Address review: fix streaming path + improve test coverage

- Apply same encrypted_content extraction to streaming _process_streaming_events
- Fix MagicMock leak in existing reasoning tests (set encrypted_content=None)
- Assert encrypted_content on summary branch Content, not just content branch
- Add negative test for None encrypted_content case

Author: jgarrison929

python/packages/core/agent_framework/openai/_responses_client.py

@@ -2092,6 +2092,11 @@ def _parse_chunk_from_openai(
                     case "reasoning":  # ResponseOutputReasoning
                         reasoning_id = getattr(event_item, "id", None)
                         added_reasoning = False
+                        # Extract encrypted_content once so it is propagated
+                        # through whichever branch fires – mirrors the
+                        # non-streaming fix in _parse_response_from_openai.
+                        # See #4644.
+                        encrypted_content = getattr(event_item, "encrypted_content", None)
                         if hasattr(event_item, "content") and event_item.content:
                             for index, reasoning_content in enumerate(event_item.content):
                                 additional_properties: dict[str, Any] = {}
@@ -2101,6 +2106,8 @@ def _parse_chunk_from_openai(
                                     and index < len(event_item.summary)
                                 ):
                                     additional_properties["summary"] = event_item.summary[index]
+                                if encrypted_content:
+                                    additional_properties["encrypted_content"] = encrypted_content
                                 contents.append(
                                     Content.from_text_reasoning(
                                         id=reasoning_id or None,
@@ -2114,8 +2121,8 @@ def _parse_chunk_from_openai(
                             # Reasoning item with no visible text (e.g. encrypted reasoning).
                             # Always emit an empty marker so co-occurrence detection can occur.
                             additional_properties_empty: dict[str, Any] = {}
-                            if encrypted := getattr(event_item, "encrypted_content", None):
-                                additional_properties_empty["encrypted_content"] = encrypted
+                            if encrypted_content:
+                                additional_properties_empty["encrypted_content"] = encrypted_content
                             contents.append(
                                 Content.from_text_reasoning(
                                     id=reasoning_id or None,

python/packages/core/tests/openai/test_openai_responses_client.py

@@ -518,6 +518,7 @@ def test_response_content_creation_with_reasoning() -> None:
     mock_reasoning_item.type = "reasoning"
     mock_reasoning_item.content = [mock_reasoning_content]
     mock_reasoning_item.summary = [Summary(text="Summary", type="summary_text")]
+    mock_reasoning_item.encrypted_content = None
 
     mock_response.output = [mock_reasoning_item]
 
@@ -568,6 +569,11 @@ def test_response_reasoning_preserves_encrypted_content_with_summary() -> None:
     assert first_reasoning.additional_properties.get("encrypted_content") == "gAAAA_encrypted_payload"
     assert first_reasoning.additional_properties.get("summary") is not None
 
+    # The summary branch Content should also carry encrypted_content
+    assert len(reasoning_contents) >= 2
+    assert reasoning_contents[1].additional_properties is not None
+    assert reasoning_contents[1].additional_properties.get("encrypted_content") == "gAAAA_encrypted_payload"
+
 
 def test_response_reasoning_preserves_encrypted_content_summary_only() -> None:
     """encrypted_content must survive when only summary (no content) is present.
@@ -605,6 +611,40 @@ def test_response_reasoning_preserves_encrypted_content_summary_only() -> None:
     assert summary_reasoning.additional_properties.get("encrypted_content") == "gAAAA_encrypted_payload_2"
 
 
+def test_response_reasoning_no_encrypted_content() -> None:
+    """When encrypted_content is None/missing, additional_properties should not contain it."""
+    client = OpenAIResponsesClient(model_id="test-model", api_key="test-key")
+
+    mock_response = MagicMock()
+    mock_response.output_parsed = None
+    mock_response.metadata = {}
+    mock_response.usage = None
+    mock_response.id = "test-id"
+    mock_response.model = "test-model"
+    mock_response.created_at = 1000000000
+
+    mock_reasoning_content = MagicMock()
+    mock_reasoning_content.text = "Reasoning step"
+
+    mock_reasoning_item = MagicMock()
+    mock_reasoning_item.type = "reasoning"
+    mock_reasoning_item.id = "rs_no_enc"
+    mock_reasoning_item.content = [mock_reasoning_content]
+    mock_reasoning_item.summary = [Summary(text="Summary text", type="summary_text")]
+    mock_reasoning_item.encrypted_content = None
+
+    mock_response.output = [mock_reasoning_item]
+
+    response = client._parse_response_from_openai(mock_response, options={})  # type: ignore
+
+    reasoning_contents = [c for c in response.messages[0].contents if c.type == "text_reasoning"]
+    assert len(reasoning_contents) >= 1
+    for rc in reasoning_contents:
+        # additional_properties should either be None or not contain encrypted_content
+        if rc.additional_properties is not None:
+            assert "encrypted_content" not in rc.additional_properties
+
+
 def test_response_content_keeps_reasoning_and_function_calls_in_one_message() -> None:
     """Reasoning + function calls should parse into one assistant message."""
     client = OpenAIResponsesClient(model_id="test-model", api_key="test-key")
@@ -625,6 +665,7 @@ def test_response_content_keeps_reasoning_and_function_calls_in_one_message() ->
     mock_reasoning_item.id = "rs_123"
     mock_reasoning_item.content = [mock_reasoning_content]
     mock_reasoning_item.summary = []
+    mock_reasoning_item.encrypted_content = None
 
     mock_function_call_item_1 = MagicMock()
     mock_function_call_item_1.type = "function_call"