[AUT-13969] Sync specs and regenerate clients from acp dev - #75
Open
jdabrowski wants to merge 2 commits into
Open
[AUT-13969] Sync specs and regenerate clients from acp dev#75jdabrowski wants to merge 2 commits into
jdabrowski wants to merge 2 commits into
Conversation
Brings the specs up to date with ciam-core dev (bd972eacc2); last sync was
2026-05-27. Adds `mode` to TreePhoneProviderConfig, which cac needs so a tenant
push can round-trip a phone provider configuration (AUT-13968 / #11149).
BREAKING: `twilio` is no longer a valid value of settings.{sms,voice}.provider.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01AZykgo2CbxHjvnBzfWQxrL
There was a problem hiding this comment.
Pull request overview
This pull request syncs the OpenAPI specs from the upstream acp dev branch and regenerates the Go clients, propagating upstream API shape changes (including the breaking narrowing of settings.{sms,voice}.provider to embedded) into the generated models and client methods.
Changes:
- Updated multiple spec documents (public, OAuth2/OPIN/OB* variants, identity*, admin/system/root) to add/remove fields, endpoints, and response schemas.
- Regenerated Go client models to reflect spec deltas (new fields like
audience_mode,enforce_application_membership,skip_dbfp,require_user_interaction_before_prompt; deprecated legacy Twilio-related fields/credentials; newPhoneProviderConfig.mode). - Regenerated client operations/responses for new/changed endpoints and status codes (e.g., pool user export, verify-code response payload, admin tenant internal settings, 409/422 responses).
Reviewed changes
Copilot reviewed 139 out of 169 changed files in this pull request and generated 4 comments.
Show a summary per file
| File | Description |
|---|---|
| spec/public.yaml | Removes application_launch_dashboard from public environment spec. |
| spec/opin.yaml | Adds application-membership/client flags and Service.audience_mode to OPIN spec. |
| spec/obuk.yaml | Adds application-membership/client flags and Service.audience_mode to OBUK spec. |
| spec/obbr.yaml | Adds application-membership/client flags and Service.audience_mode to OBBR spec. |
| spec/oauth2.yaml | Adds application-membership/client flags and well-known metadata doc support flag. |
| spec/ksa.yaml | Adds Service.audience_mode to KSA spec. |
| spec/identitysystem.yaml | Adds user export endpoint, verify-code response type, and WebAuthn setting; adds OTP metadata. |
| spec/identityroot.yaml | Adds WebAuthn require_user_interaction_before_prompt. |
| spec/identity.yaml | Adds WebAuthn require_user_interaction_before_prompt. |
| spec/fdx.yaml | Adds application-membership/client flags and Service.audience_mode to FDX spec. |
| spec/developer.yaml | Adds application-membership/client flags to developer spec. |
| spec/cdr.yaml | Adds application-membership/client flags and Service.audience_mode to CDR spec. |
| clients/system/models/voice_settings.go | Narrows voice provider enum; deprecates custom_source usage note. |
| clients/system/models/voice_auth.go | Marks legacy voice credentials as deprecated and makes fields optional. |
| clients/system/models/service.go | Adds audience_mode field + enum validation. |
| clients/system/models/service_with_scopes_and_a_p_is_and_authorization_details.go | Adds audience_mode field + enum validation. |
| clients/system/models/service_connected_to_gateway.go | Adds audience_mode field + enum validation. |
| clients/system/models/service_audit_payload.go | Adds audience_mode field + enum validation. |
| clients/system/models/secure_options.go | Updates model comment text. |
| clients/system/models/s_m_s_settings.go | Narrows SMS provider enum; deprecates custom_source usage note. |
| clients/system/models/s_m_s_auth.go | Marks legacy SMS credentials as deprecated and makes fields optional. |
| clients/system/models/phone_provider_config.go | Adds required mode enum; makes providers optional per spec. |
| clients/system/models/okta_v2_settings.go | Adds upstream IdP forwarding toggles (id_token_hint, max_age, prompt). |
| clients/system/models/okta_settings.go | Adds upstream IdP forwarding toggles (id_token_hint, max_age, prompt). |
| clients/system/models/o_id_c_settings.go | Adds upstream IdP forwarding toggles (id_token_hint, max_age, prompt). |
