chore: sync api from Mono

.repository-projection.json

@@ -3,11 +3,11 @@
   "projection": "api",
   "projectionSchemaVersion": 1,
   "sourceRepository": "dx-corp/mono",
-  "sourceSha": "4ab4845398fdca60f84eb815733b8e2361b4856d",
+  "sourceSha": "2df44a8283c07c0ba875174e70d2aaabb72d19cc",
   "destinationRepository": "dx-corp/api",
-  "priorProjectedBase": "9b547354dfb44934b853443aa73d296901ef1d2b",
+  "priorProjectedBase": "a9de5e284484ba056c0dd4e7b8c0cb656c515c7b",
   "definitionDigest": "144b18a5c1f3e7ee6e2d1abc32f80a97adfeacd088911ec659d63622fe85d18c",
   "toolDigest": "f58d71f023a4f0a27d77cb96dcc5348a40816d0b",
-  "contentDigest": "83f23b52425dd854d1716f080f280cdd7cdbc61c39a4791825db577adc46d2a0",
+  "contentDigest": "7e71829fc001f6d1c06a7b08eaf331eb3a27ca489aead2bb4e6058e6c1444ce1",
   "publicationEligible": true
 }

openapi/connectors/v1/connectors.openapi.yaml

@@ -3611,7 +3611,6 @@ components:
         document:
           type: string
           title: document
-          minLength: 1
         sourceUri:
           type: string
           title: source_uri
@@ -3628,8 +3627,22 @@ components:
         descriptionsReviewed:
           type: boolean
           title: descriptions_reviewed
+        expectedSpecSha256:
+          type: string
+          title: expected_spec_sha256
+          pattern: ^(|[0-9a-f]{64})$
+          description: |-
+            expected_spec_sha256 binds a create request to the exact remote bytes
+             returned by preview. It is optional for preview and inline definitions,
+             and required by the Connectors owner when create fetches source_uri.
       title: PreviewCustomConnectorRequest
       additionalProperties: false
+      description: |+
+        document or source_uri is required:
+        ```
+        size(this.document) > 0 || size(this.source_uri) > 0
+        ```
+
     connectors.v1.PreviewCustomConnectorResponse:
       type: object
       properties:

openapi/console/v1/console.openapi.yaml

@@ -4680,6 +4680,42 @@ paths:
             application/json:
               schema:
                 $ref: '#/components/schemas/console.v1.EngageStaffProductIssueReportResponse'
+  /console.v1.ConsoleService/ListStaffProductIssueRecoveries:
+    post:
+      tags:
+        - console.v1.ConsoleService
+      summary: ListStaffProductIssueRecoveries
+      description: Lists the global recovery queue under verified staff authority.
+      operationId: console.v1.ConsoleService.ListStaffProductIssueRecoveries
+      parameters:
+        - name: Connect-Protocol-Version
+          in: header
+          required: true
+          schema:
+            $ref: '#/components/schemas/connect-protocol-version'
+        - name: Connect-Timeout-Ms
+          in: header
+          schema:
+            $ref: '#/components/schemas/connect-timeout-header'
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/console.v1.ListStaffProductIssueRecoveriesRequest'
+        required: true
+      responses:
+        default:
+          description: Error
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/connect.error'
+        "200":
+          description: Success
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/console.v1.ListStaffProductIssueRecoveriesResponse'
   /console.v1.ConsoleService/PrepareStaffProductIssueRecovery:
     post:
       tags:
@@ -22114,6 +22150,39 @@ components:
           $ref: '#/components/schemas/meter.v1.ListManagedInferenceAdminEventsRequest'
       title: ListStaffManagedInferenceAdminEventsRequest
       additionalProperties: false
+    console.v1.ListStaffProductIssueRecoveriesRequest:
+      type: object
+      properties:
+        state:
+          type: string
+          title: state
+          maxLength: 32
+          description: Empty means all states; otherwise one existing recovery state.
+        pageSize:
+          type: integer
+          title: page_size
+          maximum: 100
+          description: Zero defaults to 25; at most 100 rows.
+        pageToken:
+          type: string
+          title: page_token
+          maxLength: 4096
+      title: ListStaffProductIssueRecoveriesRequest
+      additionalProperties: false
+      description: Global staff queue. Tenant scope is returned explicitly on each row.
+    console.v1.ListStaffProductIssueRecoveriesResponse:
+      type: object
+      properties:
+        recoveries:
+          type: array
+          items:
+            $ref: '#/components/schemas/console.v1.StaffProductIssueRecoverySummary'
+          title: recoveries
+        nextPageToken:
+          type: string
+          title: next_page_token
+      title: ListStaffProductIssueRecoveriesResponse
+      additionalProperties: false
     console.v1.ListStaffProductIssueReportsRequest:
       type: object
       properties:
@@ -27897,6 +27966,38 @@ components:
       description: |-
         StaffInferenceRoutingProfile is the durable Dex inference override for the
          single server-configured STAFF organization.
+    console.v1.StaffProductIssueRecoverySummary:
+      type: object
+      properties:
+        organizationId:
+          type: string
+          title: organization_id
+        workspaceId:
+          type: string
+          title: workspace_id
+        recoveryId:
+          type: string
+          title: recovery_id
+        reportReference:
+          type: string
+          title: report_reference
+        recipientPrincipalId:
+          type: string
+          title: recipient_principal_id
+        customerSummary:
+          type: string
+          title: customer_summary
+        state:
+          type: string
+          title: state
+        createdAt:
+          title: created_at
+          $ref: '#/components/schemas/google.protobuf.Timestamp'
+        lastReply:
+          type: string
+          title: last_reply
+      title: StaffProductIssueRecoverySummary
+      additionalProperties: false
     console.v1.StaffProductIssueReport:
       type: object
       properties:

openapi/deixic/v1/deixic.openapi.yaml

@@ -5953,6 +5953,42 @@ paths:
             application/json:
               schema:
                 $ref: '#/components/schemas/console.v1.EngageStaffProductIssueReportResponse'
+  /deixic.v1.DeixicService/ListStaffProductIssueRecoveries:
+    post:
+      tags:
+        - deixic.v1.DeixicService
+      summary: ListStaffProductIssueRecoveries
+      description: Lists the global recovery queue under verified staff authority.
+      operationId: deixic.v1.DeixicService.ListStaffProductIssueRecoveries
+      parameters:
+        - name: Connect-Protocol-Version
+          in: header
+          required: true
+          schema:
+            $ref: '#/components/schemas/connect-protocol-version'
+        - name: Connect-Timeout-Ms
+          in: header
+          schema:
+            $ref: '#/components/schemas/connect-timeout-header'
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/console.v1.ListStaffProductIssueRecoveriesRequest'
+        required: true
+      responses:
+        default:
+          description: Error
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/connect.error'
+        "200":
+          description: Success
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/console.v1.ListStaffProductIssueRecoveriesResponse'
   /deixic.v1.DeixicService/PrepareStaffProductIssueRecovery:
     post:
       tags:
@@ -21387,6 +21423,39 @@ components:
           $ref: '#/components/schemas/meter.v1.ListManagedInferenceAdminEventsRequest'
       title: ListStaffManagedInferenceAdminEventsRequest
       additionalProperties: false
+    console.v1.ListStaffProductIssueRecoveriesRequest:
+      type: object
+      properties:
+        state:
+          type: string
+          title: state
+          maxLength: 32
+          description: Empty means all states; otherwise one existing recovery state.
+        pageSize:
+          type: integer
+          title: page_size
+          maximum: 100
+          description: Zero defaults to 25; at most 100 rows.
+        pageToken:
+          type: string
+          title: page_token
+          maxLength: 4096
+      title: ListStaffProductIssueRecoveriesRequest
+      additionalProperties: false
+      description: Global staff queue. Tenant scope is returned explicitly on each row.
+    console.v1.ListStaffProductIssueRecoveriesResponse:
+      type: object
+      properties:
+        recoveries:
+          type: array
+          items:
+            $ref: '#/components/schemas/console.v1.StaffProductIssueRecoverySummary'
+          title: recoveries
+        nextPageToken:
+          type: string
+          title: next_page_token
+      title: ListStaffProductIssueRecoveriesResponse
+      additionalProperties: false
     console.v1.ListStaffProductIssueReportsRequest:
       type: object
       properties:
@@ -26428,6 +26497,38 @@ components:
       description: |-
         StaffInferenceRoutingProfile is the durable Dex inference override for the
          single server-configured STAFF organization.
+    console.v1.StaffProductIssueRecoverySummary:
+      type: object
+      properties:
+        organizationId:
+          type: string
+          title: organization_id
+        workspaceId:
+          type: string
+          title: workspace_id
+        recoveryId:
+          type: string
+          title: recovery_id
+        reportReference:
+          type: string
+          title: report_reference
+        recipientPrincipalId:
+          type: string
+          title: recipient_principal_id
+        customerSummary:
+          type: string
+          title: customer_summary
+        state:
+          type: string
+          title: state
+        createdAt:
+          title: created_at
+          $ref: '#/components/schemas/google.protobuf.Timestamp'
+        lastReply:
+          type: string
+          title: last_reply
+      title: StaffProductIssueRecoverySummary
+      additionalProperties: false
     console.v1.StaffProductIssueReport:
       type: object
       properties:

proto/connectors/v1/connectors.proto

@@ -846,16 +846,26 @@ message CustomConnector {
 }
 
 message PreviewCustomConnectorRequest {
+  option (buf.validate.message).cel = {
+    id: "connectors.v1.preview_custom_connector_request.source_required"
+    message: "document or source_uri is required"
+    expression: "size(this.document) > 0 || size(this.source_uri) > 0"
+  };
+
   string organization_id = 1 [(buf.validate.field).string.min_len = 1];
   string workspace_id = 2 [(buf.validate.field).string.min_len = 1];
   string name = 3 [(buf.validate.field).string.min_len = 1];
   string description = 4;
   string source_type = 5 [(buf.validate.field).string.min_len = 1];
-  string document = 6 [(buf.validate.field).string.min_len = 1];
+  string document = 6;
   string source_uri = 7;
   repeated string approved_destination_origins = 8;
   repeated CustomConnectorActionMetadata actions = 9;
   bool descriptions_reviewed = 10;
+  // expected_spec_sha256 binds a create request to the exact remote bytes
+  // returned by preview. It is optional for preview and inline definitions,
+  // and required by the Connectors owner when create fetches source_uri.
+  string expected_spec_sha256 = 11 [(buf.validate.field).string.pattern = "^(|[0-9a-f]{64})$"];
 }
 
 message PreviewCustomConnectorResponse {

proto/console/v1/console.proto

@@ -987,6 +987,12 @@ service ConsoleService {
     option (common.v1.staff_account_required) = true;
     option (common.v1.risk_level) = RISK_LEVEL_MEDIUM;
   }
+  // Lists the global recovery queue under verified staff authority.
+  rpc ListStaffProductIssueRecoveries(ListStaffProductIssueRecoveriesRequest) returns (ListStaffProductIssueRecoveriesResponse) {
+    option (common.v1.required_scopes) = "support_access.manage";
+    option (common.v1.staff_account_required) = true;
+    option (common.v1.risk_level) = RISK_LEVEL_LOW;
+  }
   // PrepareStaffProductIssueRecovery advances the staff-reviewed recovery of charged failures.
   rpc PrepareStaffProductIssueRecovery(PrepareStaffProductIssueRecoveryRequest) returns (ProductIssueRecoveryResponse) {
     option (common.v1.required_scopes) = "support_access.manage";
@@ -10901,3 +10907,27 @@ message ProductIssueRecovery {
 message ProductIssueRecoveryResponse {
   ProductIssueRecovery recovery = 1;
 }
+
+// Global staff queue. Tenant scope is returned explicitly on each row.
+message ListStaffProductIssueRecoveriesRequest {
+  // Empty means all states; otherwise one existing recovery state.
+  string state = 1 [(buf.validate.field).string.max_len = 32];
+  // Zero defaults to 25; at most 100 rows.
+  uint32 page_size = 2 [(buf.validate.field).uint32.lte = 100];
+  string page_token = 3 [(buf.validate.field).string.max_len = 4096];
+}
+message ListStaffProductIssueRecoveriesResponse {
+  repeated StaffProductIssueRecoverySummary recoveries = 1;
+  string next_page_token = 2;
+}
+message StaffProductIssueRecoverySummary {
+  string organization_id = 1 [(common.v1.classification) = DATA_CLASSIFICATION_IDENTIFIER];
+  string workspace_id = 2 [(common.v1.classification) = DATA_CLASSIFICATION_IDENTIFIER];
+  string recovery_id = 3 [(common.v1.classification) = DATA_CLASSIFICATION_IDENTIFIER];
+  string report_reference = 4 [(common.v1.classification) = DATA_CLASSIFICATION_IDENTIFIER];
+  string recipient_principal_id = 5 [(common.v1.classification) = DATA_CLASSIFICATION_IDENTIFIER];
+  string customer_summary = 6 [(common.v1.classification) = DATA_CLASSIFICATION_CONTENT];
+  string state = 7 [(common.v1.classification) = DATA_CLASSIFICATION_SAFE];
+  google.protobuf.Timestamp created_at = 8;
+  string last_reply = 9 [(common.v1.classification) = DATA_CLASSIFICATION_CONTENT];
+}

proto/deixic/v1/deixic.proto

@@ -1218,6 +1218,12 @@ service DeixicService {
     option (common.v1.risk_level) = RISK_LEVEL_MEDIUM;
   }
 
+  // Lists the global recovery queue under verified staff authority.
+  rpc ListStaffProductIssueRecoveries(console.v1.ListStaffProductIssueRecoveriesRequest) returns (console.v1.ListStaffProductIssueRecoveriesResponse) {
+    option (common.v1.required_scopes) = "support_access.manage";
+    option (common.v1.staff_account_required) = true;
+    option (common.v1.risk_level) = RISK_LEVEL_LOW;
+  }
   // PrepareStaffProductIssueRecovery advances the staff-reviewed recovery of charged failures.
   rpc PrepareStaffProductIssueRecovery(console.v1.PrepareStaffProductIssueRecoveryRequest) returns (console.v1.ProductIssueRecoveryResponse) {
     option (common.v1.required_scopes) = "support_access.manage";