chore: sync plugins from Mono

.repository-projection.json

@@ -3,11 +3,11 @@
   "projection": "plugins",
   "projectionSchemaVersion": 1,
   "sourceRepository": "dx-corp/mono",
-  "sourceSha": "3ccfbea716d8d52596980ca1f1f3b62166e7849d",
+  "sourceSha": "a971433d12b40d9042b3a64c2c074fa8fc398e69",
   "destinationRepository": "dx-corp/plugins",
-  "priorProjectedBase": "83339d33d0e9327ba1bce8a35eebc620fdaba043",
+  "priorProjectedBase": "750156a6ea714eab0b6011e5482fb0e5efbaccea",
   "definitionDigest": "b705140f4a8c5318b8a64dbeaa441df76d7cfb137de6940ae79004107d9a2b2e",
-  "toolDigest": "898e8657d9153a2a51d7c283bf83bb3350b5d1e6",
-  "contentDigest": "0e5c92fa1cd15cd18160e37d3be0604c36833776d7e5c05455e21a0456f76ebb",
+  "toolDigest": "ff02edcbb40b0028af10ab01a101e918341f157a",
+  "contentDigest": "b1748f369e9a04281f189ac58733f011c7ae40ebff1956864ad8419bef91f8df",
   "publicationEligible": true
 }

scripts/distribution-validation.mjs

@@ -20,16 +20,7 @@ const HEX = /^[0-9a-f]{64}$/;
 // `dx-corp/capobara` fails `invalid provenance toolDigest` against a
 // perfectly correct tree.
 const TOOL_DIGEST = /^(?:[0-9a-f]{40}|[0-9a-f]{64})$/;
-const PROTO = [
-  "agentruntime/v1/runtime.proto", "agents/v1/agents.proto", "codex/v1/codex.proto",
-  "common/v1/analytics.proto", "common/v1/authz.proto", "common/v1/classification.proto",
-  "common/v1/delivery.proto", "common/v1/entity.proto", "common/v1/risk.proto",
-  "common/v1/surface.proto", "connectors/v1/connectors.proto", "console/v1/console.proto",
-  "deixic/v1/deixic.proto", "memory/v1/memory.proto", "meter/v1/meter.proto",
-  "objectives/v1/objectives.proto", "orbcontrol/v1/orb_control.proto",
-  "platform/v1/platform.proto", "remoterunner/v1/remoterunner.proto",
-  "toolexecution/v1/toolexecution.proto", "traces/v1/traces.proto", "vfs/v1/filesystem.proto",
-].sort();
+const PROTO = ["deixicpublic/v1/sdk.proto"];
 const SKILLS = [
   "doc-coauthoring", "frontend-design", "incident-triage", "install-code-review", "mcp-builder",
   "openai-agent-browser-verify", "pr-review", "release-verification", "security-review", "skill-creator",
@@ -154,12 +145,9 @@ async function validateApi(root, files) {
     }
   }
   const surface = JSON.parse(await readFile(join(root, "contracts", "public-surface.json"), "utf8"));
-  requireValue(surface.service === "deixic.v1.DeixicService" && surface.operations?.length === 8, "Deixic public facade contract changed");
+  requireValue(surface.service === "deixicpublic.v1.DeixicPublicService" && surface.operations?.length === 8, "Deixic public facade contract changed");
   const rpcs = surface.operations.map(item => item.rpc).sort();
   requireValue(new Set(rpcs).size === 8 && surface.operations.filter(item => item.kind === "mutation").every(item => item.requiresIdempotencyKey), "Deixic public operations are invalid");
-  const lock = await readFile(join(root, "buf.lock"), "utf8");
-  requireValue(lock.includes("buf.build/bufbuild/protovalidate") && lock.includes("buf.build/googleapis/googleapis")
-    && (lock.match(/digest:\s*b5:[0-9a-f]+/g) ?? []).length === 2, "Buf dependencies are not pinned");
   const generation = await readFile(join(root, "buf.gen.yaml"), "utf8");
   requireValue(generation.includes("sudorandom-connect-openapi:v0.19.1") && !generation.includes("./scripts/"), "public codegen config is not pinned or is private");
   run("buf", ["build"], root);