@celigo/api-specs 0.2.39 → 0.2.40

package/dist/import.yml

@@ -113,6 +113,14 @@ paths:
                       - POST
                     requestMediaType: json
                     successMediaType: json
+              topic_publisher:
+                summary: Event Streams publisher to a topic (no connection)
+                value:
+                  name: Publish Order Events
+                  adaptorType: TopicImport
+                  topic:
+                    _topicId: 6ab1f48d38d7733b4599875c
+                    batchSize: 1000
       responses:
         '201':
           description: Import created successfully
@@ -139,6 +147,18 @@ paths:
                     apiIdentifier: if0626b560
                     createdAt: '2026-06-09T17:32:41.218Z'
                     lastModified: '2026-06-09T17:32:41.296Z'
+                topic_publisher:
+                  summary: Created Event Streams publisher — batchSize default filled in
+                  value:
+                    _id: 6ab1f58171fc8127d374d4a5
+                    name: Publish Order Events
+                    adaptorType: TopicImport
+                    topic:
+                      _topicId: 6ab1f48d38d7733b4599875c
+                      batchSize: 1000
+                    apiIdentifier: id6e6429c9
+                    createdAt: '2026-09-22T03:26:57.989Z'
+                    lastModified: '2026-09-22T03:26:58.155Z'
         '400':
           $ref: '#/components/responses/400-bad-request'
         '401':
@@ -3061,11 +3081,13 @@ components:
           type: string
           x-celigo-agent:
             - handlebars
+          x-celigo-ui-override: 'The FTP import form requires this once its "Use temp file" toggle is on (fieldDefinitions/resources/imports/ftp.js: ''ftp.inProgressFileName'' requiredWhen ftp.useTempFile is true; blob mode ''ftp.blobInProgressFileName'' requiredWhen ftp.blobUseTempFile is true). The toggles are form-only and are not saved — the form derives them from whether this field is set — so the API has no field to condition on and saves the import with or without the name.'
           description: |-
             Temporary name the file carries while its upload is in progress, preventing other systems
             from processing a partially transferred file; it is renamed to its final name once the
-            upload completes. Include a handlebars uniqueness token (e.g. {{timestamp}}) when one file
-            is written per flow run.
+            upload completes. Its presence is what the UI shows as "Use temp file while upload in
+            progress": set it to turn the temporary name on, omit it to turn it off. Include a
+            handlebars uniqueness token (e.g. {{timestamp}}) when one file is written per flow run.
           x-celigo-ai-guidance:
             - |-
               inProgressFileName is the designated temporary filename assigned to a file
@@ -8267,6 +8289,48 @@ components:
                       limits against the same downstream system but
                       use different credentials. Mutually exclusive
                       with `_id` on the same entry.
+    Topic:
+      type: object
+      description: |-
+        Publishing settings for an Event Streams publisher (`adaptorType: TopicImport`). Each
+        incoming record is published as a message to the topic; the platform delivers it
+        internally, so the import carries no `_connectionId`. Present when `adaptorType` is
+        `TopicImport`; the server fills `batchSize` with its default when it is omitted.
+      x-celigo-ai-guidance:
+        - |-
+          Sending this object without `adaptorType` is enough — the server infers `TopicImport`
+          from it. Never add a `_connectionId`: the server then validates the document as that
+          connection's adaptor instead (an http connection fails with 422 missing_required_field
+          "http subschema not defined").
+      properties:
+        _topicId:
+          type: string
+          format: objectId
+          x-celigo-refModel: topics
+          x-celigo-ui-override: 'Required by the Event Streams publisher form (fieldDefinitions/resources/imports/import.js: ''topic._topicId'' is required:true, validWhen isNot ''''). The API saves a TopicImport without it, so the requirement is encoded on the request schema to mirror the form and keep publishers bound to a topic.'
+          description: |-
+            Topic the records are published to. Create or look it up with `GET /v1/topics`; the
+            topic must belong to the same account.
+          x-celigo-ai-guidance:
+            - |-
+              An id that is not a topic in the account fails the save with 422 `invalid_ref`
+              ("<id> is not a valid topic._topicId").
+          examples:
+            - 6ab1f48d38d7733b4599875c
+        batchSize:
+          type: integer
+          minimum: 1
+          default: 1000
+          description: |-
+            Number of records published per request to the topic. Lower it when individual
+            messages are large; the default keeps publishing efficient for typical record sizes.
+          x-celigo-ai-guidance:
+            - |-
+              Zero and negative values fail the save with 422 `min` ("Path `topic.batchSize` (0) is
+              less than minimum allowed value (1)").
+          examples:
+            - 1000
+            - 100
     File:
       type: object
       description: |-
@@ -8701,16 +8765,43 @@ components:
           examples:
             - true
             - false
+        appendToExistingFile:
+          type: boolean
+          default: false
+          x-celigo-ui-override: 'Defaulted by the Azure Data Lake Storage Gen2 import form (fieldDefinitions/resources/imports/azuredatalakestoragegen2.js: ''file.appendToExistingFile'' defaultValue r?.file?.appendToExistingFile === true, shown only for file.type csv in records mode). When it is on, preSave clears file.compressionFormat, file.encrypt, file.pgp and the Content-Type header — append mode and compress/encrypt are exclusive on the form. The API stores the flag on any file import.'
+          description: |-
+            When true, an Azure Data Lake Storage Gen2 import (`assistant: azuredatalakestoragegen2`)
+            appends each run's CSV output to the file named by `file.fileName` instead of replacing
+            it. Appended content cannot be compressed or encrypted, so leave `compressionFormat`,
+            `encrypt` and `pgp` unset when this is on.
+          examples:
+            - true
+            - false
+        contentType:
+          type: string
+          x-celigo-agent:
+            - handlebars
+          description: |-
+            MIME type recorded on the file written to a cloud file provider such as Azure Data Lake
+            Storage Gen2. Accepts a Handlebars expression so the type can follow the record (e.g.
+            `{{record.mimeType}}`). Omit to let the destination assign its default.
+          examples:
+            - text/csv
+            - application/json
+            - '{{record.mimeType}}'
         directory:
           type: object
           required:
             - pathMode
           description: |-
             Structured destination location for cloud file-provider imports (Google Drive shared
-            drives, Box, Dropbox), replacing the flat path used by classic FTP/S3 destinations. Select
-            the location by folder ID or by a path relative to a configured storage root via pathMode.
-            For these cloud providers, directoryId mode addresses the folder by id alone — the flat
-            destination-path field is not consulted at runtime.
+            drives, Box, Dropbox, Google Cloud Storage, Azure Data Lake Storage Gen2), replacing the
+            flat path used by classic FTP/S3 destinations. Select the location by folder ID or by a
+            path relative to a configured storage root via pathMode. For the drive-style providers,
+            directoryId mode addresses the folder by id alone — the flat destination-path field is
+            not consulted at runtime. Google Cloud Storage puts the bucket in `storageRootId`;
+            Azure Data Lake Storage Gen2 puts the container in `name` and the directory prefix of the
+            file path in `http.relativeURI`.
           x-celigo-ai-guidance:
             - Save-time validation accepts any string for id without checking it against the provider — set it only from a folder ID the user supplied or the UI folder browser stored; never fabricate one. To address a folder by path instead, set pathMode to relativePath and put the path in the adaptor's flat path field.
           properties:
@@ -8737,16 +8828,21 @@ components:
               type: string
               description: |-
                 Display name of the folder identified by id, kept for readability in the UI; the
-                folder browser fills it when the location is picked visually.
+                folder browser fills it when the location is picked visually. For Azure Data Lake
+                Storage Gen2 it is the authoritative container name instead — the form saves the
+                container here and no id.
               examples:
                 - Invoices - Outbound
+                - invoices-outbound
             storageRootId:
               type: string
               description: |-
                 Provider-native ID of the storage root the relative path resolves against; set when
-                pathMode is relativePath. The provider's own ID, not a Celigo resource ID.
+                pathMode is relativePath. The provider's own ID, not a Celigo resource ID. For Google
+                Cloud Storage it is the bucket name.
               examples:
                 - 1qU1hvFarBFMb4-twqKm1rR5o_6j9vs9g
+                - erp-exports
             storageRootName:
               type: string
               description: Display name of the storage root identified by storageRootId, retained for reference in the UI.
@@ -9165,18 +9261,21 @@ components:
                     - medium
                     - high
                     - xhigh
+                    - max
                   x-enumDescriptions:
                     none: No additional reasoning effort.
                     minimal: Least reasoning effort for simple, straightforward tasks.
                     low: Light reasoning for moderately simple tasks.
                     medium: Balanced reasoning effort for typical tasks.
-                    high: Maximum reasoning effort for complex, multi-step tasks.
-                    xhigh: Highest reasoning effort for the most demanding, multi-step tasks.
