@celigo/api-specs 0.2.38 → 0.2.40

package/dist/account.yml

@@ -103,7 +103,9 @@ paths:
       description: |-
         Returns every account that other users have shared with the current
         user. This is the inverse of `GET /v1/ashares`, which lists users
-        who have access to *your* account.
+        who have access to *your* account. Respond to a pending invitation
+        with `PUT /v1/ashares/{_id}/accept` or `PUT /v1/ashares/{_id}/dismiss`;
+        leave an account with `DELETE /v1/shared/ashares/{_id}`.
       responses:
         '200':
           description: Array of shared-account entries.
@@ -142,6 +144,47 @@ paths:
           description: No accounts are shared with the current user.
         '401':
           $ref: '#/components/responses/401-unauthorized'
+  /v1/shared/ashares/{_id}:
+    delete:
+      x-internal: false
+      operationId: deleteSharedAccount
+      tags:
+        - Account
+      summary: Leave a shared account
+      description: |-
+        Revokes the current user's own access to an account that was shared with
+        them by deleting the share record. Leaving an administrator share also
+        removes the matching shares in the owner's other environments. The only
+        share a user holds cannot be deleted unless that account requires SSO for
+        the user — dismiss it through `PUT /v1/ashares/{_id}/dismiss` instead. To
+        remove a user from *your* account, use `DELETE /v1/ashares/{_id}`.
+      parameters:
+        - name: _id
+          in: path
+          required: true
+          description: Share record id from `GET /v1/shared/ashares`, not a user or account id.
+          schema:
+            type: string
+            format: objectId
+            examples:
+              - 612345abcdef6789012345ab
+      responses:
+        '204':
+          description: Share record removed; the caller no longer has access to the account.
+        '401':
+          $ref: '#/components/responses/401-unauthorized'
+        '404':
+          description: No share with this id is addressed to the caller.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/Error'
+              examples:
+                notShared:
+                  value:
+                    errors:
+                      - code: invalid_ashare
+                        message: The account you are trying to access is not shared with you.
   /v1/shared/sshares:
     get:
       x-internal: false
@@ -152,7 +195,9 @@ paths:
       description: |-
         Returns stack-share records for the current user, including share
         status, the user who shared, and a stack summary. To list usable
-        stacks directly, use `GET /v1/shared/stacks`.
+        stacks directly, use `GET /v1/shared/stacks`. Respond to a pending
+        invitation with `PUT /v1/sshares/{_id}/accept` or
+        `PUT /v1/sshares/{_id}/dismiss`.
       responses:
         '200':
           description: Array of stack share entries.
@@ -179,6 +224,90 @@ paths:
           description: No stacks are shared with the current user.
         '401':
           $ref: '#/components/responses/401-unauthorized'
+  /v1/sshares/{_id}/accept:
+    put:
+      x-internal: false
+      operationId: acceptStackShareInvitation
+      tags:
+        - Account
+      summary: Accept a stack share invitation
+      description: |-
+        Accepts an invitation to use another user's stack on behalf of the caller.
+        The `_id` is a share record addressed *to* the caller — take it from
+        `GET /v1/shared/sshares`. Once accepted, the stack appears in
+        `GET /v1/shared/stacks` and can be referenced by the caller's hooks and
+        wrappers. Accepting a share that is already accepted changes nothing.
+      x-celigo-ai-guidance:
+        - Recipient-side operation. To share one of your own stacks, use `POST /v1/stacks/{_id}/invite` (Stacks API).
+      parameters:
+        - name: _id
+          in: path
+          required: true
+          description: Share record id from `GET /v1/shared/sshares`, not the stack id.
+          schema:
+            type: string
+            format: objectId
+            examples:
+              - 69f53622861a268851c836d0
+      responses:
+        '204':
+          description: Invitation accepted (or already accepted).
+        '401':
+          $ref: '#/components/responses/401-unauthorized'
+        '404':
+          description: No stack share with this id is addressed to the caller.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/Error'
+              examples:
+                notShared:
+                  value:
+                    errors:
+                      - code: invalid_ref
+                        message: SShare not found.
+  /v1/sshares/{_id}/dismiss:
+    put:
+      x-internal: false
+      operationId: dismissStackShareInvitation
+      tags:
+        - Account
+      summary: Dismiss a stack share invitation
+      description: |-
+        Declines an invitation to use another user's stack on behalf of the caller.
