@curviate/sdk 0.12.0 → 0.14.0

package/src/generated/types.ts

@@ -57,20 +57,20 @@ export interface paths {
                                 seat_id?: string | null;
                                 /** @description ISO-8601 UTC connection timestamp. */
                                 connected_at?: string | null;
-                                /** @description Cached account username. Null until enriched. */
+                                /** @description Cached account username. No longer refreshed by background enrichment — null for newly connected accounts (a previously cached value is retained). */
                                 username?: string | null;
-                                /** @description Cached premium-membership id. Null until enriched, or for non-premium accounts. */
+                                /** @description Cached premium-membership id. No longer refreshed by background enrichment — null for newly connected accounts, or for non-premium accounts (a previously cached value is retained). */
                                 premium_id?: string | null;
-                                /** @description Cached public profile identifier. Null until enriched. */
+                                /** @description Cached public profile identifier. No longer refreshed by background enrichment — null for newly connected accounts (a previously cached value is retained). */
                                 public_identifier?: string | null;
-                                /** @description ISO-8601 UTC creation timestamp of the underlying LinkedIn account — distinct from connected_at. Null until enriched. */
+                                /** @description ISO-8601 UTC creation timestamp of the underlying LinkedIn account — distinct from connected_at. Null until the first background enrichment lands. */
                                 substrate_created_at?: string | null;
-                                /** @description Cached signature blocks (title + content) for the account. Empty until enriched. */
+                                /** @description Cached signature blocks (title + content). No longer refreshed by background enrichment — empty for newly connected accounts (a previously cached value is retained). */
                                 signatures?: {
                                     title?: string;
                                     content?: string;
                                 }[];
-                                /** @description Cached group names the account belongs to. Empty until enriched. */
+                                /** @description Cached group names the account belongs to. No longer refreshed by background enrichment — empty for newly connected accounts (a previously cached value is retained). */
                                 groups?: string[];
                             }[];
                             /** @description Next-page cursor; null on the last page. */
@@ -242,7 +242,7 @@ export interface paths {
                             object?: "account";
                             account_id?: string;
                             /** @enum {string} */
-                            status?: "active";
+                            status?: "active" | "reconnect_needed" | "restricted" | "disconnected";
                             /** @enum {string} */
                             auth_method?: "credentials" | "cookie";
                             full_name?: string | null;
@@ -254,10 +254,12 @@ export interface paths {
                              * @description Deprecated — use seat_id (same value). Removed at the GA /v1 cutover.
                              */
                             attached_seat_id?: string | null;
+                            /** @description Present and true only when this connect recovered an existing LinkedIn identity already present on the workspace (claiming it into your account) instead of connecting a brand-new one. Absent on a normal connect. The account's status reflects its real observed state, which may need a reconnect. */
+                            recovered?: boolean;
                         };
                     };
                 };
-                /** @description A verification challenge is required. Submit the code to checkpoints/submit using the returned account_id. */
+                /** @description A verification challenge is required. Resolve it via the checkpoint sub-resource (POST /v1/accounts/{account_id}/checkpoint/solve) using the returned account_id. */
                 202: {
                     headers: {
                         "RateLimit-Policy": components["headers"]["RateLimit-Policy"];
@@ -273,19 +275,24 @@ export interface paths {
                             object?: "checkpoint";
                             /** @enum {string} */
                             status?: "checkpoint_required";
-                            /** @description The (provisional) account_id to pass to checkpoints/submit. */
+                            /** @description The (provisional) account_id to pass to the checkpoint sub-resource (POST /v1/accounts/{account_id}/checkpoint/solve). */
                             account_id?: string;
                             /**
                              * @description The verification challenge LinkedIn issued.
