upload-post 2.10.0 → 2.13.0

package/README.md

@@ -37,6 +37,8 @@ console.log(response);
 - ✅ **Posting Queue** - Add posts to your configured queue
 - ✅ **First Comments** - Auto-post first comment after publishing
 - ✅ **Analytics** - Get engagement metrics
+- ✅ **Audience** - Who follows a profile, per platform
+- ✅ **Suggestions** - Hashtags and searches to post about, per platform
 - ✅ **Full TypeScript Support**
 
 ## Using this from an AI agent? Use the MCP server instead
@@ -313,16 +315,204 @@ const found = await client.searchTiktokMusic('my-profile', {
 const locations = await client.getTiktokLocations('my-profile', 'Madrid');
 ```
 
+### Comments
+
+The same methods cover every platform that has comments — Instagram, Facebook,
+YouTube, LinkedIn and TikTok. There is no per-network method: the endpoint
+answers one question and `platform` says who to ask.
+
+```javascript
+// Read the comments on a post
+const { comments } = await client.getPostComments({
+  user: 'my-profile',
+  platform: 'tiktok',
+  postId: '7412345678901234567', // TikTok has no post-URL lookup, pass the video id
+  limit: 20,
+});
+
+// Read the replies hanging from one of them — same question, one more parameter
+const { comments: replies } = await client.getPostComments({
+  user: 'my-profile',
+  platform: 'tiktok',
+  postId: '7412345678901234567',
+  commentId: comments[0].id,
+});
+
+// Comment on the post, or reply to a comment
+await client.createComment({
+  user: 'my-profile',
+  platform: 'tiktok',
+  postId: '7412345678901234567',
+  message: 'Thanks for watching!',
+});
+
+await client.createComment({
+  user: 'my-profile',
+  platform: 'tiktok',
+  commentId: comments[0].id,
+  message: 'Glad you liked it',
+});
+
+// Delete one
+await client.deleteComment({
+  user: 'my-profile',
+  platform: 'tiktok',
+  commentId: comments[0].id,
+});
+```
+
+You can also have the first comment posted for you right after publishing, with
+`firstComment` for every platform or `tiktokFirstComment` for TikTok alone.
+
+On TikTok all of this needs the `comments` capability, which the account grants
+when it connects — see
+[What a TikTok connection can do](#what-a-tiktok-connection-can-do-capabilities).
+
+#### Moderating a comment: hide, like, pin
+
+`commentAction()` does the three and undoes them, on any platform that supports
+it. Each action carries its own inverse, and `postId` is only sent when the
+platform needs it:
+
+```javascript
+await client.commentAction({
+  user: 'my-profile',
+  platform: 'tiktok',
+  action: 'hide',
+  commentId: '7412345678909999999',
+  postId: '7412345678901234567',
+});
+
+await client.commentAction({
+  user: 'my-profile',
+  platform: 'tiktok',
+  action: 'like',
+  commentId: '7412345678909999999',
+});
+
+await client.commentAction({
+  user: 'my-profile',
+  platform: 'tiktok',
+  action: 'unpin',
+  commentId: '7412345678909999999',
+  postId: '7412345678901234567',
+});
+```
+
+| `action` | Undo | `postId` |
+| --- | --- | --- |
+| `hide` | `unhide` | required |
+| `like` | `unlike` | not sent |
+| `pin` | `unpin` | required |
+
+### Audience
+
+Where the analytics methods answer *how did my posts do*, `getAudience()`
+answers *who is following me*. One endpoint, one `platform` parameter, like
+every other question in the API.
+
+```javascript
+const audience = await client.getAudience({
+  user: 'my-profile',
+  platform: 'tiktok',
+  startDate: '2026-07-01',
+  endDate: '2026-07-30',
+});
+
+console.log(audience.range);              // the window actually used
+console.log(audience.audience.countries); // and .cities, .ages, .genders
+console.log(audience.activity_by_hour);   // [{ hour: '14', followers_online: 1494 }, ...]
+console.log(audience.followers_daily);    // [{ date, total, new, lost }, ...]
+console.log(audience.profile_actions);    // bio link, address, email, phone, leads
+console.log(audience.bio_description);
+```
+
+The window is clamped on the server: at most 60 days, and `endDate` always
+before today. A wider window is trimmed to what the platform accepts instead of
