@celigo/api-specs 0.2.200 → 0.2.202

package/dist/alert.yml

@@ -513,6 +513,10 @@ paths:
 
         Requires permission to read the alert (`get:alert:model`). Returns `403`
         when `ENABLE_PROACTIVE_ALERTS` is off or the caller lacks access.
+
+        The history stays readable after the alert is deleted, even though the alert
+        itself then reads 404. The same entries also appear in the integration's audit
+        log (`GET /v1/integrations/{_id}/audit`).
       parameters:
         - name: _id
           in: path
@@ -604,6 +608,14 @@ paths:
                       description: Alert id.
                       examples:
                         - 674a1b2c3d4e5f6789012345
+                    resourceName:
+                      type: string
+                      description: |-
+                        Display name of the alert: `<type label> - <flow name>` for a flow-level
+                        alert, `<type label> - All flows (<integration name>)` for an
+                        integration-level alert.
+                      examples:
+                        - Long runtime - All flows (Shopify to NetSuite)
                     event:
                       type: string
                       description: Mutation event type.
@@ -664,26 +676,41 @@ paths:
                         properties:
                           fieldPath:
                             type: string
-                            description: Dot-notation path of the changed field.
+                            description: |-
+                              Dot-notation path of the changed field. A recipient change is reported
+                              as `recipients`, listing the recipients' email addresses instead of user
+                              ids.
                             examples:
-                              - longRuntime.thresholdMinutes
+                              - longRuntime
                           oldValue:
                             description: Previous value (absent on create).
                           newValue:
                             description: New value (absent on delete).
                     deletedInfo:
                       type: object
-                      description: Metadata about the deleted resource. Present on `delete` events.
+                      description: |-
+                        Metadata about the deleted alert. Once the alert is deleted, every entry in its
+                        history carries it, not only the `delete` entry.
                       properties:
                         name:
                           type: string
-                          description: Name of the resource at the time of deletion.
+                          description: Display name of the alert at the time of deletion.
+                          examples:
+                            - Long runtime - All flows (Shopify to NetSuite)
+                        _integrationId:
+                          type: string
+                          format: objectId
+                          x-celigo-refModel: integrations
+                          description: Integration the alert belonged to.
+                          examples:
+                            - 5e5eb06fdd83ed4f8206a4ea
               examples:
                 default:
                   value:
                     - _id: 69e38cb1a749d34a9732a270
                       resourceType: alert
                       _resourceId: 674a1b2c3d4e5f6789012345
+                      resourceName: Long runtime - All flows (Shopify to NetSuite)
                       source: api
                       event: update
                       time: '2026-04-18T13:52:49.729Z'
@@ -692,9 +719,11 @@ paths:
                         email: user@example.com
                         name: Jane Doe
                       fieldChanges:
-                        - fieldPath: longRuntime.thresholdMinutes
-                          oldValue: 30
-                          newValue: 45
+                        - fieldPath: longRuntime
+                          oldValue:
+                            thresholdMinutes: 30
+                          newValue:
+                            thresholdMinutes: 45
         '204':
           description: No audit entries exist for this alert.
         '400':

package/dist/api.yml

@@ -519,6 +519,7 @@ paths:
         | `/logging/mode` | Logging level for requests handled by this API |
         | `/logging/debugUntil` | End of a temporary full-debug capture window |
         | `/traceKeyTemplate` | Handlebars template that computes each request's trace key |
+        | `/failOnOfflineConnection` | Turn the offline-connection check on or off (boolean) |
 
         All other paths are rejected with `422`. This is the only way to change
         `logging` -- PUT silently ignores that field.
@@ -5748,6 +5749,12 @@ components:
         step's response is discarded after the call.
 
         `fields` and `lists` are plain arrays — exactly the shape GET returns.
+        Entries sent empty (`null`, `{}`, or every value `null`) are dropped on
+        save. Any other `fields` entry left with neither `extract` nor
+        `generate`, or `lists` entry with neither `generate` nor `fields` —
+        what is left of a wrapped or misspelled value such as
+        `"fields": {"type": [...]}` — fails the save with 422
+        `invalid_field_value`.
 
         Extract paths do NOT read the raw application response — the platform
         wraps every response in a canonical per-record envelope first, and
@@ -5804,10 +5811,10 @@ components:
           runs on top of it in a test run).
         - |-
           Send `fields` and `lists` as bare arrays, exactly as GET returns them.
-          Never wrap either in an object (e.g. `"fields": {"type": [...]}`): the
-          API does not reject that shape — it returns 200 and silently persists
-          `fields: [null]` / `lists: [{"fields": []}]`, erasing the step's
-          response mappings.
+          A wrapped value (e.g. `"fields": {"type": [...]}`), an empty object
+          (`"fields": {}`), or an entry holding only unknown keys fails the save
+          with 422 `invalid_field_value`, and the error's `field` names the array
+          (e.g. `pageProcessors[0].responseMapping.fields`).
         - |-
           responseMapping is fully replaced on PUT: omitting it resets the step
           to empty `{"fields": [], "lists": []}`. Always send the complete
@@ -6794,6 +6801,15 @@ components:
           description: When true, the API rejects all incoming requests.
           examples:
             - false
+        failOnOfflineConnection:
+          type: boolean
+          description: |-
+            When true, a call to a builder-mode API is refused before any step runs if a connection
+            the API uses is offline. Set to true on create when omitted. Present on responses only
+            when set: a PUT that omits it removes it, which turns the check off, and
+            `PATCH /v1/apis/{_id}` on `/failOnOfflineConnection` changes it on its own.
+          examples:
+            - true
         timeoutPeriod:
           type: integer
           minimum: 0
@@ -6801,6 +6817,9 @@ components:
           description: |-
             Request-timeout override in seconds (1–120). `0` is a sentinel meaning "use the
             120-second default" — the server rewrites it on write, so a stored value is never 0.
+            A call still running when the timeout passes answers 504 `api_timeout`. With
+            `failOnOfflineConnection` false or absent, a step whose connection is offline holds the
+            call until then.
           examples:
             - 120
             - 30
@@ -7652,7 +7671,14 @@ components:
             - /apis/v1/orders?status=open
         statusCode:
           type: integer
-          description: HTTP status code the API responded with.
+          description: |-
+            HTTP status code the API responded with. A call refused because
+            `failOnOfflineConnection` is true and a connection the API uses is offline is logged
+            with 500 and one `apiCall` step in `error` status; the caller got
+            `api_connection_offline` ("One or more connections used by this API are offline.
+            Contact the API publisher and try again later."). Neither that response nor the
+            step's log data names the connection: `GET /v1/apis/{_id}/connections` shows which
+            ones read `offline: true`. A call that ran past `timeoutPeriod` is logged with 504.
           examples:
             - 200
         traceKey:
@@ -10915,6 +10941,22 @@ components:
               an `auth.type` `oauth` connection: 422 invalid_field_update "Removing _iClientId is
               not allowed for oauth connections due to security reasons." — switch it to another
               iClient instead.
+        _tokenStoreId:
+          type: string
+          format: objectId
+          readOnly: true
+          description: |-
+            Token store holding the expiring Shopify access token that this connection shares with
+            the other connections of the same app and shop. Set only by the platform, and present
+            only when set; no API route reads the store itself. Sending the field on POST, even as
+            `null`, fails with 422 `token_store_id_not_writable`. On PUT or PATCH only a value
+            different from the stored one fails the same way (any id, on a connection that has
+            none), so sending it back unchanged or omitting it is accepted.
+          x-celigo-ai-guidance:
+            - |-
+              When creating a connection from another connection's GET response, drop
+              `http._tokenStoreId` from the body: a POST that carries it with any value, `null`
+              included, fails with 422 `token_store_id_not_writable`.
         _httpConnectorId:
           type: string
           format: objectId

