@medalsocial/sdk 1.5.0 → 1.6.0

package/dist/src/index.d.ts

@@ -1,51 +1,28 @@
 export { components as OpenApiComponents, operations as OpenApiOperations, paths as OpenApiPaths } from './openapi.generated.js';
 
-/** Configuration for the low-level HTTP client. */
-interface ClientConfig {
-    baseUrl: string;
-    token: string;
-    workspaceId?: string;
-    timeout: number;
-    userAgent: string;
+/** Successful API response wrapper */
+interface ApiResponse<T> {
+    data: T;
 }
-/** Per-request options for write operations. */
-interface RequestOptions {
-    /**
-     * Idempotency key sent as the `Idempotency-Key` header. Retries with the
-     * same key return the original result instead of repeating the operation.
-     * Required by some endpoints for capability-scoped tokens (e.g. helpdesk
-     * replies, webhook creation).
-     */
-    idempotencyKey?: string;
-    /**
-     * Capability confirmation token sent as the `X-Capability-Confirmation`
-     * header. Required alongside `idempotencyKey` when a token granted a
-     * capability-style scope directly (e.g. `helpdesk.webhook.manage`) executes
-     * a confirmable write route. Obtain one from
-     * `POST /api/v1/capability-confirmations`. API keys with legacy scopes do
-     * not need it.
-     */
-    capabilityConfirmation?: string;
+/** Paginated API response */
+interface PaginatedResponse<T> {
+    data: T[];
+    pagination: {
+        has_more: boolean;
+        next_cursor: string | null;
+    };
 }
-/**
- * Low-level HTTP client used by all resource classes.
- * Handles authentication, retries, timeout, and error parsing.
- */
-declare class BaseClient {
-    /** Resolved client configuration. */
-    readonly config: ClientConfig;
-    constructor(config: ClientConfig);
-    /** Execute an authenticated GET request and return the parsed JSON body. */
-    get<T>(path: string, params?: Record<string, string | undefined>): Promise<T>;
-    /** Execute an authenticated POST request with a JSON body. */
-    post<T>(path: string, body?: unknown, options?: RequestOptions): Promise<T>;
-    /** Execute an authenticated PATCH request with a JSON body. */
-    patch<T>(path: string, body: unknown, options?: RequestOptions): Promise<T>;
-    /** Execute an authenticated DELETE request. */
-    delete<T>(path: string, options?: RequestOptions): Promise<T>;
-    private writeHeaders;
-    private buildUrl;
-    private request;
+/** API error thrown by the client */
+declare class MedalApiError extends Error {
+    readonly status: number;
+    readonly code: string;
+    readonly details?: unknown;
+    constructor(status: number, code: string, message: string, details?: unknown);
+}
+/** Pagination options for list endpoints */
+interface PaginationOptions {
+    limit?: number;
+    cursor?: string;
 }
 
 /** Lifecycle status of a hosted connect link. */
@@ -91,8 +68,8 @@ interface ConnectLink {
     /** Unix timestamp in milliseconds. */
     created_at: number;
 }
-/** Filters for listing connect links. */
-interface ListConnectLinksOptions {
+/** Filters and cursor pagination for listing connect links. */
+interface ListConnectLinksOptions extends PaginationOptions {
     channel_type?: string;
     status?: ConnectLinkStatus;
 }
@@ -120,35 +97,564 @@ interface ChannelConnectionDisconnectResult {
     state: "disconnected";
 }
 
-/** Successful API response wrapper */
-interface ApiResponse<T> {
-    data: T;
-}
-/** Paginated API response */
-interface PaginatedResponse<T> {
-    data: T[];
-    pagination: {
-        has_more: boolean;
-        next_cursor: string | null;
-    };
-}
-/** API error thrown by the client */
-declare class MedalApiError extends Error {
-    readonly status: number;
-    readonly code: string;
-    readonly details?: unknown;
-    constructor(status: number, code: string, message: string, details?: unknown);
+/** Lifecycle status of a helpdesk conversation. */
+type ConversationStatus = "open" | "snoozed" | "closed";
+/** Who authored a helpdesk message. */
+type MessageAuthorType = "visitor" | "operator" | "ai" | "system";
+/** Kind of helpdesk message. `note` is operator-internal and never delivered to the customer. */
+type HelpdeskMessageType = "chat" | "email" | "note";
+/** A helpdesk conversation across any connected channel (widget, email, social DMs, …). */
+interface Conversation {
+    id: string;
+    /** Channel type, e.g. 'widget', 'instagram', 'messenger', 'whatsapp', 'email'. */
+    channel: string;
+    channel_connection_id: string | null;
+    status: ConversationStatus;
+    subject: string | null;
+    assignee_user_id: string | null;
+    contact_id: string | null;
+    visitor_name: string | null;
+    visitor_email: string | null;
+    external_conversation_id: string | null;
+    channel_account_id: string | null;
+    message_count: number;
+    unread_for_operator: number;
+    /** Unix timestamp in milliseconds. */
+    last_message_at: number;
+    last_message_preview: string | null;
+    last_message_author_type: MessageAuthorType | null;
+    /** Unix timestamp in milliseconds. */
+    created_at: number;
+    /** Unix timestamp in milliseconds. */
+    updated_at: number;
+}
+/**
+ * Outbound delivery state of a helpdesk message.
+ *
+ * - `pending` — queued for the channel, not handed off yet.
+ * - `sent` — handed to the channel provider, no confirmation yet.
+ * - `delivered` — the channel confirmed delivery to the customer.
+ * - `failed` — delivery failed; see `delivery_error` on the message.
+ */
+type MessageDeliveryStatus = "pending" | "sent" | "delivered" | "failed";
+/** A single message inside a helpdesk conversation. */
+interface ConversationMessage {
+    id: string;
+    conversation_id: string;
+    author_type: MessageAuthorType;
+    message_type: HelpdeskMessageType;
+    author_user_id: string | null;
+    author_name: string | null;
+    body: string;
+    /**
+     * Outbound delivery state, or `null` for inbound messages and internal
+     * notes — neither is ever sent to a channel, so neither has delivery state.
+     *
+     * **A `201` from `helpdesk.replies.create` means the reply was ACCEPTED, not
+     * delivered.** The channel hand-off happens asynchronously afterwards: poll
+     * this field (or subscribe to the `helpdesk.message_delivery_updated`
+     * webhook event, which carries the same values) to learn whether the message
+     * actually reached the customer.
+     */
+    delivery_status: MessageDeliveryStatus | null;
+    /**
+     * Last send error for a `failed` outbound message, or `null` when there is
+     * no error to report (including on inbound messages and internal notes).
+     */
+    delivery_error: string | null;
+    /** Unix timestamp in milliseconds. */
+    created_at: number;
+}
+/** Filters for listing/searching helpdesk conversations. */
+interface ListConversationsOptions extends PaginationOptions {
+    status?: ConversationStatus;
+    /** Only conversations assigned to this user. */
+    assignee_user_id?: string;
+    /** Match against visitor name/email. */
+    requester?: string;
+    /** Free-text search query. */
+    query?: string;
+    /** Only conversations on these channels (serialized as CSV). */
+    channels?: string[];
+}
+/** Input for updating a conversation's status and/or assignee. At least one field is required. */
+interface UpdateConversationInput {
+    status?: ConversationStatus;
+    /** User ID to assign, or `null` to unassign. */
+    assignee_user_id?: string | null;
+}
+/** Result of a conversation update. */
+interface ConversationUpdateResult {
+    id: string;
+    status: ConversationStatus;
+    assignee_user_id: string | null;
+}
+/** Input for sending an operator reply (or internal note) into a conversation. */
+interface CreateReplyInput {
+    conversation_id: string;
+    /** Message body (max 20,000 characters). */
+    body: string;
+    /** `note` = operator-internal note (not delivered to the customer). Default `chat`. */
+    message_type?: "chat" | "note";
+    /** Agent display name for bridged replies (shown in widget + inbox). */
+    author_name?: string;
+}
+/** Result returned after creating a reply (HTTP 201). */
+interface ReplyCreateResult {
+    id: string;
+    conversation_id: string;
+    status: string;
+}
+
+/** A webhook endpoint registered in the workspace. */
+interface WebhookEndpoint {
+    id: string;
+    name: string;
+    /** Destination URL (must be https). */
+    url: string;
+    enabled: boolean;
+    /** Subscribed event types. Empty array = all events. */
+    event_types: string[];
+    /** Channel-type filter (e.g. ['widget', 'whatsapp']), or `null` for all channels. */
+    channels: string[] | null;
+    /** Channel-connection filter, or `null` for all connections. */
+    channel_connection_ids: string[] | null;
+    /** Last 4 characters of the signing secret, for identification. */
+    secret_last4: string;
+    consecutive_failures: number;
+    /** Unix timestamps in milliseconds, or `null` if never. */
+    last_delivery_at: number | null;
+    last_success_at: number | null;
+    last_error_at: number | null;
+    last_error: string | null;
+    created_at: number;
+    updated_at: number;
+    /**
+     * Full signing secret (`whsec_…`) — present ONLY in the `create` response.
+     * It is returned exactly once and can never be retrieved again. Store it
+     * securely immediately; you need it to verify delivery signatures.
+     */
+    secret?: string;
+}
+/** Input for creating a webhook endpoint. */
+interface CreateWebhookInput {
+    /** Display name (max 100 characters). */
+    name: string;
+    /** Destination URL — must be https. */
+    url: string;
+    /** Event types to subscribe to (e.g. 'helpdesk.message_received'). Empty = all. */
+    event_types: string[];
+    /** Restrict to these channel types (e.g. ['widget', 'whatsapp']). */
+    channels?: string[];
+    /** Restrict to these channel connection IDs. */
+    channel_connection_ids?: string[];
+}
+/**
+ * Input for updating a webhook endpoint. Only provided fields change.
+ * Pass `null` for `channels` or `channel_connection_ids` to CLEAR an existing
+ * filter (deliver for all channels / all accounts again); omitting the field
+ * leaves the current filter unchanged.
+ */
+interface UpdateWebhookInput {
+    name?: string;
+    url?: string;
+    event_types?: string[];
+    channels?: string[] | null;
+    channel_connection_ids?: string[] | null;
+    enabled?: boolean;
+}
+/** Result of deleting a webhook endpoint. */
+interface WebhookDeleteResult {
+    id: string;
+    status: string;
+}
+/**
+ * A delivery attempt record for a webhook endpoint.
+ *
+ * `id` is the same value sent as the `X-Medal-Delivery-Id` and
+ * `Idempotency-Key` headers on the outbound request, so you can join your own
+ * receiving log to this listing exactly.
+ *
+ * **Deliveries never carry payload bodies.** The event payload can contain
+ * customer PII, so it is not returned here — use the correlation fields below
+ * to look the subject up through the regular API instead.
+ *
+ * All correlation fields (`resource_id`, `conversation_id`, `message_id`,
+ * `connection_ref`, `channel`, `channel_connection_id`) are derived from the
+ * stored event and **fail closed to `null`** whenever no canonical event
+ * exists for the delivery — e.g. `test.ping` deliveries, or events that have
+ * aged out of retention. Always null-check before using them.
+ */
+interface WebhookDelivery {
+    id: string;
+    event_type: string;
+    /**
+     * Primary subject id of the announced event (a message id for message
+     * events, a connection id for channel lifecycle events, …), or `null`.
+     */
+    resource_id: string | null;
+    /** Helpdesk conversation the event belongs to, or `null`. */
+    conversation_id: string | null;
+    /** Helpdesk message the event belongs to, or `null`. */
+    message_id: string | null;
+    /** Opaque connection reference carried by the event, or `null`. */
+    connection_ref: string | null;
+    /** Channel type (e.g. `telegram_inbox`, `widget`), or `null`. */
+    channel: string | null;
+    /** Channel connection the event belongs to, or `null`. */
+    channel_connection_id: string | null;
+    status: "pending" | "delivered" | "dead_letter";
+    attempt_count: number;
+    /** Unix timestamp in milliseconds of the next retry, or `null`. */
+    next_attempt_at: number | null;
+    response_status: number | null;
+    duration_ms: number | null;
+    last_error: string | null;
+    /** Unix timestamp in milliseconds, or `null` if not delivered. */
+    delivered_at: number | null;
+    created_at: number;
+}
+/**
+ * Options for listing recent deliveries.
+ *
+ * This endpoint is **not** cursor-paginated — it returns the most recent
+ * deliveries only, capped by `limit`. There is no `cursor` parameter; to keep
+ * a durable record, ingest deliveries as they arrive (or poll and de-duplicate
+ * on the delivery `id`).
+ */
+interface ListDeliveriesOptions {
+    limit?: number;
+}
+/** Result returned after queuing a test delivery (HTTP 202). */
+interface WebhookTestResult {
+    delivery_id: string;
+    status: string;
+}
+
+/**
+ * Capability confirmation types.