+                    high: Heavy reasoning effort for complex, multi-step tasks.
+                    xhigh: Very high reasoning effort for the most demanding, multi-step tasks.
+                    max: Highest available reasoning effort, above xhigh.
                   description: How much reasoning effort the model should invest
                   x-celigo-ai-guidance:
                     - |-
                       How much reasoning effort the model should invest.
                       Reasoning- capable models only — see `reasoning` for the gating rule.
+                    - Any other value fails the save with 422 `enum` on `aiAgent.openai.reasoning.effort`.
                 summary:
                   type: string
                   enum:
@@ -9312,6 +9411,13 @@ components:
                         additionalproperties:
                           type: boolean
                           description: When true, the structured output may include properties beyond those defined in `properties`.
+                    schema:
+                      type: object
+                      readOnly: true
+                      additionalProperties: true
+                      description: |-
+                        Server-written copy of `jsonSchema`, returned whenever `jsonSchema` is set — on
+                        AI agent imports and on guardrail agents alike. Send `jsonSchema`, not this field.
                   if:
                     properties:
                       type:
@@ -9354,13 +9460,19 @@ components:
                       - web_search
                       - mcp
                       - image_generation
+                      - code_execution
                       - tool
                     x-enumDescriptions:
                       web_search: Search the web for real-time information.
                       mcp: Connect to an MCP server for additional external tools.
                       image_generation: Generate images using an AI image model.
+                      code_execution: 'Enable OpenAI''s built-in code-execution tool; carries no configuration block, send `{type: code_execution}` only'
                       tool: Reference a reusable Celigo Tool resource.
-                    description: Type of tool.
+                    description: |-
+                      Type of tool. Every type except `code_execution` is configured through the
+                      sibling object of the same name; OpenAI spells this one `code_execution`, while
+                      the Gemini and Anthropic overrides spell theirs `codeExecution` — the other spelling
+                      fails with 422 `enum`.
                   webSearch:
                     type: object
                     description: Web search configuration (empty object to enable)
@@ -9694,15 +9806,19 @@ components:
                               - googleSearch
                               - urlContext
                               - fileSearch
+                              - codeExecution
                               - mcp
                               - tool
                             x-enumDescriptions:
                               googleSearch: Use Google Search for real-time information grounding.
                               urlContext: Retrieve and use content from specified URLs.
                               fileSearch: Search through previously uploaded files.
+                              codeExecution: 'Enable Gemini''s built-in code-execution tool; carries no configuration block, send `{type: codeExecution}` only'
                               mcp: Connect to an MCP server for additional external tools.
                               tool: Reference a reusable Celigo Tool resource.
-                            description: Type of Gemini tool.
+                            description: |-
+                              Type of Gemini tool. `codeExecution` is the Gemini spelling — `code_execution`
+                              fails with 422 `enum`.
                           googleSearch:
                             type: object
                             description: Google Search configuration (empty object to enable)
@@ -10034,11 +10150,15 @@ components:
                               - tool
                               - mcp
                               - webSearch
+                              - codeExecution
                             x-enumDescriptions:
                               tool: Reference a reusable Celigo Tool resource.
                               mcp: Connect to an MCP server for additional external tools.
                               webSearch: Search the web for real-time information.
-                            description: Type of Claude tool.
+                              codeExecution: 'Enable Anthropic''s built-in code-execution tool; carries no configuration block, send `{type: codeExecution}` only'
+                            description: |-
+                              Type of Claude tool. `codeExecution` is the Anthropic spelling — `code_execution`
+                              fails with 422 `enum`.
                           tool:
                             type: object
                             description: Reference to a Celigo Tool resource, used when type is "tool".
@@ -10086,9 +10206,43 @@ components:
                                 description: Connection to the MCP server.
                               allowedTools:
                                 type: array
-                                description: Specific tools to allow from the MCP server (all if omitted).
+                                description: |-
+                                  Specific tools to allow from the MCP server (all if omitted). Each
+                                  entry is either a plain tool name or an object carrying display
+                                  metadata — same contract as the OpenAI and Gemini `allowedTools`.
                                 items:
-                                  type: string
+                                  oneOf:
+                                    - title: name
+                                      type: string
+                                      description: Tool name as exposed by the MCP server.
+                                    - title: tool
+                                      type: object
+                                      required:
+                                        - name
+                                      properties:
+                                        name:
+                                          type: string
+                                          maxLength: 256
+                                          description: Tool name as exposed by the MCP server.
+                                        title:
+                                          type: string
+                                          maxLength: 300
+                                          description: Display title shown for the tool.
+                                        description:
+                                          type: string
+                                          maxLength: 1000
+                                          description: Display description shown for the tool.
+                                x-celigo-ai-guidance:
+                                  - |-
+                                    Object entries accept only name/title/description — any other key
+                                    fails the save with 422 `invalid_field_value` ("unknown field(s): …"),
+                                    and an object without `name` fails with 422 `missing_required_field`
+                                    ("Expected field: name to be present.").
+                                examples:
+                                  - - hub_repo_search
+                                    - name: hub_repo_info
+                                      title: Repository info
+                                      description: Look up a repository by name
                           webSearch:
                             type: object
                             description: Web search configuration, used when type is "webSearch".
@@ -10226,176 +10380,1098 @@ components:
           then:
             required:
               - model
-    GuardrailConfig:
+    GuardrailAiAgentConfig:
       type: object
-      description: |-
-        Configuration for GuardrailImport adaptor type.
+      description: |
+        LLM configuration for an `ai_agent` guardrail — which provider and model evaluate each
+        record, with instructions, parameter tuning, and output format. Guardrails never invoke
+        tools, so unlike an AI agent import no block here accepts a `tools` array; MCP `prompts`
+        and `resources` remain available. Providers come in two families with two configuration
+        formats:
 
-        Guardrails evaluate data flowing through integrations for safety and
-        compliance. The `type` field selects which check to apply, and the
-        corresponding sub-object (`aiAgent`, `pii`, or `moderation`) provides
-        the configuration.
+        - **Built-in providers** — each has its own configuration block.
+          - **openai**: OpenAI models (GPT-4.1, GPT-5, etc.). Configure via the `openai` object.
+          - **gemini**: Google Gemini models via the LiteLLM proxy. Configure via `litellm` with overrides in `litellm._overrides.gemini`.
+          - **anthropic**: Anthropic Claude models via the LiteLLM proxy. Configure via `litellm` with overrides in `litellm._overrides.anthropic`.
+        - **Catalog providers** — `mistral`, `xai`, `huggingface`, `deepseek`, `cohere`, `groq`. Added
+          as catalog data rather than platform code, they share one generic flat format:
+          `model`, `modelOptions`, `instructions`, `output`, and the `prompts` / `resources`
+          arrays directly on this object.
 
-        A `_connectionId` on the parent import is only needed for BYOK
-        `ai_agent` guardrails. In responses the server echoes the active type's
-        sub-object and applies the `confidenceThreshold` default; it also
-        returns inactive sibling sub-objects (e.g. `moderation: {categories: []}`
-        on a `pii` guardrail, or a populated `pii` left over from a type switch),
-        but only the active type's sub-object is meaningful. Legacy documents
-        may carry a server-written default `aiAgent` stub on `pii`/`moderation`
-        guardrails; current servers strip the inactive `aiAgent` on write.
+        A `_connectionId` on the parent import selects bring-your-own-key (BYOK)
+        credentials. Without one, built-in providers run on platform-managed
+        credentials; catalog providers have no platform-managed credentials, so they
+        save without a connection but cannot run until one is attached.
       x-celigo-ai-guidance:
         - |-
-          Guardrails are safety and compliance checks that can be applied
-          to data flowing through integrations.  Three mutually-exclusive
-          types are supported — see `type` below for the full decision
-          rule on which to pick:
-
-          - **pii**: Detect (and optionally mask) personally identifiable
-            information.  Local deterministic classifier; fixed enum of
-            entity types (`pii.entities`).
-          - **moderation**: Detect harmful / inappropriate / policy-
-            violating CONTENT.  Local deterministic classifier; fixed enum
-            of categories (`moderation.categories` — `sexual`, `hate`,
-            `harassment`, `self_harm`, `violence`, `illicit`, etc.).  Use
-            category names exactly as listed in the enum — e.g. `hate`
-            (not "hate speech"), `violence` (not "violent content").  Map
-            natural-language synonyms ("explicit" → `sexual`, "toxic" →
-            `harassment`, etc.) to the closest enum value rather than
-            falling back to `ai_agent`.
-          - **ai_agent**: LLM-evaluated judgement against custom
-            instructions.  Catch-all for intents that don't fit `pii` or
-            `moderation` — domain-specific compliance, business-policy
-            checks, data-quality assertions, etc.  Pick this LAST, not as
-            the default.