+        The `_id` is a share record addressed *to* the caller — take it from
+        `GET /v1/shared/sshares`. The owner can send the invitation again with
+        `PUT /v1/sshares/{_id}/reinvite`. Dismissing a share that is already
+        dismissed changes nothing.
+      x-celigo-ai-guidance:
+        - Recipient-side operation. As the stack owner, revoke a share with `DELETE /v1/sshares/{_id}` (Stacks API) instead.
+      parameters:
+        - name: _id
+          in: path
+          required: true
+          description: Share record id from `GET /v1/shared/sshares`, not the stack id.
+          schema:
+            type: string
+            format: objectId
+            examples:
+              - 69f53622861a268851c836d0
+      responses:
+        '204':
+          description: Invitation dismissed (or already dismissed).
+        '401':
+          $ref: '#/components/responses/401-unauthorized'
+        '404':
+          description: No stack share with this id is addressed to the caller.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/Error'
+              examples:
+                notShared:
+                  value:
+                    errors:
+                      - code: invalid_ref
+                        message: SShare not found.
   /v1/shared/stacks:
     get:
       x-internal: false
@@ -317,7 +446,34 @@ components:
           type: boolean
           description: |-
             When true, the current user has accepted the invitation.
-            Unaccepted shares appear in the list but cannot be acted on.
+            Unaccepted shares appear in the list but cannot be acted on —
+            accept one with `PUT /v1/ashares/{_id}/accept`.
+        dismissed:
+          type: boolean
+          description: |-
+            When true, the current user declined the invitation. Present only while
+            dismissed; the owner can reinvite, which clears it.
+        disabled:
+          type: boolean
+          description: |-
+            When true, the owner has suspended the current user's access to the
+            account. Present only while suspended.
+        accountSSORequired:
+          type: boolean
+          description: |-
+            When true, the owner requires the current user to sign in through SSO
+            for this account. Present only when the owner has an active SSO client;
+            reads true while the owner enforces SSO for every user, even if the
+            share itself does not carry the flag.
+        ssoSetupPending:
+          type: boolean
+          description: |-
+            When true, the current user has not yet completed SSO setup with this
+            owner, so the SSO-required access is not fully active. Present only
+            while pending.
+        isProductionAdmin:
+          type: boolean
+          description: When true, the share grants administrator access to the owner's production environment. Present only when it applies.
         accessLevel:
           type: string
           description: |-
@@ -330,10 +486,12 @@ components:
             - administrator
             - manage
             - monitor
+            - none
           x-enumDescriptions:
             administrator: Full administration including user management and account settings
             manage: Create and edit integrations and resources, but not account settings or users
             monitor: Read-only view of integrations, flows, and errors
+            none: No account-wide access; recorded by SCIM provisioning when access comes only from integrationAccessLevel
         integrationAccessLevel:
           type: array
           description: |-
@@ -396,6 +554,46 @@ components:
           examples:
             - '2025-11-15T12:00:00.000Z'
           description: Timestamp when this share record was created.
+    Error:
+      type: object
+      description: Standard error response envelope returned by integrator.io APIs.
+      properties:
+        errors:
+          type: array
+          description: List of errors that occurred while processing the request.
+          items:
+            type: object
+            properties:
+              code:
+                oneOf:
+                  - type: string
+                  - type: integer
+                description: |-
+                  Machine-readable error code. Usually a string like
+                  `invalid_ref`, `missing_required_field`, or `unauthorized`;
+                  may be an **integer** when the error mirrors an upstream HTTP
+                  status (e.g. `500`) — most commonly returned by connection-ping
+                  and adaptor-proxy responses.
+              message:
+                type: string
+                description: Human-readable description of the error.
+              field:
+                type: string
+                description: |-
+                  Optional pointer to the document field that caused the error.
+                  Used by structural validation errors (`missing_required_field`,
+                  `invalid_ref`) to indicate which field is at fault
+                  (e.g. `_id`, `type`, `http.baseURI`).
+              source:
+                type: string
+                description: |-
+                  Optional origin layer for the error — e.g. `application` when
+                  the error came from the remote system the adaptor called,
+                  `connector` when the adaptor itself rejected the request.
+            required:
+              - message
+      required:
+        - errors
     StackShare:
       type: object
       description: |-

package/dist/agent.yml

@@ -754,6 +754,13 @@ components:
           description: Display name of the dependent resource.
           examples:
             - Import Orders to NetSuite
+        type:
+          type: string
+          description: |-
+            Sub-type of the dependent resource when its collection distinguishes one, such as
+            `stream` for a listener export. Only present for resource types that carry a `type`.
+          examples:
+            - stream
         paths:
           type: array
           description: |-

package/dist/ai-agent.yml

@@ -94,6 +94,16 @@ paths:
                             format:
                               type: json_schema
                               name: agent-response
+                              strict: false
+                              jsonSchema:
+                                type: object
+                                properties:
+                                  action:
+                                    type: string
+                                  draftBody:
+                                    type: string
+                                required:
+                                  - action
                             verbose: medium
                           tools:
                             - type: mcp
@@ -260,6 +270,16 @@ paths:
                           format:
                             type: json_schema
                             name: agent-response
+                            strict: false
+                            jsonSchema:
+                              type: object
+                              properties:
+                                action:
+                                  type: string
+                                draftBody:
+                                  type: string
+                              required:
+                                - action
                           verbose: medium
                         tools:
                           - type: mcp
@@ -941,18 +961,21 @@ components:
                     - medium
                     - high
                     - xhigh
+                    - max
                   x-enumDescriptions:
                     none: No additional reasoning effort.
                     minimal: Least reasoning effort for simple, straightforward tasks.
                     low: Light reasoning for moderately simple tasks.
                     medium: Balanced reasoning effort for typical tasks.
-                    high: Maximum reasoning effort for complex, multi-step tasks.
-                    xhigh: Highest reasoning effort for the most demanding, multi-step tasks.
+                    high: Heavy reasoning effort for complex, multi-step tasks.
+                    xhigh: Very high reasoning effort for the most demanding, multi-step tasks.
+                    max: Highest available reasoning effort, above xhigh.
                   description: How much reasoning effort the model should invest
                   x-celigo-ai-guidance:
                     - |-
                       How much reasoning effort the model should invest.
                       Reasoning- capable models only — see `reasoning` for the gating rule.
+                    - Any other value fails the save with 422 `enum` on `aiAgent.openai.reasoning.effort`.
                 summary:
                   type: string
                   enum:
@@ -1088,6 +1111,13 @@ components:
                         additionalproperties:
                           type: boolean
                           description: When true, the structured output may include properties beyond those defined in `properties`.
+                    schema:
+                      type: object
+                      readOnly: true
+                      additionalProperties: true
+                      description: |-
+                        Server-written copy of `jsonSchema`, returned whenever `jsonSchema` is set — on
+                        AI agent imports and on guardrail agents alike. Send `jsonSchema`, not this field.
                   if:
                     properties:
                       type:
@@ -1130,13 +1160,19 @@ components:
                       - web_search
                       - mcp
                       - image_generation
+                      - code_execution
                       - tool
                     x-enumDescriptions:
                       web_search: Search the web for real-time information.
                       mcp: Connect to an MCP server for additional external tools.
                       image_generation: Generate images using an AI image model.
+                      code_execution: 'Enable OpenAI''s built-in code-execution tool; carries no configuration block, send `{type: code_execution}` only'
                       tool: Reference a reusable Celigo Tool resource.
-                    description: Type of tool.
+                    description: |-
+                      Type of tool. Every type except `code_execution` is configured through the
+                      sibling object of the same name; OpenAI spells this one `code_execution`, while
+                      the Gemini and Anthropic overrides spell theirs `codeExecution` — the other spelling
+                      fails with 422 `enum`.
                   webSearch:
                     type: object
                     description: Web search configuration (empty object to enable)
@@ -1470,15 +1506,19 @@ components:
                               - googleSearch
                               - urlContext
                               - fileSearch
+                              - codeExecution
                               - mcp
                               - tool
                             x-enumDescriptions:
                               googleSearch: Use Google Search for real-time information grounding.
                               urlContext: Retrieve and use content from specified URLs.
                               fileSearch: Search through previously uploaded files.
+                              codeExecution: 'Enable Gemini''s built-in code-execution tool; carries no configuration block, send `{type: codeExecution}` only'
                               mcp: Connect to an MCP server for additional external tools.
