openai 7.6.0 → 7.8.0

package/src/internal/utils/log.ts

@@ -82,6 +82,62 @@ export function loggerFor(client: OpenAI): Logger {
   return levelLogger;
 }
 
+const sensitiveQueryNames = new Set([
+  'apikey',
+  'accesstoken',
+  'refreshtoken',
+  'sessiontoken',
+  'sessionid',
+  'idtoken',
+  'authtoken',
+  'authorization',
+  'token',
+  'password',
+  'clientsecret',
+  'xamzsecuritytoken',
+  'xamzsignature',
+  'xamzcredential',
+]);
+
+/** Recognizes credential-bearing query names across ordinary and provider authentication. */
+export function isSensitiveQueryParameter(name: string): boolean {
+  const normalized = name.toLowerCase().replace(/[-_]/gu, '');
+  return sensitiveQueryNames.has(normalized) || sensitiveQueryNames.has(normalized.replace(/^x/u, ''));
+}
+
+const sensitiveHeaderNames = new Set([
+  'authorization',
+  'proxy-authorization',
+  'api-key',
+  'x-api-key',
+  'x-amz-security-token',
+  'cookie',
+  'set-cookie',
+  'x-session-token',
+  'x-session-id',
+  'x-auth-token',
+  'x-id-token',
+]);
+
+/** Recognizes credential-bearing request headers across provider and workload authentication. */
+export function isSensitiveHeader(name: string): boolean {
+  return sensitiveHeaderNames.has(name.toLowerCase().replace(/_/gu, '-')) || isSensitiveQueryParameter(name);
+}
+
+/** Removes credential-valued query parameters before a request URL reaches any logger. */
+export function redactURL(value: string): string {
+  const url = new URL(value);
+  url.username = '';
+  url.password = '';
+  url.hash = '';
+  for (const name of url.searchParams.keys()) {
+    if (isSensitiveQueryParameter(name)) {
+      url.searchParams.set(name, '***');
+    }
+  }
+  return url.href;
+}
+
 export const formatRequestDetails = (details: {
   options?: RequestOptions | undefined;
   headers?: Headers | Record<string, string> | undefined;
@@ -97,21 +153,30 @@ export const formatRequestDetails = (details: {
   if (details.options) {
     details.options = { ...details.options };
     delete details.options['headers']; // redundant + leaks internals
+    if (details.options.path) {
+      const path = details.options.path;
+      const redacted = new URL(redactURL(new URL(path, 'https://redacted.invalid').href));
+      details.options.path =
+        redacted.origin === 'https://redacted.invalid'
+          ? `${path.startsWith('/') ? '/' : ''}${redacted.pathname.slice(1)}${redacted.search}`
+          : redacted.href;
+    }
+    if (details.options.query) {
+      details.options.query = Object.fromEntries(
+        Object.entries(details.options.query).map(([name, value]) => [
+          name,
+          isSensitiveQueryParameter(name) ? '***' : value,
+        ]),
+      );
+    }
+  }
+  if (details.url) {
+    details.url = redactURL(details.url);
   }
   if (details.headers) {
     details.headers = Object.fromEntries(
       (details.headers instanceof Headers ? [...details.headers] : Object.entries(details.headers)).map(
-        ([name, value]) => [
-          name,
-          name.toLowerCase() === 'authorization' ||
-          name.toLowerCase() === 'api-key' ||
-          name.toLowerCase() === 'x-api-key' ||
-          name.toLowerCase() === 'x-amz-security-token' ||
-          name.toLowerCase() === 'cookie' ||
-          name.toLowerCase() === 'set-cookie'
-            ? '***'
-            : value,
-        ],
+        ([name, value]) => [name, isSensitiveHeader(name) ? '***' : value],
       ),
     );
   }

package/src/lib/EventEmitter.ts

@@ -184,11 +184,20 @@ export class EventEmitter<EventTypes extends Record<string, (...args: any) => an
         }
         return !listener.once && !listener.removed;
       }) as any;
+      let listenerThrew = false;
+      let firstListenerError: unknown;
       this.#listenerDispatchDepth += 1;
       try {
         for (const registration of listeners as any) {
           if (!registration.removed) {
-            registration.listener(...(args as any));
+            try {
+              registration.listener(...(args as any));
+            } catch (error) {
+              if (!listenerThrew) {
+                listenerThrew = true;
+                firstListenerError = error;
+              }
+            }
           }
         }
       } finally {
@@ -197,6 +206,9 @@ export class EventEmitter<EventTypes extends Record<string, (...args: any) => an
           this.#cleanupEmittedListeners();
         }
       }
+      if (listenerThrew) {
+        throw firstListenerError;
+      }
     }
   }
 