-        - |-
-          Prefer the cheaper / more deterministic types (`pii` > `moderation` >
-          `ai_agent`) whenever the brief's intent fits.
-        - Guardrail imports do not require a `_connectionId` (unless using BYOK for `ai_agent` type).
+          Do not send `tools` on any block. A non-empty array at `tools`, `openai.tools`,
+          `litellm._overrides.gemini.tools`, or `litellm._overrides.anthropic.tools` fails the
+          save with 422 `guardrail_tools_not_allowed` naming that path. Responses still echo
+          `openai.tools: []` on OpenAI guardrails; do not copy it back into a write.
+      required:
+        - provider
       properties:
-        type:
+        provider:
           type: string
           enum:
-            - ai_agent
-            - pii
-            - moderation
+            - openai
+            - gemini
+            - anthropic
+            - mistral
+            - xai
+            - huggingface
+            - deepseek
+            - cohere
+            - groq
           x-enumDescriptions:
-            ai_agent: Evaluate data using an AI model with custom instructions.
-            pii: Detect personally identifiable information in data fields.
-            moderation: Check content for harmful or inappropriate categories.
-          description: |-
-            The type of guardrail to apply. Each type requires its corresponding
-            sub-configuration object (`aiAgent`, `pii`, or `moderation`).
+            openai: Use OpenAI models via the OpenAI Responses API (built-in; `openai` block).
+            gemini: Use Google Gemini models via the LiteLLM proxy (built-in; `litellm` block).
+            anthropic: Use Anthropic Claude models via the LiteLLM proxy (built-in; `litellm` block).
+            mistral: Use Mistral models (catalog provider; generic flat format, BYOK).
+            xai: Use xAI Grok models (catalog provider; generic flat format, BYOK).
+            huggingface: Use Hugging Face inference endpoint models (catalog provider; generic flat format, BYOK).
+            deepseek: Use DeepSeek models (catalog provider; generic flat format, BYOK).
+            cohere: Use Cohere models (catalog provider; generic flat format, BYOK).
+            groq: Use Groq-hosted models (catalog provider; generic flat format, BYOK).
+          description: AI provider to use.
           x-celigo-ai-guidance:
             - |-
-              The type of guardrail to apply.
-              Pick exactly one — `pii` / `moderation` / `ai_agent` are mutually exclusive at
-              the type level (a brief that wants both runs as two guardrails in sequence,
-              not one).
-            - |-
-              ## How to choose
-
-              Apply these rules **in order** and pick the first match.  Do
-              NOT skip ahead to `ai_agent` just because the brief is in
-              natural language — `pii` and `moderation` are also expressed
-              as natural-language briefs.  The decision is about WHAT the
-              brief asks the guardrail to detect, not how the brief is
-              worded.
-
-              1. **`pii`** — pick this when the brief names ANY personally
-                 identifiable information, OR when the brief names entity
-                 categories (SSN, email, phone, credit card, address, name,
-                 passport, license, account number, etc.) that match
-                 `pii.entities`.  Examples that route here:
-                 "detect SSN and credit card numbers", "mask customer
-                 emails and phone numbers", "scan for PII".
-
-              2. **`moderation`** — pick this when the brief asks the
-                 guardrail to detect harmful, inappropriate, unsafe, or
-                 policy-violating CONTENT (as opposed to PII data fields)
-                 AND the intent maps to any value in `moderation.categories`
-                 (`sexual`, `hate`, `harassment`, `self_harm`, `violence`,
-                 `illicit`, etc.) — including via close synonyms.  Apply
-                 the synonym mapping liberally:
-                 - "explicit", "obscene", "vulgar", "profane",
-                   "inappropriate language", "swearing", "NSFW" → typically
-                   maps to `sexual` and/or `harassment`
-                 - "abusive", "insulting", "bullying", "toxic" → `harassment`
-                 - "hateful", "discriminatory", "racist", "sexist" → `hate`
-                 - "threatening", "intimidating" → `harassment_threatening`
-                   or `violence`
-                 - "graphic violence", "gore" → `violence_graphic`
-                 - "suicide", "self-injury" → `self_harm`
-                 - "drugs", "weapons", "illegal activity" → `illicit`
-                 Briefs like "screen email body for explicit language",
-                 "block toxic chat messages", "flag harassment in support
-                 tickets", "moderate user-generated content for unsafe
-                 material" all route to `moderation`.  When the brief uses
-                 a synonym, populate `moderation.categories` with the
-                 closest enum value(s) — do NOT invent new category
-                 strings; the enum is fixed.
-
-              3. **`ai_agent`** — pick this ONLY when the brief asks for
-                 judgement that doesn't fit `pii` or `moderation`.  Typical
-                 triggers: domain-specific compliance checks (HIPAA / SOX
-                 rule evaluation), business-policy validation (price
-                 bounds, approval thresholds), data-quality assertions
-                 (required fields populated, values plausible), or any
-                 "evaluate against these custom rules" framing where the
-                 rules are domain-specific and have no `pii.entities` /
-                 `moderation.categories` analogue.  If you can map the
-                 brief's intent to a moderation category (even via a
-                 synonym above), use `moderation` instead — `ai_agent` is
-                 the catch-all, not the default.
-
-              Tie-breaker for borderline cases: prefer the more specific
-              type (`pii` > `moderation` > `ai_agent`).  `pii` and
-              `moderation` are local deterministic classifiers with fixed
-              enums — they're cheaper, faster, and more predictable than
-              `ai_agent` (which calls a real LLM per record).  Default to
-              the cheaper path whenever the intent fits.
+              The provider decides the configuration format, and the server rejects a
+              mismatch with 422 `invalid_provider_config_format`: `openai` needs the
+              `openai` block, `gemini` and `anthropic` need the `litellm` block (Gemini- or
+              Claude-specific settings under `litellm._overrides`), and the catalog
+              providers (`mistral`, `xai`, `huggingface`, `deepseek`, `cohere`, `groq`) need the
+              generic flat format — `model` and `modelOptions` directly on this object,
+              never an `openai` or `litellm` block.
             - |-
-              ## Sub-configuration requirements (one per type)
-
-              - **ai_agent** requires the `aiAgent` sub-configuration.
-              - **pii** requires the `pii` sub-configuration with at least
-                one entity from `pii.entities`.
-              - **moderation** requires the `moderation` sub-configuration
-                with at least one category from `moderation.categories`.
-        confidenceThreshold:
-          type: number
-          minimum: 0
-          maximum: 1
-          default: 0.7
-          x-celigo-ui-override: Required by the guardrail form (confidenceThreshold is required:true once a type is selected, default 0.7). Encoded to mirror the form so builders produce connectable configurations.
+              Catalog providers are BYOK-only at run time: the guardrail saves without a
+              `_connectionId`, but its first run fails with 422 `invalid_request` ("No API
+              key configured for provider …"). Always attach an HTTP connection to the
+              vendor's API (token auth) when the provider is a catalog provider.
+        model:
+          type: string
           description: |-
-            Confidence threshold (0 to 1). Detections below this threshold are
-            ignored. Lower values catch more issues but increase false positives.
+            Model identifier for a catalog provider (generic flat format) — for example
+            `grok-4.6`. Built-in providers set the model inside their own block
+            (`openai.model`, `litellm.model`) instead.
           x-celigo-ai-guidance:
-            - Confidence threshold for guardrail detection (0 to 1).
             - |-
-              Only detections with confidence at or above this threshold will be flagged.
-              Lower values catch more potential issues but may increase false positives.
-          examples:
-            - 0.7
-            - 0.5
-            - 0.9
-        aiAgent:
+              Required for every catalog provider — omitting it or sending an empty string
+              fails the save with 422 `missing_required_field`.
+            - |-
+              Without a `_connectionId` on the parent import the model must be one the
+              catalog lists for the provider: an unknown id fails the save with 422
+              `model_not_found`, a listed-but-disabled id with 422 `model_disabled`. With a
+              `_connectionId` (BYOK) any model string saves — the server does not check it
+              against the catalog or the vendor.
+        modelOptions:
           type: object
           description: |-
-            AI agent check configuration; set when `type` is `ai_agent`. On
-            `pii`/`moderation` guardrails a legacy server-written stub may
-            appear here — it is inert, and current servers strip it on write.
-        pii:
-          type: object
-          required:
-            - entities
-          description: PII detection configuration. Required when `type` is `pii`.
-          x-celigo-ai-guidance:
-            - Configuration for PII (Personally Identifiable Information) detection.
-            - |-
-              Required when `guardrail.type` is "pii".
-              At least one entity type must be specified.
+            Model tuning for a catalog provider (generic flat format). Which keys, values, and
+            ranges are accepted is defined per catalog model and validated on save when the
+            model is a catalog entry.
+          properties:
+            maxOutputTokens:
+              type: number
+              description: Maximum number of tokens the model may generate.
+            temperature:
+              type: number
+              description: Sampling temperature.
