@celigo/api-specs 0.2.160 → 0.2.162

package/dist/alert.yml

@@ -176,6 +176,8 @@ paths:
         Creates a proactive alert. Validates type, flow/integration, and duplicate
         constraints, then resolves `_recipientEmails` to `_recipientUserIds` and
         dual-writes the long-runtime threshold onto the related flow document(s).
+        A flow read doesn't return that threshold, but the flow's `lastModified`
+        moves, and the flow's own audit log gets no entry for it.
 
         Requires permission `put:alert:models`. Returns `403` when
         `ENABLE_PROACTIVE_ALERTS` is off. Response is always unpopulated.
@@ -474,7 +476,9 @@ paths:
       summary: Delete an alert
       description: |-
         Soft-deletes an alert and clears `__longRuntimeThresholdMinutes` on the
-        related flow document(s). Requires permission `put:alert:models`. Returns
+        related flow document(s), which moves each flow's `lastModified`. A
+        deleted alert reads 404 and has no recycle-bin entry. Requires permission
+        `put:alert:models`. Returns
         `403` when `ENABLE_PROACTIVE_ALERTS` is off.
       parameters:
         - name: _id

package/dist/api.yml

@@ -2967,7 +2967,13 @@ components:
       properties:
         id:
           type: string
-          description: Unique identifier for this router within the API.
+          maxLength: 36
+          pattern: ^[A-Za-z0-9_-]+$
+          description: |-
+            Unique identifier for this router within the API. Use at most 36 letters, digits,
+            underscores and hyphens: a longer id fails the save with 422 ("Router id is missing or
+            contains more than 36 characters or invalid characters. Please correct the router
+            id."), as on flow routers.
           examples:
             - router_001
             - validation_router

package/dist/flow.yml

@@ -4780,11 +4780,17 @@ components:
       properties:
         id:
           type: string
+          maxLength: 36
+          pattern: ^[A-Za-z0-9_-]+$
           description: |
             Unique identifier for this router within the flow.
 
             Used to reference this router from branches (`branches[].nextRouterId`)
             when chaining routers. Must be unique within the flow's router collection.
+            Use at most 36 letters, digits, underscores and hyphens: a longer id, or one
+            with a space or a period, fails the save with 422 ("Router id is missing or
+            contains more than 36 characters or invalid characters. Please correct the
+            router id.").
           examples:
             - router_001
             - customer_type_router

package/dist/integration.yml

@@ -340,8 +340,8 @@ paths:
         - Integrations
       description: |-
         Deletes an integration. The integration is soft-deleted and retained in the
-        recycle bin for 30 days before permanent removal. Delete the APIs and Tools it
-        contains, and remove its aliases that point at lookup caches, first.
+        recycle bin for 30 days before permanent removal. Delete the flows, syncs, APIs and
+        Tools it contains, and remove its aliases that point at lookup caches, first.
       parameters:
         - name: _id
           in: path
@@ -364,12 +364,26 @@ paths:
           description: |-
             The integration still contains resources that must be deleted first, APIs and Tools
             among them (`dependencies_not_deleted`, one entry per blocking resource), or one of its
-            `aliases[]` still points at a lookup cache.
+            `aliases[]` still points at a lookup cache. Flows and syncs block it the same way, with
+            one entry per flow or sync still in the integration ("flow <id> must be deleted before
+            you can delete integration <id>", "sync <id> must be deleted before you can delete
+            integration <id>"), and nothing is deleted.
           content:
             application/json:
               schema:
                 $ref: '#/components/schemas/Error'
               examples:
+                flows_remaining:
+                  summary: The integration still holds flows
+                  value:
+                    errors:
+                      - message: flow <flowId> must be deleted before you can delete integration <integrationId>
+                      - message: flow <secondFlowId> must be deleted before you can delete integration <integrationId>
+                syncs_remaining:
+                  summary: The integration still holds a sync
+                  value:
+                    errors:
+                      - message: sync <syncId> must be deleted before you can delete integration <integrationId>
                 lookup_cache_alias:
                   value:
                     errors:

package/dist/notification.yml

@@ -149,8 +149,9 @@ paths:
         '200':
           description: |-
             Per-item result array (parallel to the request). Each entry is
-            `{statusCode, errors?}` — `statusCode: 200` on success, or a non-200
-            status with an `errors[]` array on per-item failures. Overall HTTP is
+            `{statusCode, errors?}` — `statusCode` 201 for a created subscription
+            and 200 for one that already existed or was removed, or a 4xx status
+            with an `errors[]` array on per-item failures. Overall HTTP is
             still 200 even when individual items fail.
           content:
             application/json:
@@ -163,12 +164,13 @@ paths:
                     statusCode:
                       type: integer
                       description: |-
-                        Per-item outcome: 200 when the subscription was created,
-                        updated, or left unchanged; 422 when the referenced
-                        resource doesn't exist (details in `errors[]`).
+                        Per-item outcome: 201 when the subscription was created;
+                        200 when it already existed (subscribing again keeps the one
+                        record) or was removed; 422 when the referenced resource
+                        doesn't exist (details in `errors[]`).
                     errors:
                       type: array
-                      description: Per-item error details — present on non-200 results.
+                      description: Per-item error details — present on 4xx per-item failures, never on a 201 or 200.
                       items:
                         type: object
                         properties:
@@ -186,9 +188,9 @@ paths:
                               - Please ensure that connection with 000000000000000000000001 exists for creating the notification.
               examples:
                 allSuccess:
-                  summary: All items applied cleanly
+                  summary: A new subscription and one that already existed
                   value:
-                    - statusCode: 200
+                    - statusCode: 201
                     - statusCode: 200
                 mixed:
                   summary: One item referenced a non-existent connection

package/dist/recyclebin.yml

@@ -419,7 +419,9 @@ paths:
         Resources are auto-purged after 30 days. A purge removes only the
         named resource: purge the bin entries that still reference it first
         (a deleted flow references its integration and the exports and imports
-        it used).
+        it used). An integration's Celigo Storage system folder is the
+        exception: the folder and everything in it go to the bin with the
+        integration and are purged with it.
       parameters:
         - $ref: '#/components/parameters/ResourceType'
         - name: _id

package/dist/stack.yml

@@ -223,6 +223,13 @@ paths:
         Updates a stack. Omitting the config object clears optional fields
         like `framework`. To rotate a server stack's system token, use
         `DELETE /v1/stacks/{_id}/systemToken` instead.
+
+        Send the secrets as a GET returned them. On a lambda stack, a
+        `lambda.secretAccessKey` of `******` keeps the stored secret, and a
+        body without `secretAccessKey` is refused with 422 ("secretAccessKey
+        is not provided for the stack of type lambda."). On a server stack, a
+        PUT ignores `server.systemToken`, whether the body omits it, masks it
+        or carries another value.
       operationId: updateStack
       tags:
         - Stacks
@@ -289,7 +296,8 @@ paths:
       x-celigo-ai-guidance:
         - |-
           - You can update `name`, `framework`, and the config object for the active `type`.
-          - Secrets are write-only: provide a new secret value in the request to replace it; responses return masked values.
+          - Secrets are write-only, and responses return them masked. On a lambda stack, send a new `secretAccessKey` to replace the stored one, or the `******` mask a GET returned to keep it; leaving it out is refused with 422.
+          - On a server stack, a PUT can't change `server.systemToken`; rotate it with `DELETE /v1/stacks/{_id}/systemToken`.
     delete:
       x-internal: false
       summary: Delete a stack
@@ -1278,7 +1286,8 @@ components:
                 System token for authenticating with the server stack.
                 Always masked as "******" in standard responses. Use the
                 dedicated `/stacks/{_id}/systemToken` endpoint to retrieve
-                the actual value.
+                the actual value. A PUT ignores this field whatever it
+                carries; `DELETE /stacks/{_id}/systemToken` rotates it.
               examples:
                 - '******'
         lambda:
@@ -1483,7 +1492,7 @@ components:
           x-celigo-ai-guidance:
             - |-
               Required when `type` is "server".
-              The system token is auto-generated on creation and cannot be set directly.
+              The system token is auto-generated on creation and cannot be set directly: a PUT ignores any `systemToken` it carries.
           required:
             - hostURI
           properties:
@@ -1513,7 +1522,10 @@ components:
             secretAccessKey:
               type: string
               maxLength: 511
-              description: AWS secret access key. Write-only — responses mask it as "******".
+              description: |-
+                AWS secret access key. Write-only — responses mask it as "******".
+                On a PUT, the mask sent back keeps the stored secret, and leaving
+                the field out is refused with 422.
               examples:
                 - wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY
             awsRegion:

package/dist/tool.yml

@@ -6674,10 +6674,15 @@ components:
       properties:
         id:
           type: string
+          maxLength: 36
+          pattern: ^[A-Za-z0-9_-]+$
           description: |
             Unique identifier for this router within the tool.
 
             Used to reference this router from other routers' branch `nextRouterId`.
+            Use at most 36 letters, digits, underscores and hyphens: a longer id fails
+            the save with 422 ("Router id is missing or contains more than 36 characters
+            or invalid characters. Please correct the router id."), as on flow routers.
           examples:
             - router_001
             - validation_router

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@celigo/api-specs",
-  "version": "0.2.160",
+  "version": "0.2.162",
   "private": false,
   "description": "Public OpenAPI bundles (dist/) and the celigo-cli lint schema pack (schemas.json).",
   "keywords": [

package/schemas.json

@@ -1,7 +1,7 @@
 {
 	"provenance": {
 		"repo": "celigo/integrator-api-specs",
-		"iasCommit": "2df59293",
+		"iasCommit": "d6c87889",
 		"generatedAt": "2026-10-22"
 	},
 	"roots": {