@cstar.help/js 0.17.5 → 0.18.0

package/dist/chat/index.d.cts

@@ -28,6 +28,11 @@ type ChatAuthMode = 'hmac' | 'session';
 interface LoginWithSessionParams {
     /** Supabase access token (JWT). Used as Bearer for every subsequent call. */
     accessToken: string;
+    /**
+     * Optional: the matching refresh token. When supplied, the client renews
+     * an expired access token through `/api/widget/auth/refresh` on a 401.
+     */
+    refreshToken?: string;
     /** Optional: the team UUID. If omitted, derived server-side from the token. */
     teamId?: string;
     /** Optional: a hint for the customer name (UI only — server stays authoritative). */
@@ -132,6 +137,8 @@ interface TicketListResponse {
 /** A message on a ticket. */
 interface Message {
     id: string;
+    /** Opaque send identity, used to reconcile a reply after an uncertain response. */
+    client_request_key?: string | null;
     content: string;
     sender: 'customer' | 'agent';
     sender_name: string;
@@ -144,6 +151,12 @@ interface Message {
     /** Whether this message was sent by an AI agent. */
     is_bot?: boolean;
 }
+/** Options for one logical customer reply, including any retries. */
+interface MessageSendOptions {
+    /** Retain for a manual retry of the same ticket, content and attachments. Use a new key for each intentional send. Receipts last 24 hours. */
+    idempotencyKey?: string;
+    signal?: AbortSignal;
+}
 /** A confirmed customer's message attachment. Never a Storage path or URL. */
 interface CustomerAttachmentReference {
     readonly ticketId: string;
@@ -170,6 +183,7 @@ interface TicketListParams {
 }
 /** Parameters for creating a new ticket. */
 interface TicketCreateParams {
+    /** Conversation subject. Subjects over 255 characters are shortened with an ellipsis, never rejected. */
     subject: string;
     message?: string;
 }
@@ -231,6 +245,8 @@ declare class ChatClientError extends Error {
     readonly code: string;
     readonly statusCode: number;
     readonly requestId: string | null;
+    /** Customer message send key retained for a manual retry after an uncertain outcome. */
+    idempotencyKey?: string;
     constructor(arg: ChatErrorOpts | string);
 }
 /** 401 / 403 — auth failed (bad/expired token, wrong team, etc.). */
@@ -316,6 +332,8 @@ declare class ChatClient {
     private readonly pollingInterval;
     private readonly realtimeEnabled;
     private sessionToken;
+    private refreshToken;
+    private refreshPromise;
     private teamId;
     private customerId;
     private authMode;
@@ -429,7 +447,14 @@ declare class ChatClient {
         signal?: AbortSignal;
         cache?: RequestCache;
         readBody?: (response: Response) => Promise<T>;
-    }): Promise<T>;
+        idempotencyKey?: string;
+    }, retriedAfterRefresh?: boolean): Promise<T>;
+    /**
+     * Renew the access token with the stored refresh token. Concurrent 401s
+     * share one refresh. Resolves true when a newer token is in place.
+     */
+    private refreshSession;
+    private requestRefresh;
     /**
      * Look up the team UUID from the configured `teamSlug`. Used by
      * `loginWithCredentials`. HMAC integrators (`identify()`) never hit
@@ -501,8 +526,11 @@ declare class MessagesApi {
     constructor(chat: ChatClient);
     /** List messages for a ticket. */
     list(ticketId: string): Promise<Message[]>;
-    /** Send a message to a ticket. */
-    send(ticketId: string, content: string): Promise<Message>;
+    /**
+     * Send one logical reply. Network and server failures retry twice with the
+     * same key. A separate send call is a new intent unless a retained key is supplied.