+ *
+ * Medal's confirmable write routes require BOTH an `Idempotency-Key` and an
+ * `X-Capability-Confirmation` token whenever the calling credential holds the
+ * capability scope *directly* — which is the case for every correctly-scoped
+ * partner key and OAuth grant. (API keys carrying only legacy scopes are
+ * exempt.) The token is minted by `POST /api/v1/capability-confirmations` and
+ * is bound to the workspace, the auth subject, the HTTP method + path, the
+ * capability's required scopes, and the idempotency key.
+ */
+/**
+ * Confirmable capability ids backing the write routes this SDK exposes.
+ *
+ * Mirrors the server-side capability registry. Each id maps to exactly one
+ * method + path template — see {@link CAPABILITY_ROUTES}.
+ */
+declare const CAPABILITY_IDS: readonly ["channel.connect_link.create.execute", "channel.connect_link.revoke.execute", "channel.connection.disconnect.execute", "helpdesk.conversation.reply.execute", "helpdesk.conversation.update.execute", "helpdesk.webhook.create.execute", "helpdesk.webhook.update.execute", "helpdesk.webhook.delete.execute"];
+/** A confirmable capability id backing an SDK write route. */
+type CapabilityId = (typeof CAPABILITY_IDS)[number];
+/** The API route a capability confirms, as registered server-side. */
+interface CapabilityRoute {
+    method: "POST" | "PATCH" | "DELETE";
+    /** Path template; `{id}` is filled from `path_params.id`. */
+    path_template: string;
+}
+/**
+ * Method + path template for each confirmable capability.
+ *
+ * The server resolves the same mapping from its capability registry — this
+ * copy exists so the SDK can build human-readable previews and supply
+ * `path_params` without a round trip.
+ */
+declare const CAPABILITY_ROUTES: Record<CapabilityId, CapabilityRoute>;
+/** Primitive accepted as a capability path parameter value. */
+type CapabilityPathParamValue = string | number | boolean;
+/** Input for `POST /api/v1/capability-confirmations`. */
+interface IssueCapabilityConfirmationInput {
+    /**
+     * Capability to confirm. Unknown ids are rejected with
+     * `CAPABILITY_NOT_FOUND`; read-only or non-confirmable capabilities with
+     * `CAPABILITY_NOT_CONFIRMABLE`.
+     */
+    capability_id: CapabilityId | (string & {});
+    /**
+     * Concrete `/api/v1/...` path the token should be bound to. Optional when
+     * the capability has exactly one API target (all capabilities in
+     * {@link CAPABILITY_ROUTES} do); required when it has several. Must match a
+     * path built from the capability's own templates.
+     */
+    api_path?: string;
+    /** Values for the capability path template's parameters, e.g. `{ id: 'wh_1' }`. */
+    path_params?: Record<string, CapabilityPathParamValue>;
+    /**
+     * The exact `Idempotency-Key` you will send on the confirmed write. The
+     * token is bound to it — a mismatch is rejected. Required for every
+     * capability in {@link CAPABILITY_ROUTES}.
+     */
+    idempotency_key?: string;
+    /**
+     * Human-readable description of the action being approved (1–4000 chars).
+     * This is the text your user saw and approved, and it is retained for audit.
+     */
+    preview_summary: string;
+    /**
+     * Must be `true`.
+     *
+     * **This asserts that a human on your side approved this specific action.**
+     * Do not send it to rubber-stamp unattended writes — it is the audit record
+     * that a person, not a script, authorised the change.
+     */
+    user_approved: true;
+}
+/** A minted capability confirmation token. */
+interface CapabilityConfirmation {
+    /** Send this as the `X-Capability-Confirmation` header on the write. */
+    confirmation_token: string;
+    token_type: "medal_capability_confirmation";
+    capability_id: string;
+    /** HTTP method the token is bound to. */
+    method: string;
+    /** Concrete API path the token is bound to. */
+    path: string;
+    /** Capability scopes the token was minted against. */
+    required_scopes: string[];
+    /** Idempotency key the token is bound to, or `null` if it was minted unbound. */
+    idempotency_key: string | null;
+    /** Lifetime in seconds (60–900). */
+    expires_in: number;
+    /** ISO-8601 expiry timestamp. */
+    expires_at: string;
+    /** Echo of the submitted `preview_summary`. */
+    preview_summary: string;
+}
+/**
+ * Request body type for each confirmable capability.
+ *
+ * `undefined` for routes that take no request body (the `DELETE` routes).
+ */
+interface CapabilityWriteBodies {
+    "channel.connect_link.create.execute": CreateConnectLinkInput;
+    "channel.connect_link.revoke.execute": undefined;
+    "channel.connection.disconnect.execute": undefined;
+    "helpdesk.conversation.reply.execute": CreateReplyInput;
+    "helpdesk.conversation.update.execute": UpdateConversationInput;
+    "helpdesk.webhook.create.execute": CreateWebhookInput;
+    "helpdesk.webhook.update.execute": UpdateWebhookInput;
+    "helpdesk.webhook.delete.execute": undefined;
+}
+/**
+ * A capability paired with the request body for that exact route.
+ *
+ * Modelled as a discriminated union rather than two independent parameters so
+ * the pair cannot be decoupled: passing a `helpdesk.conversation.reply.execute`
+ * id alongside a webhook payload is a compile error, even when the id's static
+ * type is the full {@link CapabilityId} union.
+ */
+type CapabilityWriteRequest = {
+    [K in CapabilityId]: {
+        /** Capability about to be confirmed. */
+        capabilityId: K;
+        /** The request body of the pending write, or `undefined` for `DELETE` routes. */
+        body: CapabilityWriteBodies[K];
+    };
+}[CapabilityId];
+/** Fields common to every {@link AutoConfirmContext} variant. */
+interface AutoConfirmContextBase {
+    /** HTTP method of the write. */
+    method: string;
+    /** Resolved API path of the write (path params substituted + encoded). */
+    path: string;
+    /** Path parameters used to resolve `path`, if any. */
+    pathParams?: Record<string, CapabilityPathParamValue>;
+    /** Idempotency key that will be bound to the token and sent on the write. */
+    idempotencyKey: string;
+}
+/**
+ * Context handed to an {@link AutoConfirmOptions.previewSummary} callback.
