@curviate/sdk 0.40.1 → 0.42.0

package/CHANGELOG.md

@@ -9,6 +9,87 @@ Versioning: semantic. Minor for additive changes, patch for bug fixes; no stabil
 
 ## [Unreleased]
 
+## [0.42.0] - 2026-10-07
+
+Fixture and types regenerated from the server integration branch (134 paths,
+server `b1c443c6a3a0e1c2a09944be39f01c6921fca46c`), **not** from a deployed
+document: regenerate from deployed staging and confirm an empty diff before
+publishing.
+
+### Added
+
+- **`drafts` resource** (root-scoped, 7 methods): `create`, `list`, `get`,
+  `update`, `delete`, `publish`, `uploadAttachment`. A Draft is a stored,
+  editable post that Curviate publishes at `scheduled_at` (ISO 8601 with
+  offset, passed through unchanged). `list` takes `status` as an array and
+  sends it as the API's comma list; `status: ["published"]` returns publish
+  records. `uploadAttachment(id, data, { filename, contentType })` sends a
+  file (an MP4 video or PDF up to 50 MiB; an image is capped at 5 MiB) as the raw request body.
+  `delete` resolves with `undefined` (204). (`posts.delete` and `comments.delete`
+  still hand back the transport's empty buffer under a `void` type; unchanged here.)
+- **Six new error codes** decode to themselves instead of `INTERNAL`:
+  `DRAFT_LIMIT_REACHED`, `MEDIA_QUOTA_EXCEEDED`, `ACCOUNT_REQUIRED`,
+  `DRAFT_NOT_PUBLISHABLE`, `SCHEDULE_CONFLICT`, `DRAFT_PUBLISHING`.
+- **`post.published` and `post.publish_failed` webhook events** join
+  `CurviateEvent` (`PostPublishedPayload`, `PostPublishFailedPayload`).
+  Payloads carry ids and times, never post text or media.
+- `Draft*` request and result types are exported.
+
+### Changed
+
+- The webhook `source` enum includes `post`, from the regenerated types.
+
+## [0.41.0] - 2026-10-03
+
+Fixture and types regenerated against the deployed staging document
+(`https://api.staging.curviate.com`, 130 paths, server
+`df3c133205721a75786001d51b3ee4491b4fe697`).
+
+### Breaking
+
+- **A new connect must name its connection location.** `auth.intent()`
+  without `account_id` needs exactly one of `country` (a supported ISO 3166-1
+  alpha-2 code, e.g. `"US"`), `ip` (a public IPv4) or your own `proxy`. The
+  API refuses a connect without one with `400 CONNECTION_LOCATION_REQUIRED`,
+  and `AuthIntentBody` now refuses it at compile time, along with two sources
+  at once and `allow_country_fallback` with `proxy`. A reconnect (`account_id`
+  present) may still omit it to keep the account's configured location.
+  `country` is typed as the served 56-code enum (`ConnectionCountry`).
+- **`accounts.update()` returns the account.** It used to return
+  `{ object, account_id }`; it now returns the account as `get` does, without
+  `quotas` and `event_log`, with `connection_location` re-read after a
+  location change.
+- **`proxy: null` on `accounts.update()` requires a `country`** in the same
+  call. Clearing your own proxy alone used to fall back to an automatic
+  location; it is now `CONNECTION_LOCATION_REQUIRED`.
+- **Post engagement counts can be `null`.** On `search.posts`, `search.fromUrl`,
+  `companies.posts` and `feed.home` items, `likes`, `comments`
+  and `shares` are `number | null`, as the served document now declares.
+
+### Added
+
+- **Connection location.** `country` and `allow_country_fallback` on
+  `accounts.update()` move an account's location (strict unless
+  `allow_country_fallback: true`). Every account read and connect result
+  carries `connection_location: { country, current_country, mode, strict }`,
+  plus `previous_country` when a connect moved an account you already had.
+  The `proxy.protocol` enum gains `socks4`.
+- **`CONNECTION_LOCATION_REQUIRED` and `CONNECTION_LOCATION_UNAVAILABLE`** are
+  in `ERROR_CODES`; before this release both decoded to `INTERNAL`.
+  `CurviateError.connectionLocation` carries where the account connects from
+  now when a `CONNECTION_LOCATION_UNAVAILABLE` followed an applied change.
+- Search and feed post items carry `created_at`, and the author carries
+  `display_name` and `type` on the shape without `name`.
+- `AuthIntentBody`, `ConnectionCountry`, `ConnectionLocationSource`,
+  `ConnectionLocation`, `AccountDetail`, `AccountUpdateBody` and
+  `AccountUpdateResult` are exported.
+
+### Documentation
+
+- `posts.get` JSDoc: a post search result's `id` and `share-` post URLs are
+  accepted post ids, and `listComments` and the reaction operations take the
+  same forms (the old note said they took the opaque `id` only).
+
 ## [0.40.1] - 2026-10-01
 
