@cstar.help/js 0.17.5 → 0.18.1

package/dist/chat/index.cjs

@@ -222,6 +222,7 @@ var RealtimeManager = class {
 // src/chat/presence.ts
 var TYPING_THROTTLE_MS = 2e3;
 var TYPING_CLEAR_DELAY_MS = 3e3;
+var PRIVATE_TOPIC = { config: { private: true } };
 var PresenceManager = class {
   constructor(options) {
     this.client = null;
@@ -245,7 +246,7 @@ var PresenceManager = class {
     };
     const channelName = `typing:${ticketId}`;
     this.removeChannel(channelName);
-    const channel = this.client.channel(`ticket:${ticketId}`);
+    const channel = this.client.channel(`ticket:${ticketId}`, PRIVATE_TOPIC);
     this.channels.set(channelName, channel);
     channel.on("broadcast", { event: "typing" }, (data) => {
       if (this.channels.get(channelName) !== channel) return;
@@ -297,7 +298,7 @@ var PresenceManager = class {
       const sendChannelName = `typing-send:${ticketId}`;
       let channel = this.channels.get(sendChannelName);
       if (!channel) {
-        channel = this.client.channel(`ticket:${ticketId}`);
+        channel = this.client.channel(`ticket:${ticketId}`, PRIVATE_TOPIC);
         channel.subscribe();
         this.channels.set(sendChannelName, channel);
       }
@@ -475,6 +476,8 @@ var DEFAULT_POLLING_INTERVAL = 3e3;
 var ChatClient = class {
   constructor(config) {
     this.sessionToken = null;
+    this.refreshToken = null;
+    this.refreshPromise = null;
     this.teamId = null;
     this.customerId = null;
     this.authMode = null;
@@ -567,6 +570,7 @@ var ChatClient = class {
     this.applySession(
       {
         accessToken: response.accessToken,
+        refreshToken: response.refreshToken ?? void 0,
         teamId,
         customerName: response.customer.name ?? response.customer.email
       },
@@ -597,6 +601,7 @@ var ChatClient = class {
   applySession(params, generation) {
     this.assertSession(generation);
     this.sessionToken = params.accessToken;
+    this.refreshToken = params.refreshToken ?? null;
     if (params.teamId) {
       this.teamId = params.teamId;
     }
@@ -706,6 +711,8 @@ var ChatClient = class {
     this.pollingSubscriptions.clear();
     this.realtimeMessageSubscriptions.clear();
     this.sessionToken = null;
+    this.refreshToken = null;
+    this.refreshPromise = null;
     this.teamId = null;
     this.customerId = null;
     this.authMode = null;
@@ -737,7 +744,7 @@ var ChatClient = class {
    * the first authenticated round-trip, `getAuthMode()` returns the
    * server-confirmed mode.
    */
-  async fetch(path, options) {
+  async fetch(path, options, retriedAfterRefresh = false) {
     const generation = this.sessionGeneration;
     const assertRequest = () => {
       this.assertSession(generation);
@@ -748,8 +755,10 @@ var ChatClient = class {
     const headers = {
       "Content-Type": "application/json"
     };
-    if (this.sessionToken) {
-      headers["Authorization"] = `Bearer ${this.sessionToken}`;
+    if (options.idempotencyKey) headers["Idempotency-Key"] = options.idempotencyKey;
+    const sentToken = this.sessionToken;
+    if (sentToken) {
+      headers["Authorization"] = `Bearer ${sentToken}`;
     }
     let response;
     try {
@@ -777,11 +786,17 @@ var ChatClient = class {
     }
     assertRequest();
     const requestId = responseHeaders?.get("X-Request-Id") ?? null;
+    if (response.status === 401 && sentToken && this.refreshToken && !retriedAfterRefresh) {
+      const refreshed = await this.refreshSession(sentToken);
+      assertRequest();
+      if (refreshed) return this.fetch(path, options, true);
+    }
     if (!response.ok) {
-      const errorBody = await response.json().catch(() => ({ error: { code: "UNKNOWN", message: "Request failed" } }));
+      const errorBody = await response.json().catch(() => null);
       assertRequest();
-      const code = errorBody.error?.code ?? "UNKNOWN";
-      const message = errorBody.error?.message ?? `Widget API error: ${response.status}`;
+      const structured = errorBody?.error && typeof errorBody.error === "object" ? errorBody.error : null;
+      const code = structured?.code ?? "UNKNOWN";
+      const message = structured?.message ?? (typeof errorBody?.error === "string" ? errorBody.error : null) ?? (typeof errorBody?.message === "string" ? errorBody.message : null) ?? `Widget API error: ${response.status}`;
       if (response.status === 401 || response.status === 403) {
         throw new ChatClientAuthError({
           message,
@@ -822,9 +837,52 @@ var ChatClient = class {
       return body;
     } catch (error) {
       assertRequest();
+      if (options.idempotencyKey)
+        throw new ChatClientNetworkError({
+          message: "Could not read the message acknowledgment",
+          originalError: error
+        });
       throw error;
     }
   }
+  /**
+   * Renew the access token with the stored refresh token. Concurrent 401s
+   * share one refresh. Resolves true when a newer token is in place.
+   */
+  refreshSession(rejectedToken) {
+    if (this.sessionToken && this.sessionToken !== rejectedToken) return Promise.resolve(true);
+    if (!this.refreshPromise) {
+      const pending = this.requestRefresh().finally(() => {
+        if (this.refreshPromise === pending) this.refreshPromise = null;
+      });
+      this.refreshPromise = pending;
+    }
+    return this.refreshPromise;
+  }
+  async requestRefresh() {
+    const generation = this.sessionGeneration;
+    const refreshToken = this.refreshToken;
+    if (!refreshToken) return false;
+    try {
+      const response = await globalThis.fetch(`${this.baseUrl}/api/widget/auth/refresh`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ refreshToken })
+      });
+      if (generation !== this.sessionGeneration) return false;
+      if (!response.ok) {
+        if (response.status === 401) this.refreshToken = null;
+        return false;
+      }
+      const body = await response.json();
+      if (generation !== this.sessionGeneration || !body.accessToken) return false;
+      this.sessionToken = body.accessToken;
+      this.refreshToken = body.refreshToken ?? refreshToken;
+      return true;
+    } catch {
+      return false;
+    }
+  }
   /**
    * Look up the team UUID from the configured `teamSlug`. Used by
    * `loginWithCredentials`. HMAC integrators (`identify()`) never hit
@@ -1297,26 +1355,80 @@ var MessagesApi = class {
     assertCurrent();
     return response.data.messages;
   }
-  /** Send a message to a ticket. */
-  async send(ticketId, content) {
+  /**
+   * Send one logical reply. Network and server failures retry twice with the
+   * same key. A separate send call is a new intent unless a retained key is supplied.
+   */
+  async send(ticketId, content, options = {}) {
     const assertCurrent = this.chat.captureSession();
+    options.signal?.throwIfAborted();
+    const key = options.idempotencyKey ?? createMessageRequestKey();
+    if (!key || key.length > 250 || key.trim() !== key || /[^\x20-\x7e]/.test(key))
+      throw new ChatClientError({
+        code: "INVALID_IDEMPOTENCY_KEY",
+        message: "Idempotency-Key must contain 1 to 250 printable characters, without surrounding whitespace."
+      });
     const teamId = await this.chat.ensureTeamId();
     assertCurrent();
-    const response = await this.chat.fetch(
-      "/api/widget/messages",
-      {
-        method: "POST",
-        body: {
-          teamId,
-          ticketId,
-          content
-        }
+    for (let attempt = 0; ; attempt++) {
+      assertCurrent();
+      options.signal?.throwIfAborted();
+      try {
+        const response = await this.chat.fetch(
+          "/api/widget/messages",
+          {
+            method: "POST",
+            body: { teamId, ticketId, content },
+            idempotencyKey: key,
+            signal: options.signal
+          }
+        );
+        assertCurrent();
+        if (typeof response?.data?.message?.id !== "string" || !response.data.message.id)
+          throw new ChatClientNetworkError({
+            message: "Message acknowledgment was incomplete",
+            originalError: new Error(
+              "The reply may already be saved. Retry with the same send identity."
+            )
+          });
+        return response.data.message;
+      } catch (error) {
+        assertCurrent();
+        options.signal?.throwIfAborted();
+        if (error instanceof ChatClientError) error.idempotencyKey = key;
+        if (attempt >= 2 || !(error instanceof ChatClientNetworkError || error instanceof ChatClientServerError))
+          throw error;
+        await waitForMessageRetry(250 * 2 ** attempt, options.signal);
       }
-    );
-    assertCurrent();
-    return response.data.message;
+    }
   }
 };
+function createMessageRequestKey() {
+  if (typeof globalThis.crypto?.randomUUID === "function") return globalThis.crypto.randomUUID();
+  if (typeof globalThis.crypto?.getRandomValues !== "function")
+    throw new ChatClientError({
+      code: "RANDOM_UNAVAILABLE",
+      message: "Secure random values are required to send a message safely."
+    });
+  const bytes = globalThis.crypto.getRandomValues(new Uint8Array(16));
+  return Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0")).join("");
+}
+function waitForMessageRetry(delay, signal) {
+  signal?.throwIfAborted();
+  return new Promise((resolve, reject) => {
+    const finish = () => {
+      signal?.removeEventListener("abort", abort);
+      resolve();
+    };
+    const timer = setTimeout(finish, delay);
+    const abort = () => {
+      clearTimeout(timer);
+      signal?.removeEventListener("abort", abort);
+      reject(signal?.reason);
+    };
+    signal?.addEventListener("abort", abort, { once: true });
+  });
+}
 function decodeJwtSub(jwt) {
   try {
     const parts = jwt.split(".");

package/dist/chat/index.d.cts

@@ -28,6 +28,11 @@ type ChatAuthMode = 'hmac' | 'session';
 interface LoginWithSessionParams {
     /** Supabase access token (JWT). Used as Bearer for every subsequent call. */
     accessToken: string;
+    /**
+     * Optional: the matching refresh token. When supplied, the client renews
+     * an expired access token through `/api/widget/auth/refresh` on a 401.
+     */
+    refreshToken?: string;
     /** Optional: the team UUID. If omitted, derived server-side from the token. */
     teamId?: string;
     /** Optional: a hint for the customer name (UI only — server stays authoritative). */
@@ -132,6 +137,8 @@ interface TicketListResponse {
 /** A message on a ticket. */
 interface Message {
     id: string;
+    /** Opaque send identity, used to reconcile a reply after an uncertain response. */
+    client_request_key?: string | null;
     content: string;
     sender: 'customer' | 'agent';
     sender_name: string;
@@ -144,6 +151,12 @@ interface Message {
     /** Whether this message was sent by an AI agent. */
     is_bot?: boolean;
 }
+/** Options for one logical customer reply, including any retries. */
+interface MessageSendOptions {
+    /** Retain for a manual retry of the same ticket, content and attachments. Use a new key for each intentional send. Receipts last 24 hours. */
+    idempotencyKey?: string;
+    signal?: AbortSignal;
+}
 /** A confirmed customer's message attachment. Never a Storage path or URL. */
 interface CustomerAttachmentReference {
     readonly ticketId: string;
@@ -170,6 +183,7 @@ interface TicketListParams {
 }
 /** Parameters for creating a new ticket. */
 interface TicketCreateParams {
+    /** Conversation subject. Subjects over 255 characters are shortened with an ellipsis, never rejected. */
     subject: string;
     message?: string;
 }
@@ -231,6 +245,8 @@ declare class ChatClientError extends Error {
     readonly code: string;
     readonly statusCode: number;
     readonly requestId: string | null;
+    /** Customer message send key retained for a manual retry after an uncertain outcome. */
+    idempotencyKey?: string;
     constructor(arg: ChatErrorOpts | string);
 }
 /** 401 / 403 — auth failed (bad/expired token, wrong team, etc.). */
@@ -316,6 +332,8 @@ declare class ChatClient {
     private readonly pollingInterval;
     private readonly realtimeEnabled;
     private sessionToken;
+    private refreshToken;
+    private refreshPromise;
     private teamId;
     private customerId;
     private authMode;
@@ -429,7 +447,14 @@ declare class ChatClient {
         signal?: AbortSignal;
         cache?: RequestCache;
         readBody?: (response: Response) => Promise<T>;
-    }): Promise<T>;
+        idempotencyKey?: string;
+    }, retriedAfterRefresh?: boolean): Promise<T>;
+    /**
+     * Renew the access token with the stored refresh token. Concurrent 401s
+     * share one refresh. Resolves true when a newer token is in place.
+     */
+    private refreshSession;
+    private requestRefresh;
     /**
      * Look up the team UUID from the configured `teamSlug`. Used by
      * `loginWithCredentials`. HMAC integrators (`identify()`) never hit
@@ -501,8 +526,11 @@ declare class MessagesApi {
     constructor(chat: ChatClient);
     /** List messages for a ticket. */
     list(ticketId: string): Promise<Message[]>;
-    /** Send a message to a ticket. */
-    send(ticketId: string, content: string): Promise<Message>;
+    /**
+     * Send one logical reply. Network and server failures retry twice with the
+     * same key. A separate send call is a new intent unless a retained key is supplied.
+     */
+    send(ticketId: string, content: string, options?: MessageSendOptions): Promise<Message>;
 }
 
-export { type AttachmentDownloadOptions, type ChatAuthMode, ChatClient, ChatClientAuthError, ChatClientError, ChatClientNetworkError, ChatClientRateLimitError, ChatClientServerError, type ChatConfig, type ChatStateListener, type CustomerAttachmentReference, type DownloadedAttachment, type IdentifyParams, type IdentifyResult, type LoginWithCredentialsParams, type LoginWithCredentialsResult, type LoginWithSessionParams, type Message, type MessageCallback, type RealtimeTokenResponse, type Ticket, type TicketCreateParams, type TicketListParams, type TicketListResponse, type TypingCallback, type TypingPayload };
+export { type AttachmentDownloadOptions, type ChatAuthMode, ChatClient, ChatClientAuthError, ChatClientError, ChatClientNetworkError, ChatClientRateLimitError, ChatClientServerError, type ChatConfig, type ChatStateListener, type CustomerAttachmentReference, type DownloadedAttachment, type IdentifyParams, type IdentifyResult, type LoginWithCredentialsParams, type LoginWithCredentialsResult, type LoginWithSessionParams, type Message, type MessageCallback, type MessageSendOptions, type RealtimeTokenResponse, type Ticket, type TicketCreateParams, type TicketListParams, type TicketListResponse, type TypingCallback, type TypingPayload };

package/dist/chat/index.d.ts

@@ -28,6 +28,11 @@ type ChatAuthMode = 'hmac' | 'session';
 interface LoginWithSessionParams {
     /** Supabase access token (JWT). Used as Bearer for every subsequent call. */
     accessToken: string;
+    /**
+     * Optional: the matching refresh token. When supplied, the client renews
+     * an expired access token through `/api/widget/auth/refresh` on a 401.
+     */
+    refreshToken?: string;
     /** Optional: the team UUID. If omitted, derived server-side from the token. */
     teamId?: string;
     /** Optional: a hint for the customer name (UI only — server stays authoritative). */
@@ -132,6 +137,8 @@ interface TicketListResponse {
 /** A message on a ticket. */
 interface Message {
     id: string;
+    /** Opaque send identity, used to reconcile a reply after an uncertain response. */
+    client_request_key?: string | null;
     content: string;
     sender: 'customer' | 'agent';
     sender_name: string;
@@ -144,6 +151,12 @@ interface Message {
     /** Whether this message was sent by an AI agent. */
     is_bot?: boolean;
 }
+/** Options for one logical customer reply, including any retries. */
+interface MessageSendOptions {
+    /** Retain for a manual retry of the same ticket, content and attachments. Use a new key for each intentional send. Receipts last 24 hours. */
+    idempotencyKey?: string;
+    signal?: AbortSignal;
+}
 /** A confirmed customer's message attachment. Never a Storage path or URL. */
 interface CustomerAttachmentReference {
     readonly ticketId: string;
@@ -170,6 +183,7 @@ interface TicketListParams {
 }
 /** Parameters for creating a new ticket. */
 interface TicketCreateParams {
+    /** Conversation subject. Subjects over 255 characters are shortened with an ellipsis, never rejected. */
     subject: string;
     message?: string;
 }
@@ -231,6 +245,8 @@ declare class ChatClientError extends Error {
     readonly code: string;
     readonly statusCode: number;
     readonly requestId: string | null;
+    /** Customer message send key retained for a manual retry after an uncertain outcome. */
+    idempotencyKey?: string;
     constructor(arg: ChatErrorOpts | string);
 }
 /** 401 / 403 — auth failed (bad/expired token, wrong team, etc.). */
@@ -316,6 +332,8 @@ declare class ChatClient {
     private readonly pollingInterval;
     private readonly realtimeEnabled;
     private sessionToken;
+    private refreshToken;
+    private refreshPromise;
     private teamId;
     private customerId;
     private authMode;
@@ -429,7 +447,14 @@ declare class ChatClient {
         signal?: AbortSignal;
         cache?: RequestCache;
         readBody?: (response: Response) => Promise<T>;
-    }): Promise<T>;
+        idempotencyKey?: string;
+    }, retriedAfterRefresh?: boolean): Promise<T>;
+    /**
+     * Renew the access token with the stored refresh token. Concurrent 401s
+     * share one refresh. Resolves true when a newer token is in place.
+     */
+    private refreshSession;
+    private requestRefresh;
     /**
      * Look up the team UUID from the configured `teamSlug`. Used by
      * `loginWithCredentials`. HMAC integrators (`identify()`) never hit
@@ -501,8 +526,11 @@ declare class MessagesApi {
     constructor(chat: ChatClient);
     /** List messages for a ticket. */
     list(ticketId: string): Promise<Message[]>;
-    /** Send a message to a ticket. */
-    send(ticketId: string, content: string): Promise<Message>;
+    /**
+     * Send one logical reply. Network and server failures retry twice with the
+     * same key. A separate send call is a new intent unless a retained key is supplied.
+     */
+    send(ticketId: string, content: string, options?: MessageSendOptions): Promise<Message>;
 }
 
-export { type AttachmentDownloadOptions, type ChatAuthMode, ChatClient, ChatClientAuthError, ChatClientError, ChatClientNetworkError, ChatClientRateLimitError, ChatClientServerError, type ChatConfig, type ChatStateListener, type CustomerAttachmentReference, type DownloadedAttachment, type IdentifyParams, type IdentifyResult, type LoginWithCredentialsParams, type LoginWithCredentialsResult, type LoginWithSessionParams, type Message, type MessageCallback, type RealtimeTokenResponse, type Ticket, type TicketCreateParams, type TicketListParams, type TicketListResponse, type TypingCallback, type TypingPayload };
+export { type AttachmentDownloadOptions, type ChatAuthMode, ChatClient, ChatClientAuthError, ChatClientError, ChatClientNetworkError, ChatClientRateLimitError, ChatClientServerError, type ChatConfig, type ChatStateListener, type CustomerAttachmentReference, type DownloadedAttachment, type IdentifyParams, type IdentifyResult, type LoginWithCredentialsParams, type LoginWithCredentialsResult, type LoginWithSessionParams, type Message, type MessageCallback, type MessageSendOptions, type RealtimeTokenResponse, type Ticket, type TicketCreateParams, type TicketListParams, type TicketListResponse, type TypingCallback, type TypingPayload };

package/dist/chat/index.js

@@ -181,6 +181,7 @@ var RealtimeManager = class {
 // src/chat/presence.ts
 var TYPING_THROTTLE_MS = 2e3;
 var TYPING_CLEAR_DELAY_MS = 3e3;
+var PRIVATE_TOPIC = { config: { private: true } };
 var PresenceManager = class {
   constructor(options) {
     this.client = null;
@@ -204,7 +205,7 @@ var PresenceManager = class {
     };
     const channelName = `typing:${ticketId}`;
     this.removeChannel(channelName);
-    const channel = this.client.channel(`ticket:${ticketId}`);
+    const channel = this.client.channel(`ticket:${ticketId}`, PRIVATE_TOPIC);
     this.channels.set(channelName, channel);
     channel.on("broadcast", { event: "typing" }, (data) => {
       if (this.channels.get(channelName) !== channel) return;
@@ -256,7 +257,7 @@ var PresenceManager = class {
       const sendChannelName = `typing-send:${ticketId}`;
       let channel = this.channels.get(sendChannelName);
       if (!channel) {
-        channel = this.client.channel(`ticket:${ticketId}`);
+        channel = this.client.channel(`ticket:${ticketId}`, PRIVATE_TOPIC);
         channel.subscribe();
         this.channels.set(sendChannelName, channel);
       }
@@ -434,6 +435,8 @@ var DEFAULT_POLLING_INTERVAL = 3e3;
 var ChatClient = class {
   constructor(config) {
     this.sessionToken = null;
+    this.refreshToken = null;
+    this.refreshPromise = null;
     this.teamId = null;
     this.customerId = null;
     this.authMode = null;
@@ -526,6 +529,7 @@ var ChatClient = class {
     this.applySession(
       {
         accessToken: response.accessToken,
+        refreshToken: response.refreshToken ?? void 0,
         teamId,
         customerName: response.customer.name ?? response.customer.email
       },
@@ -556,6 +560,7 @@ var ChatClient = class {
   applySession(params, generation) {
     this.assertSession(generation);
     this.sessionToken = params.accessToken;
+    this.refreshToken = params.refreshToken ?? null;
     if (params.teamId) {
       this.teamId = params.teamId;
     }
@@ -665,6 +670,8 @@ var ChatClient = class {
     this.pollingSubscriptions.clear();
     this.realtimeMessageSubscriptions.clear();
     this.sessionToken = null;
+    this.refreshToken = null;
+    this.refreshPromise = null;
     this.teamId = null;
     this.customerId = null;
     this.authMode = null;
@@ -696,7 +703,7 @@ var ChatClient = class {
    * the first authenticated round-trip, `getAuthMode()` returns the
    * server-confirmed mode.
    */
-  async fetch(path, options) {
+  async fetch(path, options, retriedAfterRefresh = false) {
     const generation = this.sessionGeneration;
     const assertRequest = () => {
       this.assertSession(generation);
@@ -707,8 +714,10 @@ var ChatClient = class {
     const headers = {
       "Content-Type": "application/json"
     };
-    if (this.sessionToken) {
-      headers["Authorization"] = `Bearer ${this.sessionToken}`;
+    if (options.idempotencyKey) headers["Idempotency-Key"] = options.idempotencyKey;
+    const sentToken = this.sessionToken;
+    if (sentToken) {
+      headers["Authorization"] = `Bearer ${sentToken}`;
     }
     let response;
     try {
@@ -736,11 +745,17 @@ var ChatClient = class {
     }
     assertRequest();
     const requestId = responseHeaders?.get("X-Request-Id") ?? null;
+    if (response.status === 401 && sentToken && this.refreshToken && !retriedAfterRefresh) {
+      const refreshed = await this.refreshSession(sentToken);
+      assertRequest();
+      if (refreshed) return this.fetch(path, options, true);
+    }
     if (!response.ok) {
-      const errorBody = await response.json().catch(() => ({ error: { code: "UNKNOWN", message: "Request failed" } }));
+      const errorBody = await response.json().catch(() => null);
       assertRequest();
-      const code = errorBody.error?.code ?? "UNKNOWN";
-      const message = errorBody.error?.message ?? `Widget API error: ${response.status}`;
+      const structured = errorBody?.error && typeof errorBody.error === "object" ? errorBody.error : null;
+      const code = structured?.code ?? "UNKNOWN";
+      const message = structured?.message ?? (typeof errorBody?.error === "string" ? errorBody.error : null) ?? (typeof errorBody?.message === "string" ? errorBody.message : null) ?? `Widget API error: ${response.status}`;
       if (response.status === 401 || response.status === 403) {
         throw new ChatClientAuthError({
           message,
@@ -781,9 +796,52 @@ var ChatClient = class {
       return body;
     } catch (error) {
       assertRequest();
+      if (options.idempotencyKey)
+        throw new ChatClientNetworkError({
+          message: "Could not read the message acknowledgment",
+          originalError: error
+        });
       throw error;
     }
   }
+  /**
+   * Renew the access token with the stored refresh token. Concurrent 401s
+   * share one refresh. Resolves true when a newer token is in place.
+   */
+  refreshSession(rejectedToken) {
+    if (this.sessionToken && this.sessionToken !== rejectedToken) return Promise.resolve(true);
+    if (!this.refreshPromise) {
+      const pending = this.requestRefresh().finally(() => {
+        if (this.refreshPromise === pending) this.refreshPromise = null;
+      });
+      this.refreshPromise = pending;
+    }
+    return this.refreshPromise;
+  }
+  async requestRefresh() {
+    const generation = this.sessionGeneration;
+    const refreshToken = this.refreshToken;
+    if (!refreshToken) return false;
+    try {
+      const response = await globalThis.fetch(`${this.baseUrl}/api/widget/auth/refresh`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ refreshToken })
+      });
+      if (generation !== this.sessionGeneration) return false;
+      if (!response.ok) {
+        if (response.status === 401) this.refreshToken = null;
+        return false;
+      }
+      const body = await response.json();
+      if (generation !== this.sessionGeneration || !body.accessToken) return false;
+      this.sessionToken = body.accessToken;
+      this.refreshToken = body.refreshToken ?? refreshToken;
+      return true;
+    } catch {
+      return false;
+    }
+  }
   /**
    * Look up the team UUID from the configured `teamSlug`. Used by
    * `loginWithCredentials`. HMAC integrators (`identify()`) never hit
@@ -1256,26 +1314,80 @@ var MessagesApi = class {
     assertCurrent();
     return response.data.messages;
   }
-  /** Send a message to a ticket. */
-  async send(ticketId, content) {
+  /**
+   * Send one logical reply. Network and server failures retry twice with the
+   * same key. A separate send call is a new intent unless a retained key is supplied.
+   */
+  async send(ticketId, content, options = {}) {
     const assertCurrent = this.chat.captureSession();
+    options.signal?.throwIfAborted();
+    const key = options.idempotencyKey ?? createMessageRequestKey();
+    if (!key || key.length > 250 || key.trim() !== key || /[^\x20-\x7e]/.test(key))
+      throw new ChatClientError({
+        code: "INVALID_IDEMPOTENCY_KEY",
+        message: "Idempotency-Key must contain 1 to 250 printable characters, without surrounding whitespace."
+      });
     const teamId = await this.chat.ensureTeamId();
     assertCurrent();
-    const response = await this.chat.fetch(
-      "/api/widget/messages",
-      {
-        method: "POST",
-        body: {
-          teamId,
-          ticketId,
-          content
-        }
+    for (let attempt = 0; ; attempt++) {
+      assertCurrent();
+      options.signal?.throwIfAborted();
+      try {
+        const response = await this.chat.fetch(
+          "/api/widget/messages",
+          {
+            method: "POST",
+            body: { teamId, ticketId, content },
+            idempotencyKey: key,
+            signal: options.signal
+          }
+        );
+        assertCurrent();
+        if (typeof response?.data?.message?.id !== "string" || !response.data.message.id)
+          throw new ChatClientNetworkError({
+            message: "Message acknowledgment was incomplete",
+            originalError: new Error(
+              "The reply may already be saved. Retry with the same send identity."
+            )
+          });
+        return response.data.message;
+      } catch (error) {
+        assertCurrent();
+        options.signal?.throwIfAborted();
+        if (error instanceof ChatClientError) error.idempotencyKey = key;
+        if (attempt >= 2 || !(error instanceof ChatClientNetworkError || error instanceof ChatClientServerError))
+          throw error;
+        await waitForMessageRetry(250 * 2 ** attempt, options.signal);
       }
-    );
-    assertCurrent();
-    return response.data.message;
+    }
   }
 };
+function createMessageRequestKey() {
+  if (typeof globalThis.crypto?.randomUUID === "function") return globalThis.crypto.randomUUID();
+  if (typeof globalThis.crypto?.getRandomValues !== "function")
+    throw new ChatClientError({
+      code: "RANDOM_UNAVAILABLE",
+      message: "Secure random values are required to send a message safely."
+    });
+  const bytes = globalThis.crypto.getRandomValues(new Uint8Array(16));
+  return Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0")).join("");
+}
+function waitForMessageRetry(delay, signal) {
+  signal?.throwIfAborted();
+  return new Promise((resolve, reject) => {
+    const finish = () => {
+      signal?.removeEventListener("abort", abort);
+      resolve();
+    };
+    const timer = setTimeout(finish, delay);
+    const abort = () => {
+      clearTimeout(timer);
+      signal?.removeEventListener("abort", abort);
+      reject(signal?.reason);
+    };
+    signal?.addEventListener("abort", abort, { once: true });
+  });
+}
 function decodeJwtSub(jwt) {
   try {
     const parts = jwt.split(".");