@celigo/api-specs 0.2.107 → 0.2.109

package/dist/api.yml

@@ -5634,14 +5634,20 @@ components:
           x-celigo-ui-override: 'Required by the connection form: a password for ftp/ftps, or a password or SSH key (authKey) for sftp (see the if/then/else rule below). Encoded here to mirror the form so builders produce complete, connectable configurations.'
           x-celigo-ai-guidance:
             - For ftp/ftps set password; for sftp set password or authKey. The connection cannot authenticate without credentials.
+            - For key-only sftp, omit password rather than filling it with a stand-in value — the form's required marker on Password does not apply once authKey is set, and the Help Center notes that servers enforcing a strict authentication order (public key first, then password) are not compatible with supplying both.
           examples:
             - s3cr3t-ftp-passw0rd
         authKey:
           type: string
-          description: |
+          description: |-
             SSH private key for SFTP key-based authentication (encrypted at rest; returned masked as `"******"`).
-            Only used when type is "sftp". Provide the full PEM-encoded private key.
-            Can be used alone or alongside a password for two-factor auth.
+            Only used when type is "sftp"; can be used alone or alongside a password. Must be an RSA (SSH-2) key
+            in PEM format, supplied whole from its BEGIN line to its END line — OpenSSH-format keys (first line
+            `-----BEGIN OPENSSH PRIVATE KEY-----`), passphrase-protected keys, SSH-1 keys and PuTTY `.ppk` files
+            are not supported and must be converted to an unencrypted PEM key first.
+          x-celigo-ai-guidance:
+            - Never take the key through chat; write a placeholder the user replaces in the connection editor. The matching public key must be in the server's authorized_keys for the username — Celigo holds only the private half.
+            - A key whose first line is `-----BEGIN OPENSSH PRIVATE KEY-----`, or one that asks for a passphrase, is outside the supported format per the Help Center; `ssh-keygen -p -m PEM -f <key>` rewrites it as PEM (`-N ""` also removes the passphrase).
           writeOnly: true
         usePassiveMode:
           type: boolean

package/dist/connection.yml

@@ -4745,14 +4745,20 @@ components:
           x-celigo-ui-override: 'Required by the connection form: a password for ftp/ftps, or a password or SSH key (authKey) for sftp (see the if/then/else rule below). Encoded here to mirror the form so builders produce complete, connectable configurations.'
           x-celigo-ai-guidance:
             - For ftp/ftps set password; for sftp set password or authKey. The connection cannot authenticate without credentials.
+            - For key-only sftp, omit password rather than filling it with a stand-in value — the form's required marker on Password does not apply once authKey is set, and the Help Center notes that servers enforcing a strict authentication order (public key first, then password) are not compatible with supplying both.
           examples:
             - s3cr3t-ftp-passw0rd
         authKey:
           type: string
-          description: |
+          description: |-
             SSH private key for SFTP key-based authentication (encrypted at rest; returned masked as `"******"`).
-            Only used when type is "sftp". Provide the full PEM-encoded private key.
-            Can be used alone or alongside a password for two-factor auth.
+            Only used when type is "sftp"; can be used alone or alongside a password. Must be an RSA (SSH-2) key
+            in PEM format, supplied whole from its BEGIN line to its END line — OpenSSH-format keys (first line
+            `-----BEGIN OPENSSH PRIVATE KEY-----`), passphrase-protected keys, SSH-1 keys and PuTTY `.ppk` files
+            are not supported and must be converted to an unencrypted PEM key first.
+          x-celigo-ai-guidance:
+            - Never take the key through chat; write a placeholder the user replaces in the connection editor. The matching public key must be in the server's authorized_keys for the username — Celigo holds only the private half.
+            - A key whose first line is `-----BEGIN OPENSSH PRIVATE KEY-----`, or one that asks for a passphrase, is outside the supported format per the Help Center; `ssh-keygen -p -m PEM -f <key>` rewrites it as PEM (`-N ""` also removes the passphrase).
           writeOnly: true
         usePassiveMode:
           type: boolean

package/dist/enduser.yml

@@ -2846,14 +2846,20 @@ components:
           x-celigo-ui-override: 'Required by the connection form: a password for ftp/ftps, or a password or SSH key (authKey) for sftp (see the if/then/else rule below). Encoded here to mirror the form so builders produce complete, connectable configurations.'
           x-celigo-ai-guidance:
             - For ftp/ftps set password; for sftp set password or authKey. The connection cannot authenticate without credentials.
+            - For key-only sftp, omit password rather than filling it with a stand-in value — the form's required marker on Password does not apply once authKey is set, and the Help Center notes that servers enforcing a strict authentication order (public key first, then password) are not compatible with supplying both.
           examples:
             - s3cr3t-ftp-passw0rd
         authKey:
           type: string
-          description: |
+          description: |-
             SSH private key for SFTP key-based authentication (encrypted at rest; returned masked as `"******"`).
-            Only used when type is "sftp". Provide the full PEM-encoded private key.
-            Can be used alone or alongside a password for two-factor auth.
+            Only used when type is "sftp"; can be used alone or alongside a password. Must be an RSA (SSH-2) key
+            in PEM format, supplied whole from its BEGIN line to its END line — OpenSSH-format keys (first line
+            `-----BEGIN OPENSSH PRIVATE KEY-----`), passphrase-protected keys, SSH-1 keys and PuTTY `.ppk` files
+            are not supported and must be converted to an unencrypted PEM key first.
+          x-celigo-ai-guidance:
+            - Never take the key through chat; write a placeholder the user replaces in the connection editor. The matching public key must be in the server's authorized_keys for the username — Celigo holds only the private half.
+            - A key whose first line is `-----BEGIN OPENSSH PRIVATE KEY-----`, or one that asks for a passphrase, is outside the supported format per the Help Center; `ssh-keygen -p -m PEM -f <key>` rewrites it as PEM (`-N ""` also removes the passphrase).
           writeOnly: true
         usePassiveMode:
           type: boolean

package/dist/export.yml

@@ -923,6 +923,22 @@ components:
         Not a webhook listener feature: on a `webhook` export the platform applies it only within each page, after
         the request has been paged, and only to adjacent rows — the field is not offered for listeners in the UI.
       x-celigo-ai-guidance:
+        - |-
+          Only adjacent rows with equal values merge — on an HTTP export and on a database export
+          alike, a row for key A, then key B, then key A again yields three groups. The platform's
+          `sortByFields` setting exists on file exports (`file.sortByFields`) and is ignored as a
+          top-level field on an HTTP or database export, so those sources must return same-key rows
+          already adjacent — on a database export the query's `ORDER BY` is what turns the three
+          groups into two.
+        - |-
+          Not accepted on a NetSuite export: the platform rejects it with `[invalid_config]
+          netsuite connection is not supported for groupByFields property`. A NetSuite saved
+          search groups through `netsuite.skipGrouping` (the UI's *Group rows*), keyed on the
+          record's internal id.
+        - |-
+          In `POST /v1/exports/preview` the grouped records are the `group` stage that follows
+          `parse` (mirrored in top-level `data`); the `parse` stage still holds the ungrouped
+          rows, so read `group` when it is present.
         - |-
           Never set this on a webhook listener to keep a request's rows together —
           the listener pages the request's records at ``pageSize`` FIRST and then
@@ -10320,12 +10336,28 @@ components:
         skipGrouping:
           type: boolean
           description: |-
-            When true, each result row is processed individually instead of being aggregated with
-            related rows. When false or omitted, related rows are grouped before processing.
+            When true, each saved-search result row becomes its own record. When false or omitted,
+            consecutive result rows that share the record's internal id are grouped into one record
+            shaped as an array of rows — the *Group rows* option in the UI.
           x-celigo-ai-guidance:
+            - |-
+              A saved search that returns several rows per record (a sublist or multi-select column)
+              is grouped by leaving this false or omitted: each record arrives as an array of its
+              rows, every row carrying the same internal id as the record's trace key, and the
+              preview reports no duplicate trace keys. With `true` the same search emits one object
+              per row and the repeated internal ids surface as duplicate trace keys
+              (`traceKeysDuplicate` in the preview). Grouping keys on the internal id only — a
+              different key needs a `preSavePage` hook, which sees one page at a time.
+            - |-
+              Celigo's documentation requires the saved search to be sorted by Internal ID for
+              grouping to apply.
+            - |-
+              The generic `groupByFields` setting is not the NetSuite mechanism: the platform rejects
+              it on a NetSuite export with `[invalid_config] netsuite connection is not supported for
+              groupByFields property`.
             - |-
               Set `true` for an ad-hoc RESTlet search (criteria and columns without a saved
-              search): grouping needs the search sorted by the grouping key, and an unsorted ad-hoc
+              search): grouping needs the search sorted by internal id, and an unsorted ad-hoc
               search fails with `[search_not_sorted]`.
             - 'For `exportSelect` / `refreshableSelect` dropdowns backed by a NetSuite RESTlet, set `skipGrouping: true`: the UI''s option mapper expects flat per-row results, and the platform otherwise wraps each row in its own grouping list (every option''s `label` then renders as `undefined`).'
         statsOnly:

package/dist/mcp-server.yml

@@ -4671,14 +4671,20 @@ components:
           x-celigo-ui-override: 'Required by the connection form: a password for ftp/ftps, or a password or SSH key (authKey) for sftp (see the if/then/else rule below). Encoded here to mirror the form so builders produce complete, connectable configurations.'
           x-celigo-ai-guidance:
             - For ftp/ftps set password; for sftp set password or authKey. The connection cannot authenticate without credentials.
+            - For key-only sftp, omit password rather than filling it with a stand-in value — the form's required marker on Password does not apply once authKey is set, and the Help Center notes that servers enforcing a strict authentication order (public key first, then password) are not compatible with supplying both.
           examples:
             - s3cr3t-ftp-passw0rd
         authKey:
           type: string
-          description: |
+          description: |-
             SSH private key for SFTP key-based authentication (encrypted at rest; returned masked as `"******"`).
-            Only used when type is "sftp". Provide the full PEM-encoded private key.
-            Can be used alone or alongside a password for two-factor auth.
+            Only used when type is "sftp"; can be used alone or alongside a password. Must be an RSA (SSH-2) key
+            in PEM format, supplied whole from its BEGIN line to its END line — OpenSSH-format keys (first line
+            `-----BEGIN OPENSSH PRIVATE KEY-----`), passphrase-protected keys, SSH-1 keys and PuTTY `.ppk` files
+            are not supported and must be converted to an unencrypted PEM key first.
+          x-celigo-ai-guidance:
+            - Never take the key through chat; write a placeholder the user replaces in the connection editor. The matching public key must be in the server's authorized_keys for the username — Celigo holds only the private half.
+            - A key whose first line is `-----BEGIN OPENSSH PRIVATE KEY-----`, or one that asks for a passphrase, is outside the supported format per the Help Center; `ssh-keygen -p -m PEM -f <key>` rewrites it as PEM (`-N ""` also removes the passphrase).
           writeOnly: true
         usePassiveMode:
           type: boolean

