chore: sync api from Mono

.repository-projection.json

@@ -3,11 +3,11 @@
   "projection": "api",
   "projectionSchemaVersion": 1,
   "sourceRepository": "dx-corp/mono",
-  "sourceSha": "511bd2305f5a92cfbedb91208d7bc0820fda29b5",
+  "sourceSha": "4ab4845398fdca60f84eb815733b8e2361b4856d",
   "destinationRepository": "dx-corp/api",
-  "priorProjectedBase": "432a7e83b8d2367be1d8c8d65e0ee33b89dccafb",
+  "priorProjectedBase": "9b547354dfb44934b853443aa73d296901ef1d2b",
   "definitionDigest": "144b18a5c1f3e7ee6e2d1abc32f80a97adfeacd088911ec659d63622fe85d18c",
-  "toolDigest": "e9fc82741fdf4a797b076d29d51e14aced32368b",
-  "contentDigest": "f7b9283b21f4fbd1865623fee48f517eb5d2f4cb77ab5551131fd2343c7a23e8",
+  "toolDigest": "f58d71f023a4f0a27d77cb96dcc5348a40816d0b",
+  "contentDigest": "83f23b52425dd854d1716f080f280cdd7cdbc61c39a4791825db577adc46d2a0",
   "publicationEligible": true
 }

openapi/connectors/v1/connectors.openapi.yaml

@@ -874,7 +874,8 @@ paths:
       summary: CompleteOAuthFlow
       description: |-
         CompleteOAuthFlow exchanges the authorization code for access/refresh
-         tokens and registers the connection in one call.
+         tokens. Providers that authorize more than one tenant return an explicit
+         selection list; the caller completes the same state with selected_tenant_id.
       operationId: connectors.v1.ConnectorService.CompleteOAuthFlow
       parameters:
         - name: Connect-Protocol-Version
@@ -1282,6 +1283,7 @@ components:
         - AUTH_TYPE_BASIC
         - AUTH_TYPE_MTLS
         - AUTH_TYPE_GITHUB_APP
+        - AUTH_TYPE_NONE
       description: AuthType describes the authentication method for a connection.
     connectors.v1.ConnectorActionErrorKind:
       type: string
@@ -1568,8 +1570,10 @@ components:
         code:
           type: string
           title: code
-          minLength: 1
-          description: Authorization code returned by the provider on the redirect.
+          description: |-
+            Authorization code returned by the provider on the redirect. Required on
+             the first completion and empty only when selected_tenant_id completes an
+             already-custodied multi-tenant authorization.
         redirectUri:
           type: string
           title: redirect_uri
@@ -1591,6 +1595,13 @@ components:
           description: |-
             Untrusted GitHub callback coordinate; verified against the authenticated
              provider user and configured product App before connection registration.
+        selectedTenantId:
+          type: string
+          title: selected_tenant_id
+          description: |-
+            Exact provider tenant selected from a prior CompleteOAuthFlow response.
+             Leave empty on the authorization-code exchange. The server never chooses
+             an authorized tenant implicitly.
       title: CompleteOAuthFlowRequest
       additionalProperties: false
     connectors.v1.CompleteOAuthFlowResponse:
@@ -1599,6 +1610,17 @@ components:
         connection:
           title: connection
           $ref: '#/components/schemas/connectors.v1.Connection'
+        authorizedTenants:
+          type: array
+          items:
+            $ref: '#/components/schemas/connectors.v1.OAuthProviderTenant'
+          title: authorized_tenants
+          description: |-
+            Authorized provider tenants requiring explicit customer selection before
+             the connection can be registered. Empty when connection is populated.
+        tenantSelectionRequired:
+          type: boolean
+          title: tenant_selection_required
       title: CompleteOAuthFlowResponse
       additionalProperties: false
     connectors.v1.Connection:
@@ -3550,6 +3572,20 @@ components:
           $ref: '#/components/schemas/connectors.v1.UpcomingCallSourceState'
       title: ListUpcomingCallsResponse
       additionalProperties: false
+    connectors.v1.OAuthProviderTenant:
+      type: object
+      properties:
+        tenantId:
+          type: string
+          title: tenant_id
+        tenantName:
+          type: string
+          title: tenant_name
+        tenantType:
+          type: string
+          title: tenant_type
+      title: OAuthProviderTenant
+      additionalProperties: false
     connectors.v1.PreviewCustomConnectorRequest:
       type: object
       properties: