## Python SDK Changes:

* `glean.client.collections.add_items()`:  `response.error.error_type.enum(corrupt_item)` **Added** (Breaking ⚠️)
* `glean.datasources.get_datasource_credential_status()`: **Added**
* `glean.datasources.rotate_datasource_credentials()`: **Added**
* `glean.client.collections.create()`: 
  *  `response.union(class (0)).error.error_code.enum(corrupt_item)` **Added**
  *  `error_code.enum(corrupt_item)` **Added**
* `glean.client.collections.delete()`:  `error_code.enum(corrupt_item)` **Added**
* `glean.client.collections.update()`: 
  *  `response` **Changed**
  *  `error_code.enum(corrupt_item)` **Added**
* `glean.client.collections.retrieve()`:  `response.error.error_code.enum(corrupt_item)` **Added**
* `glean.client.insights.retrieve()`: 
  *  `request.mcp_breakdown_request` **Added**
  *  `response.agents_response.top_use_cases_insights` **Added**
* `glean.client.search.retrieve_feed()`: 
  *  `request.categories[]` **Changed**
  *  `response.results[]` **Changed**

Author: speakeasybot

.speakeasy/gen.lock

@@ -34,7 +34,7 @@ generation:
     generateNewTests: true
     skipResponseBodyAssertions: true
 python:
-  version: 0.12.24
+  version: 0.12.25
   additionalDependencies:
     dev: {}
     main: {}

