openai 7.9.0 → 7.12.1

package/src/lib/responses/ResponseInputItems.ts

@@ -15,7 +15,8 @@ type ResponseAdditionalToolsInputItem = Extract<ResponseInputItem, { type: 'addi
 /**
  * Normalizes a mixed array of stored response history items into clean
  * `ResponseInputItem`s that can be sent back to `responses.create()`. Known items
- * that cannot be replayed without changing their meaning are omitted.
+ * that cannot be replayed without changing their meaning are omitted. SDK-only
+ * parsed values are removed without changing the stored items.
  *
  * @throws {TypeError} If an item type is not supported by the installed SDK.
  */
@@ -33,12 +34,38 @@ export function toResponseInputItems(items: Iterable<ResponseInputItemLike>): Re
 /**
  * Normalizes a stored response history item into a clean `ResponseInputItem`, or
  * returns `null` when a known item cannot be replayed without changing its
- * meaning.
+ * meaning. SDK-only parsed values are removed without changing the stored item.
  *
  * @throws {TypeError} If the item type is not supported by the installed SDK.
  */
 export function toResponseInputItem(item: ResponseInputItemLike): ResponseInputItem | null {
   switch (item.type) {
+    case 'message': {
+      if (item.role !== 'assistant' || !('id' in item) || !Array.isArray(item.content)) {
+        return stripCreatedBy(item);
+      }
+      const content = item.content.map((part) => {
+        if ((part.type === 'output_text' || part.type === 'refusal') && 'parsed' in part) {
+          const { parsed: _parsed, ...inputPart } = part;
+          return inputPart;
+        }
+        return part;
+      });
+      if (content.every((part, index) => part === item.content[index])) {
+        return stripCreatedBy(item);
+      }
+      return { ...stripCreatedBy(item), content };
+    }
+
+    case 'function_call': {
+      const inputItem = stripCreatedBy(item);
+      if (!('parsed_arguments' in inputItem)) {
+        return inputItem;
+      }
+      const { parsed_arguments: _parsedArguments, ...withoutParsedArguments } = inputItem;
+      return withoutParsedArguments;
+    }
+
     case 'additional_tools': {
       if (item.role !== 'developer') {
         return null;
@@ -84,9 +111,9 @@ export function toResponseInputItem(item: ResponseInputItemLike): ResponseInputI
     case 'compaction':
     case 'compaction_trigger':
     case 'computer_call':
+    case 'configuration_update':
     case 'custom_tool_call':
     case 'file_search_call':
-    case 'function_call':
     case 'function_call_output':
     case 'image_generation_call':
     case 'item_reference':
@@ -96,7 +123,6 @@ export function toResponseInputItem(item: ResponseInputItemLike): ResponseInputI
     case 'mcp_approval_response':
     case 'mcp_call':
     case 'mcp_list_tools':
-    case 'message':
     case 'program':
     case 'program_output':
     case 'reasoning':

package/src/lib/transform.ts

@@ -70,6 +70,7 @@ const JSON_SCHEMA_UNSUPPORTED_SCHEMA_KEYWORDS = new Set([
   'minContains',
   'minProperties',
   'not',
+  'oneOf',
   'patternProperties',
   'prefixItems',
   'propertyNames',

package/src/lib/vector-store-polling.ts

@@ -6,8 +6,8 @@ import { pollWithResponse } from './polling';
 type PollOptions = RequestOptions & { pollIntervalMs?: number };
 
 /**
- * Polls an attached file through the resource's retrieve method. Failed files are
- * returned to the caller, and cancelled files retain their existing retry behavior.
+ * Polls an attached file through the resource's retrieve method until it completes,
+ * fails, or is cancelled. Retrieval errors are propagated unchanged.
  *
  * @internal
  */
@@ -20,7 +20,7 @@ export function pollVectorStoreFile(
   return pollWithResponse(
     (headers) => resource.retrieve(fileID, { vector_store_id: vectorStoreID }, { ...options, headers }),
     ['in_progress'],
-    ['failed', 'completed'],
+    ['failed', 'cancelled', 'completed'],
     options,
   );
 }

package/src/lib/vector-store-upload.ts

@@ -8,7 +8,8 @@ type UploadOptions = RequestOptions & { pollIntervalMs?: number; maxConcurrency?
 
