@celigo/api-specs 0.2.106 → 0.2.108

package/dist/api.yml

@@ -5634,14 +5634,20 @@ components:
           x-celigo-ui-override: 'Required by the connection form: a password for ftp/ftps, or a password or SSH key (authKey) for sftp (see the if/then/else rule below). Encoded here to mirror the form so builders produce complete, connectable configurations.'
           x-celigo-ai-guidance:
             - For ftp/ftps set password; for sftp set password or authKey. The connection cannot authenticate without credentials.
+            - For key-only sftp, omit password rather than filling it with a stand-in value — the form's required marker on Password does not apply once authKey is set, and the Help Center notes that servers enforcing a strict authentication order (public key first, then password) are not compatible with supplying both.
           examples:
             - s3cr3t-ftp-passw0rd
         authKey:
           type: string
-          description: |
+          description: |-
             SSH private key for SFTP key-based authentication (encrypted at rest; returned masked as `"******"`).
-            Only used when type is "sftp". Provide the full PEM-encoded private key.
-            Can be used alone or alongside a password for two-factor auth.
+            Only used when type is "sftp"; can be used alone or alongside a password. Must be an RSA (SSH-2) key
+            in PEM format, supplied whole from its BEGIN line to its END line — OpenSSH-format keys (first line
+            `-----BEGIN OPENSSH PRIVATE KEY-----`), passphrase-protected keys, SSH-1 keys and PuTTY `.ppk` files
+            are not supported and must be converted to an unencrypted PEM key first.
+          x-celigo-ai-guidance:
+            - Never take the key through chat; write a placeholder the user replaces in the connection editor. The matching public key must be in the server's authorized_keys for the username — Celigo holds only the private half.
+            - A key whose first line is `-----BEGIN OPENSSH PRIVATE KEY-----`, or one that asks for a passphrase, is outside the supported format per the Help Center; `ssh-keygen -p -m PEM -f <key>` rewrites it as PEM (`-N ""` also removes the passphrase).
           writeOnly: true
         usePassiveMode:
           type: boolean

package/dist/connection.yml

@@ -4745,14 +4745,20 @@ components:
           x-celigo-ui-override: 'Required by the connection form: a password for ftp/ftps, or a password or SSH key (authKey) for sftp (see the if/then/else rule below). Encoded here to mirror the form so builders produce complete, connectable configurations.'
           x-celigo-ai-guidance:
             - For ftp/ftps set password; for sftp set password or authKey. The connection cannot authenticate without credentials.
+            - For key-only sftp, omit password rather than filling it with a stand-in value — the form's required marker on Password does not apply once authKey is set, and the Help Center notes that servers enforcing a strict authentication order (public key first, then password) are not compatible with supplying both.
           examples:
             - s3cr3t-ftp-passw0rd
         authKey:
           type: string
-          description: |
+          description: |-
             SSH private key for SFTP key-based authentication (encrypted at rest; returned masked as `"******"`).
-            Only used when type is "sftp". Provide the full PEM-encoded private key.
-            Can be used alone or alongside a password for two-factor auth.
+            Only used when type is "sftp"; can be used alone or alongside a password. Must be an RSA (SSH-2) key
+            in PEM format, supplied whole from its BEGIN line to its END line — OpenSSH-format keys (first line
+            `-----BEGIN OPENSSH PRIVATE KEY-----`), passphrase-protected keys, SSH-1 keys and PuTTY `.ppk` files
+            are not supported and must be converted to an unencrypted PEM key first.
+          x-celigo-ai-guidance:
+            - Never take the key through chat; write a placeholder the user replaces in the connection editor. The matching public key must be in the server's authorized_keys for the username — Celigo holds only the private half.
+            - A key whose first line is `-----BEGIN OPENSSH PRIVATE KEY-----`, or one that asks for a passphrase, is outside the supported format per the Help Center; `ssh-keygen -p -m PEM -f <key>` rewrites it as PEM (`-N ""` also removes the passphrase).
           writeOnly: true
         usePassiveMode:
           type: boolean

