@curviate/sdk 0.19.0 → 0.20.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +347 -234
- package/README.md +24 -4
- package/dist/index.d.ts +1511 -1336
- package/dist/index.js +108 -100
- package/package.json +4 -2
- package/src/generated/types.ts +1277 -1128
package/CHANGELOG.md
CHANGED
|
@@ -3,12 +3,125 @@
|
|
|
3
3
|
All notable changes to `@curviate/sdk` are documented here.
|
|
4
4
|
|
|
5
5
|
Format: [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
|
|
6
|
-
Versioning: semantic
|
|
6
|
+
Versioning: semantic. Minor for additive changes, patch for bug fixes; no stability promise before 1.0.
|
|
7
7
|
|
|
8
8
|
---
|
|
9
9
|
|
|
10
10
|
## [Unreleased]
|
|
11
11
|
|
|
12
|
+
## [0.20.0] - 2026-08-07
|
|
13
|
+
|
|
14
|
+
Generated types are rebuilt from the **served** OpenAPI document rather than a
|
|
15
|
+
hand-refreshed snapshot, and the snapshot itself now records where it came from.
|
|
16
|
+
Source of this release: `https://api.staging.curviate.com` at server commit
|
|
17
|
+
`1015999221a2dafc505cc565369a40b8ceca1888`, recorded in
|
|
18
|
+
`fixtures/PROVENANCE.json`.
|
|
19
|
+
|
|
20
|
+
### Changed
|
|
21
|
+
|
|
22
|
+
- **BREAKING (type-level): `headers[].value` is gone from every webhook response,
|
|
23
|
+
replaced by `headers[].value_prefix`.** It affects `webhooks.create` (201),
|
|
24
|
+
`webhooks.get`, `webhooks.update`, and `webhooks.list`. The API stopped
|
|
25
|
+
returning the plaintext header value some time ago and returns a masked prefix
|
|
26
|
+
instead; the vendored snapshot had not caught up, so the SDK typed a field the
|
|
27
|
+
server no longer sends. `tsc` will point at every `h.value` read:
|
|
28
|
+
|
|
29
|
+
```diff
|
|
30
|
+
- const configured = webhook.headers?.[0]?.value;
|
|
31
|
+
+ const configured = webhook.headers?.[0]?.value_prefix; // masked, never the full value
|
|
32
|
+
```
|
|
33
|
+
|
|
34
|
+
This is the only breaking change in the release. Read the label honestly: the
|
|
35
|
+
old type was already wrong at runtime, so any code relying on it was reading
|
|
36
|
+
`undefined`; the break is `tsc` finally saying so.
|
|
37
|
+
|
|
38
|
+
- `POST /v1/auth/checkpoint/poll` reports three further `status` values
|
|
39
|
+
(`reconnect_needed`, `restricted`, `disconnected`) on top of the five it
|
|
40
|
+
already had. Purely additive, but an exhaustive `switch` over `status` with a
|
|
41
|
+
`never` fallthrough will need the new arms.
|
|
42
|
+
|
|
43
|
+
- `GET /v1/{account_id}/search/jobs`, `POST /v1/{account_id}/search`, and the
|
|
44
|
+
company jobs listing now mark `id` required on a job item alongside
|
|
45
|
+
`job_urn` (same value, shorter name, chains into `get_job`).
|
|
46
|
+
|
|
47
|
+
- **Punctuation swept out of the published copy.** The README, this changelog,
|
|
48
|
+
and every JSDoc comment that ships inside `dist/index.d.ts` used typographic
|
|
49
|
+
characters with no plain-ASCII equivalent on the keyboard: em and en dashes,
|
|
50
|
+
the single-glyph ellipsis, arrows. They are gone, replaced with commas,
|
|
51
|
+
semicolons, colons, `...` and `->`. No release note changed what it claims;
|
|
52
|
+
the word stream is byte-identical apart from one inserted "and". Version
|
|
53
|
+
headers now use the ` - ` separator that Keep a Changelog specifies.
|
|
54
|
+
|
|
55
|
+
### Added
|
|
56
|
+
|
|
57
|
+
- **`account.restricted` is now a member of the `CurviateEvent` union.** The
|
|
58
|
+
server publishes it and delivers it by default on the `account_status` source,
|
|
59
|
+
but the SDK union did not carry it, so an exhaustive `switch (event.event)`
|
|
60
|
+
could not compile a handler for the one event that means "stop sending on this
|
|
61
|
+
account". The union is pinned at compile time to the generated create-events
|
|
62
|
+
enum, so this addition was produced by the regeneration rather than typed by
|
|
63
|
+
hand.
|
|
64
|
+
|
|
65
|
+
- **`EventPayloadBase`**, exported: the `account_id`, `event`, and `occurred_at`
|
|
66
|
+
every webhook payload carries. `occurred_at` was previously reachable only
|
|
67
|
+
through the payload index signature, typed `unknown`, which meant the
|
|
68
|
+
de-duplication key documented below could not be built without a cast.
|
|
69
|
+
|
|
70
|
+
- Response fields surfaced by the regeneration: `notices[]` on every search and
|
|
71
|
+
company-employees listing, `visibility` on people / services / company-employee
|
|
72
|
+
results, `id` on job results, `recovered` on a checkpoint poll,
|
|
73
|
+
`trial_premium` on an auth intent, `next_action` / `notices` / `unresolved` on
|
|
74
|
+
the shared `Error` schema, a `409` on checkpoint poll and a `403` on the user
|
|
75
|
+
read.
|
|
76
|
+
|
|
77
|
+
- `pnpm gen:fixture` (`scripts/refresh-fixture.mjs`): fetches the live document,
|
|
78
|
+
refuses to write it if it carries a forbidden name, canonicalizes the
|
|
79
|
+
environment-dependent `servers` order so a refresh from staging and one from
|
|
80
|
+
production produce identical bytes, and writes `fixtures/PROVENANCE.json`. The
|
|
81
|
+
snapshot previously had no writer at all, which is why nobody could tell how
|
|
82
|
+
old it was.
|
|
83
|
+
|
|
84
|
+
- **`pnpm check:copy`**, a pre-publish copy-quality gate, chained into
|
|
85
|
+
`prepack` alongside the existing internal-reference scan. It fails the pack
|
|
86
|
+
on any non-ASCII typographic character in the published copy and reports
|
|
87
|
+
(without failing) emoji and wording from the generic-marketing register. See
|
|
88
|
+
the header of `scripts/check-copy.mjs` for why only the first tier blocks.
|
|
89
|
+
`test/check-copy.test.ts` exercises each pattern on its own, because a
|
|
90
|
+
pattern set that silently stops matching still reports zero.
|
|
91
|
+
|
|
92
|
+
### Fixed
|
|
93
|
+
|
|
94
|
+
- **The documented webhook de-duplication key did not work.** The README said
|
|
95
|
+
the delivered `event.id` was something you "can de-duplicate retries on". Every
|
|
96
|
+
delivery attempt mints a fresh `wdl_` id, so a retry arrives with a different
|
|
97
|
+
one and a consumer following that advice stored the same logical event twice,
|
|
98
|
+
double-processing exactly the retries the guidance claimed to cover. The stable
|
|
99
|
+
key is the payload composite `event.event` plus `event.data.account_id` plus
|
|
100
|
+
`event.data.occurred_at`, which the platform re-sends identically on every
|
|
101
|
+
attempt. The README, the `CurviateEventEnvelope.id` JSDoc, and the 0.19.0
|
|
102
|
+
entry below all carried the wrong claim; all three are corrected, and the
|
|
103
|
+
0.19.0 entry was edited in place rather than left standing as advice someone
|
|
104
|
+
would still follow.
|
|
105
|
+
|
|
106
|
+
- Doc comments no longer hardcode the size of a set that grows. "27 events" on
|
|
107
|
+
`webhooks.listEvents`, "24 canonical events" on the `CurviateEvent` union,
|
|
108
|
+
"22 more event types" and "34 error codes" in the README were each hand-typed
|
|
109
|
+
and each stale. The served catalogue description counts itself and the union is
|
|
110
|
+
pinned to the generated enum, so the numbers were redundant as well as wrong.
|
|
111
|
+
|
|
112
|
+
- `test/docs-contract.test.ts`: the two claim families above now go red in the
|
|
113
|
+
suite. Prose was the one representation of the contract that nothing checked,
|
|
114
|
+
which is why both defects shipped.
|
|
115
|
+
|
|
116
|
+
- The banner on `src/generated/types.ts` carried an em dash. The file ships (it
|
|
117
|
+
is in `files[]` and is inlined into `dist/index.d.ts`), so the banner is
|
|
118
|
+
published copy and the dash was the same tell the sweep removed everywhere
|
|
119
|
+
else. It is fixed where it is emitted rather than in the output, and the
|
|
120
|
+
string now has one home: `gen-types.mjs` wrote it and `check-types.mjs`
|
|
121
|
+
reconstructed it to diff against, so the two hand-written copies could
|
|
122
|
+
disagree and red the drift gate over a file nobody had touched. Both now
|
|
123
|
+
import `GENERATED_HEADER` from `scripts/openapi-sanitize.mjs`.
|
|
124
|
+
|
|
12
125
|
## [0.19.0] - 2026-08-03
|
|
13
126
|
|
|
14
127
|
### Fixed
|
|
@@ -53,9 +166,9 @@ Versioning: semantic — minor for additive changes, patch for bug fixes; no sta
|
|
|
53
166
|
### Added
|
|
54
167
|
|
|
55
168
|
- **`CurviateEventEnvelope`**: the per-delivery metadata now carried on every
|
|
56
|
-
event. `event.id` is the `wdl_
|
|
57
|
-
`event.
|
|
58
|
-
|
|
169
|
+
event. `event.id` is the `wdl_...` delivery id, `event.webhook_id` is the
|
|
170
|
+
registration, `event.delivered_at` is the attempt timestamp. These are typed
|
|
171
|
+
optional and are **not** required by the parser:
|
|
59
172
|
requiring an envelope field is what caused this defect, so nothing beyond the
|
|
60
173
|
discriminant can fail a verification again.
|
|
61
174
|
|
|
@@ -67,39 +180,39 @@ Versioning: semantic — minor for additive changes, patch for bug fixes; no sta
|
|
|
67
180
|
`test/fixtures/webhook-delivery.capture.json`: the regression test replays
|
|
68
181
|
bytes and a signature header **captured off the wire from the real dispatch
|
|
69
182
|
worker**, rather than constructing its own payload. The pre-existing suite was
|
|
70
|
-
green throughout this defect because it built its own `{ type:
|
|
183
|
+
green throughout this defect because it built its own `{ type: ... }` fixtures;
|
|
71
184
|
a suite that constructs its own input cannot detect an emitter/parser
|
|
72
185
|
divergence, and that is what let this ship.
|
|
73
186
|
|
|
74
|
-
## [0.18.1]
|
|
187
|
+
## [0.18.1] - 2026-07-18
|
|
75
188
|
|
|
76
189
|
### Changed
|
|
77
190
|
|
|
78
|
-
- **`companies.sendMessage(identifier, chatId, body)`** now takes the normal `2
|
|
191
|
+
- **`companies.sendMessage(identifier, chatId, body)`** now takes the normal `2-...`
|
|
79
192
|
chat id that `companies.chats()` / `chat()` / `searchChats()` return; the endpoint
|
|
80
193
|
resolves the page mailbox internally from `identifier`. The previous send-ready
|
|
81
194
|
`COMPANY_` chat-id requirement is gone: pass the id straight from the company chat
|
|
82
195
|
reads. Method signature and response shape are unchanged (documentation/behavior
|
|
83
196
|
only).
