Sync OpenAPI to May 2026 upstream and polish hand-written layer

CHANGELOG.md

@@ -6,6 +6,15 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 
 ## [Unreleased]
 
+### Added
+
+- `QctrlQaoaJobCreationPayload` and `QctrlQaoaJobInput` for submitting Q-CTRL QAOA maxcut combinatorial-optimization jobs via `create_job`. The `create_job` body union now also accepts `QctrlQaoaJobCreationPayload`.
+- `cost_model` optional field on `BaseJob`, `GetCircuitJobResponse`, and `GetJobResponse`, typed as `CostModel` (`"quantum_compute_time"` or `"execution_time"`).
+
+### Changed
+
+- `NativeCircuitInput.qubits` and `JsonMultiCircuitInput.qubits` are now `int | Unset` (previously `float | Unset`), matching upstream's tightening to `format: int32, minimum: 1`. `QisCircuitInput.qubits` already had this type locally via the OpenAPI overlay; that overlay action has been removed now that upstream is correct natively.
+
 ## [0.1.1] - 2026-04-30
 
 ### Changed

ionq_core/_transport.py

@@ -28,9 +28,11 @@
 def _raise_for_response(response: httpx.Response) -> None:
     try:
         body: dict | str | None = response.json()
-    except Exception:
+    except (ValueError, UnicodeDecodeError):
+        # json.JSONDecodeError subclasses ValueError; UnicodeDecodeError covers
+        # bodies that aren't decodable in the declared (or guessed) encoding.
         body = (response.text or "")[:500] or None
-    message = body.get("message") or body.get("error") if isinstance(body, dict) else None
+    message = (body.get("message") or body.get("error")) if isinstance(body, dict) else None
     try:
         retry_after = max(0.0, float(response.headers["retry-after"]))
     except (KeyError, ValueError):

ionq_core/ionq_client.py

@@ -34,6 +34,8 @@
 _AUTH_HEADER = "Authorization"
 
 
+# Factory named in PascalCase (deliberately, not a class) so call sites read
+# like construction. Returns the generated `AuthenticatedClient`.
 def IonQClient(
     *,
     api_key: str | None = None,
@@ -169,6 +171,12 @@ def IonQClient(
         httpx_args={"transport": sync_transport},
         **kwargs,
     )
+    # `set_async_httpx_client` bypasses `AuthenticatedClient`'s lazy auth-header
+    # injection (see generated `client.py::get_async_httpx_client`), so we merge
+    # `Authorization` in manually here. The `_verify_ssl` / `_follow_redirects`
+    # fields are private on the generated `AuthenticatedClient` but are the only
+    # way to mirror the caller's choices onto the async transport; do not add a
+    # public accessor in the hand-written layer — they belong to generated code.
     client.set_async_httpx_client(
         httpx.AsyncClient(
             base_url=base_url,