+ *
+ * A discriminated union on `capabilityId` — narrow on it to get the exact
+ * `body` type for that route:
+ *
+ * ```ts
+ * previewSummary: (ctx) => {
+ *   if (ctx.capabilityId === 'helpdesk.conversation.reply.execute') {
+ *     // ctx.body is CreateReplyInput here
+ *     return `Reply to ${ctx.body.conversation_id}: ${ctx.body.body}`;
+ *   }
+ *   return `${ctx.method} ${ctx.path}`;
+ * }
+ * ```
+ *
+ * `body` is the **exact object you passed to the SDK method**, by reference
+ * and unmodified — it is your own payload, so there is nothing to redact and
+ * nothing crosses a tenant boundary. Treat it as read-only: mutating it from
+ * the callback would change what is actually sent.
+ */
+type AutoConfirmContext = AutoConfirmContextBase & CapabilityWriteRequest;
+/**
+ * Opt-in auto-confirmation.
+ *
+ * When configured, the SDK mints an idempotency key and a confirmation token
+ * for you before each confirmable write, then attaches both headers.
+ *
+ * **This is not a bypass.** Every minted token carries
+ * `user_approved: true`, which asserts that *your own user* approved that
+ * specific action — the `preview_summary` you return is the audit record of
+ * what they approved. Only enable this on a code path where a human really did
+ * approve the write. Never wire it into unattended automation.
+ */
+interface AutoConfirmOptions {
+    /**
+     * Build the `preview_summary` for the pending write. Must return a
+     * non-empty string describing what the user approved; returning blank text
+     * throws instead of asserting an approval that has no description.
+     *
+     * The context includes the pending request `body`, so the summary can name
+     * the specific action rather than the route — narrow on
+     * `context.capabilityId` to get the exact payload type. Prefer a
+     * payload-aware summary: `"Reply to conv_1: 'Refund issued'"` is an audit
+     * record, `"POST /api/v1/helpdesk/replies"` is not.
+     *
+     * The server caps `preview_summary` at 4000 characters, so summarise the
+     * payload rather than serialising it wholesale.
+     */
+    previewSummary: (context: AutoConfirmContext) => string;
+}
+
+/** Configuration for the low-level HTTP client. */
+interface ClientConfig {
+    baseUrl: string;
+    token: string;
+    workspaceId?: string;
+    timeout: number;
+    userAgent: string;
+}
+/** Per-request options for write operations. */
+interface RequestOptions {
+    /**
+     * Idempotency key sent as the `Idempotency-Key` header. Retries with the
+     * same key return the original result instead of repeating the operation.
+     * Required by some endpoints for capability-scoped tokens (e.g. helpdesk
+     * replies, webhook creation).
+     */
+    idempotencyKey?: string;
+    /**
+     * Capability confirmation token sent as the `X-Capability-Confirmation`
+     * header. Required alongside `idempotencyKey` when a token granted a
+     * capability-style scope directly (e.g. `helpdesk.webhook.manage`) executes
+     * a confirmable write route. Obtain one from
+     * `POST /api/v1/capability-confirmations`. API keys with legacy scopes do
+     * not need it.
+     */
+    capabilityConfirmation?: string;
+    /**
+     * Opt in to (or out of) automatic capability confirmation for this call.
+     *
+     * Supply `{ previewSummary }` to have the SDK mint the idempotency key and
+     * the `X-Capability-Confirmation` token itself; pass `false` to suppress a
+     * client-level `autoConfirmCapabilities` default. Defaults to the client
+     * setting, which itself defaults to OFF.
+     *
+     * Auto-confirmation sends `user_approved: true` on your behalf, asserting
+     * that a human on your side approved this exact action — only use it where
+     * that is true.
+     *
+     * Ignored on routes that do not require a capability confirmation.
+     */
+    autoConfirm?: AutoConfirmOptions | false;
+}
+/**
+ * Low-level HTTP client used by all resource classes.
+ * Handles authentication, retries, timeout, and error parsing.
+ */
+declare class BaseClient {
+    /** Resolved client configuration. */
+    readonly config: ClientConfig;
+    constructor(config: ClientConfig);
+    /** Execute an authenticated GET request and return the parsed JSON body. */
+    get<T>(path: string, params?: Record<string, string | undefined>): Promise<T>;
+    /** Execute an authenticated POST request with a JSON body. */
+    post<T>(path: string, body?: unknown, options?: RequestOptions): Promise<T>;
+    /** Execute an authenticated PATCH request with a JSON body. */
+    patch<T>(path: string, body: unknown, options?: RequestOptions): Promise<T>;
+    /** Execute an authenticated DELETE request. */
+    delete<T>(path: string, options?: RequestOptions): Promise<T>;
+    private writeHeaders;
+    private buildUrl;
+    private request;
+}
+
+/**
+ * Mint short-lived capability confirmation tokens.
+ *
+ * Medal's confirmable write routes (connect links, channel connections,
+ * helpdesk replies/updates, webhook endpoint writes) require BOTH an
+ * `Idempotency-Key` and an `X-Capability-Confirmation` header when the calling
+ * credential holds the capability scope *directly* — which is the case for
+ * every correctly-scoped partner key. This resource issues that header value.
+ *
+ * @example Explicit flow
+ * ```ts
+ * const idempotencyKey = crypto.randomUUID();
+ * const { data: confirmation } = await medal.capabilityConfirmations.create({
+ *   capability_id: 'channel.connect_link.create.execute',
+ *   idempotency_key: idempotencyKey,
+ *   preview_summary: 'Mint a Telegram connect link for Acme Support',
+ *   user_approved: true, // a human on your side approved this exact action
+ * });
+ *
+ * await medal.channels.connectLinks.create(
+ *   { channel_type: 'telegram_inbox', label: 'Acme Support' },
+ *   { idempotencyKey, capabilityConfirmation: confirmation.confirmation_token },
+ * );
+ * ```
+ */
+declare class CapabilityConfirmations {
+    private client;
+    constructor(client: BaseClient);
+    /**
+     * Issue a confirmation token for one pending write.
+     *
+     * The token is bound to the workspace, the auth subject, the capability's
+     * method + path, its required scopes, and `idempotency_key` — so it is
+     * usable exactly once, for exactly the write it describes, and expires
+     * within 15 minutes.
+     *
+     * Setting `user_approved: true` asserts that a human on your side approved
+     * this specific action. `preview_summary` is what they approved, and is
+     * retained for audit — write it for a human reader, not a log parser.
+     */
+    create(input: IssueCapabilityConfirmationInput): Promise<ApiResponse<CapabilityConfirmation>>;
 }
-/** Pagination options for list endpoints */
-interface PaginationOptions {
-    limit?: number;
-    cursor?: string;
+
+/**
+ * Resolves the `Idempotency-Key` + `X-Capability-Confirmation` pair required
+ * by confirmable write routes.
+ *
+ * Auto-confirmation is OFF unless the integrator opts in — either globally via
+ * the `Medal` constructor's `autoConfirmCapabilities`, or per call via
+ * `{ autoConfirm: { previewSummary } }`. When it is off this is a pass-through:
+ * whatever headers the caller supplied are what gets sent.
+ */
+declare class CapabilityConfirmer {
+    private confirmations;
+    private defaults?;
+    constructor(confirmations: CapabilityConfirmations, defaults?: AutoConfirmOptions | undefined);
+    /**
+     * Return the request options to use for a confirmable write, minting the
+     * idempotency key and confirmation token first when auto-confirm is active.
+     *
+     * `body` is the pending request payload (`undefined` for `DELETE` routes).
+     * It is handed to the `previewSummary` callback by reference so the summary
+     * can describe the specific action, not just the route — it is the caller's
+     * own payload, so it is passed through unmodified and unredacted.
+     */
+    prepare(request: CapabilityWriteRequest, pathParams?: Record<string, CapabilityPathParamValue>, options?: RequestOptions): Promise<RequestOptions | undefined>;
 }
 
 /** Mint, list, and revoke hosted connect links. */
 declare class ChannelConnectLinks {
     private client;
-    constructor(client: BaseClient);
+    private confirmer;
+    constructor(client: BaseClient, confirmer: CapabilityConfirmer);
     /**
      * Mint a single-use hosted connect link. Returns HTTP 201.
      *
@@ -161,17 +667,37 @@ declare class ChannelConnectLinks {
      * need the workspace `admin` role.
      */
     create(input: CreateConnectLinkInput, options?: RequestOptions): Promise<ApiResponse<ConnectLinkCreateResult>>;
-    /** List the workspace's connect links (tokens are never returned). */
-    list(options?: ListConnectLinksOptions): Promise<ApiResponse<ConnectLink[]>>;
+    /**
+     * List the workspace's connect links (tokens are never returned), newest
+     * first, with cursor-based pagination.
+     *
+     * `limit` defaults to 50 server-side and is capped at 100. Follow
+     * `pagination.next_cursor` while `pagination.has_more` is true.
+     *
+     * The `channel_type` / `status` filters are applied **within** each page,
+     * so a page may hold fewer than `limit` items while `has_more` is still
+     * true — drive the loop off `has_more`, never off the item count.
+     */
+    list(options?: ListConnectLinksOptions): Promise<PaginatedResponse<ConnectLink>>;
     /** Revoke a pending connect link so it can no longer be consumed. */
     revoke(id: string, options?: RequestOptions): Promise<ApiResponse<ConnectLinkRevokeResult>>;
 }
 /** List and disconnect the workspace's channel connections. */
 declare class ChannelConnections {
     private client;
-    constructor(client: BaseClient);
-    /** List the workspace's channel connections (generic, channel-agnostic shape). */
-    list(): Promise<ApiResponse<ChannelConnection[]>>;
+    private confirmer;
+    constructor(client: BaseClient, confirmer: CapabilityConfirmer);
+    /**
+     * List the workspace's channel connections (generic, channel-agnostic
+     * shape), newest first, with cursor-based pagination.
+     *
+     * `limit` defaults to 50 server-side and is capped at 100. Follow
+     * `pagination.next_cursor` while `pagination.has_more` is true. Rows that
+     * are not projectable as connections are dropped within the page, so a page
+     * may hold fewer than `limit` items while `has_more` is still true — drive
+     * the loop off `has_more`, never off the item count.
+     */
+    list(options?: PaginationOptions): Promise<PaginatedResponse<ChannelConnection>>;
     /**
      * Disconnect a connected channel account (best-effort platform logout, then
      * local revoke). Emits a `helpdesk.channel_disconnected` webhook event with
@@ -188,7 +714,7 @@ declare class ChannelConnections {
 declare class Channels {
     readonly connectLinks: ChannelConnectLinks;
     readonly connections: ChannelConnections;
-    constructor(client: BaseClient);
+    constructor(client: BaseClient, confirmer?: CapabilityConfirmer);
 }
 
 /** A contact in the workspace CRM. */
@@ -650,94 +1176,11 @@ declare class Gdpr {
     }>;
 }
 
-/** Lifecycle status of a helpdesk conversation. */
-type ConversationStatus = "open" | "snoozed" | "closed";
-/** Who authored a helpdesk message. */
-type MessageAuthorType = "visitor" | "operator" | "ai" | "system";
-/** Kind of helpdesk message. `note` is operator-internal and never delivered to the customer. */
-type HelpdeskMessageType = "chat" | "email" | "note";
-/** A helpdesk conversation across any connected channel (widget, email, social DMs, …). */
-interface Conversation {
-    id: string;
-    /** Channel type, e.g. 'widget', 'instagram', 'messenger', 'whatsapp', 'email'. */
-    channel: string;
-    channel_connection_id: string | null;
-    status: ConversationStatus;
-    subject: string | null;
-    assignee_user_id: string | null;
-    contact_id: string | null;
-    visitor_name: string | null;
-    visitor_email: string | null;
-    external_conversation_id: string | null;
-    channel_account_id: string | null;
-    message_count: number;
-    unread_for_operator: number;
-    /** Unix timestamp in milliseconds. */
-    last_message_at: number;
-    last_message_preview: string | null;
-    last_message_author_type: MessageAuthorType | null;
-    /** Unix timestamp in milliseconds. */
-    created_at: number;
-    /** Unix timestamp in milliseconds. */
-    updated_at: number;
-}
-/** A single message inside a helpdesk conversation. */
-interface ConversationMessage {
-    id: string;
-    conversation_id: string;
-    author_type: MessageAuthorType;
-    message_type: HelpdeskMessageType;
-    author_user_id: string | null;
-    author_name: string | null;
-    body: string;
-    /** Unix timestamp in milliseconds. */
-    created_at: number;
-}
-/** Filters for listing/searching helpdesk conversations. */
-interface ListConversationsOptions extends PaginationOptions {
-    status?: ConversationStatus;
-    /** Only conversations assigned to this user. */
-    assignee_user_id?: string;
-    /** Match against visitor name/email. */
-    requester?: string;
-    /** Free-text search query. */
-    query?: string;
-    /** Only conversations on these channels (serialized as CSV). */
-    channels?: string[];
-}
-/** Input for updating a conversation's status and/or assignee. At least one field is required. */
-interface UpdateConversationInput {
-    status?: ConversationStatus;
-    /** User ID to assign, or `null` to unassign. */
-    assignee_user_id?: string | null;
-}
-/** Result of a conversation update. */
-interface ConversationUpdateResult {
-    id: string;
-    status: ConversationStatus;
-    assignee_user_id: string | null;
-}
-/** Input for sending an operator reply (or internal note) into a conversation. */
-interface CreateReplyInput {
-    conversation_id: string;
-    /** Message body (max 20,000 characters). */
-    body: string;
-    /** `note` = operator-internal note (not delivered to the customer). Default `chat`. */
-    message_type?: "chat" | "note";
-    /** Agent display name for bridged replies (shown in widget + inbox). */
-    author_name?: string;
-}
-/** Result returned after creating a reply (HTTP 201). */
-interface ReplyCreateResult {
-    id: string;
-    conversation_id: string;
-    status: string;
-}
-
 /** Browse and manage helpdesk conversations. */
 declare class HelpdeskConversations {
     private client;
-    constructor(client: BaseClient);
+    private confirmer;
+    constructor(client: BaseClient, confirmer: CapabilityConfirmer);
     /** List/search conversations with cursor-based pagination and optional filters. */
     list(options?: ListConversationsOptions): Promise<PaginatedResponse<Conversation>>;
     /** Get a conversation by ID. */
@@ -750,7 +1193,8 @@ declare class HelpdeskConversations {
 /** Send operator replies (or internal notes) into conversations. */
 declare class HelpdeskReplies {
     private client;
-    constructor(client: BaseClient);
+    private confirmer;
+    constructor(client: BaseClient, confirmer: CapabilityConfirmer);
     /**
      * Send an operator reply or internal note. Returns HTTP 201.
