@invonetwork/web-sdk 0.3.0 → 0.4.0

package/CHANGELOG.md

@@ -1,7 +1,26 @@
 # Changelog
 
 All notable changes to `@invonetwork/web-sdk` are documented here. This project follows
-[Semantic Versioning](https://semver.org/).
+[Semantic Versioning](https://semver.org/). Releases are managed with
+[changesets](https://github.com/changesets/changesets).
+
+## [0.4.0] — 2026-06-30
+
+Additive release — more server reads, edge-ready webhooks, cancellation, and tooling.
+
+- **`getInboundPending({ playerEmail | playerPhone })`** — live, unclaimed inbound
+  sends/transfers for a player (the source of truth behind the "you have X to collect"
+  badge; pairs with `transfer.claim_pending`).
+- **`verifyWebhookAsync`** — Web Crypto variant of `verifyWebhook` that runs on
+  Cloudflare Workers / Deno / Vercel+Netlify Edge / Bun / browsers; and
+  **`createWebhookHandler`** — a zero-dep Fetch-API `(Request) => Promise<Response>`
+  webhook route handler (Next.js App Router, Workers, Deno, Hono, Bun).
+- **`iterateItemPurchaseHistory`** — async iterator that pages through a player's
+  full item-purchase history.
+- **Per-call `AbortSignal`** — every method accepts an optional `{ signal }`; an
+  aborted call throws `InvoError` code `ABORTED` and is never retried.
+- **Tooling**: ESLint (+ lint in CI), changesets release automation, `SECURITY.md`,
+  and `CODEOWNERS`.
 
 ## [0.3.0] — 2026-06-30
 
@@ -80,6 +99,7 @@ Initial scaffold.
 - Contracts extracted + auditor-verified against the INVO backend.
 
 ### Hardening (independent red-team pass)
+
 - **Guardian/minor `202` path no longer mismapped to `verificationMethod:"sms"`** —
   `initiateSend`/`initiateTransfer` now return `verificationMethod: undefined` and a
   `guardianApproval` block on the guardian path, so callers don't route into the

package/README.md

@@ -2,7 +2,7 @@
 
 First-party TypeScript SDK for integrating **INVO** into partner **web** platforms (storefronts, web games, dashboards). It wraps INVO's web money flows behind a typed, versioned API — the web analog of the Unity/Unreal plugins.
 
-> **Status:** `v0.3.0`, published on npm. The backend it wraps is **live** on sandbox + production, so you can build and test against sandbox today.
+> **Status:** `v0.4.0`, published on npm. The backend it wraps is **live** on sandbox + production, so you can build and test against sandbox today.
 > Canonical partner reference: **https://docs.invo.network/docs/currency-purchase** and **https://docs.invo.network/docs/game-developer-integration**.
 
 ## What it does
@@ -232,7 +232,7 @@ const item = await server.purchaseItem({
 - Client-side validation (missing fields, quantity outside `1..1000`, bad price, total ≠ unit×qty) throws `INVALID_INPUT` **before** any network call.
 - Fee split: **90% developer / 10% INVO** by default (per-partner override). Not guardian-gated.
 
-**Companion reads:** `server.getItemPurchaseHistory({ playerEmail, limit?, offset? })` and `server.getItemOrderDetails({ orderId | transactionId | clientRequestId })` (pass **exactly one** id — use `clientRequestId` for recovery: "did this purchase complete?").
+**Companion reads:** `server.getItemPurchaseHistory({ playerEmail, limit?, offset? })` and `server.getItemOrderDetails({ orderId | transactionId | clientRequestId })` (pass **exactly one** id — use `clientRequestId` for recovery: "did this purchase complete?"). To walk the full history, `for await (const row of server.iterateItemPurchaseHistory({ playerEmail }))` pages automatically.
 
 ---
 
@@ -294,6 +294,14 @@ try {
 - **`err.isReceiverNotEnrolled`** on `confirmReceipt*` is the explicit signal to switch to claim-code entry.
 - Transfer self-claim additionally requires `SDK_TRANSFER_CONFIRM_RECEIPT_ENABLED`; if it's off, surface the claim-code path.
 
+**"You have X to collect"** — to render a collect badge, list a player's live, unclaimed inbound sends/transfers (the source of truth behind the `transfer.claim_pending` webhook):
+
+```ts
+const { inboundPending } = await server.getInboundPending({ playerEmail: "q@example.com" });
+// each row: { transactionId, flow, amount, netAmount, sourceGame, toPhone, toIdentityId, claimCodeExpiresAt }
+// match toPhone to the logged-in player (toIdentityId is null when the phone maps to >1 of your players)
+```
+
 ---
 
 ## Passkeys (enroll, approve, link)
@@ -349,6 +357,22 @@ function handler(req, res) {
 
 `verifyWebhook` does constant-time HMAC-SHA256 over `${t}.${rawBody}`, enforces a 5-minute replay window, and accepts an **array of secrets** during rotation (`verifyWebhook(body, sig, [oldSecret, newSecret])`). It returns a typed `InvoWebhookEvent` (discriminate on `event_type`) and throws `InvoError` (`WEBHOOK_SIGNATURE_INVALID` / `WEBHOOK_TIMESTAMP_EXPIRED` / `WEBHOOK_MALFORMED` / `WEBHOOK_SECRET_MISSING`) on any failure. **De-dupe yourself on `X-Invo-Idempotency-Key`** — the SDK verifies, it doesn't track delivery.
 
+**Edge / serverless** (Cloudflare Workers, Deno, Vercel/Netlify Edge, Bun): `verifyWebhook` uses `node:crypto`, so use **`verifyWebhookAsync`** (Web Crypto) — same args/result, just `await` it — or the ready-made Fetch-API handler:
+
+```ts
+import { createWebhookHandler } from "@invonetwork/web-sdk/server";
+
+// Next.js App Router — app/invo/webhooks/route.ts
+export const POST = createWebhookHandler({
+  secret: process.env.INVO_WEBHOOK_SECRET!,
+  onEvent: async (event, { idempotencyKey }) => {
+    // de-dupe on idempotencyKey, then grant value. Throw to return 500 (Invo retries).
+  },
+});
+```
+
+`createWebhookHandler` returns `(request: Request) => Promise<Response>` and runs in Next.js, Workers, Deno, Hono, and Bun. Bad signature → `400`; a throwing `onEvent` → `500`.
+
 ### Event types
 
 | Event | Fires for | Use it to |
@@ -381,6 +405,7 @@ new InvoServer({
   > Note: hook payloads include the request `url`, which for some calls embeds a player email (e.g. balance-by-email). Tokens and the game secret are sent as headers and are **never** passed to hooks — but redact the `url` if you log hook payloads.
 
 - **Request ids.** `InvoError.requestId` carries the backend request id (from `x-invo-request-id` / `x-request-id`) — quote it in support tickets.
+- **Cancellation.** Every method takes an optional `{ signal }` (an `AbortSignal`) as its last argument — `server.getPlayerBalance({ playerEmail }, { signal })`. Aborting throws `InvoError` with `.code === "ABORTED"`, and an aborted call is never retried.
 
 ---
 
@@ -434,7 +459,13 @@ try {
 | `getItemPurchaseHistory({ playerEmail, limit?, offset? })` | `{ history, pagination, raw }` |
 | `getItemOrderDetails({ orderId? \| transactionId? \| clientRequestId? })` | `{ order, financialSummary, statusTimeline, raw }` |
 | `getPlayerBalance({ playerEmail? \| playerId? })` | `{ player, balances, summary, raw }` |
+| `getInboundPending({ playerEmail? \| playerPhone? })` | `{ inboundPending, raw }` — live unclaimed inbound sends/transfers |
+| `iterateItemPurchaseHistory({ playerEmail, pageSize? })` | async iterator over all history rows |
 | `verifyWebhook(rawBody, signatureHeader, secret \| secrets, opts?)` | typed `InvoWebhookEvent` (throws on bad signature) |
+| `verifyWebhookAsync(...)` | same as `verifyWebhook`, Web Crypto (edge/Workers/Deno/Bun) |
+| `createWebhookHandler({ secret, onEvent })` | `(Request) => Promise<Response>` webhook route handler |
+
+Every method also accepts an optional final `{ signal }` (`AbortSignal`) for cancellation.
 
 ### `InvoClient` (`@invonetwork/web-sdk`)
 

package/dist/{chunk-DV3WZGMH.js → chunk-EEWOAUXO.js}

@@ -96,11 +96,11 @@ var _Http = class _Http {
    *   (e.g. single-use WebAuthn assertions) are NEVER auto-retried.
    */
   async post(path, body, auth, opts) {
-    return this.request("POST", path, body, auth, opts?.idempotent ?? false);
+    return this.request("POST", path, body, auth, opts?.idempotent ?? false, opts?.signal);
   }
   // GET is always idempotent → safe to retry.
-  async get(path, auth) {
-    return this.request("GET", path, void 0, auth, true);
+  async get(path, auth, opts) {
+    return this.request("GET", path, void 0, auth, true, opts?.signal);
   }
   authHeaders(auth) {
     switch (auth.kind) {
@@ -112,7 +112,7 @@ var _Http = class _Http {
         return {};
     }
   }
-  async request(method, path, body, auth, idempotent) {
+  async request(method, path, body, auth, idempotent, signal) {
     const url = `${this.baseUrl}${path}`;
     const headers = {
       Accept: "application/json",
@@ -122,10 +122,13 @@ var _Http = class _Http {
     if (body !== void 0) headers["Content-Type"] = "application/json";
     const payload = body !== void 0 ? JSON.stringify(body) : void 0;
     for (let attempt = 0; ; attempt++) {
+      if (signal?.aborted) throw abortError(path);
       const start = Date.now();
       this.fire("onRequest", { method, url, attempt });
       const controller = new AbortController();
       const timer = setTimeout(() => controller.abort(), this.timeoutMs);
+      const onAbort = () => controller.abort();
+      signal?.addEventListener("abort", onAbort, { once: true });
       let res;
       let networkError;
       try {
@@ -138,12 +141,14 @@ var _Http = class _Http {
         });
       } finally {
         clearTimeout(timer);
+        signal?.removeEventListener("abort", onAbort);
       }
       if (networkError) {
+        if (signal?.aborted) throw abortError(path);
         const willRetry = idempotent && attempt < this.maxRetries;
         this.fire("onError", { method, url, attempt, error: networkError, willRetry });
         if (willRetry) {
-          await sleep(this.backoff(attempt));
+          await sleep(this.backoff(attempt), signal);
           continue;
         }
         throw networkError;
@@ -179,7 +184,7 @@ var _Http = class _Http {
         }
         this.fire("onError", { method, url, attempt, error: err, willRetry: wait !== void 0 });
         if (wait !== void 0) {
-          await sleep(wait);
+          await sleep(wait, signal);
           continue;
         }
         throw err;
@@ -205,8 +210,21 @@ var _Http = class _Http {
 /** HTTP statuses worth retrying — rate limit + transient gateway/server errors. */
 _Http.RETRIABLE_STATUS = /* @__PURE__ */ new Set([429, 500, 502, 503, 504]);
 var Http = _Http;
-function sleep(ms) {
-  return new Promise((resolve) => setTimeout(resolve, ms));
+function sleep(ms, signal) {
+  return new Promise((resolve) => {
+    if (signal?.aborted) return resolve();
+    const timer = setTimeout(done, ms);
+    const onAbort = () => done();
+    function done() {
+      clearTimeout(timer);
+      signal?.removeEventListener("abort", onAbort);
+      resolve();
+    }
+    signal?.addEventListener("abort", onAbort, { once: true });
+  });
+}
+function abortError(path) {
+  return new InvoError({ message: `Request to ${path} was aborted`, code: "ABORTED", status: 0 });
 }
 function pickRequestId(headers) {
   if (!headers || typeof headers.get !== "function") return void 0;
@@ -227,5 +245,5 @@ function retryAfterMs(parsed, headers) {
 }
 