 ### Fixed

package/README.md

@@ -37,10 +37,16 @@ const curviate = new Curviate({
 
 ## Account-scoped accessor
 
-Every LinkedIn operation (messages, member profiles, invites, posts) is tied to a **managed account**, a LinkedIn session you have connected via the connect flow (`curviate.auth.intent()`). The `curviate.account(id)` accessor fixes the `account_id` on every call so you do not have to thread it manually:
+Every LinkedIn operation (messages, member profiles, invites, posts) is tied to a **managed account**, a LinkedIn session you have connected via the connect flow (`curviate.auth.intent()`). A new connect names where LinkedIn sees the account connecting from, with exactly one of `country` (e.g. `"US"`), `ip` or your own `proxy`:
 
 ```ts
-// Root-level: tenant-wide operations (accounts, auth, webhooks)
+await curviate.auth.intent({ seat_id, auth_method: "credentials", credentials: { email, password }, country: "US" });
+```
+
+The `curviate.account(id)` accessor fixes the `account_id` on every call so you do not have to thread it manually:
+
+```ts
+// Root-level: tenant-wide operations (accounts, auth, webhooks, drafts)
 const { items: accounts } = await curviate.accounts.list();
 
 // Account-scoped: all LinkedIn ops under a specific account
@@ -52,6 +58,30 @@ const me = await acc.users.get("me");           // your own profile
 const profile = await acc.users.get("some-user-id"); // someone else's
 ```
 
+## Drafts and scheduled posts
+
+A Draft is a stored, editable, unpublished post. Give it an account and a `scheduled_at` and Curviate publishes it at that time. Drafts are tenant-wide, so `drafts` hangs off the root client (a Draft's `account_id` is a field, and optional). `acc.posts.create()` still publishes immediately and does not schedule.
+
+```ts
+const draft = await curviate.drafts.create({
+  account_id: "acc_...",
+  text: "Three things we learned shipping our first agent integration.",
+  scheduled_at: "2026-10-12T09:00:00+02:00", // ISO 8601 with offset; 5 min to 365 days ahead
+});
+
+// A video or PDF (up to 50 MiB) goes up as the raw body; images (up to 5 MiB) can ride inline as base64.
+await curviate.drafts.uploadAttachment(draft.id, await readFile("clip.mp4"), {
+  filename: "clip.mp4",
+  contentType: "video/mp4",
+});
+
+await curviate.drafts.update(draft.id, { scheduled_at: null }); // unschedule
+const { id: postId } = await curviate.drafts.publish(draft.id); // or publish now
+const { items } = await curviate.drafts.list({ status: ["scheduled", "published"] });
+```
+
+Refusals carry their own codes: `DRAFT_LIMIT_REACHED`, `MEDIA_QUOTA_EXCEEDED`, `ACCOUNT_REQUIRED`, `DRAFT_NOT_PUBLISHABLE`, `SCHEDULE_CONFLICT` and `DRAFT_PUBLISHING`. A scheduled publish that fails raises the `post.publish_failed` webhook (`post.published` on success); a `failure_code` of `outcome_unknown` means the post may be live, so check the account's posts before retrying.
+
 ---
 
 ## First end-to-end call