@celigo/api-specs 0.2.160 → 0.2.161

package/dist/stack.yml

@@ -223,6 +223,13 @@ paths:
         Updates a stack. Omitting the config object clears optional fields
         like `framework`. To rotate a server stack's system token, use
         `DELETE /v1/stacks/{_id}/systemToken` instead.
+
+        Send the secrets as a GET returned them. On a lambda stack, a
+        `lambda.secretAccessKey` of `******` keeps the stored secret, and a
+        body without `secretAccessKey` is refused with 422 ("secretAccessKey
+        is not provided for the stack of type lambda."). On a server stack, a
+        PUT ignores `server.systemToken`, whether the body omits it, masks it
+        or carries another value.
       operationId: updateStack
       tags:
         - Stacks
@@ -289,7 +296,8 @@ paths:
       x-celigo-ai-guidance:
         - |-
           - You can update `name`, `framework`, and the config object for the active `type`.
-          - Secrets are write-only: provide a new secret value in the request to replace it; responses return masked values.
+          - Secrets are write-only, and responses return them masked. On a lambda stack, send a new `secretAccessKey` to replace the stored one, or the `******` mask a GET returned to keep it; leaving it out is refused with 422.
+          - On a server stack, a PUT can't change `server.systemToken`; rotate it with `DELETE /v1/stacks/{_id}/systemToken`.
     delete:
       x-internal: false
       summary: Delete a stack
@@ -1278,7 +1286,8 @@ components:
                 System token for authenticating with the server stack.
                 Always masked as "******" in standard responses. Use the
                 dedicated `/stacks/{_id}/systemToken` endpoint to retrieve
-                the actual value.
+                the actual value. A PUT ignores this field whatever it
+                carries; `DELETE /stacks/{_id}/systemToken` rotates it.
               examples:
                 - '******'
         lambda:
@@ -1483,7 +1492,7 @@ components:
           x-celigo-ai-guidance:
             - |-
               Required when `type` is "server".
-              The system token is auto-generated on creation and cannot be set directly.
+              The system token is auto-generated on creation and cannot be set directly: a PUT ignores any `systemToken` it carries.
           required:
             - hostURI
           properties:
@@ -1513,7 +1522,10 @@ components:
             secretAccessKey:
               type: string
               maxLength: 511
-              description: AWS secret access key. Write-only — responses mask it as "******".
+              description: |-
+                AWS secret access key. Write-only — responses mask it as "******".
+                On a PUT, the mask sent back keeps the stored secret, and leaving
+                the field out is refused with 422.
               examples:
                 - wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY
             awsRegion:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@celigo/api-specs",
-  "version": "0.2.160",
+  "version": "0.2.161",
   "private": false,
   "description": "Public OpenAPI bundles (dist/) and the celigo-cli lint schema pack (schemas.json).",
   "keywords": [

package/schemas.json

@@ -1,7 +1,7 @@
 {
 	"provenance": {
 		"repo": "celigo/integrator-api-specs",
-		"iasCommit": "2df59293",
+		"iasCommit": "fe21d3c2",
 		"generatedAt": "2026-10-22"
 	},
 	"roots": {