@curviate/cli 0.23.0 → 0.23.1

package/CHANGELOG.md

@@ -6,7 +6,26 @@ The format follows [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 Versioning follows [Semantic Versioning](https://semver.org/spec/v2.0.0.html):
 a new command or flag is a minor; a breaking command/flag/exit-code change is a major; a fix is a patch.
 
-## [Unreleased]
+## [0.23.1] - 2026-08-10
+
+### Fixed
+
+- **A global flag placed before the subcommand was rejected, and any flag
+  value beginning with `-` was rejected.** `curviate --api-key <key> account
+  list` exited 2 with "unknown command", and a value like `--api-key
+  -something` exited 2 with "unknown flag". Both shared one root cause: the
+  dispatcher's flag scan never tracked which tokens it had already consumed
+  as another flag's value, so it re-inspected a value token as if it were
+  fresh input, misreading a flag's value as the subcommand name in the first
+  case and re-scanning a dash-prefixed value as its own (unknown) flag in the
+  second. Fixing the scan surfaced a second, more serious defect on the same
+  path: once a leading global flag was correctly found, the token AFTER it
+  was dropped entirely on the way to the resolved command, so the flag's
+  value silently never reached the request at all (a stored profile or
+  environment variable answered instead, with no error). All three are
+  fixed. Global flags now work in any position, and a flag value starting
+  with `-` (an API key, a negative `--limit`, a message beginning with a
+  dash) is bound exactly as typed.
 
 ## [0.23.0] - 2026-08-10
 

package/README.md

@@ -47,12 +47,14 @@ curviate --api-key <your-api-key> account list
 > history. Prefer `curviate login` or the `CURVIATE_API_KEY` environment
 > variable; reserve `--api-key` for one-off, low-trust contexts.
 
-Get your API key from the [Curviate dashboard](https://docs.curviate.com).
+Get your API key from the [Curviate dashboard](https://app.curviate.com).
 
 ## Usage
 
 ```
-curviate [command] [subcommand] [flags]
+curviate [flags] [command] [subcommand] [flags]
+
+Global flags may appear anywhere in the invocation, before the command or after it.
 
 Global flags available on every command:
   --account      Target a specific account ID
@@ -62,9 +64,11 @@ Global flags available on every command:
   --fields       Comma-separated list of fields to include in JSON output
   --limit        Maximum number of results to return per page
   --cursor       Pagination cursor from a previous response
-  --all          Fetch all pages (streams results)
+  --all          Stream all pages as NDJSON
   --max-pages    Cap on the number of pages fetched with --all
+  --page-delay   Milliseconds to pause between pages when --all is used (default 400)
   --preview      Show what would happen without sending any write request
+  --verbose      Output the full SDK response instead of the slim default
   --base-url     Override the API base URL (for testing)
   --timeout      Request timeout in milliseconds (default: 30000)
 ```
@@ -77,44 +81,59 @@ These examples show how coding agents compose the CLI in real workflows.
 
 ### 1. Find people and send connection requests
 
-Search for matching profiles, preview the invitations, then send them once satisfied:
+Search for matching profiles, preview the invitations, then send them once satisfied.
+`--location` on `search people` takes location **ids**, not free text; resolve a
+human-readable place name to an id first with `curviate search parameters --type LOCATION`:
 
 ```bash
-# Look first: a search is a read, so it just runs (no --preview on reads)
+curviate search parameters --type LOCATION --keywords "Berlin" --account acc_1 --json
+# {"items":[{"id":"103035651","name":"Berlin, Germany"}, {"id":"106967730","name":"Berlin, Berlin, Germany"}, ...]}
+
+# Look first, a search is a read, so it just runs (no --preview on reads)
 curviate search people \
   --keywords "AI engineer" \
-  --location "Berlin" \
+  --location 103035651 \
+  --account acc_1 \
   --limit 10 \
   --json
 
 # Preview a single write before sending, then pipe IDs into connect, one request per person
-curviate connect "$SOME_ID" --note "Hi, I'd love to connect." --preview
+curviate connect "$SOME_ID" --account acc_1 --note "Hi, I'd love to connect." --preview
 
-curviate search people --keywords "AI engineer" --location "Berlin" --all \
+curviate search people --keywords "AI engineer" --location 103035651 --account acc_1 --all \
   | jq -r '.id' \
   | head -5 \
-  | xargs -I{} curviate connect {} --note "Hi, I'd love to connect."
+  | xargs -I{} curviate connect {} --account acc_1 --note "Hi, I'd love to connect."
 ```
 
 ### 2. Triage the inbox and extract unread threads
 
-Pull the inbox as JSON, filter unread chats, and surface the most recent message from each:
+Pull the inbox, filter unread chats, and surface the most recent message from each.
+`--all` streams **NDJSON** (one JSON object per line), not a `{items:[...]}` envelope or a
+bare array, so pipe each line straight into `jq` with no `.[]`. The chat's own id is `id`
+(`chat_id` only appears nested inside `last_message`, pointing back at its own chat); the
+unread signal is the integer `unread_count`, not a boolean `unread`; and `last_message` has
+no `sender` object, only `sender_id` (a provider id, not a display name), so a
+human-readable sender comes from the chat's own `user.display_name` instead (present on
+1:1 chats):
 
 ```bash
-curviate inbox list --json --all \
-  | jq '[.[] | select(.unread == true) | {chat_id, sender: .last_message.sender, preview: .last_message.text[0:80]}]'
+curviate inbox list --json --all --account acc_1 \
+  | jq -c 'select(.unread_count > 0) | {chat_id: .id, sender: (.user.display_name // .last_message.sender_id), preview: .last_message.text[0:80]}'
 ```
 
 ### 3. Warm up a prospect by reacting to their recent posts
 
-Read recent posts from a profile, then react to each, which is useful for ambient warm-up before outreach:
+Read recent posts from a profile, then react to each, useful for ambient warm-up before outreach.
+A post's id is `id` (there is no `post_id` field), and `--posts` returns a `{items:[...]}`
+envelope, not a bare array:
 
 ```bash
 PROFILE_URL="https://www.linkedin.com/in/example"
 
-curviate profile "$PROFILE_URL" --posts --fields post_id --json \
-  | jq -r '.[].post_id' \
-  | xargs -I{} curviate post react {} --reaction like
+curviate profile "$PROFILE_URL" --posts --fields id --account acc_1 --json \
+  | jq -r '.items[].id' \
+  | xargs -I{} curviate post react {} --account acc_1 --reaction like
 ```
 
 ### 4. Check tier entitlement before a Sales Navigator sweep
@@ -122,7 +141,7 @@ curviate profile "$PROFILE_URL" --posts --fields post_id --json \
 Exit code `5` means the account lacks the required add-on. Branch on it in a script:
 
 ```bash
-curviate sales-nav search people --keywords "VP Engineering" --json \
+curviate sales-nav search people --keywords "VP Engineering" --account acc_1 --json \
   || {
     code=$?
     if [ "$code" -eq 5 ]; then
@@ -152,11 +171,13 @@ Exit `2` means the signature is invalid or the replay window has expired.
 
 ### 6. Export all accounts to a CSV (agent-friendly pipeline)
 
-List every connected account, select key fields, and format as CSV with `jq`:
+List every connected account, select key fields, and format as CSV with `jq`. `--all` streams
+NDJSON, so slurp it into an array first with `jq -s`; the fields are `account_id` and
+`full_name`, not `id` / `name`:
 
 ```bash
 curviate account list --all --json \
-  | jq -r '["id","name","status"], (.[] | [.id, .name, .status]) | @csv' \
+  | jq -s -r '["account_id","full_name","status"], (.[] | [.account_id, .full_name, .status]) | @csv' \
   > accounts.csv
 ```
 
@@ -229,10 +250,13 @@ curviate sales-nav save-lead ACwAAA1234567 --account acc_1 --list 987654
 
 ### 3. Start a new Sales Navigator chat
 
+`--subject` is required for Sales Navigator messaging.
+
 ```bash
 curviate sales-nav message new \
   --to ACwAAA1234567 \
   --account acc_1 \
+  --subject "An opportunity at our company" \
   "Hi, I'd love to connect about an opportunity at our company."
 ```
 
@@ -314,8 +338,12 @@ curviate recruiter project-job get "$PROJECT_ID" --account acc_1 --json
 
 ### 3. Create a job posting draft, then publish it
 
-`recruiter job create` requires `--project-name` (the hiring project the posting opens) and takes
-the v2 job body. `recruiter job publish` is project-scoped and requires `--mode`
+`recruiter job create` requires `--project-name` (the hiring project the posting opens) plus the
+full v2 job body: `--job-title`, `--company-id`/`--company-name`, `--workplace-type`, `--location`,
+`--employment-status`, `--seniority-level`, `--description` (200 characters minimum), `--industry`,
+`--job-function`, and `--apply-method`. `--location`/`--industry`/`--job-function` take resolved
+parameter ids, the same `search parameters --type LOCATION`/`--type INDUSTRY`/`--type JOB_FUNCTION`
+resolution from example 1 above. `recruiter job publish` is project-scoped and requires `--mode`
 (`FREE | PROMOTED | PROMOTED_PLUS`); the paid modes also require the full `--budget-*` triple.
 
 ```bash
@@ -323,8 +351,15 @@ curviate recruiter job create \
   --account acc_1 \
   --project-name "Backend Hiring 2026" \
   --job-title "Senior Backend Engineer" \
-  --description "Remote-first team building the core platform." \
+  --company-name "Curviate GmbH" \
+  --workplace-type REMOTE \
+  --location 103035651 \
   --employment-status FULL_TIME \
+  --seniority-level MID_SENIOR_LEVEL \
+  --description "We are looking for a senior backend engineer to join our remote-first team building the core platform that powers agent-native LinkedIn automation for thousands of developers and their AI agents worldwide." \
+  --industry 96 \
+  --job-function 15 \
+  --apply-method linkedin \
   --json
 