| clients/system/models/microsoft_settings.go | Adds upstream IdP forwarding toggles (id_token_hint, max_age, prompt). |
| clients/system/models/linked_in_settings.go | Adds upstream IdP forwarding toggles (id_token_hint, max_age, prompt). |
| clients/system/models/intelli_trust_settings.go | Adds upstream IdP forwarding toggles (id_token_hint, max_age, prompt). |
| clients/system/models/google_workspace_settings.go | Adds upstream IdP forwarding toggles (id_token_hint, max_age, prompt). |
| clients/system/models/google_settings.go | Adds upstream IdP forwarding toggles (id_token_hint, max_age, prompt). |
| clients/system/models/custom_app.go | Adds radius to custom app type enum and updates constraints text. |
| clients/system/models/cognito_settings.go | Adds upstream IdP forwarding toggles (id_token_hint, max_age, prompt). |
| clients/system/models/client.go | Adds enforce_application_membership and skip_dbfp. |
| clients/system/models/client_audit_payload.go | Adds enforce_application_membership and skip_dbfp. |
| clients/system/models/azure_settings.go | Adds upstream IdP forwarding toggles (id_token_hint, max_age, prompt). |
| clients/system/models/azure_b2_c_settings.go | Adds upstream IdP forwarding toggles (id_token_hint, max_age, prompt). |
| clients/system/models/auth0_settings.go | Adds upstream IdP forwarding toggles (id_token_hint, max_age, prompt). |
| clients/system/models/advanced_configuration.go | Adds org/app-membership related advanced config toggles. |
| clients/root/models/voice_settings.go | Narrows voice provider enum; deprecates custom_source usage note. |
| clients/root/models/voice_auth.go | Marks legacy voice credentials as deprecated and makes fields optional. |
| clients/root/models/service.go | Adds audience_mode field + enum validation. |
| clients/root/models/service_with_scopes_and_a_p_is_and_authorization_details.go | Adds audience_mode field + enum validation. |
| clients/root/models/service_audit_payload.go | Adds audience_mode field + enum validation. |
| clients/root/models/secure_options.go | Updates model comment text. |
| clients/root/models/s_m_s_settings.go | Narrows SMS provider enum; deprecates custom_source usage note. |
| clients/root/models/s_m_s_auth.go | Marks legacy SMS credentials as deprecated and makes fields optional. |
| clients/root/models/phone_provider_config.go | Adds required mode enum; makes providers optional per spec. |
| clients/root/models/okta_v2_settings.go | Adds upstream IdP forwarding toggles (id_token_hint, max_age, prompt). |
| clients/root/models/okta_settings.go | Adds upstream IdP forwarding toggles (id_token_hint, max_age, prompt). |
| clients/root/models/o_id_c_settings.go | Adds upstream IdP forwarding toggles (id_token_hint, max_age, prompt). |
| clients/root/models/microsoft_settings.go | Adds upstream IdP forwarding toggles (id_token_hint, max_age, prompt). |
| clients/root/models/linked_in_settings.go | Adds upstream IdP forwarding toggles (id_token_hint, max_age, prompt). |
| clients/root/models/intelli_trust_settings.go | Adds upstream IdP forwarding toggles (id_token_hint, max_age, prompt). |
| clients/root/models/google_workspace_settings.go | Adds upstream IdP forwarding toggles (id_token_hint, max_age, prompt). |
| clients/root/models/google_settings.go | Adds upstream IdP forwarding toggles (id_token_hint, max_age, prompt). |
| clients/root/models/custom_app.go | Adds radius to custom app type enum and updates constraints text. |
| clients/root/models/cognito_settings.go | Adds upstream IdP forwarding toggles (id_token_hint, max_age, prompt). |
| clients/root/models/client.go | Adds enforce_application_membership and skip_dbfp. |
| clients/root/models/client_audit_payload.go | Adds enforce_application_membership and skip_dbfp. |
| clients/root/models/azure_settings.go | Adds upstream IdP forwarding toggles (id_token_hint, max_age, prompt). |
| clients/root/models/azure_b2_c_settings.go | Adds upstream IdP forwarding toggles (id_token_hint, max_age, prompt). |
| clients/root/models/auth0_settings.go | Adds upstream IdP forwarding toggles (id_token_hint, max_age, prompt). |
| clients/root/models/advanced_configuration.go | Adds org/app-membership related advanced config toggles. |
| clients/root/client/tenants/tenants_client.go | Adds admin tenant internal settings getter operation. |
