@celigo/api-specs 0.2.84 → 0.2.85

package/dist/export.yml

@@ -281,13 +281,12 @@ paths:
       summary: Patch an export
       description: |-
         Partially updates an export using a JSON Patch document (RFC 6902).
-        Only the `replace` operation is supported, and only on the following
-        whitelisted paths:
+        Only the following whitelisted paths are accepted:
 
-        | Path | Description |
-        |------|-------------|
-        | `/debugUntil` | Debug logging expiry (ISO-8601, max 1 hour from now) |
-        | `/assistantMetadata` | Assistant metadata object |
+        | Path | Operations | Description |
+        |------|------------|-------------|
+        | `/debugUntil` | `replace`, `add`, `remove` | Step debug-capture expiry (ISO-8601, at most 3600 seconds from now — a later value is rejected with 422 `update_not_allowed`); `remove` stops capture and succeeds even when the field is absent |
+        | `/assistantMetadata` | `replace` | Assistant metadata object |
 
         All other paths are rejected with `422`.
       operationId: patchExport
@@ -16686,7 +16685,12 @@ components:
               type: string
               format: date-time
               readOnly: true
-              description: Timestamp until which debug logging is enabled for this export.
+              description: |-
+                Turns on step debug capture until this time: while it lies in the future, every
+                request this export sends is recorded in the step's debug log
+                (`GET /v1/{flows|apis|tools}/{containerId}/{_id}/requests`). Read-only on PUT —
+                written only by `PATCH /v1/exports/{_id}` on `/debugUntil`, at most 3600 seconds
+                ahead (`422` `update_not_allowed` beyond that); `remove` stops capture.
     Request:
       type: object
       description: |-

package/dist/import.yml

@@ -294,12 +294,11 @@ paths:
       summary: Patch an import
       description: |-
         Partially updates an import using a JSON Patch document (RFC 6902).
-        Only the `replace` operation is supported, and only on the following
-        whitelisted path:
+        Only the following whitelisted path is accepted:
 
-        | Path | Description |
-        |------|-------------|
-        | `/debugUntil` | Debug logging expiry (ISO-8601, max 1 hour from now) |
+        | Path | Operations | Description |
+        |------|------------|-------------|
+        | `/debugUntil` | `replace`, `add`, `remove` | Step debug-capture expiry (ISO-8601, at most 3600 seconds from now — a later value is rejected with 422 `update_not_allowed`); `remove` stops capture and succeeds even when the field is absent |
 
         All other paths are rejected with `422`.
       operationId: patchImport
@@ -16745,7 +16744,13 @@ components:
               type: string
               format: date-time
               readOnly: true
-              description: Timestamp until which debug logging is enabled for this import.
+              description: |-
+                Turns on step debug capture until this time: while it lies in the future, every
+                request this import sends — or, for a `ToolImport`, every record passing through
+                it with the tool's output — is recorded in the step's debug log
+                (`GET /v1/{flows|apis|tools}/{containerId}/{_id}/requests`). Read-only on PUT —
+                written only by `PATCH /v1/imports/{_id}` on `/debugUntil`, at most 3600 seconds
+                ahead (`422` `update_not_allowed` beyond that); `remove` stops capture.
     Request:
       type: object
       description: |-

package/dist/tool.yml

@@ -402,8 +402,14 @@ paths:
         | `/name` | Tool display name |
         | `/description` | Tool description |
         | `/aiDescription` | AI-generated description object |
+        | `/input/debugUntil` | Debug-capture expiry for the Tool Input stage (ISO-8601, at most 3600 seconds from now) |
+        | `/output/debugUntil` | Debug-capture expiry for the Tool Output stage (ISO-8601, at most 3600 seconds from now) |
 
-        All other paths are rejected with 422 (`not a whitelisted property`).
+        All other paths are rejected with 422 (`not a whitelisted property`). A
+        `debugUntil` more than 3600 seconds ahead is rejected with 422
+        `update_not_allowed` and nothing is saved; `remove` on an absent
+        `debugUntil` succeeds (204). Changing a `debugUntil` needs the Tool
+        update permission on the Tool's integration, like every other path.
 
         PATCH is the intended way to update these fields without accidentally
         resetting other tool configuration via `PUT`.
@@ -2624,9 +2630,24 @@ paths:
       description: |-
         Lists the debug request records captured for a specific step of a tool.
         These are the raw request/response payloads the step processed, retained
-        for troubleshooting while debug capture is active for the step. Use the
-        `key` of an entry with `GET /v1/tools/{_id}/{_stepId}/requests/{key}` to
-        fetch the full detail of a single captured request.
+        for troubleshooting while debug capture is active for the step — a future
+        `debugUntil` on the step's export or import document, or `input.debugUntil`
+        / `output.debugUntil` on the tool for the Tool Input and Tool Output
+        stages. Capture runs in every execution context (a standalone invoke at
+        any `x-log-mode`, an AI agent or MCP caller, a flow or API that calls the
+        tool, a parent tool); test runs write nothing here. Use the `key` of an
+        entry with `GET /v1/tools/{_id}/{_stepId}/requests/{key}` to fetch the
+        full detail of a single captured request.
+
+        HTTP and NetSuite steps record one entry per request they send. The
+        `tool_input` stage records one entry per incoming record (`200` when the
+        record passes the input schema, `422` with the validation errors when it
+        does not); the `tool_output` stage records one entry per output
+        validation. Routers, filters and scripts never record.
+
+        An account owner or administrator lists every entry. A shared user sees
+        only entries from runs invoked under integrations they can access
+        (standalone invokes are recorded under the tool's own integration).
 
         When more records match than fit in one page, `nextPageURL` returns the
         relative URL for the next page.
@@ -2656,15 +2677,21 @@ paths:
           required: true
           description: |-
             The step whose captured logs to list: the ObjectId of an export or
-            import step defined directly in this tool's routers. Steps nested
-            inside a child tool are addressed on that child tool's id. Any other
-            value — including reserved path segments such as `invocations`,
-            `invoke`, and `test` — returns `400` `invalid_ref`.
+            import step defined directly in this tool's routers, or one of the
+            two virtual stage ids `tool_input` (the record entering the tool,
+            validated against the input schema) and `tool_output` (the
+            post-mapped record, validated against the output schema). Steps
+            nested inside a child tool are addressed on that child tool's id;
+            an ObjectId that is not a direct step of this tool returns `404`
+            `invalid_ref`. Any other value — including reserved path segments
+            such as `invocations`, `invoke`, and `test` — returns `400`
+            `invalid_ref`.
           schema:
             type: string
-            format: objectId
             examples:
               - 67ee026136f4d1eeb529ad63
+              - tool_input
+              - tool_output
         - name: time_gt
           in: query
           required: false
@@ -2771,7 +2798,11 @@ paths:
                           description: Response status code of the captured request.
                         stage:
                           type: string
-                          description: Processing stage the record was captured in.
+                          description: |-
+                            Processing stage the record was captured in, such as
+                            `lookup` for a lookup step's request. Present on
+                            records written by HTTP and NetSuite steps; absent on
+                            `tool_input` and `tool_output` records.
                       additionalProperties: true
                   nextPageURL:
                     type: string
@@ -2789,16 +2820,60 @@ paths:
                   summary: Captured debug requests for a tool step
                   value:
                     requests:
-                      - key: 5481201053696-a10af1ade8fe477a847771c1e3716e36-200-POST
+                      - key: 5481201053696-a10af1ade8fe477a847771c1e3716e36-200-GET-lookup-60a2c4e6f321d800129a1a3c
                         time: 1776917346304
+                        method: GET
+                        statusCode: '200'
+                        stage: lookup
+                tool_input:
+                  summary: Captured Tool Input records — one passed, one failed the input schema
+                  value:
+                    requests:
+                      - key: 5466610903705-847304f37d2041a79b9e657ea9a45d68-200-POST--60a2c4e6f321d800129a1a3c
+                        time: 1791507496295
                         method: POST
                         statusCode: '200'
+                      - key: 5466610902616-0d4aa1266fcb4ae4be5a7f316ff5e01c-422-POST--60a2c4e6f321d800129a1a3c
+                        time: 1791507497384
+                        method: POST
+                        statusCode: '422'
+        '400':
+          description: |-
+            `_stepId` is neither an ObjectId nor `tool_input` / `tool_output`.
+            Error code: `invalid_ref`.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/Error'
+              examples:
+                unknown_virtual_id:
+                  value:
+                    errors:
+                      - code: invalid_ref
+                        message: Please provide a valid _expOrImpId.
         '401':
           $ref: '#/components/responses/401-unauthorized'
         '403':
           $ref: '#/components/responses/403-forbidden'
         '404':
-          $ref: '#/components/responses/404-not-found'
+          description: |-
+            The tool does not exist, or `_stepId` is an ObjectId that is not a
+            step defined directly in this tool. Error code: `invalid_ref`.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/Error'
+              examples:
+                tool_not_found:
+                  value:
+                    errors:
+                      - code: invalid_ref
+                        message: Tool not found.
+                step_not_in_tool:
+                  value:
+                    errors:
+                      - code: invalid_ref
+                        message: Export/Import not found.
         '422':
           description: 'Invalid time filter parameters. Error code: `invalid_or_missing_field`.'
           content:
@@ -2822,12 +2897,16 @@ paths:
       description: |-
         Deletes captured debug request records for a specific step of a tool, by
         their `key` values from `GET /v1/tools/{_id}/{_stepId}/requests`. Between
-        1 and 1000 keys can be deleted per call.
+        1 and 1000 keys can be deleted per call; the deletion is synchronous and
+        scoped to this step only.
 
         The response lists the keys that were deleted and, separately, any keys
-        that failed to delete along with the failure reason.
+        that failed to delete along with the failure reason. A key that no longer
+        exists is reported under `deleted`, not `errors`.
 
-        Requires the `manage:tool:logs:deletion` permission.
+        Requires the `manage:tool:logs:deletion` permission. A shared user's
+        delete removes only records from runs invoked under integrations they can
+        access.
       operationId: deleteToolStepRequests
       tags:
         - Tools
@@ -2847,12 +2926,16 @@ paths:
           required: true
           description: |-
             The step whose captured logs to delete: the ObjectId of an export or
-            import step defined directly in this tool's routers.
+            import step defined directly in this tool's routers, or the virtual
+            stage id `tool_input` or `tool_output`. Any other value returns
+            `400` `invalid_ref`; an ObjectId that is not a direct step of this
+            tool returns `404` `invalid_ref`.
           schema:
             type: string
-            format: objectId
             examples:
               - 67ee026136f4d1eeb529ad63
+              - tool_input
+              - tool_output
       requestBody:
         required: true
         content:
@@ -2919,13 +3002,43 @@ paths:
                       - 5481201048878-b21bf2bef9ff588b958882d2f4827f47-422-POST
                     errors: []
         '400':
-          $ref: '#/components/responses/400-bad-request'
+          description: |-
+            The body carries no `keys` array (error code `invalid_url`), or
+            `_stepId` is neither an ObjectId nor `tool_input` / `tool_output`
+            (error code `invalid_ref`).
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/Error'
+              examples:
+                missing_keys:
+                  value:
+                    errors:
+                      - code: invalid_url
+                        message: keys is not valid.
+                unknown_virtual_id:
+                  value:
+                    errors:
+                      - code: invalid_ref
+                        message: Please provide a valid _expOrImpId.
         '401':
           $ref: '#/components/responses/401-unauthorized'
         '403':
           $ref: '#/components/responses/403-forbidden'
         '404':
-          $ref: '#/components/responses/404-not-found'
+          description: |-
+            The tool does not exist, or `_stepId` is an ObjectId that is not a
+            step defined directly in this tool. Error code: `invalid_ref`.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/Error'
+              examples:
+                step_not_in_tool:
+                  value:
+                    errors:
+                      - code: invalid_ref
+                        message: Export/Import not found.
   /v1/tools/{_id}/{_stepId}/requests/{key}:
     get:
       x-internal: false
@@ -2935,8 +3048,15 @@ paths:
         step, identified by its `key`. Obtain the `key` from
         `GET /v1/tools/{_id}/{_stepId}/requests`.
 