 curviate recruiter job publish "$PROJECT_ID" "$JOB_ID" --account acc_1 --mode FREE --json
@@ -380,7 +415,7 @@ curviate recruiter message new \
   --to AEM789 \
   --account acc_1 \
   --subject "A role you'd be a great fit for" \
-  --signature "- Alex, Talent Team" \
+  --signature "Alex, Talent Team" \
   "Hi, I came across your profile and think you'd be a great fit for a role we're hiring for."
 ```
 
@@ -407,6 +442,13 @@ curviate recruiter job get "https://www.linkedin.com/jobs/view/4428113858" --acc
 | 3 | Authentication or authorization failure |
 | 4 | Resource not found |
 | 5 | Feature requires an add-on or higher plan |
+| 6 | Rate limited |
+| 7 | Transient platform error (retry likely to succeed) |
+| 8 | Account or connection state blocks the request |
+| 9 | Checkpoint flow error (expired, invalid code, or too many attempts) |
+| 10 | Messaging window expired or recipient unreachable |
+| 11 | Billing issue (payment required, failed, or seat cancelled) |
+| 12 | Auth action needed (a pending checkpoint; not an error) |
 
 ## License
 

package/dist/{account-MIPWTAG5.js → account-NZZLUI4E.js}

@@ -10,7 +10,7 @@ import {
 import {
   pageDelayFromFlags,
   streamAll
-} from "./chunk-H6XD3F66.js";
+} from "./chunk-766W25QS.js";
 import {
   buildPreviewOutput
 } from "./chunk-R3VLWLVV.js";
@@ -20,15 +20,14 @@ import {
   renderSuccess,
   renderUnexpectedError,
   resolveEffectiveConfig
-} from "./chunk-JA3NNST6.js";
+} from "./chunk-TKWW6BV6.js";
+import "./chunk-SYRFLZ4D.js";
 import {
   GLOBAL_FLAGS,
   READ_SINGLE_FLAGS,
-  WRITE_SINGLE_FLAGS
-} from "./chunk-CUTMZWL6.js";
-import {
+  WRITE_SINGLE_FLAGS,
   defaultReadStdin
-} from "./chunk-ZYURL5VK.js";
+} from "./chunk-AHYUM2XQ.js";
 import {
   AUTH_NEEDED
 } from "./chunk-PMRQXBCP.js";
@@ -1101,11 +1100,11 @@ var accountCheckpointPollCommand = defineCommand({
     },
     // Override WRITE_SINGLE_FLAGS.timeout: on this command --timeout is the
     // --wait loop's own wall-clock bound in MILLISECONDS (requires --wait),
-    // NOT the SDK request timeout, and NOT seconds like `inbox sync-chat
-    // --timeout`. Default: the time remaining to the checkpoint's own expiry.
+    // NOT the SDK request timeout. Default: the time remaining to the
+    // checkpoint's own expiry.
     timeout: {
       type: "string",
-      description: "Wait-loop timeout in milliseconds (requires --wait; default: time remaining to the checkpoint's expiry). Note the unit: this is milliseconds; `inbox sync-chat --timeout` is seconds."
+      description: "Wait-loop timeout in milliseconds (requires --wait; default: time remaining to the checkpoint's expiry)."
     }
   },
   async run({ args }) {

package/dist/{chunk-H6XD3F66.js → chunk-766W25QS.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   renderNotices
-} from "./chunk-JA3NNST6.js";
+} from "./chunk-TKWW6BV6.js";
 
 // src/lib/paginate.ts
 var PaginateError = class extends Error {

package/dist/{chunk-ZYURL5VK.js → chunk-AHYUM2XQ.js}

@@ -73,11 +73,103 @@ async function resolveTextOrStdin(rawText, out, readStdin) {
   return text;
 }
 
+// src/lib/global-flags.ts
+var GLOBAL_FLAGS = {
+  // Auth / config
+  "api-key": {
+    type: "string",
+    description: "API key (overrides env and profile). Note: a key passed on the command line is visible to other processes via `ps` and is saved in shell history; prefer the CURVIATE_API_KEY env var or `curviate login`."
+  },
+  profile: {
+    type: "string",
+    description: "Named profile to use from the config file."
+  },
+  account: {
+    type: "string",
