restrictions.
      */
     access: 'enabled' | 'disabled' | 'restricted';
 
@@ -626,6 +658,13 @@ export namespace TemplateCreateParams {
      * Domains the environment may access when network access is restricted.
      */
     allowed_domains?: Array<string> | null;
+
+    /**
+     * Domains blocked for both executor and browser when access is restricted. A
+     * nonempty list requires `access: restricted` and cannot be combined with nonempty
+     * `allowed_domains`. Wildcard domains are not supported.
+     */
+    blocked_domains?: Array<string> | null;
   }
 
   /**
@@ -655,6 +694,11 @@ export interface TemplateUpdateParams {
    */
   capability_directories?: Array<string> | null;
 
+  /**
+   * Replacement desktop configuration, or null to disable the desktop.
+   */
+  desktop?: TemplateUpdateParams.Desktop | null;
+
   /**
    * Replacement confidential environment values.
    */
@@ -672,8 +716,8 @@ export interface TemplateUpdateParams {
 
   /**
    * Network access available after setup completes. Omit to preserve the current
-   * policy, or pass `null` to reset to disabled for GA requests or enabled for
-   * alpha/beta requests.
+   * policy, or pass `null` to reset to disabled for GA requests or enabled for beta
+   * requests.
    */
   network?: TemplateUpdateParams.Network | null;
 
@@ -699,10 +743,20 @@ export interface TemplateUpdateParams {
 }
 
 export namespace TemplateUpdateParams {
+  /**
+   * Replacement desktop configuration, or null to disable the desktop.
+   */
+  export interface Desktop {
+    /**
+     * Whether to provision the desktop and its browser proxy.
+     */
+    enabled: boolean;
+  }
+
   /**
    * Network access available after setup completes. Omit to preserve the current
-   * policy, or pass `null` to reset to disabled for GA requests or enabled for
-   * alpha/beta requests.
+   * policy, or pass `null` to reset to disabled for GA requests or enabled for beta
+   * requests.
    */
   export interface Network {
     /**
@@ -710,7 +764,7 @@ export namespace TemplateUpdateParams {
      *
      * - `enabled` - Allows unrestricted network access.
      * - `disabled` - Disables network access.
-     * - `restricted` - Allows access only to configured domains.
+     * - `restricted` - Applies the configured domain restrictions.
      */
     access: 'enabled' | 'disabled' | 'restricted';
 
@@ -718,6 +772,13 @@ export namespace TemplateUpdateParams {
      * Domains the environment may access when network access is restricted.
      */
     allowed_domains?: Array<string> | null;
+
+    /**
+     * Domains blocked for both executor and browser when access is restricted. A
+     * nonempty list requires `access: restricted` and cannot be combined with nonempty
+     * `allowed_domains`. Wildcard domains are not supported.
+     */
+    blocked_domains?: Array<string> | null;
   }
 
   /**

package/src/resources/beta/agents/index.ts

@@ -3,6 +3,9 @@
 export {
   Agents,
   type Agent,
+  type AgentBrowserAuthenticationCancelParam,
+  type AgentBrowserAuthenticationSubmitParam,
+  type AgentBrowserOriginAccessParam,
   type AgentCloseSubagentCallItem,
   type AgentCommandExecutionItem,
   type AgentContent,

package/src/resources/beta/agents/sessions/events.ts

@@ -31,13 +31,16 @@ export class Events extends APIResource {
    *   {
    *     events: [
    *       {
-   *         input: [
-   *           {
-   *             content: [{ text: 'text', type: 'input_text' }],
-   *             role: 'user',
-   *           },
-   *         ],
-   *         type: 'agent.session.input.message',
+   *         request_id: 'request_id',
+   *         response: {
+   *           action: 'submit',
+   *           fields: [
+   *             { field_id: 'field_id', value: 'value' },
+   *           ],
+   *           type: 'browser_authentication',
+   *         },
+   *         type:
+   *           'agent.session.input.computer_use_approval_request_result',
    *       },
    *     ],
    *   },

package/src/resources/beta/agents/sessions/sessions.ts

@@ -473,8 +473,9 @@ export namespace SessionCreateParams {
      * - `flex` - Uses the flex service tier.
      * - `priority` - Uses the priority service tier.
      * - `fast` - Uses the fast service tier.
+     * - `ultrafast` - Uses the ultrafast service tier.
      */
-    service_tier?: 'auto' | 'default' | 'flex' | 'priority' | 'fast' | null;
+    service_tier?: 'auto' | 'default' | 'flex' | 'priority' | 'fast' | 'ultrafast' | null;
 