package/dist/audit.yml

@@ -104,7 +104,6 @@ paths:
               - import
               - integration
               - lookupcache
-              - mcpoauthprovider
               - mcpserver
               - networkpolicy
               - notification
@@ -142,10 +141,9 @@ paths:
               import: Import resource for writing data to a destination system.
               integration: Integration workspace resource.
               lookupcache: Lookup cache resource for in-memory key-value stores.
-              mcpoauthprovider: MCP OAuth provider resource.
               mcpserver: MCP server resource for AI agent tool hosting.
               networkpolicy: Network policy resource (IP allow/deny lists).
-              notification: Notification subscription resource.
+              notification: Notification subscription resource. Filtering on `alert` also returns these entries.
               revision: Revision snapshot resource for version control.
               role: End-user role resource.
               script: Script resource for custom JavaScript hooks.
@@ -547,7 +545,6 @@ paths:
               - import
               - integration
               - lookupcache
-              - mcpoauthprovider
               - mcpserver
               - notification
               - revision
@@ -582,9 +579,8 @@ paths:
               import: Import resource for writing data to a destination system.
               integration: Integration workspace resource.
               lookupcache: Lookup cache resource for in-memory key-value stores.
-              mcpoauthprovider: MCP OAuth provider resource.
               mcpserver: MCP server resource for AI agent tool hosting.
-              notification: Notification subscription resource.
+              notification: Notification subscription resource. Filtering on `alert` also returns these entries.
               revision: Revision snapshot resource for version control.
               role: End-user role resource.
               script: Script resource for custom JavaScript hooks.
@@ -822,7 +818,6 @@ paths:
               - imports
               - integrations
               - lookupcaches
-              - mcpoauthproviders
               - mcpservers
               - networkpolicies
               - revisions
@@ -850,9 +845,8 @@ paths:
               iclients: iClient shared credential resources.
               idpconfigs: End-user identity provider configuration resources.
               imports: Import resources.
-              integrations: Integration workspace resources.
+              integrations: Integration workspace resources. The history also includes the alerts set on the integration or its flows, deleted ones too.
               lookupcaches: Lookup cache resources.
-              mcpoauthproviders: MCP OAuth provider resources.
               mcpservers: MCP server resources.
               networkpolicies: Network policy resources.
               revisions: Revision snapshot resources.
@@ -1060,7 +1054,6 @@ paths:
               - imports
               - integrations
               - lookupcaches
-              - mcpoauthproviders
               - mcpservers
               - networkpolicies
               - revisions
@@ -1088,9 +1081,8 @@ paths:
               iclients: iClient shared credential resources.
               idpconfigs: End-user identity provider configuration resources.
               imports: Import resources.
-              integrations: Integration workspace resources.
+              integrations: Integration workspace resources. The history also includes the alerts set on the integration or its flows, deleted ones too.
               lookupcaches: Lookup cache resources.
-              mcpoauthproviders: MCP OAuth provider resources.
               mcpservers: MCP server resources.
               networkpolicies: Network policy resources.
               revisions: Revision snapshot resources.
@@ -1286,7 +1278,6 @@ paths:
               - imports
               - integrations
               - lookupcaches
-              - mcpoauthproviders
               - mcpservers
               - networkpolicies
               - revisions
@@ -1312,9 +1303,8 @@ paths:
               iclients: iClient shared credential resources.
               idpconfigs: End-user identity provider configuration resources.
               imports: Import resources.
-              integrations: Integration workspace resources.
+              integrations: Integration workspace resources. The export also includes the alerts set on the integration or its flows, deleted ones too.
               lookupcaches: Lookup cache resources.
-              mcpoauthproviders: MCP OAuth provider resources.
               mcpservers: MCP server resources.
               networkpolicies: Network policy resources.
               revisions: Revision snapshot resources.
@@ -1377,7 +1367,10 @@ components:
       properties:
         fieldPath:
           type: string
-          description: Dot-path to the changed field (e.g., `settings.foo.bar`).
+          description: |-
+            Dot-path to the changed field (e.g., `settings.foo.bar`). On `alert` entries a recipient
+            change is reported as `recipients`, with `oldValue` and `newValue` listing the recipients'
+            email addresses instead of user ids.
           examples:
             - http.auth.token.token
         oldValue:
@@ -1397,7 +1390,7 @@ components:
           type: string
           format: objectId
           x-celigo-refModel: integrations
-          description: Integration id context (for flow/sync-related events).
+          description: Integration id context (for flow/sync-related and alert events).
           examples:
             - 60a2c4e6f321d800129a1a3c
         _abstractFlowId:
@@ -1459,8 +1452,11 @@ components:
           type: string
           readOnly: true
           description: |-
-            Resource type that the audit entry applies to. `fileserver` appears only in
-            returned entries and cannot be used as a `resourceType` filter.
+            Resource type that the audit entry applies to. `fileserver` and
+            `mcpoauthprovider` appear only in returned entries and cannot be used as a
+            `resourceType` filter. MCP OAuth providers have no per-resource audit route
+            either, so their entries are read from `GET /v1/audit` without a
+            `resourceType` filter.
           enum:
             - accesstoken
             - agent
@@ -1542,6 +1538,15 @@ components:
           description: Resource id the audit entry applies to.
           examples:
             - 69497ca1b40d3e24522a7f3c
+        resourceName:
+          type: string
+          readOnly: true
+          description: |-
+            Display name of the alert, present on `alert` entries only: `<type label> - <flow name>`
+            for a flow-level alert, `<type label> - All flows (<integration name>)` for an
+            integration-level alert.
+          examples:
+            - Long runtime - All flows (Shopify to NetSuite)
         source:
           type: string
           readOnly: true
@@ -1692,7 +1697,6 @@ components:
               - import
               - integration
               - lookupcache
-              - mcpoauthprovider
               - mcpserver
               - networkpolicy
               - notification
@@ -1728,10 +1732,9 @@ components:
               import: Import resource for writing data to a destination system.
               integration: Integration workspace resource.
               lookupcache: Lookup cache resource for in-memory key-value stores.
-              mcpoauthprovider: MCP OAuth provider resource.
               mcpserver: MCP server resource for AI agent tool hosting.
               networkpolicy: Network policy resource (IP allow/deny lists).
-              notification: Notification subscription resource.
+              notification: Notification subscription resource. Filtering on `alert` also returns these entries.
               revision: Revision snapshot resource for version control.
               role: End-user role resource.
               script: Script resource for custom JavaScript hooks.
@@ -1915,7 +1918,6 @@ components:
             - import
             - integration
             - lookupcache
-            - mcpoauthprovider
             - mcpserver
             - networkpolicy
             - notification
@@ -1951,10 +1953,9 @@ components:
             import: Import resource for writing data to a destination system.
             integration: Integration workspace resource.
             lookupcache: Lookup cache resource for in-memory key-value stores.
-            mcpoauthprovider: MCP OAuth provider resource.
             mcpserver: MCP server resource for AI agent tool hosting.
             networkpolicy: Network policy resource (IP allow/deny lists).
-            notification: Notification subscription resource.
+            notification: Notification subscription resource. Filtering on `alert` also returns these entries.
             revision: Revision snapshot resource for version control.
             role: End-user role resource.
             script: Script resource for custom JavaScript hooks.