+failing.
+
+Ask for a `benchmarkCategory` and the same call also returns how the account
+compares with the average of that category. The accepted categories come back in
+`benchmark_categories` on every response, so a picker needs no second call:
+
+```javascript
+const { benchmark_categories } = await client.getAudience({
+  user: 'my-profile', platform: 'tiktok',
+});
+
+const { benchmark } = await client.getAudience({
+  user: 'my-profile',
+  platform: 'tiktok',
+  benchmarkCategory: 'SOFTWARE_AND_APPS',
+});
+console.log(benchmark.average_engagement_rate, benchmark.average_video_views);
+```
+
+### Suggestions
+
+`getSuggestions()` answers *what is worth posting about*: the hashtags or the
+searches a platform suggests around a keyword. One endpoint for both, told apart
+by `type`.
+
+```javascript
+const { hashtags } = await client.getSuggestions({
+  user: 'my-profile',
+  platform: 'tiktok',
+  type: 'hashtags',
+  q: 'pilates',
+  countryCode: 'ES',
+  language: 'es',
+});
+console.log(hashtags); // [{ name, view_count }, ...]
+
+const { keywords } = await client.getSuggestions({
+  user: 'my-profile',
+  platform: 'tiktok',
+  type: 'keywords',
+  q: 'pilates',
+});
+```
+
+Per-post numbers stay in `getPostAnalytics()`. On TikTok that response carries
+more than the usual counters: `retention` (the curve, second by second),
+`impression_sources` (For You, search, profile...), `audience_types` (followers
+vs non-followers), `new_followers`, `reach` and the watch times.
+
+Asking a platform a question it cannot answer fails with
+`platform_not_supported` and the list of the ones that can.
+
+## What a TikTok connection can do (`capabilities`)
+
+Not every TikTok connection can do the same things. `listUsers()`
+(`GET /api/uploadposts/users`) returns a `capabilities` array on each profile's
+TikTok account; check it before offering a feature.
+
+| Capability | What it unlocks |
+| --- | --- |
+| `music` | `tiktokMusicId` and the volume/trim fields, plus `getTiktokTrendingMusic()` and `searchTiktokMusic()` |
+| `location` | `tiktokLocationId` / `tiktokLocationName`, plus `getTiktokLocations()` |
+| `cover_image` | `tiktokCoverImageUrl` |
+| `cover_timestamp` | `tiktokCoverTimestamp` |
+| `draft` | `tiktokUploadToDraft` |
+| `video_privacy` | `tiktokPrivacyLevel` on video |
+| `photo_privacy` | `tiktokPrivacyLevel` on photo posts |
+| `profile_analytics` | `getAudience()` and `getSuggestions({ type: 'hashtags' })` with `platform: 'tiktok'` |
+| `comments` | Comments on TikTok: `getPostComments()` (top-level and replies), `createComment()`, `deleteComment()`, `commentAction()` and `tiktokFirstComment` |
+| `trend_search` | `getSuggestions({ type: 'keywords' })` with `platform: 'tiktok'` |
+
+> **`comments` and `trend_search` need the account to be reconnected.** TikTok
+> grants them at connect time, so an account linked before they existed keeps
+> working for everything else but will not list them — reconnect it from Manage
+> Users to enable them.
+
+If a connection lacks a capability the upload field is simply ignored: the post
+still publishes and the response carries a per-field `warnings` entry. The
+methods above answer with an error asking for a reconnection.
+
 ## TikTok music, location, cover and drafts
 
-> **Capabilities.** These options are available on connections that declare the
-> matching capability — `music`, `location`, `cover_image`, `draft` — in the
-> `capabilities` array of the TikTok account returned by `listUsers()`
-> (other values you may see there: `cover_timestamp`, `photo_privacy`,
-> `video_privacy`, `inbox_fallback`, `profile_analytics`)
-> (`GET /api/uploadposts/users`). If your connection does not have it, the field
-> is ignored, the post still publishes, and the response includes a per-field
-> `warnings` entry — reconnect the TikTok account to enable it.
+> Needs the `music`, `location`, `cover_image` or `draft` capability — see
+> [What a TikTok connection can do](#what-a-tiktok-connection-can-do-capabilities).
 