 /**
  * Uploads files with a shared iterator, then creates and polls the batch. Every
- * worker settles before upload failures are propagated.
+ * worker settles before upload failures are propagated. Zero concurrency is
+ * rejected before any upload or batch-creation request.
  *
  * @internal
  */
@@ -28,6 +29,9 @@ export async function uploadAndPollVectorStoreFileBatch(
 
   const configuredConcurrency = options?.maxConcurrency ?? 5;
   const concurrencyLimit = Math.min(configuredConcurrency, files.length);
+  if (concurrencyLimit === 0) {
+    throw new RangeError('maxConcurrency must be greater than 0');
+  }
   const fileIterator = files.values();
   const allFileIds = [...fileIds];
 

package/src/providers/bedrock/aws.ts

@@ -7,9 +7,9 @@ import type { BodyInit } from '../../internal/builtin-types';
 import {
   assertBedrockRequestOrigin,
   assertProviderOwnsAuthorization,
-  errorWithCause,
   normalizeOptionalString,
   parseBedrockEndpointHostname,
+  prepareBedrockAuth,
   resolveBedrockBearerAuth,
   resolveBedrockEndpoint,
 } from '../../internal/bedrock';
@@ -115,7 +115,7 @@ function requestTarget(parsedURL: URL): { path: string; query: Record<string, st
     } else if (typeof existing === 'string') {
       query[name] = [existing, value];
     } else {
-      query[name] = [...existing, value];
+      existing.push(value);
     }
   }
   return { path: parsedURL.pathname, query };
@@ -194,14 +194,14 @@ class BedrockSigV4Auth implements BedrockRequestAuth {
     }));
   }
 
-  async prepareRequest(request: FinalizedRequestInit, { url }: ProviderRequestContext): Promise<void> {
+  async prepareRequest(request: FinalizedRequestInit, context: ProviderRequestContext): Promise<void> {
     if (Object.prototype.toString.call((globalThis as any).process) !== '[object process]') {
       throw new Errors.OpenAIError(
         'Bedrock AWS credential authentication is only supported in Node.js and compatible server runtimes. Use bearer authentication in this runtime.',
       );
     }
 
-    const parsedURL = new URL(url);
+    const parsedURL = new URL(context.url);
     const canonicalEndpoint = parseBedrockEndpointHostname(parsedURL.hostname);
     if (canonicalEndpoint && canonicalEndpoint.endpoint !== this.options.endpoint) {
       throw new Errors.OpenAIError(
@@ -225,27 +225,26 @@ class BedrockSigV4Auth implements BedrockRequestAuth {
     const body = signableBody(request.body);
     const target = requestTarget(parsedURL);
 
-    let signed: { headers: Record<string, string> };
-    try {
-      signed = await this.signatureV4().sign({
-        protocol: parsedURL.protocol,
-        hostname: parsedURL.hostname,
-        ...(parsedURL.port ? { port: Number(parsedURL.port) } : {}),
-        method,
-        ...target,
-        headers: Object.fromEntries(headers.entries()),
-        ...(body === undefined ? {} : { body }),
-      });
-    } catch (cause) {
-      const message = this.options.usesDefaultChain
+    await prepareBedrockAuth(request, context, {
+      resolve: () =>
+        this.signatureV4().sign({
+          protocol: parsedURL.protocol,
+          hostname: parsedURL.hostname,
+          ...(parsedURL.port ? { port: Number(parsedURL.port) } : {}),
+          method,
+          ...target,
+          headers: Object.fromEntries(headers.entries()),
+          ...(body === undefined ? {} : { body }),
+        }),
+      failureMessage: this.options.usesDefaultChain
         ? 'Could not find credentials for Bedrock. Pass AWS credentials to `bedrock(...)` or configure the default AWS credential chain.'
-        : 'Failed to resolve AWS credentials for Bedrock. Verify your AWS profile, environment variables, or runtime identity configuration and try again.';
-      throw errorWithCause(message, cause);
-    }
-
-    request.method = method;
-    request.redirect = 'manual';
-    request.headers = new Headers(signed.headers);
+        : 'Failed to resolve AWS credentials for Bedrock. Verify your AWS profile, environment variables, or runtime identity configuration and try again.',
+      apply: (signed) => {
+        request.method = method;
+        request.redirect = 'manual';
+        request.headers = new Headers(signed.headers);
+      },
+    });
   }
 }
 

package/src/realtime/internal-base.ts

@@ -281,19 +281,17 @@ export function buildRealtimeURL(
     return url;
   }
 
-  let url: URL;
+  const url = new URL(baseURL);
   if (azure) {
-    url = new URL(baseURL);
     const basePath = url.pathname.replace(/\/+/g, '/').replace(/\/+$/, '');
     const versionedPath = basePath.endsWith('/v1') ? basePath : `${basePath}/v1`;
     url.pathname = `${versionedPath}/realtime`;
     url.search = '';
-    url.hash = '';
   } else {
-    const path = '/realtime';
-    url = new URL(baseURL + (baseURL.endsWith('/') ? path.slice(1) : path));
+    url.pathname += url.pathname.endsWith('/') ? 'realtime' : '/realtime';
   }
 
+  url.hash = '';
   url.protocol = 'wss';
   // Sideband control connections attach to an existing call via `call_id`.
   if (hasCallID) {

package/src/realtime/websocket.ts

@@ -1,3 +1,4 @@
+import { getRealtimeAPIKey, resolveRealtimeAPIKey } from '../internal/realtime-credentials';
 import type { AzureOpenAI } from '../index';
 import { assertBedrockWebSocketOrigin } from '../internal/bedrock';
 import { OpenAI } from '../index';
@@ -175,15 +176,18 @@ export class OpenAIRealtimeWebSocket extends OpenAIRealtimeEmitter {
       onURL?: (url: URL) => void;
       /** Indicates the token was resolved by the factory just before connecting. @internal */
       __resolvedApiKey?: boolean;
+      /** Credential captured by an async factory for this connection. @internal */
+      __apiKey?: string | null;
     },
     client?: Pick<OpenAI, 'apiKey' | 'baseURL'>,
   ) {
     super();
+    let apiKey = getRealtimeAPIKey(client, props.__apiKey);
     const hasProvider = typeof (client as any)?._options?.apiKey === 'function';
     const dangerouslyAllowBrowser =
       props.dangerouslyAllowBrowser ??
       (client as any)?._options?.dangerouslyAllowBrowser ??
-      (client?.apiKey?.startsWith('ek_') ? true : null);
+      (apiKey?.startsWith('ek_') ? true : null);
     if (!dangerouslyAllowBrowser && isRunningInBrowserOrBrowserWorker()) {
       throw new OpenAIError(
         "It looks like you're running in a browser-like environment.\n\nThis is disabled by default, as it risks exposing your secret API credentials to attackers.\n\nYou can avoid this error by creating an ephemeral session token:\nhttps://platform.openai.com/docs/api-reference/realtime-sessions\n",
@@ -191,6 +195,9 @@ export class OpenAIRealtimeWebSocket extends OpenAIRealtimeEmitter {
     }
 
     client ??= new OpenAI({ dangerouslyAllowBrowser });
+    if (apiKey === undefined) {
+      apiKey = client.apiKey;
+    }
 
     if (hasProvider && !props?.__resolvedApiKey) {
       throw new Error(
@@ -209,10 +216,10 @@ export class OpenAIRealtimeWebSocket extends OpenAIRealtimeEmitter {
     assertBedrockWebSocketOrigin(client, this.url);
 
     const azure = isAzure(client);
-    const protocols = ['realtime', ...(azure ? [] : [`openai-insecure-api-key.${client.apiKey}`])];
+    const protocols = ['realtime', ...(azure ? [] : [`openai-insecure-api-key.${apiKey}`])];
 
     this.socket = azure
-      ? createAzureWebSocket(this.url, client.apiKey, props.__resolvedApiKey === true, protocols)
+      ? createAzureWebSocket(this.url, apiKey, props.__resolvedApiKey === true, protocols)
       : new WebSocket(this.url.toString(), protocols);
 