| clients/root/client/tenants/get_admin_tenant_internal_settings_parameters.go | Adds parameter type for admin tenant internal settings endpoint. |
| clients/public/models/public_environment.go | Removes application_launch_dashboard field from public environment model. |
| clients/opin/models/service.go | Adds audience_mode field + enum validation. |
| clients/opin/models/dynamic_client_registration_response.go | Adds enforce_application_membership and skip_dbfp. |
| clients/opin/models/dynamic_client_registration_json_request.go | Adds enforce_application_membership and skip_dbfp. |
| clients/obuk/models/service.go | Adds audience_mode field + enum validation. |
| clients/obuk/models/openbanking_u_k_dynamic_client_registration_response.go | Adds enforce_application_membership and skip_dbfp. |
| clients/obuk/models/openbanking_u_k_dynamic_client_registration_request.go | Adds enforce_application_membership and skip_dbfp. |
| clients/obbr/models/service.go | Adds audience_mode field + enum validation. |
| clients/obbr/models/dynamic_client_registration_response.go | Adds enforce_application_membership and skip_dbfp. |
| clients/obbr/models/dynamic_client_registration_json_request.go | Adds enforce_application_membership and skip_dbfp. |
| clients/oauth2/models/well_known.go | Adds client_id_metadata_document_supported well-known field. |
| clients/oauth2/models/dynamic_client_registration_response.go | Adds enforce_application_membership and skip_dbfp. |
| clients/oauth2/models/dynamic_client_registration_request.go | Adds enforce_application_membership and skip_dbfp. |
| clients/ksa/models/service.go | Adds audience_mode field + enum validation. |
| clients/identitysystem/models/web_authn_settings.go | Adds require_user_interaction_before_prompt. |
| clients/identitysystem/models/verify_code_result.go | Introduces verify-code response payload model (id + metadata). |
| clients/identitysystem/models/inspect_o_t_p_user_operational_data.go | Adds OTP metadata field. |
| clients/identitysystem/client/users/verify_authentication_code_responses.go | Changes verify-auth-code OK payload from UserID to VerifyCodeResult. |
| clients/identitysystem/client/tenants/tenants_client.go | Adds ExportPoolUsers operation for exporting users with credentials. |
| clients/identitysystem/client/o_t_p/verify_o_t_p_responses.go | Changes verify-OTP OK payload from UserID to VerifyCodeResult. |
| clients/identityroot/models/web_authn_settings.go | Adds require_user_interaction_before_prompt. |
| clients/identity/models/web_authn_settings.go | Adds require_user_interaction_before_prompt. |
| clients/hub/models/web_authn_settings.go | Adds require_user_interaction_before_prompt. |
| clients/hub/models/voice_settings.go | Narrows voice provider enum; deprecates custom_source usage note. |
| clients/hub/models/voice_auth.go | Marks legacy voice credentials as deprecated and makes fields optional. |
| clients/hub/models/tree_service.go | Adds audience_mode field + enum validation. |
| clients/hub/models/tree_phone_provider_config.go | Adds mode enum to tree phone provider config model. |
| clients/hub/models/tree_custom_app.go | Adds radius to custom app type enum and updates constraints text. |
| clients/hub/models/tree_client.go | Adds enforce_application_membership and skip_dbfp. |
| clients/hub/models/secure_options.go | Updates model comment text. |
| clients/hub/models/s_m_s_settings.go | Narrows SMS provider enum; deprecates custom_source usage note. |
| clients/hub/models/s_m_s_auth.go | Marks legacy SMS credentials as deprecated and makes fields optional. |
| clients/hub/models/okta_v2_settings.go | Adds upstream IdP forwarding toggles (id_token_hint, max_age, prompt). |
| clients/hub/models/okta_settings.go | Adds upstream IdP forwarding toggles (id_token_hint, max_age, prompt). |
| clients/hub/models/o_id_c_settings.go | Adds upstream IdP forwarding toggles (id_token_hint, max_age, prompt). |
| clients/hub/models/microsoft_settings.go | Adds upstream IdP forwarding toggles (id_token_hint, max_age, prompt). |
| clients/hub/models/linked_in_settings.go | Adds upstream IdP forwarding toggles (id_token_hint, max_age, prompt). |
| clients/hub/models/intelli_trust_settings.go | Adds upstream IdP forwarding toggles (id_token_hint, max_age, prompt). |
| clients/hub/models/google_workspace_settings.go | Adds upstream IdP forwarding toggles (id_token_hint, max_age, prompt). |
| clients/hub/models/google_settings.go | Adds upstream IdP forwarding toggles (id_token_hint, max_age, prompt). |
| clients/hub/models/cognito_settings.go | Adds upstream IdP forwarding toggles (id_token_hint, max_age, prompt). |
| clients/hub/models/azure_settings.go | Adds upstream IdP forwarding toggles (id_token_hint, max_age, prompt). |
| clients/hub/models/azure_b2_c_settings.go | Adds upstream IdP forwarding toggles (id_token_hint, max_age, prompt). |
| clients/hub/models/auth0_settings.go | Adds upstream IdP forwarding toggles (id_token_hint, max_age, prompt). |
| clients/hub/models/advanced_configuration.go | Adds org/app-membership related advanced config toggles. |
| clients/fdx/models/service.go | Adds audience_mode field + enum validation. |
| clients/fdx/models/f_d_x_dynamic_client_registration_response.go | Adds enforce_application_membership and skip_dbfp. |
| clients/fdx/models/f_d_x_dynamic_client_registration_request.go | Adds enforce_application_membership and skip_dbfp. |
| clients/developer/models/update_client_developer_request.go | Adds enforce_application_membership and skip_dbfp. |
| clients/developer/models/create_client_developer_request.go | Adds enforce_application_membership and skip_dbfp. |
| clients/developer/models/client_developer_response.go | Adds enforce_application_membership and skip_dbfp. |
| clients/cdr/models/service.go | Adds audience_mode field + enum validation. |
| clients/cdr/models/client.go | Adds enforce_application_membership and skip_dbfp. |
| clients/cdr/models/c_d_r_dynamic_client_registration_response.go | Adds enforce_application_membership and skip_dbfp. |
| clients/cdr/models/c_d_r_dynamic_client_registration_request.go | Adds enforce_application_membership and skip_dbfp. |
| clients/admin/models/workspace_permissions_response.go | Adds application assignment/membership permission flags. |
| clients/admin/models/voice_settings.go | Narrows voice provider enum; deprecates custom_source usage note. |
| clients/admin/models/voice_auth.go | Marks legacy voice credentials as deprecated and makes fields optional. |
| clients/admin/models/update_client_admin_request.go | Adds enforce_application_membership and skip_dbfp. |
| clients/admin/models/test_m_f_a_method_request.go | Updates provider index docstring to new phone provider config semantics. |
| clients/admin/models/service.go | Adds audience_mode field + enum validation. |
| clients/admin/models/service_with_scopes_response.go | Adds audience_mode field + enum validation. |
| clients/admin/models/service_with_audience.go | Adds audience_mode field + enum validation. |
| clients/admin/models/service_response.go | Adds audience_mode field + enum validation. |
| clients/admin/models/service_audit_payload.go | Adds audience_mode field + enum validation. |
| clients/admin/models/secure_options.go | Updates model comment text. |
| clients/admin/models/s_m_s_settings.go | Narrows SMS provider enum; deprecates custom_source usage note. |
| clients/admin/models/s_m_s_auth.go | Marks legacy SMS credentials as deprecated and makes fields optional. |
| clients/admin/models/phone_provider_config.go | Adds required mode enum; makes providers optional per spec. |
| clients/admin/models/okta_v2_settings.go | Adds upstream IdP forwarding toggles (id_token_hint, max_age, prompt). |
| clients/admin/models/okta_settings.go | Adds upstream IdP forwarding toggles (id_token_hint, max_age, prompt). |
| clients/admin/models/o_id_c_settings.go | Adds upstream IdP forwarding toggles (id_token_hint, max_age, prompt). |
| clients/admin/models/microsoft_settings.go | Adds upstream IdP forwarding toggles (id_token_hint, max_age, prompt). |
| clients/admin/models/linked_in_settings.go | Adds upstream IdP forwarding toggles (id_token_hint, max_age, prompt). |
| clients/admin/models/intelli_trust_settings.go | Adds upstream IdP forwarding toggles (id_token_hint, max_age, prompt). |
| clients/admin/models/import_service_configuration_result.go | Adds audience_mode field + enum validation. |
| clients/admin/models/google_workspace_settings.go | Adds upstream IdP forwarding toggles (id_token_hint, max_age, prompt). |
| clients/admin/models/google_settings.go | Adds upstream IdP forwarding toggles (id_token_hint, max_age, prompt). |