     /**
      * Configuration for text generated by the agent.
@@ -542,8 +543,9 @@ export namespace SessionUpdateParams {
      * - `flex` - Uses the flex service tier.
      * - `priority` - Uses the priority service tier.
      * - `fast` - Uses the fast service tier.
+     * - `ultrafast` - Uses the ultrafast service tier.
      */
-    service_tier?: 'auto' | 'default' | 'flex' | 'priority' | 'fast' | null;
+    service_tier?: 'auto' | 'default' | 'flex' | 'priority' | 'fast' | 'ultrafast' | null;
   }
 
   export namespace Agent {

package/src/resources/beta/agents/vaults/credentials.ts

@@ -187,8 +187,7 @@ export class Credentials extends APIResource {
   }
 
   /**
-   * Rotates a vault credential's write-only secret and returns only credential
-   * metadata. See
+   * Updates credential metadata or rotates its write-only secret. See
    * [vaults](https://developers.openai.com/api/docs/guides/agents-api/tools/vaults).
    *
    * @example
@@ -196,10 +195,7 @@ export class Credentials extends APIResource {
    * const credential =
    *   await client.beta.agents.vaults.credentials.update(
    *     'credential_id',
-   *     {
-   *       vault_id: 'vault_id',
-   *       auth: { type: 'mcp_oauth' },
-   *     },
+   *     { vault_id: 'vault_id', metadata: {} },
    *   );
    * ```
    */
@@ -397,6 +393,11 @@ export interface Credential {
    */
   created_at: number;
 
+  /**
+   * Application-defined key-value pairs associated with this credential.
+   */
+  metadata: { [key: string]: string };
+
   /**
    * The human-readable name of the credential.
    */
@@ -1002,6 +1003,12 @@ export interface CredentialCreateParams {
    * trimming.
    */
   name: string;
+
+  /**
+   * Up to 16 string key-value pairs, with keys up to 64 and values up to 512
+   * characters. Defaults to an empty map.
+   */
+  metadata?: { [key: string]: string };
 }
 
 export interface CredentialRetrieveParams {
@@ -1021,7 +1028,14 @@ export interface CredentialUpdateParams {
    * Body param: Replacement values for the credential's existing authentication
    * method.
    */
-  auth: CredentialAuthRotateParam;
+  auth?: CredentialAuthRotateParam;
+
+  /**
+   * Body param: Replaces all metadata. Omit to preserve it, or pass {} to clear it.
+   * Up to 16 string key-value pairs, with keys up to 64 and values up to 512
+   * characters.
+   */
+  metadata?: { [key: string]: string };
 }
 
 export interface CredentialListParams extends Omit<CursorPageParams, 'limit'> {

package/src/resources/beta/beta.ts

@@ -76,6 +76,9 @@ import {
 import * as AgentsAPI from './agents/agents';
 import {
   Agent,
+  AgentBrowserAuthenticationCancelParam,
+  AgentBrowserAuthenticationSubmitParam,
+  AgentBrowserOriginAccessParam,
   AgentCloseSubagentCallItem,
   AgentCommandExecutionItem,
   AgentContent,
@@ -451,6 +454,9 @@ export declare namespace Beta {
     type TranscriptionSessionUpdatedEvent as TranscriptionSessionUpdatedEvent,
     Agents as Agents,
     type Agent as Agent,
+    type AgentBrowserAuthenticationCancelParam as AgentBrowserAuthenticationCancelParam,
+    type AgentBrowserAuthenticationSubmitParam as AgentBrowserAuthenticationSubmitParam,
+    type AgentBrowserOriginAccessParam as AgentBrowserOriginAccessParam,
     type AgentCloseSubagentCallItem as AgentCloseSubagentCallItem,
     type AgentCommandExecutionItem as AgentCommandExecutionItem,
     type AgentContent as AgentContent,

package/src/resources/beta/index.ts

@@ -3,6 +3,9 @@
 export {
   Agents,
   type Agent,
+  type AgentBrowserAuthenticationCancelParam,
+  type AgentBrowserAuthenticationSubmitParam,
+  type AgentBrowserOriginAccessParam,
   type AgentCloseSubagentCallItem,
   type AgentCommandExecutionItem,
   type AgentContent,

package/src/resources/beta/responses/responses.ts

@@ -1376,6 +1376,8 @@ export interface BetaResponse {
    */
   id: string;
 