|
|
84
197
|
|
|
85
|
-
## [0.18.0]
|
|
198
|
+
## [0.18.0] - 2026-07-17
|
|
86
199
|
|
|
87
200
|
### Added
|
|
88
201
|
|
|
89
202
|
- **`companies.sendMessage(identifier, chatId, body)`**: reply to a company-inbox
|
|
90
203
|
conversation as the page. `POST /v1/{account_id}/companies/{identifier}/chats/{chat_id}/messages`.
|
|
91
204
|
`chatId` must be the send-ready `COMPANY_` chat id from `inboxes.listChats()`, not the
|
|
92
|
-
`2
|
|
205
|
+
`2-...` id `companies.chats()`/`chat()`/`searchChats()` return; a non-`COMPANY_` id is
|
|
93
206
|
rejected with a guiding 400. Reply-only. The response echoes `sent_as`, the acting
|
|
94
207
|
identity actually used.
|
|
95
208
|
|
|
96
|
-
## [0.17.0]
|
|
209
|
+
## [0.17.0] - 2026-07-17
|
|
97
210
|
|
|
98
211
|
### Added
|
|
99
212
|
|
|
100
213
|
- **`companies.followInvite(identifier, body)`**: invite the connected
|
|
101
214
|
account's 1st-degree connections to follow a company page it administers with the
|
|
102
|
-
invite-to-follow entitlement. Pass the `AC
|
|
215
|
+
invite-to-follow entitlement. Pass the `AC...` member ids from an `invitableFollowers()`
|
|
103
216
|
read. `POST /v1/{account_id}/companies/{identifier}/follow-invite`. All-or-nothing:
|
|
104
217
|
for an all-valid request, resolves to one outcome per requested invitee, in request
|
|
105
218
|
order (`status: "invited" | "already_invited" | "ineligible" | "not_found"`); if any
|
|
@@ -107,7 +220,7 @@ Versioning: semantic — minor for additive changes, patch for bug fixes; no sta
|
|
|
107
220
|
Re-inviting an already-invited member is a safe no-op (the same `invitation_id`,
|
|
108
221
|
never a duplicate).
|
|
109
222
|
|
|
110
|
-
## [0.16.0]
|
|
223
|
+
## [0.16.0] - 2026-07-17
|
|
111
224
|
|
|
112
225
|
Mostly additive, plus one breaking removal on the connect/reconnect body.
|
|
113
226
|
|
|
@@ -154,25 +267,25 @@ Mostly additive, plus one breaking removal on the connect/reconnect body.
|
|
|
154
267
|
profile; `user_fixable`, never retryable) and `REAUTH_REQUIRED` (a
|
|
155
268
|
scope-changing reconnect attempted with a cookie instead of credentials;
|
|
156
269
|
`user_fixable`, never retryable).
|
|
157
|
-
- **New account-scoped `profile` namespace (4 methods)
|
|
270
|
+
- **New account-scoped `profile` namespace (4 methods)**, the connected
|
|
158
271
|
account's own insight surface: `profile.subscription()`, `profile.analytics()`,
|
|
159
272
|
`profile.visitors(query?)`, `profile.ssi()`. Distinct from the retired
|
|
160
273
|
`profiles` namespace (renamed to `users` in 0.15.0).
|
|
161
|
-
- **New account-scoped `groups` namespace (3 methods)
|
|
274
|
+
- **New account-scoped `groups` namespace (3 methods)**, `groups.list(query?)`
|
|
162
275
|
(own groups by default, or another member's via `{ profile }`),
|
|
163
276
|
`groups.get(group)`, and `groups.members(group, query?)` (with the folded-in
|
|
164
277
|
`{ name }` member search).
|
|
165
|
-
- **New account-scoped `feed` namespace (1 method)
|
|
278
|
+
- **New account-scoped `feed` namespace (1 method)**, `feed.home(query?)` reads
|
|
166
279
|
the connected account's home feed as agent-actionable posts, with `relevant`
|
|
167
280
|
or `recent` sort orders.
|
|
168
|
-
- **`companies` gains 3 company-insights methods
|
|
281
|
+
- **`companies` gains 3 company-insights methods**, `companies.managed(query?)`
|
|
169
282
|
lists the pages the connected account administers; `companies.followers(identifier,
|
|
170
|
-
query?)` lists a page's followers (**re-added** under a different item shape
|
|
171
|
-
|
|
172
|
-
|
|
283
|
+
query?)` lists a page's followers (**re-added** under a different item shape
|
|
284
|
+
than the pre-0.15.0 method of the same name: `company_follower`, carrying
|
|
285
|
+
`degree`/`followed_at`); `companies.invitableFollowers(identifier, query?)`
|
|
173
286
|
lists connections invitable to follow the page. All three require the
|
|
174
287
|
connected account to administer the target page.
|
|
175
|
-
- **`companies` gains 5 Beta company-inbox methods
|
|
288
|
+
- **`companies` gains 5 Beta company-inbox methods**, `companies.chats(identifier,
|
|
176
289
|
query?)`, `companies.chat(identifier, chatId)`, `companies.messages(identifier,
|
|
177
290
|
chatId, query?)`, `companies.message(identifier, chatId, messageId)`, and
|
|
178
291
|
`companies.searchChats(identifier, query?)` (exactly one of `query`/`topic`/
|
|
@@ -181,140 +294,140 @@ Mostly additive, plus one breaking removal on the connect/reconnect body.
|
|
|
181
294
|
single-page listing and termination are verified; deep pagination (many
|
|
182
295
|
pages / large cursor round-trips) is still being validated against a busier
|
|
183
296
|
inbox. `companies` is now 12 methods (was 4).
|
|
184
|
-
- **`search` gains 3 methods
|
|
297
|
+
- **`search` gains 3 methods**, `search.groups(query)` searches LinkedIn
|
|
185
298
|
groups by keyword; `search.services(body & query)` searches Services
|
|
186
299
|
Marketplace providers with structured filters; `search.getServiceParameters(query)`
|
|
187
300
|
resolves human-readable service-category/location terms into the opaque
|
|
188
301
|
filter ids `services()` accepts. `search` is now 9 methods (was 6).
|
|
189
|
-
- **`messaging` gains 1 method
|
|
302
|
+
- **`messaging` gains 1 method**, `messaging.searchChats(params)` free-text
|
|
190
303
|
searches the account's own inbox (participant names and message content).
|
|
191
304
|
`messaging` is now 13 methods (was 12).
|
|
192
|
-
- **`posts` gains 3 saved-posts methods
|
|
193
|
-
connected account's own saved posts (a self resource
|
|
194
|
-
`snippet` capped at
|
|
305
|
+
- **`posts` gains 3 saved-posts methods**, `posts.listSaved(query?)` lists the
|
|
306
|
+
connected account's own saved posts (a self resource: previews only,
|
|
307
|
+
`snippet` capped at <=140 chars, never the full body); `posts.save(postId)`
|
|
195
308
|
and `posts.unsave(postId)` add/remove a bookmark, both idempotent and
|
|
196
309
|
accepting either `urn:li:activity:<id>` or a bare numeric id. `posts` is now
|
|
197
310
|
12 methods (was 9).
|
|
198
|
-
- **New account-scoped `notifications` namespace (3 methods)
|
|
311
|
+
- **New account-scoped `notifications` namespace (3 methods)**, the connected
|
|
199
312
|
account's own notification centre: `notifications.list(query?)` (cards +
|
|
200
313
|
the account-level `unread_count`/`latest_published_at`);
|
|
201
314
|
`notifications.delete(cardUrn)` and `notifications.showLess(cardUrn)`, two
|
|
202
315
|
self-action writes on the account's own cards. Both writes are idempotent
|
|
203
|
-
and take effect within a few seconds
|
|
316
|
+
and take effect within a few seconds; a list read immediately after may
|
|
204
317
|
still show the card for a moment, which is not a failure signal. The SDK
|
|
205
318
|
percent-encodes `cardUrn` (which embeds `(`, `)`, `:`, `,`) into the path.
|
|
206
319
|
- **Parity pin: 143 methods across 18 namespaces** (was 135 / 16 at the start
|
|
207
320
|
of this release cycle). The `inboxes` namespace is the final addition.
|
|
208
321
|
|
|
209
|
-
## [0.15.0]
|
|
322
|
+
## [0.15.0] - 2026-07-11
|
|
210
323
|
|
|
211
324
|
Full v2 parity. The SDK is re-aligned 1:1 to the served API surface: every
|
|
212
325
|
operation is now exactly one method at the exact wire encoding, the entire
|
|
213
326
|
account-scoped surface moves to the account-first path grammar, and three
|
|
214
327
|
namespaces are reorganized. This is a **breaking** release touching nearly
|
|
215
|
-
every namespace. The five breaking categories below
|
|
328
|
+
every namespace. The five breaking categories below (removals, namespace
|
|
216
329
|
reorganization, method renames/relocations, request/response shape changes, and
|
|
217
|
-
the account-first path-grammar migration
|
|
218
|
-
`0.14.1`
|
|
330
|
+
the account-first path-grammar migration) are the complete set of breaks a
|
|
331
|
+
`0.14.1` -> `0.15.0` upgrade must reconcile, gathered here so a consumer finds
|
|
219
332
|
every break in one place.
|
|
220
333
|
|
|
221
334
|
### Removed (BREAKING)
|
|
222
335
|
|
|
223
336
|
- **14 methods that map to no served operation are removed, with no alias:**
|
|
224
|
-
- `accounts.createConnectLink()`, `accounts.createReconnectLink()`, `accounts.reconnect()
|
|
225
|
-
- `messaging.syncChat()`, `messaging.syncMessages()`, `recruiter.syncMessages()`, `salesNavigator.syncMessages()
|
|
226
|
-
- `posts.list()
|
|
227
|
-
- `companies.followers()
|
|
228
|
-
- `recruiter.addApplicant()`, `recruiter.rejectApplicant()`, `recruiter.solveJobCheckpoint()
|
|
229
|
-
- `webhooks.getStateDiff()
|
|
230
|
-
- **`invites.respond()` is removed
|
|
231
|
-
- **`profiles.getCompany()` stays removed
|
|
232
|
-
|
|
233
|
-
### Changed (BREAKING)
|
|
234
|
-
|
|
235
|
-
- **`profiles` namespace renamed to `users`.** Every `curviate.account(id).profiles.*` call becomes
|
|
236
|
-
- **New root-scoped `auth` namespace, split out of `accounts`.** The connect/checkpoint operations move off `accounts`: `accounts.link`
|
|
337
|
+
- `accounts.createConnectLink()`, `accounts.createReconnectLink()`, `accounts.reconnect()`: hosted connect/reconnect link minting and in-place reconnect are no longer part of the API surface.
|
|
338
|
+
- `messaging.syncChat()`, `messaging.syncMessages()`, `recruiter.syncMessages()`, `salesNavigator.syncMessages()`: explicit sync operations are gone; accounts sync continuously and deliver via webhooks.
|
|
339
|
+
- `posts.list()`: the standalone feed list has no served operation (use `posts.listUserPosts(userId)` for a member's posts).
|
|
340
|
+
- `companies.followers()`: no served operation.
|
|
341
|
+
- `recruiter.addApplicant()`, `recruiter.rejectApplicant()`, `recruiter.solveJobCheckpoint()`: superseded by the project-centric pipeline surface.
|
|
342
|
+
- `webhooks.getStateDiff()`: no served operation.
