@celigo/api-specs 0.2.116 → 0.2.118

package/dist/export.yml

@@ -1714,18 +1714,18 @@ components:
               ### Common implementations
 
               ```
-              "token": "3a7c4f8b2e9d1a5c6b3e7d9f2a1c5b8e"
+              "token": "3a7c4f8b2e9d1a5c6b3e7d9fEXAMPLE"
               ```
 
               ```
-              "token": "whsec_8fb2e91a5c6b3e7d9f2a1c5b8e3a7c4f"
+              "token": "whsec_8fb2e91a5c6b3e7dEXAMPLE"
               ```
 
               IMPORTANT: Never share this token in public repositories or documentation.
               Treat it as a sensitive credential similar to a password.
           examples:
             - verification_token_abcdef
-            - whsec_8fb2e91a5c6b3e7d9f2a1c5b8e3a7c4f
+            - whsec_8fb2e91a5c6b3e7dEXAMPLE
         algorithm:
           type: string
           description: Hashing algorithm used to validate HMAC signatures when `verify` is `hmac`. Must match the algorithm the webhook sender uses — a mismatch causes every request to be rejected. Use `sha256` unless the provider explicitly requires another value.
@@ -1866,19 +1866,19 @@ components:
               ### Common implementations
 
               ```
-              "key": "whsec_3a7c4f8b2e9d1a5c6b3e7d9f2a1c5b8e3a7c4f8b"
+              "key": "whsec_3a7c4f8b2e9d1a5c6b3e7dEXAMPLE"
               ```
 
               ```
-              "key": "sk_test_51LZIr9B9Y6YIwSKx8647589JKhdjs889KJsk389"
+              "key": "9d1a5c6b3e7d9f2a1c5b8e3aEXAMPLE"
               ```
 
               IMPORTANT: This key should be treated as a highly sensitive credential,
               similar to a private key or password. It should never be exposed publicly
               or logged in application logs.
           examples:
-            - whsec_3a7c4f8b2e9d1a5c6b3e7d9f2a1c5b8e3a7c4f8b
-            - sk_test_51LZIr9B9Y6YIwSKx8647589JKhdjs889KJsk389
+            - whsec_3a7c4f8b2e9d1a5c6b3e7dEXAMPLE
+            - 9d1a5c6b3e7d9f2a1c5b8e3aEXAMPLE
         header:
           type: string
           description: Name of the request header that carries the HMAC signature when `verify` is `hmac`. Must match the header name the webhook sender uses (header names are case-insensitive); requests without this header are rejected with a 401. Signature prefixes in the header value (such as `sha256=`) are handled automatically.
@@ -2104,12 +2104,9 @@ components:
 
               Example header:
               ```
-              Authorization: Basic d2ViaG9va191c2VyOndlYmhvb2tfcGFzc3dvcmQ=
+              Authorization: Basic base64(webhook_user:webhook_password)
               ```
 
-              Where "d2ViaG9va191c2VyOndlYmhvb2tfcGFzc3dvcmQ=" is the base64 encoding of
-              "webhook_user:webhook_password".
-
               ### Security considerations
 
               Basic Authentication:
@@ -2160,7 +2157,7 @@ components:
               Never share it in public repositories, documentation, or logs. Always use
               HTTPS for webhooks using Basic Authentication to prevent credential interception.
           examples:
-            - xC7!rTp2@bN9$mQ5
+            - xC7!rTp2@bN9$EXAMPLE
             - webhook_secure_pass_123
         successStatusCode:
           type: integer

