@xalantis/sdk 0.1.0

package/dist/index.d.ts

@@ -0,0 +1,338 @@
+/** Configuration for the Xalantis SDK client. */
+interface XalantisConfig {
+    /** Your Xalantis API key (e.g. `sk_live_...`). */
+    apiKey: string;
+    /** @internal For testing only. Defaults to https://xalantis.com */
+    baseUrl?: string;
+    /** Request timeout in milliseconds. Defaults to 30000 (30s). */
+    timeout?: number;
+}
+/** Standard API response wrapping a single resource. */
+interface ApiResponse<T> {
+    success: boolean;
+    data: T;
+    message: string | null;
+}
+/** Paginated API response wrapping a list of resources. */
+interface PaginatedResponse<T> {
+    success: boolean;
+    data: T[];
+    /** Pagination metadata. */
+    meta: {
+        current_page: number;
+        per_page: number;
+        total: number;
+        last_page: number;
+        from: number | null;
+        to: number | null;
+    };
+    /** Pagination navigation links. */
+    links: {
+        first: string | null;
+        last: string | null;
+        prev: string | null;
+        next: string | null;
+    };
+    message: string | null;
+}
+/** API error response structure. */
+interface ApiError {
+    success: false;
+    error: {
+        /** Machine-readable error code (e.g. `VALIDATION_ERROR`, `NOT_FOUND`). */
+        code: string;
+        /** Human-readable error message. */
+        message: string;
+        /** Field-level validation errors, keyed by field name. */
+        details?: Record<string, string[]>;
+    };
+}
+/** Ticket priority levels. */
+type TicketPriority = 'low' | 'medium' | 'high' | 'urgent';
+/** Ticket lifecycle statuses. */
+type TicketStatus = 'new' | 'open' | 'pending' | 'on_hold' | 'resolved' | 'closed';
+/** Channel through which a ticket was created. */
+type TicketChannel = 'api' | 'email' | 'phone' | 'chat' | 'web' | 'widget';
+/** A support ticket. */
+interface Ticket {
+    /** Unique identifier (UUID v4). */
+    uuid: string;
+    /** Human-readable reference (e.g. `TK-000042`). */
+    reference: string;
+    /** Ticket subject line. */
+    subject: string;
+    /** Ticket description / body. */
+    description: string;
+    /** Current status. */
+    status: TicketStatus;
+    /** Priority level. */
+    priority: TicketPriority;
+    /** Channel through which the ticket was created. */
+    channel: TicketChannel;
+    /** Ticket category, if assigned. */
+    category: {
+        name: string;
+        slug: string;
+    } | null;
+    /** Person who submitted the ticket. */
+    requester: {
+        type: string;
+        name: string | null;
+        email: string | null;
+        phone: string | null;
+        contact_id: string | null;
+        client_id: string | null;
+    };
+    /** Agent assigned to the ticket. */
+    assignee: {
+        name: string;
+        email: string;
+    } | null;
+    /** Custom field values. */
+    custom_fields: Record<string, unknown> | null;
+    /** Tags attached to the ticket. */
+    tags: string[];
+    /** SLA due date (ISO 8601). */
+    due_at: string | null;
+    /** Creation timestamp (ISO 8601). */
+    created_at: string;
+    /** Last update timestamp (ISO 8601). */
+    updated_at: string;
+    /** When the ticket was resolved (ISO 8601). */
+    resolved_at: string | null;
+    /** When the ticket was closed (ISO 8601). */
+    closed_at: string | null;
+}
+/** Input for creating a new ticket. */
+interface CreateTicketInput {
+    /** Ticket subject (required, max 255 chars). */
+    subject: string;
+    /** Ticket description (required). */
+    description: string;
+    /** Email of the person reporting the issue (required). */
+    requester_email: string;
+    /** Name of the requester. */
+    requester_name?: string;
+    /** Priority level. Defaults to `medium`. */
+    priority?: TicketPriority;
+    /** Assign to a category by ID. */
+    category_id?: number;
+    /** Assign to a category by slug. */
+    category_slug?: string;
+    /** Channel source. Defaults to `api`. */
+    channel?: TicketChannel;
+    /** Custom field values. */
+    custom_fields?: Record<string, unknown>;
+}
+/** Input for updating an existing ticket. All fields are optional. */
+interface UpdateTicketInput {
+    subject?: string;
+    description?: string;
+    status?: TicketStatus;
+    priority?: TicketPriority;
+    category_id?: number;
+    category_slug?: string;
+    /** Assign to a specific agent by ID. */
+    assignee_id?: number;
+    /** SLA due date (ISO 8601). */
+    due_at?: string;
+    custom_fields?: Record<string, unknown>;
+}
+/** Parameters for listing/filtering tickets. */
+interface ListTicketsParams {
+    /** Page number (1-based). */
+    page?: number;
+    /** Results per page (default 15, max 100). */
+    per_page?: number;
+    /** Filter by status. */
+    status?: TicketStatus;
+    /** Filter by priority. */
+    priority?: TicketPriority;
+    /** Filter by assigned agent ID. */
+    assignee_id?: number;
+    /** Filter by requester email (exact match). */
+    requester_email?: string;
+    /** Full-text search on subject and description. */
+    search?: string;
+    /** Field to sort by. */
+    sort_by?: 'created_at' | 'updated_at' | 'priority' | 'status' | 'due_at' | 'reference';
+    /** Sort direction. */
+    sort_dir?: 'asc' | 'desc';
+}
+/** A reply or internal note on a ticket. */
+interface TicketReply {
+    /** Unique identifier (UUID v4). */
+    uuid: string;
+    /** Reply content (HTML or plain text). */
+    content: string;
+    /** Whether this is an internal note (not visible to the requester). */
+    is_internal: boolean;
+    /** Whether this reply was auto-generated by the system. */
+    is_automated: boolean;
+    /** Agent who posted the reply, if any. */
+    user: {
+        id: number;
+        full_name: string;
+        email: string;
+    } | null;
+    /** Creation timestamp (ISO 8601). */
+    created_at: string;
+    /** Last update timestamp (ISO 8601). */
+    updated_at: string;
+}
+/** Input for creating a reply on a ticket. */
+interface CreateTicketReplyInput {
+    /** Reply content (required). */
+    content: string;
+    /** Set to `true` for an internal note (not visible to the requester). */
+    is_internal?: boolean;
+}
+/** Parameters for listing replies. */
+interface ListTicketRepliesParams {
+    /** Page number (1-based). */
+    page?: number;
+    /** Results per page (default 50). */
+    per_page?: number;
+}
+
+/**
+ * Error thrown when the Xalantis API returns a non-success response.
+ *
+ * @example
+ * ```ts
+ * try {
+ *   await client.tickets.create({ ... })
+ * } catch (error) {
+ *   if (error instanceof XalantisError) {
+ *     console.error(error.code)    // 'VALIDATION_ERROR'
+ *     console.error(error.status)  // 422
+ *     console.error(error.details) // { subject: ['Required'] }
+ *   }
+ * }
+ * ```
+ */
+declare class XalantisError extends Error {
+    /** Machine-readable error code (e.g. `VALIDATION_ERROR`, `NOT_FOUND`, `UNAUTHORIZED`). */
+    code: string;
+    /** HTTP status code. */
+    status: number;
+    /** Field-level validation errors, keyed by field name. Only present for 422 responses. */
+    details?: Record<string, string[]>;
+    /** Value of `Retry-After` header when rate-limited (429). */
+    retryAfter?: number;
+    constructor(message: string, code: string, status: number, details?: Record<string, string[]>, retryAfter?: number);
+}
+/**
+ * Low-level HTTP client for the Xalantis API.
+ * Handles authentication, request building, and error mapping.
+ * @internal Use the `Xalantis` class instead.
+ */
+declare class HttpClient {
+    private baseUrl;
+    private apiKey;
+    private timeoutMs;
+    constructor(config: XalantisConfig);
+    /** @internal Prevent accidental serialization of sensitive data. */
+    toJSON(): Record<string, unknown>;
+    private request;
+    /** Send a GET request and return a single resource. */
+    get<T>(path: string, params?: Record<string, unknown>): Promise<ApiResponse<T>>;
+    /** Send a GET request and return a paginated list. */
+    getPaginated<T>(path: string, params?: Record<string, unknown>): Promise<PaginatedResponse<T>>;
+    /** Send a POST request. */
+    post<T>(path: string, body: unknown): Promise<ApiResponse<T>>;
+    /** Send a PATCH request. */
+    patch<T>(path: string, body: unknown): Promise<ApiResponse<T>>;
+    /** Send a DELETE request. */
+    delete(path: string): Promise<ApiResponse<null>>;
+}
+
+declare class TicketsResource {
+    private http;
+    constructor(http: HttpClient);
+    /**
+     * List tickets with optional filters and pagination.
+     *
+     * @example
+     * const tickets = await client.tickets.list({ status: 'open', per_page: 10 })
+     */
+    list(params?: ListTicketsParams): Promise<PaginatedResponse<Ticket>>;
+    /**
+     * Get a single ticket by UUID.
+     *
+     * @example
+     * const ticket = await client.tickets.get('uuid-here')
+     */
+    get(uuid: string): Promise<ApiResponse<Ticket>>;
+    /**
+     * Create a new ticket.
+     *
+     * @example
+     * const ticket = await client.tickets.create({
+     *   subject: 'Login issue',
+     *   description: 'Cannot login since update',
+     *   requester_email: 'user@example.com',
+     *   priority: 'high',
+     * })
+     */
+    create(input: CreateTicketInput): Promise<ApiResponse<Ticket>>;
+    /**
+     * Update an existing ticket.
+     *
+     * @example
+     * const ticket = await client.tickets.update('uuid-here', { status: 'resolved' })
+     */
+    update(uuid: string, input: UpdateTicketInput): Promise<ApiResponse<Ticket>>;
+    /**
+     * List replies for a ticket.
+     *
+     * @example
+     * const replies = await client.tickets.listReplies('uuid-here')
+     */
+    listReplies(ticketUuid: string, params?: ListTicketRepliesParams): Promise<PaginatedResponse<TicketReply>>;
+    /**
+     * Add a reply to a ticket.
+     *
+     * @example
+     * await client.tickets.reply('uuid-here', { content: 'Thanks for reporting!' })
+     */
+    reply(ticketUuid: string, input: CreateTicketReplyInput): Promise<ApiResponse<TicketReply>>;
+}
+
+/**
+ * Xalantis SDK Client.
+ *
+ * @example
+ * ```ts
+ * import { Xalantis } from '@xalantis/sdk'
+ *
+ * const client = new Xalantis({ apiKey: 'xal_live_...' })
+ *
+ * // Create a ticket
+ * const { data: ticket } = await client.tickets.create({
+ *   subject: 'Bug report',
+ *   description: 'Something is broken',
+ *   requester_email: 'user@example.com',
+ * })
+ *
+ * // List tickets
+ * const { data: tickets } = await client.tickets.list({ status: 'open' })
+ *
+ * // Get a ticket
+ * const { data: ticket } = await client.tickets.get('uuid-here')
+ *
+ * // Update a ticket
+ * await client.tickets.update('uuid-here', { status: 'resolved' })
+ *
+ * // Reply to a ticket
+ * await client.tickets.reply('uuid-here', { content: 'Fixed!' })
+ * ```
+ */
+declare class Xalantis {
+    private http;
+    /** Ticket management (create, list, get, update, reply). */
+    tickets: TicketsResource;
+    constructor(config: XalantisConfig);
+}
+
+export { type ApiError, type ApiResponse, type CreateTicketInput, type CreateTicketReplyInput, type ListTicketRepliesParams, type ListTicketsParams, type PaginatedResponse, type Ticket, type TicketChannel, type TicketPriority, type TicketReply, type TicketStatus, type UpdateTicketInput, Xalantis, type XalantisConfig, XalantisError };

package/dist/index.js

@@ -0,0 +1,267 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  Xalantis: () => Xalantis,
+  XalantisError: () => XalantisError
+});
+module.exports = __toCommonJS(index_exports);
+
+// src/http.ts
+var XalantisError = class extends Error {
+  constructor(message, code, status, details, retryAfter) {
+    super(message);
+    this.name = "XalantisError";
+    this.code = code;
+    this.status = status;
+    this.details = details;
+    this.retryAfter = retryAfter;
+  }
+};
+var DEFAULT_TIMEOUT_MS = 3e4;
+var HttpClient = class {
+  constructor(config) {
+    this.apiKey = config.apiKey;
+    this.timeoutMs = config.timeout ?? DEFAULT_TIMEOUT_MS;
+    const raw = config.baseUrl || "https://xalantis.com";
+    const parsed = new URL(raw);
+    if (parsed.protocol !== "https:" && !config.baseUrl) {
+      throw new Error("Xalantis SDK: baseUrl must use HTTPS");
+    }
+    this.baseUrl = parsed.origin;
+    Object.defineProperty(this, "apiKey", { enumerable: false });
+  }
+  /** @internal Prevent accidental serialization of sensitive data. */
+  toJSON() {
+    return { baseUrl: this.baseUrl };
+  }
+  async request(method, path, body, params) {
+    const url = new URL(`${this.baseUrl}/api/v1${path}`);
+    if (params) {
+      for (const [key, value] of Object.entries(params)) {
+        if (value !== void 0 && value !== null) {
+          url.searchParams.set(key, String(value));
+        }
+      }
+    }
+    const headers = {
+      "Authorization": `Bearer ${this.apiKey}`,
+      "Accept": "application/json",
+      "Content-Type": "application/json"
+    };
+    const controller = new AbortController();
+    const timeoutId = setTimeout(() => controller.abort(), this.timeoutMs);
+    let response;
+    try {
+      response = await fetch(url.toString(), {
+        method,
+        headers,
+        body: body ? JSON.stringify(body) : void 0,
+        signal: controller.signal
+      });
+    } catch (err) {
+      clearTimeout(timeoutId);
+      if (err instanceof DOMException && err.name === "AbortError") {
+        throw new XalantisError(`Request timed out after ${this.timeoutMs}ms`, "TIMEOUT", 0);
+      }
+      throw new XalantisError(
+        err instanceof Error ? err.message : "Network request failed",
+        "NETWORK_ERROR",
+        0
+      );
+    } finally {
+      clearTimeout(timeoutId);
+    }
+    let json;
+    try {
+      json = await response.json();
+    } catch {
+      throw new XalantisError(
+        `Server returned non-JSON response (HTTP ${response.status})`,
+        "INVALID_RESPONSE",
+        response.status
+      );
+    }
+    if (typeof json !== "object" || json === null || !("success" in json)) {
+      throw new XalantisError(
+        "Invalid API response format",
+        "INVALID_RESPONSE",
+        response.status
+      );
+    }
+    if (!response.ok || json.success === false) {
+      const error = json;
+      let retryAfter;
+      if (response.status === 429) {
+        const retryHeader = response.headers.get("Retry-After");
+        retryAfter = retryHeader ? parseInt(retryHeader, 10) : void 0;
+      }
+      throw new XalantisError(
+        error.error?.message || `Request failed with status ${response.status}`,
+        error.error?.code || "UNKNOWN_ERROR",
+        response.status,
+        error.error?.details,
+        retryAfter
+      );
+    }
+    return json;
+  }
+  /** Send a GET request and return a single resource. */
+  async get(path, params) {
+    return this.request("GET", path, void 0, params);
+  }
+  /** Send a GET request and return a paginated list. */
+  async getPaginated(path, params) {
+    return this.request("GET", path, void 0, params);
+  }
+  /** Send a POST request. */
+  async post(path, body) {
+    return this.request("POST", path, body);
+  }
+  /** Send a PATCH request. */
+  async patch(path, body) {
+    return this.request("PATCH", path, body);
+  }
+  /** Send a DELETE request. */
+  async delete(path) {
+    return this.request("DELETE", path);
+  }
+};
+
+// src/resources/tickets.ts
+var UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+var VALID_PRIORITIES = ["low", "medium", "high", "urgent"];
+var VALID_STATUSES = ["new", "open", "pending", "on_hold", "resolved", "closed"];
+var VALID_CHANNELS = ["api", "email", "phone", "chat", "web", "widget"];
+function assertUuid(value, label) {
+  if (!UUID_RE.test(value)) {
+    throw new Error(`Xalantis SDK: ${label} must be a valid UUID (got "${value}")`);
+  }
+}
+var TicketsResource = class {
+  constructor(http) {
+    this.http = http;
+  }
+  /**
+   * List tickets with optional filters and pagination.
+   *
+   * @example
+   * const tickets = await client.tickets.list({ status: 'open', per_page: 10 })
+   */
+  async list(params) {
+    return this.http.getPaginated("/tickets", params);
+  }
+  /**
+   * Get a single ticket by UUID.
+   *
+   * @example
+   * const ticket = await client.tickets.get('uuid-here')
+   */
+  async get(uuid) {
+    assertUuid(uuid, "ticket uuid");
+    return this.http.get(`/tickets/${uuid}`);
+  }
+  /**
+   * Create a new ticket.
+   *
+   * @example
+   * const ticket = await client.tickets.create({
+   *   subject: 'Login issue',
+   *   description: 'Cannot login since update',
+   *   requester_email: 'user@example.com',
+   *   priority: 'high',
+   * })
+   */
+  async create(input) {
+    if (!input.subject || input.subject.trim().length === 0) {
+      throw new Error("Xalantis SDK: subject is required");
+    }
+    if (!input.description || input.description.trim().length === 0) {
+      throw new Error("Xalantis SDK: description is required");
+    }
+    if (!input.requester_email || input.requester_email.trim().length === 0) {
+      throw new Error("Xalantis SDK: requester_email is required");
+    }
+    if (input.priority && !VALID_PRIORITIES.includes(input.priority)) {
+      throw new Error(`Xalantis SDK: invalid priority "${input.priority}" (must be ${VALID_PRIORITIES.join(", ")})`);
+    }
+    if (input.channel && !VALID_CHANNELS.includes(input.channel)) {
+      throw new Error(`Xalantis SDK: invalid channel "${input.channel}" (must be ${VALID_CHANNELS.join(", ")})`);
+    }
+    return this.http.post("/tickets", input);
+  }
+  /**
+   * Update an existing ticket.
+   *
+   * @example
+   * const ticket = await client.tickets.update('uuid-here', { status: 'resolved' })
+   */
+  async update(uuid, input) {
+    assertUuid(uuid, "ticket uuid");
+    if (input.priority && !VALID_PRIORITIES.includes(input.priority)) {
+      throw new Error(`Xalantis SDK: invalid priority "${input.priority}" (must be ${VALID_PRIORITIES.join(", ")})`);
+    }
+    if (input.status && !VALID_STATUSES.includes(input.status)) {
+      throw new Error(`Xalantis SDK: invalid status "${input.status}" (must be ${VALID_STATUSES.join(", ")})`);
+    }
+    return this.http.patch(`/tickets/${uuid}`, input);
+  }
+  /**
+   * List replies for a ticket.
+   *
+   * @example
+   * const replies = await client.tickets.listReplies('uuid-here')
+   */
+  async listReplies(ticketUuid, params) {
+    assertUuid(ticketUuid, "ticket uuid");
+    return this.http.getPaginated(`/tickets/${ticketUuid}/replies`, params);
+  }
+  /**
+   * Add a reply to a ticket.
+   *
+   * @example
+   * await client.tickets.reply('uuid-here', { content: 'Thanks for reporting!' })
+   */
+  async reply(ticketUuid, input) {
+    assertUuid(ticketUuid, "ticket uuid");
+    if (!input.content || input.content.trim().length === 0) {
+      throw new Error("Xalantis SDK: reply content is required");
+    }
+    return this.http.post(`/tickets/${ticketUuid}/replies`, input);
+  }
+};
+
+// src/client.ts
+var Xalantis = class {
+  constructor(config) {
+    if (!config.apiKey) {
+      throw new Error("Xalantis SDK: apiKey is required");
+    }
+    this.http = new HttpClient(config);
+    this.tickets = new TicketsResource(this.http);
+  }
+};
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  Xalantis,
+  XalantisError
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts","../src/http.ts","../src/resources/tickets.ts","../src/client.ts"],"sourcesContent":["export { Xalantis } from './client'\nexport { XalantisError } from './http'\nexport type {\n  // Config\n  XalantisConfig,\n  // API\n  ApiResponse,\n  PaginatedResponse,\n  ApiError,\n  // Tickets\n  Ticket,\n  TicketPriority,\n  TicketStatus,\n  TicketChannel,\n  CreateTicketInput,\n  UpdateTicketInput,\n  ListTicketsParams,\n  // Replies\n  TicketReply,\n  CreateTicketReplyInput,\n  ListTicketRepliesParams,\n} from './types'\n","import type { ApiError, ApiResponse, PaginatedResponse, XalantisConfig } from './types'\n\n/**\n * Error thrown when the Xalantis API returns a non-success response.\n *\n * @example\n * ```ts\n * try {\n *   await client.tickets.create({ ... })\n * } catch (error) {\n *   if (error instanceof XalantisError) {\n *     console.error(error.code)    // 'VALIDATION_ERROR'\n *     console.error(error.status)  // 422\n *     console.error(error.details) // { subject: ['Required'] }\n *   }\n * }\n * ```\n */\nexport class XalantisError extends Error {\n  /** Machine-readable error code (e.g. `VALIDATION_ERROR`, `NOT_FOUND`, `UNAUTHORIZED`). */\n  code: string\n  /** HTTP status code. */\n  status: number\n  /** Field-level validation errors, keyed by field name. Only present for 422 responses. */\n  details?: Record<string, string[]>\n  /** Value of `Retry-After` header when rate-limited (429). */\n  retryAfter?: number\n\n  constructor(message: string, code: string, status: number, details?: Record<string, string[]>, retryAfter?: number) {\n    super(message)\n    this.name = 'XalantisError'\n    this.code = code\n    this.status = status\n    this.details = details\n    this.retryAfter = retryAfter\n  }\n}\n\n/** Default request timeout in milliseconds (30 seconds). */\nconst DEFAULT_TIMEOUT_MS = 30_000\n\n/**\n * Low-level HTTP client for the Xalantis API.\n * Handles authentication, request building, and error mapping.\n * @internal Use the `Xalantis` class instead.\n */\nexport class HttpClient {\n  private baseUrl: string\n  private apiKey: string\n  private timeoutMs: number\n\n  constructor(config: XalantisConfig) {\n    this.apiKey = config.apiKey\n    this.timeoutMs = config.timeout ?? DEFAULT_TIMEOUT_MS\n\n    // [SECURITY] Validate baseUrl\n    const raw = config.baseUrl || 'https://xalantis.com'\n    const parsed = new URL(raw)\n\n    if (parsed.protocol !== 'https:' && !config.baseUrl) {\n      throw new Error('Xalantis SDK: baseUrl must use HTTPS')\n    }\n\n    this.baseUrl = parsed.origin\n\n    // [SECURITY] Prevent API key from appearing in JSON.stringify / console.log\n    Object.defineProperty(this, 'apiKey', { enumerable: false })\n  }\n\n  /** @internal Prevent accidental serialization of sensitive data. */\n  toJSON(): Record<string, unknown> {\n    return { baseUrl: this.baseUrl }\n  }\n\n  private async request<T>(method: string, path: string, body?: unknown, params?: Record<string, unknown>): Promise<T> {\n    const url = new URL(`${this.baseUrl}/api/v1${path}`)\n\n    if (params) {\n      for (const [key, value] of Object.entries(params)) {\n        if (value !== undefined && value !== null) {\n          url.searchParams.set(key, String(value))\n        }\n      }\n    }\n\n    const headers: Record<string, string> = {\n      'Authorization': `Bearer ${this.apiKey}`,\n      'Accept': 'application/json',\n      'Content-Type': 'application/json',\n    }\n\n    // [SECURITY] AbortController timeout to prevent slowloris / hanging connections\n    const controller = new AbortController()\n    const timeoutId = setTimeout(() => controller.abort(), this.timeoutMs)\n\n    let response: Response\n    try {\n      response = await fetch(url.toString(), {\n        method,\n        headers,\n        body: body ? JSON.stringify(body) : undefined,\n        signal: controller.signal,\n      })\n    } catch (err: unknown) {\n      clearTimeout(timeoutId)\n      if (err instanceof DOMException && err.name === 'AbortError') {\n        throw new XalantisError(`Request timed out after ${this.timeoutMs}ms`, 'TIMEOUT', 0)\n      }\n      throw new XalantisError(\n        err instanceof Error ? err.message : 'Network request failed',\n        'NETWORK_ERROR',\n        0,\n      )\n    } finally {\n      clearTimeout(timeoutId)\n    }\n\n    // [SECURITY] Handle non-JSON responses (502/503 HTML pages, etc.)\n    let json: unknown\n    try {\n      json = await response.json()\n    } catch {\n      throw new XalantisError(\n        `Server returned non-JSON response (HTTP ${response.status})`,\n        'INVALID_RESPONSE',\n        response.status,\n      )\n    }\n\n    // [SECURITY] Validate response structure\n    if (typeof json !== 'object' || json === null || !('success' in json)) {\n      throw new XalantisError(\n        'Invalid API response format',\n        'INVALID_RESPONSE',\n        response.status,\n      )\n    }\n\n    if (!response.ok || (json as Record<string, unknown>).success === false) {\n      const error = json as ApiError\n\n      // Handle 429 Rate Limiting with Retry-After header\n      let retryAfter: number | undefined\n      if (response.status === 429) {\n        const retryHeader = response.headers.get('Retry-After')\n        retryAfter = retryHeader ? parseInt(retryHeader, 10) : undefined\n      }\n\n      throw new XalantisError(\n        error.error?.message || `Request failed with status ${response.status}`,\n        error.error?.code || 'UNKNOWN_ERROR',\n        response.status,\n        error.error?.details,\n        retryAfter,\n      )\n    }\n\n    return json as T\n  }\n\n  /** Send a GET request and return a single resource. */\n  async get<T>(path: string, params?: Record<string, unknown>): Promise<ApiResponse<T>> {\n    return this.request('GET', path, undefined, params)\n  }\n\n  /** Send a GET request and return a paginated list. */\n  async getPaginated<T>(path: string, params?: Record<string, unknown>): Promise<PaginatedResponse<T>> {\n    return this.request('GET', path, undefined, params)\n  }\n\n  /** Send a POST request. */\n  async post<T>(path: string, body: unknown): Promise<ApiResponse<T>> {\n    return this.request('POST', path, body)\n  }\n\n  /** Send a PATCH request. */\n  async patch<T>(path: string, body: unknown): Promise<ApiResponse<T>> {\n    return this.request('PATCH', path, body)\n  }\n\n  /** Send a DELETE request. */\n  async delete(path: string): Promise<ApiResponse<null>> {\n    return this.request('DELETE', path)\n  }\n}\n","import type { HttpClient } from '../http'\nimport type {\n  ApiResponse,\n  CreateTicketInput,\n  CreateTicketReplyInput,\n  ListTicketRepliesParams,\n  ListTicketsParams,\n  PaginatedResponse,\n  Ticket,\n  TicketReply,\n  UpdateTicketInput,\n} from '../types'\n\nconst UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i\n\nconst VALID_PRIORITIES = ['low', 'medium', 'high', 'urgent']\nconst VALID_STATUSES = ['new', 'open', 'pending', 'on_hold', 'resolved', 'closed']\nconst VALID_CHANNELS = ['api', 'email', 'phone', 'chat', 'web', 'widget']\n\n/** Validate UUID format to prevent path traversal. */\nfunction assertUuid(value: string, label: string): void {\n  if (!UUID_RE.test(value)) {\n    throw new Error(`Xalantis SDK: ${label} must be a valid UUID (got \"${value}\")`)\n  }\n}\n\nexport class TicketsResource {\n  constructor(private http: HttpClient) {}\n\n  /**\n   * List tickets with optional filters and pagination.\n   *\n   * @example\n   * const tickets = await client.tickets.list({ status: 'open', per_page: 10 })\n   */\n  async list(params?: ListTicketsParams): Promise<PaginatedResponse<Ticket>> {\n    return this.http.getPaginated<Ticket>('/tickets', params as Record<string, unknown>)\n  }\n\n  /**\n   * Get a single ticket by UUID.\n   *\n   * @example\n   * const ticket = await client.tickets.get('uuid-here')\n   */\n  async get(uuid: string): Promise<ApiResponse<Ticket>> {\n    assertUuid(uuid, 'ticket uuid')\n    return this.http.get<Ticket>(`/tickets/${uuid}`)\n  }\n\n  /**\n   * Create a new ticket.\n   *\n   * @example\n   * const ticket = await client.tickets.create({\n   *   subject: 'Login issue',\n   *   description: 'Cannot login since update',\n   *   requester_email: 'user@example.com',\n   *   priority: 'high',\n   * })\n   */\n  async create(input: CreateTicketInput): Promise<ApiResponse<Ticket>> {\n    if (!input.subject || input.subject.trim().length === 0) {\n      throw new Error('Xalantis SDK: subject is required')\n    }\n    if (!input.description || input.description.trim().length === 0) {\n      throw new Error('Xalantis SDK: description is required')\n    }\n    if (!input.requester_email || input.requester_email.trim().length === 0) {\n      throw new Error('Xalantis SDK: requester_email is required')\n    }\n    if (input.priority && !VALID_PRIORITIES.includes(input.priority)) {\n      throw new Error(`Xalantis SDK: invalid priority \"${input.priority}\" (must be ${VALID_PRIORITIES.join(', ')})`)\n    }\n    if (input.channel && !VALID_CHANNELS.includes(input.channel)) {\n      throw new Error(`Xalantis SDK: invalid channel \"${input.channel}\" (must be ${VALID_CHANNELS.join(', ')})`)\n    }\n\n    return this.http.post<Ticket>('/tickets', input)\n  }\n\n  /**\n   * Update an existing ticket.\n   *\n   * @example\n   * const ticket = await client.tickets.update('uuid-here', { status: 'resolved' })\n   */\n  async update(uuid: string, input: UpdateTicketInput): Promise<ApiResponse<Ticket>> {\n    assertUuid(uuid, 'ticket uuid')\n\n    if (input.priority && !VALID_PRIORITIES.includes(input.priority)) {\n      throw new Error(`Xalantis SDK: invalid priority \"${input.priority}\" (must be ${VALID_PRIORITIES.join(', ')})`)\n    }\n    if (input.status && !VALID_STATUSES.includes(input.status)) {\n      throw new Error(`Xalantis SDK: invalid status \"${input.status}\" (must be ${VALID_STATUSES.join(', ')})`)\n    }\n\n    return this.http.patch<Ticket>(`/tickets/${uuid}`, input)\n  }\n\n  /**\n   * List replies for a ticket.\n   *\n   * @example\n   * const replies = await client.tickets.listReplies('uuid-here')\n   */\n  async listReplies(ticketUuid: string, params?: ListTicketRepliesParams): Promise<PaginatedResponse<TicketReply>> {\n    assertUuid(ticketUuid, 'ticket uuid')\n    return this.http.getPaginated<TicketReply>(`/tickets/${ticketUuid}/replies`, params as Record<string, unknown>)\n  }\n\n  /**\n   * Add a reply to a ticket.\n   *\n   * @example\n   * await client.tickets.reply('uuid-here', { content: 'Thanks for reporting!' })\n   */\n  async reply(ticketUuid: string, input: CreateTicketReplyInput): Promise<ApiResponse<TicketReply>> {\n    assertUuid(ticketUuid, 'ticket uuid')\n\n    if (!input.content || input.content.trim().length === 0) {\n      throw new Error('Xalantis SDK: reply content is required')\n    }\n\n    return this.http.post<TicketReply>(`/tickets/${ticketUuid}/replies`, input)\n  }\n}\n","import { HttpClient } from './http'\nimport { TicketsResource } from './resources/tickets'\nimport type { XalantisConfig } from './types'\n\n/**\n * Xalantis SDK Client.\n *\n * @example\n * ```ts\n * import { Xalantis } from '@xalantis/sdk'\n *\n * const client = new Xalantis({ apiKey: 'xal_live_...' })\n *\n * // Create a ticket\n * const { data: ticket } = await client.tickets.create({\n *   subject: 'Bug report',\n *   description: 'Something is broken',\n *   requester_email: 'user@example.com',\n * })\n *\n * // List tickets\n * const { data: tickets } = await client.tickets.list({ status: 'open' })\n *\n * // Get a ticket\n * const { data: ticket } = await client.tickets.get('uuid-here')\n *\n * // Update a ticket\n * await client.tickets.update('uuid-here', { status: 'resolved' })\n *\n * // Reply to a ticket\n * await client.tickets.reply('uuid-here', { content: 'Fixed!' })\n * ```\n */\nexport class Xalantis {\n  private http: HttpClient\n\n  /** Ticket management (create, list, get, update, reply). */\n  public tickets: TicketsResource\n\n  constructor(config: XalantisConfig) {\n    if (!config.apiKey) {\n      throw new Error('Xalantis SDK: apiKey is required')\n    }\n\n    this.http = new HttpClient(config)\n    this.tickets = new TicketsResource(this.http)\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACkBO,IAAM,gBAAN,cAA4B,MAAM;AAAA,EAUvC,YAAY,SAAiB,MAAc,QAAgB,SAAoC,YAAqB;AAClH,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,OAAO;AACZ,SAAK,SAAS;AACd,SAAK,UAAU;AACf,SAAK,aAAa;AAAA,EACpB;AACF;AAGA,IAAM,qBAAqB;AAOpB,IAAM,aAAN,MAAiB;AAAA,EAKtB,YAAY,QAAwB;AAClC,SAAK,SAAS,OAAO;AACrB,SAAK,YAAY,OAAO,WAAW;AAGnC,UAAM,MAAM,OAAO,WAAW;AAC9B,UAAM,SAAS,IAAI,IAAI,GAAG;AAE1B,QAAI,OAAO,aAAa,YAAY,CAAC,OAAO,SAAS;AACnD,YAAM,IAAI,MAAM,sCAAsC;AAAA,IACxD;AAEA,SAAK,UAAU,OAAO;AAGtB,WAAO,eAAe,MAAM,UAAU,EAAE,YAAY,MAAM,CAAC;AAAA,EAC7D;AAAA;AAAA,EAGA,SAAkC;AAChC,WAAO,EAAE,SAAS,KAAK,QAAQ;AAAA,EACjC;AAAA,EAEA,MAAc,QAAW,QAAgB,MAAc,MAAgB,QAA8C;AACnH,UAAM,MAAM,IAAI,IAAI,GAAG,KAAK,OAAO,UAAU,IAAI,EAAE;AAEnD,QAAI,QAAQ;AACV,iBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AACjD,YAAI,UAAU,UAAa,UAAU,MAAM;AACzC,cAAI,aAAa,IAAI,KAAK,OAAO,KAAK,CAAC;AAAA,QACzC;AAAA,MACF;AAAA,IACF;AAEA,UAAM,UAAkC;AAAA,MACtC,iBAAiB,UAAU,KAAK,MAAM;AAAA,MACtC,UAAU;AAAA,MACV,gBAAgB;AAAA,IAClB;AAGA,UAAM,aAAa,IAAI,gBAAgB;AACvC,UAAM,YAAY,WAAW,MAAM,WAAW,MAAM,GAAG,KAAK,SAAS;AAErE,QAAI;AACJ,QAAI;AACF,iBAAW,MAAM,MAAM,IAAI,SAAS,GAAG;AAAA,QACrC;AAAA,QACA;AAAA,QACA,MAAM,OAAO,KAAK,UAAU,IAAI,IAAI;AAAA,QACpC,QAAQ,WAAW;AAAA,MACrB,CAAC;AAAA,IACH,SAAS,KAAc;AACrB,mBAAa,SAAS;AACtB,UAAI,eAAe,gBAAgB,IAAI,SAAS,cAAc;AAC5D,cAAM,IAAI,cAAc,2BAA2B,KAAK,SAAS,MAAM,WAAW,CAAC;AAAA,MACrF;AACA,YAAM,IAAI;AAAA,QACR,eAAe,QAAQ,IAAI,UAAU;AAAA,QACrC;AAAA,QACA;AAAA,MACF;AAAA,IACF,UAAE;AACA,mBAAa,SAAS;AAAA,IACxB;AAGA,QAAI;AACJ,QAAI;AACF,aAAO,MAAM,SAAS,KAAK;AAAA,IAC7B,QAAQ;AACN,YAAM,IAAI;AAAA,QACR,2CAA2C,SAAS,MAAM;AAAA,QAC1D;AAAA,QACA,SAAS;AAAA,MACX;AAAA,IACF;AAGA,QAAI,OAAO,SAAS,YAAY,SAAS,QAAQ,EAAE,aAAa,OAAO;AACrE,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA,SAAS;AAAA,MACX;AAAA,IACF;AAEA,QAAI,CAAC,SAAS,MAAO,KAAiC,YAAY,OAAO;AACvE,YAAM,QAAQ;AAGd,UAAI;AACJ,UAAI,SAAS,WAAW,KAAK;AAC3B,cAAM,cAAc,SAAS,QAAQ,IAAI,aAAa;AACtD,qBAAa,cAAc,SAAS,aAAa,EAAE,IAAI;AAAA,MACzD;AAEA,YAAM,IAAI;AAAA,QACR,MAAM,OAAO,WAAW,8BAA8B,SAAS,MAAM;AAAA,QACrE,MAAM,OAAO,QAAQ;AAAA,QACrB,SAAS;AAAA,QACT,MAAM,OAAO;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AAAA;AAAA,EAGA,MAAM,IAAO,MAAc,QAA2D;AACpF,WAAO,KAAK,QAAQ,OAAO,MAAM,QAAW,MAAM;AAAA,EACpD;AAAA;AAAA,EAGA,MAAM,aAAgB,MAAc,QAAiE;AACnG,WAAO,KAAK,QAAQ,OAAO,MAAM,QAAW,MAAM;AAAA,EACpD;AAAA;AAAA,EAGA,MAAM,KAAQ,MAAc,MAAwC;AAClE,WAAO,KAAK,QAAQ,QAAQ,MAAM,IAAI;AAAA,EACxC;AAAA;AAAA,EAGA,MAAM,MAAS,MAAc,MAAwC;AACnE,WAAO,KAAK,QAAQ,SAAS,MAAM,IAAI;AAAA,EACzC;AAAA;AAAA,EAGA,MAAM,OAAO,MAA0C;AACrD,WAAO,KAAK,QAAQ,UAAU,IAAI;AAAA,EACpC;AACF;;;AC3KA,IAAM,UAAU;AAEhB,IAAM,mBAAmB,CAAC,OAAO,UAAU,QAAQ,QAAQ;AAC3D,IAAM,iBAAiB,CAAC,OAAO,QAAQ,WAAW,WAAW,YAAY,QAAQ;AACjF,IAAM,iBAAiB,CAAC,OAAO,SAAS,SAAS,QAAQ,OAAO,QAAQ;AAGxE,SAAS,WAAW,OAAe,OAAqB;AACtD,MAAI,CAAC,QAAQ,KAAK,KAAK,GAAG;AACxB,UAAM,IAAI,MAAM,iBAAiB,KAAK,+BAA+B,KAAK,IAAI;AAAA,EAChF;AACF;AAEO,IAAM,kBAAN,MAAsB;AAAA,EAC3B,YAAoB,MAAkB;AAAlB;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQvC,MAAM,KAAK,QAAgE;AACzE,WAAO,KAAK,KAAK,aAAqB,YAAY,MAAiC;AAAA,EACrF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,IAAI,MAA4C;AACpD,eAAW,MAAM,aAAa;AAC9B,WAAO,KAAK,KAAK,IAAY,YAAY,IAAI,EAAE;AAAA,EACjD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,MAAM,OAAO,OAAwD;AACnE,QAAI,CAAC,MAAM,WAAW,MAAM,QAAQ,KAAK,EAAE,WAAW,GAAG;AACvD,YAAM,IAAI,MAAM,mCAAmC;AAAA,IACrD;AACA,QAAI,CAAC,MAAM,eAAe,MAAM,YAAY,KAAK,EAAE,WAAW,GAAG;AAC/D,YAAM,IAAI,MAAM,uCAAuC;AAAA,IACzD;AACA,QAAI,CAAC,MAAM,mBAAmB,MAAM,gBAAgB,KAAK,EAAE,WAAW,GAAG;AACvE,YAAM,IAAI,MAAM,2CAA2C;AAAA,IAC7D;AACA,QAAI,MAAM,YAAY,CAAC,iBAAiB,SAAS,MAAM,QAAQ,GAAG;AAChE,YAAM,IAAI,MAAM,mCAAmC,MAAM,QAAQ,cAAc,iBAAiB,KAAK,IAAI,CAAC,GAAG;AAAA,IAC/G;AACA,QAAI,MAAM,WAAW,CAAC,eAAe,SAAS,MAAM,OAAO,GAAG;AAC5D,YAAM,IAAI,MAAM,kCAAkC,MAAM,OAAO,cAAc,eAAe,KAAK,IAAI,CAAC,GAAG;AAAA,IAC3G;AAEA,WAAO,KAAK,KAAK,KAAa,YAAY,KAAK;AAAA,EACjD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,OAAO,MAAc,OAAwD;AACjF,eAAW,MAAM,aAAa;AAE9B,QAAI,MAAM,YAAY,CAAC,iBAAiB,SAAS,MAAM,QAAQ,GAAG;AAChE,YAAM,IAAI,MAAM,mCAAmC,MAAM,QAAQ,cAAc,iBAAiB,KAAK,IAAI,CAAC,GAAG;AAAA,IAC/G;AACA,QAAI,MAAM,UAAU,CAAC,eAAe,SAAS,MAAM,MAAM,GAAG;AAC1D,YAAM,IAAI,MAAM,iCAAiC,MAAM,MAAM,cAAc,eAAe,KAAK,IAAI,CAAC,GAAG;AAAA,IACzG;AAEA,WAAO,KAAK,KAAK,MAAc,YAAY,IAAI,IAAI,KAAK;AAAA,EAC1D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,YAAY,YAAoB,QAA2E;AAC/G,eAAW,YAAY,aAAa;AACpC,WAAO,KAAK,KAAK,aAA0B,YAAY,UAAU,YAAY,MAAiC;AAAA,EAChH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,MAAM,YAAoB,OAAkE;AAChG,eAAW,YAAY,aAAa;AAEpC,QAAI,CAAC,MAAM,WAAW,MAAM,QAAQ,KAAK,EAAE,WAAW,GAAG;AACvD,YAAM,IAAI,MAAM,yCAAyC;AAAA,IAC3D;AAEA,WAAO,KAAK,KAAK,KAAkB,YAAY,UAAU,YAAY,KAAK;AAAA,EAC5E;AACF;;;AC7FO,IAAM,WAAN,MAAe;AAAA,EAMpB,YAAY,QAAwB;AAClC,QAAI,CAAC,OAAO,QAAQ;AAClB,YAAM,IAAI,MAAM,kCAAkC;AAAA,IACpD;AAEA,SAAK,OAAO,IAAI,WAAW,MAAM;AACjC,SAAK,UAAU,IAAI,gBAAgB,KAAK,IAAI;AAAA,EAC9C;AACF;","names":[]}