package/src/realtime/ws.ts

@@ -3,6 +3,7 @@ import { assertBedrockWebSocketOrigin } from '../internal/bedrock';
 import { protectWebSocketOptionsFromCredentialRedirects } from '../internal/ws';
 import type { AzureOpenAI } from '../index';
 import { OpenAI } from '../index';
+import { VERSION } from '../version';
 import type { RealtimeClientEvent } from '../resources/realtime/realtime';
 import {
   OpenAIRealtimeEmitter,
@@ -62,6 +63,7 @@ export class OpenAIRealtimeWS extends OpenAIRealtimeEmitter {
     this.url = buildRealtimeURL(client, props);
     assertBedrockWebSocketOrigin(client, this.url);
     const headers = {
+      'User-Agent': `${client.constructor.name}/JS ${VERSION}`,
       ...props.options?.headers,
       ...(isAzure(client) && !props.__resolvedApiKey ? {} : { Authorization: `Bearer ${client.apiKey}` }),
     };

package/src/resources/admin/organization/audit-logs.ts

@@ -130,6 +130,8 @@ export interface AuditLogListResponse {
     | 'tenant.admin_api_key.updated'
     | 'tenant.admin_api_key.deleted'
     | 'tenant.project_api_key.created'
+    | 'tenant.trusted_access.business_verification.started'
+    | 'tenant.trusted_access.application.submitted'
     | 'tenant.chatgpt_access_token.revoked'
     | 'tenant.migration.completed'
     | 'tenant.sso.migrated'
@@ -1936,6 +1938,8 @@ export interface AuditLogListParams extends ConversationCursorPageParams {
     | 'tenant.admin_api_key.updated'
     | 'tenant.admin_api_key.deleted'
     | 'tenant.project_api_key.created'
+    | 'tenant.trusted_access.business_verification.started'
+    | 'tenant.trusted_access.application.submitted'
     | 'tenant.chatgpt_access_token.revoked'
     | 'tenant.migration.completed'
     | 'tenant.sso.migrated'

package/src/resources/beta/responses/responses.ts

@@ -4064,11 +4064,6 @@ export interface BetaResponseFunctionToolCallOutputItem {
    */
   id: string;
 
-  /**
-   * The unique ID of the function tool call generated by the model.
-   */
-  call_id: string;
-
   /**
    * The output from the function call generated by your code. Can be a string or an
    * list of output content.
@@ -4091,6 +4086,11 @@ export interface BetaResponseFunctionToolCallOutputItem {
    */
   agent?: BetaResponseFunctionToolCallOutputItem.Agent | null;
 
+  /**
+   * The unique ID of the function tool call generated by the model.
+   */
+  call_id?: string;
+
   /**
    * The execution context that produced this tool call.
    */
@@ -5106,11 +5106,6 @@ export namespace BetaResponseInputItem {
    * The output of a function tool call.
    */
   export interface FunctionCallOutput {
-    /**
-     * The unique ID of the function tool call generated by the model.
-     */
-    call_id: string;
-
     /**
      * Text, image, or file output of the function tool call.
      */
@@ -5132,6 +5127,11 @@ export namespace BetaResponseInputItem {
      */
     agent?: FunctionCallOutput.Agent | null;
 
+    /**
+     * The unique ID of the function tool call generated by the model.
+     */
+    call_id?: string | null;
+
     /**
      * The execution context that produced this tool call.
      */
@@ -10525,6 +10525,11 @@ export interface BetaResponseUsage {
    * The total number of tokens used.
    */
   total_tokens: number;
+
+  /**
+   * Compute units for the request. Currently null when available.
+   */
+  compute_units?: number | null;
 }
 
 export namespace BetaResponseUsage {

package/src/resources/beta/responses/ws.ts

@@ -4,6 +4,7 @@ import * as WS from 'ws';
 import { NodeWebSocket } from '../../../internal/ws-adapter-node';
 import { ResponsesWSBase, type ResponsesWSBaseOptions } from './ws-base';
 import { OpenAI } from '../../../client';
+import { VERSION } from '../../../version';
 
 export type { ResponsesWSReconnectOptions } from './ws-base';
 