package/dist/tool.yml

@@ -8000,14 +8000,20 @@ components:
           x-celigo-ui-override: 'Required by the connection form: a password for ftp/ftps, or a password or SSH key (authKey) for sftp (see the if/then/else rule below). Encoded here to mirror the form so builders produce complete, connectable configurations.'
           x-celigo-ai-guidance:
             - For ftp/ftps set password; for sftp set password or authKey. The connection cannot authenticate without credentials.
+            - For key-only sftp, omit password rather than filling it with a stand-in value — the form's required marker on Password does not apply once authKey is set, and the Help Center notes that servers enforcing a strict authentication order (public key first, then password) are not compatible with supplying both.
           examples:
             - s3cr3t-ftp-passw0rd
         authKey:
           type: string
-          description: |
+          description: |-
             SSH private key for SFTP key-based authentication (encrypted at rest; returned masked as `"******"`).
-            Only used when type is "sftp". Provide the full PEM-encoded private key.
-            Can be used alone or alongside a password for two-factor auth.
+            Only used when type is "sftp"; can be used alone or alongside a password. Must be an RSA (SSH-2) key
+            in PEM format, supplied whole from its BEGIN line to its END line — OpenSSH-format keys (first line
+            `-----BEGIN OPENSSH PRIVATE KEY-----`), passphrase-protected keys, SSH-1 keys and PuTTY `.ppk` files
+            are not supported and must be converted to an unencrypted PEM key first.
+          x-celigo-ai-guidance:
+            - Never take the key through chat; write a placeholder the user replaces in the connection editor. The matching public key must be in the server's authorized_keys for the username — Celigo holds only the private half.
+            - A key whose first line is `-----BEGIN OPENSSH PRIVATE KEY-----`, or one that asks for a passphrase, is outside the supported format per the Help Center; `ssh-keygen -p -m PEM -f <key>` rewrites it as PEM (`-N ""` also removes the passphrase).
           writeOnly: true
         usePassiveMode:
           type: boolean
@@ -25439,6 +25445,22 @@ components:
         Not a webhook listener feature: on a `webhook` export the platform applies it only within each page, after
         the request has been paged, and only to adjacent rows — the field is not offered for listeners in the UI.
       x-celigo-ai-guidance:
+        - |-
+          Only adjacent rows with equal values merge — on an HTTP export and on a database export
+          alike, a row for key A, then key B, then key A again yields three groups. The platform's
+          `sortByFields` setting exists on file exports (`file.sortByFields`) and is ignored as a
+          top-level field on an HTTP or database export, so those sources must return same-key rows
+          already adjacent — on a database export the query's `ORDER BY` is what turns the three
+          groups into two.
+        - |-
+          Not accepted on a NetSuite export: the platform rejects it with `[invalid_config]
+          netsuite connection is not supported for groupByFields property`. A NetSuite saved
+          search groups through `netsuite.skipGrouping` (the UI's *Group rows*), keyed on the
+          record's internal id.
+        - |-
+          In `POST /v1/exports/preview` the grouped records are the `group` stage that follows
+          `parse` (mirrored in top-level `data`); the `parse` stage still holds the ungrouped
+          rows, so read `group` when it is present.
         - |-
           Never set this on a webhook listener to keep a request's rows together —
           the listener pages the request's records at ``pageSize`` FIRST and then
@@ -34419,12 +34441,28 @@ components:
         skipGrouping:
           type: boolean
           description: |-
-            When true, each result row is processed individually instead of being aggregated with
-            related rows. When false or omitted, related rows are grouped before processing.
+            When true, each saved-search result row becomes its own record. When false or omitted,
+            consecutive result rows that share the record's internal id are grouped into one record
+            shaped as an array of rows — the *Group rows* option in the UI.
           x-celigo-ai-guidance:
+            - |-
+              A saved search that returns several rows per record (a sublist or multi-select column)
+              is grouped by leaving this false or omitted: each record arrives as an array of its
+              rows, every row carrying the same internal id as the record's trace key, and the
+              preview reports no duplicate trace keys. With `true` the same search emits one object
+              per row and the repeated internal ids surface as duplicate trace keys
+              (`traceKeysDuplicate` in the preview). Grouping keys on the internal id only — a
+              different key needs a `preSavePage` hook, which sees one page at a time.
+            - |-
+              Celigo's documentation requires the saved search to be sorted by Internal ID for
+              grouping to apply.
+            - |-
+              The generic `groupByFields` setting is not the NetSuite mechanism: the platform rejects
+              it on a NetSuite export with `[invalid_config] netsuite connection is not supported for
+              groupByFields property`.
             - |-
               Set `true` for an ad-hoc RESTlet search (criteria and columns without a saved
-              search): grouping needs the search sorted by the grouping key, and an unsorted ad-hoc
+              search): grouping needs the search sorted by internal id, and an unsorted ad-hoc
               search fails with `[search_not_sorted]`.
             - 'For `exportSelect` / `refreshableSelect` dropdowns backed by a NetSuite RESTlet, set `skipGrouping: true`: the UI''s option mapper expects flat per-row results, and the platform otherwise wraps each row in its own grouping list (every option''s `label` then renders as `undefined`).'
         statsOnly:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@celigo/api-specs",
-  "version": "0.2.107",
+  "version": "0.2.109",
   "private": false,
   "description": "Public OpenAPI bundles (dist/) and the celigo-cli lint schema pack (schemas.json).",
   "keywords": [

package/schemas.json

@@ -1,7 +1,7 @@
 {
 	"provenance": {
 		"repo": "celigo/integrator-api-specs",
-		"iasCommit": "c1ef5efe",
+		"iasCommit": "9dfc0b9c",
 		"generatedAt": "2026-10-14"
 	},
 	"roots": {