     this.socket.addEventListener('message', (websocketEvent: MessageEvent) => {
@@ -269,7 +276,7 @@ export class OpenAIRealtimeWebSocket extends OpenAIRealtimeEmitter {
       dangerouslyAllowBrowser?: boolean;
     },
   ): Promise<OpenAIRealtimeWebSocket> {
-    const resolvedApiKey = await client._callApiKey();
+    const { apiKey, isProvider: resolvedApiKey } = await resolveRealtimeAPIKey(client);
     const url = buildRealtimeURL(client, props);
     assertBedrockWebSocketOrigin(client, url);
     return new OpenAIRealtimeWebSocket(
@@ -277,6 +284,7 @@ export class OpenAIRealtimeWebSocket extends OpenAIRealtimeEmitter {
         ...props,
         buildRealtimeURL: () => url,
         __resolvedApiKey: resolvedApiKey,
+        __apiKey: apiKey,
       },
       client,
     );
@@ -301,8 +309,7 @@ export class OpenAIRealtimeWebSocket extends OpenAIRealtimeEmitter {
     } = {},
   ): Promise<OpenAIRealtimeWebSocket> {
     const connection = getAzureRealtimeConnection(client, options);
-    const isApiKeyProvider = await client._callApiKey();
-    const apiKey = client.apiKey;
+    const { apiKey, isProvider: isApiKeyProvider } = await resolveRealtimeAPIKey(client);
     if (!apiKey) {
       throw new Error('Azure OpenAI Realtime requires an API key');
     }
@@ -312,6 +319,7 @@ export class OpenAIRealtimeWebSocket extends OpenAIRealtimeEmitter {
         ...connection,
         ...(dangerouslyAllowBrowser === undefined ? {} : { dangerouslyAllowBrowser }),
         __resolvedApiKey: isApiKeyProvider,
+        __apiKey: apiKey,
       },
       client,
     );

package/src/realtime/ws.ts

@@ -1,3 +1,4 @@
+import { resolveRealtimeAPIKey } from '../internal/realtime-credentials';
 import * as WS from 'ws';
 import { assertBedrockWebSocketOrigin } from '../internal/bedrock';
 import { protectWebSocketOptionsFromCredentialRedirects } from '../internal/ws';
@@ -46,11 +47,14 @@ export class OpenAIRealtimeWS extends OpenAIRealtimeEmitter {
 
       /** Indicates that a function-based credential was resolved by an async factory. @internal */
       __resolvedApiKey?: boolean;
+      /** Credential captured by an async factory for this connection. @internal */
+      __apiKey?: string | null;
     },
     client?: Pick<OpenAI, 'apiKey' | 'baseURL'>,
   ) {
     super();
     client ??= new OpenAI();
+    const apiKey = props.__apiKey === undefined ? client.apiKey : props.__apiKey;
     const hasProvider = typeof (client as any)?._options?.apiKey === 'function';
     if (hasProvider && !props.__resolvedApiKey) {
       throw new Error(
@@ -65,7 +69,7 @@ export class OpenAIRealtimeWS extends OpenAIRealtimeEmitter {
     const headers = {
       'User-Agent': `${client.constructor.name}/JS ${VERSION}`,
       ...props.options?.headers,
-      ...(isAzure(client) && !props.__resolvedApiKey ? {} : { Authorization: `Bearer ${client.apiKey}` }),
+      ...(isAzure(client) && !props.__resolvedApiKey ? {} : { Authorization: `Bearer ${apiKey}` }),
     };
 
     this.socket = new WS.WebSocket(
@@ -130,7 +134,7 @@ export class OpenAIRealtimeWS extends OpenAIRealtimeEmitter {
       options?: WS.ClientOptions | undefined;
     },
   ): Promise<OpenAIRealtimeWS> {
-    const resolvedApiKey = await client._callApiKey();
+    const { apiKey, isProvider: resolvedApiKey } = await resolveRealtimeAPIKey(client);
     const url = buildRealtimeURL(client, props);
     assertBedrockWebSocketOrigin(client, url);
     return new OpenAIRealtimeWS(
@@ -138,6 +142,7 @@ export class OpenAIRealtimeWS extends OpenAIRealtimeEmitter {
         ...props,
         buildRealtimeURL: () => url,
         __resolvedApiKey: resolvedApiKey,
+        __apiKey: apiKey,
       },
       client,
     );
@@ -162,8 +167,7 @@ export class OpenAIRealtimeWS extends OpenAIRealtimeEmitter {
     } = {},
   ): Promise<OpenAIRealtimeWS> {
     const connection = getAzureRealtimeConnection(client, props);
-    const isApiKeyProvider = await client._callApiKey();
-    const apiKey = client.apiKey;
+    const { apiKey, isProvider: isApiKeyProvider } = await resolveRealtimeAPIKey(client);
     if (!apiKey) {
       throw new Error('Azure OpenAI Realtime requires an API key');
     }
@@ -178,6 +182,7 @@ export class OpenAIRealtimeWS extends OpenAIRealtimeEmitter {
           },
         },
         __resolvedApiKey: isApiKeyProvider,
+        __apiKey: apiKey,
       },
       client,
     );

package/src/resources/admin/organization/projects/service-accounts/api-keys.ts

@@ -56,6 +56,12 @@ export interface APIKeyCreateResponse {
    * The unredacted API key value.
    */
   value: string;
+
+  /**
+   * The Unix timestamp (in seconds) when the API key expires, or null if it does not
+   * expire.
+   */
+  expires_at?: number | null;
 }
 
 export interface APIKeyCreateParams {
@@ -64,6 +70,11 @@ export interface APIKeyCreateParams {
    */
   project_id: string;
 
+  /**
+   * Body param: Number of seconds until the API key expires.
+   */
+  expires_in_seconds?: number | null;
+
   /**
    * Body param: API key name.
    */

package/src/resources/admin/organization/usage.ts

@@ -6640,7 +6640,7 @@ export interface UsageCostsParams {
 
   /**
    * Return only costs for these exact line item names. Each value must match the
-   * complete `line_item` value, for example `gpt-5.6-sol, input_tokens`.
+   * complete `line_item` value, for example `gpt-6-astra, input_tokens`.
    */
   line_items?: Array<string>;
 

package/src/resources/batches.ts

@@ -154,7 +154,7 @@ export interface Batch {
   metadata?: Shared.Metadata | null;
 
   /**
-   * Model ID used to process the batch, like `gpt-5.6-sol`. OpenAI offers a wide
+   * Model ID used to process the batch, like `gpt-6-astra`. OpenAI offers a wide
    * range of models with different capabilities, performance characteristics, and
    * price points. Refer to the
    * [model guide](https://platform.openai.com/docs/models) to browse and compare

