@curviate/sdk 0.39.0 → 0.40.1

package/CHANGELOG.md

@@ -9,6 +9,65 @@ Versioning: semantic. Minor for additive changes, patch for bug fixes; no stabil
 
 ## [Unreleased]
 
+## [0.40.1] - 2026-10-01
+
+### Fixed
+
+- **`TOOLSET_DISABLED` and `AMBIGUOUS_IDENTIFIER` are no longer part of the
+  REST error union.** Both belong to the agent (MCP) surface only; a REST call
+  never returns them. They were added to `ERROR_CODES` in 0.40.0 by mistake, so
+  a `switch (error.code)` carried two arms that cannot arrive. Remove any such
+  arm. No REST response changes; a wire code outside the union still decodes
+  to `INTERNAL`, as before 0.40.0.
+
+## [0.40.0] - 2026-10-01
+
+Fixture and types regenerated against the deployed production document
+(`https://api.curviate.com`, 130 paths, server
+`66421dcfa43949f2fd60b2872ef7fe3b16a79660`).
+
+### Changed
+
+- **A blank search filter or keyword is now refused with a `400`.** The
+  served document marks every free-text search filter and keyword
+  `minLength: 1`, and the server enforces it. A caller that sends an empty
+  string (`""`) for a filter or `keywords` used to get a search that ignored
+  it, and now gets `INVALID_REQUEST`. Omit the field instead of sending it
+  empty. The SDK does not validate this client-side, so the refusal comes from
+  the server. This is the one behaviour change in the release: callers that
+  pass `""` through from user input need to drop the key first.
+- **`POST /v1/auth/checkpoint/poll` and `POST /v1/auth/checkpoint/solve` now
+  return `409 ACCOUNT_ALREADY_LINKED` when the approved LinkedIn identity is
+  already connected.** On solve, the body carries `account_id` when the
+  existing account is yours, so you can reuse it. When the identity is held by
+  another workspace, poll and solve name no account and the error is not
+  retryable. The
+  `CHECKPOINT_EXPIRED`, `CHECKPOINT_ALREADY_RESOLVED` and
+  `CONNECTION_IN_PROGRESS` 409s are unchanged. The generated 409 descriptions
+  and the `ACCOUNT_ALREADY_LINKED` note in `errors.ts` say so.
+
+### Fixed
+
+- **`TOOLSET_DISABLED` and `AMBIGUOUS_IDENTIFIER` are now in the error
+  taxonomy.** The served `Error` type documents an extra field for each
+  (`toolset`, `candidates`), but the SDK did not carry either code, so a
+  response with one decoded to `INTERNAL`, which is retryable and reads as a
+  server fault. They now decode to themselves and are not retried. A new guard
+  reads the codes named in the `Error` extras descriptions from the fixture and
+  fails if the taxonomy lacks one.
+
+### Added
+
+- **The generated `Error` type documents the per-code extra fields**, each
+  optional and present only on its code: `portal_url` (`PAYMENT_REQUIRED`,
+  `ACCOUNT_DISPUTED`; `null` when no portal session could be opened),
+  `attempts_remaining` (`CHECKPOINT_INVALID_CODE`), `challenge_type`
+  (`CHECKPOINT_UNSUPPORTED`), `account_id` (`ACCOUNT_ALREADY_LINKED`), `quota`
+  (`RATE_LIMIT_ACCOUNT`), `toolset` (`TOOLSET_DISABLED`) and `candidates`
+  (`AMBIGUOUS_IDENTIFIER`, each `{ id, name }`). These are types only:
+  `CurviateError` does not surface them as properties yet, so read them from
+  the response body if you need them.
+
 ## [0.39.0] - 2026-09-28
 
 Fixture and types regenerated against the deployed production document

package/dist/index.d.ts

@@ -2878,6 +2878,25 @@ interface components {
                     name?: string;
                 }[];
             }[];
+            /** @description Present on PAYMENT_REQUIRED and ACCOUNT_DISPUTED: the self-service page where the tenant resolves the payment problem, so an agent can hand a human one link. Null when no portal session could be opened; fall back to the dashboard. */
+            portal_url?: string | null;
+            /** @description Present on CHECKPOINT_INVALID_CODE: how many more verification codes the checkpoint accepts before it locks. Stop and ask the account owner for a fresh code when it reaches zero, rather than guessing. */
+            attempts_remaining?: number;
+            /** @description Present on CHECKPOINT_UNSUPPORTED: the kind of verification challenge LinkedIn raised that cannot be solved through this API. A human has to complete it in LinkedIn, then the account reconnects. */
+            challenge_type?: string;
+            /** @description Present on ACCOUNT_ALREADY_LINKED: the id of your own existing account for this LinkedIn profile, so you can reuse it instead of linking again. Only ever an account of the calling tenant. */
+            account_id?: string;
+            /** @description Present on RATE_LIMIT_ACCOUNT: the per-account request ceiling that was breached, with its name, the units remaining and total, and the absolute reset_time. Wait until reset_time before retrying. */
+            quota?: Record<string, never>;
+            /** @description Present on TOOLSET_DISABLED: the name of the toolset that is switched off for this tenant, so you can enable it or use another tool. */
+            toolset?: string;
+            /** @description Present on AMBIGUOUS_IDENTIFIER: the entries the identifier matched. Pick one and re-send its id. */
+            candidates?: {
+                /** @description The id to send instead of the ambiguous identifier. */
+                id?: string;
+                /** @description Human-readable label for this entry. */
+                name?: string;
+            }[];
             /** @description Present on errors that can be recovered programmatically, a plain sentence describing the next call to make. */
             next_action?: string;
             /** @description Present when something about this response is true but not visible in it. On a search, an entry names a filter value we could not check before sending it, or reports that some of the people on the page were not disclosed to the connected account, so an unexpected result count is explicable rather than silent. Branch on each entry's code, never on its message. */
@@ -28960,7 +28979,7 @@ interface operations {
                     "application/json": components["schemas"]["Error"];
                 };
             };
-            /** @description The checkpoint has expired. */
+            /** @description CHECKPOINT_EXPIRED or CHECKPOINT_ALREADY_RESOLVED: restart the connection. ACCOUNT_ALREADY_LINKED: the LinkedIn identity is already connected; it names your own account_id when you own it, otherwise it is not one you can manage here. CONNECTION_IN_PROGRESS: another connection attempt for this identity is open; wait for it to finish or expire. */
             409: {
                 headers: {
                     [name: string]: unknown;
@@ -29310,7 +29329,7 @@ interface operations {
                     "application/json": components["schemas"]["Error"];
                 };
             };
-            /** @description The approved LinkedIn identity is already linked to another account. Reconnect or disconnect the existing account instead of linking it again. */
+            /** @description ACCOUNT_ALREADY_LINKED. The approved LinkedIn identity is already connected and is not one you can manage here; not retryable. CONNECTION_IN_PROGRESS. Another connection attempt for this identity is open; wait for it to finish or expire. */
             409: {
                 headers: {
                     [name: string]: unknown;

