@curviate/sdk 0.12.0 → 0.14.0

package/dist/index.d.ts

@@ -166,20 +166,20 @@ interface paths {
                                 seat_id?: string | null;
                                 /** @description ISO-8601 UTC connection timestamp. */
                                 connected_at?: string | null;
-                                /** @description Cached account username. Null until enriched. */
+                                /** @description Cached account username. No longer refreshed by background enrichment — null for newly connected accounts (a previously cached value is retained). */
                                 username?: string | null;
-                                /** @description Cached premium-membership id. Null until enriched, or for non-premium accounts. */
+                                /** @description Cached premium-membership id. No longer refreshed by background enrichment — null for newly connected accounts, or for non-premium accounts (a previously cached value is retained). */
                                 premium_id?: string | null;
-                                /** @description Cached public profile identifier. Null until enriched. */
+                                /** @description Cached public profile identifier. No longer refreshed by background enrichment — null for newly connected accounts (a previously cached value is retained). */
                                 public_identifier?: string | null;
-                                /** @description ISO-8601 UTC creation timestamp of the underlying LinkedIn account — distinct from connected_at. Null until enriched. */
+                                /** @description ISO-8601 UTC creation timestamp of the underlying LinkedIn account — distinct from connected_at. Null until the first background enrichment lands. */
                                 substrate_created_at?: string | null;
-                                /** @description Cached signature blocks (title + content) for the account. Empty until enriched. */
+                                /** @description Cached signature blocks (title + content). No longer refreshed by background enrichment — empty for newly connected accounts (a previously cached value is retained). */
                                 signatures?: {
                                     title?: string;
                                     content?: string;
                                 }[];
-                                /** @description Cached group names the account belongs to. Empty until enriched. */
+                                /** @description Cached group names the account belongs to. No longer refreshed by background enrichment — empty for newly connected accounts (a previously cached value is retained). */
                                 groups?: string[];
                             }[];
                             /** @description Next-page cursor; null on the last page. */
@@ -351,7 +351,7 @@ interface paths {
                             object?: "account";
                             account_id?: string;
                             /** @enum {string} */
-                            status?: "active";
+                            status?: "active" | "reconnect_needed" | "restricted" | "disconnected";
                             /** @enum {string} */
                             auth_method?: "credentials" | "cookie";
                             full_name?: string | null;
@@ -363,10 +363,12 @@ interface paths {
                              * @description Deprecated — use seat_id (same value). Removed at the GA /v1 cutover.
                              */
                             attached_seat_id?: string | null;
+                            /** @description Present and true only when this connect recovered an existing LinkedIn identity already present on the workspace (claiming it into your account) instead of connecting a brand-new one. Absent on a normal connect. The account's status reflects its real observed state, which may need a reconnect. */
+                            recovered?: boolean;
                         };
                     };
                 };
-                /** @description A verification challenge is required. Submit the code to checkpoints/submit using the returned account_id. */
+                /** @description A verification challenge is required. Resolve it via the checkpoint sub-resource (POST /v1/accounts/{account_id}/checkpoint/solve) using the returned account_id. */
                 202: {
                     headers: {
                         "RateLimit-Policy": components["headers"]["RateLimit-Policy"];
@@ -382,19 +384,24 @@ interface paths {
                             object?: "checkpoint";
                             /** @enum {string} */
                             status?: "checkpoint_required";
-                            /** @description The (provisional) account_id to pass to checkpoints/submit. */
+                            /** @description The (provisional) account_id to pass to the checkpoint sub-resource (POST /v1/accounts/{account_id}/checkpoint/solve). */
                             account_id?: string;
                             /**
                              * @description The verification challenge LinkedIn issued.
                              * @enum {string}
                              */
-                            challenge_type?: "otp" | "two_factor_sms" | "two_factor_app" | "mobile_app_approval";
+                            challenge_type?: "otp" | "two_factor_sms" | "two_factor_app" | "two_factor_whatsapp" | "mobile_app_approval" | "otp_or_mobile_app_approval" | "contract_selection";
+                            /** @description Contract picker options (contract_selection only). Solve with the chosen id as the code. */
+                            contracts?: {
+                                id?: string;
+                                name?: string;
+                            }[];
                             /** @description ISO-8601 expiry of the challenge. */
                             expires_at?: string;
                         };
                     };
                 };
-                /** @description Invalid request — missing seat_id or a malformed auth block. */
+                /** @description Invalid request — missing seat_id, a malformed auth block, or a cookie connect without user_agent. */
                 400: {
                     headers: {
                         [name: string]: unknown;
@@ -421,7 +428,16 @@ interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
-                /** @description The verification challenge type cannot be resolved automatically. */
+                /** @description This LinkedIn account is already linked (names your own account_id when your tenant owns it). */
+                409: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description The verification challenge cannot be resolved automatically (a dead-end challenge such as a CAPTCHA or a phone-number registration). For those two dead-ends the error body carries a machine-readable challenge_type (captcha | phone_register) so a client can render the right guidance; other unsupported challenges carry no challenge_type. */
                 422: {
                     headers: {
                         [name: string]: unknown;
@@ -535,20 +551,20 @@ interface paths {
                             last_checked_at?: string;
                             /** @description The seat this account occupies (null for an admin seatless account). */
                             seat_id?: string | null;
-                            /** @description Cached account username. Null until enriched. */
+                            /** @description Cached account username. No longer refreshed by background enrichment — null for newly connected accounts (a previously cached value is retained). */
                             username?: string | null;
-                            /** @description Cached premium-membership id. Null until enriched, or for non-premium accounts. */
+                            /** @description Cached premium-membership id. No longer refreshed by background enrichment — null for newly connected accounts, or for non-premium accounts (a previously cached value is retained). */
                             premium_id?: string | null;
-                            /** @description Cached public profile identifier. Null until enriched. */
+                            /** @description Cached public profile identifier. No longer refreshed by background enrichment — null for newly connected accounts (a previously cached value is retained). */
                             public_identifier?: string | null;
-                            /** @description ISO-8601 UTC creation timestamp of the underlying LinkedIn account — distinct from connected_at. Null until enriched. */
+                            /** @description ISO-8601 UTC creation timestamp of the underlying LinkedIn account — distinct from connected_at. Null until the first background enrichment lands. */
                             substrate_created_at?: string | null;
-                            /** @description Cached signature blocks (title + content) for the account. Empty until enriched. */
+                            /** @description Cached signature blocks (title + content). No longer refreshed by background enrichment — empty for newly connected accounts (a previously cached value is retained). */
                             signatures?: {
                                 title?: string;
                                 content?: string;
                             }[];
-                            /** @description Cached group names the account belongs to. Empty until enriched. */
+                            /** @description Cached group names the account belongs to. No longer refreshed by background enrichment — empty for newly connected accounts (a previously cached value is retained). */
                             groups?: string[];
                             /** @description Usage-safety recommendations for this account — one entry per tracked family (messages.daily, connection_requests.daily, profile_views.daily, inmail.daily, profile.endorse, account.per_minute). These are advisory only: Curviate never rejects a request because a daily recommendation is exceeded; only account.per_minute is a binding limit enforced with HTTP 429. */
                             quotas?: {
@@ -737,8 +753,8 @@ interface paths {
         options?: never;
         head?: never;
         /**
-         * Update managed-proxy configuration
-         * @description Update the managed proxy egress for an account — supply a proxy object, or a country / ip to request a managed proxy location. Credentials and seat binding are untouched. The proxy password is encrypted at rest and never returned.
+         * Update account metadata / proxy configuration
+         * @description Update an account's custom metadata (a flat string map that replaces the store wholesale) and/or its custom proxy egress — supply a proxy object to set one, or null to clear it (revert to automatic proxy protection). Credentials and seat binding are untouched. The proxy password is encrypted at rest and never returned.
          */
         patch: {
             parameters: {
@@ -753,7 +769,9 @@ interface paths {
             requestBody: {
                 content: {
                     "application/json": {
-                        /** @description Managed-proxy egress configuration for this account's outbound traffic. */
+                        /** @description Flat string→string map that replaces this account's custom-data store wholesale (unprovided keys are removed). */
+                        metadata?: unknown;
+                        /** @description Custom-proxy egress config, or null to clear it (revert to automatic proxy protection). Omit to leave it unchanged. */
                         proxy?: {
                             /**
                              * @description Proxy protocol. One of http, https, socks5.
@@ -768,16 +786,12 @@ interface paths {
                             username?: string;
                             /** @description Proxy auth password (optional). Encrypted at rest, never logged or returned. */
                             password?: string;
-                        };
-                        /** @description Managed proxy location hint as an ISO 3166-1 alpha-2 country code (e.g. US, DE). */
-                        country?: string;
-                        /** @description IPv4 address used to infer the managed proxy location. */
-                        ip?: string;
+                        } | null;
                     };
                 };
             };
             responses: {
-                /** @description The managed-proxy configuration was updated. */
+                /** @description The account metadata / proxy configuration was updated. */
                 200: {
                     headers: {
                         "RateLimit-Policy": components["headers"]["RateLimit-Policy"];
@@ -795,7 +809,7 @@ interface paths {
                         };
                     };
                 };
-                /** @description Invalid proxy / country / ip. */
+                /** @description Invalid request — a malformed proxy object or an unsupported field (country/ip are no longer accepted). */
                 400: {
                     headers: {
                         [name: string]: unknown;
@@ -834,7 +848,7 @@ interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
-                /** @description This managed-proxy configuration is not supported for this account (e.g. the requested proxy mode or location is unavailable on the account's current plan). Not retryable as-is — change the request rather than resubmitting. */
+                /** @description This proxy configuration is not supported for this account (e.g. the requested proxy mode is unavailable on the account's current plan). Not retryable as-is — change the request rather than resubmitting. */
                 501: {
                     headers: {
                         [name: string]: unknown;
@@ -885,7 +899,7 @@ interface paths {
         put?: never;
         /**
          * Generate a hosted connection link
-         * @description Mint a one-time hosted URL the end user opens to authorize a LinkedIn connection. Credentials land server-side and never transit the API or LLM context. `purpose` defaults to `create`. Required fields are conditional on `purpose`: for `purpose=create`, `seat_id` is required (the empty seat the new account fills); for `purpose=reconnect`, `account_id` is required (the existing account to re-auth). `expires_in_seconds` (60–3600, default 900) and `redirect_url` are optional. See the create and reconnect examples below — each is a complete, valid body for its purpose.
+         * @description Mint a one-time hosted URL the end user opens to authorize a NEW LinkedIn connection. Credentials land server-side and never transit the API or LLM context. `seat_id` (the empty seat the new account fills) is required; `expires_in_seconds` (60–3600, default 900) and `redirect_url` are optional. To re-authorize an EXISTING account, use POST /v1/accounts/{account_id}/reconnect-link instead.
          */
         post: {
             parameters: {
@@ -897,28 +911,20 @@ interface paths {
             requestBody: {
                 content: {
                     "application/json": {
-                        /** @description Target seat for 'create' purpose (required when purpose=create) */
-                        seat_id?: string;
-                        /** @description Account to reconnect for 'reconnect' purpose (required when purpose=reconnect) */
-                        account_id?: string;
-                        /**
-                         * @description 'create' = new account onboarding; 'reconnect' = re-auth of existing account
-                         * @default create
-                         * @enum {string}
-                         */
-                        purpose?: "create" | "reconnect";
+                        /** @description The empty seat the newly connected account will fill. */
+                        seat_id: string;
                         /**
                          * @description Seconds until the link expires (60–3600, default 900)
                          * @default 900
                          */
                         expires_in_seconds?: number;
-                        /** @description Optional browser return URL after the hosted flow. No credential material. */
+                        /** @description Where the user's browser is sent after the connect flow completes. Must be an absolute https URL you control; you are responsible for its safety. Omit to return the user to a Curviate confirmation page. */
                         redirect_url?: string;
                     };
                 };
             };
             responses: {
-                /** @description A one-time hosted authorization link. Contains no credential material. */
+                /** @description A one-time hosted authorization link for a new connection. Contains no credential material. */
                 201: {
                     headers: {
                         "RateLimit-Policy": components["headers"]["RateLimit-Policy"];
@@ -937,12 +943,12 @@ interface paths {
                             /** @description Poll handle for GET /v1/accounts/connect-sessions/{session_id}. */
                             session_id?: string;
                             expires_at?: string;
-                            seat_id?: string | null;
-                            account_id?: string | null;
+                            /** @description The seat the new account will fill. */
+                            seat_id?: string;
                         };
                     };
                 };
-                /** @description Invalid request — missing seat_id (create) or account_id (reconnect). */
+                /** @description Invalid request — missing or invalid seat_id. */
                 400: {
                     headers: {
                         [name: string]: unknown;
@@ -960,7 +966,133 @@ interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
-                /** @description The referenced seat or account was not found. */
+                /** @description The referenced seat was not found. */
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Rate limited — slow down and retry after the hinted delay. */
+                429: {
+                    headers: {
+                        "RateLimit-Policy": components["headers"]["RateLimit-Policy"];
+                        RateLimit: components["headers"]["RateLimit"];
+                        "Retry-After": components["headers"]["Retry-After"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Internal error. */
+                500: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description A temporary error occurred. Please try again. */
+                502: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Service unavailable. */
+                503: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Gateway timeout. */
+                504: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+            };
+        };
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/accounts/{account_id}/reconnect-link": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Generate a hosted re-authorization link
+         * @description Mint a one-time hosted URL the end user opens to re-authorize an EXISTING connected account in place (same account_id, same seat) after it became disconnected. Credentials land server-side and never transit the API or LLM context. `expires_in_seconds` (60–3600, default 900) and `redirect_url` are optional. For a brand-new connection, use POST /v1/accounts/connect-link instead.
+         */
+        post: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    /** @description The account ID (`acc_…`) of the account to re-authorize. */
+                    account_id: string;
+                };
+                cookie?: never;
+            };
+            requestBody: {
+                content: {
+                    "application/json": {
+                        /**
+                         * @description Seconds until the link expires (60–3600, default 900)
+                         * @default 900
+                         */
+                        expires_in_seconds?: number;
+                        /** @description Where the user's browser is sent after the connect flow completes. Must be an absolute https URL you control; you are responsible for its safety. Omit to return the user to a Curviate confirmation page. */
+                        redirect_url?: string;
+                    };
+                };
+            };
+            responses: {
+                /** @description A one-time hosted re-authorization link for an existing account. Contains no credential material. */
+                201: {
+                    headers: {
+                        "RateLimit-Policy": components["headers"]["RateLimit-Policy"];
+                        RateLimit: components["headers"]["RateLimit"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": {
+                            /**
+                             * @description Response type discriminator.
+                             * @enum {string}
+                             */
+                            object?: "hosted_auth_url";
+                            /** @description The hosted URL the end user opens. */
+                            url?: string;
+                            /** @description Poll handle for GET /v1/accounts/connect-sessions/{session_id}. */
+                            session_id?: string;
+                            expires_at?: string;
+                            /** @description The account being re-authorized. */
+                            account_id?: string;
+                        };
+                    };
+                };
+                /** @description No such account for this tenant. */
                 404: {
                     headers: {
                         [name: string]: unknown;
@@ -1154,7 +1286,7 @@ interface paths {
         put?: never;
         /**
          * Reconnect a LinkedIn account
-         * @description Re-authorize an account in place (same account_id, same seat) after it became disconnected. Accepts the same auth methods and optional auth-knob set as link.
+         * @description Re-authorize an account in place (same account_id, same seat) after it became disconnected. Accepts the same auth methods and optional auth-knob set as link. May return a 202 checkpoint challenge (resolve it via the checkpoint sub-resource) exactly like link.
          */
         post: {
             parameters: {
@@ -1245,7 +1377,7 @@ interface paths {
                         };
                     };
                 };
-                /** @description A verification challenge is required (same as link). Submit the code to checkpoints/submit. */
+                /** @description A verification challenge is required (same as link). Resolve it via the checkpoint sub-resource (POST /v1/accounts/{account_id}/checkpoint/solve). */
                 202: {
                     headers: {
                         "RateLimit-Policy": components["headers"]["RateLimit-Policy"];
@@ -1261,13 +1393,18 @@ interface paths {
                             object?: "checkpoint";
                             /** @enum {string} */
                             status?: "checkpoint_required";
-                            /** @description The (provisional) account_id to pass to checkpoints/submit. */
+                            /** @description The (provisional) account_id to pass to the checkpoint sub-resource (POST /v1/accounts/{account_id}/checkpoint/solve). */
                             account_id?: string;
                             /**
                              * @description The verification challenge LinkedIn issued.
                              * @enum {string}
                              */
-                            challenge_type?: "otp" | "two_factor_sms" | "two_factor_app" | "mobile_app_approval";
+                            challenge_type?: "otp" | "two_factor_sms" | "two_factor_app" | "two_factor_whatsapp" | "mobile_app_approval" | "otp_or_mobile_app_approval" | "contract_selection";
+                            /** @description Contract picker options (contract_selection only). Solve with the chosen id as the code. */
+                            contracts?: {
+                                id?: string;
+                                name?: string;
+                            }[];
                             /** @description ISO-8601 expiry of the challenge. */
                             expires_at?: string;
                         };
@@ -1300,56 +1437,8 @@ interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
-                /** @description The account is restricted and cannot be re-authorized. */
-                422: {
-                    headers: {
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": components["schemas"]["Error"];
-                    };
-                };
-                /** @description Rate limited — slow down and retry after the hinted delay. */
-                429: {
-                    headers: {
-                        "RateLimit-Policy": components["headers"]["RateLimit-Policy"];
-                        RateLimit: components["headers"]["RateLimit"];
-                        "Retry-After": components["headers"]["Retry-After"];
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": components["schemas"]["Error"];
-                    };
-                };
-                /** @description Internal error. */
-                500: {
-                    headers: {
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": components["schemas"]["Error"];
-                    };
-                };
-                /** @description A temporary error occurred. Please try again. */
-                502: {
-                    headers: {
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": components["schemas"]["Error"];
-                    };
-                };
-                /** @description Service unavailable. */
-                503: {
-                    headers: {
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": components["schemas"]["Error"];
-                    };
-                };
-                /** @description Gateway timeout. */
-                504: {
+                /** @description This LinkedIn account is already linked. */
+                409: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -1357,66 +1446,8 @@ interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
-            };
-        };
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
-    "/v1/accounts/{account_id}/refresh": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        get?: never;
-        put?: never;
-        /**
-         * Refresh a frozen account's sources
-         * @description Force a state re-sync to restart sources on a frozen account, without changing credentials or seat binding. Returns the current account status inline.
-         */
-        post: {
-            parameters: {
-                query?: never;
-                header?: never;
-                path: {
-                    /** @description The account ID (`acc_…`) of the account to refresh. */
-                    account_id: string;
-                };
-                cookie?: never;
-            };
-            requestBody: {
-                content: {
-                    "application/json": Record<string, never>;
-                };
-            };
-            responses: {
-                /** @description The account's sources were restarted; current status returned. */
-                200: {
-                    headers: {
-                        "RateLimit-Policy": components["headers"]["RateLimit-Policy"];
-                        RateLimit: components["headers"]["RateLimit"];
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": {
-                            /**
-                             * @description Response type discriminator.
-                             * @enum {string}
-                             */
-                            object?: "account";
-                            account_id?: string;
-                            /** @enum {string} */
-                            status?: "active" | "reconnect_needed" | "restricted";
-                            last_checked_at?: string;
-                        };
-                    };
-                };
-                /** @description No such account for this tenant. */
-                404: {
+                /** @description The account is restricted and cannot be re-authorized. */
+                422: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -1480,7 +1511,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    "/v1/accounts/checkpoints/submit": {
+    "/v1/accounts/{account_id}/checkpoint/solve": {
         parameters: {
             query?: never;
             header?: never;
@@ -1490,28 +1521,29 @@ interface paths {
         get?: never;
         put?: never;
         /**
-         * Submit a checkpoint verification code
-         * @description Resolve the pending verification challenge for an account by submitting the OTP / 2FA code. Addressed by account_id in the body (the account_id returned with the 202 checkpoint_required response). A chained challenge returns another 202.
+         * Solve a checkpoint verification challenge
+         * @description Resolve the pending verification challenge for an account by submitting the code — an OTP / 2FA code, the chosen contract id (for a contract_selection challenge), or the special value TRY_ANOTHER_WAY to switch the challenge method. A chained challenge returns another 202.
          */
         post: {
             parameters: {
                 query?: never;
                 header?: never;
-                path?: never;
+                path: {
+                    /** @description The account ID (`acc_…`) whose checkpoint is mid-flight (returned with the 202 checkpoint_required response). */
+                    account_id: string;
+                };
                 cookie?: never;
             };
             requestBody: {
                 content: {
                     "application/json": {
-                        /** @description The account whose connect/reconnect is mid-flight (returned with the 202 checkpoint_required response). */
-                        account_id: string;
-                        /** @description The OTP / 2FA verification code. Special value TRY_ANOTHER_WAY switches the challenge type (e.g. in-app → 2FA). */
+                        /** @description The OTP / 2FA verification code, the chosen contract id (contract_selection), or the special value TRY_ANOTHER_WAY to switch the challenge method. */
                         code: string;
                     };
                 };
             };
             responses: {
-                /** @description The challenge was resolved; the account is now active. */
+                /** @description The challenge was resolved; the account is now connected. */
                 201: {
                     headers: {
                         "RateLimit-Policy": components["headers"]["RateLimit-Policy"];
@@ -1527,7 +1559,7 @@ interface paths {
                             object?: "account";
                             account_id?: string;
                             /** @enum {string} */
-                            status?: "active";
+                            status?: "active" | "reconnect_needed" | "restricted" | "disconnected";
                             /** @description The seat this account occupies (canonical — supersedes the deprecated attached_seat_id). */
                             seat_id?: string | null;
                             /**
@@ -1535,10 +1567,12 @@ interface paths {
                              * @description Deprecated — use seat_id (same value). Removed at the GA /v1 cutover.
                              */
                             attached_seat_id?: string | null;
+                            /** @description Present and true only when this connect recovered an existing LinkedIn identity already present on the workspace (claiming it into your account) instead of connecting a brand-new one. Absent on a normal connect. The account's status reflects its real observed state, which may need a reconnect. */
+                            recovered?: boolean;
                         };
                     };
                 };
-                /** @description A chained challenge follows (e.g. OTP -> 2FA). Submit the next code to the same account_id. */
+                /** @description A chained challenge follows (e.g. OTP -> 2FA). Solve the next code at the same account's checkpoint/solve. */
                 202: {
                     headers: {
                         "RateLimit-Policy": components["headers"]["RateLimit-Policy"];
@@ -1554,13 +1588,18 @@ interface paths {
                             object?: "checkpoint";
                             /** @enum {string} */
                             status?: "checkpoint_required";
-                            /** @description The (provisional) account_id to pass to checkpoints/submit. */
+                            /** @description The (provisional) account_id to pass to the checkpoint sub-resource (POST /v1/accounts/{account_id}/checkpoint/solve). */
                             account_id?: string;
                             /**
                              * @description The verification challenge LinkedIn issued.
                              * @enum {string}
                              */
-                            challenge_type?: "otp" | "two_factor_sms" | "two_factor_app" | "mobile_app_approval";
+                            challenge_type?: "otp" | "two_factor_sms" | "two_factor_app" | "two_factor_whatsapp" | "mobile_app_approval" | "otp_or_mobile_app_approval" | "contract_selection";
+                            /** @description Contract picker options (contract_selection only). Solve with the chosen id as the code. */
+                            contracts?: {
+                                id?: string;
+                                name?: string;
+                            }[];
                             /** @description ISO-8601 expiry of the challenge. */
                             expires_at?: string;
                         };
@@ -1649,7 +1688,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    "/v1/accounts/checkpoints/resend": {
+    "/v1/accounts/{account_id}/checkpoint/request": {
         parameters: {
             query?: never;
             header?: never;
@@ -1659,22 +1698,22 @@ interface paths {
         get?: never;
         put?: never;
         /**
-         * Resend a checkpoint verification notification
-         * @description Re-push / re-issue the pending verification challenge notification for an account. Addressed by account_id in the body (the account_id returned with the 202 checkpoint_required response). Meaningful for otp / two_factor_sms / mobile_app_approval challenges; a two_factor_app challenge has nothing to resend (the code is generated on the device) and returns resent:false rather than an error — the response never claims a resend that did not happen. Does not reset the checkpoint's expiry.
+         * Re-request a checkpoint verification notification
+         * @description Re-issue the pending verification challenge notification for an account. Meaningful for code-delivery challenges (otp / two_factor_sms / mobile_app_approval); a two_factor_app challenge has nothing to re-request (the code is generated on the device) and returns resent:false rather than an error — the response never claims a re-send that did not happen. Does not reset the checkpoint's expiry.
          */
         post: {
             parameters: {
                 query?: never;
                 header?: never;
-                path?: never;
+                path: {
+                    /** @description The account ID (`acc_…`) whose pending checkpoint notification should be re-issued. */
+                    account_id: string;
+                };
                 cookie?: never;
             };
             requestBody: {
                 content: {
-                    "application/json": {
-                        /** @description The account whose pending checkpoint notification should be re-sent (returned with the 202 checkpoint_required response, or from link/poll). */
-                        account_id: string;
-                    };
+                    "application/json": Record<string, never>;
                 };
             };
             responses: {
@@ -1780,7 +1819,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    "/v1/accounts/checkpoints/poll": {
+    "/v1/accounts/{account_id}/checkpoint/poll": {
         parameters: {
             query?: never;
             header?: never;
@@ -1791,21 +1830,21 @@ interface paths {
         put?: never;
         /**
          * Poll a mobile-app-approval checkpoint
-         * @description Poll the pending mobile-app-approval challenge for an account to check whether the user has approved the sign-in on their LinkedIn mobile app. Addressed by account_id in the body (the account_id returned with the 202 checkpoint_required response). There is no code to submit — approve on the phone, then poll. Returns status:"pending" while waiting, status:"active" once approved, or status:"expired"/"failed" on timeout/failure. Only valid for mobile_app_approval checkpoints — use submit for code-based challenges.
+         * @description Poll the pending mobile-app-approval challenge for an account to check whether the user has approved the sign-in on their LinkedIn mobile app. There is no code to submit — approve on the phone, then poll. Returns status:"pending" while waiting, status:"active" once approved, or status:"expired"/"failed" on timeout/failure. Valid for mobile_app_approval and the in-app branch of otp_or_mobile_app_approval — use solve for code-based challenges.
          */
         post: {
             parameters: {
                 query?: never;
                 header?: never;
-                path?: never;
+                path: {
+                    /** @description The account ID (`acc_…`) whose mobile-app-approval connect is mid-flight (returned with the 202 checkpoint_required response). */
+                    account_id: string;
+                };
                 cookie?: never;
             };
             requestBody: {
                 content: {
-                    "application/json": {
-                        /** @description The account whose mobile-app-approval connect is mid-flight (returned with the 202 checkpoint_required response). */
-                        account_id: string;
-                    };
+                    "application/json": Record<string, never>;
                 };
             };
             responses: {
@@ -1840,6 +1879,13 @@ interface paths {
                             attached_seat_id?: string | null;
                             /** @description ISO-8601 expiry. Present on status:"pending". */
                             expires_at?: string;
+                            /**
+                             * @description Machine-readable challenge discriminator. Present on status:"expired" so a client can render the right recovery guidance without parsing prose.
+                             * @enum {string}
+                             */
+                            challenge_type?: "mobile_app_approval";
+                            /** @description Human-readable, actionable next step when the approval timed out. Present on status:"expired". */
+                            recovery_hint?: string;
                         };
                     };
                 };
@@ -3006,7 +3052,7 @@ interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
-                /** @description You must be a page administrator of this company to read its followers. */
+                /** @description The account does not have the required Core seat. */
                 403: {
                     headers: {
                         [name: string]: unknown;
@@ -3015,7 +3061,7 @@ interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
-                /** @description The account_id does not belong to this tenant. */
+                /** @description Company not found, or you do not administer this company's page. */
                 404: {
                     headers: {
                         [name: string]: unknown;
@@ -16680,7 +16726,7 @@ interface paths {
                             value: string;
                         }[];
                         /** @description Messaging events to subscribe to (default: [message.received]) */
-                        events?: ("message.received" | "message.delivered" | "message.read" | "message.reaction" | "message.edited" | "message.deleted")[];
+                        events?: ("message.received" | "message.delivered" | "message.read" | "message.reaction" | "message.edited" | "message.deleted" | "chat.updated" | "chat.deleted")[];
                         /**
                          * @description Field-remapping keys for the messaging delivery payload
                          * @default []
@@ -16715,7 +16761,7 @@ interface paths {
                             value: string;
                         }[];
                         /** @description User/relation events to subscribe to (default: [connection.accepted]) */
-                        events?: "connection.accepted"[];
+                        events?: ("connection.accepted" | "connection.new")[];
                         /**
                          * @description Field-remapping keys for the user/relation delivery payload
                          * @default []
@@ -16750,7 +16796,7 @@ interface paths {
                             value: string;
                         }[];
                         /** @description Account-status events to subscribe to (default: all 7) */
-                        events?: ("account.created" | "account.connected" | "account.synced" | "account.reconnected" | "account.reconnect_needed" | "account.creation_failed" | "account.disconnected" | "account.error" | "account.paused" | "account.connecting" | "account.permission_revoked")[];
+                        events?: ("account.created" | "account.connected" | "account.synced" | "account.reconnected" | "account.reconnect_needed" | "account.creation_failed" | "account.disconnected" | "account.error" | "account.paused" | "account.connecting" | "account.permission_revoked" | "account.initial_sync.running" | "account.initial_sync.completed" | "account.initial_sync.failed")[];
                     };
                 };
             };
@@ -16872,7 +16918,7 @@ interface paths {
         };
         /**
          * List webhook event types
-         * @description Returns the complete canonical event catalogue (21 events) grouped by source: messaging (6), user (1), account_status (11), plus 3 tier-gated events. No quota consumed.
+         * @description Returns the complete canonical event catalogue (27 events) grouped by source: messaging (8), user (2), account_status (14), plus 3 tier-gated events. No quota consumed.
          */
         get: {
             parameters: {
@@ -16914,6 +16960,11 @@ interface paths {
                                      * @enum {string}
                                      */
                                     tier?: "recruiter" | "sales_nav";
+                                    /**
+                                     * @description Delivery timing. Omitted (equivalent to 'realtime') on every live-pushed event. 'no_longer_realtime' means no push exists for this event; 'not_realtime' means the event is polled, not pushed, and may lag the underlying LinkedIn event.
+                                     * @enum {string}
+                                     */
+                                    availability?: "realtime" | "no_longer_realtime" | "not_realtime";
                                 }[];
                             }[];
                         };
@@ -16957,7 +17008,113 @@ interface paths {
             path?: never;
             cookie?: never;
         };
-        get?: never;
+        /**
+         * Get a webhook
+         * @description Returns a single webhook owned by the calling tenant. The plaintext secret is never present on a read — only the prefix.
+         */
+        get: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    /** @description Webhook id (wh_-prefixed ULID). */
+                    id: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description The webhook, if owned by the calling tenant. The signing secret is never returned on a read — only the prefix. */
+                200: {
+                    headers: {
+                        "RateLimit-Policy": components["headers"]["RateLimit-Policy"];
+                        RateLimit: components["headers"]["RateLimit"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": {
+                            /**
+                             * @description Response type discriminator.
+                             * @enum {string}
+                             */
+                            object?: "webhook";
+                            /** @description Webhook id (wh_-prefixed ULID). */
+                            id?: string;
+                            /**
+                             * @description The event source this webhook subscribes to (immutable).
+                             * @enum {string}
+                             */
+                            source?: "messaging" | "user" | "account_status";
+                            /** @description The URL that receives delivery POST requests. */
+                            request_url?: string;
+                            /** @description Human-readable label. */
+                            name?: string | null;
+                            /**
+                             * @description Delivery body encoding.
+                             * @enum {string}
+                             */
+                            format?: "json" | "form";
+                            /** @description Accounts targeted by this webhook. Non-empty — each id is owned by the tenant. */
+                            account_ids?: string[];
+                            /** @description A disabled webhook is kept but delivers nothing. */
+                            enabled?: boolean;
+                            /** @description Custom headers added to each delivery POST. */
+                            headers?: {
+                                key?: string;
+                                value?: string;
+                            }[];
+                            /** @description Canonical event names this webhook subscribes to. */
+                            events?: string[];
+                            /** @description Field-remapping keys for the delivery payload (messaging and user sources only). */
+                            data?: string[];
+                            /** @description First 8 characters of the signing secret. The full secret is never returned on edit — it is preserved unchanged. */
+                            secret_prefix?: string;
+                            /** @description ISO-8601 creation timestamp. */
+                            created_at?: string;
+                        };
+                    };
+                };
+                /** @description Malformed or empty webhook id. */
+                400: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Missing or invalid API key. */
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Webhook not found or not owned by this tenant. */
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Rate limited — slow down and retry after the hinted delay. */
+                429: {
+                    headers: {
+                        "RateLimit-Policy": components["headers"]["RateLimit-Policy"];
+                        RateLimit: components["headers"]["RateLimit"];
+                        "Retry-After": components["headers"]["Retry-After"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+            };
+        };
         put?: never;
         post?: never;
         /**
@@ -17060,7 +17217,7 @@ interface paths {
                         /** @description Replace the delivery URL. Must be an HTTPS URL. */
                         request_url?: string;
                         /** @description Replace the human-readable name (1–100 chars), or null to clear it. */
-                        name?: string;
+                        name?: string | null;
                         /** @description Enable or disable the webhook. A disabled webhook delivers nothing. */
                         enabled?: boolean;
                         /** @description Replace the custom headers added to each delivery POST (whole-array). */
@@ -17373,32 +17530,30 @@ type AccountLinkCreated = paths["/v1/accounts/link"]["post"]["responses"]["201"]
 type AccountLinkCheckpoint = paths["/v1/accounts/link"]["post"]["responses"]["202"]["content"]["application/json"];
 /** Union returned by `accounts.link()` — account or checkpoint. */
 type AccountLinkResult = AccountLinkCreated | AccountLinkCheckpoint;
-/** `POST /v1/accounts/checkpoints/submit` request body. */
-type AccountSubmitCheckpointBody = paths["/v1/accounts/checkpoints/submit"]["post"]["requestBody"]["content"]["application/json"];
-/** `POST /v1/accounts/checkpoints/submit` result — 201 (active) or 202 (chained challenge). */
-type AccountSubmitCheckpointResult = paths["/v1/accounts/checkpoints/submit"]["post"]["responses"]["201"]["content"]["application/json"] | paths["/v1/accounts/checkpoints/submit"]["post"]["responses"]["202"]["content"]["application/json"];
-/** `POST /v1/accounts/checkpoints/poll` request body. */
-type AccountPollCheckpointBody = paths["/v1/accounts/checkpoints/poll"]["post"]["requestBody"]["content"]["application/json"];
-/** `POST /v1/accounts/checkpoints/poll` 200 body. */
-type AccountPollCheckpointResult = paths["/v1/accounts/checkpoints/poll"]["post"]["responses"]["200"]["content"]["application/json"];
-/** `POST /v1/accounts/checkpoints/resend` request body. */
-type AccountResendCheckpointBody = paths["/v1/accounts/checkpoints/resend"]["post"]["requestBody"]["content"]["application/json"];
-/** `POST /v1/accounts/checkpoints/resend` 200 body. */
-type AccountResendCheckpointResult = paths["/v1/accounts/checkpoints/resend"]["post"]["responses"]["200"]["content"]["application/json"];
+/** `POST /v1/accounts/{account_id}/checkpoint/solve` request body. */
+type AccountSolveCheckpointBody = paths["/v1/accounts/{account_id}/checkpoint/solve"]["post"]["requestBody"]["content"]["application/json"];
+/** `POST /v1/accounts/{account_id}/checkpoint/solve` result — 201 (active) or 202 (chained challenge). */
+type AccountSolveCheckpointResult = paths["/v1/accounts/{account_id}/checkpoint/solve"]["post"]["responses"]["201"]["content"]["application/json"] | paths["/v1/accounts/{account_id}/checkpoint/solve"]["post"]["responses"]["202"]["content"]["application/json"];
+/** `POST /v1/accounts/{account_id}/checkpoint/request` 200 body. */
+type AccountRequestCheckpointResult = paths["/v1/accounts/{account_id}/checkpoint/request"]["post"]["responses"]["200"]["content"]["application/json"];
+/** `POST /v1/accounts/{account_id}/checkpoint/poll` 200 body. */
+type AccountPollCheckpointResult = paths["/v1/accounts/{account_id}/checkpoint/poll"]["post"]["responses"]["200"]["content"]["application/json"];
 /** `POST /v1/accounts/connect-link` request body. */
 type AccountConnectLinkBody = paths["/v1/accounts/connect-link"]["post"]["requestBody"]["content"]["application/json"];
 /** `POST /v1/accounts/connect-link` 201 body. */
 type AccountConnectLinkResult = paths["/v1/accounts/connect-link"]["post"]["responses"]["201"]["content"]["application/json"];
+/** `POST /v1/accounts/{account_id}/reconnect-link` request body. */
+type AccountReconnectLinkBody = paths["/v1/accounts/{account_id}/reconnect-link"]["post"]["requestBody"]["content"]["application/json"];
+/** `POST /v1/accounts/{account_id}/reconnect-link` 201 body. */
+type AccountReconnectLinkResult = paths["/v1/accounts/{account_id}/reconnect-link"]["post"]["responses"]["201"]["content"]["application/json"];
 /** `GET /v1/accounts/connect-sessions/{session_id}` 200 body. */
 type AccountConnectSessionResult = paths["/v1/accounts/connect-sessions/{session_id}"]["get"]["responses"]["200"]["content"]["application/json"];
 /** `GET /v1/accounts/{account_id}` 200 body. */
 type AccountDetail = paths["/v1/accounts/{account_id}"]["get"]["responses"]["200"]["content"]["application/json"];
 /** `POST /v1/accounts/{account_id}/reconnect` request body. */
 type AccountReconnectBody = paths["/v1/accounts/{account_id}/reconnect"]["post"]["requestBody"]["content"]["application/json"];
-/** `POST /v1/accounts/{account_id}/reconnect` 200 body. */
-type AccountReconnectResult = paths["/v1/accounts/{account_id}/reconnect"]["post"]["responses"]["200"]["content"]["application/json"];
-/** `POST /v1/accounts/{account_id}/refresh` 200 body. */
-type AccountRefreshResult = paths["/v1/accounts/{account_id}/refresh"]["post"]["responses"]["200"]["content"]["application/json"];
+/** `POST /v1/accounts/{account_id}/reconnect` result — 200 (active) or 202 (checkpoint). */
+type AccountReconnectResult = paths["/v1/accounts/{account_id}/reconnect"]["post"]["responses"]["200"]["content"]["application/json"] | paths["/v1/accounts/{account_id}/reconnect"]["post"]["responses"]["202"]["content"]["application/json"];
 /** `PATCH /v1/accounts/{account_id}` request body. */
 type AccountUpdateBody = paths["/v1/accounts/{account_id}"]["patch"]["requestBody"]["content"]["application/json"];
 /** `PATCH /v1/accounts/{account_id}` 200 body. */
@@ -17428,36 +17583,92 @@ declare class AccountsResource {
      * Connect a LinkedIn account to an empty seat.
      *
      * Returns an account (201) or a checkpoint challenge (202) when LinkedIn
-     * requires verification. Callers discriminate on `result.object`.
+     * requires verification. Callers discriminate on `result.object`; resolve a
+     * 202 with {@link solveCheckpoint} (code) or {@link pollCheckpoint}
+     * (mobile-app approval).
+     *
+     * For `auth_method: "cookie"`, `user_agent` is **required** — connecting by
+     * session cookie without one is rejected with `INVALID_REQUEST`. It stays
+     * optional for `auth_method: "credentials"`.
+     *
+     * On a 201 account, `recovered` is `true` only when the connect reclaimed a
+     * LinkedIn identity already present on the workspace (claiming it into your
+     * account) rather than connecting a brand-new one — it is absent on a normal
+     * connect. Its `status` reflects the account's real observed state: as well as
+     * `active` it may be `reconnect_needed`, `restricted`, or `disconnected` (a
+     * recovered identity often needs a reconnect).
      */
     link(body: AccountLinkBody): Promise<AccountLinkResult>;
     /**
-     * Submit an OTP or 2FA code to resolve a checkpoint challenge.
+     * Solve a checkpoint challenge by submitting an OTP or 2FA code.
+     *
+     * The account is addressed by `accountId` (the provisional `account_id`
+     * returned on the 202 `checkpoint_required` response); the body carries the
+     * `code`. Returns the connected account (201) or, when LinkedIn chains a
+     * second challenge, another checkpoint (202) — resolve that one with a
+     * further `solveCheckpoint` call for the same `accountId`.
+     *
+     * On the 201 account, `recovered` is `true` only when solving the challenge
+     * reclaimed a LinkedIn identity already present on the workspace (rather than
+     * connecting a brand-new one); it is absent otherwise. Its `status` reflects
+     * the account's real observed state — as well as `active` it may be
+     * `reconnect_needed`, `restricted`, or `disconnected`.
+     *
+     * @param accountId - the provisional `account_id` from the 202 response.
+     * @param body - the verification `code`.
      */
-    submitCheckpoint(body: AccountSubmitCheckpointBody): Promise<AccountSubmitCheckpointResult>;
+    solveCheckpoint(accountId: string, body: AccountSolveCheckpointBody): Promise<AccountSolveCheckpointResult>;
     /**
-     * Poll for mobile-app approval of a pending checkpoint challenge.
+     * Re-request the pending verification challenge notification for an account.
+     *
+     * Useful when the end user says they never received the code or push
+     * notification for a pending checkpoint. `resent` echoes the outcome
+     * honestly: `true` once the notification was actually re-sent, `false` when
+     * there was nothing to re-send for that challenge type (this call never
+     * throws just because a re-send wasn't applicable). Does not reset the
+     * checkpoint's expiry.
+     *
+     * @param accountId - the provisional `account_id` from the 202 response.
      */
-    pollCheckpoint(body: AccountPollCheckpointBody): Promise<AccountPollCheckpointResult>;
+    requestCheckpoint(accountId: string): Promise<AccountRequestCheckpointResult>;
     /**
-     * Re-send the pending verification challenge notification for an account.
+     * Poll for mobile-app approval of a pending checkpoint challenge.
      *
-     * Useful when the end user says they never received the code or push
-     * notification for a pending checkpoint. `resent` echoes the result
-     * honestly: `true` once the notification was actually re-sent, `false`
-     * when there was nothing to re-send for that challenge type (this call
-     * never throws just because a resend wasn't applicable). Does not reset
-     * the checkpoint's expiry.
+     * The account is addressed by `accountId` (the provisional `account_id`
+     * from the 202 response). `status` is `pending` until the end user approves
+     * on their device, then `active` (the account is connected), or
+     * `expired` / `failed`. Poll until it leaves `pending`.
+     *
+     * On `status: "expired"` (the approval timed out), the response carries
+     * `challenge_type` (`"mobile_app_approval"`) and a human-readable
+     * `recovery_hint` — the actionable next step — so a client can render the
+     * right recovery guidance without parsing prose.
+     *
+     * @param accountId - the provisional `account_id` from the 202 response.
      */
-    resendCheckpoint(body: AccountResendCheckpointBody): Promise<AccountResendCheckpointResult>;
+    pollCheckpoint(accountId: string): Promise<AccountPollCheckpointResult>;
     /**
-     * Generate a one-time hosted connection link the end user opens to authorize a
-     * LinkedIn connection without credentials transiting the API or LLM context.
+     * Generate a one-time hosted connection link the end user opens to authorize
+     * a new LinkedIn connection without credentials transiting the API or LLM
+     * context. Poll completion with {@link getConnectSession} using the returned
+     * `session_id`. To re-authorize an existing account, use
+     * {@link createReconnectLink} instead.
      */
     createConnectLink(body: AccountConnectLinkBody): Promise<AccountConnectLinkResult>;
     /**
-     * Poll a hosted connect session minted by {@link createConnectLink} (its
-     * `session_id`).
+     * Generate a one-time hosted **re-authorization** link for an existing
+     * account that became disconnected — the hosted counterpart of
+     * {@link reconnect}. The end user opens the returned `url`; poll completion
+     * with {@link getConnectSession} using the returned `session_id`. The account
+     * keeps its `account_id` and seat.
+     *
+     * @param accountId - the account to re-authorize.
+     * @param body - optional `expires_in_seconds` and `redirect_url`.
+     */
+    createReconnectLink(accountId: string, body?: AccountReconnectLinkBody): Promise<AccountReconnectLinkResult>;
+    /**
+     * Poll a hosted connect session minted by {@link createConnectLink} or
+     * {@link createReconnectLink} (its `session_id`).
      *
      * A pure status read — it makes no external call and does not itself complete
      * the connection. `status` is `pending` until the end user finishes the
@@ -17474,22 +17685,31 @@ declare class AccountsResource {
      * seat this account occupies, `null` for an admin seatless account).
      *
      * This is a stale-while-revalidate read — it always returns immediately
-     * from the cached row (never blocks on a live substrate call), and the
-     * six cached enrichment fields (`username`, `premium_id`,
-     * `public_identifier`, `substrate_created_at`, `signatures`, `groups`) are
-     * `null`/`[]` until the account's first enrichment pass completes.
+     * from the cached row (never blocks on a live substrate call). The cached
+     * enrichment fields `full_name` and `substrate_created_at` are populated by
+     * a background enrichment pass; `username`, `premium_id`,
+     * `public_identifier`, `signatures`, and `groups` are not sourced on the
+     * current connection surface and read `null`/`[]`.
      */
     get(accountId: string): Promise<AccountDetail>;
     /**
-     * Re-authorize a disconnected account in place (same account_id, same seat).
+     * Re-authorize a disconnected account in place (same `account_id`, same
+     * seat). Returns the reconnected account (200) or a checkpoint challenge
+     * (202) when LinkedIn requires verification — resolve a 202 with
+     * {@link solveCheckpoint} / {@link pollCheckpoint}, exactly like {@link link}.
+     *
+     * For `auth_method: "cookie"`, `user_agent` is **required** (as on
+     * {@link link}). For the hosted re-auth flow, use {@link createReconnectLink}.
      */
     reconnect(accountId: string, body: AccountReconnectBody): Promise<AccountReconnectResult>;
     /**
-     * Refresh frozen account sources (re-sync conversations, connection lists, etc.).
-     */
-    refresh(accountId: string): Promise<AccountRefreshResult>;
-    /**
-     * Update managed-proxy configuration for an account.
+     * Update an account's configuration.
+     *
+     * `metadata` is a flat string→string map that **replaces** the account's
+     * custom-data store wholesale (keys not provided are removed). `proxy` sets a
+     * custom egress proxy, or clears it (reverting to automatic proxy protection)
+     * when passed as `null`. The `proxy.password`, if given, is stored securely
+     * and never returned.
      */
     update(accountId: string, body: AccountUpdateBody): Promise<AccountUpdateResult>;
     /**
@@ -18226,12 +18446,13 @@ declare class CompaniesResource {
 }
 
 /**
- * Webhooks resource — 6 methods (root-scoped).
+ * Webhooks resource — 7 methods (root-scoped).
  *
  * Root-scoped: webhooks are tenant-wide, not account-scoped. All methods are
  * mounted directly on the root client (like `accounts`).
  * `getStateDiff` is placed here because it is tagged Webhooks in the OpenAPI
  * (`GET /v1/accounts/:id/state-diff` enables event-driven state sync).
+ * `get` is net-new — a single tenant-scoped read by id.
  */
 
 type WebhookCreateBody = paths["/v1/webhooks"]["post"]["requestBody"]["content"]["application/json"];
@@ -18239,6 +18460,7 @@ type WebhookCreateResult = paths["/v1/webhooks"]["post"]["responses"]["201"]["co
 type WebhookListParams = NonNullable<paths["/v1/webhooks"]["get"]["parameters"]["query"]>;
 type WebhookListResult = paths["/v1/webhooks"]["get"]["responses"]["200"]["content"]["application/json"];
 type WebhookListEventsResult = paths["/v1/webhooks/events"]["get"]["responses"]["200"]["content"]["application/json"];
+type WebhookGetResult = paths["/v1/webhooks/{id}"]["get"]["responses"]["200"]["content"]["application/json"];
 type WebhookUpdateBody = paths["/v1/webhooks/{id}"]["patch"]["requestBody"]["content"]["application/json"];
 type WebhookUpdateResult = paths["/v1/webhooks/{id}"]["patch"]["responses"]["200"]["content"]["application/json"];
 type WebhookDeleteResult = paths["/v1/webhooks/{id}"]["delete"]["responses"]["200"]["content"]["application/json"];
@@ -18260,10 +18482,16 @@ declare class WebhooksResource {
      */
     list(params?: WebhookListParams): Promise<WebhookListResult>;
     /**
-     * Return the complete canonical webhook event catalogue (21 events, grouped by source).
+     * Return the complete canonical webhook event catalogue (27 events, grouped by source).
      * `GET /v1/webhooks/events`
      */
     listEvents(): Promise<WebhookListEventsResult>;
+    /**
+     * Return a single webhook owned by the calling tenant.
+     * `GET /v1/webhooks/{id}`
+     * The plaintext secret is never present on a read — only `secret_prefix`.
+     */
+    get(id: string): Promise<WebhookGetResult>;
     /**
      * Update a webhook in place. `source` is immutable.
      * `PATCH /v1/webhooks/{id}`
@@ -18406,7 +18634,9 @@ declare class Curviate {
  * The taxonomy is additive-only: new codes may be appended, existing ones are
  * never removed or renamed.
  */
-type ErrorCode = "UNAUTHORIZED" | "INVALID_REQUEST" | "UNSUPPORTED_MEDIA_TYPE" | "PAYLOAD_TOO_LARGE" | "ACCOUNT_NOT_FOUND" | "ACCOUNT_RESTRICTED" | "RESOURCE_NOT_FOUND" | "RESOURCE_ACCESS_RESTRICTED" | "TIER_NOT_ACTIVE" | "LINKEDIN_FEATURE_NOT_SUBSCRIBED" | "RATE_LIMIT_ACCOUNT" | "RATE_LIMIT_TENANT" | "PLATFORM_RATE_LIMIT" | "PLATFORM_ERROR" | "PLATFORM_NOT_IMPLEMENTED" | "CHECKPOINT_NOT_FOUND" | "CHECKPOINT_EXPIRED" | "CHECKPOINT_INVALID_CODE" | "CHECKPOINT_MAX_ATTEMPTS" | "CHECKPOINT_ALREADY_RESOLVED" | "CHECKPOINT_UNSUPPORTED" | "CONNECTION_IN_PROGRESS" | "LINKEDIN_AUTH_FAILED" | "LINKEDIN_RATE_LIMITED" | "LINKEDIN_COOKIE_INVALID" | "LINKEDIN_SERVICE_UNAVAILABLE" | "MESSAGE_WINDOW_EXPIRED" | "RECIPIENT_UNREACHABLE" | "PAYMENT_REQUIRED" | "PAYMENT_FAILED" | "SUBSCRIPTION_BUSY" | "SUBSCRIPTION_NOT_FOUND" | "SEAT_NOT_FOUND" | "SEAT_CANCELLED" | "INTERNAL";
+type ErrorCode = "UNAUTHORIZED" | "INVALID_REQUEST" | "UNSUPPORTED_MEDIA_TYPE" | "PAYLOAD_TOO_LARGE" | "ACCOUNT_NOT_FOUND" | "ACCOUNT_RESTRICTED"
+/** Duplicate connect — reconnect or adopt the existing account instead of linking again. Not retryable. */
+ | "ACCOUNT_ALREADY_LINKED" | "RESOURCE_NOT_FOUND" | "RESOURCE_ACCESS_RESTRICTED" | "TIER_NOT_ACTIVE" | "LINKEDIN_FEATURE_NOT_SUBSCRIBED" | "RATE_LIMIT_ACCOUNT" | "RATE_LIMIT_TENANT" | "PLATFORM_RATE_LIMIT" | "PLATFORM_ERROR" | "PLATFORM_NOT_IMPLEMENTED" | "CHECKPOINT_NOT_FOUND" | "CHECKPOINT_EXPIRED" | "CHECKPOINT_INVALID_CODE" | "CHECKPOINT_MAX_ATTEMPTS" | "CHECKPOINT_ALREADY_RESOLVED" | "CHECKPOINT_UNSUPPORTED" | "CONNECTION_IN_PROGRESS" | "LINKEDIN_AUTH_FAILED" | "LINKEDIN_RATE_LIMITED" | "LINKEDIN_COOKIE_INVALID" | "LINKEDIN_SERVICE_UNAVAILABLE" | "MESSAGE_WINDOW_EXPIRED" | "RECIPIENT_UNREACHABLE" | "PAYMENT_REQUIRED" | "PAYMENT_FAILED" | "SUBSCRIPTION_BUSY" | "SUBSCRIPTION_NOT_FOUND" | "SEAT_NOT_FOUND" | "SEAT_CANCELLED" | "INTERNAL";
 /**
  * The product tier a caller needs, surfaced on `TIER_NOT_ACTIVE` so an agent
  * can route an upgrade without parsing the message. `sn` and `sales_nav` are
@@ -18547,8 +18777,19 @@ interface AccountPayload {
     [key: string]: unknown;
 }
 /**
- * The complete discriminated union of all 19 canonical Curviate webhook events.
- * The `type` field is the discriminant.
+ * The complete discriminated union of all 24 canonical, create-subscribable
+ * Curviate webhook events. The `type` field is the discriminant.
+ *
+ * Re-keyed for the v2 catalogue (was 19). Renamed/removed vs. the prior set:
+ * `account.stopped`, `account.sync_started`, `account.sync_complete`,
+ * `account.creation_success`, `account.sync_success`, `account.reconnect_required`,
+ * and `account.checkpoint` are gone — the account-lifecycle names now split
+ * across `account.synced` / `account.reconnected` / `account.reconnect_needed` /
+ * `account.paused` / `account.connecting` / `account.permission_revoked`. Net-new:
+ * `chat.updated`, `chat.deleted`, `connection.new`, and the three
+ * `account.initial_sync.*` events. This union is pinned at compile time against
+ * the generated create-events enum (see `test/webhooks.constructEvent.test.ts`)
+ * — it must never drift from the served catalogue again.
  *
  * @example
  * const event = await constructEvent(rawBody, header, secret);
@@ -18574,9 +18815,18 @@ type CurviateEvent = {
 } | {
     type: "message.reaction";
     data: MessagePayload;
+} | {
+    type: "chat.updated";
+    data: MessagePayload;
+} | {
+    type: "chat.deleted";
+    data: MessagePayload;
 } | {
     type: "connection.accepted";
     data: ConnectionPayload;
+} | {
+    type: "connection.new";
+    data: ConnectionPayload;
 } | {
     type: "account.created";
     data: AccountPayload;
@@ -18584,34 +18834,40 @@ type CurviateEvent = {
     type: "account.connected";
     data: AccountPayload;
 } | {
-    type: "account.disconnected";
+    type: "account.synced";
     data: AccountPayload;
 } | {
-    type: "account.error";
+    type: "account.reconnected";
     data: AccountPayload;
 } | {
-    type: "account.stopped";
+    type: "account.reconnect_needed";
     data: AccountPayload;
 } | {
-    type: "account.sync_started";
+    type: "account.creation_failed";
     data: AccountPayload;
 } | {
-    type: "account.sync_complete";
+    type: "account.disconnected";
     data: AccountPayload;
 } | {
-    type: "account.creation_success";
+    type: "account.error";
     data: AccountPayload;
 } | {
-    type: "account.creation_failed";
+    type: "account.paused";
+    data: AccountPayload;
+} | {
+    type: "account.connecting";
+    data: AccountPayload;
+} | {
+    type: "account.permission_revoked";
     data: AccountPayload;
 } | {
-    type: "account.sync_success";
+    type: "account.initial_sync.running";
     data: AccountPayload;
 } | {
-    type: "account.reconnect_required";
+    type: "account.initial_sync.completed";
     data: AccountPayload;
 } | {
-    type: "account.checkpoint";
+    type: "account.initial_sync.failed";
     data: AccountPayload;
 };
 /**