 export { Http, InvoError, assertSecureBaseUrl };
-//# sourceMappingURL=chunk-DV3WZGMH.js.map
-//# sourceMappingURL=chunk-DV3WZGMH.js.map
+//# sourceMappingURL=chunk-EEWOAUXO.js.map
+//# sourceMappingURL=chunk-EEWOAUXO.js.map

package/dist/index.cjs

@@ -98,11 +98,11 @@ var _Http = class _Http {
    *   (e.g. single-use WebAuthn assertions) are NEVER auto-retried.
    */
   async post(path, body, auth, opts) {
-    return this.request("POST", path, body, auth, opts?.idempotent ?? false);
+    return this.request("POST", path, body, auth, opts?.idempotent ?? false, opts?.signal);
   }
   // GET is always idempotent → safe to retry.
-  async get(path, auth) {
-    return this.request("GET", path, void 0, auth, true);
+  async get(path, auth, opts) {
+    return this.request("GET", path, void 0, auth, true, opts?.signal);
   }
   authHeaders(auth) {
     switch (auth.kind) {
@@ -114,7 +114,7 @@ var _Http = class _Http {
         return {};
     }
   }
-  async request(method, path, body, auth, idempotent) {
+  async request(method, path, body, auth, idempotent, signal) {
     const url = `${this.baseUrl}${path}`;
     const headers = {
       Accept: "application/json",
@@ -124,10 +124,13 @@ var _Http = class _Http {
     if (body !== void 0) headers["Content-Type"] = "application/json";
     const payload = body !== void 0 ? JSON.stringify(body) : void 0;
     for (let attempt = 0; ; attempt++) {
+      if (signal?.aborted) throw abortError(path);
       const start = Date.now();
       this.fire("onRequest", { method, url, attempt });
       const controller = new AbortController();
       const timer = setTimeout(() => controller.abort(), this.timeoutMs);
+      const onAbort = () => controller.abort();
+      signal?.addEventListener("abort", onAbort, { once: true });
       let res;
       let networkError;
       try {
@@ -140,12 +143,14 @@ var _Http = class _Http {
         });
       } finally {
         clearTimeout(timer);
+        signal?.removeEventListener("abort", onAbort);
       }
       if (networkError) {
+        if (signal?.aborted) throw abortError(path);
         const willRetry = idempotent && attempt < this.maxRetries;
         this.fire("onError", { method, url, attempt, error: networkError, willRetry });
         if (willRetry) {
-          await sleep(this.backoff(attempt));
+          await sleep(this.backoff(attempt), signal);
           continue;
         }
         throw networkError;
@@ -181,7 +186,7 @@ var _Http = class _Http {
         }
         this.fire("onError", { method, url, attempt, error: err, willRetry: wait !== void 0 });
         if (wait !== void 0) {
-          await sleep(wait);
+          await sleep(wait, signal);
           continue;
         }
         throw err;
@@ -207,8 +212,21 @@ var _Http = class _Http {
 /** HTTP statuses worth retrying — rate limit + transient gateway/server errors. */
 _Http.RETRIABLE_STATUS = /* @__PURE__ */ new Set([429, 500, 502, 503, 504]);
 var Http = _Http;
-function sleep(ms) {
-  return new Promise((resolve) => setTimeout(resolve, ms));
+function sleep(ms, signal) {
+  return new Promise((resolve) => {
+    if (signal?.aborted) return resolve();
+    const timer = setTimeout(done, ms);
+    const onAbort = () => done();
+    function done() {
+      clearTimeout(timer);
+      signal?.removeEventListener("abort", onAbort);
+      resolve();
+    }
+    signal?.addEventListener("abort", onAbort, { once: true });
+  });
+}
+function abortError(path) {
+  return new InvoError({ message: `Request to ${path} was aborted`, code: "ABORTED", status: 0 });
 }
 function pickRequestId(headers) {
   if (!headers || typeof headers.get !== "function") return void 0;
@@ -333,38 +351,43 @@ var InvoClient = class {
     }
   }
   /** Enroll a passkey for the token's identity (register/begin -> create() -> register/complete). */
-  async enrollPasskey() {
+  async enrollPasskey(opts) {
     this.assertWebAuthn();
+    const signal = opts?.signal;
     return this.withTokenRetry(async () => {
       const options = await this.post(
-        "/api/sdk/webauthn/register/begin"
+        "/api/sdk/webauthn/register/begin",
+        void 0,
+        signal
       );
       const cred = await navigator.credentials.create({
-        publicKey: toCreationOptions(options)
+        publicKey: toCreationOptions(options),
+        signal
       });
       if (!cred) throw new Error("Passkey creation was cancelled or returned no credential.");
       const raw = await this.post(
         "/api/sdk/webauthn/register/complete",
-        { credential: registrationToJSON(cred) }
+        { credential: registrationToJSON(cred) },
+        signal
       );
       return { status: String(raw["status"] ?? ""), device: raw["device"] ?? null, raw };
     });
   }
   /** Approve a SEND with the player's passkey. */
-  async approveSend(transactionId) {
-    return this.approve("send", transactionId);
+  async approveSend(transactionId, opts) {
+    return this.approve("send", transactionId, opts);
   }
   /** Approve a TRANSFER with the player's passkey (returns the sender's claim code). */
-  async approveTransfer(transactionId) {
-    return this.approve("transfers", transactionId);
+  async approveTransfer(transactionId, opts) {
+    return this.approve("transfers", transactionId, opts);
   }
   /** Recipient self-claims a SEND with their passkey. */
-  async confirmReceiptSend(transactionId) {
-    return this.confirmReceipt("send", transactionId);
+  async confirmReceiptSend(transactionId, opts) {
+    return this.confirmReceipt("send", transactionId, opts);
   }
   /** Recipient self-claims a TRANSFER with their passkey. */
-  async confirmReceiptTransfer(transactionId) {
-    return this.confirmReceipt("transfers", transactionId);
+  async confirmReceiptTransfer(transactionId, opts) {
+    return this.confirmReceipt("transfers", transactionId, opts);
   }
   /**
    * Interchangeable methods (§4.6): prove an *already-enrolled* method (e.g. the
@@ -374,15 +397,19 @@ var InvoClient = class {
    *
    * begin -> navigator.credentials.get() -> complete with { link_id, webauthn_assertion }.
    */
-  async linkDevice(linkId) {
+  async linkDevice(linkId, opts) {
     if (!linkId) throw new Error("linkDevice requires a `linkId`.");
+    const signal = opts?.signal;
     return this.withTokenRetry(async () => {
-      const assertion = await this.runAssertion("/api/sdk/device/link/webauthn/begin", {
-        link_id: linkId
-      });
+      const assertion = await this.runAssertion(
+        "/api/sdk/device/link/webauthn/begin",
+        { link_id: linkId },
+        signal
+      );
       const raw = await this.post(
         "/api/sdk/device/link/webauthn/complete",
-        { link_id: linkId, webauthn_assertion: assertion }
+        { link_id: linkId, webauthn_assertion: assertion },
+        signal
       );
       return { status: String(raw["status"] ?? ""), raw };
     });
@@ -390,8 +417,8 @@ var InvoClient = class {
   // --- internals ---
   /** POST with the current player token. Token-expiry retry is handled one level
    *  up by withTokenRetry (which re-runs the whole ceremony, not a single call). */
-  async post(path, body) {
-    return this.http.post(path, body, this.auth);
+  async post(path, body, signal) {
+    return this.http.post(path, body, this.auth, { signal });
   }
   /**
    * Run a whole flow, retrying it ONCE if any call fails with SDK_TOKEN_EXPIRED
@@ -422,22 +449,29 @@ var InvoClient = class {
     this.auth = { kind: "bearer", token: fresh };
     return true;
   }
-  async runAssertion(beginPath, beginBody) {
+  async runAssertion(beginPath, beginBody, signal) {
     this.assertWebAuthn();
-    const options = await this.post(beginPath, beginBody);
+    const options = await this.post(beginPath, beginBody, signal);
     const cred = await navigator.credentials.get({
-      publicKey: toRequestOptions(options)
+      publicKey: toRequestOptions(options),
+      signal
     });
     if (!cred) throw new Error("Passkey assertion was cancelled or returned no credential.");
     return assertionToJSON(cred);
   }
-  async approve(flow, transactionId) {
+  async approve(flow, transactionId, opts) {
     const id = encodeURIComponent(transactionId);
+    const signal = opts?.signal;
     return this.withTokenRetry(async () => {
-      const assertion = await this.runAssertion(`/api/sdk/${flow}/${id}/approve/webauthn/begin`);
+      const assertion = await this.runAssertion(
+        `/api/sdk/${flow}/${id}/approve/webauthn/begin`,
+        void 0,
+        signal
+      );
       const raw = await this.post(
         `/api/sdk/${flow}/${id}/approve`,
-        { webauthn_assertion: assertion }
+        { webauthn_assertion: assertion },
+        signal
       );
       return {
         status: String(raw["status"] ?? ""),
@@ -449,15 +483,19 @@ var InvoClient = class {
       };
     });
   }
-  async confirmReceipt(flow, transactionId) {
+  async confirmReceipt(flow, transactionId, opts) {
     const id = encodeURIComponent(transactionId);
+    const signal = opts?.signal;
     return this.withTokenRetry(async () => {
       const assertion = await this.runAssertion(
-        `/api/sdk/${flow}/${id}/confirm-receipt/webauthn/begin`
+        `/api/sdk/${flow}/${id}/confirm-receipt/webauthn/begin`,
+        void 0,
+        signal
       );
       const raw = await this.post(
         `/api/sdk/${flow}/${id}/confirm-receipt`,
-        { webauthn_assertion: assertion }
+        { webauthn_assertion: assertion },
+        signal
       );
       return { status: String(raw["status"] ?? ""), raw };
     });

package/dist/index.d.cts

@@ -1,5 +1,5 @@
-import { C as ClientConfig, A as ApproveResult, a as ConfirmReceiptResult, L as LinkDeviceResult } from './types-CBkoUymV.cjs';
-export { I as InvoError, b as InvoErrorInfo, c as InvoHooks, d as InvoRequestInfo, e as InvoResponseInfo, R as Rail, V as VerificationMethod } from './types-CBkoUymV.cjs';
+import { C as ClientConfig, a as CallOptions, A as ApproveResult, b as ConfirmReceiptResult, L as LinkDeviceResult } from './types-CBMLNwbe.cjs';
+export { I as InvoError, c as InvoErrorInfo, d as InvoHooks, e as InvoRequestInfo, f as InvoResponseInfo, R as Rail, V as VerificationMethod } from './types-CBMLNwbe.cjs';
 
 declare class InvoClient {
     private readonly http;
@@ -10,19 +10,19 @@ declare class InvoClient {
     constructor(config: ClientConfig);
     private assertWebAuthn;
     /** Enroll a passkey for the token's identity (register/begin -> create() -> register/complete). */
-    enrollPasskey(): Promise<{
+    enrollPasskey(opts?: CallOptions): Promise<{
         status: string;
         device: unknown;
         raw: Record<string, unknown>;
     }>;
     /** Approve a SEND with the player's passkey. */
-    approveSend(transactionId: string): Promise<ApproveResult>;
+    approveSend(transactionId: string, opts?: CallOptions): Promise<ApproveResult>;
     /** Approve a TRANSFER with the player's passkey (returns the sender's claim code). */
-    approveTransfer(transactionId: string): Promise<ApproveResult>;
+    approveTransfer(transactionId: string, opts?: CallOptions): Promise<ApproveResult>;
     /** Recipient self-claims a SEND with their passkey. */
-    confirmReceiptSend(transactionId: string): Promise<ConfirmReceiptResult>;
+    confirmReceiptSend(transactionId: string, opts?: CallOptions): Promise<ConfirmReceiptResult>;
     /** Recipient self-claims a TRANSFER with their passkey. */
-    confirmReceiptTransfer(transactionId: string): Promise<ConfirmReceiptResult>;
+    confirmReceiptTransfer(transactionId: string, opts?: CallOptions): Promise<ConfirmReceiptResult>;
     /**
      * Interchangeable methods (§4.6): prove an *already-enrolled* method (e.g. the
      * INVO app device key) to authorize adding a new partner passkey. The returned
@@ -31,7 +31,7 @@ declare class InvoClient {
      *
      * begin -> navigator.credentials.get() -> complete with { link_id, webauthn_assertion }.
      */
-    linkDevice(linkId: string): Promise<LinkDeviceResult>;
+    linkDevice(linkId: string, opts?: CallOptions): Promise<LinkDeviceResult>;
     /** POST with the current player token. Token-expiry retry is handled one level
      *  up by withTokenRetry (which re-runs the whole ceremony, not a single call). */
     private post;
@@ -49,4 +49,4 @@ declare class InvoClient {
     private confirmReceipt;
 }
 
-export { ApproveResult, ClientConfig, ConfirmReceiptResult, InvoClient, LinkDeviceResult };
+export { ApproveResult, CallOptions, ClientConfig, ConfirmReceiptResult, InvoClient, LinkDeviceResult };

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { C as ClientConfig, A as ApproveResult, a as ConfirmReceiptResult, L as LinkDeviceResult } from './types-CBkoUymV.js';
-export { I as InvoError, b as InvoErrorInfo, c as InvoHooks, d as InvoRequestInfo, e as InvoResponseInfo, R as Rail, V as VerificationMethod } from './types-CBkoUymV.js';
+import { C as ClientConfig, a as CallOptions, A as ApproveResult, b as ConfirmReceiptResult, L as LinkDeviceResult } from './types-CBMLNwbe.js';
+export { I as InvoError, c as InvoErrorInfo, d as InvoHooks, e as InvoRequestInfo, f as InvoResponseInfo, R as Rail, V as VerificationMethod } from './types-CBMLNwbe.js';
 
 declare class InvoClient {
     private readonly http;
@@ -10,19 +10,19 @@ declare class InvoClient {
     constructor(config: ClientConfig);
     private assertWebAuthn;
     /** Enroll a passkey for the token's identity (register/begin -> create() -> register/complete). */
-    enrollPasskey(): Promise<{
+    enrollPasskey(opts?: CallOptions): Promise<{
         status: string;
         device: unknown;
         raw: Record<string, unknown>;
     }>;
     /** Approve a SEND with the player's passkey. */
-    approveSend(transactionId: string): Promise<ApproveResult>;
+    approveSend(transactionId: string, opts?: CallOptions): Promise<ApproveResult>;
     /** Approve a TRANSFER with the player's passkey (returns the sender's claim code). */
-    approveTransfer(transactionId: string): Promise<ApproveResult>;
+    approveTransfer(transactionId: string, opts?: CallOptions): Promise<ApproveResult>;
     /** Recipient self-claims a SEND with their passkey. */
-    confirmReceiptSend(transactionId: string): Promise<ConfirmReceiptResult>;
+    confirmReceiptSend(transactionId: string, opts?: CallOptions): Promise<ConfirmReceiptResult>;
     /** Recipient self-claims a TRANSFER with their passkey. */
-    confirmReceiptTransfer(transactionId: string): Promise<ConfirmReceiptResult>;
+    confirmReceiptTransfer(transactionId: string, opts?: CallOptions): Promise<ConfirmReceiptResult>;
     /**
      * Interchangeable methods (§4.6): prove an *already-enrolled* method (e.g. the
      * INVO app device key) to authorize adding a new partner passkey. The returned
@@ -31,7 +31,7 @@ declare class InvoClient {
      *
      * begin -> navigator.credentials.get() -> complete with { link_id, webauthn_assertion }.
      */
-    linkDevice(linkId: string): Promise<LinkDeviceResult>;
+    linkDevice(linkId: string, opts?: CallOptions): Promise<LinkDeviceResult>;
     /** POST with the current player token. Token-expiry retry is handled one level
      *  up by withTokenRetry (which re-runs the whole ceremony, not a single call). */
     private post;
@@ -49,4 +49,4 @@ declare class InvoClient {
     private confirmReceipt;
 }
 
-export { ApproveResult, ClientConfig, ConfirmReceiptResult, InvoClient, LinkDeviceResult };
+export { ApproveResult, CallOptions, ClientConfig, ConfirmReceiptResult, InvoClient, LinkDeviceResult };