| clients/admin/models/gateways.go | Changes gateways list payload element type to GatewayWithCounts. |
| clients/admin/models/gateway_with_counts.go | Adds GatewayWithCounts model with count fields. |
| clients/admin/models/environment.go | Updates feature flags (adds/removes multiple environment toggles). |
| clients/admin/models/custom_app.go | Adds radius to custom app type enum and updates constraints text. |
| clients/admin/models/custom_app_response.go | Adds radius to custom app type enum and updates constraints text. |
| clients/admin/models/create_client_admin_request.go | Adds enforce_application_membership and skip_dbfp. |
| clients/admin/models/cognito_settings.go | Adds upstream IdP forwarding toggles (id_token_hint, max_age, prompt). |
| clients/admin/models/client.go | Adds enforce_application_membership and skip_dbfp. |
| clients/admin/models/client_audit_payload.go | Adds enforce_application_membership and skip_dbfp. |
| clients/admin/models/client_admin_response.go | Adds enforce_application_membership and skip_dbfp. |
| clients/admin/models/azure_settings.go | Adds upstream IdP forwarding toggles (id_token_hint, max_age, prompt). |
| clients/admin/models/azure_b2_c_settings.go | Adds upstream IdP forwarding toggles (id_token_hint, max_age, prompt). |
| clients/admin/models/auth0_settings.go | Adds upstream IdP forwarding toggles (id_token_hint, max_age, prompt). |
| clients/admin/models/advanced_configuration.go | Adds org/app-membership related advanced config toggles. |
| clients/admin/client/scripts/create_script_responses.go | Adds 409 Conflict response type for script creation. |
| clients/admin/client/phone_provider_config/get_phone_provider_config_responses.go | Removes 404 NotFound handling per updated spec responses. |
| clients/admin/client/organizations/list_user_organizations_parameters.go | Adds in_tree_of_workspace_id query parameter. |
| clients/admin/client/organizations/list_organizations_parameters.go | Adds in_tree_of_workspace_id and within_workspace_id query parameters. |
| clients/admin/client/api_keys/create_api_key_responses.go | Adds 422 Unprocessable Entity response type for API key creation. |
Files not reviewed (30)
- clients/admin/client/api_keys/create_api_key_responses.go: Generated file
- clients/admin/client/organizations/list_organizations_parameters.go: Generated file
- clients/admin/client/organizations/list_user_organizations_parameters.go: Generated file
- clients/admin/client/phone_provider_config/get_phone_provider_config_responses.go: Generated file
- clients/admin/client/scripts/create_script_responses.go: Generated file
- clients/admin/models/advanced_configuration.go: Generated file
- clients/admin/models/auth0_settings.go: Generated file
- clients/admin/models/azure_b2_c_settings.go: Generated file
- clients/admin/models/azure_settings.go: Generated file
- clients/admin/models/client.go: Generated file
- clients/admin/models/client_admin_response.go: Generated file
- clients/admin/models/client_audit_payload.go: Generated file
- clients/admin/models/cognito_settings.go: Generated file
- clients/admin/models/create_client_admin_request.go: Generated file
- clients/admin/models/custom_app.go: Generated file
- clients/admin/models/custom_app_response.go: Generated file
- clients/admin/models/environment.go: Generated file
- clients/admin/models/gateway_with_counts.go: Generated file
- clients/admin/models/gateways.go: Generated file
- clients/admin/models/google_settings.go: Generated file
- clients/admin/models/google_workspace_settings.go: Generated file
- clients/admin/models/import_service_configuration_result.go: Generated file
- clients/admin/models/intelli_trust_settings.go: Generated file
- clients/admin/models/linked_in_settings.go: Generated file
- clients/admin/models/microsoft_settings.go: Generated file
- clients/admin/models/o_id_c_settings.go: Generated file
- clients/admin/models/okta_settings.go: Generated file
- clients/admin/models/okta_v2_settings.go: Generated file
- clients/admin/models/phone_provider_config.go: Generated file
- clients/admin/models/s_m_s_auth.go: Generated file
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
Picks up ciam-core #11211 (merged a39a03ceb7), which annotates the legacy
settings.{sms,voice}.provider fields and the SMSAuth/VoiceAuth credential blocks.