package/dist/enduser.yml

@@ -2846,14 +2846,20 @@ components:
           x-celigo-ui-override: 'Required by the connection form: a password for ftp/ftps, or a password or SSH key (authKey) for sftp (see the if/then/else rule below). Encoded here to mirror the form so builders produce complete, connectable configurations.'
           x-celigo-ai-guidance:
             - For ftp/ftps set password; for sftp set password or authKey. The connection cannot authenticate without credentials.
+            - For key-only sftp, omit password rather than filling it with a stand-in value — the form's required marker on Password does not apply once authKey is set, and the Help Center notes that servers enforcing a strict authentication order (public key first, then password) are not compatible with supplying both.
           examples:
             - s3cr3t-ftp-passw0rd
         authKey:
           type: string
-          description: |
+          description: |-
             SSH private key for SFTP key-based authentication (encrypted at rest; returned masked as `"******"`).
-            Only used when type is "sftp". Provide the full PEM-encoded private key.
-            Can be used alone or alongside a password for two-factor auth.
+            Only used when type is "sftp"; can be used alone or alongside a password. Must be an RSA (SSH-2) key
+            in PEM format, supplied whole from its BEGIN line to its END line — OpenSSH-format keys (first line
+            `-----BEGIN OPENSSH PRIVATE KEY-----`), passphrase-protected keys, SSH-1 keys and PuTTY `.ppk` files
+            are not supported and must be converted to an unencrypted PEM key first.
+          x-celigo-ai-guidance:
+            - Never take the key through chat; write a placeholder the user replaces in the connection editor. The matching public key must be in the server's authorized_keys for the username — Celigo holds only the private half.
+            - A key whose first line is `-----BEGIN OPENSSH PRIVATE KEY-----`, or one that asks for a passphrase, is outside the supported format per the Help Center; `ssh-keygen -p -m PEM -f <key>` rewrites it as PEM (`-N ""` also removes the passphrase).
           writeOnly: true
         usePassiveMode:
           type: boolean

package/dist/export.yml

@@ -10775,6 +10775,12 @@ components:
                       - F
                       - - PurchOrd
                     x-celigo-ai-guidance:
+                      - |-
+                        The incoming record is the Handlebars root here: write `{{poNumber}}`, not
+                        `{{record.poNumber}}`. The Flow Builder's step preview rejects the
+                        `record.`-rooted form with `handlebars_template_parse_error` ("poNumber" not
+                        defined in undefined) while a flow run still renders it — write the bare path
+                        so the criterion can be step-previewed.
                       - |-
                         A Handlebars path the incoming record does not carry fails the render with
                         `handlebars_template_parse_error` ("Failed to generate criteria.N.searchValue

package/dist/import.yml

@@ -3787,6 +3787,12 @@ components:
           description: |
             Number of records to process per batch. Controls how many records are sent
             to NetSuite in a single API call. Typical values: 50-200.
+          x-celigo-ai-guidance:
+            - |-
+              Batching applies to the record writes. The `internalIdLookup` searches for a
+              page of records are issued ahead of the writes and independently of `batchSize`,
+              so `batchSize: 1` does not make the existing-record lookup run one record at a
+              time.
         internalIdLookup:
           type: object
           description: |-
@@ -3805,11 +3811,14 @@ components:
                 record-field lookups (`custbody_*` / `custrecord_*` /
                 `custentity_*`), and the `anyof` operator that the simple form
                 doesn't cover.  When `expression` is set, `searchField` /
-                `operator` / `extract` are ignored.
-            - |-
-              Production usage:
-              `expression` is set on ~99.6% of active `internalIdLookup` blocks (55K imports),
-              so the expression form is the dominant pattern in the field.
+                `operator` / `extract` are ignored.  The expression form is the
+                common pattern in practice.
+            - |-
+              The lookup result is what identifies the target record; on `update` a source
+              field mapped to `internalid` is overridden by it. When the incoming record
+              already carries the NetSuite internal ID, point the lookup at that field
+              (simple form with `extract`, or an expression on the id field) rather than
+              removing the lookup.
           properties:
             extract:
               type: string

package/dist/mcp-server.yml

@@ -4671,14 +4671,20 @@ components:
           x-celigo-ui-override: 'Required by the connection form: a password for ftp/ftps, or a password or SSH key (authKey) for sftp (see the if/then/else rule below). Encoded here to mirror the form so builders produce complete, connectable configurations.'
           x-celigo-ai-guidance:
             - For ftp/ftps set password; for sftp set password or authKey. The connection cannot authenticate without credentials.
+            - For key-only sftp, omit password rather than filling it with a stand-in value — the form's required marker on Password does not apply once authKey is set, and the Help Center notes that servers enforcing a strict authentication order (public key first, then password) are not compatible with supplying both.
           examples:
             - s3cr3t-ftp-passw0rd
         authKey:
           type: string
-          description: |
+          description: |-
             SSH private key for SFTP key-based authentication (encrypted at rest; returned masked as `"******"`).
-            Only used when type is "sftp". Provide the full PEM-encoded private key.
-            Can be used alone or alongside a password for two-factor auth.
+            Only used when type is "sftp"; can be used alone or alongside a password. Must be an RSA (SSH-2) key
+            in PEM format, supplied whole from its BEGIN line to its END line — OpenSSH-format keys (first line
+            `-----BEGIN OPENSSH PRIVATE KEY-----`), passphrase-protected keys, SSH-1 keys and PuTTY `.ppk` files
+            are not supported and must be converted to an unencrypted PEM key first.
+          x-celigo-ai-guidance:
+            - Never take the key through chat; write a placeholder the user replaces in the connection editor. The matching public key must be in the server's authorized_keys for the username — Celigo holds only the private half.
+            - A key whose first line is `-----BEGIN OPENSSH PRIVATE KEY-----`, or one that asks for a passphrase, is outside the supported format per the Help Center; `ssh-keygen -p -m PEM -f <key>` rewrites it as PEM (`-N ""` also removes the passphrase).
           writeOnly: true
         usePassiveMode:
           type: boolean