package/src/resources/beta/beta.ts

@@ -119,6 +119,8 @@ import {
   BetaResponseComputerToolCall,
   BetaResponseComputerToolCallOutputItem,
   BetaResponseComputerToolCallOutputScreenshot,
+  BetaResponseConfigurationUpdateItem,
+  BetaResponseConfigurationUpdateItemParam,
   BetaResponseContainerReference,
   BetaResponseContent,
   BetaResponseContentPartAddedEvent,
@@ -208,6 +210,15 @@ import {
   BetaResponseShellCallOutputContentDeltaEvent,
   BetaResponseShellCallOutputContentDoneEvent,
   BetaResponseStatus,
+  BetaResponseSteerAcceptedEvent,
+  BetaResponseSteerErrorCode,
+  BetaResponseSteerEvent,
+  BetaResponseSteerFailedEvent,
+  BetaResponseSteerInput,
+  BetaResponseSteerInputContent,
+  BetaResponseSteerPendingEvent,
+  BetaResponseSteerPendingReason,
+  BetaResponseSteerRequiredInput,
   BetaResponseStreamEvent,
   BetaResponseTextConfig,
   BetaResponseTextDeltaEvent,
@@ -376,6 +387,8 @@ export declare namespace Beta {
     type BetaResponseComputerToolCall as BetaResponseComputerToolCall,
     type BetaResponseComputerToolCallOutputItem as BetaResponseComputerToolCallOutputItem,
     type BetaResponseComputerToolCallOutputScreenshot as BetaResponseComputerToolCallOutputScreenshot,
+    type BetaResponseConfigurationUpdateItem as BetaResponseConfigurationUpdateItem,
+    type BetaResponseConfigurationUpdateItemParam as BetaResponseConfigurationUpdateItemParam,
     type BetaResponseContainerReference as BetaResponseContainerReference,
     type BetaResponseContent as BetaResponseContent,
     type BetaResponseContentPartAddedEvent as BetaResponseContentPartAddedEvent,
@@ -465,6 +478,15 @@ export declare namespace Beta {
     type BetaResponseShellCallOutputContentDeltaEvent as BetaResponseShellCallOutputContentDeltaEvent,
     type BetaResponseShellCallOutputContentDoneEvent as BetaResponseShellCallOutputContentDoneEvent,
     type BetaResponseStatus as BetaResponseStatus,
+    type BetaResponseSteerAcceptedEvent as BetaResponseSteerAcceptedEvent,
+    type BetaResponseSteerErrorCode as BetaResponseSteerErrorCode,
+    type BetaResponseSteerEvent as BetaResponseSteerEvent,
+    type BetaResponseSteerFailedEvent as BetaResponseSteerFailedEvent,
+    type BetaResponseSteerInput as BetaResponseSteerInput,
+    type BetaResponseSteerInputContent as BetaResponseSteerInputContent,
+    type BetaResponseSteerPendingEvent as BetaResponseSteerPendingEvent,
+    type BetaResponseSteerPendingReason as BetaResponseSteerPendingReason,
+    type BetaResponseSteerRequiredInput as BetaResponseSteerRequiredInput,
     type BetaResponseStreamEvent as BetaResponseStreamEvent,
     type BetaResponseTextConfig as BetaResponseTextConfig,
     type BetaResponseTextDeltaEvent as BetaResponseTextDeltaEvent,

package/src/resources/beta/index.ts

@@ -65,6 +65,8 @@ export {
   type BetaResponseComputerToolCall,
   type BetaResponseComputerToolCallOutputItem,
   type BetaResponseComputerToolCallOutputScreenshot,
+  type BetaResponseConfigurationUpdateItem,
+  type BetaResponseConfigurationUpdateItemParam,
   type BetaResponseContainerReference,
   type BetaResponseContent,
   type BetaResponseContentPartAddedEvent,
@@ -154,6 +156,15 @@ export {
   type BetaResponseShellCallOutputContentDeltaEvent,
   type BetaResponseShellCallOutputContentDoneEvent,
   type BetaResponseStatus,
+  type BetaResponseSteerAcceptedEvent,
+  type BetaResponseSteerErrorCode,
+  type BetaResponseSteerEvent,
+  type BetaResponseSteerFailedEvent,
+  type BetaResponseSteerInput,
+  type BetaResponseSteerInputContent,
+  type BetaResponseSteerPendingEvent,
+  type BetaResponseSteerPendingReason,
+  type BetaResponseSteerRequiredInput,
   type BetaResponseStreamEvent,
   type BetaResponseTextConfig,
   type BetaResponseTextDeltaEvent,

package/src/resources/beta/responses/index.ts

@@ -46,6 +46,8 @@ export {
   type BetaResponseComputerToolCall,
   type BetaResponseComputerToolCallOutputItem,
   type BetaResponseComputerToolCallOutputScreenshot,
+  type BetaResponseConfigurationUpdateItem,
+  type BetaResponseConfigurationUpdateItemParam,
   type BetaResponseContainerReference,
   type BetaResponseContent,
   type BetaResponseContentPartAddedEvent,
@@ -135,6 +137,15 @@ export {
   type BetaResponseShellCallOutputContentDeltaEvent,
   type BetaResponseShellCallOutputContentDoneEvent,
   type BetaResponseStatus,
+  type BetaResponseSteerAcceptedEvent,
+  type BetaResponseSteerErrorCode,
+  type BetaResponseSteerEvent,
+  type BetaResponseSteerFailedEvent,
+  type BetaResponseSteerInput,
+  type BetaResponseSteerInputContent,
+  type BetaResponseSteerPendingEvent,
+  type BetaResponseSteerPendingReason,
+  type BetaResponseSteerRequiredInput,
   type BetaResponseStreamEvent,
   type BetaResponseTextConfig,
   type BetaResponseTextDeltaEvent,