Before this, the narrowed provider enum reached consumers with no explanation and
no pointer to the replacement — `grep phone_provider` over the generated clients
returned nothing.
Comment-only in the generated code.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01AZykgo2CbxHjvnBzfWQxrL
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Jira task
AUT-13969
BREAKING CHANGE
Note
Deprecation docs now ride along. ciam-core#11211 merged (
a39a03ceb7) and this branch has been re-synced on top of it, so the generated clients now explain the change at the point of use rather than silently narrowing the enum.SMSSettings.ProviderandVoiceSettings.Providerpreviously carried no deprecation note at all, and nothing in any client named the replacement. Both now do, and theSMSAuth/VoiceAuthnotes were reshaped soDeprecated:starts a paragraph andstaticcheck/goplsactually flag them.twiliois no longer a valid value ofsettings.sms.provider/settings.voice.provider. The enum was narrowed toembeddedby #10473 (AUT-13620); this sync propagates that to the generated clients, so the client-side validator now rejects it.Who this hits. The Twilio migration deliberately leaves the stored value alone —
migrate_twilio_to_phone_providers.go:24-27: "The method rows are deliberately left untouched, including thetwilioprovider value — a binary rollback must land on data the previous release can still deliver with." So the API still returnsprovider: twiliofor every migrated tenant, and a freshly pulled cac repo contains it. This is not limited to stale checkouts.Failure mode is safe.
cac pushaborts in pre-flight validation (cmd/push.go:57-61), beforeapp.Client.Write. Nothing is sent, no tenant is mutated:cac pullis unaffected (it does not validate, and round-trips the value verbatim).Remedy — verified live against a seeded migrated-state tenant:
provideromittedprovider: embedded--method patchtwilio, credentials and phone provider config all preserved--method importprovider is a required fieldsettings.{sms,voice}.providerno longer selects anything — delivery has routed solely throughphone_provider_configsince #10473, and the field is read in only 6 places, all legacy-Twilio machinery, none of them on the delivery path.embeddedis simply its sole remaining legal value, not a provider choice.Two caveats for the upgrade note:
auth.sms.sidloses bridge write-through when it stops sayingtwilio; the phone provider config must be in place first.--method import, switching without anauthblock clears the stored legacy credentials (full-desired-state semantics). Harmless once phone providers are configured, destructive before.Implementation details (internal)
Problem.
TreePhoneProviderConfighad onlyactive+providers, so a cac tenant push could not expressmodeand flattened the phone provider configuration — the AUT-13968 incident. #11149 fixed the server; the client still cannot send the field.Solution. Full spec sync from ciam-core dev
bd972eacc2(last sync 2026-05-27) plusmake generate-acp.TreePhoneProviderConfiggainsmode, which unblocks AUT-13970.Other API-surface changes carried by the sync, for reviewers:
Environmentdropsadvanced_phone,voice_otp,application_launch_dashboard,disable_embedded_{sms,voice}_provider,use_new_dn_format;PublicEnvironmentdropsapplication_launch_dashboard— all verified removed upstream, not renamedGateways.gateways:[]Gateway→[]GatewayWithCountsSMSAuth/VoiceAuthdroprequired: [sid, auth_token], so the fields gainomitempty— an improvement: an empty credential pair now serializes as{}("leave unchanged" under merge-patch) instead of{"sid":"","auth_token":""}, which blanked stored credentialsPhoneProviderConfigrequired movesproviders→mode;minItems: 1droppedVerification.
go build ./...clean. cac compiles against this branch and its suite passes, except two golden fixtures that drift on new additive booleans (enforce_application_membership,skip_dbfp,require_user_interaction_before_prompt) — fixture updates belonging to AUT-13970. The enum break was falsification-verified: the same test passes on the pinned client and fails here, with only the client swapped.Reference
Twilio Enum Drift — the breaking-change analysis behind this PR: the measured before/after with its falsification control, the spec-vs-implementation mismatch, the full structural delta across all 24 shared specs, and the options that were weighed. Access-controlled; ask if you need it opened up.
A Customer Success review of the customer-facing impact is pending, and this PR should not merge before it concludes.