+            topP:
+              type: number
+              description: Nucleus sampling threshold.
+            reasoning_effort:
+              type: string
+              enum:
+                - low
+                - medium
+                - high
+                - xhigh
+              x-enumDescriptions:
+                low: Minimal reasoning before answering.
+                medium: Moderate reasoning.
+                high: Extensive reasoning.
+                xhigh: Maximum reasoning.
+              description: Reasoning depth for models that expose it.
+          x-celigo-ai-guidance:
+            - |-
+              When the model is a catalog entry, the server validates this object against
+              that model's schema and fails the save with 422 `invalid_model_options`
+              naming the key: unknown keys are rejected, `reasoning_effort` must be one of
+              the enum values where the model accepts it at all (xAI's `grok-4.6` does;
+              DeepSeek's `deepseek-chat` rejects the key), and numeric bounds apply —
+              on `grok-4.6`, `temperature` ≤ 2, `topP` ≤ 1, `maxOutputTokens` ≥ 100.
+            - |-
+              With a `_connectionId` and a model the catalog does not list, the object is
+              passed through unvalidated — send only options the vendor's API accepts.
+        instructions:
+          type: string
+          description: |-
+            System prompt for a catalog provider (generic flat format). Built-in providers
+            set it inside their own block (`openai.instructions`,
+            `litellm._overrides.anthropic.systemInstruction`).
+        output:
+          type: object
+          description: |-
+            Output format for a catalog provider (generic flat format). Built-in providers
+            configure it inside their own block (`openai.output`, `litellm.responseFormat`).
+          properties:
+            format:
+              type: object
+              description: Controls the structure of the model's output.
+              properties:
+                type:
+                  type: string
+                  enum:
+                    - text
+                    - json_schema
+                  x-enumDescriptions:
+                    text: Free-form text.
+                    json_schema: Structured JSON conforming to `jsonSchema`.
+                  description: Output type.
+                  x-celigo-ai-guidance:
+                    - |-
+                      `blob` is not accepted here — the save fails with 422
+                      `unsupported_output_format` naming the model (verified on `grok-4.6`).
+                name:
+                  type: string
+                  description: Name of the JSON schema, for `json_schema` output.
+                strict:
+                  type: boolean
+                  description: When true, the model must conform exactly to `jsonSchema`.
+                jsonSchema:
+                  type: object
+                  additionalProperties: true
+                  description: JSON Schema the structured output must conform to, for `json_schema` output.
+            verbose:
+              type: string
+              description: Level of detail in the model's response, for models that expose it.
+        prompts:
+          type: array
+          description: |-
+            MCP prompt entries available to a catalog-provider guardrail (generic flat format).
+            Each entry references one MCP connection and the prompt names allowed from it.
+          items:
+            type: object
+            properties:
+              type:
+                type: string
+                enum:
+                  - mcp
+                x-enumDescriptions:
+                  mcp: Reference prompts exposed by an MCP server.
+                description: Type of prompt entry. Always "mcp".
+              mcp:
+                type: object
+                properties:
+                  _mcpConnectionId:
+                    type: string
+                    format: objectId
+                    x-celigo-refModel: connections
+                    description: Connection to the MCP server that exposes the prompts.
+                  allowedPrompts:
+                    type: array
+                    description: Prompt names the model may fetch from the server.
+                    items:
+                      type: string
+          x-celigo-ai-guidance:
+            - |-
+              An unknown `_mcpConnectionId` fails the save with 422 `invalid_ref` naming
+              the array index.
+        resources:
+          $ref: '#/components/schemas/McpResources'
+        openai:
+          type: object
+          description: |
+            OpenAI-specific configuration. Used when `provider` is "openai".
+          required:
+            - model
+            - instructions
+          properties:
+            instructions:
+              type: string
+              maxLength: 1000000
+              description: |
+                System prompt that defines the check's behavior, goals, and constraints.
+              examples:
+                - You are a data validation agent. Check each record for completeness.
+              x-celigo-ui-override: Required by the AI agent configuration form (the model's system prompt). Encoded here to mirror the form so builders produce connectable configurations.
+            model:
+              type: string
+              description: OpenAI model identifier. Open string (not an enum) — model names change frequently.
+              examples:
+                - gpt-5.4
+                - gpt-5.4-pro
+                - gpt-5-mini
+                - gpt-5-nano
+                - gpt-4.1-mini
+                - gpt-4o
+              x-celigo-ui-override: Required by the AI agent configuration form. Encoded here to mirror the form so builders produce connectable configurations.
+              x-celigo-ai-guidance:
+                - |-
+                  With platform-managed credentials (no `_connectionId` on the parent
+                  import), the model must be one the platform hosts. The save does not
+                  check this — an unlisted model saves, and the guardrail's first run fails
+                  with 422 `invalid_model`, whose message lists the hosted models. A
+                  BYOK connection bypasses the hosted list and the model string is
+                  passed through to the provider as-is.
+            reasoning:
+              type: object
+              description: Controls depth of reasoning for complex tasks.
+              x-celigo-ai-guidance:
+                - |-
+                  Supported on reasoning-capable OpenAI models only (currently the GPT-5 family and the o-series).
+                  Setting `reasoning` on a non-reasoning model (e.g.
+                  `gpt-4.1-mini`) is rejected by the provider at runtime — omit the field on those models.
+              properties:
+                effort:
+                  type: string
+                  enum:
+                    - none
+                    - minimal
+                    - low
+                    - medium
+                    - high
+                    - xhigh
+                    - max
+                  x-enumDescriptions:
+                    none: No additional reasoning effort.
+                    minimal: Least reasoning effort for simple, straightforward tasks.
+                    low: Light reasoning for moderately simple tasks.
+                    medium: Balanced reasoning effort for typical tasks.
+                    high: Extensive reasoning effort for complex, multi-step tasks.
+                    xhigh: Extended reasoning effort beyond high for demanding tasks.
+                    max: Highest available reasoning effort.
+                  description: How much reasoning effort the model should invest
+                  x-celigo-ai-guidance:
+                    - |-
+                      How much reasoning effort the model should invest.
+                      Reasoning- capable models only — see `reasoning` for the gating rule.
+                summary:
+                  type: string
+                  enum:
+                    - concise
+                    - auto
+                    - detailed
+                  x-enumDescriptions:
+                    concise: Brief, high-level reasoning summary.
+                    auto: Let the model decide the appropriate level of detail.
+                    detailed: Comprehensive reasoning summary with full explanations.
+                  description: Level of detail in reasoning summaries
+                  x-celigo-ai-guidance:
+                    - |-
+                      Level of detail in reasoning summaries.
+                      Reasoning-capable models only — see `reasoning` for the gating rule.
+            temperature:
+              type: number
+              minimum: 0
+              maximum: 2
+              description: |
+                Sampling temperature. Higher values (e.g. 1.5) produce more creative output,
+                lower values (e.g. 0.2) produce more focused and deterministic output.
+            topP:
+              type: number
+              minimum: 0.1
+              maximum: 1
+              description: Nucleus sampling parameter
+            topLogprobs:
+              type: number
+              minimum: 0
+              maximum: 20
+              description: Number of most likely tokens to return log probabilities for at each output position.
+            maxOutputTokens:
+              type: number
+              minimum: 100
+              maximum: 128000
+              description: Maximum number of tokens in the model's response. Unlike an AI agent import, a guardrail does not receive a server-written value when this is omitted.
+            serviceTier:
+              type: string
+              enum:
+                - auto
+                - default
+                - priority
+              x-enumDescriptions:
+                auto: Let OpenAI automatically select the appropriate service tier.
+                default: Standard service tier with normal rate limits and latency.
+                priority: Premium tier with higher rate limits and lower latency at increased cost.
+              description: |-
+                OpenAI service tier. "priority" provides higher rate limits and
+                lower latency at increased cost.
+              x-celigo-ai-guidance:
+                - |-
+                  BYOK only.
+                  Platform-managed credentials (no `_connectionId` on the parent import) always
+                  run at `default` regardless of what's set here.
+            output:
+              type: object
+              description: Output format configuration
+              properties:
+                format:
+                  type: object
+                  description: |
+                    Controls the structure of the model's output.
+                  properties:
+                    type:
+                      type: string
+                      enum:
+                        - text
+                        - json_schema
+                        - blob
+                      x-enumDescriptions:
+                        text: Free-form text response from the model.
+                        json_schema: Structured JSON output conforming to a defined schema.
+                        blob: Binary data output for non-text content.
+                      description: Output format type.
+                    schemaMode:
+                      type: string
+                      enum:
+                        - manual
+                        - json
+                      x-enumDescriptions:
+                        manual: The schema was built field-by-field in the visual editor.
+                        json: The schema was pasted or edited as raw JSON.
+                      description: |-
+                        How the structured-output schema was authored in the UI.