package/dist/iclient.yml

@@ -3002,7 +3002,7 @@ components:
                       - Use this field to comply with specific OAuth 2.0 server requirements for token revocation.
                     - |-
                       ## EXAMPLES:
-                      - `Authorization: Basic Y2xpZW50SWQ6Y2xpZW50U2VjcmV0`
+                      - `Authorization: Basic base64(client_id:client_secret)`
                       - `Content-Type: application/x-www-form-urlencoded`
                       - `X-Custom-Header: customValue`
                     - |-
@@ -3072,7 +3072,7 @@ components:
               x-celigo-ai-guidance:
                 - |-
                   ## EXAMPLES:
-                  - `{"password":"celigorocks"}`
+                  - `{"password":"my-password-EXAMPLE"}`
                   - `{"token":"x7if4nkovhgr63ghp"}`
                 - |-
                   ## IMPORTANT NOTES:
@@ -4136,7 +4136,7 @@ components:
             - |-
               ## EXAMPLES:
               - eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c
-              - eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJleGFtcGxlLmNvbSIsInN1YiI6IjEyMzQ1Njc4OTAiLCJleHAiOjE2MjQ2MjQwMDB9.DQABCD1234abcd5678efgh9012ijkl3456mnop7890qrstuv
+              - eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJleGFtcGxlLmNvbSIsInN1YiI6IjEyMzQ1Njc4OTAiLCJleHAiOjE2MjQ2MjQwMDB9.EXAMPLEsignature
             - |-
               ## DEPENDENCY CHAIN:
               - Depends on the authentication mechanism generating the JWT.

package/dist/sync.yml

@@ -2547,6 +2547,11 @@ paths:
         Returns the catalog of applications that can be used as the **source** of a sync — the system
         a sync extracts records from. Use the returned `id` as the source application when building a
         sync, and `category` to group the options in a picker.
+
+        The list is the set of applications that offer object-based extraction (a browsable catalog of
+        tables/objects, no export resource needed); HTTP connectors join it as they are enabled, so read
+        it at build time rather than caching it. An application missing from the list can still feed a
+        sync through export-backed datasets — see `GET /v1/di/metadata/connections/{_connectionId}/datasets`.
       tags:
         - Syncs
       operationId: listSyncSources
@@ -2565,7 +2570,10 @@ paths:
                   properties:
                     id:
                       type: string
-                      description: Application identifier to use as the sync source.
+                      description: |-
+                        Application identifier to use as the sync source. For HTTP-connector-backed
+                        sources this is the connector's display name, identical to `displayName`
+                        (for example `Stripe`, `Loop Returns`), not a lowercase key.
                       examples:
                         - salesforce
                     category:
@@ -2621,7 +2629,7 @@ paths:
                       category: Sales & Marketing
                     - id: netsuite
                       category: Sales & Marketing
-                    - id: stripe
+                    - id: Stripe
                       category: HTTP Connector
                       displayName: Stripe
                       source: httpConnectorMetadata
@@ -2740,7 +2748,14 @@ paths:
                 properties:
                   datasets:
                     type: array
-                    description: Tables/objects the source application exposes. Present unless `type` is `exports`.
+                    description: |-
+                      Tables/objects the source application exposes. Present unless `type` is `exports`.
+                      Empty — with a `200`, not an error — when the connection offers no object-based
+                      extraction: an HTTP connector that `GET /v1/di/metadata/sources` does not list, an
+                      HTTP connection with no connector, or a connection on a listed connector whose API
+                      or version is not the one the sources entry names (`httpConnector._apiId` /
+                      `_versionId`). Such a connection feeds a sync only through export-backed datasets
+                      (`exports`).
                     items:
                       type: object
                       description: One syncable table/object in the source application.
@@ -3878,8 +3893,13 @@ components:
               format: objectId
               x-celigo-refModel: connections
               description: |-
-                Connection to the source application. The application must be one of the
-                supported sync sources returned by `GET /v1/di/metadata/sources`.
+                Connection to the source application. Any application can be the source; the
+                connection's dataset mode is read from
+                `GET /v1/di/metadata/connections/{_connectionId}/datasets`: a non-empty
+                `datasets` array is object mode, an empty one means the connection feeds the
+                sync through export-backed datasets (`isExport: true`) only — including a
+                connection on a listed HTTP connector whose API or version is not the one
+                `GET /v1/di/metadata/sources` names.
               examples:
                 - 6a2a95909e994395f3c2a4e6
         destination:
@@ -4063,9 +4083,14 @@ components:
               format: objectId
               x-celigo-refModel: connections
               description: |-
-                Connection to the source application. The application must be one of the
-                supported sync sources returned by `GET /v1/di/metadata/sources`. Omitting
-                it fails with `422 missing_source_connection`.
+                Connection to the source application. Any application can be the source; the
+                connection's dataset mode is read from
+                `GET /v1/di/metadata/connections/{_connectionId}/datasets`: a non-empty
+                `datasets` array is object mode, an empty one means the connection feeds the
+                sync through export-backed datasets (`isExport: true`) only — including a
+                connection on a listed HTTP connector whose API or version is not the one
+                `GET /v1/di/metadata/sources` names. Omitting it fails with
+                `422 missing_source_connection`.
               examples:
                 - 6a2a95909e994395f3c2a4e6
         destination:

package/dist/tool.yml

@@ -26365,18 +26365,18 @@ components:
               ### Common implementations
 
               ```
-              "token": "3a7c4f8b2e9d1a5c6b3e7d9f2a1c5b8e"
+              "token": "3a7c4f8b2e9d1a5c6b3e7d9fEXAMPLE"
               ```
 
               ```
-              "token": "whsec_8fb2e91a5c6b3e7d9f2a1c5b8e3a7c4f"
+              "token": "whsec_8fb2e91a5c6b3e7dEXAMPLE"
               ```
 
               IMPORTANT: Never share this token in public repositories or documentation.
               Treat it as a sensitive credential similar to a password.
           examples:
             - verification_token_abcdef
-            - whsec_8fb2e91a5c6b3e7d9f2a1c5b8e3a7c4f
+            - whsec_8fb2e91a5c6b3e7dEXAMPLE
         algorithm:
           type: string
           description: Hashing algorithm used to validate HMAC signatures when `verify` is `hmac`. Must match the algorithm the webhook sender uses — a mismatch causes every request to be rejected. Use `sha256` unless the provider explicitly requires another value.
@@ -26517,19 +26517,19 @@ components:
               ### Common implementations
 
               ```
-              "key": "whsec_3a7c4f8b2e9d1a5c6b3e7d9f2a1c5b8e3a7c4f8b"
+              "key": "whsec_3a7c4f8b2e9d1a5c6b3e7dEXAMPLE"
               ```
 
               ```
-              "key": "sk_test_51LZIr9B9Y6YIwSKx8647589JKhdjs889KJsk389"
+              "key": "9d1a5c6b3e7d9f2a1c5b8e3aEXAMPLE"
               ```
 
               IMPORTANT: This key should be treated as a highly sensitive credential,
               similar to a private key or password. It should never be exposed publicly
               or logged in application logs.
           examples:
-            - whsec_3a7c4f8b2e9d1a5c6b3e7d9f2a1c5b8e3a7c4f8b
-            - sk_test_51LZIr9B9Y6YIwSKx8647589JKhdjs889KJsk389
+            - whsec_3a7c4f8b2e9d1a5c6b3e7dEXAMPLE
+            - 9d1a5c6b3e7d9f2a1c5b8e3aEXAMPLE
         header:
           type: string
           description: Name of the request header that carries the HMAC signature when `verify` is `hmac`. Must match the header name the webhook sender uses (header names are case-insensitive); requests without this header are rejected with a 401. Signature prefixes in the header value (such as `sha256=`) are handled automatically.
@@ -26755,12 +26755,9 @@ components:
 
               Example header:
               ```
-              Authorization: Basic d2ViaG9va191c2VyOndlYmhvb2tfcGFzc3dvcmQ=
+              Authorization: Basic base64(webhook_user:webhook_password)
               ```
 
-              Where "d2ViaG9va191c2VyOndlYmhvb2tfcGFzc3dvcmQ=" is the base64 encoding of
-              "webhook_user:webhook_password".
-
               ### Security considerations
 
               Basic Authentication:
@@ -26811,7 +26808,7 @@ components:
               Never share it in public repositories, documentation, or logs. Always use
               HTTPS for webhooks using Basic Authentication to prevent credential interception.
           examples:
-            - xC7!rTp2@bN9$mQ5
+            - xC7!rTp2@bN9$EXAMPLE
             - webhook_secure_pass_123
         successStatusCode:
           type: integer

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@celigo/api-specs",
-  "version": "0.2.116",
+  "version": "0.2.118",
   "private": false,
   "description": "Public OpenAPI bundles (dist/) and the celigo-cli lint schema pack (schemas.json).",
   "keywords": [

package/schemas.json

@@ -1,8 +1,8 @@
 {
 	"provenance": {
 		"repo": "celigo/integrator-api-specs",
-		"iasCommit": "2cbeaf8b",
-		"generatedAt": "2026-10-15"
+		"iasCommit": "289007c3",
+		"generatedAt": "2026-10-16"
 	},
 	"roots": {
 		"aiagent": 133,