 ```javascript
 // 1. Pick a track and a place
@@ -484,6 +674,8 @@ These options work across all upload methods:
 | `user` | Profile name (required) |
 | `platforms` | Target platforms array (required) |
 | `firstComment` | First comment to post |
+| `tiktokFirstComment` | First comment for TikTok only (needs the `comments` capability) |
+| `replyToId` | Publish as a reply to an existing post (X: tweet ID; Bluesky: post URL or AT-URI). Alias: `xReplyToId` |
 | `altText` | Alt text for accessibility |
 | `scheduledDate` | ISO date for scheduling |
 | `timezone` | Timezone for scheduled date |

package/index.d.ts

@@ -56,6 +56,8 @@ declare module 'upload-post' {
     user: string;
     /** First comment to post after publishing */
     firstComment?: string;
+    /** Reply to an existing post (X: tweet ID; Bluesky: post URL or AT-URI). */
+    replyToId?: string;
     /** Alt text for accessibility */
     altText?: string;
     /** ISO date for scheduling (e.g., "2024-12-25T10:00:00Z") */
@@ -109,6 +111,11 @@ declare module 'upload-post' {
     youtubeFirstComment?: string;
     redditFirstComment?: string;
     blueskyFirstComment?: string;
+    /**
+     * Needs the `comments` capability on the connection: without it the post
+     * still publishes and the response carries a warning instead of the comment.
+     */
+    tiktokFirstComment?: string;
   }
 
   // ==================== TikTok Options ====================
@@ -367,6 +374,8 @@ declare module 'upload-post' {
     xDirectMessageDeepLink?: string;
     /** Post long text as single post */
     xLongTextAsPost?: boolean;
+    /** ID of the tweet to reply to (alias of the generic replyToId). */
+    xReplyToId?: string;
   }
 
   export interface XMediaOptions extends XBaseOptions {
@@ -711,6 +720,82 @@ declare module 'upload-post' {
     [key: string]: any;
   }
 
+  // ==================== Audience, Suggestions and Comment Actions ====================
+
+  /** One row of an audience breakdown: a bucket and its share. */
+  export interface AudienceSlice {
+    name?: string;
+    value?: number;
+    percentage?: number;
+    [key: string]: any;
+  }
+
+  /** Category averages returned when `benchmarkCategory` is asked for. */
+  export interface AudienceBenchmark {
+    category?: string;
+    average_comments?: number;
+    average_engagement_rate?: number;
+    average_follower_count?: number;
+    average_follower_growth?: number;
+    average_likes?: number;
+    average_shares?: number;
+    average_video_count?: number;
+    average_video_views?: number;
+    [key: string]: any;
+  }
+
+  export interface AudienceResponse {
+    success: boolean;
+    platform?: string;
+    /** The window actually used after the 60-day / not-today clamps. */
+    range?: { start_date?: string; end_date?: string };
+    audience?: {
+      countries?: AudienceSlice[];
+      cities?: AudienceSlice[];
+      ages?: AudienceSlice[];
+      genders?: AudienceSlice[];
+    };
+    /** Followers online per hour of the day, e.g. `{ hour: '14', followers_online: 1494 }`. */
+    activity_by_hour?: Array<{ hour?: string; followers_online?: number; [key: string]: any }>;
+    /** Follower count per day inside the window. */
+    followers_daily?: Array<{ date?: string; total?: number; new?: number; lost?: number; [key: string]: any }>;
+    /** Taps on the profile: bio link, address, app download, email, phone, leads. */
+    profile_actions?: Record<string, number>;
+    bio_description?: string | null;
+    /** Every category `benchmarkCategory` accepts, so a picker needs no extra call. */
+    benchmark_categories?: string[];
+    /** Only when a `benchmarkCategory` was asked for. */
+    benchmark?: AudienceBenchmark;
+    [key: string]: any;
+  }
+
+  /** Which kind of suggestion `getSuggestions` asks for. */
+  export type SuggestionType = 'hashtags' | 'keywords';
+
+  export interface SuggestionsResponse {
+    success: boolean;
+    platform?: string;
+    type?: SuggestionType;
+    query?: string | null;
+    /** With `type: 'hashtags'`. */
+    hashtags?: Array<{ name?: string; view_count?: number; [key: string]: any }>;
+    /** With `type: 'keywords'`. */
+    keywords?: Array<Record<string, any>>;
+    [key: string]: any;
+  }
+
+  /** What `commentAction` does to a comment. Each action carries its own inverse. */
+  export type CommentActionValue = 'hide' | 'unhide' | 'like' | 'unlike' | 'pin' | 'unpin';
+
+  export interface CommentActionResponse {
+    success: boolean;
+    platform?: string;
+    action?: CommentActionValue;
+    comment_id?: string;
+    result?: Record<string, any>;
+    [key: string]: any;
+  }
+
   // ==================== Client Class ====================
 