package/dist/tool.yml

@@ -8000,14 +8000,20 @@ components:
           x-celigo-ui-override: 'Required by the connection form: a password for ftp/ftps, or a password or SSH key (authKey) for sftp (see the if/then/else rule below). Encoded here to mirror the form so builders produce complete, connectable configurations.'
           x-celigo-ai-guidance:
             - For ftp/ftps set password; for sftp set password or authKey. The connection cannot authenticate without credentials.
+            - For key-only sftp, omit password rather than filling it with a stand-in value — the form's required marker on Password does not apply once authKey is set, and the Help Center notes that servers enforcing a strict authentication order (public key first, then password) are not compatible with supplying both.
           examples:
             - s3cr3t-ftp-passw0rd
         authKey:
           type: string
-          description: |
+          description: |-
             SSH private key for SFTP key-based authentication (encrypted at rest; returned masked as `"******"`).
-            Only used when type is "sftp". Provide the full PEM-encoded private key.
-            Can be used alone or alongside a password for two-factor auth.
+            Only used when type is "sftp"; can be used alone or alongside a password. Must be an RSA (SSH-2) key
+            in PEM format, supplied whole from its BEGIN line to its END line — OpenSSH-format keys (first line
+            `-----BEGIN OPENSSH PRIVATE KEY-----`), passphrase-protected keys, SSH-1 keys and PuTTY `.ppk` files
+            are not supported and must be converted to an unencrypted PEM key first.
+          x-celigo-ai-guidance:
+            - Never take the key through chat; write a placeholder the user replaces in the connection editor. The matching public key must be in the server's authorized_keys for the username — Celigo holds only the private half.
+            - A key whose first line is `-----BEGIN OPENSSH PRIVATE KEY-----`, or one that asks for a passphrase, is outside the supported format per the Help Center; `ssh-keygen -p -m PEM -f <key>` rewrites it as PEM (`-N ""` also removes the passphrase).
           writeOnly: true
         usePassiveMode:
           type: boolean
@@ -15360,6 +15366,12 @@ components:
           description: |
             Number of records to process per batch. Controls how many records are sent
             to NetSuite in a single API call. Typical values: 50-200.
+          x-celigo-ai-guidance:
+            - |-
+              Batching applies to the record writes. The `internalIdLookup` searches for a
+              page of records are issued ahead of the writes and independently of `batchSize`,
+              so `batchSize: 1` does not make the existing-record lookup run one record at a
+              time.
         internalIdLookup:
           type: object
           description: |-
@@ -15378,11 +15390,14 @@ components:
                 record-field lookups (`custbody_*` / `custrecord_*` /
                 `custentity_*`), and the `anyof` operator that the simple form
                 doesn't cover.  When `expression` is set, `searchField` /
-                `operator` / `extract` are ignored.
-            - |-
-              Production usage:
-              `expression` is set on ~99.6% of active `internalIdLookup` blocks (55K imports),
-              so the expression form is the dominant pattern in the field.
+                `operator` / `extract` are ignored.  The expression form is the
+                common pattern in practice.
+            - |-
+              The lookup result is what identifies the target record; on `update` a source
+              field mapped to `internalid` is overridden by it. When the incoming record
+              already carries the NetSuite internal ID, point the lookup at that field
+              (simple form with `extract`, or an expression on the id field) rather than
+              removing the lookup.
           properties:
             extract:
               type: string
@@ -34865,6 +34880,12 @@ components:
                       - F
                       - - PurchOrd
                     x-celigo-ai-guidance:
+                      - |-
+                        The incoming record is the Handlebars root here: write `{{poNumber}}`, not
+                        `{{record.poNumber}}`. The Flow Builder's step preview rejects the
+                        `record.`-rooted form with `handlebars_template_parse_error` ("poNumber" not
+                        defined in undefined) while a flow run still renders it — write the bare path
+                        so the criterion can be step-previewed.
                       - |-
                         A Handlebars path the incoming record does not carry fails the render with
                         `handlebars_template_parse_error` ("Failed to generate criteria.N.searchValue

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@celigo/api-specs",
-  "version": "0.2.106",
+  "version": "0.2.108",
   "private": false,
   "description": "Public OpenAPI bundles (dist/) and the celigo-cli lint schema pack (schemas.json).",
   "keywords": [

package/schemas.json

@@ -1,8 +1,8 @@
 {
 	"provenance": {
 		"repo": "celigo/integrator-api-specs",
-		"iasCommit": "2ab2e845",
-		"generatedAt": "2026-10-13"
+		"iasCommit": "79679bbe",
+		"generatedAt": "2026-10-14"
 	},
 	"roots": {
 		"aiagent": 133,