package/dist/index.js

@@ -8,8 +8,10 @@ var ERROR_CODES = [
   // Account state
   "ACCOUNT_NOT_FOUND",
   "ACCOUNT_RESTRICTED",
-  // Duplicate connect: reconnect or adopt the existing account instead of
-  // linking again. Not retryable.
+  // Duplicate connect (409): the LinkedIn identity is already connected. When
+  // your own tenant holds it the body carries `account_id`, so reuse that
+  // account instead of linking again; when another tenant holds it the body
+  // names no account and there is nothing you can manage here. Not retryable.
   "ACCOUNT_ALREADY_LINKED",
   "RESOURCE_NOT_FOUND",
   // A read found nothing in Curviate's store and its mode may not fetch, so it

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@curviate/sdk",
-  "version": "0.39.0",
+  "version": "0.40.1",
   "private": false,
   "description": "TypeScript SDK for the Curviate API.",
   "license": "MIT",

package/src/generated/types.ts

@@ -2781,6 +2781,25 @@ export interface components {
                     name?: string;
                 }[];
             }[];
+            /** @description Present on PAYMENT_REQUIRED and ACCOUNT_DISPUTED: the self-service page where the tenant resolves the payment problem, so an agent can hand a human one link. Null when no portal session could be opened; fall back to the dashboard. */
+            portal_url?: string | null;
+            /** @description Present on CHECKPOINT_INVALID_CODE: how many more verification codes the checkpoint accepts before it locks. Stop and ask the account owner for a fresh code when it reaches zero, rather than guessing. */
+            attempts_remaining?: number;
+            /** @description Present on CHECKPOINT_UNSUPPORTED: the kind of verification challenge LinkedIn raised that cannot be solved through this API. A human has to complete it in LinkedIn, then the account reconnects. */
+            challenge_type?: string;
+            /** @description Present on ACCOUNT_ALREADY_LINKED: the id of your own existing account for this LinkedIn profile, so you can reuse it instead of linking again. Only ever an account of the calling tenant. */
+            account_id?: string;
+            /** @description Present on RATE_LIMIT_ACCOUNT: the per-account request ceiling that was breached, with its name, the units remaining and total, and the absolute reset_time. Wait until reset_time before retrying. */
+            quota?: Record<string, never>;
+            /** @description Present on TOOLSET_DISABLED: the name of the toolset that is switched off for this tenant, so you can enable it or use another tool. */
+            toolset?: string;
+            /** @description Present on AMBIGUOUS_IDENTIFIER: the entries the identifier matched. Pick one and re-send its id. */
+            candidates?: {
+                /** @description The id to send instead of the ambiguous identifier. */
+                id?: string;
+                /** @description Human-readable label for this entry. */
+                name?: string;
+            }[];
             /** @description Present on errors that can be recovered programmatically, a plain sentence describing the next call to make. */
             next_action?: string;
             /** @description Present when something about this response is true but not visible in it. On a search, an entry names a filter value we could not check before sending it, or reports that some of the people on the page were not disclosed to the connected account, so an unexpected result count is explicable rather than silent. Branch on each entry's code, never on its message. */
@@ -28864,7 +28883,7 @@ export interface operations {
                     "application/json": components["schemas"]["Error"];
                 };
             };
-            /** @description The checkpoint has expired. */
+            /** @description CHECKPOINT_EXPIRED or CHECKPOINT_ALREADY_RESOLVED: restart the connection. ACCOUNT_ALREADY_LINKED: the LinkedIn identity is already connected; it names your own account_id when you own it, otherwise it is not one you can manage here. CONNECTION_IN_PROGRESS: another connection attempt for this identity is open; wait for it to finish or expire. */
             409: {
                 headers: {
                     [name: string]: unknown;
@@ -29214,7 +29233,7 @@ export interface operations {
                     "application/json": components["schemas"]["Error"];
                 };
             };
-            /** @description The approved LinkedIn identity is already linked to another account. Reconnect or disconnect the existing account instead of linking it again. */
+            /** @description ACCOUNT_ALREADY_LINKED. The approved LinkedIn identity is already connected and is not one you can manage here; not retryable. CONNECTION_IN_PROGRESS. Another connection attempt for this identity is open; wait for it to finish or expire. */
             409: {
                 headers: {
                     [name: string]: unknown;