   /**
@@ -806,7 +891,15 @@ declare module 'upload-post' {
     }>;
 
     /**
-     * Get analytics for a specific post across all platforms
+     * Get analytics for a specific post across all platforms.
+     *
+     * `post_metrics` carries whatever the platform reports, so it is not the
+     * same shape everywhere: TikTok adds `retention` (the curve, second by
+     * second), `impression_sources` (For You, search, profile...),
+     * `audience_types` (followers vs non-followers), `new_followers`, `reach`
+     * and the watch times (`average_time_watched`, `total_time_watched`,
+     * `full_video_watched_rate`) on top of the usual counters.
+     *
      * @param requestId - The request_id from the upload
      */
     getPostAnalytics(requestId: string): Promise<{
@@ -816,7 +909,8 @@ declare module 'upload-post' {
         success: boolean;
         platform_post_id?: string;
         post_url?: string;
-        post_metrics?: Record<string, number>;
+        /** Counters plus, on TikTok, retention / impression_sources / audience_types and watch times. */
+        post_metrics?: Record<string, any>;
         post_metrics_source?: string;
         post_metrics_error?: string;
         profile_snapshot_at_post_date?: Record<string, number>;
@@ -868,6 +962,47 @@ declare module 'upload-post' {
       has_more: boolean;
     }>;
 
+    /**
+     * Get who the audience is: where they are, how old they are, when they are
+     * online and what they tap on the profile.
+     *
+     * One endpoint for every platform, chosen with `platform`; a platform that
+     * cannot answer it returns `platform_not_supported` with the list of the
+     * ones that can. The window is clamped server-side to at most 60 days
+     * ending before today.
+     *
+     * @param options - Query options
+     */
+    getAudience(options: {
+      user: string;
+      platform: 'tiktok';
+      /** Window start, ISO `YYYY-MM-DD`. */
+      startDate?: string;
+      /** Window end, ISO `YYYY-MM-DD`. Always clamped to before today. */
+      endDate?: string;
+      /** Compare the account against this category's averages. */
+      benchmarkCategory?: string;
+    }): Promise<AudienceResponse>;
+
+    /**
+     * Get what to write about: the hashtags or the searches a platform
+     * suggests around a keyword.
+     *
+     * One endpoint for both questions, told apart by `type`, and one endpoint
+     * for every platform, chosen with `platform`.
+     *
+     * @param options - Query options
+     */
+    getSuggestions(options: {
+      user: string;
+      platform: 'tiktok';
+      type: SuggestionType;
+      /** Keyword to get suggestions around. */
+      q?: string;
+      countryCode?: string;
+      language?: string;
+    }): Promise<SuggestionsResponse>;
+
     /**
      * Get available metrics configuration for all supported platforms
      */
@@ -1019,17 +1154,23 @@ declare module 'upload-post' {
      */
     testNotifications(): Promise<{ success: boolean; [key: string]: any }>;
 
-    // Instagram Comments
+    // Comments
 
     /**
-     * Get comments on a post
+     * Get comments on a post, or the replies hanging from one of them.
+     *
+     * Pass `commentId` to read that comment's replies instead of the post's
+     * top-level comments.
+     *
      * @param options - Query options
      */
     getPostComments(options: {
       user: string;
-      platform?: 'instagram' | 'facebook' | 'youtube' | 'linkedin';
+      platform?: 'instagram' | 'facebook' | 'youtube' | 'linkedin' | 'tiktok';
       postId?: string;
       postUrl?: string;
+      /** Read the replies to this comment instead of the post's top-level comments. */
+      commentId?: string;
       limit?: number;
       after?: string;
     }): Promise<{
@@ -1086,7 +1227,7 @@ declare module 'upload-post' {
      */
     createComment(options: {
       user: string;
-      platform: 'instagram' | 'facebook' | 'youtube' | 'linkedin';
+      platform: 'instagram' | 'facebook' | 'youtube' | 'linkedin' | 'tiktok';
       message: string;
       postId?: string;
       postUrl?: string;
@@ -1104,7 +1245,7 @@ declare module 'upload-post' {
      */
     deleteComment(options: {
       user: string;
-      platform: 'instagram' | 'facebook' | 'youtube' | 'linkedin';
+      platform: 'instagram' | 'facebook' | 'youtube' | 'linkedin' | 'tiktok';
       commentId: string;
       /** Post identifier (the post URN for LinkedIn) */
       postId?: string;
@@ -1114,6 +1255,24 @@ declare module 'upload-post' {
       error?: string;
     }>;
 
+    /**
+     * Moderate a comment: hide, like or pin it — and undo any of the three.
+     *
+     * One method for every platform, chosen with `platform`. `postId` is
+     * required for hide/unhide and pin/unpin; like/unlike take the comment
+     * alone and never send it.
+     *
+     * @param options - Action options
+     */
+    commentAction(options: {
+      user: string;
+      platform: 'tiktok';
+      commentId: string;
+      action: CommentActionValue;
+      /** Required for hide/unhide and pin/unpin; never sent for like/unlike. */
+      postId?: string;
+    }): Promise<CommentActionResponse>;
+
     // Post Management
     /**
      * Retry a failed post. Provide requestId or jobId.

package/index.js

@@ -82,6 +82,10 @@ export class UploadPost {
 
     // Optional common parameters
     if (options.firstComment) form.append('first_comment', options.firstComment);
+    // Reply to an existing post (X: tweet ID; Bluesky: post URL or AT-URI). The
+    // API has always accepted `reply_to_id`; the SDK simply never mapped it.
+    const replyToId = options.replyToId || options.xReplyToId || options.blueskyReplyToId;
+    if (replyToId) form.append('reply_to_id', replyToId);
     if (options.altText) form.append('alt_text', options.altText);
     if (options.scheduledDate) form.append('scheduled_date', options.scheduledDate);
     if (options.timezone) form.append('timezone', options.timezone);
@@ -128,6 +132,10 @@ export class UploadPost {
     if (options.redditFirstComment) form.append('reddit_first_comment', options.redditFirstComment);
     if (options.blueskyFirstComment) form.append('bluesky_first_comment', options.blueskyFirstComment);
     if (options.linkedinFirstComment) form.append('linkedin_first_comment', options.linkedinFirstComment);
+    // TikTok takes a first comment like everyone else. It needs the `comments`
+    // capability on the connection: without it the post still publishes and the
+    // response carries a warning instead of the comment.
+    if (options.tiktokFirstComment) form.append('tiktok_first_comment', options.tiktokFirstComment);
 
     if (options.firstCommentMedia) {
       const mediaItems = Array.isArray(options.firstCommentMedia) ? options.firstCommentMedia : [options.firstCommentMedia];
@@ -855,6 +863,13 @@ export class UploadPost {
   /**
    * Get analytics for a specific post across all platforms it was published to
    *
+   * `post_metrics` carries whatever the platform reports, so it is not the same
+   * shape everywhere: on TikTok it also brings `retention` (the curve, second
+   * by second), `impression_sources` (For You, search, profile...),
+   * `audience_types` (followers vs non-followers), `new_followers`, `reach` and
+   * the watch times (`average_time_watched`, `total_time_watched`,
+   * `full_video_watched_rate`).
+   *
    * @param {string} requestId - The request_id from the upload
    * @returns {Promise<Object>} Post analytics with per-platform metrics
    */
@@ -905,6 +920,73 @@ export class UploadPost {
     return this._request('/uploadposts/post-analytics/cached', 'GET', params);
   }
 
+  /**
+   * Get who the audience is: where they are, how old they are, when they are
+   * online and what they tap on the profile.
+   *
+   * Where the post-analytics methods answer *how did my posts do*, this one
+   * answers *who is following me*. It is one endpoint for every platform,
+   * chosen with `platform` — a platform that cannot answer it comes back with
+   * `platform_not_supported` and the list of the ones that can.
+   *
+   * The window is clamped server-side: at most 60 days, and `endDate` always
+   * before today. A wider window is trimmed rather than rejected.
+   *
+   * Pass `benchmarkCategory` to also get the averages of that category next to
+   * the account's own numbers; the accepted values come back in
+   * `benchmark_categories` on every response, so a picker needs no extra call.
+   *
+   * @param {Object} options - Query options
+   * @param {string} options.user - Profile username
+   * @param {string} options.platform - Platform to ask (tiktok)
+   * @param {string} [options.startDate] - Window start, ISO `YYYY-MM-DD`
+   * @param {string} [options.endDate] - Window end, ISO `YYYY-MM-DD`
+   * @param {string} [options.benchmarkCategory] - Category to compare the account
+   *   against, e.g. `SOFTWARE_AND_APPS`
+   * @returns {Promise<Object>} `range`, `audience` (countries, cities, ages, genders),
+   *   `activity_by_hour`, `followers_daily`, `profile_actions`, `bio_description`,
+   *   `benchmark_categories` and, with a category, `benchmark`
+   */
+  async getAudience(options = {}) {
+    const params = { user: options.user, platform: options.platform };
+    if (options.startDate) params.start_date = options.startDate;
+    if (options.endDate) params.end_date = options.endDate;
+    if (options.benchmarkCategory) params.benchmark_category = options.benchmarkCategory;
+    return this._request('/uploadposts/audience', 'GET', params);
+  }
+
+  /**
+   * Get what to write about: the hashtags or the searches a platform suggests
+   * around a keyword.
+   *
+   * One endpoint for both questions, told apart by `type`:
+   *
+   *   type        answers
+   *   hashtags    `{ hashtags: [{ name, view_count }] }`
+   *   keywords    `{ keywords: [...] }`
+   *
+   * Chosen with `platform`, like every other question in the API — a platform
+   * that cannot answer it comes back with `platform_not_supported` and the list
+   * of the ones that can.
+   *
+   * @param {Object} options - Query options
+   * @param {string} options.user - Profile username
+   * @param {string} options.platform - Platform to ask (tiktok)
+   * @param {('hashtags'|'keywords')} options.type - Which suggestions you want
+   * @param {string} [options.q] - Keyword to get suggestions around
+   * @param {string} [options.countryCode] - ISO country code to bias the suggestions
+   * @param {string} [options.language] - Language code to bias the suggestions
+   * @returns {Promise<Object>} `{ success, platform, type, hashtags }` or
+   *   `{ success, platform, type, keywords }`
+   */
+  async getSuggestions(options = {}) {
+    const params = { user: options.user, platform: options.platform, type: options.type };
+    if (options.q) params.q = options.q;
+    if (options.countryCode) params.country_code = options.countryCode;
+    if (options.language) params.language = options.language;
+    return this._request('/uploadposts/suggestions', 'GET', params);
+  }
+
   /**
    * Get available metrics configuration for all supported platforms
    *
@@ -1114,16 +1196,28 @@ export class UploadPost {
     return this._request('/uploadposts/users/notifications/test', 'POST', {});
   }
 
-  // ==================== Instagram Comments ====================
+  // ==================== Comments ====================
 
   /**
-   * Get comments on a post
+   * Get comments on a post, or the replies hanging from one of them
+   *
+   * Pass `commentId` to read the replies to that comment instead of the
+   * post's top-level comments. It is the same question — *what was said
+   * here* — so it is the same endpoint with one more parameter, not a
+   * separate method per platform.
+   *
+   * On TikTok this needs the `comments` capability on the connection (see
+   * `capabilities` on the TikTok account returned by listUsers()). TikTok grants
+   * it at connect time, so an account connected earlier has to be reconnected.
    *
    * @param {Object} options - Query options
    * @param {string} options.user - Profile username
-   * @param {string} [options.platform='instagram'] - Platform (instagram, facebook, youtube, linkedin)
-   * @param {string} [options.postId] - Native post/media ID (provide postId or postUrl)
+   * @param {string} [options.platform='instagram'] - Platform (instagram, facebook, youtube, linkedin, tiktok)
+   * @param {string} [options.postId] - Native post/media ID (provide postId or postUrl).
+   *   Required on TikTok, which has no post URL lookup.
    * @param {string} [options.postUrl] - Full post URL (provide postId or postUrl)
+   * @param {string} [options.commentId] - Read the replies to this comment instead
+   *   of the post's top-level comments
    * @param {number} [options.limit] - Max number of comments to return
    * @param {string} [options.after] - Pagination cursor for the next page
    * @returns {Promise<Object>} Comments data
@@ -1136,6 +1230,7 @@ export class UploadPost {
     const params = { platform: options.platform || 'instagram', user: options.user };
     if (options.postId) params.post_id = options.postId;
     if (options.postUrl) params.post_url = options.postUrl;
+    if (options.commentId) params.comment_id = options.commentId;
     if (options.limit !== undefined) params.limit = options.limit;
     if (options.after) params.after = options.after;
     return this._request('/uploadposts/comments', 'GET', params);
@@ -1187,9 +1282,13 @@ export class UploadPost {
    * One of postId, postUrl, or commentId is required. Pass commentId to reply
    * to an existing comment; pass postId/postUrl to comment on the post itself.
    *
+   * On TikTok this needs the `comments` capability on the connection (see
+   * `capabilities` on the TikTok account returned by listUsers()). TikTok grants
+   * it at connect time, so an account connected earlier has to be reconnected.
+   *
    * @param {Object} options - Comment options
    * @param {string} options.user - Profile username
-   * @param {string} options.platform - Platform (instagram, facebook, youtube, linkedin)
+   * @param {string} options.platform - Platform (instagram, facebook, youtube, linkedin, tiktok)
    * @param {string} options.message - Comment text
    * @param {string} [options.postId] - Native post/media ID to comment on
    * @param {string} [options.postUrl] - Full post URL to comment on
@@ -1211,9 +1310,13 @@ export class UploadPost {
   /**
    * Delete a comment on a post
    *
+   * On TikTok this needs the `comments` capability on the connection (see
+   * `capabilities` on the TikTok account returned by listUsers()). TikTok grants
+   * it at connect time, so an account connected earlier has to be reconnected.
+   *
    * @param {Object} options - Delete options
    * @param {string} options.user - Profile username
-   * @param {string} options.platform - Platform (instagram, facebook, youtube, linkedin)
+   * @param {string} options.platform - Platform (instagram, facebook, youtube, linkedin, tiktok)
    * @param {string} options.commentId - Comment ID to delete
    * @param {string} [options.postId] - Post identifier (the post URN for LinkedIn)
    * @returns {Promise<Object>} Deletion result
@@ -1228,6 +1331,43 @@ export class UploadPost {
     return this._request('/uploadposts/comments/delete', 'DELETE', body);
   }
 
+  /**
+   * Moderate a comment: hide, like or pin it — and undo any of the three
+   *
+   * One method for every platform, because it is one question: *do this to
+   * that comment*. Each action carries its own inverse:
+   *
+   *   action              post_id
+   *   hide / unhide       required
+   *   like / unlike       not sent (the platform likes the comment on its own)
+   *   pin / unpin         required
+   *
+   * On TikTok this needs the `comments` capability on the connection (see
+   * `capabilities` on the TikTok account returned by listUsers()). TikTok grants
+   * it at connect time, so an account connected earlier has to be reconnected.
+   *
+   * @param {Object} options - Action options
+   * @param {string} options.user - Profile username
+   * @param {string} options.platform - Platform (tiktok)
+   * @param {string} options.commentId - Comment to act on
+   * @param {('hide'|'unhide'|'like'|'unlike'|'pin'|'unpin')} options.action - What to do
+   * @param {string} [options.postId] - Native post ID. Required for hide/unhide and
+   *   pin/unpin; never sent for like/unlike.
+   * @returns {Promise<Object>} `{ success, platform, action, comment_id, result }`
+   */
+  async commentAction(options) {
+    const body = {
+      platform: options.platform,
+      user: options.user,
+      comment_id: options.commentId,
+      action: options.action
+    };
+    // Liking takes the comment alone; hiding and pinning need the post too.
+    const likes = options.action === 'like' || options.action === 'unlike';
+    if (!likes && options.postId) body.post_id = options.postId;
+    return this._request('/uploadposts/comments/action', 'POST', body);
+  }
+
   // ==================== Post Management ====================
 
   /**

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "upload-post",
-  "version": "2.10.0",
+  "version": "2.13.0",
   "description": "Official client library for Upload-Post API - Cross-platform social media upload for TikTok, Instagram, YouTube, LinkedIn, Facebook, Pinterest, Threads, Reddit, Bluesky, and X (Twitter)",
   "main": "index.js",
   "types": "index.d.ts",
   "type": "module",
   "scripts": {
-    "test": "echo \"Error: no test specified\" && exit 1"
+    "test": "node --test test/"
   },
   "license": "MIT",
   "keywords": [