+  access_programs: BetaResponse.AccessPrograms | null;
+
   /**
    * Unix timestamp (in seconds) of when this Response was created.
    */
@@ -1419,6 +1421,7 @@ export interface BetaResponse {
    */
   model:
     | 'gpt-6-astra'
+    | 'gpt-6.1-sol'
     | 'gpt-6-sol'
     | 'gpt-6-luna'
     | 'gpt-5.6-sol'
@@ -1799,6 +1802,13 @@ export interface BetaResponse {
 }
 
 export namespace BetaResponse {
+  export interface AccessPrograms {
+    /**
+     * The effective Cyber access program used for this response.
+     */
+    cyber: 'standard' | 'daybreak_blue' | 'daybreak_red';
+  }
+
   /**
    * Details about why the response is incomplete.
    */
@@ -9461,7 +9471,7 @@ export namespace BetaResponseOutputText {
     filename: string;
 
     /**
-     * The index of the file in the list of files.
+     * The index in the output text at which to insert the file citation.
      */
     index: number;
 
@@ -9649,7 +9659,7 @@ export namespace BetaResponseOutputTextAnnotationAddedEvent {
     filename: string;
 
     /**
-     * The index of the file in the list of files.
+     * The index in the output text at which to insert the file citation.
      */
     index: number;
 
@@ -11904,6 +11914,11 @@ export namespace BetaResponsesClientEvent {
      */
     type: 'response.create';
 
+    /**
+     * Domain-specific access programs to use for this request.
+     */
+    access_programs?: ResponseCreate.AccessPrograms;
+
     /**
      * Whether to run the model response in the background.
      * [Learn more](https://developers.openai.com/api/docs/guides/background).
@@ -12001,6 +12016,7 @@ export namespace BetaResponsesClientEvent {
      */
     model?:
       | 'gpt-6-astra'
+      | 'gpt-6.1-sol'
       | 'gpt-6-sol'
       | 'gpt-6-luna'
       | 'gpt-5.6-sol'
@@ -12354,6 +12370,25 @@ export namespace BetaResponsesClientEvent {
   }
 
   export namespace ResponseCreate {
+    /**
+     * Domain-specific access programs to use for this request.
+     */
+    export interface AccessPrograms {
+      /**
+       * The Cyber access program to use for this request. Supported values are
+       * `standard`, `daybreak_blue`, and `daybreak_red`. If omitted, the API resolves
+       * the program from the model's Cyber tier and your organization and project
+       * access, subject to model-specific eligibility restrictions. By default, models
+       * without a Cyber tier use Standard. Blue-tier models use Daybreak Blue when
+       * authorized; otherwise they fall back to Standard unless the model requires
+       * Daybreak access. Red-tier models use Daybreak Red and require authorization.
+       * Requests that require unavailable Daybreak access return 403. An implicit
+       * Standard fallback is represented by null in the response's access_programs
+       * field, rather than an explicit Standard selection.
+       */
+      cyber?: 'standard' | 'daybreak_blue' | 'daybreak_red';
+    }
+
     export interface ContextManagement {
       /**
        * The context management entry type. Currently only 'compaction' is supported.
@@ -14037,14 +14072,18 @@ export interface BetaWebSearchPreviewTool {
   search_context_size?: 'low' | 'medium' | 'high';
 
   /**
-   * The user's location.
+   * The approximate location of the user. If omitted or null, defaults to the United
+   * States. To avoid this fallback, pass `{"type": "approximate"}` without location
+   * fields. To localize results, provide the relevant location fields.
    */
   user_location?: BetaWebSearchPreviewTool.UserLocation | null;
 }
 
 export namespace BetaWebSearchPreviewTool {
   /**
-   * The user's location.
+   * The approximate location of the user. If omitted or null, defaults to the United
+   * States. To avoid this fallback, pass `{"type": "approximate"}` without location
+   * fields. To localize results, provide the relevant location fields.
    */
   export interface UserLocation {
     /**
@@ -14105,7 +14144,9 @@ export interface BetaWebSearchTool {
   search_context_size?: 'low' | 'medium' | 'high';
 
