beliq-sevdesk 0.2.0 → 0.2.1

package/dist/sevdesk.js

@@ -1,6 +1,8 @@
 import { SevDeskApiError } from './errors.js';
 /** A hard ceiling on pages walked per poll, so a misconfigured window can't loop forever. */
 const MAX_PAGES = 100;
+/** Per-attempt deadline so a stalled sevDesk connection aborts instead of hanging the poll. */
+const REQUEST_TIMEOUT_MS = 30_000;
 const encoder = new TextEncoder();
 const decoder = new TextDecoder('utf-8');
 function looksLikeXml(s) {
@@ -64,6 +66,7 @@ export class SevDeskClient {
     #sleep;
     #maxRetries;
     #baseRetryDelayMs;
+    #requestTimeoutMs;
     constructor(options) {
         if (!options.token)
             throw new Error('sevdesk: token is required');
@@ -77,6 +80,7 @@ export class SevDeskClient {
         this.#sleep = options.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
         this.#maxRetries = options.maxRetries ?? 4;
         this.#baseRetryDelayMs = options.baseRetryDelayMs ?? 500;
+        this.#requestTimeoutMs = options.requestTimeoutMs ?? REQUEST_TIMEOUT_MS;
     }
     async listInvoices(params) {
         const limit = params.pageSize && params.pageSize > 0 ? params.pageSize : 100;
@@ -122,25 +126,37 @@ export class SevDeskClient {
         }
         let lastError;
         for (let attempt = 0; attempt <= this.#maxRetries; attempt++) {
+            const controller = new AbortController();
+            const timer = setTimeout(() => controller.abort(), this.#requestTimeoutMs);
             let res;
+            let text = '';
             try {
                 res = await this.#fetch(url.toString(), {
                     method,
                     headers: { Authorization: this.#token, Accept: 'application/json' },
+                    signal: controller.signal,
                 });
+                // Read the body under the same deadline so a stalled stream also aborts.
+                if (res.ok)
+                    text = await res.text();
             }
             catch (err) {
-                lastError = err;
+                lastError = controller.signal.aborted
+                    ? new Error(`timed out after ${this.#requestTimeoutMs}ms`)
+                    : err;
                 if (attempt < this.#maxRetries) {
                     await this.#backoff(attempt);
                     continue;
                 }
                 throw new SevDeskApiError(`sevDesk ${method} ${path} network error: ${lastError.message}`, 0);
             }
+            finally {
+                clearTimeout(timer);
+            }
             if (res.ok) {
                 return {
                     status: res.status,
-                    text: await res.text(),
+                    text,
                     contentType: res.headers.get('content-type') ?? '',
                 };
             }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "beliq-sevdesk",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "Self-hostable worker that polls sevDesk for e-invoices, converts each to the formats a counterparty needs, and validates them against beliq's authority-pinned, drift-checked rules. The sevDesk token never leaves your environment.",
   "license": "MIT",
   "type": "module",
@@ -57,7 +57,7 @@
     "prepublishOnly": "npm run build"
   },
   "dependencies": {
-    "@beliq/sdk": "^0.1.1"
+    "@beliq/sdk": "^0.3.0"
   },
   "devDependencies": {
     "@types/node": "^20.14.0",
@@ -65,6 +65,6 @@
     "@typescript-eslint/parser": "^7.18.0",
     "eslint": "^8.57.0",
     "typescript": "^5.5.4",
-    "vitest": "^2.1.8"
+    "vitest": "^4.0.0"
   }
 }