|
|
343
|
+
- **`invites.respond()` is removed**, split into two dedicated bodyless methods, `invites.accept(invitationId)` and `invites.decline(invitationId)` (see below).
|
|
344
|
+
- **`profiles.getCompany()` stays removed**, dropped ahead of this release with no return; company reads live on the `companies` namespace.
|
|
345
|
+
|
|
346
|
+
### Changed (BREAKING): namespaces reorganized
|
|
347
|
+
|
|
348
|
+
- **`profiles` namespace renamed to `users`.** Every `curviate.account(id).profiles.*` call becomes `...users.*`; the served group is "Users" and every path is `/users/{user_id}`.
|
|
349
|
+
- **New root-scoped `auth` namespace, split out of `accounts`.** The connect/checkpoint operations move off `accounts`: `accounts.link` -> `auth.intent`, `accounts.solveCheckpoint` -> `auth.solveCheckpoint`, plus `auth.requestCheckpoint`, `auth.pollCheckpoint`, and `accounts.getConnectSession` -> `auth.getSession(sessionId)`. `accounts` now carries only `list` / `get` / `update` / `disconnect`.
|
|
237
350
|
- **New account-scoped `comments` namespace.** The comment-thread surface (create / edit / delete / reply / list replies / reactions) plus the relocated `listUserComments` live here rather than on `posts`.
|
|
238
|
-
- **Root and account surfaces are now strictly disjoint.** The root client exposes only `accounts`, `auth`, `webhooks`. Every other namespace is reachable exclusively through `curviate.account(id)
|
|
351
|
+
- **Root and account surfaces are now strictly disjoint.** The root client exposes only `accounts`, `auth`, `webhooks`. Every other namespace is reachable exclusively through `curviate.account(id)`; the account-scoped namespaces are no longer mounted on the root client (they cannot build a valid path without a bound `account_id`).
|
|
239
352
|
|
|
240
|
-
### Changed (BREAKING)
|
|
353
|
+
### Changed (BREAKING): methods renamed / relocated
|
|
241
354
|
|
|
242
|
-
- `profiles.endorse(userId, { skill_endorsement_id })`
|
|
243
|
-
- `profiles.listConnections()`
|
|
244
|
-
- `messaging.getInMailBalance()`
|
|
245
|
-
- `posts.comment(postId,
|
|
246
|
-
- `profiles.listComments(userId)`
|
|
247
|
-
- `profiles.listPosts(userId)`
|
|
248
|
-
- `profiles.listReactions(userId)`
|
|
249
|
-
- `invites.respond(...)`
|
|
250
|
-
- `recruiter.addCandidate(...)`
|
|
251
|
-
- `recruiter.getParameters(...)` (GET)
|
|
252
|
-
- `recruiter.listProjectJobs(projectId)`
|
|
355
|
+
- `profiles.endorse(userId, { skill_endorsement_id })` -> **`users.endorseSkill(userId, { endorsement_id })`**, renamed, and the body key changed from `skill_endorsement_id` to `endorsement_id`.
|
|
356
|
+
- `profiles.listConnections()` -> **`users.listRelations()`**.
|
|
357
|
+
- `messaging.getInMailBalance()` -> **`users.getInMailCredits()`** (relocated onto `users`).
|
|
358
|
+
- `posts.comment(postId, ...)` -> **`comments.create(postId, ...)`**.
|
|
359
|
+
- `profiles.listComments(userId)` -> **`comments.listUserComments(userId)`**.
|
|
360
|
+
- `profiles.listPosts(userId)` -> **`posts.listUserPosts(userId)`**.
|
|
361
|
+
- `profiles.listReactions(userId)` -> **`posts.listUserReactions(userId)`**.
|
|
362
|
+
- `invites.respond(...)` -> **`invites.accept(invitationId)` / `invites.decline(invitationId)`** (split; both bodyless).
|
|
363
|
+
- `recruiter.addCandidate(...)` -> **`recruiter.saveCandidate(projectId, { stage_id, candidate_id })`**.
|
|
364
|
+
- `recruiter.getParameters(...)` (GET) -> **`recruiter.searchParameters(body)` (POST)**, the HTTP verb changed GET->POST, with a `source`-discriminated body.
|
|
365
|
+
- `recruiter.listProjectJobs(projectId)` -> **`recruiter.getProjectJob(projectId)`**, the operation returns the single attached job posting, not a list.
|
|
253
366
|
|
|
254
|
-
### Changed (BREAKING)
|
|
367
|
+
### Changed (BREAKING): request / response shapes
|
|
255
368
|
|
|
256
369
|
- **`users.update(userId, body)`** never sends `description`; accepted keys are `{ first_name, last_name, headline, bio, skills, picture, background_picture }`.
|
|
257
370
|
- **`users.endorseSkill`** body key is `endorsement_id` (was `skill_endorsement_id`).
|
|
258
371
|
- **`jobs.publish` / `recruiter.publishJob`** take a `mode`-discriminated body (`FREE` | `PROMOTED` | `PROMOTED_PLUS`; the `PROMOTED*` modes require a `budget { currency, amount, scope }`) and respond `{ object, job_state }`.
|
|
259
372
|
- **`jobs.close` / `recruiter.closeJob`** are bodyless POSTs responding `{ object }`.
|
|
260
373
|
- **`invites.cancel`** withdrawal now discriminates on `invitation_withdrawn`.
|
|
261
|
-
- **Message operations are re-homed under the chat.** `getMessage` / `editMessage` / `deleteMessage` / `addReaction` / `getAttachment` now path under `/chats/{chat_id}/messages
|
|
374
|
+
- **Message operations are re-homed under the chat.** `getMessage` / `editMessage` / `deleteMessage` / `addReaction` / `getAttachment` now path under `/chats/{chat_id}/messages/...` and take `chatId` as the leading argument.
|
|
262
375
|
- **`messaging.sendInMail`** body drops the `surface` field.
|
|
263
|
-
- **Media-bearing writes moved from multipart to JSON + base64** where the surface retired multipart (recruiter, sales-navigator, posts, messaging); read each operation's declared content-type
|
|
376
|
+
- **Media-bearing writes moved from multipart to JSON + base64** where the surface retired multipart (recruiter, sales-navigator, posts, messaging); read each operation's declared content-type; some remain multipart.
|
|
264
377
|
- **Sales Navigator `saveAccount` / `saveLead` bodies shrank** to the minimal saved-entity shape.
|
|
265
378
|
- **`recruiter.startChat`** now requires a `signature` (alongside `attendees_ids`, `text`, `subject`).
|
|
266
379
|
- **`recruiter.createJob`** now requires `project_name` and responds `{ job_id, object, project_id }` (was a full job object).
|
|
267
380
|
- **`recruiter.saveCandidate`** body is `{ stage_id, candidate_id }`.
|
|
268
381
|
|
|
269
|
-
### Changed (BREAKING)
|
|
382
|
+
### Changed (BREAKING): account-first path grammar
|
|
270
383
|
|
|
271
|
-
- **Every account-scoped method now carries `account_id` as the leading path segment** (`/v1/{account_id}
|
|
384
|
+
- **Every account-scoped method now carries `account_id` as the leading path segment** (`/v1/{account_id}/...`), never as a query parameter, body field, or omitted. Bind it once with `curviate.account(id)` and it is injected on every call. Companies and relations, which previously carried `account_id` as a query argument, drop it entirely.
|
|
272
385
|
|
|
273
386
|
### Added
|
|
274
387
|
|
|
275
|
-
- **`comments` namespace (9 methods):** `listUserComments`, `create`, `edit`, `delete`, `reply`, `listReplies`, `listReactions`, `addReaction`, `removeReaction
|
|
388
|
+
- **`comments` namespace (9 methods):** `listUserComments`, `create`, `edit`, `delete`, `reply`, `listReplies`, `listReactions`, `addReaction`, `removeReaction`; `removeReaction` is a DELETE that carries a `{ reaction }` body.
|
|
276
389
|
- **`jobs` write surface (9 new methods):** `list`, `create`, `update`, `getBudget`, `publish`, `close`, `listApplicants`, `getApplicant`, `downloadResume` (binary `ArrayBuffer`). `jobs.create` takes object-shaped `job_title` / `company` and a `method`-discriminated `apply_method`.
|
|
277
390
|
- **Project-centric `recruiter` surface (9 new methods):** `searchTalentPool`, `searchFromUrl`, `updateProject`, `listPipeline`, `getProjectJob`, `createProjectJob`, `getProjectJobBudget`, `updateProjectJob`, `closeJob`, with `getApplicant` / `downloadResume` re-homed under the project scope.
|
|
278
391
|
- **`users.follow` / `users.unfollow`** (bodyless POST / DELETE), **`users.listFollowing`**, **`users.update`**.
|
|
279
392
|
- **`messaging.markChatRead(chatId, { read })`**.
|
|
280
|
-
- **`search.fromUrl({ url })`** and **`salesNavigator.searchFromUrl({ url })
|
|
393
|
+
- **`search.fromUrl({ url })`** and **`salesNavigator.searchFromUrl({ url })`**: resolve a LinkedIn search-results URL into a search.
|
|
281
394
|
- **`posts.delete`** (bodyless, 204) and **`posts.unreact(postId, { reaction })`** (DELETE with body).
|
|
282
|
-
- **`users.get(userId)` accepts `'me'
|
|
283
|
-
- **New `ErrorCode` value: `LINKEDIN_OPERATION_NOT_SUPPORTED`.** The `422` a permanent LinkedIn platform limitation for the attempted operation returns (e.g. listing a non-self user's following list)
|
|
395
|
+
- **`users.get(userId)` accepts `'me'`**: `users.get('me')` reads the caller's own profile (folds in the old `getMe`).
|
|
396
|
+
- **New `ErrorCode` value: `LINKEDIN_OPERATION_NOT_SUPPORTED`.** The `422` a permanent LinkedIn platform limitation for the attempted operation returns (e.g. listing a non-self user's following list): `user_fixable: true`, `retry_likely_to_succeed: false` (not a transient failure; retrying will not help). Added to the `ErrorCode` union and the transport's known-code set; previously this narrowed to `INTERNAL`, which is retryable.
|
|
284
397
|
|
|
285
398
|
### Fixed
|
|
286
399
|
|
|
287
|
-
- **`CONNECTION_REQUEST_CONFLICT` was silently downgraded to `INTERNAL`.** The `409` the API returns when a connect-request to a member already exists (or you are already a first-degree connection) is a real, documented error code, but the transport's runtime known-code set omitted it
|
|
288
|
-
- **`RATE_LIMITED` was silently downgraded to `INTERNAL`.** The `429` the Recruiter and Sales Navigator read surface returns under LinkedIn-platform throttling (dedicated `RateLimit-Policy` / `RateLimit` / `Retry-After` response headers, `retry_likely_to_succeed: true`) is a real, documented error code, but the transport's runtime known-code set omitted it
|
|
289
|
-
- **`users.update` forwarded an unsupported `description` key if a caller smuggled one in.** The `UserUpdateBody` type never declared `description`, so a typed caller was already rejected at compile time
|
|
400
|
+
- **`CONNECTION_REQUEST_CONFLICT` was silently downgraded to `INTERNAL`.** The `409` the API returns when a connect-request to a member already exists (or you are already a first-degree connection) is a real, documented error code, but the transport's runtime known-code set omitted it, so callers received `code: "INTERNAL"` with the wrong semantics (`INTERNAL` is retryable, whereas this conflict is `user_fixable: true`, `retry_likely_to_succeed: false` and must never be re-sent). The transport now decodes `CONNECTION_REQUEST_CONFLICT` to itself. To eliminate the class of bug: the `ErrorCode` type and the transport's runtime known-code set are now both **derived from one source array**, so the code a caller narrows on and the code the transport recognizes can never drift apart again.
|
|
401
|
+
- **`RATE_LIMITED` was silently downgraded to `INTERNAL`.** The `429` the Recruiter and Sales Navigator read surface returns under LinkedIn-platform throttling (dedicated `RateLimit-Policy` / `RateLimit` / `Retry-After` response headers, `retry_likely_to_succeed: true`) is a real, documented error code, but the transport's runtime known-code set omitted it, so callers received `code: "INTERNAL"`, which happened to auto-retry on `GET`/`HEAD` by accident but with the wrong (generic backoff) delay instead of honoring `Retry-After`. The transport now decodes `RATE_LIMITED` to itself and retries it on `GET`/`HEAD` like the other rate-limit codes, honoring `Retry-After`.
|
|
402
|
+
- **`users.update` forwarded an unsupported `description` key if a caller smuggled one in.** The `UserUpdateBody` type never declared `description`, so a typed caller was already rejected at compile time, but an untyped/JS caller (or an `as`-cast) could still put it on the object, and `update()` forwarded the body verbatim with no runtime check. `update()` now strips `description` from the outgoing payload before the request is sent, regardless of caller strictness.
|
|
290
403
|
|
|
291
404
|
---
|
|
292
405
|
|
|
293
|
-
## [0.14.1]
|
|
406
|
+
## [0.14.1] - 2026-07-07
|
|
294
407
|
|
|
295
408
|
### Fixed
|
|
296
409
|
|
|
297
|
-
- **`constructEvent` examples referenced a wrong header name (`X-Curviate-Signature`
|
|
410
|
+
- **`constructEvent` examples referenced a wrong header name (`X-Curviate-Signature` -> `Curviate-Signature`); corrected a stale default-count description.** The JSDoc and both code examples (Express/Node, Hono) for `constructEvent` named the header `X-Curviate-Signature`; the dispatcher actually sends `Curviate-Signature` (Node lowercases it to `curviate-signature` on `req.headers`), so integrators copying the examples verbatim got `undefined` for the signature header. Also corrected the generated `events` field description on the webhook-create schema from a stale "default: all 7" to "default: all 11 lifecycle events", matching the account_status catalogue.
|
|
298
411
|
|
|
299
412
|
---
|
|
300
413
|
|
|
301
|
-
## [0.14.0]
|
|
414
|
+
## [0.14.0] - 2026-07-07
|
|
302
415
|
|
|
303
416
|
Webhooks surface re-based onto the v2 catalogue. Additive minor: one new method,
|
|
304
417
|
one type-only breaking note for `CurviateEvent` (see below).
|
|
305
418
|
|
|
306
419
|
### Added
|
|
307
420
|
|
|
308
|
-
- **`webhooks.get(id)`.** Return a single webhook owned by the calling tenant (`GET /v1/webhooks/{id}`). The plaintext secret is never present on a read
|
|
309
|
-
- **Webhook event catalogue expanded 21
|
|
421
|
+
- **`webhooks.get(id)`.** Return a single webhook owned by the calling tenant (`GET /v1/webhooks/{id}`). The plaintext secret is never present on a read, only `secret_prefix`. Type `WebhookGetResult`. The `webhooks` namespace is now 7 methods (was 6).
|
|
422
|
+
- **Webhook event catalogue expanded 21 -> 27** (`webhooks.listEvents()`), grouped messaging (8) / user (2) / account_status (14), plus 3 tier-gated. New subscribable-but-not-default events: `chat.updated`, `chat.deleted` (messaging), `connection.new` (user), `account.initial_sync.running` / `account.initial_sync.completed` / `account.initial_sync.failed` (account_status). Catalogue entries may now carry an `availability: "realtime" | "no_longer_realtime" | "not_realtime"` field.
|
|
310
423
|
|
|
311
424
|
### Changed (type-only breaking note)
|
|
312
425
|
|
|
313
|
-
- **`CurviateEvent` union re-keyed 19
|
|
426
|
+
- **`CurviateEvent` union re-keyed 19 -> 24 deliverable events** to match the create-subscribable catalogue. Renamed/removed: `account.stopped`, `account.sync_started`, `account.sync_complete`, `account.creation_success`, `account.sync_success`, `account.reconnect_required`, `account.checkpoint` are gone; the account-lifecycle names now split across `account.synced`, `account.reconnected`, `account.reconnect_needed`, `account.paused`, `account.connecting`, `account.permission_revoked`. Net-new members: `chat.updated`, `chat.deleted`, `connection.new`, `account.initial_sync.running`, `account.initial_sync.completed`, `account.initial_sync.failed`. A `switch`/exhaustiveness check on `event.type` for any of the 7 removed names will now fail to compile; update the case list. Runtime HMAC verification (`constructEvent`) is unaffected; this is a types-only change.
|
|
314
427
|
|
|
315
428
|
---
|
|
316
429
|
|
|
317
|
-
## [0.13.0]
|
|
430
|
+
## [0.13.0] - 2026-07-05
|
|
318
431
|
|
|
319
432
|
Accounts/Auth surface migration. This is a **breaking** minor (pre-1.0): the account
|
|
320
433
|
connection and checkpoint surface was reshaped end-to-end. All changes are on the
|
|
@@ -322,123 +435,123 @@ connection and checkpoint surface was reshaped end-to-end. All changes are on th
|
|
|
322
435
|
|
|
323
436
|
### Removed (BREAKING)
|
|
324
437
|
|
|
325
|
-
- **`accounts.refresh(accountId)` removed
|
|
326
|
-
- **`accounts.submitCheckpoint(body)` removed
|
|
327
|
-
- **`accounts.resendCheckpoint(body)` removed
|
|
438
|
+
- **`accounts.refresh(accountId)` removed**: the underlying endpoint (`POST /v1/accounts/{account_id}/refresh`) no longer exists and has no alias. Accounts now restart and re-sync automatically; status freshness is served by the real-time account-status webhook, the nightly reconcile, and `accounts.get()`'s stale-while-revalidate background refresh. Remove any `accounts.refresh()` call sites. Type `AccountRefreshResult` is removed.
|
|
439
|
+
- **`accounts.submitCheckpoint(body)` removed**, renamed to `accounts.solveCheckpoint(accountId, { code })` (see below). No alias.
|
|
440
|
+
- **`accounts.resendCheckpoint(body)` removed**, renamed to `accounts.requestCheckpoint(accountId)` (see below). No alias.
|
|
328
441
|
|
|
329
442
|
### Changed (BREAKING)
|
|
330
443
|
|
|
331
444
|
- **Checkpoint operations are now account-in-path.** The three checkpoint methods take the account id as a **path argument** instead of an `account_id` body field:
|
|
332
|
-
- `submitCheckpoint({ account_id, code })`
|
|
333
|
-
- `resendCheckpoint({ account_id })`
|
|
334
|
-
- `pollCheckpoint({ account_id })`
|
|
335
|
-
- Migration: `submitCheckpoint({ account_id, code })`
|
|
336
|
-
- Types: `AccountSubmitCheckpointBody`/`AccountSubmitCheckpointResult`
|
|
337
|
-
- **`accounts.createConnectLink()` is create-only.** The `purpose` and `account_id` body fields are removed
|
|
338
|
-
- **`accounts.update()` body reshaped.** The managed `country` / `ip` knobs are removed from `PATCH /v1/accounts/{account_id}`; the body is now `{ metadata?, proxy? }`. `metadata` is a flat string map that **replaces** the account's custom-data store wholesale; `proxy` sets a custom egress proxy (the managed location is now chosen at connect time, not here). Passing `country`/`ip` is rejected with `INVALID_REQUEST`. Type `AccountUpdateBody` changed. *(Known limitation: the generated body type does not yet express `proxy: null` to clear a custom proxy
|
|
445
|
+
- `submitCheckpoint({ account_id, code })` -> **`solveCheckpoint(account_id, { code })`** (`POST /v1/accounts/{account_id}/checkpoint/solve`). Returns the connected account (201) or a chained checkpoint (202).
|
|
446
|
+
- `resendCheckpoint({ account_id })` -> **`requestCheckpoint(account_id)`** (`POST /v1/accounts/{account_id}/checkpoint/request`). Returns `{ object, account_id, resent }`; `resent` is still honest (`false` when there is nothing to re-send).
|
|
447
|
+
- `pollCheckpoint({ account_id })` -> **`pollCheckpoint(account_id)`** (`POST /v1/accounts/{account_id}/checkpoint/poll`), same name, now a single string arg (no body).
|
|
448
|
+
- Migration: `submitCheckpoint({ account_id, code })` -> `solveCheckpoint(account_id, { code })`; `resendCheckpoint({ account_id })` -> `requestCheckpoint(account_id)`; `pollCheckpoint({ account_id })` -> `pollCheckpoint(account_id)`.
|
|
449
|
+
- Types: `AccountSubmitCheckpointBody`/`AccountSubmitCheckpointResult` -> `AccountSolveCheckpointBody`/`AccountSolveCheckpointResult`; `AccountResendCheckpointBody`/`AccountResendCheckpointResult` -> `AccountRequestCheckpointResult` (no body type); `AccountPollCheckpointBody` removed (no body).
|
|
450
|
+
- **`accounts.createConnectLink()` is create-only.** The `purpose` and `account_id` body fields are removed; it now only mints a link to connect a **new** account (`{ seat_id, expires_in_seconds?, redirect_url? }`). To re-authorize an existing account via a hosted link, use the new `accounts.createReconnectLink()` (below). Type `AccountConnectLinkBody` no longer carries `purpose`/`account_id`.
|
|
451
|
+
- **`accounts.update()` body reshaped.** The managed `country` / `ip` knobs are removed from `PATCH /v1/accounts/{account_id}`; the body is now `{ metadata?, proxy? }`. `metadata` is a flat string map that **replaces** the account's custom-data store wholesale; `proxy` sets a custom egress proxy (the managed location is now chosen at connect time, not here). Passing `country`/`ip` is rejected with `INVALID_REQUEST`. Type `AccountUpdateBody` changed. *(Known limitation: the generated body type does not yet express `proxy: null` to clear a custom proxy; the server accepts it, but a strict TypeScript caller must cast until the schema surfaces the nullability. The CLI's `account update --clear-proxy` sends it directly.)*
|
|
339
452
|
- **Cookie auth requires `user_agent`.** `accounts.link()` and `accounts.reconnect()` now require a `user_agent` when `auth_method: "cookie"`; without one the request is rejected with `INVALID_REQUEST`. It stays optional for `auth_method: "credentials"`. (Enforced server-side; the flat request-body type cannot make it conditionally required, so pass it whenever you connect by cookie.)
|
|
340
|
-
- **`accounts.reconnect()` result is now a `200 | 202` union.** A reconnect can itself surface a checkpoint challenge
|
|
453
|
+
- **`accounts.reconnect()` result is now a `200 | 202` union.** A reconnect can itself surface a checkpoint challenge; resolve it with `solveCheckpoint` / `pollCheckpoint`, exactly like `accounts.link()`. Discriminate on `result.object`. Type `AccountReconnectResult` is now a union.