   /**
-   * The approximate location of the user.
+   * The approximate location of the user. If omitted or null, defaults to the United
+   * States. To avoid this fallback, pass `{"type": "approximate"}` without location
+   * fields. To localize results, provide the relevant location fields.
    */
   user_location?: BetaWebSearchTool.UserLocation | null;
 }
@@ -14125,7 +14166,9 @@ export namespace BetaWebSearchTool {
   }
 
   /**
-   * The approximate location of the user.
+   * The approximate location of the user. If omitted or null, defaults to the United
+   * States. To avoid this fallback, pass `{"type": "approximate"}` without location
+   * fields. To localize results, provide the relevant location fields.
    */
   export interface UserLocation {
     /**
@@ -14160,6 +14203,11 @@ export namespace BetaWebSearchTool {
 export type ResponseCreateParams = ResponseCreateParamsNonStreaming | ResponseCreateParamsStreaming;
 
 export interface ResponseCreateParamsBase {
+  /**
+   * Body param: Domain-specific access programs to use for this request.
+   */
+  access_programs?: ResponseCreateParams.AccessPrograms;
+
   /**
    * Body param: Whether to run the model response in the background.
    * [Learn more](https://developers.openai.com/api/docs/guides/background).
@@ -14258,6 +14306,7 @@ export interface ResponseCreateParamsBase {
    */
   model?:
     | 'gpt-6-astra'
+    | 'gpt-6.1-sol'
     | 'gpt-6-sol'
     | 'gpt-6-luna'
     | 'gpt-5.6-sol'
@@ -14612,6 +14661,25 @@ export interface ResponseCreateParamsBase {
 }
 
 export namespace ResponseCreateParams {
+  /**
+   * Domain-specific access programs to use for this request.
+   */
+  export interface AccessPrograms {
+    /**
+     * The Cyber access program to use for this request. Supported values are
+     * `standard`, `daybreak_blue`, and `daybreak_red`. If omitted, the API resolves
+     * the program from the model's Cyber tier and your organization and project
+     * access, subject to model-specific eligibility restrictions. By default, models
+     * without a Cyber tier use Standard. Blue-tier models use Daybreak Blue when
+     * authorized; otherwise they fall back to Standard unless the model requires
+     * Daybreak access. Red-tier models use Daybreak Red and require authorization.
+     * Requests that require unavailable Daybreak access return 403. An implicit
+     * Standard fallback is represented by null in the response's access_programs
+     * field, rather than an explicit Standard selection.
+     */
+    cyber?: 'standard' | 'daybreak_blue' | 'daybreak_red';
+  }
+
   export interface ContextManagement {
     /**
      * The context management entry type. Currently only 'compaction' is supported.
@@ -14931,6 +14999,7 @@ export interface ResponseCompactParams {
    */
   model:
     | 'gpt-6-astra'
+    | 'gpt-6.1-sol'
     | 'gpt-6-sol'
     | 'gpt-6-luna'
     | 'gpt-5.6-sol'

package/src/resources/files.ts

@@ -324,8 +324,6 @@ export class Files extends APIResource {
 
 export type FileObjectsPage = CursorPage<FileObject>;
 
-export type FileContent = string;
-
 export interface FileDeleted {
   id: string;
 
@@ -408,6 +406,8 @@ export interface FileObject {
  */
 export type FilePurpose = 'assistants' | 'batch' | 'fine-tune' | 'vision' | 'user_data' | 'evals';
 