+    description: "Account id for account-scoped commands."
+  },
+  "base-url": {
+    type: "string",
+    description: "Override the API base URL."
+  },
+  timeout: {
+    type: "string",
+    description: "Request timeout in milliseconds."
+  },
+  // Output
+  json: {
+    type: "boolean",
+    description: "Emit JSON output (default when stdout is not a TTY).",
+    default: false
+  },
+  fields: {
+    type: "string",
+    description: "Comma-separated dot-path field projection (e.g. id,name)."
+  },
+  limit: {
+    type: "string",
+    description: "Maximum items per page."
+  },
+  cursor: {
+    type: "string",
+    description: "Pagination cursor (opaque token from a previous response)."
+  },
+  all: {
+    type: "boolean",
+    description: "Stream all pages as NDJSON.",
+    default: false
+  },
+  "max-pages": {
+    type: "string",
+    description: "Maximum number of pages to fetch when --all is used."
+  },
+  "page-delay": {
+    type: "string",
+    description: "Milliseconds to pause between pages when --all is used (default 400; pass 0 to disable). A modest delay keeps a long stream under the platform rate gate."
+  },
+  preview: {
+    type: "boolean",
+    description: "Render the request that would be sent without calling the API.",
+    default: false
+  },
+  verbose: {
+    type: "boolean",
+    description: "Output the full SDK response instead of the slim default.",
+    default: false
+  }
+};
+var WRITE_FLAGS = {
+  "api-key": GLOBAL_FLAGS["api-key"],
+  profile: GLOBAL_FLAGS.profile,
+  account: GLOBAL_FLAGS.account,
+  "base-url": GLOBAL_FLAGS["base-url"],
+  timeout: GLOBAL_FLAGS.timeout,
+  json: GLOBAL_FLAGS.json,
+  preview: GLOBAL_FLAGS.preview,
+  verbose: GLOBAL_FLAGS.verbose
+};
+var READ_SINGLE_FLAGS = {
+  "api-key": GLOBAL_FLAGS["api-key"],
+  profile: GLOBAL_FLAGS.profile,
+  account: GLOBAL_FLAGS.account,
+  "base-url": GLOBAL_FLAGS["base-url"],
+  timeout: GLOBAL_FLAGS.timeout,
+  json: GLOBAL_FLAGS.json,
+  fields: GLOBAL_FLAGS.fields,
+  preview: GLOBAL_FLAGS.preview,
+  verbose: GLOBAL_FLAGS.verbose
+};
+var WRITE_SINGLE_FLAGS = READ_SINGLE_FLAGS;
+
 export {
   STDIN_SENTINEL,
   defaultReadStdin,
   isStdinToken,
   restoreLiteralDashes,
   assertNoStdinPlaceholder,
-  resolveTextOrStdin
+  resolveTextOrStdin,
+  GLOBAL_FLAGS,
+  WRITE_FLAGS,
+  READ_SINGLE_FLAGS,
+  WRITE_SINGLE_FLAGS
 };

package/dist/{chunk-56ORAZJO.js → chunk-LCIUD7S2.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   isStdinToken
-} from "./chunk-ZYURL5VK.js";
+} from "./chunk-AHYUM2XQ.js";
 
 // src/lib/search-filters.ts
 import { readFile } from "fs/promises";

package/dist/{chunk-3BO6GVS2.js → chunk-LCLYFE54.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   assertNoStdinPlaceholder
-} from "./chunk-ZYURL5VK.js";
+} from "./chunk-AHYUM2XQ.js";
 import {
   getExitCode
 } from "./chunk-PMRQXBCP.js";

package/dist/{chunk-MBO4LBLY.js → chunk-S6VAMUCC.js}

@@ -18,7 +18,7 @@ import {
 } from "./chunk-UEAX6KUB.js";
 import {
   requireAccount
-} from "./chunk-3BO6GVS2.js";
+} from "./chunk-LCLYFE54.js";
 import {
   buildPreviewOutput
 } from "./chunk-R3VLWLVV.js";
@@ -28,14 +28,12 @@ import {
   renderSuccess,
   renderUnexpectedError,
   resolveEffectiveConfig
-} from "./chunk-JA3NNST6.js";
+} from "./chunk-TKWW6BV6.js";
 import {
   READ_SINGLE_FLAGS,
-  WRITE_FLAGS
-} from "./chunk-CUTMZWL6.js";
-import {
+  WRITE_FLAGS,
   resolveTextOrStdin
-} from "./chunk-ZYURL5VK.js";
+} from "./chunk-AHYUM2XQ.js";
 
 // src/commands/message.ts
 import { defineCommand } from "citty";