+                        Editor state only — it does not change how `jsonSchema` is
+                        sent to the provider.
+                    name:
+                      type: string
+                      description: Name for the output format (used with json_schema)
+                      x-celigo-ui-override: Required by the AI agent form when output format type is json_schema. Encoded here to mirror the form so builders produce connectable configurations.
+                    strict:
+                      type: boolean
+                      description: When true, enforces strict schema validation on output.
+                      x-celigo-ai-guidance:
+                        - Whether to enforce strict schema validation on output
+                    jsonSchema:
+                      type: object
+                      description: |
+                        JSON Schema for structured output. Required when `format.type` is "json_schema".
+                      x-celigo-ui-override: Required by the AI agent form when output format type is json_schema. Encoded here to mirror the form so builders produce connectable configurations.
+                      properties:
+                        type:
+                          type: string
+                          description: Root JSON Schema type of the structured output; use "object" for record-shaped results.
+                          enum:
+                            - object
+                            - array
+                            - string
+                            - number
+                            - integer
+                            - boolean
+                          x-enumDescriptions:
+                            object: JSON object with named properties.
+                            array: Ordered list of values.
+                            string: Text string value.
+                            number: Numeric value including decimals.
+                            integer: Whole number value without decimals.
+                            boolean: True or false value.
+                        properties:
+                          type: object
+                          additionalProperties: true
+                          description: JSON Schema definitions for each field the structured output may contain.
+                        required:
+                          type: array
+                          description: Property names the model must include in the structured output.
+                          items:
+                            type: string
+                        additionalproperties:
+                          type: boolean
+                          description: When true, the structured output may include properties beyond those defined in `properties`.
+                    schema:
+                      type: object
+                      readOnly: true
+                      additionalProperties: true
+                      description: |-
+                        Server-written copy of `jsonSchema`, present in responses once `jsonSchema`
+                        is set. Send `jsonSchema`, not this field.
+                  if:
+                    properties:
+                      type:
+                        const: json_schema
+                    required:
+                      - type
+                  then:
+                    required:
+                      - name
+                      - jsonSchema
+                verbose:
+                  type: string
+                  enum:
+                    - low
+                    - medium
+                    - high
+                  x-enumDescriptions:
+                    low: Minimal detail in the model's response.
+                    medium: Moderate detail in the model's response, the default level.
+                    high: Maximum detail and verbosity in the model's response.
+                  description: Level of detail in the model's response
+                  x-celigo-ai-guidance:
+                    - |-
+                      Supported on the GPT-5 family only. Other OpenAI models (e.g.
+                      `gpt-4.1`, `gpt-4.1-mini`,
+                      `gpt-4.1-nano`) accept only `medium` (the no-op default) — `low` and `high` are
+                      rejected by the provider at runtime.
+                      Omit the field entirely on non-GPT-5 models rather than relying on the default.
+            prompts:
+              type: array
+              description: |-
+                MCP prompt entries available to the guardrail's model. Each item references one
+                MCP connection and the prompt names allowed from it.
+              items:
+                type: object
+                properties:
+                  type:
+                    type: string
+                    enum:
+                      - mcp
+                    x-enumDescriptions:
+                      mcp: Connect to an MCP server to use its exposed prompts.
+                    description: Type of prompt entry. Always "mcp".
+                  mcp:
+                    type: object
+                    description: MCP server prompt configuration.
+                    properties:
+                      _mcpConnectionId:
+                        type: string
+                        format: objectId
+                        x-celigo-refModel: connections
+                        description: Connection to the MCP server.
+                      allowedPrompts:
+                        type: array
+                        description: Prompt names to allow from the MCP server.
+                        items:
+                          type: string
+            resources:
+              $ref: '#/components/schemas/McpResources'
+        litellm:
+          type: object
+          description: |
+            LiteLLM proxy configuration. Used when `provider` is "gemini" or "anthropic".
+
+            LiteLLM provides a unified interface to multiple AI providers. Gemini-specific
+            settings are in `_overrides.gemini`; Claude-specific settings are in
+            `_overrides.anthropic`.
+
+            `model` is required when litellm is the active provider path.
+          properties:
+            model:
+              type: string
+              description: |-
+                LiteLLM model identifier. For Gemini, models are stored without the `gemini/`
+                prefix; for Anthropic, use the Claude model id (e.g. `claude-sonnet-4-6`).
+              examples:
+                - gemini-2.5-flash
+                - gemini-2.5-pro
+                - gemini-2.5-flash-lite
+                - claude-sonnet-4-6
+                - claude-opus-4-7
+              x-celigo-ui-override: Required by the AI agent configuration form. Encoded here to mirror the form so builders produce connectable configurations.
+              x-celigo-ai-guidance:
+                - |-
+                  With platform-managed credentials (no `_connectionId` on the parent
+                  import), the model must be one the platform hosts for the provider —
+                  Gemini and Anthropic Claude both have a hosted list. The save does not
+                  check this — an unlisted model saves, and the guardrail's first run fails
+                  with 422 `invalid_model`, whose message lists the hosted models.
+            temperature:
+              type: number
+              minimum: 0
+              maximum: 2
+              description: Sampling temperature
+              x-celigo-ai-guidance:
+                - |-
+                  When `provider` is "anthropic", the value must be between 0 and 1 — a higher value
+                  fails the save with 422 `invalid_field_value`. Gemini accepts the full 0-2 range.
+            maxCompletionTokens:
+              type: number
+              minimum: 100
+              maximum: 128000
+              description: Maximum number of tokens in the response
+            topP:
+              type: number
+              minimum: 0.1
+              maximum: 1
+              description: Nucleus sampling parameter
+            seed:
+              type: number
+              description: Random seed for reproducible outputs
+            responseFormat:
+              type: object
+              description: Output format configuration
+              x-celigo-ai-guidance:
+                - |-
+                  When `provider` is "anthropic", `type` must be "text" or "json_schema" — "blob" is
+                  rejected with 422 `invalid_response_format`. As with the other providers, "json_schema"
+                  requires `name` and `jsonSchema`.
+              properties:
+                type:
+                  type: string
+                  description: Output format type.
+                  enum:
+                    - text
+                    - json_schema
+                    - blob
+                  x-enumDescriptions:
+                    text: Free-form text response from the model.
+                    json_schema: Structured JSON output conforming to a defined schema.
+                    blob: Binary data output for non-text content.
+                schemaMode:
+                  type: string
+                  enum:
+                    - manual
+                    - json
+                  x-enumDescriptions:
+                    manual: The schema was built field-by-field in the visual editor.
+                    json: The schema was pasted or edited as raw JSON.
+                  description: |-
+                    How the structured-output schema was authored in the UI. Editor
+                    state only — it does not change how `jsonSchema` is sent to the
+                    provider.
+                name:
+                  type: string
+                  description: Name for the output format (used with json_schema).
+                  x-celigo-ui-override: Required by the AI agent form when output format type is json_schema. Encoded here to mirror the form so builders produce connectable configurations.
+                strict:
+                  type: boolean
+                  description: When true, enforces strict schema validation on output.
+                jsonSchema:
+                  type: object
+                  description: JSON Schema for structured output. Required when `responseFormat.type` is "json_schema".
+                  x-celigo-ui-override: Required by the AI agent form when output format type is json_schema. Encoded here to mirror the form so builders produce connectable configurations.
+                  properties:
+                    type:
+                      type: string
+                      description: Root JSON Schema type of the structured output; use "object" for record-shaped results.
+                      enum:
+                        - object
+                        - array
+                        - string
+                        - number
+                        - integer
+                        - boolean
+                      x-enumDescriptions:
+                        object: JSON object with named properties.
+                        array: Ordered list of values.
+                        string: Text string value.
+                        number: Numeric value including decimals.
+                        integer: Whole number value without decimals.
+                        boolean: True or false value.
+                    properties:
+                      type: object
+                      additionalProperties: true
+                      description: JSON Schema definitions for each field the structured output may contain.
+                    required:
+                      type: array
+                      description: Property names the model must include in the structured output.
+                      items:
+                        type: string
+                    additionalProperties:
+                      type: boolean
+                      description: When true, the structured output may include properties beyond those defined in `properties`.
+              if:
+                properties:
+                  type:
+                    const: json_schema
+                required:
+                  - type
+              then:
+                required:
+                  - name
+                  - jsonSchema
+            _overrides:
+              type: object
+              description: Provider-specific overrides
+              properties:
+                gemini:
+                  type: object
+                  description: |
+                    Gemini-specific configuration overrides.
+                  required:
+                    - systemInstruction
+                  properties:
+                    systemInstruction:
+                      type: string
+                      maxLength: 1000000
+                      description: |
+                        System instruction for Gemini models. Equivalent to OpenAI's `instructions`.
+                        Maximum 1,000,000 characters.
