@invonetwork/web-sdk 0.3.0 → 0.4.1

package/dist/index.cjs

@@ -98,11 +98,11 @@ var _Http = class _Http {
    *   (e.g. single-use WebAuthn assertions) are NEVER auto-retried.
    */
   async post(path, body, auth, opts) {
-    return this.request("POST", path, body, auth, opts?.idempotent ?? false);
+    return this.request("POST", path, body, auth, opts?.idempotent ?? false, opts?.signal);
   }
   // GET is always idempotent → safe to retry.
-  async get(path, auth) {
-    return this.request("GET", path, void 0, auth, true);
+  async get(path, auth, opts) {
+    return this.request("GET", path, void 0, auth, true, opts?.signal);
   }
   authHeaders(auth) {
     switch (auth.kind) {
@@ -114,7 +114,7 @@ var _Http = class _Http {
         return {};
     }
   }
-  async request(method, path, body, auth, idempotent) {
+  async request(method, path, body, auth, idempotent, signal) {
     const url = `${this.baseUrl}${path}`;
     const headers = {
       Accept: "application/json",
@@ -124,10 +124,13 @@ var _Http = class _Http {
     if (body !== void 0) headers["Content-Type"] = "application/json";
     const payload = body !== void 0 ? JSON.stringify(body) : void 0;
     for (let attempt = 0; ; attempt++) {
+      if (signal?.aborted) throw abortError(path);
       const start = Date.now();
       this.fire("onRequest", { method, url, attempt });
       const controller = new AbortController();
       const timer = setTimeout(() => controller.abort(), this.timeoutMs);
+      const onAbort = () => controller.abort();
+      signal?.addEventListener("abort", onAbort, { once: true });
       let res;
       let networkError;
       try {
@@ -140,12 +143,14 @@ var _Http = class _Http {
         });
       } finally {
         clearTimeout(timer);
+        signal?.removeEventListener("abort", onAbort);
       }
       if (networkError) {
+        if (signal?.aborted) throw abortError(path);
         const willRetry = idempotent && attempt < this.maxRetries;
         this.fire("onError", { method, url, attempt, error: networkError, willRetry });
         if (willRetry) {
-          await sleep(this.backoff(attempt));
+          await sleep(this.backoff(attempt), signal);
           continue;
         }
         throw networkError;
@@ -181,7 +186,7 @@ var _Http = class _Http {
         }
         this.fire("onError", { method, url, attempt, error: err, willRetry: wait !== void 0 });
         if (wait !== void 0) {
-          await sleep(wait);
+          await sleep(wait, signal);
           continue;
         }
         throw err;
@@ -207,8 +212,21 @@ var _Http = class _Http {
 /** HTTP statuses worth retrying — rate limit + transient gateway/server errors. */
 _Http.RETRIABLE_STATUS = /* @__PURE__ */ new Set([429, 500, 502, 503, 504]);
 var Http = _Http;
-function sleep(ms) {
-  return new Promise((resolve) => setTimeout(resolve, ms));
+function sleep(ms, signal) {
+  return new Promise((resolve) => {
+    if (signal?.aborted) return resolve();
+    const timer = setTimeout(done, ms);
+    const onAbort = () => done();
+    function done() {
+      clearTimeout(timer);
+      signal?.removeEventListener("abort", onAbort);
+      resolve();
+    }
+    signal?.addEventListener("abort", onAbort, { once: true });
+  });
+}
+function abortError(path) {
+  return new InvoError({ message: `Request to ${path} was aborted`, code: "ABORTED", status: 0 });
 }
 function pickRequestId(headers) {
   if (!headers || typeof headers.get !== "function") return void 0;
@@ -333,38 +351,43 @@ var InvoClient = class {
     }
   }
   /** Enroll a passkey for the token's identity (register/begin -> create() -> register/complete). */
-  async enrollPasskey() {
+  async enrollPasskey(opts) {
     this.assertWebAuthn();
+    const signal = opts?.signal;
     return this.withTokenRetry(async () => {
       const options = await this.post(
-        "/api/sdk/webauthn/register/begin"
+        "/api/sdk/webauthn/register/begin",
+        void 0,
+        signal
       );
       const cred = await navigator.credentials.create({
-        publicKey: toCreationOptions(options)
+        publicKey: toCreationOptions(options),
+        signal
       });
       if (!cred) throw new Error("Passkey creation was cancelled or returned no credential.");
       const raw = await this.post(
         "/api/sdk/webauthn/register/complete",
-        { credential: registrationToJSON(cred) }
+        { credential: registrationToJSON(cred) },
+        signal
       );
       return { status: String(raw["status"] ?? ""), device: raw["device"] ?? null, raw };
     });
   }
   /** Approve a SEND with the player's passkey. */
-  async approveSend(transactionId) {
-    return this.approve("send", transactionId);
+  async approveSend(transactionId, opts) {
+    return this.approve("send", transactionId, opts);
   }
   /** Approve a TRANSFER with the player's passkey (returns the sender's claim code). */
-  async approveTransfer(transactionId) {
-    return this.approve("transfers", transactionId);
+  async approveTransfer(transactionId, opts) {
+    return this.approve("transfers", transactionId, opts);
   }
   /** Recipient self-claims a SEND with their passkey. */
-  async confirmReceiptSend(transactionId) {
-    return this.confirmReceipt("send", transactionId);
+  async confirmReceiptSend(transactionId, opts) {
+    return this.confirmReceipt("send", transactionId, opts);
   }
   /** Recipient self-claims a TRANSFER with their passkey. */
-  async confirmReceiptTransfer(transactionId) {
-    return this.confirmReceipt("transfers", transactionId);
+  async confirmReceiptTransfer(transactionId, opts) {
+    return this.confirmReceipt("transfers", transactionId, opts);
   }
   /**
    * Interchangeable methods (§4.6): prove an *already-enrolled* method (e.g. the
@@ -374,15 +397,19 @@ var InvoClient = class {
    *
    * begin -> navigator.credentials.get() -> complete with { link_id, webauthn_assertion }.
    */
-  async linkDevice(linkId) {
+  async linkDevice(linkId, opts) {
     if (!linkId) throw new Error("linkDevice requires a `linkId`.");
+    const signal = opts?.signal;
     return this.withTokenRetry(async () => {
-      const assertion = await this.runAssertion("/api/sdk/device/link/webauthn/begin", {
-        link_id: linkId
-      });
+      const assertion = await this.runAssertion(
+        "/api/sdk/device/link/webauthn/begin",
+        { link_id: linkId },
+        signal
+      );
       const raw = await this.post(
         "/api/sdk/device/link/webauthn/complete",
-        { link_id: linkId, webauthn_assertion: assertion }
+        { link_id: linkId, webauthn_assertion: assertion },
+        signal
       );
       return { status: String(raw["status"] ?? ""), raw };
     });
@@ -390,8 +417,8 @@ var InvoClient = class {
   // --- internals ---
   /** POST with the current player token. Token-expiry retry is handled one level
    *  up by withTokenRetry (which re-runs the whole ceremony, not a single call). */
-  async post(path, body) {
-    return this.http.post(path, body, this.auth);
+  async post(path, body, signal) {
+    return this.http.post(path, body, this.auth, { signal });
   }
   /**
    * Run a whole flow, retrying it ONCE if any call fails with SDK_TOKEN_EXPIRED
@@ -422,22 +449,29 @@ var InvoClient = class {
     this.auth = { kind: "bearer", token: fresh };
     return true;
   }
-  async runAssertion(beginPath, beginBody) {
+  async runAssertion(beginPath, beginBody, signal) {
     this.assertWebAuthn();
-    const options = await this.post(beginPath, beginBody);
+    const options = await this.post(beginPath, beginBody, signal);
     const cred = await navigator.credentials.get({
-      publicKey: toRequestOptions(options)
+      publicKey: toRequestOptions(options),
+      signal
     });
     if (!cred) throw new Error("Passkey assertion was cancelled or returned no credential.");
     return assertionToJSON(cred);
   }
-  async approve(flow, transactionId) {
+  async approve(flow, transactionId, opts) {
     const id = encodeURIComponent(transactionId);
+    const signal = opts?.signal;
     return this.withTokenRetry(async () => {
-      const assertion = await this.runAssertion(`/api/sdk/${flow}/${id}/approve/webauthn/begin`);
+      const assertion = await this.runAssertion(
+        `/api/sdk/${flow}/${id}/approve/webauthn/begin`,
+        void 0,
+        signal
+      );
       const raw = await this.post(
         `/api/sdk/${flow}/${id}/approve`,
-        { webauthn_assertion: assertion }
+        { webauthn_assertion: assertion },
+        signal
       );
       return {
         status: String(raw["status"] ?? ""),
@@ -449,15 +483,19 @@ var InvoClient = class {
       };
     });
   }
-  async confirmReceipt(flow, transactionId) {
+  async confirmReceipt(flow, transactionId, opts) {
     const id = encodeURIComponent(transactionId);
+    const signal = opts?.signal;
     return this.withTokenRetry(async () => {
       const assertion = await this.runAssertion(
-        `/api/sdk/${flow}/${id}/confirm-receipt/webauthn/begin`
+        `/api/sdk/${flow}/${id}/confirm-receipt/webauthn/begin`,
+        void 0,
+        signal
       );
       const raw = await this.post(
         `/api/sdk/${flow}/${id}/confirm-receipt`,
-        { webauthn_assertion: assertion }
+        { webauthn_assertion: assertion },
+        signal
       );
       return { status: String(raw["status"] ?? ""), raw };
     });

package/dist/index.d.cts

@@ -1,5 +1,5 @@
-import { C as ClientConfig, A as ApproveResult, a as ConfirmReceiptResult, L as LinkDeviceResult } from './types-CBkoUymV.cjs';
-export { I as InvoError, b as InvoErrorInfo, c as InvoHooks, d as InvoRequestInfo, e as InvoResponseInfo, R as Rail, V as VerificationMethod } from './types-CBkoUymV.cjs';
+import { C as ClientConfig, a as CallOptions, A as ApproveResult, b as ConfirmReceiptResult, L as LinkDeviceResult } from './types-CBMLNwbe.cjs';
+export { I as InvoError, c as InvoErrorInfo, d as InvoHooks, e as InvoRequestInfo, f as InvoResponseInfo, R as Rail, V as VerificationMethod } from './types-CBMLNwbe.cjs';
 
 declare class InvoClient {
     private readonly http;
@@ -10,19 +10,19 @@ declare class InvoClient {
     constructor(config: ClientConfig);
     private assertWebAuthn;
     /** Enroll a passkey for the token's identity (register/begin -> create() -> register/complete). */
-    enrollPasskey(): Promise<{
+    enrollPasskey(opts?: CallOptions): Promise<{
         status: string;
         device: unknown;
         raw: Record<string, unknown>;
     }>;
     /** Approve a SEND with the player's passkey. */
-    approveSend(transactionId: string): Promise<ApproveResult>;
+    approveSend(transactionId: string, opts?: CallOptions): Promise<ApproveResult>;
     /** Approve a TRANSFER with the player's passkey (returns the sender's claim code). */
-    approveTransfer(transactionId: string): Promise<ApproveResult>;
+    approveTransfer(transactionId: string, opts?: CallOptions): Promise<ApproveResult>;
     /** Recipient self-claims a SEND with their passkey. */
-    confirmReceiptSend(transactionId: string): Promise<ConfirmReceiptResult>;
+    confirmReceiptSend(transactionId: string, opts?: CallOptions): Promise<ConfirmReceiptResult>;
     /** Recipient self-claims a TRANSFER with their passkey. */
-    confirmReceiptTransfer(transactionId: string): Promise<ConfirmReceiptResult>;
+    confirmReceiptTransfer(transactionId: string, opts?: CallOptions): Promise<ConfirmReceiptResult>;
     /**
      * Interchangeable methods (§4.6): prove an *already-enrolled* method (e.g. the
      * INVO app device key) to authorize adding a new partner passkey. The returned
@@ -31,7 +31,7 @@ declare class InvoClient {
      *
      * begin -> navigator.credentials.get() -> complete with { link_id, webauthn_assertion }.
      */
-    linkDevice(linkId: string): Promise<LinkDeviceResult>;
+    linkDevice(linkId: string, opts?: CallOptions): Promise<LinkDeviceResult>;
     /** POST with the current player token. Token-expiry retry is handled one level
      *  up by withTokenRetry (which re-runs the whole ceremony, not a single call). */
     private post;
@@ -49,4 +49,4 @@ declare class InvoClient {
     private confirmReceipt;
 }
 
-export { ApproveResult, ClientConfig, ConfirmReceiptResult, InvoClient, LinkDeviceResult };
+export { ApproveResult, CallOptions, ClientConfig, ConfirmReceiptResult, InvoClient, LinkDeviceResult };

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { C as ClientConfig, A as ApproveResult, a as ConfirmReceiptResult, L as LinkDeviceResult } from './types-CBkoUymV.js';
-export { I as InvoError, b as InvoErrorInfo, c as InvoHooks, d as InvoRequestInfo, e as InvoResponseInfo, R as Rail, V as VerificationMethod } from './types-CBkoUymV.js';
+import { C as ClientConfig, a as CallOptions, A as ApproveResult, b as ConfirmReceiptResult, L as LinkDeviceResult } from './types-CBMLNwbe.js';
+export { I as InvoError, c as InvoErrorInfo, d as InvoHooks, e as InvoRequestInfo, f as InvoResponseInfo, R as Rail, V as VerificationMethod } from './types-CBMLNwbe.js';
 
 declare class InvoClient {
     private readonly http;
@@ -10,19 +10,19 @@ declare class InvoClient {
     constructor(config: ClientConfig);
     private assertWebAuthn;
     /** Enroll a passkey for the token's identity (register/begin -> create() -> register/complete). */
-    enrollPasskey(): Promise<{
+    enrollPasskey(opts?: CallOptions): Promise<{
         status: string;
         device: unknown;
         raw: Record<string, unknown>;
     }>;
     /** Approve a SEND with the player's passkey. */
-    approveSend(transactionId: string): Promise<ApproveResult>;
+    approveSend(transactionId: string, opts?: CallOptions): Promise<ApproveResult>;
     /** Approve a TRANSFER with the player's passkey (returns the sender's claim code). */
-    approveTransfer(transactionId: string): Promise<ApproveResult>;
+    approveTransfer(transactionId: string, opts?: CallOptions): Promise<ApproveResult>;
     /** Recipient self-claims a SEND with their passkey. */
-    confirmReceiptSend(transactionId: string): Promise<ConfirmReceiptResult>;
+    confirmReceiptSend(transactionId: string, opts?: CallOptions): Promise<ConfirmReceiptResult>;
     /** Recipient self-claims a TRANSFER with their passkey. */
-    confirmReceiptTransfer(transactionId: string): Promise<ConfirmReceiptResult>;
+    confirmReceiptTransfer(transactionId: string, opts?: CallOptions): Promise<ConfirmReceiptResult>;
     /**
      * Interchangeable methods (§4.6): prove an *already-enrolled* method (e.g. the
      * INVO app device key) to authorize adding a new partner passkey. The returned
@@ -31,7 +31,7 @@ declare class InvoClient {
      *
      * begin -> navigator.credentials.get() -> complete with { link_id, webauthn_assertion }.
      */
-    linkDevice(linkId: string): Promise<LinkDeviceResult>;
+    linkDevice(linkId: string, opts?: CallOptions): Promise<LinkDeviceResult>;
     /** POST with the current player token. Token-expiry retry is handled one level
      *  up by withTokenRetry (which re-runs the whole ceremony, not a single call). */
     private post;
@@ -49,4 +49,4 @@ declare class InvoClient {
     private confirmReceipt;
 }
 
-export { ApproveResult, ClientConfig, ConfirmReceiptResult, InvoClient, LinkDeviceResult };
+export { ApproveResult, CallOptions, ClientConfig, ConfirmReceiptResult, InvoClient, LinkDeviceResult };

package/dist/index.js

@@ -1,5 +1,5 @@
-import { assertSecureBaseUrl, Http, InvoError } from './chunk-DV3WZGMH.js';
-export { InvoError } from './chunk-DV3WZGMH.js';
+import { assertSecureBaseUrl, Http, InvoError } from './chunk-EEWOAUXO.js';
+export { InvoError } from './chunk-EEWOAUXO.js';
 
 // src/shared/webauthn.ts
 function b64urlToBuffer(value) {
@@ -106,38 +106,43 @@ var InvoClient = class {
     }
   }
   /** Enroll a passkey for the token's identity (register/begin -> create() -> register/complete). */
-  async enrollPasskey() {
+  async enrollPasskey(opts) {
     this.assertWebAuthn();
+    const signal = opts?.signal;
     return this.withTokenRetry(async () => {
       const options = await this.post(
-        "/api/sdk/webauthn/register/begin"
+        "/api/sdk/webauthn/register/begin",
+        void 0,
+        signal
       );
       const cred = await navigator.credentials.create({
-        publicKey: toCreationOptions(options)
+        publicKey: toCreationOptions(options),
+        signal
       });
       if (!cred) throw new Error("Passkey creation was cancelled or returned no credential.");
       const raw = await this.post(
         "/api/sdk/webauthn/register/complete",
-        { credential: registrationToJSON(cred) }
+        { credential: registrationToJSON(cred) },
+        signal
       );
       return { status: String(raw["status"] ?? ""), device: raw["device"] ?? null, raw };
     });
   }
   /** Approve a SEND with the player's passkey. */
-  async approveSend(transactionId) {
-    return this.approve("send", transactionId);
+  async approveSend(transactionId, opts) {
+    return this.approve("send", transactionId, opts);
   }
   /** Approve a TRANSFER with the player's passkey (returns the sender's claim code). */
-  async approveTransfer(transactionId) {
-    return this.approve("transfers", transactionId);
+  async approveTransfer(transactionId, opts) {
+    return this.approve("transfers", transactionId, opts);
   }
   /** Recipient self-claims a SEND with their passkey. */
-  async confirmReceiptSend(transactionId) {
-    return this.confirmReceipt("send", transactionId);
+  async confirmReceiptSend(transactionId, opts) {
+    return this.confirmReceipt("send", transactionId, opts);
   }
   /** Recipient self-claims a TRANSFER with their passkey. */
-  async confirmReceiptTransfer(transactionId) {
-    return this.confirmReceipt("transfers", transactionId);
+  async confirmReceiptTransfer(transactionId, opts) {
+    return this.confirmReceipt("transfers", transactionId, opts);
   }
   /**
    * Interchangeable methods (§4.6): prove an *already-enrolled* method (e.g. the
@@ -147,15 +152,19 @@ var InvoClient = class {
    *
    * begin -> navigator.credentials.get() -> complete with { link_id, webauthn_assertion }.
    */
-  async linkDevice(linkId) {
+  async linkDevice(linkId, opts) {
     if (!linkId) throw new Error("linkDevice requires a `linkId`.");
+    const signal = opts?.signal;
     return this.withTokenRetry(async () => {
-      const assertion = await this.runAssertion("/api/sdk/device/link/webauthn/begin", {
-        link_id: linkId
-      });
+      const assertion = await this.runAssertion(
+        "/api/sdk/device/link/webauthn/begin",
+        { link_id: linkId },
+        signal
+      );
       const raw = await this.post(
         "/api/sdk/device/link/webauthn/complete",
-        { link_id: linkId, webauthn_assertion: assertion }
+        { link_id: linkId, webauthn_assertion: assertion },
+        signal
       );
       return { status: String(raw["status"] ?? ""), raw };
     });
@@ -163,8 +172,8 @@ var InvoClient = class {
   // --- internals ---
   /** POST with the current player token. Token-expiry retry is handled one level
    *  up by withTokenRetry (which re-runs the whole ceremony, not a single call). */
-  async post(path, body) {
-    return this.http.post(path, body, this.auth);
+  async post(path, body, signal) {
+    return this.http.post(path, body, this.auth, { signal });
   }
   /**
    * Run a whole flow, retrying it ONCE if any call fails with SDK_TOKEN_EXPIRED
@@ -195,22 +204,29 @@ var InvoClient = class {
     this.auth = { kind: "bearer", token: fresh };
     return true;
   }
-  async runAssertion(beginPath, beginBody) {
+  async runAssertion(beginPath, beginBody, signal) {
     this.assertWebAuthn();
-    const options = await this.post(beginPath, beginBody);
+    const options = await this.post(beginPath, beginBody, signal);
     const cred = await navigator.credentials.get({
-      publicKey: toRequestOptions(options)
+      publicKey: toRequestOptions(options),
+      signal
     });
     if (!cred) throw new Error("Passkey assertion was cancelled or returned no credential.");
     return assertionToJSON(cred);
   }
-  async approve(flow, transactionId) {
+  async approve(flow, transactionId, opts) {
     const id = encodeURIComponent(transactionId);
+    const signal = opts?.signal;
     return this.withTokenRetry(async () => {
-      const assertion = await this.runAssertion(`/api/sdk/${flow}/${id}/approve/webauthn/begin`);
+      const assertion = await this.runAssertion(
+        `/api/sdk/${flow}/${id}/approve/webauthn/begin`,
+        void 0,
+        signal
+      );
       const raw = await this.post(
         `/api/sdk/${flow}/${id}/approve`,
-        { webauthn_assertion: assertion }
+        { webauthn_assertion: assertion },
+        signal
       );
       return {
         status: String(raw["status"] ?? ""),
@@ -222,15 +238,19 @@ var InvoClient = class {
       };
     });
   }
-  async confirmReceipt(flow, transactionId) {
+  async confirmReceipt(flow, transactionId, opts) {
     const id = encodeURIComponent(transactionId);
+    const signal = opts?.signal;
     return this.withTokenRetry(async () => {
       const assertion = await this.runAssertion(
-        `/api/sdk/${flow}/${id}/confirm-receipt/webauthn/begin`
+        `/api/sdk/${flow}/${id}/confirm-receipt/webauthn/begin`,
+        void 0,
+        signal
       );
       const raw = await this.post(
         `/api/sdk/${flow}/${id}/confirm-receipt`,
-        { webauthn_assertion: assertion }
+        { webauthn_assertion: assertion },
+        signal
       );
       return { status: String(raw["status"] ?? ""), raw };
     });