|
|
341
454
|
|
|
342
455
|
### Added
|
|
343
456
|
|
|
344
|
-
- **`accounts.createReconnectLink(accountId, body?)`.** Mint a one-time hosted **re-authorization** link for an existing disconnected account (`POST /v1/accounts/{account_id}/reconnect-link`)
|
|
345
|
-
- **New `ErrorCode` value: `ACCOUNT_ALREADY_LINKED`.** The `409` a duplicate connect now returns from `accounts.link()`, `accounts.reconnect()`, and `accounts.solveCheckpoint()
|
|
457
|
+
- **`accounts.createReconnectLink(accountId, body?)`.** Mint a one-time hosted **re-authorization** link for an existing disconnected account (`POST /v1/accounts/{account_id}/reconnect-link`), the hosted counterpart of `accounts.reconnect()`. Body is optional (`{ expires_in_seconds?, redirect_url? }`). Returns `{ object: "hosted_auth_url", url, session_id, expires_at, account_id }`; poll completion with `accounts.getConnectSession(session_id)`. Types: `AccountReconnectLinkBody`, `AccountReconnectLinkResult`. The `accounts` namespace stays at 12 methods (`refresh` out, `createReconnectLink` in).
|
|
458
|
+
- **New `ErrorCode` value: `ACCOUNT_ALREADY_LINKED`.** The `409` a duplicate connect now returns from `accounts.link()`, `accounts.reconnect()`, and `accounts.solveCheckpoint()`; the substrate refused linking a LinkedIn identity that's already linked. `user_fixable: true`, `retry_likely_to_succeed: false` (reconnect or disconnect the existing account instead of retrying). When the caller's own tenant already owns the existing account, the error body's `account_id` names it; otherwise it stands alone. Added to the `ErrorCode` union and the transport's known-code set; previously this narrowed to `INTERNAL`, which is retryable, so a client would have retried a request that can never succeed.
|
|
346
459
|
- **Wider checkpoint challenge vocabulary.** The 202 `challenge_type` enum now covers `otp | two_factor_sms | two_factor_app | two_factor_whatsapp | mobile_app_approval | otp_or_mobile_app_approval | contract_selection`, and a `contract_selection` challenge additionally carries `contracts: [{ id, name }]` (choose one and pass its id to `solveCheckpoint`).
|
|
347
|
-
- **422 dead-end challenge error documents a `challenge_type`, but it isn't typed yet.** When a checkpoint challenge can't be resolved automatically (e.g. a CAPTCHA or a phone-number registration), the `422` response carries a machine-readable `challenge_type: "captcha" | "phone_register"` in prose (`fixtures/openapi.json`)
|
|
460
|
+
- **422 dead-end challenge error documents a `challenge_type`, but it isn't typed yet.** When a checkpoint challenge can't be resolved automatically (e.g. a CAPTCHA or a phone-number registration), the `422` response carries a machine-readable `challenge_type: "captcha" | "phone_register"` in prose (`fixtures/openapi.json`), but the response schema is still the generic `Error` type, so a caller can't type-branch on it programmatically yet.
|
|
348
461
|
- **Connect-recovery + honest terminal signals on the connection responses (additive, non-breaking).**
|
|
349
|
-
- `accounts.link()` and `accounts.solveCheckpoint()` 201 responses now carry an optional `recovered` boolean
|
|
350
|
-
- The `status` on those same 201 responses is widened from `"active"` to `"active" | "reconnect_needed" | "restricted" | "disconnected"
|
|
462
|
+
- `accounts.link()` and `accounts.solveCheckpoint()` 201 responses now carry an optional `recovered` boolean, `true` only when the connect reclaimed a LinkedIn identity already present on the workspace (claiming it into your account) rather than connecting a brand-new one; absent on a normal connect.
|
|
463
|
+
- The `status` on those same 201 responses is widened from `"active"` to `"active" | "reconnect_needed" | "restricted" | "disconnected"`; it now reflects the account's real observed state, which a recovered identity often reports as needing a reconnect.
|
|
351
464
|
- `accounts.pollCheckpoint()` now carries `challenge_type` (`"mobile_app_approval"`) and a human-readable `recovery_hint` on a `status: "expired"` mobile-approval timeout, so a client can render the right recovery guidance without parsing prose.
|
|
352
465
|
|
|
353
466
|
### Changed
|
|
354
467
|
|
|
355
|
-
- Regenerated types from the current API surface. `accounts.get()` / `accounts.list()` still return the six cached enrichment fields, but `username`, `premium_id`, `public_identifier`, `signatures`, and `groups` are no longer refreshed by background enrichment
|
|
468
|
+
- Regenerated types from the current API surface. `accounts.get()` / `accounts.list()` still return the six cached enrichment fields, but `username`, `premium_id`, `public_identifier`, `signatures`, and `groups` are no longer refreshed by background enrichment; they read `null`/`[]` for newly connected accounts (any previously cached value is retained). `full_name` and `substrate_created_at` continue to populate; `substrate_created_at` remains ISO-8601 UTC.
|
|
356
469
|
|
|
357
|
-
## [0.12.0]
|
|
470
|
+
## [0.12.0] - 2026-07-05
|
|
358
471
|
|
|
359
472
|
### Added
|
|
360
473
|
|
|
361
|
-
- **New `companies` namespace (5 methods).** `companies.get(identifier)` retrieves a company's full LinkedIn profile
|
|
362
|
-
- **New `ErrorCode` value: `RESOURCE_ACCESS_RESTRICTED`.** The non-admin mapping for `companies.followers()
|
|
363
|
-
- **`salesNavigator` gains 5 new v2 list-surface methods (7
|
|
474
|
+
- **New `companies` namespace (5 methods).** `companies.get(identifier)` retrieves a company's full LinkedIn profile, and accepts either a public handle (the slug in `linkedin.com/company/<handle>`, e.g. `"t-systems"`) or a numeric id. `companies.employees(identifier, params?)`, `companies.posts(identifier, params?)`, and `companies.jobs(identifier, params?)` list company sub-resources (filterable with `keywords`/`location` where supported); `companies.followers(identifier, params?)` lists company followers (requires the acting account to administer the target page). The four sub-resource methods require the company's **numeric provider_id** (the same `id` field `companies.get()` returns); a handle or URN is rejected server-side before any upstream call. Types: `CompanyProfile`, `CompanyEmployeeListPage`, `CompanyPostListPage`, `CompanyJobListPage`, `CompanyFollowerListPage`.
|
|
475
|
+
- **New `ErrorCode` value: `RESOURCE_ACCESS_RESTRICTED`.** The non-admin mapping for `companies.followers()`, surfaced when the acting account does not administer the target company page. Added to the `ErrorCode` union and the transport's known-code set (previously unknown codes silently narrowed to `INTERNAL`).
|
|
476
|
+
- **`salesNavigator` gains 5 new v2 list-surface methods (7->12).** `salesNavigator.accountLists(query?)` and `salesNavigator.leadLists(query?)` list the operator's saved-account/saved-lead lists (`account_id` required, `limit`/`cursor` paginate). `salesNavigator.browseAccountList(listId, body?, query?)` and `salesNavigator.browseLeadList(listId, body?, query?)` return the saved items in one list, with optional enum filters (`filter`/`sort_by`/`sort_order` for accounts; `spotlight`/`sort_by`/`sort_order` for leads) in the body. `salesNavigator.saveAccount({ list_id, company_id, account_id })` saves a company into an account list; a `2xx` response **is** the success signal; no `saved` boolean is invented. All five are additive. Types: `SNAccountListsQuery/Result`, `SNLeadListsQuery/Result`, `SNBrowseAccountListQuery/Body/Result`, `SNBrowseLeadListQuery/Body/Result`, `SNSaveAccountBody/Input/Result`.
|
|
364
477
|
|
|
365
478
|
### Removed (BREAKING)
|
|
366
479
|
|
|
367
|
-
- **`profiles.getCompany(companyId)` removed
|
|
480
|
+
- **`profiles.getCompany(companyId)` removed**, hard-moved to `companies.get(identifier)`. The underlying endpoint (`GET /v1/profiles/companies/{company_id}`) no longer exists; there is no alias. Update call sites to `companies.get()`.
|
|
368
481
|
|
|
369
482
|
### Changed (BREAKING)
|
|
370
483
|
|
|
371
|
-
- **`salesNavigator.saveLead` re-signed for the v2 save-lead surface.** The v1 `saveLead(userId, { account_id, list_id? })` (`POST /v1/sales-navigator/leads/{user_id}`) is **retired, no alias
|
|
484
|
+
- **`salesNavigator.saveLead` re-signed for the v2 save-lead surface.** The v1 `saveLead(userId, { account_id, list_id? })` (`POST /v1/sales-navigator/leads/{user_id}`) is **retired, no alias**; the endpoint itself no longer exists server-side. The replacement `saveLead({ list_id, user_id, account_id })` calls `POST /v1/sales-navigator/lead-lists/{list_id}/save`; `list_id` is now **mandatory** (the v1 `list_id`-optional semantics do not exist in v2) and addresses the path instead of the member id. Update call sites: `saveLead(userId, { account_id, list_id })` -> `saveLead({ list_id, user_id, account_id })`. Types: `SNSaveLeadBody`/`SNSaveLeadResult` now alias the v2 endpoint; new `SNSaveLeadInput`.
|
|
372
485
|
|
|
373
|
-
## [0.11.0]
|
|
486
|
+
## [0.11.0] - 2026-07-04
|
|
374
487
|
|
|
375
488
|
### Added
|
|
376
489
|
|
|
377
|
-
- **`accounts.getConnectSession(session_id)`.** Poll a hosted connect session minted by `accounts.createConnectLink()`. A pure status read
|
|
378
|
-
- **`accounts.resendCheckpoint({ account_id })`.** Re-sends the pending verification challenge notification for an account (e.g. when the end user says they never received the OTP/2FA code or the mobile-app push). Returns `{ object: "checkpoint", account_id, resent }
|
|
379
|
-
- **`session_id` on the `accounts.createConnectLink()` 201 response
|
|
380
|
-
- **`seat_id` on the account-connection responses.** `accounts.link()` (201), `accounts.submitCheckpoint()` (201), and `accounts.pollCheckpoint()` now carry `seat_id` (`string | null`)
|
|
381
|
-
- **`auth_method: "hosted"`** is now a possible value on `accounts.list()` items (accounts connected through a hosted link). Response-only
|
|
382
|
-
- **`"disconnected"` account status.** Now a possible `status` on `accounts.list()` items, `accounts.get()`, and both sides of the account `state-diff` event
|
|
490
|
+
- **`accounts.getConnectSession(session_id)`.** Poll a hosted connect session minted by `accounts.createConnectLink()`. A pure status read; it makes no external call and does not itself complete the connection (the connection is signalled complete out-of-band once the end user finishes the hosted flow). Returns `{ object: "connect_session", session_id, status, account_id, expires_at }`, where `status` is `"pending" | "resolved" | "expired" | "failed"` and `account_id` is populated only once `status` is `"resolved"`. Poll until it leaves `pending`. Type: `AccountConnectSessionResult`. Extends the Accounts surface to 12 methods.
|
|
491
|
+
- **`accounts.resendCheckpoint({ account_id })`.** Re-sends the pending verification challenge notification for an account (e.g. when the end user says they never received the OTP/2FA code or the mobile-app push). Returns `{ object: "checkpoint", account_id, resent }`; `resent` echoes the outcome honestly (`false` when there was nothing to re-send for that challenge type; this never throws just because a resend wasn't applicable). Does not reset the checkpoint's expiry.
|
|
492
|
+
- **`session_id` on the `accounts.createConnectLink()` 201 response**, the durable poll handle to pass to `accounts.getConnectSession()`. Type: `AccountConnectLinkResult`.