+                      x-celigo-ui-override: Required by the AI agent configuration form (the model's system prompt, the Gemini equivalent of `instructions`). Encoded here to mirror the form so builders produce connectable configurations.
+                    prompts:
+                      type: array
+                      description: |-
+                        MCP prompt entries available to the Gemini model. Each item references one
+                        MCP connection and the prompt names allowed from it.
+                      items:
+                        type: object
+                        properties:
+                          type:
+                            type: string
+                            enum:
+                              - mcp
+                            x-enumDescriptions:
+                              mcp: Connect to an MCP server to use its exposed prompts.
+                            description: Type of prompt entry. Always "mcp".
+                          mcp:
+                            type: object
+                            description: MCP server prompt configuration.
+                            properties:
+                              _mcpConnectionId:
+                                type: string
+                                format: objectId
+                                x-celigo-refModel: connections
+                                description: Connection to the MCP server.
+                              allowedPrompts:
+                                type: array
+                                description: Prompt names to allow from the MCP server.
+                                items:
+                                  type: string
+                    resources:
+                      $ref: '#/components/schemas/McpResources'
+                    responseModalities:
+                      type: array
+                      description: Response output modalities
+                      x-celigo-ai-guidance:
+                        - |-
+                          `["image"]` requires an image-capable Gemini model (currently `gemini-2.5-flash-image`).
+                          Selecting it on a text-only model is rejected by the provider — pair image
+                          output with the right model or omit.
+                      items:
+                        type: string
+                        enum:
+                          - text
+                          - image
+                        x-enumDescriptions:
+                          text: Generate text content in the response.
+                          image: Generate image content in the response.
+                    topK:
+                      type: number
+                      description: Top-K sampling parameter for Gemini
+                    thinkingConfig:
+                      type: object
+                      description: Controls Gemini's extended thinking capabilities
+                      x-celigo-ai-guidance:
+                        - |-
+                          Supported on reasoning-capable Gemini models only (currently `gemini-2.5-pro`
+                          and `gemini-2.5-flash`).
+                          Setting `thinkingConfig` on a non-thinking model (e.g.
+                          `gemini-2.5-flash-lite`,
+                          `gemini-2.5-flash-image`) is rejected by the provider at runtime — omit the
+                          field on those models.
+                      properties:
+                        includeThoughts:
+                          type: boolean
+                          description: When true, includes the model's thinking steps in the response.
+                          x-celigo-ai-guidance:
+                            - Whether to include thinking steps in the response
+                        thinkingBudget:
+                          type: number
+                          minimum: 100
+                          maximum: 4000
+                          description: Maximum tokens allocated for thinking
+                        thinkingLevel:
+                          type: string
+                          description: Controls how much thinking effort the model applies; use higher levels for complex, multi-step tasks at the cost of latency and tokens.
+                          enum:
+                            - minimal
+                            - low
+                            - medium
+                            - high
+                          x-enumDescriptions:
+                            minimal: Least thinking effort for simple tasks.
+                            low: Light thinking for moderately simple tasks.
+                            medium: Balanced thinking effort for typical tasks.
+                            high: Maximum thinking effort for complex, multi-step tasks.
+                    imageConfig:
+                      type: object
+                      description: Gemini image generation configuration
+                      properties:
+                        aspectRatio:
+                          type: string
+                          description: Aspect ratio of generated images; choose a ratio matching the intended display format.
+                          enum:
+                            - '1:1'
+                            - '2:3'
+                            - '3:2'
+                            - '3:4'
+                            - '4:3'
+                            - '4:5'
+                            - '5:4'
+                            - '9:16'
+                            - '16:9'
+                            - '21:9'
+                          x-enumDescriptions:
+                            '1:1': Square aspect ratio.
+                            '2:3': Portrait aspect ratio (2 wide by 3 tall).
+                            '3:2': Landscape aspect ratio (3 wide by 2 tall).
+                            '3:4': Portrait aspect ratio (3 wide by 4 tall).
+                            '4:3': Standard landscape aspect ratio (4 wide by 3 tall).
+                            '4:5': Portrait aspect ratio (4 wide by 5 tall).
+                            '5:4': Landscape aspect ratio (5 wide by 4 tall).
+                            '9:16': Tall portrait aspect ratio for mobile screens.
+                            '16:9': Widescreen landscape aspect ratio.
+                            '21:9': Ultra-widescreen cinematic aspect ratio.
+                        imageSize:
+                          type: string
+                          description: Output resolution of generated images; higher resolutions increase detail and file size.
+                          enum:
+                            - 1K
+                            - 2K
+                            - 4K
+                          x-enumDescriptions:
+                            1K: Standard resolution output around 1024 pixels.
+                            2K: High resolution output around 2048 pixels.
+                            4K: Ultra-high resolution output around 4096 pixels.
+                    mediaResolution:
+                      type: string
+                      enum:
+                        - low
+                        - medium
+                        - high
+                      x-enumDescriptions:
+                        low: Low resolution for faster processing and reduced token usage.
+                        medium: Balanced resolution for typical media processing.
+                        high: High resolution for maximum detail in media inputs.
+                      description: Resolution for media inputs (images, video)
+                anthropic:
+                  type: object
+                  description: |
+                    Claude-specific configuration overrides. Used when `provider` is "anthropic".
+                  required:
+                    - systemInstruction
+                  properties:
+                    systemInstruction:
+                      type: string
+                      maxLength: 1000000
+                      description: |
+                        System instruction for Claude models. Equivalent to OpenAI's `instructions`.
+                        Maximum 1,000,000 characters.
+                      x-celigo-ui-override: Required by the AI agent configuration form (the model's system prompt, the Claude equivalent of `instructions`). Encoded here to mirror the form so builders produce connectable configurations.
+                    topK:
+                      type: number
+                      minimum: 0
+                      description: |-
+                        Top-K sampling parameter. Deprecated on Claude models released after Claude Opus
+                        4.6, which reject any value at runtime; set it only on older models.
+                    thinkingConfig:
+                      type: object
+                      description: Controls Claude's extended thinking capabilities.
+                      properties:
+                        type:
+                          type: string
+                          enum:
+                            - enabled
+                            - disabled
+                            - adaptive
+                          x-enumDescriptions:
+                            enabled: Turn on extended thinking with an explicit token budget.
+                            disabled: Turn off extended thinking.
+                            adaptive: Let the model decide how much to think based on task complexity.
+                          description: Extended thinking mode.
+                        budgetTokens:
+                          type: number
+                          minimum: 1024
+                          description: |-
+                            Maximum tokens allocated for thinking. Required when `type` is "enabled" —
+                            omitting it fails the save with 422 `invalid_thinking_config`.
+                          x-celigo-ui-override: Required by the AI agent form when thinkingConfig.type is "enabled". Encoded here to mirror the form so builders produce connectable configurations.
+                        display:
+                          type: string
+                          enum:
+                            - summarized
+                            - omitted
+                          x-enumDescriptions:
+                            summarized: Include a summarized view of the model's thinking in the response.
+                            omitted: Exclude the model's thinking from the response.
+                          description: How thinking output is surfaced in the response.
+                        effort:
+                          type: string
+                          enum:
+                            - low
+                            - medium
+                            - high
+                            - xhigh
+                            - max
+                          x-enumDescriptions:
+                            low: Light thinking effort for moderately simple tasks.
+                            medium: Balanced thinking effort for typical tasks.
+                            high: Maximum standard thinking effort for complex tasks.
+                            xhigh: Extended thinking effort beyond high for demanding tasks.
+                            max: Highest available thinking effort.
+                          description: |-
+                            How much thinking effort the model applies; use with `type` "adaptive". Higher
+                            values (`xhigh`, `max`) may be gated to specific Claude models by the provider.
+                      if:
+                        properties:
+                          type:
+                            const: enabled
+                        required:
+                          - type
+                      then:
+                        required:
+                          - budgetTokens
+                    serviceTier:
+                      type: string
+                      enum:
+                        - auto
+                        - standard_only
+                      x-enumDescriptions:
+                        auto: Let Anthropic select the appropriate service tier.
+                        standard_only: Restrict processing to the standard service tier.
+                      description: Anthropic service tier for the request.
+                    prompts:
+                      type: array
+                      description: |-
+                        MCP prompt entries available to the Claude model. Each item references one
+                        MCP connection and the prompt names allowed from it.
+                      items:
+                        type: object
+                        properties:
+                          type:
+                            type: string
+                            enum:
+                              - mcp
+                            x-enumDescriptions:
+                              mcp: Connect to an MCP server to use its exposed prompts.
+                            description: Type of prompt entry. Always "mcp".
+                          mcp:
+                            type: object
+                            description: MCP server prompt configuration.
+                            properties:
+                              _mcpConnectionId:
+                                type: string
+                                format: objectId
+                                x-celigo-refModel: connections
+                                description: Connection to the MCP server.