                              * @enum {string}
                              */
-                            challenge_type?: "otp" | "two_factor_sms" | "two_factor_app" | "mobile_app_approval";
+                            challenge_type?: "otp" | "two_factor_sms" | "two_factor_app" | "two_factor_whatsapp" | "mobile_app_approval" | "otp_or_mobile_app_approval" | "contract_selection";
+                            /** @description Contract picker options (contract_selection only). Solve with the chosen id as the code. */
+                            contracts?: {
+                                id?: string;
+                                name?: string;
+                            }[];
                             /** @description ISO-8601 expiry of the challenge. */
                             expires_at?: string;
                         };
                     };
                 };
-                /** @description Invalid request — missing seat_id or a malformed auth block. */
+                /** @description Invalid request — missing seat_id, a malformed auth block, or a cookie connect without user_agent. */
                 400: {
                     headers: {
                         [name: string]: unknown;
@@ -312,7 +319,16 @@ export interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
-                /** @description The verification challenge type cannot be resolved automatically. */
+                /** @description This LinkedIn account is already linked (names your own account_id when your tenant owns it). */
+                409: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description The verification challenge cannot be resolved automatically (a dead-end challenge such as a CAPTCHA or a phone-number registration). For those two dead-ends the error body carries a machine-readable challenge_type (captcha | phone_register) so a client can render the right guidance; other unsupported challenges carry no challenge_type. */
                 422: {
                     headers: {
                         [name: string]: unknown;
@@ -426,20 +442,20 @@ export interface paths {
                             last_checked_at?: string;
                             /** @description The seat this account occupies (null for an admin seatless account). */
                             seat_id?: string | null;
-                            /** @description Cached account username. Null until enriched. */
+                            /** @description Cached account username. No longer refreshed by background enrichment — null for newly connected accounts (a previously cached value is retained). */
                             username?: string | null;
-                            /** @description Cached premium-membership id. Null until enriched, or for non-premium accounts. */
+                            /** @description Cached premium-membership id. No longer refreshed by background enrichment — null for newly connected accounts, or for non-premium accounts (a previously cached value is retained). */
                             premium_id?: string | null;
-                            /** @description Cached public profile identifier. Null until enriched. */
+                            /** @description Cached public profile identifier. No longer refreshed by background enrichment — null for newly connected accounts (a previously cached value is retained). */
                             public_identifier?: string | null;
-                            /** @description ISO-8601 UTC creation timestamp of the underlying LinkedIn account — distinct from connected_at. Null until enriched. */
+                            /** @description ISO-8601 UTC creation timestamp of the underlying LinkedIn account — distinct from connected_at. Null until the first background enrichment lands. */
                             substrate_created_at?: string | null;
-                            /** @description Cached signature blocks (title + content) for the account. Empty until enriched. */
+                            /** @description Cached signature blocks (title + content). No longer refreshed by background enrichment — empty for newly connected accounts (a previously cached value is retained). */
                             signatures?: {
                                 title?: string;
                                 content?: string;
                             }[];
-                            /** @description Cached group names the account belongs to. Empty until enriched. */
+                            /** @description Cached group names the account belongs to. No longer refreshed by background enrichment — empty for newly connected accounts (a previously cached value is retained). */
                             groups?: string[];
                             /** @description Usage-safety recommendations for this account — one entry per tracked family (messages.daily, connection_requests.daily, profile_views.daily, inmail.daily, profile.endorse, account.per_minute). These are advisory only: Curviate never rejects a request because a daily recommendation is exceeded; only account.per_minute is a binding limit enforced with HTTP 429. */
                             quotas?: {
@@ -628,8 +644,8 @@ export interface paths {
         options?: never;
         head?: never;
         /**
-         * Update managed-proxy configuration
-         * @description Update the managed proxy egress for an account — supply a proxy object, or a country / ip to request a managed proxy location. Credentials and seat binding are untouched. The proxy password is encrypted at rest and never returned.
+         * Update account metadata / proxy configuration
+         * @description Update an account's custom metadata (a flat string map that replaces the store wholesale) and/or its custom proxy egress — supply a proxy object to set one, or null to clear it (revert to automatic proxy protection). Credentials and seat binding are untouched. The proxy password is encrypted at rest and never returned.
          */
         patch: {
             parameters: {
@@ -644,7 +660,9 @@ export interface paths {
             requestBody: {
                 content: {
                     "application/json": {
-                        /** @description Managed-proxy egress configuration for this account's outbound traffic. */
+                        /** @description Flat string→string map that replaces this account's custom-data store wholesale (unprovided keys are removed). */
+                        metadata?: unknown;
+                        /** @description Custom-proxy egress config, or null to clear it (revert to automatic proxy protection). Omit to leave it unchanged. */
                         proxy?: {
                             /**
                              * @description Proxy protocol. One of http, https, socks5.
@@ -659,16 +677,12 @@ export interface paths {
                             username?: string;
                             /** @description Proxy auth password (optional). Encrypted at rest, never logged or returned. */
                             password?: string;
-                        };
-                        /** @description Managed proxy location hint as an ISO 3166-1 alpha-2 country code (e.g. US, DE). */
-                        country?: string;
-                        /** @description IPv4 address used to infer the managed proxy location. */
-                        ip?: string;
+                        } | null;
                     };
                 };
             };
             responses: {
-                /** @description The managed-proxy configuration was updated. */
+                /** @description The account metadata / proxy configuration was updated. */
                 200: {
                     headers: {
                         "RateLimit-Policy": components["headers"]["RateLimit-Policy"];
@@ -686,7 +700,7 @@ export interface paths {
                         };
                     };
                 };
-                /** @description Invalid proxy / country / ip. */
+                /** @description Invalid request — a malformed proxy object or an unsupported field (country/ip are no longer accepted). */
                 400: {
                     headers: {
                         [name: string]: unknown;
@@ -725,7 +739,7 @@ export interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
-                /** @description This managed-proxy configuration is not supported for this account (e.g. the requested proxy mode or location is unavailable on the account's current plan). Not retryable as-is — change the request rather than resubmitting. */
+                /** @description This proxy configuration is not supported for this account (e.g. the requested proxy mode is unavailable on the account's current plan). Not retryable as-is — change the request rather than resubmitting. */
                 501: {
                     headers: {
                         [name: string]: unknown;
@@ -776,7 +790,7 @@ export interface paths {
         put?: never;
         /**
          * Generate a hosted connection link
-         * @description Mint a one-time hosted URL the end user opens to authorize a LinkedIn connection. Credentials land server-side and never transit the API or LLM context. `purpose` defaults to `create`. Required fields are conditional on `purpose`: for `purpose=create`, `seat_id` is required (the empty seat the new account fills); for `purpose=reconnect`, `account_id` is required (the existing account to re-auth). `expires_in_seconds` (60–3600, default 900) and `redirect_url` are optional. See the create and reconnect examples below — each is a complete, valid body for its purpose.
+         * @description Mint a one-time hosted URL the end user opens to authorize a NEW LinkedIn connection. Credentials land server-side and never transit the API or LLM context. `seat_id` (the empty seat the new account fills) is required; `expires_in_seconds` (60–3600, default 900) and `redirect_url` are optional. To re-authorize an EXISTING account, use POST /v1/accounts/{account_id}/reconnect-link instead.
          */
         post: {
             parameters: {
@@ -788,28 +802,20 @@ export interface paths {
             requestBody: {
                 content: {
                     "application/json": {
-                        /** @description Target seat for 'create' purpose (required when purpose=create) */
-                        seat_id?: string;
-                        /** @description Account to reconnect for 'reconnect' purpose (required when purpose=reconnect) */
-                        account_id?: string;
-                        /**
-                         * @description 'create' = new account onboarding; 'reconnect' = re-auth of existing account
-                         * @default create
-                         * @enum {string}
-                         */
-                        purpose?: "create" | "reconnect";
+                        /** @description The empty seat the newly connected account will fill. */
+                        seat_id: string;
                         /**
                          * @description Seconds until the link expires (60–3600, default 900)
                          * @default 900
                          */
                         expires_in_seconds?: number;
-                        /** @description Optional browser return URL after the hosted flow. No credential material. */
+                        /** @description Where the user's browser is sent after the connect flow completes. Must be an absolute https URL you control; you are responsible for its safety. Omit to return the user to a Curviate confirmation page. */
                         redirect_url?: string;
                     };
                 };
             };
             responses: {
-                /** @description A one-time hosted authorization link. Contains no credential material. */
+                /** @description A one-time hosted authorization link for a new connection. Contains no credential material. */
                 201: {
                     headers: {
                         "RateLimit-Policy": components["headers"]["RateLimit-Policy"];
@@ -828,12 +834,12 @@ export interface paths {
                             /** @description Poll handle for GET /v1/accounts/connect-sessions/{session_id}. */
                             session_id?: string;
                             expires_at?: string;
-                            seat_id?: string | null;
-                            account_id?: string | null;
+                            /** @description The seat the new account will fill. */
+                            seat_id?: string;
                         };
                     };
                 };
-                /** @description Invalid request — missing seat_id (create) or account_id (reconnect). */
+                /** @description Invalid request — missing or invalid seat_id. */
                 400: {
                     headers: {
                         [name: string]: unknown;
@@ -851,7 +857,133 @@ export interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
-                /** @description The referenced seat or account was not found. */
+                /** @description The referenced seat was not found. */
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Rate limited — slow down and retry after the hinted delay. */
+                429: {
+                    headers: {
+                        "RateLimit-Policy": components["headers"]["RateLimit-Policy"];
+                        RateLimit: components["headers"]["RateLimit"];
+                        "Retry-After": components["headers"]["Retry-After"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Internal error. */
+                500: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description A temporary error occurred. Please try again. */
+                502: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Service unavailable. */
+                503: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Gateway timeout. */
+                504: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+            };
+        };
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/accounts/{account_id}/reconnect-link": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Generate a hosted re-authorization link
+         * @description Mint a one-time hosted URL the end user opens to re-authorize an EXISTING connected account in place (same account_id, same seat) after it became disconnected. Credentials land server-side and never transit the API or LLM context. `expires_in_seconds` (60–3600, default 900) and `redirect_url` are optional. For a brand-new connection, use POST /v1/accounts/connect-link instead.