+     */
+    send(ticketId: string, content: string, options?: MessageSendOptions): Promise<Message>;
 }
 
-export { type AttachmentDownloadOptions, type ChatAuthMode, ChatClient, ChatClientAuthError, ChatClientError, ChatClientNetworkError, ChatClientRateLimitError, ChatClientServerError, type ChatConfig, type ChatStateListener, type CustomerAttachmentReference, type DownloadedAttachment, type IdentifyParams, type IdentifyResult, type LoginWithCredentialsParams, type LoginWithCredentialsResult, type LoginWithSessionParams, type Message, type MessageCallback, type RealtimeTokenResponse, type Ticket, type TicketCreateParams, type TicketListParams, type TicketListResponse, type TypingCallback, type TypingPayload };
+export { type AttachmentDownloadOptions, type ChatAuthMode, ChatClient, ChatClientAuthError, ChatClientError, ChatClientNetworkError, ChatClientRateLimitError, ChatClientServerError, type ChatConfig, type ChatStateListener, type CustomerAttachmentReference, type DownloadedAttachment, type IdentifyParams, type IdentifyResult, type LoginWithCredentialsParams, type LoginWithCredentialsResult, type LoginWithSessionParams, type Message, type MessageCallback, type MessageSendOptions, type RealtimeTokenResponse, type Ticket, type TicketCreateParams, type TicketListParams, type TicketListResponse, type TypingCallback, type TypingPayload };

package/dist/chat/index.d.ts

@@ -28,6 +28,11 @@ type ChatAuthMode = 'hmac' | 'session';
 interface LoginWithSessionParams {
     /** Supabase access token (JWT). Used as Bearer for every subsequent call. */
     accessToken: string;
+    /**
+     * Optional: the matching refresh token. When supplied, the client renews
+     * an expired access token through `/api/widget/auth/refresh` on a 401.
+     */
+    refreshToken?: string;
     /** Optional: the team UUID. If omitted, derived server-side from the token. */
     teamId?: string;
     /** Optional: a hint for the customer name (UI only — server stays authoritative). */
@@ -132,6 +137,8 @@ interface TicketListResponse {
 /** A message on a ticket. */
 interface Message {
     id: string;
+    /** Opaque send identity, used to reconcile a reply after an uncertain response. */
+    client_request_key?: string | null;
     content: string;
     sender: 'customer' | 'agent';
     sender_name: string;
@@ -144,6 +151,12 @@ interface Message {
     /** Whether this message was sent by an AI agent. */
     is_bot?: boolean;
 }
+/** Options for one logical customer reply, including any retries. */
+interface MessageSendOptions {
+    /** Retain for a manual retry of the same ticket, content and attachments. Use a new key for each intentional send. Receipts last 24 hours. */
+    idempotencyKey?: string;
+    signal?: AbortSignal;
+}
 /** A confirmed customer's message attachment. Never a Storage path or URL. */
 interface CustomerAttachmentReference {
     readonly ticketId: string;
@@ -170,6 +183,7 @@ interface TicketListParams {
 }
 /** Parameters for creating a new ticket. */
 interface TicketCreateParams {
+    /** Conversation subject. Subjects over 255 characters are shortened with an ellipsis, never rejected. */
     subject: string;
     message?: string;
 }
@@ -231,6 +245,8 @@ declare class ChatClientError extends Error {
     readonly code: string;
     readonly statusCode: number;
     readonly requestId: string | null;
+    /** Customer message send key retained for a manual retry after an uncertain outcome. */
+    idempotencyKey?: string;
     constructor(arg: ChatErrorOpts | string);
 }
 /** 401 / 403 — auth failed (bad/expired token, wrong team, etc.). */
@@ -316,6 +332,8 @@ declare class ChatClient {
     private readonly pollingInterval;
     private readonly realtimeEnabled;
     private sessionToken;
+    private refreshToken;
+    private refreshPromise;
     private teamId;
     private customerId;
     private authMode;
@@ -429,7 +447,14 @@ declare class ChatClient {
         signal?: AbortSignal;
         cache?: RequestCache;
         readBody?: (response: Response) => Promise<T>;
-    }): Promise<T>;
+        idempotencyKey?: string;
+    }, retriedAfterRefresh?: boolean): Promise<T>;
+    /**
+     * Renew the access token with the stored refresh token. Concurrent 401s
+     * share one refresh. Resolves true when a newer token is in place.
+     */
+    private refreshSession;
+    private requestRefresh;
     /**
      * Look up the team UUID from the configured `teamSlug`. Used by
      * `loginWithCredentials`. HMAC integrators (`identify()`) never hit
@@ -501,8 +526,11 @@ declare class MessagesApi {
     constructor(chat: ChatClient);
     /** List messages for a ticket. */
     list(ticketId: string): Promise<Message[]>;
-    /** Send a message to a ticket. */
-    send(ticketId: string, content: string): Promise<Message>;
+    /**
+     * Send one logical reply. Network and server failures retry twice with the
+     * same key. A separate send call is a new intent unless a retained key is supplied.
+     */
+    send(ticketId: string, content: string, options?: MessageSendOptions): Promise<Message>;
 }
 
-export { type AttachmentDownloadOptions, type ChatAuthMode, ChatClient, ChatClientAuthError, ChatClientError, ChatClientNetworkError, ChatClientRateLimitError, ChatClientServerError, type ChatConfig, type ChatStateListener, type CustomerAttachmentReference, type DownloadedAttachment, type IdentifyParams, type IdentifyResult, type LoginWithCredentialsParams, type LoginWithCredentialsResult, type LoginWithSessionParams, type Message, type MessageCallback, type RealtimeTokenResponse, type Ticket, type TicketCreateParams, type TicketListParams, type TicketListResponse, type TypingCallback, type TypingPayload };
+export { type AttachmentDownloadOptions, type ChatAuthMode, ChatClient, ChatClientAuthError, ChatClientError, ChatClientNetworkError, ChatClientRateLimitError, ChatClientServerError, type ChatConfig, type ChatStateListener, type CustomerAttachmentReference, type DownloadedAttachment, type IdentifyParams, type IdentifyResult, type LoginWithCredentialsParams, type LoginWithCredentialsResult, type LoginWithSessionParams, type Message, type MessageCallback, type MessageSendOptions, type RealtimeTokenResponse, type Ticket, type TicketCreateParams, type TicketListParams, type TicketListResponse, type TypingCallback, type TypingPayload };

package/dist/chat/index.js

@@ -434,6 +434,8 @@ var DEFAULT_POLLING_INTERVAL = 3e3;
 var ChatClient = class {
   constructor(config) {
     this.sessionToken = null;
+    this.refreshToken = null;
+    this.refreshPromise = null;
     this.teamId = null;
     this.customerId = null;
     this.authMode = null;
@@ -526,6 +528,7 @@ var ChatClient = class {
     this.applySession(
       {
         accessToken: response.accessToken,
+        refreshToken: response.refreshToken ?? void 0,
         teamId,
         customerName: response.customer.name ?? response.customer.email
       },
@@ -556,6 +559,7 @@ var ChatClient = class {
   applySession(params, generation) {
     this.assertSession(generation);
     this.sessionToken = params.accessToken;
+    this.refreshToken = params.refreshToken ?? null;
     if (params.teamId) {
       this.teamId = params.teamId;
     }
@@ -665,6 +669,8 @@ var ChatClient = class {
     this.pollingSubscriptions.clear();
     this.realtimeMessageSubscriptions.clear();
     this.sessionToken = null;
+    this.refreshToken = null;
+    this.refreshPromise = null;
     this.teamId = null;
     this.customerId = null;
     this.authMode = null;
@@ -696,7 +702,7 @@ var ChatClient = class {
    * the first authenticated round-trip, `getAuthMode()` returns the
    * server-confirmed mode.
    */
-  async fetch(path, options) {
+  async fetch(path, options, retriedAfterRefresh = false) {
     const generation = this.sessionGeneration;
     const assertRequest = () => {
       this.assertSession(generation);
@@ -707,8 +713,10 @@ var ChatClient = class {
     const headers = {
       "Content-Type": "application/json"
     };
-    if (this.sessionToken) {
-      headers["Authorization"] = `Bearer ${this.sessionToken}`;
+    if (options.idempotencyKey) headers["Idempotency-Key"] = options.idempotencyKey;
+    const sentToken = this.sessionToken;
+    if (sentToken) {
+      headers["Authorization"] = `Bearer ${sentToken}`;
     }
     let response;
     try {
@@ -736,11 +744,17 @@ var ChatClient = class {
     }
     assertRequest();
     const requestId = responseHeaders?.get("X-Request-Id") ?? null;
+    if (response.status === 401 && sentToken && this.refreshToken && !retriedAfterRefresh) {
+      const refreshed = await this.refreshSession(sentToken);
+      assertRequest();
+      if (refreshed) return this.fetch(path, options, true);
+    }
     if (!response.ok) {
-      const errorBody = await response.json().catch(() => ({ error: { code: "UNKNOWN", message: "Request failed" } }));
+      const errorBody = await response.json().catch(() => null);
       assertRequest();
-      const code = errorBody.error?.code ?? "UNKNOWN";
-      const message = errorBody.error?.message ?? `Widget API error: ${response.status}`;
+      const structured = errorBody?.error && typeof errorBody.error === "object" ? errorBody.error : null;
+      const code = structured?.code ?? "UNKNOWN";
+      const message = structured?.message ?? (typeof errorBody?.error === "string" ? errorBody.error : null) ?? (typeof errorBody?.message === "string" ? errorBody.message : null) ?? `Widget API error: ${response.status}`;
       if (response.status === 401 || response.status === 403) {
         throw new ChatClientAuthError({
           message,
@@ -781,9 +795,52 @@ var ChatClient = class {
       return body;
     } catch (error) {
       assertRequest();
+      if (options.idempotencyKey)
+        throw new ChatClientNetworkError({
+          message: "Could not read the message acknowledgment",
+          originalError: error
+        });
       throw error;
     }
   }
+  /**
+   * Renew the access token with the stored refresh token. Concurrent 401s
+   * share one refresh. Resolves true when a newer token is in place.
+   */
+  refreshSession(rejectedToken) {
+    if (this.sessionToken && this.sessionToken !== rejectedToken) return Promise.resolve(true);
+    if (!this.refreshPromise) {
+      const pending = this.requestRefresh().finally(() => {
+        if (this.refreshPromise === pending) this.refreshPromise = null;
+      });
+      this.refreshPromise = pending;
+    }
+    return this.refreshPromise;
+  }
+  async requestRefresh() {
+    const generation = this.sessionGeneration;
+    const refreshToken = this.refreshToken;
+    if (!refreshToken) return false;
+    try {
+      const response = await globalThis.fetch(`${this.baseUrl}/api/widget/auth/refresh`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ refreshToken })
+      });
+      if (generation !== this.sessionGeneration) return false;
+      if (!response.ok) {
+        if (response.status === 401) this.refreshToken = null;
+        return false;
+      }
+      const body = await response.json();
+      if (generation !== this.sessionGeneration || !body.accessToken) return false;
+      this.sessionToken = body.accessToken;
+      this.refreshToken = body.refreshToken ?? refreshToken;
+      return true;
+    } catch {
+      return false;
+    }
+  }
   /**
    * Look up the team UUID from the configured `teamSlug`. Used by
    * `loginWithCredentials`. HMAC integrators (`identify()`) never hit
@@ -1256,26 +1313,80 @@ var MessagesApi = class {
     assertCurrent();
     return response.data.messages;
   }
-  /** Send a message to a ticket. */
-  async send(ticketId, content) {
+  /**
+   * Send one logical reply. Network and server failures retry twice with the
+   * same key. A separate send call is a new intent unless a retained key is supplied.
+   */
+  async send(ticketId, content, options = {}) {
     const assertCurrent = this.chat.captureSession();
+    options.signal?.throwIfAborted();
+    const key = options.idempotencyKey ?? createMessageRequestKey();
+    if (!key || key.length > 250 || key.trim() !== key || /[^\x20-\x7e]/.test(key))
+      throw new ChatClientError({
+        code: "INVALID_IDEMPOTENCY_KEY",
+        message: "Idempotency-Key must contain 1 to 250 printable characters, without surrounding whitespace."
+      });
     const teamId = await this.chat.ensureTeamId();
     assertCurrent();
-    const response = await this.chat.fetch(
-      "/api/widget/messages",
-      {
-        method: "POST",
-        body: {
-          teamId,
-          ticketId,
-          content
-        }
+    for (let attempt = 0; ; attempt++) {
+      assertCurrent();
+      options.signal?.throwIfAborted();
+      try {
+        const response = await this.chat.fetch(
+          "/api/widget/messages",
+          {
+            method: "POST",
+            body: { teamId, ticketId, content },
+            idempotencyKey: key,
+            signal: options.signal
+          }
+        );
+        assertCurrent();
+        if (typeof response?.data?.message?.id !== "string" || !response.data.message.id)
+          throw new ChatClientNetworkError({
+            message: "Message acknowledgment was incomplete",
+            originalError: new Error(
+              "The reply may already be saved. Retry with the same send identity."
+            )
+          });
+        return response.data.message;
+      } catch (error) {
+        assertCurrent();
+        options.signal?.throwIfAborted();
+        if (error instanceof ChatClientError) error.idempotencyKey = key;
+        if (attempt >= 2 || !(error instanceof ChatClientNetworkError || error instanceof ChatClientServerError))
+          throw error;
+        await waitForMessageRetry(250 * 2 ** attempt, options.signal);
       }
-    );
-    assertCurrent();
-    return response.data.message;
+    }
   }
 };
+function createMessageRequestKey() {
+  if (typeof globalThis.crypto?.randomUUID === "function") return globalThis.crypto.randomUUID();
+  if (typeof globalThis.crypto?.getRandomValues !== "function")
+    throw new ChatClientError({
+      code: "RANDOM_UNAVAILABLE",
+      message: "Secure random values are required to send a message safely."
+    });
+  const bytes = globalThis.crypto.getRandomValues(new Uint8Array(16));
+  return Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0")).join("");
+}
+function waitForMessageRetry(delay, signal) {
+  signal?.throwIfAborted();
+  return new Promise((resolve, reject) => {
+    const finish = () => {
+      signal?.removeEventListener("abort", abort);
+      resolve();
+    };
+    const timer = setTimeout(finish, delay);
+    const abort = () => {
+      clearTimeout(timer);
+      signal?.removeEventListener("abort", abort);
+      reject(signal?.reason);
+    };
+    signal?.addEventListener("abort", abort, { once: true });
+  });
+}
 function decodeJwtSub(jwt) {
   try {
     const parts = jwt.split(".");

package/dist/index.cjs

@@ -278,7 +278,7 @@ function parseError(statusCode, body, retryAfter) {
 }
 
 // src/client.ts
-var SDK_VERSION = "0.17.5";
+var SDK_VERSION = "0.18.0";
 var DEFAULT_BASE_URL = "https://www.cstar.help";
 var DEFAULT_API_VERSION = "2026-03-01";
 var DEFAULT_MAX_RETRIES = 3;
@@ -298,7 +298,7 @@ var HttpClient = class {
     this.lastMeta = { requestId: null, timestamp: null, pagination: null };
     if (!config || typeof config.apiKey !== "string" || config.apiKey.length === 0) {
       throw new Error(
-        "[cStar] CStarClient: apiKey is required. Pass a secret key (sk_live_... / sk_test_...) or a publishable key (pk_live_... / pk_test_...). See https://cstar.help/developers/quickstart"
+        "[cStar] CStarClient: apiKey is required. Pass a secret key (sk_live_... / sk_test_...). Publishable keys (pk_...) cannot read team endpoints; use them with LibraryClient or CommunityClient. See https://cstar.help/developers/quickstart"
       );
     }
     if (typeof config.teamId !== "string" || config.teamId.length === 0) {
@@ -530,6 +530,8 @@ var CStarRealtime = class {
     this.retryTimer = null;
     this._connected = false;
     this.destroyed = false;
+    /** The server closed the stream because the API key was revoked or expired. */
+    this.revoked = false;
     this.connecting = false;
     /** Short-lived SSE token (exchanged from secret key). */
     this.sseToken = null;
@@ -605,7 +607,7 @@ var CStarRealtime = class {
   }
   /** Start the SSE connection. Called automatically on first handler registration. */
   connect() {
-    if (this.eventSource || this.destroyed || this.connecting) return;
+    if (this.eventSource || this.destroyed || this.revoked || this.connecting) return;
     if (!this.resolveEventSource()) {
       throw new CStarRealtimeUnavailableError();
     }
@@ -665,6 +667,7 @@ var CStarRealtime = class {
         this.eventSource.close();
         this.eventSource = null;
       }
+      if (this.revoked) return;
       if (this.autoReconnect && !this.destroyed && this.retryCount < this.maxRetries) {
         this.scheduleReconnect();
       } else if (this.retryCount >= this.maxRetries) {
@@ -674,6 +677,9 @@ var CStarRealtime = class {
     this.eventSource.onmessage = (event) => {
       this.handleMessage(event);
     };
+    this.eventSource.addEventListener("revoked", (event) => {
+      this.handleRevoked(event);
+    });
     const knownTypes = [
       "ticket.created",
       "ticket.updated",
@@ -802,6 +808,40 @@ var CStarRealtime = class {
       for (const handler of this.connectionHandlers) handler(value);
     }
   }
+  handleRevoked(event) {
+    if (this.revoked || this.destroyed) return;
+    this.revoked = true;
+    let body = {};
+    try {
+      body = JSON.parse(event.data).error ?? {};
+    } catch {
+    }
+    if (this.retryTimer) {
+      clearTimeout(this.retryTimer);
+      this.retryTimer = null;
+    }
+    if (this.tokenRefreshTimer) {
+      clearTimeout(this.tokenRefreshTimer);
+      this.tokenRefreshTimer = null;
+    }
+    if (this.eventSource) {
+      this.eventSource.close();
+      this.eventSource = null;
+    }
+    this.sseToken = null;
+    this.sseTokenExpiresAt = 0;
+    this.connecting = false;
+    this.setConnected(false);
+    this.emitError(
+      new CStarAuthenticationError(401, {
+        type: body.type ?? "authentication_error",
+        code: body.code ?? "invalid_api_key",
+        message: body.message ?? "This API key was revoked or has expired, so the stream is closed.",
+        doc_url: body.doc_url ?? "https://www.cstar.help/developers/errors#invalid_api_key",
+        ...body.request_id ? { request_id: body.request_id } : {}
+      })
+    );
+  }
   emitError(error) {
     for (const handler of this.errorHandlers) handler(error);
   }
@@ -1521,11 +1561,17 @@ var SettingsResource = class {
   async update(params) {
     return this.client.request("PATCH", "/settings", { body: params });
   }
-  /** Get business hours configuration. */
+  /**
+   * Get the chat widget's online hours (outside them the widget shows its
+   * offline message). Not the SLA working hours that SLA deadlines use.
+   */
   async getBusinessHours() {
     return this.client.request("GET", "/settings/business-hours");
   }
-  /** Update business hours configuration. */
+  /**
+   * Update the chat widget's online hours. SLA deadlines don't change:
+   * they follow the SLA working hours in Settings > Business Hours.
+   */
   async updateBusinessHours(params) {
     return this.client.request("PATCH", "/settings/business-hours", {
       body: params
@@ -1550,8 +1596,10 @@ var NotificationsResource = class {
   }
   /** List notifications for a user. */
   async list(params) {
+    const { unreadOnly, ...query } = params;
+    if (unreadOnly && query.isRead === void 0) query.isRead = false;
     return this.client.request("GET", "/notifications", {
-      query: params
+      query
     });
   }
   /** Get unread notification count for a user. */
@@ -1625,15 +1673,22 @@ var AttachmentsResource = class {
   constructor(client) {
     this.client = client;
   }
-  /** List attachments. */
+  /** List message files, each with a short-lived signed `url`. */
   async list(params) {
     return this.client.request("GET", "/attachments", {
       query: params
     });
   }
-  /** Get a single attachment. */
-  async get(attachmentId) {
-    return this.client.request("GET", `/attachments/${attachmentId}`);
+  /**
+   * Get a signed download URL, valid for `expiresIn` seconds, for a stored
+   * file. Pass `storagePath` and `bucket` from `list()`.
+   */
+  async get(storagePath, params) {
+    return this.client.request(
+      "GET",
+      `/attachments/${storagePath}`,
+      params?.bucket ? { query: { bucket: params.bucket } } : void 0
+    );
   }
   /** Delete an attachment. */
   async del(attachmentId) {
@@ -1649,16 +1704,12 @@ var CustomFieldsResource = class {
   constructor(client) {
     this.client = client;
   }
-  /** List custom fields. */
+  /** List custom field definitions, optionally for one record type. There is no single-field GET. */
   async list(params) {
     return this.client.request("GET", "/custom-fields", {
       query: params
     });
   }
-  /** Get a single custom field. */
-  async get(fieldId) {
-    return this.client.request("GET", `/custom-fields/${fieldId}`);
-  }
   /** Create a custom field. */
   async create(params, options) {
     return this.client.request("POST", "/custom-fields", {
@@ -1693,11 +1744,9 @@ var SlaResource = class {
   constructor(client) {
     this.client = client;
   }
-  /** List SLA rules. */
-  async list(params) {
-    return this.client.request("GET", "/sla/rules", {
-      query: params
-    });
+  /** List SLA rules in evaluation order. */
+  async list() {
+    return this.client.request("GET", "/sla/rules");
   }
   /** Create an SLA rule. */
   async create(params, options) {
@@ -1886,25 +1935,28 @@ var TagsResource = class {
   constructor(client) {
     this.client = client;
   }
-  /** List all tags with usage counts. */
+  /** List tags with usage counts, one row per tag and entity type. */
   async list(params) {
     return this.client.request("GET", "/tags", {
       query: params
     });
   }
-  /** Create a tag. */
-  async create(name, options) {
+  /** Replace `fromTag` with `toTag` on every record that carries it. */
+  async merge(params, options) {
     return this.client.request("POST", "/tags", {
-      body: { name },
+      body: { action: "merge", ...params },
       idempotencyKey: options?.idempotencyKey
     });
   }
-  /** Delete a tag. */
-  async del(name) {
-    return this.client.request(
-      "DELETE",
-      `/tags/${encodeURIComponent(name)}`
-    );
+  /** Remove a tag from every record that carries it. */
+  async remove(tag, params) {
+    return this.client.request("DELETE", "/tags", {
+      body: { tag, ...params }
+    });
+  }
+  /** @deprecated Use `remove()`. */
+  async del(tag, params) {
+    return this.remove(tag, params);
   }
 };
 
@@ -2350,7 +2402,7 @@ var ViewsResource = class extends BaseResource {
   constructor(client) {
     super(client, "/views");
   }
-  /** Execute a view — returns the filtered results. The server uses the view's entity_type to determine which table to query. */
+  /** Execute a view and return the filtered results. The server uses the view's entity_type to determine which table to query. */
   async execute(viewId, params) {
     return this.client.request("GET", `/views/${viewId}/execute`, {
       query: params
@@ -2586,7 +2638,7 @@ var WEBHOOK_EVENT_SAMPLES = {
     "comment": {
       "id": "cmt_01H8X9YZ7E0J3K4M5N6X",
       "post_id": "post_01H8X9YZ7E0J3K4M5N6W",
-      "content": "I would love this \u2014 bumping for visibility.",
+      "content": "I would love this. Bumping for visibility.",
       "author_id": "cus_01H8X9YZ7E0J3K4M5N6Q",
       "created_at": "2026-04-27T18:55:02.000Z"
     }
@@ -2806,15 +2858,14 @@ var WEBHOOK_EVENT_SAMPLES = {
       "id": "tkt_01H8X9YZ7E0J3K4M5N6P",
       "prefixed_id": "CST-1024",
       "title": "Cannot reset password",
-      "status": "resolved",
+      "status": "closed",
       "priority": "normal",
-      "channel": "widget",
-      "resolved_at": "2026-04-27T19:08:43.000Z"
+      "channel": "widget"
     },
     "changes": {
       "status": {
         "from": "open",
-        "to": "resolved"
+        "to": "closed"
       }
     }
   },
@@ -2847,7 +2898,7 @@ var WEBHOOK_EVENT_SAMPLES = {
       "id": "msg_01H8X9YZ7E0J3K4M5N6R",
       "sender": "agent",
       "sender_name": "Riley",
-      "content": "I just sent a reset link to your inbox \u2014 let me know if it lands.",
+      "content": "I just sent a reset link to your inbox. Let me know if it lands.",
       "created_at": "2026-04-27T18:55:02.000Z"
     },
     "customer": {
@@ -2913,7 +2964,7 @@ var WEBHOOK_EVENT_CATALOG = {
   "survey.submitted": { label: "Customer Feedback Received", description: "Fired when a customer submits a CSAT survey response", category: "csat" },
   "team.preferences_updated": { label: "Team Preferences Updated", description: "Fired when team-wide UX preferences change (e.g., bossBattlesEnabled toggled)", category: "team" },
   "ticket.assigned": { label: "Ticket Assigned", description: "Fired when a ticket is assigned to an agent", category: "tickets" },
-  "ticket.closed": { label: "Ticket Closed/Resolved", description: "Fired when a ticket is resolved or closed", category: "tickets" },
+  "ticket.closed": { label: "Ticket Closed", description: "Fired when a ticket's status changes to Closed. Moving a ticket to Resolved sends ticket.updated instead.", category: "tickets" },
   "ticket.created": { label: "New Ticket Created", description: "Fired when a new ticket is created via app, widget, API, or email", category: "tickets" },
   "ticket.deleted": { label: "Ticket Deleted", description: "Fired when a ticket is deleted via app or API", category: "tickets" },
   "ticket.message_added": { label: "New Message on Ticket", description: "Fired when a new message is added to a ticket", category: "tickets" },