-        The record carries the adaptor HTTP request/response the step issued,
-        with credentials masked, plus the `key`, record `id`, and capture `time`.
+        For an HTTP or NetSuite step the record carries the adaptor HTTP
+        request/response the step issued, with credentials masked and the
+        bodies as strings. For the `tool_input` and `tool_output` stages (and a
+        ToolImport step) the record is synthetic: `request.body` is the JSON
+        record entering the stage, `response.body` is the validated JSON record
+        (`statusCode` 200) or the validation errors (`statusCode` 422), the
+        request carries no `url`, and `context` names the run that produced it.
+        Synthetic bodies are stored unmasked. Every record carries the `key`,
+        record `id`, and capture `time`.
 
         Requires the `manage:tool:logs` permission.
       operationId: getToolStepRequest
@@ -2958,15 +3078,18 @@ paths:
           required: true
           description: |-
             The step the captured request belongs to: the ObjectId of an export
-            or import step defined directly in this tool's routers. Steps nested
-            inside a child tool are addressed on that child tool's id. Any other
-            value — including reserved path segments such as `invocations`,
-            `invoke`, and `test` — returns `400` `invalid_ref`.
+            or import step defined directly in this tool's routers, or the
+            virtual stage id `tool_input` or `tool_output`. Steps nested inside
+            a child tool are addressed on that child tool's id; an ObjectId that
+            is not a direct step of this tool returns `404` `invalid_ref`. Any
+            other value — including reserved path segments such as
+            `invocations`, `invoke`, and `test` — returns `400` `invalid_ref`.
           schema:
             type: string
-            format: objectId
             examples:
               - 67ee026136f4d1eeb529ad63
+              - tool_input
+              - tool_output
         - name: key
           in: path
           required: true
@@ -2998,51 +3121,84 @@ paths:
                     description: Epoch milliseconds when this pair was stored.
                   request:
                     type: object
-                    description: The HTTP request the step's export or import sent.
+                    description: |-
+                      The HTTP request the step's export or import sent, or — for
+                      the `tool_input`, `tool_output` and ToolImport stages — the
+                      record entering the stage, wrapped as a `POST` with no `url`.
                     properties:
                       method:
                         type: string
-                        description: HTTP method (`GET`, `POST`, …).
+                        description: HTTP method (`GET`, `POST`, …); always `POST` on synthetic records.
                         examples:
                           - POST
                       url:
                         type: string
-                        description: Fully-resolved URL the request was sent to.
+                        description: Fully-resolved URL the request was sent to. Absent on synthetic records.
                         examples:
                           - https://httpbin.org/post
                       headers:
                         type: object
-                        description: Headers sent with the request; credential values are masked.
+                        description: Headers sent with the request; credential values are masked. Empty on synthetic records.
                         additionalProperties: true
                       body:
-                        type: string
-                        description: Request body as sent, verbatim.
+                        type:
+                          - string
+                          - object
+                        description: |-
+                          Request body as sent, verbatim, for an HTTP step (absent on a
+                          body-less method such as `GET`); the JSON record entering the
+                          stage on a synthetic record.
                         examples:
                           - '{"orderId":"SO-1042"}'
                   response:
                     type: object
-                    description: The HTTP response the step received.
+                    description: |-
+                      The HTTP response the step received, or — on synthetic
+                      records — the outcome of the stage: the validated record
+                      with `statusCode` 200, or the validation errors with 422.
                     properties:
                       statusCode:
                         type: integer
-                        description: HTTP status code the target system returned.