+         */
+        post: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    /** @description The account ID (`acc_…`) of the account to re-authorize. */
+                    account_id: string;
+                };
+                cookie?: never;
+            };
+            requestBody: {
+                content: {
+                    "application/json": {
+                        /**
+                         * @description Seconds until the link expires (60–3600, default 900)
+                         * @default 900
+                         */
+                        expires_in_seconds?: number;
+                        /** @description Where the user's browser is sent after the connect flow completes. Must be an absolute https URL you control; you are responsible for its safety. Omit to return the user to a Curviate confirmation page. */
+                        redirect_url?: string;
+                    };
+                };
+            };
+            responses: {
+                /** @description A one-time hosted re-authorization link for an existing account. Contains no credential material. */
+                201: {
+                    headers: {
+                        "RateLimit-Policy": components["headers"]["RateLimit-Policy"];
+                        RateLimit: components["headers"]["RateLimit"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": {
+                            /**
+                             * @description Response type discriminator.
+                             * @enum {string}
+                             */
+                            object?: "hosted_auth_url";
+                            /** @description The hosted URL the end user opens. */
+                            url?: string;
+                            /** @description Poll handle for GET /v1/accounts/connect-sessions/{session_id}. */
+                            session_id?: string;
+                            expires_at?: string;
+                            /** @description The account being re-authorized. */
+                            account_id?: string;
+                        };
+                    };
+                };
+                /** @description No such account for this tenant. */
                 404: {
                     headers: {
                         [name: string]: unknown;
@@ -1045,7 +1177,7 @@ export interface paths {
         put?: never;
         /**
          * Reconnect a LinkedIn account
-         * @description Re-authorize an account in place (same account_id, same seat) after it became disconnected. Accepts the same auth methods and optional auth-knob set as link.
+         * @description Re-authorize an account in place (same account_id, same seat) after it became disconnected. Accepts the same auth methods and optional auth-knob set as link. May return a 202 checkpoint challenge (resolve it via the checkpoint sub-resource) exactly like link.
          */
         post: {
             parameters: {
@@ -1136,7 +1268,7 @@ export interface paths {
                         };
                     };
                 };
-                /** @description A verification challenge is required (same as link). Submit the code to checkpoints/submit. */
+                /** @description A verification challenge is required (same as link). Resolve it via the checkpoint sub-resource (POST /v1/accounts/{account_id}/checkpoint/solve). */
                 202: {
                     headers: {
                         "RateLimit-Policy": components["headers"]["RateLimit-Policy"];
@@ -1152,13 +1284,18 @@ export interface paths {
                             object?: "checkpoint";
                             /** @enum {string} */
                             status?: "checkpoint_required";
-                            /** @description The (provisional) account_id to pass to checkpoints/submit. */
+                            /** @description The (provisional) account_id to pass to the checkpoint sub-resource (POST /v1/accounts/{account_id}/checkpoint/solve). */
                             account_id?: string;
                             /**
                              * @description The verification challenge LinkedIn issued.
                              * @enum {string}
                              */
-                            challenge_type?: "otp" | "two_factor_sms" | "two_factor_app" | "mobile_app_approval";
+                            challenge_type?: "otp" | "two_factor_sms" | "two_factor_app" | "two_factor_whatsapp" | "mobile_app_approval" | "otp_or_mobile_app_approval" | "contract_selection";
+                            /** @description Contract picker options (contract_selection only). Solve with the chosen id as the code. */
+                            contracts?: {
+                                id?: string;
+                                name?: string;
+                            }[];
                             /** @description ISO-8601 expiry of the challenge. */
                             expires_at?: string;
                         };
@@ -1191,56 +1328,8 @@ export interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
-                /** @description The account is restricted and cannot be re-authorized. */
-                422: {
-                    headers: {
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": components["schemas"]["Error"];
-                    };
-                };
-                /** @description Rate limited — slow down and retry after the hinted delay. */
-                429: {
-                    headers: {
-                        "RateLimit-Policy": components["headers"]["RateLimit-Policy"];
-                        RateLimit: components["headers"]["RateLimit"];
-                        "Retry-After": components["headers"]["Retry-After"];
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": components["schemas"]["Error"];
-                    };
-                };
-                /** @description Internal error. */
-                500: {
-                    headers: {
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": components["schemas"]["Error"];
-                    };
-                };
-                /** @description A temporary error occurred. Please try again. */
-                502: {
-                    headers: {
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": components["schemas"]["Error"];
-                    };
-                };
-                /** @description Service unavailable. */
-                503: {
-                    headers: {
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": components["schemas"]["Error"];
-                    };
-                };
-                /** @description Gateway timeout. */
-                504: {
+                /** @description This LinkedIn account is already linked. */
+                409: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -1248,66 +1337,8 @@ export interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
-            };
-        };
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
-    "/v1/accounts/{account_id}/refresh": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        get?: never;
-        put?: never;
-        /**
-         * Refresh a frozen account's sources
-         * @description Force a state re-sync to restart sources on a frozen account, without changing credentials or seat binding. Returns the current account status inline.
-         */
-        post: {
-            parameters: {
-                query?: never;
-                header?: never;
-                path: {
-                    /** @description The account ID (`acc_…`) of the account to refresh. */
-                    account_id: string;
-                };
-                cookie?: never;
-            };
-            requestBody: {
-                content: {
-                    "application/json": Record<string, never>;
-                };
-            };
-            responses: {
-                /** @description The account's sources were restarted; current status returned. */
-                200: {
-                    headers: {
-                        "RateLimit-Policy": components["headers"]["RateLimit-Policy"];
-                        RateLimit: components["headers"]["RateLimit"];
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": {
-                            /**
-                             * @description Response type discriminator.
-                             * @enum {string}
-                             */
-                            object?: "account";
-                            account_id?: string;
-                            /** @enum {string} */
-                            status?: "active" | "reconnect_needed" | "restricted";
-                            last_checked_at?: string;
-                        };
-                    };
-                };
-                /** @description No such account for this tenant. */
-                404: {
+                /** @description The account is restricted and cannot be re-authorized. */
+                422: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -1371,7 +1402,7 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/v1/accounts/checkpoints/submit": {
+    "/v1/accounts/{account_id}/checkpoint/solve": {
         parameters: {
             query?: never;
             header?: never;
@@ -1381,28 +1412,29 @@ export interface paths {
         get?: never;
         put?: never;
         /**
-         * Submit a checkpoint verification code
-         * @description Resolve the pending verification challenge for an account by submitting the OTP / 2FA code. Addressed by account_id in the body (the account_id returned with the 202 checkpoint_required response). A chained challenge returns another 202.
+         * Solve a checkpoint verification challenge
+         * @description Resolve the pending verification challenge for an account by submitting the code — an OTP / 2FA code, the chosen contract id (for a contract_selection challenge), or the special value TRY_ANOTHER_WAY to switch the challenge method. A chained challenge returns another 202.
          */
         post: {
             parameters: {
                 query?: never;
                 header?: never;
-                path?: never;
+                path: {
+                    /** @description The account ID (`acc_…`) whose checkpoint is mid-flight (returned with the 202 checkpoint_required response). */
+                    account_id: string;
+                };
                 cookie?: never;
             };
             requestBody: {
                 content: {
                     "application/json": {
-                        /** @description The account whose connect/reconnect is mid-flight (returned with the 202 checkpoint_required response). */
-                        account_id: string;
-                        /** @description The OTP / 2FA verification code. Special value TRY_ANOTHER_WAY switches the challenge type (e.g. in-app → 2FA). */
+                        /** @description The OTP / 2FA verification code, the chosen contract id (contract_selection), or the special value TRY_ANOTHER_WAY to switch the challenge method. */
                         code: string;
                     };
                 };
             };
             responses: {
-                /** @description The challenge was resolved; the account is now active. */
+                /** @description The challenge was resolved; the account is now connected. */
                 201: {
                     headers: {
                         "RateLimit-Policy": components["headers"]["RateLimit-Policy"];
@@ -1418,7 +1450,7 @@ export interface paths {
                             object?: "account";
                             account_id?: string;
                             /** @enum {string} */
-                            status?: "active";
+                            status?: "active" | "reconnect_needed" | "restricted" | "disconnected";
                             /** @description The seat this account occupies (canonical — supersedes the deprecated attached_seat_id). */
                             seat_id?: string | null;
                             /**
@@ -1426,10 +1458,12 @@ export interface paths {
                              * @description Deprecated — use seat_id (same value). Removed at the GA /v1 cutover.
                              */
                             attached_seat_id?: string | null;
+                            /** @description Present and true only when this connect recovered an existing LinkedIn identity already present on the workspace (claiming it into your account) instead of connecting a brand-new one. Absent on a normal connect. The account's status reflects its real observed state, which may need a reconnect. */
+                            recovered?: boolean;
                         };
                     };
                 };
-                /** @description A chained challenge follows (e.g. OTP -> 2FA). Submit the next code to the same account_id. */
+                /** @description A chained challenge follows (e.g. OTP -> 2FA). Solve the next code at the same account's checkpoint/solve. */
                 202: {
                     headers: {
                         "RateLimit-Policy": components["headers"]["RateLimit-Policy"];
@@ -1445,13 +1479,18 @@ export interface paths {
                             object?: "checkpoint";
                             /** @enum {string} */
                             status?: "checkpoint_required";
-                            /** @description The (provisional) account_id to pass to checkpoints/submit. */
+                            /** @description The (provisional) account_id to pass to the checkpoint sub-resource (POST /v1/accounts/{account_id}/checkpoint/solve). */
                             account_id?: string;
                             /**
                              * @description The verification challenge LinkedIn issued.
                              * @enum {string}
                              */
-                            challenge_type?: "otp" | "two_factor_sms" | "two_factor_app" | "mobile_app_approval";
+                            challenge_type?: "otp" | "two_factor_sms" | "two_factor_app" | "two_factor_whatsapp" | "mobile_app_approval" | "otp_or_mobile_app_approval" | "contract_selection";
+                            /** @description Contract picker options (contract_selection only). Solve with the chosen id as the code. */
+                            contracts?: {
+                                id?: string;
+                                name?: string;
+                            }[];
                             /** @description ISO-8601 expiry of the challenge. */
                             expires_at?: string;
                         };
@@ -1540,7 +1579,7 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/v1/accounts/checkpoints/resend": {
+    "/v1/accounts/{account_id}/checkpoint/request": {
         parameters: {
             query?: never;
             header?: never;
@@ -1550,22 +1589,22 @@ export interface paths {
         get?: never;
         put?: never;
         /**
-         * Resend a checkpoint verification notification
-         * @description Re-push / re-issue the pending verification challenge notification for an account. Addressed by account_id in the body (the account_id returned with the 202 checkpoint_required response). Meaningful for otp / two_factor_sms / mobile_app_approval challenges; a two_factor_app challenge has nothing to resend (the code is generated on the device) and returns resent:false rather than an error — the response never claims a resend that did not happen. Does not reset the checkpoint's expiry.
+         * Re-request a checkpoint verification notification
+         * @description Re-issue the pending verification challenge notification for an account. Meaningful for code-delivery challenges (otp / two_factor_sms / mobile_app_approval); a two_factor_app challenge has nothing to re-request (the code is generated on the device) and returns resent:false rather than an error — the response never claims a re-send that did not happen. Does not reset the checkpoint's expiry.
          */
         post: {
             parameters: {
                 query?: never;
                 header?: never;
-                path?: never;
+                path: {
+                    /** @description The account ID (`acc_…`) whose pending checkpoint notification should be re-issued. */
+                    account_id: string;
+                };
                 cookie?: never;
             };
             requestBody: {
                 content: {
-                    "application/json": {
-                        /** @description The account whose pending checkpoint notification should be re-sent (returned with the 202 checkpoint_required response, or from link/poll). */
-                        account_id: string;
-                    };
+                    "application/json": Record<string, never>;
                 };
             };
             responses: {
@@ -1671,7 +1710,7 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/v1/accounts/checkpoints/poll": {
+    "/v1/accounts/{account_id}/checkpoint/poll": {
         parameters: {
             query?: never;
             header?: never;
@@ -1682,21 +1721,21 @@ export interface paths {
         put?: never;
         /**
          * Poll a mobile-app-approval checkpoint
-         * @description Poll the pending mobile-app-approval challenge for an account to check whether the user has approved the sign-in on their LinkedIn mobile app. Addressed by account_id in the body (the account_id returned with the 202 checkpoint_required response). There is no code to submit — approve on the phone, then poll. Returns status:"pending" while waiting, status:"active" once approved, or status:"expired"/"failed" on timeout/failure. Only valid for mobile_app_approval checkpoints — use submit for code-based challenges.
+         * @description Poll the pending mobile-app-approval challenge for an account to check whether the user has approved the sign-in on their LinkedIn mobile app. There is no code to submit — approve on the phone, then poll. Returns status:"pending" while waiting, status:"active" once approved, or status:"expired"/"failed" on timeout/failure. Valid for mobile_app_approval and the in-app branch of otp_or_mobile_app_approval — use solve for code-based challenges.
          */
         post: {
             parameters: {
                 query?: never;
                 header?: never;
-                path?: never;
+                path: {
+                    /** @description The account ID (`acc_…`) whose mobile-app-approval connect is mid-flight (returned with the 202 checkpoint_required response). */
+                    account_id: string;
+                };
                 cookie?: never;
             };
             requestBody: {
                 content: {
-                    "application/json": {
-                        /** @description The account whose mobile-app-approval connect is mid-flight (returned with the 202 checkpoint_required response). */
-                        account_id: string;
-                    };
+                    "application/json": Record<string, never>;
                 };
             };
             responses: {
@@ -1731,6 +1770,13 @@ export interface paths {
                             attached_seat_id?: string | null;
                             /** @description ISO-8601 expiry. Present on status:"pending". */
                             expires_at?: string;
+                            /**
+                             * @description Machine-readable challenge discriminator. Present on status:"expired" so a client can render the right recovery guidance without parsing prose.
+                             * @enum {string}
+                             */
+                            challenge_type?: "mobile_app_approval";
+                            /** @description Human-readable, actionable next step when the approval timed out. Present on status:"expired". */
+                            recovery_hint?: string;
                         };
                     };
                 };
@@ -2897,7 +2943,7 @@ export interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
-                /** @description You must be a page administrator of this company to read its followers. */
+                /** @description The account does not have the required Core seat. */
                 403: {
                     headers: {
                         [name: string]: unknown;
@@ -2906,7 +2952,7 @@ export interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
-                /** @description The account_id does not belong to this tenant. */
+                /** @description Company not found, or you do not administer this company's page. */
                 404: {
                     headers: {
                         [name: string]: unknown;
@@ -16571,7 +16617,7 @@ export interface paths {
                             value: string;
                         }[];
                         /** @description Messaging events to subscribe to (default: [message.received]) */
-                        events?: ("message.received" | "message.delivered" | "message.read" | "message.reaction" | "message.edited" | "message.deleted")[];
+                        events?: ("message.received" | "message.delivered" | "message.read" | "message.reaction" | "message.edited" | "message.deleted" | "chat.updated" | "chat.deleted")[];
                         /**
                          * @description Field-remapping keys for the messaging delivery payload
                          * @default []
@@ -16606,7 +16652,7 @@ export interface paths {
                             value: string;
                         }[];
                         /** @description User/relation events to subscribe to (default: [connection.accepted]) */
-                        events?: "connection.accepted"[];
+                        events?: ("connection.accepted" | "connection.new")[];
                         /**
                          * @description Field-remapping keys for the user/relation delivery payload
                          * @default []
@@ -16641,7 +16687,7 @@ export interface paths {
                             value: string;
                         }[];
                         /** @description Account-status events to subscribe to (default: all 7) */
-                        events?: ("account.created" | "account.connected" | "account.synced" | "account.reconnected" | "account.reconnect_needed" | "account.creation_failed" | "account.disconnected" | "account.error" | "account.paused" | "account.connecting" | "account.permission_revoked")[];
+                        events?: ("account.created" | "account.connected" | "account.synced" | "account.reconnected" | "account.reconnect_needed" | "account.creation_failed" | "account.disconnected" | "account.error" | "account.paused" | "account.connecting" | "account.permission_revoked" | "account.initial_sync.running" | "account.initial_sync.completed" | "account.initial_sync.failed")[];
                     };
                 };
             };
@@ -16763,7 +16809,7 @@ export interface paths {
         };
         /**
          * List webhook event types
-         * @description Returns the complete canonical event catalogue (21 events) grouped by source: messaging (6), user (1), account_status (11), plus 3 tier-gated events. No quota consumed.