.speakeasy/gen.yaml

@@ -2,7 +2,7 @@ openapi: 3.0.0
 info:
   version: 0.9.0
   title: Glean API
-  x-source-commit-sha: 0aa266469924048ad422bf6314104f79b477e46a
+  x-source-commit-sha: 461dedde5fcb788488b0edda799f2477fe71e57a
   description: |
     # Introduction
     In addition to the data sources that Glean has built-in support for, Glean also provides a REST API that enables customers to put arbitrary content in the search index. This is useful, for example, for doing permissions-aware search over content in internal tools that reside on-prem as well as for searching over applications that Glean does not currently support first class. In addition these APIs allow the customer to push organization data (people info, organization structure etc) into Glean.
@@ -22,7 +22,7 @@ info:
     These API clients provide type-safe, idiomatic interfaces for working with Glean IndexingAPIs in your language of choice.
   x-logo:
     url: https://app.glean.com/images/glean-text2.svg
-  x-open-api-commit-sha: 122e22b59935f3ed61845da28a7c607ebc115c9b
+  x-open-api-commit-sha: baeb671e92c686b3cc22aacca64b38eebcd9d915
   x-speakeasy-name: 'Glean API'
 servers:
   - url: https://{instance}-be.glean.com
@@ -4014,6 +4014,93 @@ paths:
               schema:
                 $ref: '#/components/schemas/ErrorResponse'
       x-visibility: Preview
+  /rest/api/v1/datasource/{datasourceInstanceId}/credentialstatus:
+    get:
+      operationId: getDatasourceCredentialStatus
+      summary: Get datasource instance credential status
+      description: |
+        Returns the current credential status for a datasource instance. Access is limited to callers with the ADMIN scope; the handler enforces this check.
+      tags:
+        - Datasources
+      security:
+        - APIToken: []
+      parameters:
+        - $ref: '#/components/parameters/datasourceInstanceId'
+      responses:
+        "200":
+          description: OK
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/DatasourceCredentialStatusResponse'
+        "400":
+          description: Invalid request
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/ErrorResponse'
+        "401":
+          description: Not authorized
+        "403":
+          description: Forbidden
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/ErrorResponse'
+        "404":
+          description: Datasource instance not found
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/ErrorResponse'
+      x-visibility: Preview
+  /rest/api/v1/datasource/{datasourceInstanceId}/credentials:
+    post:
+      operationId: rotateDatasourceCredentials
+      summary: Rotate datasource instance credentials
+      description: |
+        Rotates the credentials that a datasource instance uses to connect to its upstream system. Replaces the active credential material with the supplied values and returns the credential status after rotation. Access is limited to callers with the ADMIN scope; the handler enforces this check.
+        Only keys recognized as credential material for the datasource type may be set in `credentials.values` (e.g. `clientSecret`, `apiToken`, `privateKey`, depending on the configured auth method). Unrecognized keys, or keys that correspond to non-credential configuration, cause a 400; other instance configuration must be updated via PATCH /configure/datasources/{datasourceId}/instances/{instanceId}.
+      tags:
+        - Datasources
+      security:
+        - APIToken: []
+      parameters:
+        - $ref: '#/components/parameters/datasourceInstanceId'
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/RotateDatasourceCredentialsRequest'
+        required: true
+      responses:
+        "200":
+          description: OK
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/DatasourceCredentialStatusResponse'
+        "400":
+          description: Invalid request
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/ErrorResponse'
+        "401":
+          description: Not authorized
+        "403":
+          description: Forbidden
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/ErrorResponse'
+        "404":
+          description: Datasource instance not found
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/ErrorResponse'
+      x-visibility: Preview
   /rest/api/v1/chat#stream:
     post:
       tags:
@@ -8709,6 +8796,7 @@ components:
           type: string
           enum:
             - EXISTING_ITEM
+            - CORRUPT_ITEM
     AddCollectionItemsResponse:
       properties:
         collection:
@@ -8738,6 +8826,7 @@ components:
             - HEIGHT_VIOLATION
             - WIDTH_VIOLATION
             - NO_PERMISSIONS
+            - CORRUPT_ITEM
     CreateCollectionResponse:
       allOf:
         - type: object
@@ -8988,6 +9077,44 @@ components:
         dayRange:
           $ref: "#/components/schemas/Period"
           description: Time period for which Insights are requested.
+    McpBreakdownInsightsRequest:
+      properties:
+        departments:
+          type: array
+          items:
+            type: string
+          description: Departments for which Insights are requested.
+        managerIds:
+          type: array
+          items:
+            type: string
+          description: Manager user IDs whose teams should be filtered for. Empty array means no filtering.
+        dayRange:
+          $ref: "#/components/schemas/Period"
+          description: Time period for which Insights are requested.
+        breakdownType:
+          type: string
+          enum:
+            - USERS
+            - HOST_APPLICATIONS
+            - TOOLS
+            - SERVERS
+          description: Type of breakdown to return.
+        hostApplications:
+          type: array
+          items:
+            type: string
+          description: Host applications to filter by. Empty array means all host applications.
+        tools:
+          type: array
+          items:
+            type: string
+          description: MCP tools to filter by. Empty array means all tools.
+        servers:
+          type: array
+          items:
+            type: string
+          description: MCP servers to filter by. Empty array means all servers.
     InsightsRequest:
       properties:
         overviewRequest:
@@ -9002,6 +9129,8 @@ components:
           $ref: "#/components/schemas/AgentsInsightsV2Request"
           x-visibility: Public
           description: If specified, will return data for the Agents section of the Insights Dashboard.
+        mcpBreakdownRequest:
+          $ref: "#/components/schemas/McpBreakdownInsightsRequest"
         disablePerUserInsights:
           type: boolean
           description: If true, suppresses the generation of per-user Insights in the response. Default is false.
@@ -9052,10 +9181,10 @@ components:
       properties:
         monthlyActiveUsers:
           type: integer
-          description: Number of current Monthly Active Users, in the specified departments.
+          description: Number of current Monthly Active Users.
         weeklyActiveUsers:
           type: integer
-          description: Number of current Weekly Active Users, in the specified departments.
+          description: Number of current Weekly Active Users.
     InsightsSearchSummary:
       allOf:
         - $ref: "#/components/schemas/CurrentActiveUsers"
@@ -9286,6 +9415,33 @@ components:
         downvoteCount:
           type: integer
           description: Total number of downvotes for this agent over the specified time period.
+    AgentUseCaseInsight:
+      properties:
+        useCase:
+          type: string
+          description: Use case name
+        runCount:
+          type: integer
+          description: Total number of runs for this use case over the specified time period.
+        trend:
+          type: number
+          format: float
+          description: Percentage change in runs compared to the previous equivalent time period.
+        topDepartments:
+          type: string
+          description: Comma-separated list of the top departments using this use case.
+        topAgentId:
+          type: string
+          description: ID of the most-used agent for this use case.
+        topAgentName:
+          type: string
+          description: Name of the most-used agent for this use case.
+        topAgentIcon:
+          $ref: "#/components/schemas/IconConfig"
+          description: Icon of the most-used agent for this use case.
+        topAgentIsDeleted:
+          type: boolean
+          description: Indicates whether the top agent has been deleted.
     AgentsUsageByDepartmentInsight:
       properties:
         department:
@@ -9375,6 +9531,10 @@ components:
               type: array
               items:
                 $ref: "#/components/schemas/PerAgentInsight"
+            topUseCasesInsights:
+              type: array
+              items:
+                $ref: "#/components/schemas/AgentUseCaseInsight"
             agentsUsageByDepartmentInsights:
               type: array
               items:
@@ -10196,7 +10356,9 @@ components:
               - FOLLOW_UP
               - MILESTONE_TIMELINE_CHECK
               - PROJECT_DISCUSSION_DIGEST
+              - PROJECT_FOCUS_BLOCK
               - PROJECT_NEXT_STEP
+              - DEMO_CARD
           description: Categories of content requested. An allowlist gives flexibility to request content separately or together.
         requestOptions:
           $ref: "#/components/schemas/FeedRequestOptions"
@@ -10533,6 +10695,7 @@ components:
         - SHORTCUTS_TYPE
         - SLIDE_TYPE
         - SPREADSHEET_TYPE
+        - INLINE_HTML_TYPE
         - WORKFLOWS_TYPE
     FavoriteInfo:
       type: object
@@ -10706,7 +10869,9 @@ components:
             - FOLLOW_UP
             - MILESTONE_TIMELINE_CHECK
             - PROJECT_DISCUSSION_DIGEST
+            - PROJECT_FOCUS_BLOCK
             - PROJECT_NEXT_STEP
+            - DEMO_CARD
           description: Type of the justification.
         justification:
           type: string
@@ -10789,7 +10954,9 @@ components:
             - FOLLOW_UP
             - MILESTONE_TIMELINE_CHECK
             - PROJECT_DISCUSSION_DIGEST
+            - PROJECT_FOCUS_BLOCK
             - PROJECT_NEXT_STEP
+            - DEMO_CARD
           description: Category of the result, one of the requested categories in incoming request.
         primaryEntry:
           $ref: "#/components/schemas/FeedEntry"
@@ -13841,6 +14008,46 @@ components:
         - configuration
       description: |
         Request to update greenlisted configuration values for a datasource instance. Only keys that are exposed via the public API greenlist may be set.
+    DatasourceCredentialStatus:
+      type: string
+      enum:
+        - VALID
+        - VALID_WITH_WARNINGS
+        - VALIDATING
+        - INVALID
+        - MISSING
+      description: |
+        Lifecycle state of the credentials installed for a datasource instance. Mirrors the internal admin Status enum so the handler can surface the same health signals already tracked today. EXPIRING_SOON is represented as VALID_WITH_WARNINGS (with detail in `message`); EXPIRED is surfaced as INVALID plus a non-null `expiresAt` in the past.
+    DatasourceCredentialStatusResponse:
+      type: object
+      properties:
+        status:
+          $ref: '#/components/schemas/DatasourceCredentialStatus'
+        lastRotatedAt:
+          type: string
+          format: date-time
+          description: When the credentials were last rotated. Omitted when not known.
+        expiresAt:
+          type: string
+          format: date-time
+          description: |
+            When the active credentials expire. Omitted when not known or not applicable to this credential type.
+        message:
+          type: string
+          description: Optional human-readable detail about the current credential status.
+      required:
+        - status
+      description: Status of the credentials currently installed for a datasource instance.
+    RotateDatasourceCredentialsRequest:
+      type: object
+      properties:
+        credentials:
+          $ref: '#/components/schemas/DatasourceInstanceConfiguration'
+      required:
+        - credentials
+      description: |
+        Request to rotate the credentials used by a datasource instance. Replaces the active credential material with the supplied values.
+        `credentials.values` must contain only keys recognized as credential material for the datasource type (for example `clientSecret` for OAuth, `apiToken` for API-token auth, `privateKey` for certificate auth). Unrecognized keys, or keys that correspond to non-credential configuration, cause a 400; use the configure endpoint to change non-credential config.
     ChatRequestStream:
       required:
         - messages
@@ -13914,6 +14121,14 @@ components:
       schema:
         type: string
         example: o365sharepoint_abc123
+    datasourceInstanceId:
+      name: datasourceInstanceId
+      in: path
+      description: The full datasource instance identifier (e.g. o365sharepoint_abc123)
+      required: true
+      schema:
+        type: string
+        example: o365sharepoint_abc123
   responses:
     SuccessResponse:
       description: OK