      *
@@ -763,7 +1207,7 @@ declare class HelpdeskReplies {
 declare class Helpdesk {
     readonly conversations: HelpdeskConversations;
     readonly replies: HelpdeskReplies;
-    constructor(client: BaseClient);
+    constructor(client: BaseClient, confirmer?: CapabilityConfirmer);
 }
 
 /** A post in the workspace (list view). */
@@ -872,97 +1316,168 @@ declare class Posts {
     channels(): Promise<ApiResponse<Channel[]>>;
 }
 
-/** A webhook endpoint registered in the workspace. */
-interface WebhookEndpoint {
-    id: string;
-    name: string;
-    /** Destination URL (must be https). */
-    url: string;
-    enabled: boolean;
-    /** Subscribed event types. Empty array = all events. */
-    event_types: string[];
-    /** Channel-type filter (e.g. ['widget', 'whatsapp']), or `null` for all channels. */
-    channels: string[] | null;
-    /** Channel-connection filter, or `null` for all connections. */
-    channel_connection_ids: string[] | null;
-    /** Last 4 characters of the signing secret, for identification. */
-    secret_last4: string;
-    consecutive_failures: number;
-    /** Unix timestamps in milliseconds, or `null` if never. */
-    last_delivery_at: number | null;
-    last_success_at: number | null;
-    last_error_at: number | null;
-    last_error: string | null;
-    created_at: number;
-    updated_at: number;
-    /**
-     * Full signing secret (`whsec_…`) — present ONLY in the `create` response.
-     * It is returned exactly once and can never be retrieved again. Store it
-     * securely immediately; you need it to verify delivery signatures.
-     */
-    secret?: string;
+/** Input for creating a scan — provide exactly ONE of `url`, `orgnr`, or `name`. */
+interface ScanCreateInput {
+    /** Website URL to scan directly (https is assumed when the scheme is missing). */
+    url?: string;
+    /** 9-digit Norwegian organisation number — resolved via the public registry. */
+    orgnr?: string;
+    /** Company name — resolved to the best registry match before scanning. */
+    name?: string;
 }
-/** Input for creating a webhook endpoint. */
-interface CreateWebhookInput {
-    /** Display name (max 100 characters). */
+/** Reference returned when a scan job is queued (HTTP 202). */
+interface ScanCreateResult {
+    id: string;
+    status: "pending" | string;
+    message?: string;
+}
+/** Lifecycle of an asynchronous scan job. */
+type ScanStatus = "pending" | "running" | "done" | "failed";
+/** A company-registry search hit from `scan.companies()`. */
+interface ScanCompany {
+    orgnr: string;
     name: string;
-    /** Destination URL — must be https. */
-    url: string;
-    /** Event types to subscribe to (e.g. 'helpdesk.message_received'). Empty = all. */
-    event_types: string[];
-    /** Restrict to these channel types (e.g. ['widget', 'whatsapp']). */
-    channels?: string[];
-    /** Restrict to these channel connection IDs. */
-    channel_connection_ids?: string[];
+    org_form: string | null;
+    industry: string | null;
+    city: string | null;
+    website: string | null;
+}
+/** Nettskår sub-scores (0–100); null = the axis could not be measured. */
+interface ScanSubScores {
+    fart: number | null;
+    google: number | null;
+    ai: number | null;
+    trygghet: number | null;
+    omdomme: number | null;
 }
 /**
- * Input for updating a webhook endpoint. Only provided fields change.
- * Pass `null` for `channels` or `channel_connection_ids` to CLEAR an existing
- * filter (deliver for all channels / all accounts again); omitting the field
- * leaves the current filter unchanged.
+ * The versioned scan findings payload. Shapes within are additive per
+ * `version`; string unions stay open (`| string`) so new detections never
+ * break consumers.
  */
-interface UpdateWebhookInput {
-    name?: string;
-    url?: string;
-    event_types?: string[];
-    channels?: string[] | null;
-    channel_connection_ids?: string[] | null;
-    enabled?: boolean;
-}
-/** Result of deleting a webhook endpoint. */
-interface WebhookDeleteResult {
-    id: string;
-    status: string;
+interface ScanResultPayload {
+    version: number;
+    /** Weighted composite score (0–100); null when nothing could be measured. */
+    nettskaar: number | null;
+    subScores: ScanSubScores;
+    registry?: {
+        orgnr: string;
+        navn: string;
+        organisasjonsform?: string;
+        naeringBeskrivelse?: string;
+        antallAnsatte?: number;
+        poststed?: string;
+    };
+    signals: {
+        version: number;
+        tech: string[];
+        pixels: string[];
+        consent: string[];
+        commerce: string[];
+        marketing?: string[];
+        social: Record<string, string | undefined>;
+        emailProvider?: string;
+        unreachable?: boolean;
+        inconclusive?: boolean;
+        dnsPending?: boolean;
+    };
+    pagespeed?: {
+        mobileScore?: number;
+        lcpMs?: number;
+        cls?: number;
+        inpMs?: number;
+        error?: string;
+    };
+    seo: {
+        titleLength: number;
+        metaDescriptionLength: number;
+        h1Count: number;
+        hasOg: boolean;
+        hasCanonical: boolean;
+        hreflangCount: number;
+        hasViewport: boolean;
+    };
+    ai: {
+        /** null = llms.txt could not be checked (unknown), false = confirmed absent. */
+        llmsTxtFound: boolean | null;
+        /** null = robots.txt could not be read (unknown, not "none blocked"). */
+        blockedBots: string[] | null;
+        jsonLdTypes: string[];
+        faqFound: boolean;
+    };
+    gdpr: {
+        /**
+         * true = tracking pixels load with no consent platform; false = clean or
+         * a consent platform is present; null = unknown (unreachable / JS-only).
+         */
+        trackingBeforeConsent: boolean | null;
+        cmp: string | null;
+        privacyPageFound: boolean;
+    };
+    mailAuth: {
+        spf: "ok" | "missing" | "unknown" | string;
+        dmarc: "ok" | "missing" | "unknown" | string;
+        dmarcPolicy?: string;
+    };
+    httpsOk: boolean;
 }
-/** A delivery attempt record for a webhook endpoint. */
-interface WebhookDelivery {
+/** A scan job as returned by `scan.get()`. */
+interface ScanJob {
     id: string;
-    event_type: string;
-    status: "pending" | "delivered" | "dead_letter";
-    attempt_count: number;
-    /** Unix timestamp in milliseconds of the next retry, or `null`. */
-    next_attempt_at: number | null;
-    response_status: number | null;
-    duration_ms: number | null;
-    last_error: string | null;
-    /** Unix timestamp in milliseconds, or `null` if not delivered. */
-    delivered_at: number | null;
-    created_at: number;
+    status: ScanStatus | string;
+    input: ScanCreateInput;
+    resolved: {
+        orgnr?: string;
+        companyName?: string;
+        websiteUrl?: string;
+    } | null;
+    result: ScanResultPayload | null;
+    /** Public-safe failure code (`company_not_found`, `no_website`, …). */
+    error: string | null;
+    created_at: string | null;
+    finished_at: string | null;
 }
-/** Options for listing recent deliveries. */
-interface ListDeliveriesOptions {
-    limit?: number;
+/** Options for `scan.waitForResult()`. */
+interface WaitForScanOptions {
+    /** Poll interval in milliseconds. Default 2500. */
+    intervalMs?: number;
+    /** Give up after this long. Default 120000 (scans normally finish in ~30 s). */
+    timeoutMs?: number;
 }
-/** Result returned after queuing a test delivery (HTTP 202). */
-interface WebhookTestResult {
-    delivery_id: string;
-    status: string;
+
+/**
+ * Company & website scans (Nettsjekk) — score a Norwegian company's web
+ * presence (performance, SEO, GDPR consent, AI visibility, mail auth) from a
+ * URL, an organisation number, or a company name.
+ */
+declare class Scan {
+    private client;
+    constructor(client: BaseClient);
+    /**
+     * Queue a scan. Provide exactly one of `url`, `orgnr`, or `name`.
+     * Runs asynchronously — poll with `get()` or use `waitForResult()`.
+     *
+     * @throws Error before any request when zero or several selectors are set —
+     * the server would reject the body anyway; failing locally is clearer.
+     */
+    create(input: ScanCreateInput): Promise<ApiResponse<ScanCreateResult>>;
+    /** Get a scan job's status and, once done, its findings payload. */
+    get(id: string): Promise<ApiResponse<ScanJob>>;
+    /** Search the Norwegian company registry by name (typeahead, top 5 hits). */
+    companies(q: string): Promise<ApiResponse<ScanCompany[]>>;
+    /**
+     * Poll a scan until it settles. Resolves with the job for both `done` and
+     * `failed` (check `job.error`); throws only when the deadline passes while
+     * the scan is still pending/running.
+     */
+    waitForResult(id: string, options?: WaitForScanOptions): Promise<ScanJob>;
 }
 
 /** Manage webhook endpoints and inspect their deliveries. */
 declare class Webhooks {
     private client;
-    constructor(client: BaseClient);
+    private confirmer;
+    constructor(client: BaseClient, confirmer?: CapabilityConfirmer);
     /** List all webhook endpoints in the workspace. */
     list(): Promise<ApiResponse<WebhookEndpoint[]>>;
     /**
@@ -1227,6 +1742,37 @@ interface MedalOptions {
      * OAuth tokens can access multiple workspaces, so you must specify which one.
      */
     workspaceId?: string;
+    /**
+     * Opt in to automatic capability confirmation for confirmable writes.
+     * **Defaults to OFF.**
+     *
+     * Medal's confirmable write routes (connect links, channel connections,
+     * helpdesk replies/updates, webhook endpoint writes) require BOTH an
+     * `Idempotency-Key` and an `X-Capability-Confirmation` token whenever the
+     * credential holds the capability scope directly — which is the case for
+     * every correctly-scoped partner key. With this option set, the SDK mints
+     * both for you before each such write instead of making you hand-roll
+     * `POST /api/v1/capability-confirmations`.
+     *
+     * **Read before enabling:** each minted token carries `user_approved: true`,
+     * which asserts to Medal that *a human on your side approved that specific
+     * action*, and the `previewSummary` you return is retained as the audit
+     * record of what they approved. Enable it only on code paths where that is
+     * genuinely true — never to rubber-stamp unattended writes. Pass
+     * `{ autoConfirm: false }` on an individual call to opt out again, or use
+     * `medal.capabilityConfirmations.create(...)` for full manual control.
+     *
+     * @example
+     * ```ts
+     * const medal = new Medal('medal_xxx', {
+     *   autoConfirmCapabilities: {
+     *     previewSummary: (ctx) =>
+     *       `${operator.email} approved ${ctx.method} ${ctx.path}`,
+     *   },
+     * });
+     * ```
+     */
+    autoConfirmCapabilities?: AutoConfirmOptions;
 }
 /**
  * Medal Social SDK client.
@@ -1275,6 +1821,7 @@ interface MedalOptions {
  * ```
  */
 declare class Medal {
+    readonly capabilityConfirmations: CapabilityConfirmations;
     readonly channels: Channels;
     readonly emails: Emails;
     readonly contacts: Contacts;
@@ -1282,6 +1829,7 @@ declare class Medal {
     readonly gdpr: Gdpr;
     readonly helpdesk: Helpdesk;
     readonly posts: Posts;
+    readonly scan: Scan;
     readonly webhooks: Webhooks;
     readonly workspaces: Workspaces;
     constructor(token: string, options?: MedalOptions);
@@ -1290,4 +1838,4 @@ declare class Medal {
 /** Convenience factory — equivalent to `new Medal(apiKey, options)`. */
 declare function createMedalClient(apiKey: string, options?: MedalOptions): Medal;
 
-export { type Activity, type AddNoteInput, type ApiResponse, BaseClient, type BatchSendInput, type BatchSendResult, type BatchSendSummary, type Channel, type ChannelConnectedEvent, type ChannelConnection, type ChannelConnectionDisconnectResult, type ChannelConnectionState, type ChannelDisconnectReason, type ChannelDisconnectedEvent, Channels, type ConnectLink, type ConnectLinkCreateResult, type ConnectLinkRevokeResult, type ConnectLinkStatus, type ConsentRecord, type ConsentResult, type ConsentType, type Contact, type ContactConsents, type ContactCreateResult, type ContactNoteResult, type ContactRemoveResult, type ContactStatus, type ContactUpdateResult, Contacts, type Conversation, type ConversationAssignedEvent, type ConversationCreatedEvent, type ConversationMessage, type ConversationStatus, type ConversationStatusChangedEvent, type ConversationUpdateResult, type CookieCategoryConsent, type CookieConsentInput, type CreateConnectLinkInput, type CreateContactInput, type CreateDealInput, type CreatePostInput, type CreateReplyInput, type CreateWebhookInput, DEFAULT_WEBHOOK_TOLERANCE_MS, type Deal, type DealCreateResult, type DealRemoveResult, type DealStatus, type DealUpdateResult, Deals, type EmailSend, type EmailSendResult, type EmailStatus, type EmailTemplate, type EmailTemplateDetail, Emails, Gdpr, type GdprExport, type GetTemplateOptions, Helpdesk, type HelpdeskMessageType, type ImportContactInput, type ImportContactsResult, type ListConnectLinksOptions, type ListContactsOptions, type ListConversationsOptions, type ListDealsOptions, type ListDeliveriesOptions, type ListPostsOptions, Medal, MedalApiError, type MedalOptions, type MessageAuthorType, type MessageDeliveryUpdatedEvent, type MessageReceivedEvent, type MessageSentEvent, type PaginatedResponse, type PaginationOptions, type Post, type PostDetail, type PostType, type PostVariant, Posts, type PublishResult, type RecordConsentInput, type ReplyCreateResult, type RequestOptions, type SchedulePostInput, type ScheduleResult, type SendEmailInput, type TestPingEvent, type UpdateContactInput, type UpdateConversationInput, type UpdateDealInput, type UpdatePostInput, type UpdateWebhookInput, type VerifyWebhookSignatureInput, type WebhookChannelLifecycleData, type WebhookConversationSnapshot, type WebhookDeleteResult, type WebhookDelivery, type WebhookEndpoint, type WebhookEvent, type WebhookMessageSnapshot, type WebhookTestResult, WebhookVerificationError, type WebhookVerificationErrorCode, Webhooks, type Workspace, Workspaces, createMedalClient, Medal as default, verifyWebhookSignature };
+export { type Activity, type AddNoteInput, type ApiResponse, type AutoConfirmContext, type AutoConfirmOptions, BaseClient, type BatchSendInput, type BatchSendResult, type BatchSendSummary, CAPABILITY_IDS, CAPABILITY_ROUTES, type CapabilityConfirmation, CapabilityConfirmations, CapabilityConfirmer, type CapabilityId, type CapabilityPathParamValue, type CapabilityRoute, type CapabilityWriteBodies, type CapabilityWriteRequest, type Channel, type ChannelConnectedEvent, type ChannelConnection, type ChannelConnectionDisconnectResult, type ChannelConnectionState, type ChannelDisconnectReason, type ChannelDisconnectedEvent, Channels, type ConnectLink, type ConnectLinkCreateResult, type ConnectLinkRevokeResult, type ConnectLinkStatus, type ConsentRecord, type ConsentResult, type ConsentType, type Contact, type ContactConsents, type ContactCreateResult, type ContactNoteResult, type ContactRemoveResult, type ContactStatus, type ContactUpdateResult, Contacts, type Conversation, type ConversationAssignedEvent, type ConversationCreatedEvent, type ConversationMessage, type ConversationStatus, type ConversationStatusChangedEvent, type ConversationUpdateResult, type CookieCategoryConsent, type CookieConsentInput, type CreateConnectLinkInput, type CreateContactInput, type CreateDealInput, type CreatePostInput, type CreateReplyInput, type CreateWebhookInput, DEFAULT_WEBHOOK_TOLERANCE_MS, type Deal, type DealCreateResult, type DealRemoveResult, type DealStatus, type DealUpdateResult, Deals, type EmailSend, type EmailSendResult, type EmailStatus, type EmailTemplate, type EmailTemplateDetail, Emails, Gdpr, type GdprExport, type GetTemplateOptions, Helpdesk, type HelpdeskMessageType, type ImportContactInput, type ImportContactsResult, type IssueCapabilityConfirmationInput, type ListConnectLinksOptions, type ListContactsOptions, type ListConversationsOptions, type ListDealsOptions, type ListDeliveriesOptions, type ListPostsOptions, Medal, MedalApiError, type MedalOptions, type MessageAuthorType, type MessageDeliveryStatus, type MessageDeliveryUpdatedEvent, type MessageReceivedEvent, type MessageSentEvent, type PaginatedResponse, type PaginationOptions, type Post, type PostDetail, type PostType, type PostVariant, Posts, type PublishResult, type RecordConsentInput, type ReplyCreateResult, type RequestOptions, Scan, type ScanCompany, type ScanCreateInput, type ScanCreateResult, type ScanJob, type ScanResultPayload, type ScanStatus, type ScanSubScores, type SchedulePostInput, type ScheduleResult, type SendEmailInput, type TestPingEvent, type UpdateContactInput, type UpdateConversationInput, type UpdateDealInput, type UpdatePostInput, type UpdateWebhookInput, type VerifyWebhookSignatureInput, type WaitForScanOptions, type WebhookChannelLifecycleData, type WebhookConversationSnapshot, type WebhookDeleteResult, type WebhookDelivery, type WebhookEndpoint, type WebhookEvent, type WebhookMessageSnapshot, type WebhookTestResult, WebhookVerificationError, type WebhookVerificationErrorCode, Webhooks, type Workspace, Workspaces, createMedalClient, Medal as default, verifyWebhookSignature };