[sentry-junior]

Follow-up to #128930. Publishes the endpoints that declare idempotent_methods so the x-sentry-idempotent markers actually reach the public schema, and through it @sentry/api (getsentry/sentry-api-schema#111 already reads the extension).

Refs #128927.

What changes

All four operations are PUBLIC_EXPERIMENTAL and fully documented:

• GET /organizations/{org}/chunk-upload/ (getOrganizationChunkUploadOptions): the upload URL and limits. Clients need it before they upload, so it's published with the POST.
• POST /organizations/{org}/chunk-upload/ (uploadOrganizationChunks): multipart body described by a docs-only ChunkUploadSerializer, following the ReleaseFileUploadSerializer precedent.
• POST /projects/{org}/{project}/files/difs/assemble/ (assembleProjectDebugFiles)
• POST /organizations/{org}/artifactbundle/assemble/ (assembleOrganizationArtifactBundle)

The three POSTs carry x-sentry-idempotent: true. GET doesn't, because safe methods are implicit.

Notes for review

• One schema for validation and docs. The assemble endpoints' jsonschema moved to module constants that both validation and extend_schema use, so the docs can't drift from what's enforced. Validation behavior is unchanged.
• DIF body is a map keyed by checksum. OpenAPI 3.0 has no patternProperties, so the docs version uses additionalProperties, and the checksum key format is explained in the description. _validate_request_body raised KeyError: 'properties' on map bodies. It now checks field descriptions under the map's additionalProperties. The new MapRequestBodyTest covers this.
• Types. Added response TypedDicts and typed batch_assemble. state is str, not a Literal, because ChunkFileState values are plain strings.
• accept is now a list. It was a tuple, which spectacular documents as a fixed-length array, so the GET options response returns list(CHUNK_UPLOAD_ACCEPT) instead. The JSON output is the same.
• File parts show as format: uri. That's how spectacular renders FileField, and it matches the existing release-file upload docs. Happy to override it to binary if reviewers prefer.

Verification

• sentry django spectacular --validate --fail-on-warn passes. The deref build and openapi-examples-validator --no-additional-properties pass with no errors.
• ruff check, ruff format --check, flake8, and mypy are clean on the changed files.
• Passing: tests/apidocs/test_hooks.py, test_operation_id_uniqueness.py, test_chunk_upload.py, test_organization_artifactbundle_assemble.py (78 tests).
• test_dif_assemble.py needs an objectstore server, which my sandbox doesn't have, so CI is the authoritative run there. I checked parse_assemble_request_payload directly instead: it accepts valid payloads and rejects bad checksum keys, a missing name, non-hex chunks, and invalid debug_id, the same as before.

via BYK.

--

View Junior Session [Sentry]