|
|
493
|
+
- **`seat_id` on the account-connection responses.** `accounts.link()` (201), `accounts.submitCheckpoint()` (201), and `accounts.pollCheckpoint()` now carry `seat_id` (`string | null`), the seat the account occupies. `accounts.createConnectLink()` (201) also carries it. This is the canonical replacement for the deprecated `attached_seat_id` (same value).
|
|
494
|
+
- **`auth_method: "hosted"`** is now a possible value on `accounts.list()` items (accounts connected through a hosted link). Response-only; the `link()` / `reconnect()` request `auth_method` remains `"credentials" | "cookie"`.
|
|
495
|
+
- **`"disconnected"` account status.** Now a possible `status` on `accounts.list()` items, `accounts.get()`, and both sides of the account `state-diff` event, whose `previous_status` / `current_status` are now typed enums (`"active" | "reconnect_needed" | "restricted" | "connecting" | "disconnected"`) rather than free-form strings.
|
|
383
496
|
|
|
384
497
|
### Deprecated
|
|
385
498
|
|
|
386
|
-
- **`attached_seat_id`** (on `accounts.link()`, `accounts.submitCheckpoint()`, and `accounts.pollCheckpoint()` responses)
|
|
499
|
+
- **`attached_seat_id`** (on `accounts.link()`, `accounts.submitCheckpoint()`, and `accounts.pollCheckpoint()` responses); use `seat_id` instead (identical value). Retained for backward compatibility; slated for removal at the GA `/v1` cutover.
|
|
387
500
|
|
|
388
501
|
### Changed
|
|
389
502
|
|
|
390
|
-
- Regenerated types from the current API surface (full refresh). Beyond the additions above, `accounts.update()` (`PATCH /v1/accounts/{account_id}`) gains a `501` response variant, returned when a managed-proxy configuration isn't supported for the account's current plan (not retryable as-is
|
|
503
|
+
- Regenerated types from the current API surface (full refresh). Beyond the additions above, `accounts.update()` (`PATCH /v1/accounts/{account_id}`) gains a `501` response variant, returned when a managed-proxy configuration isn't supported for the account's current plan (not retryable as-is; change the request rather than resubmitting). No resource method signatures changed.
|
|
391
504
|
|
|
392
|
-
## [0.10.0]
|
|
505
|
+
## [0.10.0] - 2026-07-03
|
|
393
506
|
|
|
394
507
|
### Added
|
|
395
508
|
|
|
396
|
-
- **New `jobs` namespace.** `jobs.get(jobIdOrUrl)` retrieves one public LinkedIn job posting's full detail
|
|
397
|
-
- `recruiter.getJob(jobIdOrUrl)
|
|
509
|
+
- **New `jobs` namespace.** `jobs.get(jobIdOrUrl)` retrieves one public LinkedIn job posting's full detail: title, company, location, description, applicant count, and more. Accepts either a bare numeric job id (e.g. `"4428113858"`) or a full job URL (`"https://www.linkedin.com/jobs/view/4428113858"`); the SDK extracts the numeric id client-side, so both forms issue the identical request. Passing a value with no extractable numeric id throws `CurviateError({ code: "INVALID_REQUEST" })` synchronously, before any network call. Type: `JobPosting`.
|
|
510
|
+
- `recruiter.getJob(jobIdOrUrl)`: the Recruiter-lens sibling, retrieving any public job posting (not only the operator's own postings). Accepts the same bare-id-or-URL forms as `jobs.get()` and returns the identical `JobPosting` type (no separate response shape to learn). Extends the Recruiter surface to 18 methods.
|
|
398
511
|
|
|
399
|
-
## [0.9.0]
|
|
512
|
+
## [0.9.0] - 2026-07-03
|
|
400
513
|
|
|
401
514
|
### Added
|
|
402
515
|
|
|
403
|
-
- **Account enrichment fields.** `accounts.list()` items and `accounts.get()` now carry six cached account-detail fields, populated by an async background enrichment on every successful account activation: `username`, `premium_id`, `public_identifier`, `substrate_created_at` (ISO-8601 UTC), `signatures` (`{title, content}[]`), and `groups` (`string[]`). All six are `null`/`[]` until the account's first enrichment pass completes
|
|
404
|
-
- `accounts.get()` gains `seat_id` (`string | null`)
|
|
516
|
+
- **Account enrichment fields.** `accounts.list()` items and `accounts.get()` now carry six cached account-detail fields, populated by an async background enrichment on every successful account activation: `username`, `premium_id`, `public_identifier`, `substrate_created_at` (ISO-8601 UTC), `signatures` (`{title, content}[]`), and `groups` (`string[]`). All six are `null`/`[]` until the account's first enrichment pass completes, never `undefined`, never a missing key. Types: `AccountListPage`, `AccountDetail`.
|
|
517
|
+
- `accounts.get()` gains `seat_id` (`string | null`), the seat the account occupies, `null` for an admin seatless account. Previously only `accounts.list()` items carried this field.
|
|
405
518
|
|
|
406
519
|
### Changed
|
|
407
520
|
|
|
408
|
-
- `connected_at` (on both `accounts.list()` items and `accounts.get()`) and `last_checked_at` (`accounts.get()`) now consistently emit ISO-8601 UTC (
|
|
409
|
-
- Regenerated types from the current API surface. No resource method signatures changed
|
|
410
|
-
- `quotas[]` (on `accounts.get()`) is now documented as advisory usage-safety recommendations: daily families never cause a rejected request; only `account.per_minute` is a binding limit enforced with HTTP 429. `recommended_throttle_hint` semantics documented per level (`none` / `slow_down` / `backoff` are advisory; `stop` is reserved for the binding per-minute limit). JSDoc-only
|
|
521
|
+
- `connected_at` (on both `accounts.list()` items and `accounts.get()`) and `last_checked_at` (`accounts.get()`) now consistently emit ISO-8601 UTC (`...Z`) timestamps; a prior docs-vs-runtime drift meant these could reach callers in raw Postgres wire format. No type change (already typed as `string`/`string | null`); this is a runtime-correctness fix reflected in the regenerated example values.
|
|
522
|
+
- Regenerated types from the current API surface. No resource method signatures changed; purely additive response fields.
|
|
523
|
+
- `quotas[]` (on `accounts.get()`) is now documented as advisory usage-safety recommendations: daily families never cause a rejected request; only `account.per_minute` is a binding limit enforced with HTTP 429. `recommended_throttle_hint` semantics documented per level (`none` / `slow_down` / `backoff` are advisory; `stop` is reserved for the binding per-minute limit). JSDoc-only, no type shape change.
|
|
411
524
|
|
|
412
525
|
---
|
|
413
526
|
|
|
414
|
-
## [0.8.0]
|
|
527
|
+
## [0.8.0] - 2026-07-02
|
|
415
528
|
|
|
416
529
|
### Added
|
|
417
530
|
|
|
418
|
-
- **Recruiter job-lifecycle endpoints are now fully implemented server-side.** The following operations no longer return `501` and are safe to call in production: getting/rejecting an applicant, downloading an applicant's resume, listing a job's applicants, solving a job's publish checkpoint, publishing a job, and fetching a Recruiter profile. Their generated response types no longer include a `501` variant
|
|
531
|
+
- **Recruiter job-lifecycle endpoints are now fully implemented server-side.** The following operations no longer return `501` and are safe to call in production: getting/rejecting an applicant, downloading an applicant's resume, listing a job's applicants, solving a job's publish checkpoint, publishing a job, and fetching a Recruiter profile. Their generated response types no longer include a `501` variant; if your code branched on it, that branch is now dead and can be removed.
|
|
419
532
|
- Richer parameter documentation across the Recruiter and search surfaces: job/applicant/hiring-project IDs now describe where to obtain them (e.g. `job_id` from `GET /v1/recruiter/jobs`, `user_id` from a people-search result), and several previously-terse descriptions were corrected (e.g. the saved-search `industry` filter's cross-reference).
|
|
420
|
-
- Server-side parameter defaults are now surfaced in the generated JSDoc (`@default`) wherever the API applies one when a param is omitted
|
|
421
|
-
- **Breaking (typed consumers):** the Sales Navigator company-search `annual_revenue.min`/`max` filter is now a bucketed numeric enum (`0 | 0.2 | 1 | 2.5 | 5 | 10 | 20 | 50 | 100 | 500 | 1000 | 1001`) instead of a free-form `number`, matching what the API actually accepts. Code passing arbitrary numbers no longer typechecks
|
|
533
|
+
- Server-side parameter defaults are now surfaced in the generated JSDoc (`@default`) wherever the API applies one when a param is omitted: link-expiry seconds, chat visibility, hiring-project list `limit`, webhook delivery `format`/`enabled`/`headers`/`data`, and more.
|
|
534
|
+
- **Breaking (typed consumers):** the Sales Navigator company-search `annual_revenue.min`/`max` filter is now a bucketed numeric enum (`0 | 0.2 | 1 | 2.5 | 5 | 10 | 20 | 50 | 100 | 500 | 1000 | 1001`) instead of a free-form `number`, matching what the API actually accepts. Code passing arbitrary numbers no longer typechecks; pick the nearest bucket value. Runtime behavior is unchanged (the API already only accepted these buckets).
|
|
422
535
|
|
|
423
536
|
### Changed
|
|
424
537
|
|
|
425
|
-
- **Search filter guard-rails are now documented.** `search.companies` `limit` requires a minimum of 2 (was 1)
|
|
538
|
+
- **Search filter guard-rails are now documented.** `search.companies` `limit` requires a minimum of 2 (was 1); the API rejects single-result company searches. `search.jobs` `benefits` and `commitments` filters now document their accepted values. `search.people` `open_to` now documents its accepted values (`proBono`, `boardMember`). The `search.posts` request examples were corrected to use the actual `member`/`company` array filter shape instead of a `member_urn` string.
|
|
426
539
|
- Regenerated types from the current API surface. No resource method signatures changed.
|
|
427
540
|
|
|
428
541
|
---
|
|
429
542
|
|
|
430
|
-
## [0.7.0]
|
|
543
|
+
## [0.7.0] - 2026-07-01
|
|
431
544
|
|
|
432
545
|
### Changed
|
|
433
546
|
|
|
434
|
-
- **Breaking (typed consumers):** `recruiter.startChat` 201 response
|
|
435
|
-
- *Why:* product-API + core / Sales Navigator parity
|
|
547
|
+
- **Breaking (typed consumers):** `recruiter.startChat` 201 response: the `attendee_ids` field is removed and replaced by `message_id` (the opening message identifier). Final shape: `{ object: "chat_started", chat_id, message_id }`, matching `messaging.startChat` and `salesNavigator.startChat`. `chat_id` is now non-nullable on a 201. Type: `RecruiterStartChatResult`. Migration: read `res.message_id`.
|
|
548
|
+
- *Why:* product-API + core / Sales Navigator parity: the underlying LinkedIn start-chat operation returns an identical `{ object, chat_id, message_id }` for every product; the prior `attendee_ids` echo had no product-API basis.
|
|
436
549
|
- The `recruiter.startChat` request body is unchanged (`attendees_ids` plus all recruiter-specific params).
|
|
437
550
|
- Regenerated types from the updated API surface.