+                              allowedPrompts:
+                                type: array
+                                description: Prompt names to allow from the MCP server.
+                                items:
+                                  type: string
+                    resources:
+                      $ref: '#/components/schemas/McpResources'
+      if:
+        properties:
+          provider:
+            const: openai
+        required:
+          - provider
+      then:
+        required:
+          - openai
+        properties:
+          openai:
+            required:
+              - model
+              - instructions
+      else:
+        if:
+          properties:
+            provider:
+              enum:
+                - gemini
+                - anthropic
+          required:
+            - provider
+        then:
+          required:
+            - litellm
+          properties:
+            litellm:
+              required:
+                - model
+        else:
+          if:
+            properties:
+              provider:
+                enum:
+                  - mistral
+                  - xai
+                  - huggingface
+                  - deepseek
+                  - cohere
+                  - groq
+            required:
+              - provider
+          then:
+            required:
+              - model
+    GuardrailConfig:
+      type: object
+      description: |-
+        Configuration for GuardrailImport adaptor type.
+
+        Guardrails evaluate data flowing through integrations for safety and
+        compliance. The `type` field selects which check to apply, and the
+        corresponding sub-object (`aiAgent`, `pii`, or `moderation`) provides
+        the configuration.
+
+        A `_connectionId` on the parent import is only needed for BYOK
+        `ai_agent` guardrails. In responses the server echoes the active type's
+        sub-object and applies the `confidenceThreshold` default; it also
+        returns inactive sibling sub-objects (e.g. `moderation: {categories: []}`
+        on a `pii` guardrail, or a populated `pii` left over from a type switch),
+        but only the active type's sub-object is meaningful. Legacy documents
+        may carry a server-written default `aiAgent` stub on `pii`/`moderation`
+        guardrails; current servers strip the inactive `aiAgent` on write.
+      x-celigo-ai-guidance:
+        - |-
+          Guardrails are safety and compliance checks that can be applied
+          to data flowing through integrations.  Three mutually-exclusive
+          types are supported — see `type` below for the full decision
+          rule on which to pick:
+
+          - **pii**: Detect (and optionally mask) personally identifiable
+            information.  Local deterministic classifier; fixed enum of
+            entity types (`pii.entities`).
+          - **moderation**: Detect harmful / inappropriate / policy-
+            violating CONTENT.  Local deterministic classifier; fixed enum
+            of categories (`moderation.categories` — `sexual`, `hate`,
+            `harassment`, `self_harm`, `violence`, `illicit`, etc.).  Use
+            category names exactly as listed in the enum — e.g. `hate`
+            (not "hate speech"), `violence` (not "violent content").  Map
+            natural-language synonyms ("explicit" → `sexual`, "toxic" →
+            `harassment`, etc.) to the closest enum value rather than
+            falling back to `ai_agent`.
+          - **ai_agent**: LLM-evaluated judgement against custom
+            instructions.  Catch-all for intents that don't fit `pii` or
+            `moderation` — domain-specific compliance, business-policy
+            checks, data-quality assertions, etc.  Pick this LAST, not as
+            the default.
+        - |-
+          Prefer the cheaper / more deterministic types (`pii` > `moderation` >
+          `ai_agent`) whenever the brief's intent fits.
+        - Guardrail imports do not require a `_connectionId` (unless using BYOK for `ai_agent` type).
+        - |-
+          Never send `tools` anywhere under `aiAgent` on an `ai_agent` guardrail (`aiAgent.tools`,
+          `aiAgent.openai.tools`, `aiAgent.litellm._overrides.gemini.tools`, `….anthropic.tools`) —
+          any non-empty array fails the save with 422 `guardrail_tools_not_allowed` ("Tools aren't
+          supported on a guardrail AI agent configuration…"), on create and on update. `prompts` and
+          `resources` are accepted; the server still echoes `openai.tools: []` on OpenAI guardrails.
+      properties:
+        type:
+          type: string
+          enum:
+            - ai_agent
+            - pii
+            - moderation
+          x-enumDescriptions:
+            ai_agent: Evaluate data using an AI model with custom instructions.
+            pii: Detect personally identifiable information in data fields.
+            moderation: Check content for harmful or inappropriate categories.
+          description: |-
+            The type of guardrail to apply. Each type requires its corresponding
+            sub-configuration object (`aiAgent`, `pii`, or `moderation`).
+          x-celigo-ai-guidance:
+            - |-
+              The type of guardrail to apply.
+              Pick exactly one — `pii` / `moderation` / `ai_agent` are mutually exclusive at
+              the type level (a brief that wants both runs as two guardrails in sequence,
+              not one).
+            - |-
+              ## How to choose
+
+              Apply these rules **in order** and pick the first match.  Do
+              NOT skip ahead to `ai_agent` just because the brief is in
+              natural language — `pii` and `moderation` are also expressed
+              as natural-language briefs.  The decision is about WHAT the
+              brief asks the guardrail to detect, not how the brief is
+              worded.
+
+              1. **`pii`** — pick this when the brief names ANY personally
+                 identifiable information, OR when the brief names entity
+                 categories (SSN, email, phone, credit card, address, name,
+                 passport, license, account number, etc.) that match
+                 `pii.entities`.  Examples that route here:
+                 "detect SSN and credit card numbers", "mask customer
+                 emails and phone numbers", "scan for PII".
+
+              2. **`moderation`** — pick this when the brief asks the
+                 guardrail to detect harmful, inappropriate, unsafe, or
+                 policy-violating CONTENT (as opposed to PII data fields)
+                 AND the intent maps to any value in `moderation.categories`
+                 (`sexual`, `hate`, `harassment`, `self_harm`, `violence`,
+                 `illicit`, etc.) — including via close synonyms.  Apply
+                 the synonym mapping liberally:
+                 - "explicit", "obscene", "vulgar", "profane",
+                   "inappropriate language", "swearing", "NSFW" → typically
+                   maps to `sexual` and/or `harassment`
+                 - "abusive", "insulting", "bullying", "toxic" → `harassment`
+                 - "hateful", "discriminatory", "racist", "sexist" → `hate`
+                 - "threatening", "intimidating" → `harassment_threatening`
+                   or `violence`
+                 - "graphic violence", "gore" → `violence_graphic`
+                 - "suicide", "self-injury" → `self_harm`
+                 - "drugs", "weapons", "illegal activity" → `illicit`
+                 Briefs like "screen email body for explicit language",
+                 "block toxic chat messages", "flag harassment in support
+                 tickets", "moderate user-generated content for unsafe
+                 material" all route to `moderation`.  When the brief uses
+                 a synonym, populate `moderation.categories` with the
+                 closest enum value(s) — do NOT invent new category
+                 strings; the enum is fixed.
+
+              3. **`ai_agent`** — pick this ONLY when the brief asks for
+                 judgement that doesn't fit `pii` or `moderation`.  Typical
+                 triggers: domain-specific compliance checks (HIPAA / SOX
+                 rule evaluation), business-policy validation (price
+                 bounds, approval thresholds), data-quality assertions
+                 (required fields populated, values plausible), or any
+                 "evaluate against these custom rules" framing where the
+                 rules are domain-specific and have no `pii.entities` /
+                 `moderation.categories` analogue.  If you can map the
+                 brief's intent to a moderation category (even via a
+                 synonym above), use `moderation` instead — `ai_agent` is
+                 the catch-all, not the default.
+
+              Tie-breaker for borderline cases: prefer the more specific
+              type (`pii` > `moderation` > `ai_agent`).  `pii` and
+              `moderation` are local deterministic classifiers with fixed
+              enums — they're cheaper, faster, and more predictable than
+              `ai_agent` (which calls a real LLM per record).  Default to
+              the cheaper path whenever the intent fits.
+            - |-
+              ## Sub-configuration requirements (one per type)
+
+              - **ai_agent** requires the `aiAgent` sub-configuration.
+              - **pii** requires the `pii` sub-configuration with at least
+                one entity from `pii.entities`.
+              - **moderation** requires the `moderation` sub-configuration
+                with at least one category from `moderation.categories`.
+        confidenceThreshold:
+          type: number
+          minimum: 0
+          maximum: 1
+          default: 0.7
+          x-celigo-ui-override: Required by the guardrail form (confidenceThreshold is required:true once a type is selected, default 0.7). Encoded to mirror the form so builders produce connectable configurations.
+          description: |-
+            Confidence threshold (0 to 1). Detections below this threshold are
+            ignored. Lower values catch more issues but increase false positives.
+          x-celigo-ai-guidance:
+            - Confidence threshold for guardrail detection (0 to 1).
+            - |-
+              Only detections with confidence at or above this threshold will be flagged.
+              Lower values catch more potential issues but may increase false positives.