                               tool: Reference a reusable Celigo Tool resource.
-                            description: Type of Gemini tool.
+                            description: |-
+                              Type of Gemini tool. `codeExecution` is the Gemini spelling — `code_execution`
+                              fails with 422 `enum`.
                           googleSearch:
                             type: object
                             description: Google Search configuration (empty object to enable)
@@ -1810,11 +1850,15 @@ components:
                               - tool
                               - mcp
                               - webSearch
+                              - codeExecution
                             x-enumDescriptions:
                               tool: Reference a reusable Celigo Tool resource.
                               mcp: Connect to an MCP server for additional external tools.
                               webSearch: Search the web for real-time information.
-                            description: Type of Claude tool.
+                              codeExecution: 'Enable Anthropic''s built-in code-execution tool; carries no configuration block, send `{type: codeExecution}` only'
+                            description: |-
+                              Type of Claude tool. `codeExecution` is the Anthropic spelling — `code_execution`
+                              fails with 422 `enum`.
                           tool:
                             type: object
                             description: Reference to a Celigo Tool resource, used when type is "tool".
@@ -1862,9 +1906,43 @@ components:
                                 description: Connection to the MCP server.
                               allowedTools:
                                 type: array
-                                description: Specific tools to allow from the MCP server (all if omitted).
+                                description: |-
+                                  Specific tools to allow from the MCP server (all if omitted). Each
+                                  entry is either a plain tool name or an object carrying display
+                                  metadata — same contract as the OpenAI and Gemini `allowedTools`.
                                 items:
-                                  type: string
+                                  oneOf:
+                                    - title: name
+                                      type: string
+                                      description: Tool name as exposed by the MCP server.
+                                    - title: tool
+                                      type: object
+                                      required:
+                                        - name
+                                      properties:
+                                        name:
+                                          type: string
+                                          maxLength: 256
+                                          description: Tool name as exposed by the MCP server.
+                                        title:
+                                          type: string
+                                          maxLength: 300
+                                          description: Display title shown for the tool.
+                                        description:
+                                          type: string
+                                          maxLength: 1000
+                                          description: Display description shown for the tool.
+                                x-celigo-ai-guidance:
+                                  - |-
+                                    Object entries accept only name/title/description — any other key
+                                    fails the save with 422 `invalid_field_value` ("unknown field(s): …"),
+                                    and an object without `name` fails with 422 `missing_required_field`
+                                    ("Expected field: name to be present.").
+                                examples:
+                                  - - hub_repo_search
+                                    - name: hub_repo_info
+                                      title: Repository info
+                                      description: Look up a repository by name
                           webSearch:
                             type: object
                             description: Web search configuration, used when type is "webSearch".
@@ -5251,9 +5329,6 @@ components:
         ignoreMissing:
           type: boolean
           description: When true, records that do not already exist in the destination are silently skipped. Rarely meaningful for AI agents; accepted for import-surface parity.
-        blob:
-          type: boolean
-          description: When true, the agent processes raw file content (blobs) rather than structured records.
         mockResponse:
           type: array
           description: |-
@@ -5291,9 +5366,6 @@ components:
               _headers:
                 type: object
                 description: Mock response headers.
-              blobKey:
-                type: string
-                description: Blob key returned by blob-mode agents.
     ResourceResponse:
       type: object
       description: Response
@@ -5508,6 +5580,11 @@ components:
         flat format (`aiAgent.model`, `aiAgent.modelOptions`, …) for the catalog
         providers. Omit `_connectionId` to use platform-managed credentials on a
         built-in provider; catalog providers need a BYOK connection to run.
+      x-celigo-ai-guidance:
+        - |-
+          AI agents process structured records only. Do not send the import-level `blob` or
+          `blobKeyPath` fields — either one fails the save with 422 `not_supported`
+          ("Field "blob" is not supported for this import type").
       required:
         - name
         - adaptorType
@@ -5725,6 +5802,13 @@ components:
           description: Display name of the dependent resource.
           examples:
             - Import Orders to NetSuite
+        type:
+          type: string
+          description: |-
+            Sub-type of the dependent resource when its collection distinguishes one, such as
+            `stream` for a listener export. Only present for resource types that carry a `type`.
+          examples:
+            - stream
         paths:
           type: array
           description: |-