package/dist/connection.yml

@@ -6763,6 +6763,22 @@ components:
               an `auth.type` `oauth` connection: 422 invalid_field_update "Removing _iClientId is
               not allowed for oauth connections due to security reasons." — switch it to another
               iClient instead.
+        _tokenStoreId:
+          type: string
+          format: objectId
+          readOnly: true
+          description: |-
+            Token store holding the expiring Shopify access token that this connection shares with
+            the other connections of the same app and shop. Set only by the platform, and present
+            only when set; no API route reads the store itself. Sending the field on POST, even as
+            `null`, fails with 422 `token_store_id_not_writable`. On PUT or PATCH only a value
+            different from the stored one fails the same way (any id, on a connection that has
+            none), so sending it back unchanged or omitting it is accepted.
+          x-celigo-ai-guidance:
+            - |-
+              When creating a connection from another connection's GET response, drop
+              `http._tokenStoreId` from the body: a POST that carries it with any value, `null`
+              included, fails with 422 `token_store_id_not_writable`.
         _httpConnectorId:
           type: string
           format: objectId

package/dist/enduser.yml

@@ -4799,6 +4799,22 @@ components:
               an `auth.type` `oauth` connection: 422 invalid_field_update "Removing _iClientId is
               not allowed for oauth connections due to security reasons." — switch it to another
               iClient instead.
+        _tokenStoreId:
+          type: string
+          format: objectId
+          readOnly: true
+          description: |-
+            Token store holding the expiring Shopify access token that this connection shares with
+            the other connections of the same app and shop. Set only by the platform, and present
+            only when set; no API route reads the store itself. Sending the field on POST, even as
+            `null`, fails with 422 `token_store_id_not_writable`. On PUT or PATCH only a value
+            different from the stored one fails the same way (any id, on a connection that has
+            none), so sending it back unchanged or omitting it is accepted.
+          x-celigo-ai-guidance:
+            - |-
+              When creating a connection from another connection's GET response, drop
+              `http._tokenStoreId` from the body: a POST that carries it with any value, `null`
+              included, fails with 422 `token_store_id_not_writable`.
         _httpConnectorId:
           type: string
           format: objectId

package/dist/filedefinition.yml

@@ -13,8 +13,9 @@ info:
       They define how rows, columns, segments, and elements are parsed or generated,
       including delimiters, padding, and hierarchical rule structures.
 