@@ -29,6 +30,8 @@ export class ResponsesWS extends ResponsesWSBase<NodeWebSocket> {
     const ws = new WS.WebSocket(url, {
       ...this._wsOptions,
       headers: {
+        'User-Agent': `${this._client.constructor.name}/JS ${VERSION}`,
+
         ...authHeaders,
         ...this._wsOptions?.headers,
       },

package/src/resources/completions.ts

@@ -140,6 +140,11 @@ export interface CompletionUsage {
    */
   completion_tokens_details?: CompletionUsage.CompletionTokensDetails;
 
+  /**
+   * Compute units for the request. Currently null when available.
+   */
+  compute_units?: number | null;
+
   /**
    * Breakdown of tokens used in the prompt.
    */

package/src/resources/responses/responses.ts

@@ -3475,11 +3475,6 @@ export interface ResponseFunctionToolCallOutputItem {
    */
   id: string;
 
-  /**
-   * The unique ID of the function tool call generated by the model.
-   */
-  call_id: string;
-
   /**
    * The output from the function call generated by your code. Can be a string or an
    * list of output content.
@@ -3497,6 +3492,11 @@ export interface ResponseFunctionToolCallOutputItem {
    */
   type: 'function_call_output';
 
+  /**
+   * The unique ID of the function tool call generated by the model.
+   */
+  call_id?: string;
+
   /**
    * The execution context that produced this tool call.
    */
@@ -4246,11 +4246,6 @@ export namespace ResponseInputItem {
    * The output of a function tool call.
    */
   export interface FunctionCallOutput {
-    /**
-     * The unique ID of the function tool call generated by the model.
-     */
-    call_id: string;
-
     /**
      * Text, image, or file output of the function tool call.
      */
@@ -4267,6 +4262,11 @@ export namespace ResponseInputItem {
      */
     id?: string | null;
 
+    /**
+     * The unique ID of the function tool call generated by the model.
+     */
+    call_id?: string | null;
+
     /**
      * The execution context that produced this tool call.
      */
@@ -7699,6 +7699,11 @@ export interface ResponseUsage {
    * The total number of tokens used.
    */
   total_tokens: number;
+
+  /**
+   * Compute units for the request. Currently null when available.
+   */
+  compute_units?: number | null;
 }
 
 export namespace ResponseUsage {

package/src/resources/responses/ws.ts

@@ -4,6 +4,7 @@ import * as WS from 'ws';
 import { NodeWebSocket } from '../../internal/ws-adapter-node';
 import { ResponsesWSBase, type ResponsesWSBaseOptions } from './ws-base';
 import { OpenAI } from '../../client';
+import { VERSION } from '../../version';
 
 export type { ResponsesWSReconnectOptions } from './ws-base';
 
@@ -29,6 +30,8 @@ export class ResponsesWS extends ResponsesWSBase<NodeWebSocket> {
     const ws = new WS.WebSocket(url, {
       ...this._wsOptions,
       headers: {
+        'User-Agent': `${this._client.constructor.name}/JS ${VERSION}`,
+
         ...authHeaders,
         ...this._wsOptions?.headers,
       },

package/src/version.ts

@@ -1,2 +1,2 @@
 /** Version of the installed OpenAI SDK package. */
-export const VERSION = '7.6.0'; // x-release-please-version
+export const VERSION = '7.8.0'; // x-release-please-version

package/version.d.mts

@@ -1,3 +1,3 @@
 /** Version of the installed OpenAI SDK package. */
-export declare const VERSION = "7.6.0";
+export declare const VERSION = "7.8.0";
 //# sourceMappingURL=version.d.mts.map

package/version.d.ts

@@ -1,3 +1,3 @@
 /** Version of the installed OpenAI SDK package. */
-export declare const VERSION = "7.6.0";
+export declare const VERSION = "7.8.0";
 //# sourceMappingURL=version.d.ts.map

package/version.js

@@ -2,5 +2,5 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.VERSION = void 0;
 /** Version of the installed OpenAI SDK package. */
-exports.VERSION = '7.6.0'; // x-release-please-version
+exports.VERSION = '7.8.0'; // x-release-please-version
 //# sourceMappingURL=version.js.map

package/version.mjs

@@ -1,3 +1,3 @@
 /** Version of the installed OpenAI SDK package. */
-export const VERSION = '7.6.0'; // x-release-please-version
+export const VERSION = '7.8.0'; // x-release-please-version
 //# sourceMappingURL=version.mjs.map