@sparkvault/sdk 1.21.7 → 1.21.9

package/dist/identity/api.d.ts

@@ -28,12 +28,15 @@ export declare class IdentityApi {
     /**
      * Fetch SDK configuration (branding, enabled methods).
      * Uses caching to avoid redundant requests - safe to call multiple times.
+     * If a cached request failed (e.g., transient network error during preload),
+     * clears the cache and retries to avoid permanently caching a rejected promise.
      */
     getConfig(): Promise<SdkConfig>;
     /**
      * Preload the SDK configuration in the background.
      * Called on SDK init when preloadConfig is enabled.
      * The result is cached and used when verify() is called.
+     * If preload fails, getConfig() will clear the cache and retry.
      */
     preloadConfig(): void;
     /**

package/dist/identity/renderer.d.ts

@@ -34,6 +34,12 @@ export declare class IdentityRenderer {
      * Otherwise shows loading state while fetching config.
      */
     start(): Promise<void>;
+    /**
+     * Fetch config with a single retry on network errors.
+     * Handles transient failures common during subdomain switches
+     * (DNS resolution, connection setup, Safari ITP).
+     */
+    private fetchConfigWithRetry;
     /**
      * Close the modal and clean up.
      * Cancels all pending API requests to prevent orphaned operations.

package/dist/sparkvault.cjs.js

@@ -714,15 +714,28 @@ class IdentityApi {
             return (json.data ?? json);
         }
         catch (error) {
-            // Convert AbortError to a more descriptive error
-            if (error instanceof Error && error.name === 'AbortError') {
+            // Convert AbortError to a more descriptive error.
+            // Check error.name directly (DOMException may not extend Error in all environments).
+            if (error != null && typeof error === 'object' && 'name' in error && error.name === 'AbortError') {
                 // Check which signal triggered the abort
                 if (this.closeController.signal.aborted) {
                     throw new IdentityApiError('Request cancelled', 'cancelled', 0);
                 }
                 throw new IdentityApiError('Request timed out', 'timeout', 0);
             }
-            throw error;
+            // Convert TypeError to a user-friendly network error.
+            // WebKit (Safari/iOS) throws TypeError("Load failed"),
+            // Chrome/Firefox throw TypeError("Failed to fetch")
+            // when fetch() fails at the browser level (network error, CORS, DNS, etc.).
+            if (error instanceof TypeError) {
+                throw new IdentityApiError('Unable to connect. Please check your connection and try again.', 'network_error', 0);
+            }
+            // Re-throw IdentityApiError as-is (already has user-friendly message)
+            if (error instanceof IdentityApiError) {
+                throw error;
+            }
+            // Convert any other unexpected errors to a structured error
+            throw new IdentityApiError(error instanceof Error ? error.message : 'An unexpected error occurred', 'unknown_error', 0);
         }
         finally {
             clearTimeout(timeoutId);
@@ -731,21 +744,34 @@ class IdentityApi {
     /**
      * Fetch SDK configuration (branding, enabled methods).
      * Uses caching to avoid redundant requests - safe to call multiple times.
+     * If a cached request failed (e.g., transient network error during preload),
+     * clears the cache and retries to avoid permanently caching a rejected promise.
      */
     async getConfig() {
         if (!this.configCache) {
             this.configCache = this.request('GET', '/config');
         }
-        return this.configCache;
+        try {
+            return await this.configCache;
+        }
+        catch (error) {
+            // Clear failed cache so the next call retries instead of returning
+            // the same rejected promise. This handles transient network failures
+            // (e.g., "Load failed" in Safari) that occurred during preloadConfig().
+            this.configCache = null;
+            throw error;
+        }
     }
     /**
      * Preload the SDK configuration in the background.
      * Called on SDK init when preloadConfig is enabled.
      * The result is cached and used when verify() is called.
+     * If preload fails, getConfig() will clear the cache and retry.
      */
     preloadConfig() {
         if (!this.configCache) {
-            // Fire and forget - errors are handled when getConfig() is awaited
+            // Fire and forget - errors are handled when getConfig() is awaited.
+            // If this fails, getConfig() clears the cache and retries.
             this.configCache = this.request('GET', '/config');
         }
     }
@@ -4474,7 +4500,7 @@ class IdentityRenderer {
             if (!config) {
                 // Config not ready yet - show loading and await it
                 this.setState({ view: 'loading' });
-                config = await this.api.getConfig();
+                config = await this.fetchConfigWithRetry();
             }
             this.verificationState.setConfig(config);
             // Update modal header with branding if provided
@@ -4500,6 +4526,27 @@ class IdentityRenderer {
             this.handleErrorWithRecovery(error, 'config_error');
         }
     }
+    /**
+     * Fetch config with a single retry on network errors.
+     * Handles transient failures common during subdomain switches
+     * (DNS resolution, connection setup, Safari ITP).
+     */
+    async fetchConfigWithRetry() {
+        try {
+            return await this.api.getConfig();
+        }
+        catch (error) {
+            // Only retry on network errors (not API errors like 404, 500, etc.)
+            const isNetworkError = error instanceof IdentityApiError && error.code === 'network_error';
+            if (!isNetworkError) {
+                throw error;
+            }
+            // Wait briefly before retry (exponential backoff: 1s)
+            await new Promise((resolve) => setTimeout(resolve, 1000));
+            // Retry once - getConfig() will clear the failed cache and make a fresh request
+            return this.api.getConfig();
+        }
+    }
     /**
      * Close the modal and clean up.
      * Cancels all pending API requests to prevent orphaned operations.
@@ -5960,7 +6007,7 @@ function injectUploadStyles(options) {
 function getUploadStyles(options) {
     const { backdropBlur } = options;
     const enableBlur = backdropBlur !== false;
-    // Design tokens - using light theme for upload widget (matches SecureUploadPortal)
+    // Design tokens - light theme for upload widget
     const tokens = {
         // Colors
         primary: '#4F46E5',