|
|
438
551
|
|
|
439
552
|
---
|
|
440
553
|
|
|
441
|
-
## [0.6.0]
|
|
554
|
+
## [0.6.0] - 2026-07-01
|
|
442
555
|
|
|
443
556
|
### Added
|
|
444
557
|
|
|
@@ -446,19 +559,19 @@ connection and checkpoint surface was reshaped end-to-end. All changes are on th
|
|
|
446
559
|
|
|
447
560
|
### Changed
|
|
448
561
|
|
|
449
|
-
- **Breaking (typed consumers):** `salesNavigator.syncMessages` and `recruiter.syncMessages
|
|
450
|
-
- **Breaking (typed consumers):** `recruiter.startChat` request body field `attendee_ids`
|
|
451
|
-
- Recruiter start-chat 201 response no longer surfaces a separate `quota` field
|
|
562
|
+
- **Breaking (typed consumers):** `salesNavigator.syncMessages` and `recruiter.syncMessages`: the 200 response field `sync_status` is renamed to `status`. Enum values (`sync_started | running | done | error`) are unchanged. Types: `SNSyncMessagesResult`, `RecruiterSyncMessagesResult`.
|
|
563
|
+
- **Breaking (typed consumers):** `recruiter.startChat` request body field `attendee_ids` -> `attendees_ids`. The **response** `attendee_ids` field is unchanged. Type: `RecruiterStartChatBody`.
|
|
564
|
+
- Recruiter start-chat 201 response no longer surfaces a separate `quota` field; remaining InMail capacity is read from `GET /v1/accounts/{account_id}`.
|
|
452
565
|
- Regenerated types from the updated API surface (SN/Recruiter messaging parity).
|
|
453
566
|
|
|
454
567
|
---
|
|
455
568
|
|
|
456
|
-
## [0.5.0]
|
|
569
|
+
## [0.5.0] - 2026-07-01
|
|
457
570
|
|
|
458
571
|
### Added
|
|
459
572
|
|
|
460
573
|
- Posts search gains nested `posted_by`, `mentioning`, and `author` filter objects. `posted_by` and `mentioning` take `member` / `company` arrays of opaque IDs (from `GET /v1/search/parameters`); `posted_by` also accepts `me`, `first_connections`, and `people_you_follow` booleans; `author` filters by `industry`, `company`, or `keywords`.
|
|
461
|
-
- Search-parameters items (`GET /v1/search/parameters`) now carry nullable company-disambiguation fields
|
|
574
|
+
- Search-parameters items (`GET /v1/search/parameters`) now carry nullable company-disambiguation fields: `industry`, `location`, `headcount` (human-readable size range), and `followers_count`, populated only for `type=COMPANY` results.
|
|
462
575
|
|
|
463
576
|
### Changed
|
|
464
577
|
|
|
@@ -471,11 +584,11 @@ connection and checkpoint surface was reshaped end-to-end. All changes are on th
|
|
|
471
584
|
|
|
472
585
|
---
|
|
473
586
|
|
|
474
|
-
## [0.4.2]
|
|
587
|
+
## [0.4.2] - 2026-07-01
|
|
475
588
|
|
|
476
589
|
### Added
|
|
477
590
|
|
|
478
|
-
- Invitation item `specifics` now includes `provider: "LINKEDIN"` on both `InvitationSent` and `InvitationReceived
|
|
591
|
+
- Invitation item `specifics` now includes `provider: "LINKEDIN"` on both `InvitationSent` and `InvitationReceived`, the platform the invitation belongs to, passed through alongside `shared_secret`.
|
|
479
592
|
|
|
480
593
|
### Changed
|
|
481
594
|
|
|
@@ -484,19 +597,19 @@ connection and checkpoint surface was reshaped end-to-end. All changes are on th
|
|
|
484
597
|
|
|
485
598
|
---
|
|
486
599
|
|
|
487
|
-
## [0.4.1]
|
|
600
|
+
## [0.4.1] - 2026-06-30
|
|
488
601
|
|
|
489
602
|
### Added
|
|
490
603
|
|
|
491
|
-
- `people_search_result` item now includes `id: string
|
|
604
|
+
- `people_search_result` item now includes `id: string`, the raw LinkedIn provider id for the person (e.g. `ACoAA...` format). This is the first property on the item type.
|
|
492
605
|
|
|
493
606
|
---
|
|
494
607
|
|
|
495
|
-
## [0.4.0]
|
|
608
|
+
## [0.4.0] - 2026-06-30
|
|
496
609
|
|
|
497
610
|
### Added
|
|
498
611
|
|
|
499
|
-
- `primary_locale` (`{ country, language } | null`) on the `Profile` and `OwnProfile` types
|
|
612
|
+
- `primary_locale` (`{ country, language } | null`) on the `Profile` and `OwnProfile` types, a profile's primary locale as set by LinkedIn (`language` is a BCP 47 tag, `country` an ISO 3166-1 alpha-2 code). Present on `GET /v1/profiles/{id}`; on `/me` it is populated when `linkedin_sections` is supplied.
|
|
500
613
|
|
|
501
614
|
### Changed
|
|
502
615
|
|
|
@@ -505,11 +618,11 @@ connection and checkpoint surface was reshaped end-to-end. All changes are on th
|
|
|
505
618
|
|
|
506
619
|
---
|
|
507
620
|
|
|
508
|
-
## [0.3.0]
|
|
621
|
+
## [0.3.0] - 2026-06-29
|
|
509
622
|
|
|
510
623
|
### Added
|
|
511
624
|
|
|
512
|
-
- `sendInMail` now accepts `surface: "classic"` for sending InMail from an account's own premium InMail credits (in addition to `"sales_nav"` and `"recruiter"`). The `recipient_urn` field accepts either a member URN (`urn:li:member:<id>`) or a member provider id (`ACo
|
|
625
|
+
- `sendInMail` now accepts `surface: "classic"` for sending InMail from an account's own premium InMail credits (in addition to `"sales_nav"` and `"recruiter"`). The `recipient_urn` field accepts either a member URN (`urn:li:member:<id>`) or a member provider id (`ACo...`).
|
|
513
626
|
|
|
514
627
|
### Changed
|
|
515
628
|
|
|
@@ -517,15 +630,15 @@ connection and checkpoint surface was reshaped end-to-end. All changes are on th
|
|
|
517
630
|
|
|
518
631
|
---
|
|
519
632
|
|
|
520
|
-
## [0.2.1]
|
|
633
|
+
## [0.2.1] - 2026-06-29
|
|
521
634
|
|
|
522
635
|
### Fixed
|
|
523
636
|
|
|
524
|
-
- `deleteMessage` and `addReaction` no longer inject `account_id` into the request. The server resolves the owning account from the message id
|
|
637
|
+
- `deleteMessage` and `addReaction` no longer inject `account_id` into the request. The server resolves the owning account from the message id; sending a client-supplied `account_id` was rejected by the server's strict schema, making both methods unusable via `client.account(id)`. The server's schemas are also relaxed (patch on the server side) so existing SDK installs continue to work without updating.
|
|
525
638
|
|
|
526
639
|
---
|
|
527
640
|
|
|
528
|
-
## [0.2.0]
|
|
641
|
+
## [0.2.0] - 2026-06-28
|
|
529
642
|
|
|
530
643
|
### Added
|
|
531
644
|
|
|
@@ -539,127 +652,127 @@ connection and checkpoint surface was reshaped end-to-end. All changes are on th
|
|
|
539
652
|
|
|
540
653
|
---
|
|
541
654
|
|
|
542
|
-
## [0.1.1]
|
|
655
|
+
## [0.1.1] - 2026-06-22
|
|
543
656
|
|
|
544
657
|
### Fixed
|
|
545
658
|
|
|
546
|
-
- Account-scoped write requests now send the account identifier in the request body where the API expects it. Previously the account identifier was always sent as a query parameter, regardless of the operation, which caused account-scoped write requests (sending invitations and InMail, posting and commenting, reacting, endorsing, saving leads, and the Recruiter pipeline writes) to be rejected. Read requests, body-less deletes, and filter-search requests are unaffected
|
|
659
|
+
- Account-scoped write requests now send the account identifier in the request body where the API expects it. Previously the account identifier was always sent as a query parameter, regardless of the operation, which caused account-scoped write requests (sending invitations and InMail, posting and commenting, reacting, endorsing, saving leads, and the Recruiter pipeline writes) to be rejected. Read requests, body-less deletes, and filter-search requests are unaffected; they continue to carry the account identifier as a query parameter, matching the API. An account identifier you pass explicitly in a request still takes precedence and is never overwritten.
|
|
547
660
|
|
|
548
661
|
---
|
|
549
662
|
|
|
550
|
-
## [0.1.0]
|
|
663
|
+
## [0.1.0] - 2026-06-21
|
|
551
664
|
|
|
552
665
|
Initial public release.
|
|
553
666
|
|
|
554
667
|
### Added
|
|
555
668
|
|
|
556
669
|
**Client and auth**
|
|
557
|
-
- `new Curviate({ apiKey })
|
|
558
|
-
- `curviate.account(accountId)
|
|
670
|
+
- `new Curviate({ apiKey })`: configures the SDK with a Bearer API key, base URL (`https://api.curviate.com`), timeout, and max retries.
|
|
671
|
+
- `curviate.account(accountId)`: returns an account-scoped accessor; all LinkedIn operations are tied to a managed account.
|
|
559
672
|
|
|
560
673
|
**Resource surface**
|
|
561
674
|
|
|
562
675
|
- `curviate.accounts.*`:
|
|
563
|
-
- `list(params?)
|
|
564
|
-
- `get(accountId)
|
|
565
|
-
- `link(body)
|
|
566
|
-
- `reconnect(accountId, body)
|
|
567
|
-
- `refresh(accountId)
|
|
568
|
-
- `update(accountId, body)
|
|
569
|
-
- `disconnect(accountId)
|
|
570
|
-
- `submitCheckpoint(body)
|
|
571
|
-
- `pollCheckpoint(body)
|
|
572
|
-
- `createConnectLink(body)
|
|
676
|
+
- `list(params?)`: list managed accounts with optional `limit` and `cursor`.
|
|
677
|
+
- `get(accountId)`: fetch a single managed account.
|
|
678
|
+
- `link(body)`: connect a LinkedIn account via cookie or API key; returns an account or a checkpoint.
|
|
679
|
+
- `reconnect(accountId, body)`: reconnect a disconnected account.
|
|
680
|
+
- `refresh(accountId)`: force a session refresh.
|
|
681
|
+
- `update(accountId, body)`: update account settings.
|
|
682
|
+
- `disconnect(accountId)`: disconnect a managed account.
|
|
683
|
+
- `submitCheckpoint(body)`: submit a 2FA / CAPTCHA checkpoint challenge.
|
|
684
|
+
- `pollCheckpoint(body)`: poll for checkpoint resolution.
|
|
685
|
+
- `createConnectLink(body)`: generate a hosted connect link.
|
|
573
686
|
|
|
574
687
|
- `curviate.account(id).messaging.*`:
|
|
575
|
-
- `listChats(params?)
|
|
576
|
-
- `getChat(chatId)
|
|
577
|
-
- `startChat(body)
|
|
578
|
-
- `listMessages(chatId, params?)
|
|
579
|
-
- `getMessage(messageId)
|
|
580
|
-
- `sendMessage(chatId, body)
|
|
581
|
-
- `editMessage(messageId, body)
|
|
582
|
-
- `deleteMessage(messageId)
|
|
583
|
-
- `addReaction(messageId, body)
|
|
584
|
-
- `getAttachment(messageId, attachmentId)
|
|
585
|
-
- `syncChat(chatId)
|
|
586
|
-
- `syncMessages(params?)
|
|
587
|
-
- `sendInMail(body)
|
|
588
|
-
- `getInMailBalance(params?)
|
|
688
|
+
- `listChats(params?)`: list conversation threads.