.speakeasy/glean-merged-spec.yaml

@@ -158494,3 +158494,43 @@ workflows:
               type: simple
       x-speakeasy-test-group: Datasources
       x-speakeasy-test-rebuild: true
+    - workflowId: getDatasourceCredentialStatus
+      steps:
+        - stepId: test
+          operationId: getDatasourceCredentialStatus
+          parameters:
+            - name: datasourceInstanceId
+              in: path
+              value: o365sharepoint_abc123
+          successCriteria:
+            - condition: $statusCode == 200
+            - condition: $response.header.Content-Type == application/json
+            - context: $response.body
+              condition: |
+                {"status":"VALID"}
+              type: simple
+      x-speakeasy-test-group: Datasources
+      x-speakeasy-test-rebuild: true
+    - workflowId: rotateDatasourceCredentials
+      steps:
+        - stepId: test
+          operationId: rotateDatasourceCredentials
+          parameters:
+            - name: datasourceInstanceId
+              in: path
+              value: o365sharepoint_abc123
+          requestBody:
+            contentType: application/json
+            payload:
+                credentials:
+                    values:
+                        key: {}
+          successCriteria:
+            - condition: $statusCode == 200
+            - condition: $response.header.Content-Type == application/json
+            - context: $response.body
+              condition: |
+                {"status":"MISSING"}
+              type: simple
+      x-speakeasy-test-group: Datasources
+      x-speakeasy-test-rebuild: true