+                        description: HTTP status code the target system returned, or 200 / 422 for a synthetic record.
                         examples:
                           - 200
                       headers:
                         type: object
-                        description: Response headers as received.
+                        description: Response headers as received. Empty on synthetic records.
                         additionalProperties: true
                       body:
-                        type: string
-                        description: Response body as received; parse per the `content-type` header.
+                        type:
+                          - string
+                          - object
+                        description: |-
+                          For an HTTP or NetSuite step: the response body as received, a
+                          string the caller parses per the `content-type` header. On a
+                          synthetic record: the validated JSON record as an object, or
+                          `{errors: [{code, message, …}]}` when validation failed.
                         examples:
                           - '{"ok":true}'
+                      receivedAt:
+                        type: integer
+                        format: int64
+                        description: Epoch milliseconds when the pair was captured.
+                  context:
+                    type: object
+                    description: |-
+                      The run that produced a synthetic record. Absent on records
+                      written by HTTP and NetSuite steps.
+                    properties:
+                      _rootContainerId:
+                        type: string
+                        description: Owning flow, API, or tool id of the run that produced this capture.
+                      _jobId:
+                        type: string
+                        description: Job id of the run that produced this capture.
                 additionalProperties: true
               examples:
                 adaptor_http:
                   summary: Captured HTTP request of a lookup step
                   value:
-                    key: 5481201053696-a10af1ade8fe477a847771c1e3716e36-200-POST
+                    key: 5481201053696-a10af1ade8fe477a847771c1e3716e36-200-POST-lookup-60a2c4e6f321d800129a1a3c
                     id: a10af1ade8fe477a847771c1e3716e36
                     time: 1776917346304
                     request:
@@ -3056,12 +3212,67 @@ paths:
                       headers:
                         content-type: application/json
                       body: '{"ok":true}'
+                      receivedAt: 1776917346302
+                tool_input_failed:
+                  summary: Synthetic Tool Input record — the record failed the input schema
+                  value:
+                    key: 5466610902616-0d4aa1266fcb4ae4be5a7f316ff5e01c-422-POST--60a2c4e6f321d800129a1a3c
+                    id: 0d4aa1266fcb4ae4be5a7f316ff5e01c
+                    time: 1791507497384
+                    request:
+                      method: POST
+                      headers: {}
+                      body: {}
+                    response:
+                      statusCode: 422
+                      headers: {}
+                      receivedAt: 1791507497384
+                      body:
+                        errors:
+                          - code: tool_input_schema_validation_failed
+                            message: 'Tool input validation failed: must have required property ''q'''
+                            source: tool_input
+                            stage: tool_input_schema_validation
+                    context:
+                      _rootContainerId: 69d462d5b9c28ea0b7f82522
+                      _jobId: 6ac83c299205d177fa25df54
+        '400':
+          description: |-
+            `_stepId` is neither an ObjectId nor `tool_input` / `tool_output`.
+            Error code: `invalid_ref`.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/Error'
+              examples:
+                unknown_virtual_id:
+                  value:
+                    errors:
+                      - code: invalid_ref
+                        message: Please provide a valid _expOrImpId.
         '401':
           $ref: '#/components/responses/401-unauthorized'
         '403':
           $ref: '#/components/responses/403-forbidden'
         '404':
-          $ref: '#/components/responses/404-not-found'
+          description: |-
+            The tool or the step does not exist (`invalid_ref`), or no record
+            carries this `key` (`file_not_found`).
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/Error'
+              examples:
+                unknown_key:
+                  value:
+                    errors:
+                      - code: file_not_found
+                        message: We are unable to find the file for the given fileName.
+                step_not_in_tool:
+                  value:
+                    errors:
+                      - code: invalid_ref
+                        message: Export/Import not found.
 components:
   securitySchemes:
     bearerAuth:
@@ -5873,6 +6084,20 @@ components:
               ("requires at least one double stash expression"), and an unbalanced `{{record.id`
               fails with 422 "Failed to compile handlebars template". An empty string clears the
               field.
+        debugUntil:
+          type: string
+          format: date-time
+          description: |-
+            Turns on debug capture for the Tool Input stage until this time: while it lies in
+            the future, every record entering the tool is written to
+            `GET /v1/tools/{_id}/tool_input/requests` with its input-schema outcome, in every
+            execution context (standalone invoke, AI agent or MCP caller, flow or API). At
+            most 3600 seconds ahead — a later value is rejected with `422` `update_not_allowed`
+            and nothing is saved. Written by PUT or by `PATCH /v1/tools/{_id}` on
+            `/input/debugUntil`; `remove` (or a past time) stops capture. Capture is not
+            retroactive and does not change record retention.
+          examples:
+            - '2026-08-25T12:30:00.000Z'
         mockInput:
           type: object
           description: |
@@ -6045,6 +6270,20 @@ components:
                   examples:
                     - postProcessOutput
                     - validateOutput
+        debugUntil:
+          type: string
+          format: date-time
+          description: |-
+            Turns on debug capture for the Tool Output stage until this time: while it lies in
+            the future, every post-mapped record is written to
+            `GET /v1/tools/{_id}/tool_output/requests` with its output-schema outcome, in every
+            execution context (standalone invoke, AI agent or MCP caller, flow or API). At
+            most 3600 seconds ahead — a later value is rejected with `422` `update_not_allowed`
+            and nothing is saved. Written by PUT or by `PATCH /v1/tools/{_id}` on
+            `/output/debugUntil`; `remove` (or a past time) stops capture. Capture is not
+            retroactive and does not change record retention.
+          examples:
+            - '2026-08-25T12:30:00.000Z'
         mockInput:
           type: object
           description: |
@@ -24837,7 +25076,13 @@ components:
               type: string
               format: date-time
               readOnly: true
-              description: Timestamp until which debug logging is enabled for this import.
+              description: |-
+                Turns on step debug capture until this time: while it lies in the future, every
+                request this import sends — or, for a `ToolImport`, every record passing through
+                it with the tool's output — is recorded in the step's debug log
+                (`GET /v1/{flows|apis|tools}/{containerId}/{_id}/requests`). Read-only on PUT —
+                written only by `PATCH /v1/imports/{_id}` on `/debugUntil`, at most 3600 seconds
+                ahead (`422` `update_not_allowed` beyond that); `remove` stops capture.
     GroupBy:
       type: array
       description: |
@@ -36678,7 +36923,12 @@ components:
               type: string
               format: date-time
               readOnly: true
-              description: Timestamp until which debug logging is enabled for this export.
+              description: |-
+                Turns on step debug capture until this time: while it lies in the future, every
+                request this export sends is recorded in the step's debug log
+                (`GET /v1/{flows|apis|tools}/{containerId}/{_id}/requests`). Read-only on PUT —
+                written only by `PATCH /v1/exports/{_id}` on `/debugUntil`, at most 3600 seconds
+                ahead (`422` `update_not_allowed` beyond that); `remove` stops capture.
     ClonePreviewResponse:
       type: object
       description: |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@celigo/api-specs",
-  "version": "0.2.84",
+  "version": "0.2.85",
   "private": false,
   "description": "Public OpenAPI bundles (dist/) and the celigo-cli lint schema pack (schemas.json).",
   "keywords": [

package/schemas.json

@@ -1,7 +1,7 @@
 {
 	"provenance": {
 		"repo": "celigo/integrator-api-specs",
-		"iasCommit": "0dce435",
+		"iasCommit": "9f42828",
 		"generatedAt": "2026-10-10"
 	},
 	"roots": {
@@ -8707,6 +8707,7 @@
 				"object"
 			],
 			"p": {
+				"debugUntil": 1,
 				"description": 1,
 				"mockInput": 10,
 				"name": 1,
@@ -8799,6 +8800,7 @@
 				"object"
 			],
 			"p": {
+				"debugUntil": 1,
 				"description": 1,
 				"hooks": 196,
 				"lookups": 733,