|
|
689
|
+
- `getChat(chatId)`: fetch a single chat.
|
|
690
|
+
- `startChat(body)`: start a new conversation.
|
|
691
|
+
- `listMessages(chatId, params?)`: list messages in a chat.
|
|
692
|
+
- `getMessage(messageId)`: fetch a single message.
|
|
693
|
+
- `sendMessage(chatId, body)`: send a message into a chat.
|
|
694
|
+
- `editMessage(messageId, body)`: edit a sent message.
|
|
695
|
+
- `deleteMessage(messageId)`: delete a sent message.
|
|
696
|
+
- `addReaction(messageId, body)`: add an emoji reaction.
|
|
697
|
+
- `getAttachment(messageId, attachmentId)`: download a message attachment.
|
|
698
|
+
- `syncChat(chatId)`: trigger a chat history sync.
|
|
699
|
+
- `syncMessages(params?)`: trigger a full message sync.
|
|
700
|
+
- `sendInMail(body)`: send an InMail.
|
|
701
|
+
- `getInMailBalance(params?)`: fetch InMail credit balance.
|
|
589
702
|
|
|
590
703
|
- `curviate.account(id).profiles.*`:
|
|
591
|
-
- `get(profileId, params?)
|
|
592
|
-
- `getMe()
|
|
593
|
-
- `getCompany(companyId)
|
|
594
|
-
- `listConnections(params?)
|
|
595
|
-
- `listFollowers(profileId, params?)
|
|
596
|
-
- `listPosts(profileId, params?)
|
|
597
|
-
- `listComments(profileId, params?)
|
|
598
|
-
- `listReactions(profileId, params?)
|
|
599
|
-
- `endorse(profileId, body)
|
|
704
|
+
- `get(profileId, params?)`: fetch a LinkedIn profile by id or handle.
|
|
705
|
+
- `getMe()`: fetch the profile for the managed account holder.
|
|
706
|
+
- `getCompany(companyId)`: fetch a company profile.
|
|
707
|
+
- `listConnections(params?)`: list the account's connections.
|
|
708
|
+
- `listFollowers(profileId, params?)`: list a profile's followers.
|
|
709
|
+
- `listPosts(profileId, params?)`: list a profile's posts.
|
|
710
|
+
- `listComments(profileId, params?)`: list a profile's post comments.
|
|
711
|
+
- `listReactions(profileId, params?)`: list a profile's post reactions.
|
|
712
|
+
- `endorse(profileId, body)`: endorse skills on a profile.
|
|
600
713
|
|
|
601
714
|
- `curviate.account(id).invites.*`:
|
|
602
|
-
- `send(body)
|
|
603
|
-
- `listSent(params?)
|
|
604
|
-
- `listReceived(params?)
|
|
605
|
-
- `respond(invitationId, body)
|
|
606
|
-
- `cancel(invitationId)
|
|
715
|
+
- `send(body)`: send a connection invitation.
|
|
716
|
+
- `listSent(params?)`: list sent invitations.
|
|
717
|
+
- `listReceived(params?)`: list received invitations.
|
|
718
|
+
- `respond(invitationId, body)`: accept or ignore a received invitation.
|
|
719
|
+
- `cancel(invitationId)`: cancel a sent invitation.
|
|
607
720
|
|
|
608
721
|
- `curviate.account(id).posts.*`:
|
|
609
|
-
- `list(params?)
|
|
610
|
-
- `get(postId)
|
|
611
|
-
- `create(body)
|
|
612
|
-
- `listComments(postId, params?)
|
|
613
|
-
- `comment(postId, body)
|
|
614
|
-
- `listReactions(postId, params?)
|
|
615
|
-
- `react(postId, body)
|
|
722
|
+
- `list(params?)`: list posts visible to the account.
|
|
723
|
+
- `get(postId)`: fetch a single post.
|
|
724
|
+
- `create(body)`: create a post.
|
|
725
|
+
- `listComments(postId, params?)`: list comments on a post.
|
|
726
|
+
- `comment(postId, body)`: comment on a post.
|
|
727
|
+
- `listReactions(postId, params?)`: list reactions on a post.
|
|
728
|
+
- `react(postId, body)`: react to a post.
|
|
616
729
|
|
|
617
730
|
- `curviate.account(id).salesNavigator.*`:
|
|
618
|
-
- `searchPeople(body, params?)
|
|
619
|
-
- `searchCompanies(body, params?)
|
|
620
|
-
- `getProfile(identifier, params?)
|
|
621
|
-
- `getParameters(params)
|
|
622
|
-
- `saveLead(userId, body)
|
|
623
|
-
- `startChat(body)
|
|
624
|
-
- `syncMessages(params)
|
|
731
|
+
- `searchPeople(body, params?)`: search people via Sales Navigator.
|
|
732
|
+
- `searchCompanies(body, params?)`: search companies via Sales Navigator.
|
|
733
|
+
- `getProfile(identifier, params?)`: fetch a Sales Navigator profile.
|
|
734
|
+
- `getParameters(params)`: fetch available search filter parameters.
|
|
735
|
+
- `saveLead(userId, body)`: save a lead.
|
|
736
|
+
- `startChat(body)`: start a Sales Navigator conversation.
|
|
737
|
+
- `syncMessages(params)`: sync Sales Navigator messages.
|
|
625
738
|
|
|
626
739
|
- `curviate.account(id).recruiter.*`:
|
|
627
|
-
- `searchPeople(body, params?)
|
|
628
|
-
- `getProfile(identifier, params?)
|
|
629
|
-
- `getParameters(params)
|
|
630
|
-
- `syncMessages(params)
|
|
631
|
-
- `startChat(body)
|
|
632
|
-
- `listProjects(params?)
|
|
633
|
-
- `getProject(projectId)
|
|
634
|
-
- `addCandidate(userId, body)
|
|
635
|
-
- `addApplicant(userId, body)
|
|
636
|
-
- `rejectApplicant(userId, body)
|
|
637
|
-
- `listJobs(params?)
|
|
638
|
-
- `createJob(body)
|
|
639
|
-
- `publishJob(jobId, body)
|
|
640
|
-
- `solveJobCheckpoint(jobId, body)
|
|
641
|
-
- `listApplicants(jobId, params?)
|
|
642
|
-
- `getApplicant(applicantId)
|
|
643
|
-
- `downloadResume(applicantId)
|
|
740
|
+
- `searchPeople(body, params?)`: search candidates via LinkedIn Recruiter.
|
|
741
|
+
- `getProfile(identifier, params?)`: fetch a Recruiter candidate profile.
|
|
742
|
+
- `getParameters(params)`: fetch available search filter parameters.
|
|
743
|
+
- `syncMessages(params)`: sync Recruiter messages.
|
|
744
|
+
- `startChat(body)`: start a Recruiter conversation.
|
|
745
|
+
- `listProjects(params?)`: list Recruiter projects.
|
|
746
|
+
- `getProject(projectId)`: fetch a single Recruiter project.
|
|
747
|
+
- `addCandidate(userId, body)`: add a candidate to a project.
|
|
748
|
+
- `addApplicant(userId, body)`: add an applicant to a job.
|
|
749
|
+
- `rejectApplicant(userId, body)`: reject an applicant.
|
|
750
|
+
- `listJobs(params?)`: list Recruiter job postings.
|
|
751
|
+
- `createJob(body)`: create a Recruiter job posting.
|
|
752
|
+
- `publishJob(jobId, body)`: publish a Recruiter job posting.
|
|
753
|
+
- `solveJobCheckpoint(jobId, body)`: solve a job-posting checkpoint.
|
|
754
|
+
- `listApplicants(jobId, params?)`: list applicants for a job.
|
|
755
|
+
- `getApplicant(applicantId)`: fetch a single applicant.
|
|
756
|
+
- `downloadResume(applicantId)`: download an applicant's resume.
|
|
644
757
|
|
|
645
758
|
- `curviate.account(id).search.*` (classic LinkedIn search):
|
|
646
|
-
- `people(body)
|
|
647
|
-
- `companies(body)
|
|
648
|
-
- `posts(body)
|
|
649
|
-
- `jobs(body)
|
|
650
|
-
- `getParameters(query)
|
|
759
|
+
- `people(body)`: search people.
|
|
760
|
+
- `companies(body)`: search companies.
|
|
761
|
+
- `posts(body)`: search posts.
|
|
762
|
+
- `jobs(body)`: search jobs.
|
|
763
|
+
- `getParameters(query)`: fetch available search filter parameters.
|
|
651
764
|
|
|
652
765
|
- `curviate.webhooks.*`:
|
|
653
|
-
- `create(body)
|
|
654
|
-
- `list(params?)
|
|
655
|
-
- `update(id, body)
|
|
656
|
-
- `delete(id)
|
|
657
|
-
- `listEvents()
|
|
658
|
-
- `getStateDiff(accountId, params?)
|
|
766
|
+
- `create(body)`: register a new webhook endpoint.
|
|
767
|
+
- `list(params?)`: list registered webhooks.
|
|
768
|
+
- `update(id, body)`: update a webhook endpoint.
|
|
769
|
+
- `delete(id)`: delete a webhook endpoint.
|
|
770
|
+
- `listEvents()`: list available webhook event types.
|
|
771
|
+
- `getStateDiff(accountId, params?)`: fetch an account state diff.
|
|
659
772
|
|
|
660
773
|
**Typed error model**
|
|
661
|
-
- `CurviateError
|
|
662
|
-
- `isCurviateError(err)
|
|
774
|
+
- `CurviateError`: single thrown type for all API errors, carrying a stable `code`, `httpStatus`, `retryHint`, `userFixable`, `retryLikelyToSucceed`, and `requiredTier`.
|
|
775
|
+
- `isCurviateError(err)`: type guard for narrowing in `catch` blocks.
|
|
663
776
|
- 34-member `ErrorCode` union covering every observable API error code.
|
|
664
777
|
|
|
665
778
|
**HTTP transport with retry and backoff**
|
|
@@ -669,13 +782,13 @@ Initial public release.
|
|
|
669
782
|
- JSON and binary (ArrayBuffer) response parsing.
|
|
670
783
|
|
|
671
784
|
**Cursor pagination**
|
|
672
|
-
- `curviate.paginate(method, params?)
|
|
785
|
+
- `curviate.paginate(method, params?)`: async iterator that follows the `cursor` field automatically.
|
|
673
786
|
|
|
674
787
|
**Webhook signature verification**
|
|
675
|
-
- `constructEvent(rawBody, signatureHeader, secret, opts?)
|
|
676
|
-
- `WebhookSignatureError
|
|
677
|
-
- `CurviateEvent
|
|
788
|
+
- `constructEvent(rawBody, signatureHeader, secret, opts?)`: verifies `HMAC-SHA256` webhook signatures using Web Crypto (`globalThis.crypto.subtle`); constant-time comparison prevents timing attacks; configurable replay window via `replayWindowSecs` (default 300 s). Always async, always `await` it.
|
|
789
|
+
- `WebhookSignatureError`: thrown on malformed header, invalid signature, or replay; not a `CurviateError`.
|
|
790
|
+
- `CurviateEvent`: 19-member discriminated union covering all canonical webhook event types.
|
|
678
791
|
|
|
679
792
|
**TypeScript types**
|
|
680
|
-
- Full OpenAPI-generated types at `src/generated/types.ts
|
|
793
|
+
- Full OpenAPI-generated types at `src/generated/types.ts`: request bodies, responses, and path params.
|
|
681
794
|
- ESM-only build targeting ES2020; works in Node 18+, Cloudflare Workers, Vercel Edge.
|