package/dist/{chunk-CUTMZWL6.js → chunk-SYRFLZ4D.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   assertNoStdinPlaceholder
-} from "./chunk-ZYURL5VK.js";
+} from "./chunk-AHYUM2XQ.js";
 
 // src/lib/config.ts
 import {
@@ -130,94 +130,6 @@ async function updateProfileField(profileName, field, value) {
   await writeConfig(cfg);
 }
 
-// src/lib/global-flags.ts
-var GLOBAL_FLAGS = {
-  // Auth / config
-  "api-key": {
-    type: "string",
-    description: "API key (overrides env and profile). Note: a key passed on the command line is visible to other processes via `ps` and is saved in shell history; prefer the CURVIATE_API_KEY env var or `curviate login`."
-  },
-  profile: {
-    type: "string",
-    description: "Named profile to use from the config file."
-  },
-  account: {
-    type: "string",
-    description: "Account id for account-scoped commands."
-  },
-  "base-url": {
-    type: "string",
-    description: "Override the API base URL."
-  },
-  timeout: {
-    type: "string",
-    description: "Request timeout in milliseconds."
-  },
-  // Output
-  json: {
-    type: "boolean",
-    description: "Emit JSON output (default when stdout is not a TTY).",
-    default: false
-  },
-  fields: {
-    type: "string",
-    description: "Comma-separated dot-path field projection (e.g. id,name)."
-  },
-  limit: {
-    type: "string",
-    description: "Maximum items per page."
-  },
-  cursor: {
-    type: "string",
-    description: "Pagination cursor (opaque token from a previous response)."
-  },
-  all: {
-    type: "boolean",
-    description: "Stream all pages as NDJSON.",
-    default: false
-  },
-  "max-pages": {
-    type: "string",
-    description: "Maximum number of pages to fetch when --all is used."
-  },
-  "page-delay": {
-    type: "string",
-    description: "Milliseconds to pause between pages when --all is used (default 400; pass 0 to disable). A modest delay keeps a long stream under the platform rate gate."
-  },
-  preview: {
-    type: "boolean",
-    description: "Render the request that would be sent without calling the API.",
-    default: false
-  },
-  verbose: {
-    type: "boolean",
-    description: "Output the full SDK response instead of the slim default.",
-    default: false
-  }
-};
-var WRITE_FLAGS = {
-  "api-key": GLOBAL_FLAGS["api-key"],
-  profile: GLOBAL_FLAGS.profile,
-  account: GLOBAL_FLAGS.account,
-  "base-url": GLOBAL_FLAGS["base-url"],
-  timeout: GLOBAL_FLAGS.timeout,
-  json: GLOBAL_FLAGS.json,
-  preview: GLOBAL_FLAGS.preview,
-  verbose: GLOBAL_FLAGS.verbose
-};
-var READ_SINGLE_FLAGS = {
-  "api-key": GLOBAL_FLAGS["api-key"],
-  profile: GLOBAL_FLAGS.profile,
-  account: GLOBAL_FLAGS.account,
-  "base-url": GLOBAL_FLAGS["base-url"],
-  timeout: GLOBAL_FLAGS.timeout,
-  json: GLOBAL_FLAGS.json,
-  fields: GLOBAL_FLAGS.fields,
-  preview: GLOBAL_FLAGS.preview,
-  verbose: GLOBAL_FLAGS.verbose
-};
-var WRITE_SINGLE_FLAGS = READ_SINGLE_FLAGS;
-
 export {
   getConfigPath,
   readConfig,
@@ -225,9 +137,5 @@ export {
   setActiveProfile,
   renameProfile,
   removeProfile,
-  updateProfileField,
-  GLOBAL_FLAGS,
-  WRITE_FLAGS,
-  READ_SINGLE_FLAGS,
-  WRITE_SINGLE_FLAGS
+  updateProfileField
 };

package/dist/{chunk-JA3NNST6.js → chunk-TKWW6BV6.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   readConfig
-} from "./chunk-CUTMZWL6.js";
+} from "./chunk-SYRFLZ4D.js";
 import {
   assertNoStdinPlaceholder
-} from "./chunk-ZYURL5VK.js";
+} from "./chunk-AHYUM2XQ.js";
 
 // src/lib/resolve.ts
 var DEFAULT_BASE_URL = "https://api.curviate.com";