+export type FileContent = string;
+
 export interface FileCreateParams {
   /**
    * The File object (not file name) to be uploaded.
@@ -468,10 +468,10 @@ export interface FileListParams extends CursorPageParams {
 
 export declare namespace Files {
   export {
-    type FileContent as FileContent,
     type FileDeleted as FileDeleted,
     type FileObject as FileObject,
     type FilePurpose as FilePurpose,
+    type FileContent as FileContent,
     type FileObjectsPage as FileObjectsPage,
     type FileCreateParams as FileCreateParams,
     type FileListParams as FileListParams,

package/src/resources/index.ts

@@ -62,10 +62,10 @@ export {
 } from './evals/evals';
 export {
   Files,
-  type FileContent,
   type FileDeleted,
   type FileObject,
   type FilePurpose,
+  type FileContent,
   type FileCreateParams,
   type FileListParams,
   type FileObjectsPage,

package/src/resources/live/forks/ws-base.ts

@@ -671,7 +671,7 @@ export abstract class ForksWSBase<TSocket extends WebSocketLike> extends ForksEm
     }
 
     try {
-      this._sendQueue.flush((data) => this.socket.send(flattenRawData(data)));
+      this._sendQueue.flush((data) => this.socket.send(flattenRawData(data)), { requeueFailed: false });
     } catch (err) {
       this._onError(null, 'could not send queued data', err);
     }

package/src/resources/live/sideband/ws-base.ts

@@ -681,7 +681,7 @@ export abstract class SidebandWSBase<TSocket extends WebSocketLike> extends Side
     }
 
     try {
-      this._sendQueue.flush((data) => this.socket.send(flattenRawData(data)));
+      this._sendQueue.flush((data) => this.socket.send(flattenRawData(data)), { requeueFailed: false });
     } catch (err) {
       this._onError(null, 'could not send queued data', err);
     }

package/src/resources/live/ws-base.ts

@@ -667,7 +667,7 @@ export abstract class LiveWSBase<TSocket extends WebSocketLike> extends LiveEmit
     }
 
     try {
-      this._sendQueue.flush((data) => this.socket.send(flattenRawData(data)));
+      this._sendQueue.flush((data) => this.socket.send(flattenRawData(data)), { requeueFailed: false });
     } catch (err) {
       this._onError(null, 'could not send queued data', err);
     }

package/src/resources/realtime/api.md

@@ -144,3 +144,11 @@ Methods:
 - <code title="post /realtime/calls/{call_id}/hangup">client.realtime.calls.<a href="./src/resources/realtime/calls.ts">hangup</a>(callID) -> void</code>
 - <code title="post /realtime/calls/{call_id}/refer">client.realtime.calls.<a href="./src/resources/realtime/calls.ts">refer</a>(callID, { ...params }) -> void</code>
 - <code title="post /realtime/calls/{call_id}/reject">client.realtime.calls.<a href="./src/resources/realtime/calls.ts">reject</a>(callID, { ...params }) -> void</code>
+
+## Translations
+
+### ClientSecrets
+
+Methods:
+
+- <code title="post /realtime/translations/client_secrets">client.realtime.translations.clientSecrets.<a href="./src/resources/realtime/translations/client-secrets.ts">create</a>({ ...params }) -> RealtimeTranslationClientSecretCreateResponse</code>

package/src/resources/realtime/index.ts

@@ -16,3 +16,4 @@ export {
   type ClientSecretCreateParams,
 } from './client-secrets';
 export { Realtime } from './realtime';
+export { Translations } from './translations/index';

package/src/resources/realtime/realtime.ts

@@ -16,10 +16,13 @@ import {
   RealtimeTranscriptionSessionTurnDetection,
 } from './client-secrets';
 import * as ResponsesAPI from '../responses/responses';
+import * as TranslationsAPI from './translations/translations';
+import { Translations } from './translations/translations';
 
 export class Realtime extends APIResource {
   clientSecrets: ClientSecretsAPI.ClientSecrets = new ClientSecretsAPI.ClientSecrets(this._client);
   calls: CallsAPI.Calls = new CallsAPI.Calls(this._client);
+  translations: TranslationsAPI.Translations = new TranslationsAPI.Translations(this._client);
 }
 
 export interface AudioTranscription {
@@ -5444,6 +5447,7 @@ export namespace TranscriptionSessionUpdatedEvent {
 
 Realtime.ClientSecrets = ClientSecrets;
 Realtime.Calls = Calls;
+Realtime.Translations = Translations;
 
 export declare namespace Realtime {
   export {
@@ -5584,4 +5588,6 @@ export declare namespace Realtime {
     type CallReferParams as CallReferParams,
     type CallRejectParams as CallRejectParams,
   };
+
+  export { Translations as Translations };
 }