-      EDI file definitions (X12 and EDIFACT formats) require a valid `globalId` that
-      maps to a known standard document definition, and may require an EDI license.
+      EDI file definitions (X12 and EDIFACT formats) carry a `globalId` that maps to a
+      known standard document definition; on an EDI-licensed account the server assigns
+      one when a create omits it.
 servers:
   - url: https://api.integrator.io
     description: Production (US / default region)
@@ -36,7 +37,7 @@ tags:
 
       Four formats are supported: `delimited` (CSV/TSV), `delimited/x12` (EDI X12),
       `delimited/edifact` (EDI EDIFACT), and `fixed` (fixed-width). EDI formats
-      require a `globalId` linking to a standard document definition.
+      carry a `globalId` linking to a standard document definition.
 
       ## File definition schema
 
@@ -204,9 +205,10 @@ paths:
           $ref: '#/components/responses/422-unprocessable-entity'
       x-celigo-ai-guidance:
         - |-
-          For EDI formats (`delimited/x12` or `delimited/edifact`), a valid `globalId`
-          is required when the account has an EDI license enabled. The `globalId` must
-          reference a known standard document definition.
+          For EDI formats (`delimited/x12` or `delimited/edifact`) on an EDI-licensed
+          account, the server assigns a `globalId` when the body omits one; a supplied
+          `globalId` must reference a known standard document definition, or the create
+          fails with 422 `invalid_global_id`.
         - |-
           For `format: fixed`, send `version`, `fixed.rowDelimiter` and `fixed.paddingChar`;
           without them the create fails with 422 and nothing is saved. Columns are read in
@@ -274,7 +276,8 @@ paths:
         Replaces the file definition with the provided configuration. This
         is a full replace -- include all fields you want to keep. `format`
         cannot be changed between `fixed` and `delimited` families after
-        creation, and `globalId` is immutable for EDI formats.
+        creation, and `globalId` is immutable for EDI formats: a PUT that sends a
+        different value, or omits it, keeps the stored id.
       operationId: updateFileDefinition
       tags:
         - File Definitions
@@ -1025,8 +1028,8 @@ components:
             - fixed
           x-enumDescriptions:
             delimited: Standard delimited files (CSV, TSV, etc.).
-            delimited/x12: EDI X12 format. Requires `globalId` when EDI license is enabled.
-            delimited/edifact: EDI EDIFACT format. Requires `globalId` when EDI license is enabled.
+            delimited/x12: EDI X12 format. Carries a `globalId`, assigned by the server when a create on an EDI-licensed account omits it.
+            delimited/edifact: EDI EDIFACT format. Carries a `globalId`, assigned by the server when a create on an EDI-licensed account omits it.
             fixed: Fixed-width positional format.
         documentType:
           type: string
@@ -1039,15 +1042,21 @@ components:
           description: EDI document type for acknowledgement documents.
         globalId:
           type: string
-          description: |-
-            Entry in the platform's registry of standard EDI document definitions that this
-            definition is built from. On an EDI-licensed account an X12 or EDIFACT create without
-            it fails with 422 `global_id_not_provided`, and one naming an id the registry doesn't
-            have fails with 422 `invalid_global_id`. No public route lists the registry, so copy the
-            `globalId` of an existing definition for the same standard document. Immutable after
-            creation.
+          description: |
+            Global identifier mapping to a known EDI standard document definition.
+
+            For EDI formats (`delimited/x12` or `delimited/edifact`) on an account
+            with an EDI license, a create that omits it gets one assigned from the
+            EDI catalog, and a supplied value must be a catalog entry (an unknown one
+            fails the create with 422 `invalid_global_id`). Immutable after creation:
+            a PUT that sends a different value, or none, keeps the stored id.
           examples:
-            - Generic-4010-850-PurchaseOrder
+            - 3c7a8f2e-1234-5678-9abc-def012345678
+          x-celigo-ai-guidance:
+            - |-
+              Send the catalog globalId of the document when you know it. When it is omitted the
+              server picks the id, and a description naming another document type did not change
+              the pick — an X12 create described as an 856 got the same id as a bare X12 create.
         rules:
           type: array
           x-celigo-agent: