@sparkvault/sdk 1.11.1 → 1.11.3

package/dist/identity/api.d.ts

@@ -11,7 +11,18 @@ export declare class IdentityApi {
     private readonly timeoutMs;
     /** Cached config promise - allows preloading and deduplication */
     private configCache;
+    /** Abort controller for cancelling all pending requests on close */
+    private closeController;
     constructor(config: ResolvedConfig, timeoutMs?: number);
+    /**
+     * Abort all pending requests.
+     * Call this when the renderer is closed to prevent orphaned requests.
+     */
+    abort(): void;
+    /**
+     * Check if the API has been aborted.
+     */
+    isAborted(): boolean;
     private get baseUrl();
     private request;
     /**

package/dist/identity/renderer.d.ts

@@ -37,6 +37,7 @@ export declare class IdentityRenderer {
     start(): Promise<void>;
     /**
      * Close the modal and clean up.
+     * Cancels all pending API requests to prevent orphaned operations.
      */
     close(): void;
     private handleClose;

package/dist/sparkvault.cjs.js

@@ -586,27 +586,61 @@ class IdentityApi {
     constructor(config, timeoutMs = DEFAULT_TIMEOUT_MS$1) {
         /** Cached config promise - allows preloading and deduplication */
         this.configCache = null;
+        /** Abort controller for cancelling all pending requests on close */
+        this.closeController = new AbortController();
         this.config = config;
         this.timeoutMs = timeoutMs;
     }
+    /**
+     * Abort all pending requests.
+     * Call this when the renderer is closed to prevent orphaned requests.
+     */
+    abort() {
+        this.closeController.abort();
+    }
+    /**
+     * Check if the API has been aborted.
+     */
+    isAborted() {
+        return this.closeController.signal.aborted;
+    }
     get baseUrl() {
         return `${this.config.identityBaseUrl}/${this.config.accountId}`;
     }
     async request(method, endpoint, body) {
+        // Don't start new requests if already aborted (renderer closed)
+        if (this.closeController.signal.aborted) {
+            throw new IdentityApiError('Request cancelled', 'cancelled', 0);
+        }
         const url = `${this.baseUrl}${endpoint}`;
         const headers = {
             'Content-Type': 'application/json',
             'Accept': 'application/json',
         };
         // Create abort controller for request timeout
-        const controller = new AbortController();
-        const timeoutId = setTimeout(() => controller.abort(), this.timeoutMs);
+        const timeoutController = new AbortController();
+        const timeoutId = setTimeout(() => timeoutController.abort(), this.timeoutMs);
+        // Combine timeout and close signals - abort on either
+        // Use AbortSignal.any if available, otherwise fall back to manual linking
+        let combinedSignal;
+        if ('any' in AbortSignal) {
+            combinedSignal = AbortSignal.any([
+                timeoutController.signal,
+                this.closeController.signal,
+            ]);
+        }
+        else {
+            // Fallback for older browsers: link close signal to timeout controller
+            combinedSignal = timeoutController.signal;
+            const onClose = () => timeoutController.abort();
+            this.closeController.signal.addEventListener('abort', onClose);
+        }
         try {
             const response = await fetch(url, {
                 method,
                 headers,
                 body: body ? JSON.stringify(body) : undefined,
-                signal: controller.signal,
+                signal: combinedSignal,
             });
             const json = await response.json();
             if (!response.ok) {
@@ -621,8 +655,12 @@ class IdentityApi {
             return (json.data ?? json);
         }
         catch (error) {
-            // Convert AbortError to a more descriptive timeout error
+            // Convert AbortError to a more descriptive error
             if (error instanceof Error && error.name === 'AbortError') {
+                // Check which signal triggered the abort
+                if (this.closeController.signal.aborted) {
+                    throw new IdentityApiError('Request cancelled', 'cancelled', 0);
+                }
                 throw new IdentityApiError('Request timed out', 'timeout', 0);
             }
             throw error;
@@ -1652,6 +1690,7 @@ function getStyles(options) {
       padding: 14px 20px;
       border-bottom: 1px solid ${tokens.border};
       background: ${tokens.bg};
+      border-radius: 16px 16px 0 0;
       flex-shrink: 0;
     }
 
@@ -2544,6 +2583,8 @@ function getStyles(options) {
       justify-content: center;
       min-height: 200px;
       flex: 1;
+      padding-left: 32px;
+      padding-right: 32px;
     }
 
     /* ========================================
@@ -4432,8 +4473,11 @@ class IdentityRenderer {
     }
     /**
      * Close the modal and clean up.
+     * Cancels all pending API requests to prevent orphaned operations.
      */
     close() {
+        // Cancel all pending API requests first
+        this.api.abort();
         if (this.focusTimeoutId !== null) {
             clearTimeout(this.focusTimeoutId);
             this.focusTimeoutId = null;
@@ -5619,9 +5663,30 @@ function isInitiateUploadResponse(data) {
 }
 class UploadApi {
     constructor(config) {
+        /** Abort controller for cancelling all pending requests on close */
+        this.closeController = new AbortController();
         this.config = config;
         this.timeoutMs = config.timeout ?? DEFAULT_TIMEOUT_MS;
     }
+    /**
+     * Abort all pending requests.
+     * Call this when the renderer is closed to prevent orphaned requests.
+     */
+    abort() {
+        this.closeController.abort();
+    }
+    /**
+     * Check if the API has been aborted.
+     */
+    isAborted() {
+        return this.closeController.signal.aborted;
+    }
+    /**
+     * Get the abort signal for external use (e.g., XHR uploads).
+     */
+    getAbortSignal() {
+        return this.closeController.signal;
+    }
     /**
      * Get vault upload info (public endpoint).
      */
@@ -5674,8 +5739,26 @@ class UploadApi {
      * Internal request method with timeout handling and error context.
      */
     async request(url, options) {
-        const controller = new AbortController();
-        const timeoutId = setTimeout(() => controller.abort(), this.timeoutMs);
+        // Don't start new requests if already aborted (renderer closed)
+        if (this.closeController.signal.aborted) {
+            throw new UploadApiError('Request cancelled', 'cancelled', 0);
+        }
+        const timeoutController = new AbortController();
+        const timeoutId = setTimeout(() => timeoutController.abort(), this.timeoutMs);
+        // Combine timeout and close signals - abort on either
+        let combinedSignal;
+        if ('any' in AbortSignal) {
+            combinedSignal = AbortSignal.any([
+                timeoutController.signal,
+                this.closeController.signal,
+            ]);
+        }
+        else {
+            // Fallback for older browsers: link close signal to timeout controller
+            combinedSignal = timeoutController.signal;
+            const onClose = () => timeoutController.abort();
+            this.closeController.signal.addEventListener('abort', onClose);
+        }
         try {
             const response = await fetch(url, {
                 method: options.method,
@@ -5684,7 +5767,7 @@ class UploadApi {
                     'Accept': 'application/json',
                 },
                 body: options.body,
-                signal: controller.signal,
+                signal: combinedSignal,
             });
             const json = await response.json();
             if (!response.ok) {
@@ -5710,8 +5793,12 @@ class UploadApi {
             if (error instanceof SparkVaultError) {
                 throw error;
             }
-            // Convert AbortError to TimeoutError
+            // Convert AbortError to appropriate error
             if (error instanceof DOMException && error.name === 'AbortError') {
+                // Check which signal triggered the abort
+                if (this.closeController.signal.aborted) {
+                    throw new UploadApiError('Request cancelled', 'cancelled', 0);
+                }
                 throw new TimeoutError(`Request timed out after ${this.timeoutMs}ms`);
             }
             // Network errors with context
@@ -7573,6 +7660,8 @@ class UploadRenderer {
         this.uploadModal = null;
         this.isInlineMode = false;
         this.hybridModalInitialized = false;
+        // Track active XHR for cancellation on close
+        this.activeXhr = null;
         this.pasteHandler = null;
         this.container = container;
         this.api = api;
@@ -7605,8 +7694,16 @@ class UploadRenderer {
     }
     /**
      * Close the upload flow.
+     * Cancels all pending API requests and active uploads to prevent orphaned operations.
      */
     close() {
+        // Cancel all pending API requests first
+        this.api.abort();
+        // Abort any active XHR upload
+        if (this.activeXhr) {
+            this.activeXhr.abort();
+            this.activeXhr = null;
+        }
         this.cleanupFileInput();
         this.cleanupPasteHandler();
         // Clean up modal if open (hybrid mode)
@@ -8205,11 +8302,19 @@ class UploadRenderer {
         }
     }
     /**
-     * Upload a single chunk using XMLHttpRequest for progress tracking
+     * Upload a single chunk using XMLHttpRequest for progress tracking.
+     * Tracks the XHR so it can be cancelled if the renderer is closed.
      */
     uploadChunkWithProgress(uploadUrl, chunk, chunkStart, totalSize, tusVersion, file, ingotId, requestId) {
         return new Promise((resolve, reject) => {
+            // Check if already aborted before starting
+            if (this.api.isAborted()) {
+                reject(new Error('Upload cancelled'));
+                return;
+            }
             const xhr = new XMLHttpRequest();
+            // Track this XHR so it can be cancelled on close
+            this.activeXhr = xhr;
             // Track progress within this chunk
             xhr.upload.onprogress = (e) => {
                 if (e.lengthComputable) {
@@ -8233,6 +8338,7 @@ class UploadRenderer {
                 }
             };
             xhr.onload = () => {
+                this.activeXhr = null;
                 if (xhr.status >= 200 && xhr.status < 300) {
                     // Get new offset from server response
                     const newOffsetHeader = xhr.getResponseHeader('Upload-Offset');
@@ -8243,8 +8349,18 @@ class UploadRenderer {
                     reject(new Error(`Chunk upload failed with status ${xhr.status}`));
                 }
             };
-            xhr.onerror = () => reject(new Error('Chunk upload failed'));
-            xhr.ontimeout = () => reject(new Error('Chunk upload timed out'));
+            xhr.onerror = () => {
+                this.activeXhr = null;
+                reject(new Error('Chunk upload failed'));
+            };
+            xhr.ontimeout = () => {
+                this.activeXhr = null;
+                reject(new Error('Chunk upload timed out'));
+            };
+            xhr.onabort = () => {
+                this.activeXhr = null;
+                reject(new Error('Upload cancelled'));
+            };
             xhr.open('PATCH', uploadUrl);
             xhr.setRequestHeader('Tus-Resumable', tusVersion);
             xhr.setRequestHeader('Upload-Offset', String(chunkStart));