+         * @description Returns the complete canonical event catalogue (27 events) grouped by source: messaging (8), user (2), account_status (14), plus 3 tier-gated events. No quota consumed.
          */
         get: {
             parameters: {
@@ -16805,6 +16851,11 @@ export interface paths {
                                      * @enum {string}
                                      */
                                     tier?: "recruiter" | "sales_nav";
+                                    /**
+                                     * @description Delivery timing. Omitted (equivalent to 'realtime') on every live-pushed event. 'no_longer_realtime' means no push exists for this event; 'not_realtime' means the event is polled, not pushed, and may lag the underlying LinkedIn event.
+                                     * @enum {string}
+                                     */
+                                    availability?: "realtime" | "no_longer_realtime" | "not_realtime";
                                 }[];
                             }[];
                         };
@@ -16848,7 +16899,113 @@ export interface paths {
             path?: never;
             cookie?: never;
         };
-        get?: never;
+        /**
+         * Get a webhook
+         * @description Returns a single webhook owned by the calling tenant. The plaintext secret is never present on a read — only the prefix.
+         */
+        get: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    /** @description Webhook id (wh_-prefixed ULID). */
+                    id: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description The webhook, if owned by the calling tenant. The signing secret is never returned on a read — only the prefix. */
+                200: {
+                    headers: {
+                        "RateLimit-Policy": components["headers"]["RateLimit-Policy"];
+                        RateLimit: components["headers"]["RateLimit"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": {
+                            /**
+                             * @description Response type discriminator.
+                             * @enum {string}
+                             */
+                            object?: "webhook";
+                            /** @description Webhook id (wh_-prefixed ULID). */
+                            id?: string;
+                            /**
+                             * @description The event source this webhook subscribes to (immutable).
+                             * @enum {string}
+                             */
+                            source?: "messaging" | "user" | "account_status";
+                            /** @description The URL that receives delivery POST requests. */
+                            request_url?: string;
+                            /** @description Human-readable label. */
+                            name?: string | null;
+                            /**
+                             * @description Delivery body encoding.
+                             * @enum {string}
+                             */
+                            format?: "json" | "form";
+                            /** @description Accounts targeted by this webhook. Non-empty — each id is owned by the tenant. */
+                            account_ids?: string[];
+                            /** @description A disabled webhook is kept but delivers nothing. */
+                            enabled?: boolean;
+                            /** @description Custom headers added to each delivery POST. */
+                            headers?: {
+                                key?: string;
+                                value?: string;
+                            }[];
+                            /** @description Canonical event names this webhook subscribes to. */
+                            events?: string[];
+                            /** @description Field-remapping keys for the delivery payload (messaging and user sources only). */
+                            data?: string[];
+                            /** @description First 8 characters of the signing secret. The full secret is never returned on edit — it is preserved unchanged. */
+                            secret_prefix?: string;
+                            /** @description ISO-8601 creation timestamp. */
+                            created_at?: string;
+                        };
+                    };
+                };
+                /** @description Malformed or empty webhook id. */
+                400: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Missing or invalid API key. */
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Webhook not found or not owned by this tenant. */
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Rate limited — slow down and retry after the hinted delay. */
+                429: {
+                    headers: {
+                        "RateLimit-Policy": components["headers"]["RateLimit-Policy"];
+                        RateLimit: components["headers"]["RateLimit"];
+                        "Retry-After": components["headers"]["Retry-After"];
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+            };
+        };
         put?: never;
         post?: never;
         /**
@@ -16951,7 +17108,7 @@ export interface paths {
                         /** @description Replace the delivery URL. Must be an HTTPS URL. */
                         request_url?: string;
                         /** @description Replace the human-readable name (1–100 chars), or null to clear it. */
-                        name?: string;
+                        name?: string | null;
                         /** @description Enable or disable the webhook. A disabled webhook delivers nothing. */
                         enabled?: boolean;
                         /** @description Replace the custom headers added to each delivery POST (whole-array). */