+          examples:
+            - 0.7
+            - 0.5
+            - 0.9
+        aiAgent:
+          type: object
+          description: |-
+            AI agent check configuration; set when `type` is `ai_agent`. On
+            `pii`/`moderation` guardrails a legacy server-written stub may
+            appear here — it is inert, and current servers strip it on write.
+        pii:
+          type: object
+          required:
+            - entities
+          description: PII detection configuration. Required when `type` is `pii`.
+          x-celigo-ai-guidance:
+            - Configuration for PII (Personally Identifiable Information) detection.
+            - |-
+              Required when `guardrail.type` is "pii".
+              At least one entity type must be specified.
           properties:
             entities:
               type: array
@@ -10605,7 +11681,7 @@ components:
             - aiAgent
           properties:
             aiAgent:
-              $ref: '#/components/schemas/AiAgentConfig'
+              $ref: '#/components/schemas/GuardrailAiAgentConfig'
     OneToMany:
       type: boolean
       description: |
@@ -14119,7 +15195,9 @@ components:
             connection; `NetSuiteDistributedImport` and `NetSuiteHTTPImport` both need a `netsuite`
             connection). Server-required — POST without it fails with 422 "Expected field:
             _connectionId to be present" — except for the connection-less flavors (`ToolImport`,
-            `AiAgentImport`, `GuardrailImport`), which the server creates without one.
+            `AiAgentImport`, `GuardrailImport`, `TopicImport`), which the server creates without
+            one. An Event Streams publisher (`TopicImport`) must omit it: with a connection set the
+            server validates the document as that connection's adaptor instead.
           examples:
             - 60a2c4e6f321d800129a1a3c
         _integrationId:
@@ -14180,6 +15258,7 @@ components:
             - GuardrailImport
             - FileSystemImport
             - ToolImport
+            - TopicImport
             - RESTImport
           x-enumDescriptions:
             HTTPImport: Generic REST or SOAP API import via HTTP connections.
@@ -14199,6 +15278,7 @@ components:
             GuardrailImport: Safety and compliance check import for PII detection, moderation, or AI evaluation.
             FileSystemImport: Local or network file system import.
             ToolImport: Import that executes a reusable Celigo Tool resource.
+            TopicImport: Publishes each record as a message to an Event Streams topic, configured through `topic`; needs no connection.
             RESTImport: Legacy REST adaptor, superseded by HTTPImport — still accepted and present on older imports.
           examples:
             - HTTPImport
@@ -14208,6 +15288,7 @@ components:
             - FTPImport
             - AiAgentImport
             - GuardrailImport
+            - TopicImport
         nsDomainType:
           type: string
           enum:
@@ -14268,6 +15349,8 @@ components:
           $ref: '#/components/schemas/Salesforce'
         tool:
           $ref: '#/components/schemas/Tool'
+        topic:
+          $ref: '#/components/schemas/Topic'
         file:
           $ref: '#/components/schemas/File'
         filesystem:
@@ -14443,11 +15526,21 @@ components:
           $ref: '#/components/schemas/PathToMany'
         blobKeyPath:
           type: string
+          x-celigo-excludeAdaptorTypes:
+            - AiAgentImport
+            - GuardrailImport
+            - ToolImport
           description: |-
             Path in the input record that holds the blob key identifying the file content to import.
             At send time the platform follows this path, retrieves the referenced file from integrator.io
-            storage, and streams its bytes into the outgoing request.
+            storage, and streams its bytes into the outgoing request. Not accepted on `AiAgentImport`,
+            `GuardrailImport`, or `ToolImport` — those adaptors process records only and reject the
+            field with 422 `not_supported`.
           x-celigo-ai-guidance:
+            - |-
+              On AiAgentImport, GuardrailImport and ToolImport the save fails with 422 `not_supported`
+              ("Field "blobKeyPath" is not supported for this import type."); route file content
+              through a blob-capable import (HTTP, FTP, S3) instead.
             - |-
               The value at this path must be a blobKey produced by an upstream blob
               export or blob lookup and carried onto the record via that step's
@@ -14470,10 +15563,34 @@ components:
             - attachment.blobKey
         blob:
           type: boolean
-          description: When true, this import transfers raw file content (blobs) to the destination rather than structured records.
+          x-celigo-excludeAdaptorTypes:
+            - AiAgentImport
+            - GuardrailImport
+            - ToolImport
+          description: |-
+            When true, this import transfers raw file content (blobs) to the destination rather than
+            structured records, reading each file through `blobKeyPath`. Not accepted on
+            `AiAgentImport`, `GuardrailImport`, or `ToolImport` — those adaptors process records only
+            and reject the flag with 422 `not_supported`.
+          x-celigo-ai-guidance:
+            - |-
+              On AiAgentImport, GuardrailImport and ToolImport the save fails with 422 `not_supported`
+              ("Field "blob" is not supported for this import type."); never set it on those adaptors.
+          examples:
+            - true
+            - false
         assistant:
           type: string
-          description: Identifier for the connector assistant used to configure this import.
+          description: |-
+            Identifier for the connector assistant used to configure this import. For the cloud
+            file providers it also selects the provider-specific location rules —
+            `azuredatalakestoragegen2` (container in `file.directory.name`, file path split into
+            `http.relativeURI` and `file.fileName`) and `googlecloudstorage` (bucket in
+            `file.directory.storageRootId`).
+          examples:
+            - shopify
+            - azuredatalakestoragegen2
+            - googlecloudstorage
         deleteAfterImport:
           type: boolean
           description: When true, the source file is deleted after it is successfully imported.
@@ -15241,9 +16358,9 @@ components:
         Fields that can be sent when creating or updating an import. Set the adaptor-specific
         configuration object matching `adaptorType` (e.g. `netsuite_da` for `NetSuiteDistributedImport`).
         `_connectionId` is required except for the connection-less flavors (`ToolImport`,
-        `AiAgentImport`, `GuardrailImport`): a `ToolImport` binds connections through the
-        referenced tool's `overrides`, and AI agent / guardrail imports only use a connection
-        for BYOK.
+        `AiAgentImport`, `GuardrailImport`, `TopicImport`): a `ToolImport` binds connections through
+        the referenced tool's `overrides`, AI agent / guardrail imports only use a connection for
+        BYOK, and an Event Streams publisher (`TopicImport`) is delivered by the platform itself.
       required:
         - name
       allOf:
@@ -15258,12 +16375,30 @@ components:
                   - ToolImport
                   - AiAgentImport
                   - GuardrailImport
+                  - TopicImport
           - required:
               - tool
           - required:
               - aiAgent
           - required:
               - guardrail
+          - required:
+              - topic
+      then:
+        if:
+          properties:
+            adaptorType:
+              const: TopicImport
+          required:
+            - adaptorType
+        then:
+          x-celigo-ui-override: 'Required by the Event Streams publisher form (fieldDefinitions/resources/imports/import.js: ''topic._topicId'' is required:true). Encoded to mirror the form so builders produce publishers that are bound to a topic.'
+          required:
+            - topic
+          properties:
+            topic:
+              required:
+                - _topicId
       else:
         required:
           - _connectionId
@@ -15277,6 +16412,45 @@ components:
           required:
             - http
             - nsDomainType
+        else:
+          if:
+            properties:
+              assistant:
+                const: azuredatalakestoragegen2
+            required:
+              - assistant
+          then:
+            x-celigo-ui-override: 'Required by the Azure Data Lake Storage Gen2 import form (fieldDefinitions/resources/imports/azuredatalakestoragegen2.js: container ''file.directory.storageRootId_adls'' is required:true and preSave persists it as file.directory.name; the full file path is required:true and preSave splits it into http.relativeURI (directory prefix) and file.fileName (basename)). Encoded to mirror the form so builders produce connectable configurations.'
+            required:
+              - file
+            properties:
+              file:
+                required:
+                  - directory
+                  - fileName
+                properties:
+                  directory:
+                    required:
+                      - name
+          else:
+            if:
+              properties:
+                assistant:
+                  const: googlecloudstorage
+              required:
+                - assistant
+            then:
+              x-celigo-ui-override: 'Required by the Google Cloud Storage import form (fieldDefinitions/resources/imports/googlecloudstorage.js: bucket ''file.directory.storageRootId_gcs'' is required:true). Encoded to mirror the form so builders produce connectable configurations.'
+              required:
+                - file
+              properties:
+                file:
+                  required:
+                    - directory
+                  properties:
+                    directory:
+                      required:
+                        - storageRootId
     Error:
       type: object
       description: Standard error response envelope returned by integrator.io APIs.
@@ -15709,6 +16883,13 @@ components:
           description: Display name of the dependent resource.
           examples:
             - Import Orders to NetSuite
+        type:
+          type: string
+          description: |-
+            Sub-type of the dependent resource when its collection distinguishes one, such as
+            `stream` for a listener export. Only present for resource types that carry a `type`.
+          examples:
+            - stream
         paths:
           type: array
           description: |-