Sync private Space from hfviewer-719a11371473

index.html

@@ -183,7 +183,7 @@
     window.HFVIEWER_PRODUCT_CONTEXT = Object.freeze({
       product_surface: "hf_space",
       space_repo: "embedl/hfviewer",
-      space_revision: "hfviewer-eae906457df8",
+      space_revision: "hfviewer-719a11371473",
     });
     try {
       var initialUrl = new URL(window.location.href);
@@ -10630,7 +10630,7 @@ body.sx-viewer-open { overflow: hidden; }
       window.hfviewerAnalyticsBridge?.capture?.(eventName, Object.assign({
         product_surface: "hf_space",
         space_repo: "embedl/hfviewer",
-        space_revision: "hfviewer-eae906457df8",
+        space_revision: "hfviewer-719a11371473",
       }, properties || {}));
     } catch (error) { /* analytics must never break navigation */ }
   }
@@ -10846,7 +10846,7 @@ body.sx-viewer-open { overflow: hidden; }
 </script>
 
 <script src="space-shell.js?v=84289fb68096"></script>
-<script type="module" src="space-auth.js?v=cd3690650167"></script>
+<script type="module" src="space-auth.js?v=e89e39084329"></script>
 
 </body>
 </html>

space-auth.js

@@ -5,7 +5,14 @@ const DESTINATION_URL = "https://hfviewer.com/api/hf_space_oauth/destination";
 const POLL_INTERVAL_MS = 800;
 const FLOW_TIMEOUT_MS = 5 * 60 * 1000;
 const PREPARE_REFRESH_MS = 4 * 60 * 1000;
+const PREPARE_RETRY_DELAYS_MS = [0, 450, 1400];
+const PREPARE_RECOVERY_DELAYS_MS = [2000, 8000, 30000, 60000];
+const REQUEST_TIMEOUT_MS = 12 * 1000;
 const AUTH_CHANGED_EVENT = "hfviewer-space-auth-changed";
+const OFFICIAL_SPACE_HOSTS = new Set([
+  "embedl-hfviewer.static.hf.space",
+  "hfvwr-hfviewer-private-qa.static.hf.space",
+]);
 // The Space shell intercepts canonical hfviewer.com links during capture and
 // treats every root-path URL as "return to the Space landing page", even when
 // its query opens an account view. Use the canonicalizing www host so these
@@ -19,10 +26,20 @@ let rendering = false;
 let activeFlow = null;
 let preparedFlow = null;
 let preparePromise = null;
+let prepareFailureCount = 0;
+let prepareRecoveryTimer = null;
 let accountDestinationLinks = [];
 let lastAnnouncedAuthIdentity = null;
 let nativeLoginPopover = null;
 
+function currentSpaceDeployment() {
+  const host = String(window.location.hostname || "").trim().toLowerCase();
+  if (host === "embedl-hfviewer.static.hf.space") return "production";
+  if (host === "hfvwr-hfviewer-private-qa.static.hf.space") return "qa";
+  if (host.endsWith(".hf.space")) return "copy";
+  return "local";
+}
+
 function readStoredResult() {
   try {
     const value = localStorage.getItem(STORAGE_KEY);
@@ -79,6 +96,8 @@ function trackAuthEvent(eventName, properties = {}) {
       product_surface: "hf_space",
       space_repo: String(productContext.space_repo || "unknown"),
       space_revision: String(productContext.space_revision || "unknown"),
+      space_host: String(window.location.hostname || "unknown").toLowerCase(),
+      space_deployment: currentSpaceDeployment(),
       auth_provider: "hugging_face",
       ...properties,
     });
@@ -470,23 +489,65 @@ function failLogin(error, failureStage) {
     component: "space_nav",
     failure_stage: failureStage,
     error_name: String(error?.name || "Error").slice(0, 80),
+    error_message: String(error?.message || "Unknown error").slice(0, 240),
+    request_status: Number(error?.status || 0) || undefined,
   });
   void prepareLogin();
 }
 
-async function postJson(url, body) {
-  const response = await fetch(url, {
-    method: "POST",
-    mode: "cors",
-    credentials: "omit",
-    headers: { "content-type": "application/json" },
-    body: JSON.stringify(body),
-  });
-  const payload = await response.json().catch(() => ({}));
-  if (!response.ok && response.status !== 202) {
-    throw new Error(payload?.error || `Request failed (${response.status})`);
+function delay(milliseconds) {
+  return new Promise((resolve) => window.setTimeout(resolve, milliseconds));
+}
+
+function schedulePrepareRecovery() {
+  if (prepareRecoveryTimer || oauthResult || activeFlow) return;
+  const index = Math.min(prepareFailureCount, PREPARE_RECOVERY_DELAYS_MS.length - 1);
+  const recoveryDelay = PREPARE_RECOVERY_DELAYS_MS[index];
+  prepareFailureCount += 1;
+  prepareRecoveryTimer = window.setTimeout(() => {
+    prepareRecoveryTimer = null;
+    void prepareLogin();
+  }, recoveryDelay);
+}
+
+function retryableRequestError(error) {
+  return (
+    error?.name === "TypeError" ||
+    error?.name === "AbortError" ||
+    [408, 425, 429, 500, 502, 503, 504].includes(Number(error?.status || 0))
+  );
+}
+
+async function postJson(url, body, { retryDelays = [0] } = {}) {
+  let lastError = null;
+  for (let attempt = 0; attempt < retryDelays.length; attempt += 1) {
+    if (retryDelays[attempt] > 0) await delay(retryDelays[attempt]);
+    const controller = new AbortController();
+    const timer = window.setTimeout(() => controller.abort(), REQUEST_TIMEOUT_MS);
+    try {
+      const response = await fetch(url, {
+        method: "POST",
+        mode: "cors",
+        credentials: "omit",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify(body),
+        signal: controller.signal,
+      });
+      const payload = await response.json().catch(() => ({}));
+      if (!response.ok && response.status !== 202) {
+        const error = new Error(payload?.error || `Request failed (${response.status})`);
+        error.status = response.status;
+        throw error;
+      }
+      return payload;
+    } catch (error) {
+      lastError = error;
+      if (!retryableRequestError(error) || attempt === retryDelays.length - 1) throw error;
+    } finally {
+      window.clearTimeout(timer);
+    }
   }
-  return payload;
+  throw lastError || new Error("Request failed");
 }
 
 function announceAuthState() {
@@ -569,6 +630,14 @@ function startLogin(flow, link) {
 
 async function prepareLogin() {
   if (oauthResult || activeFlow) return;
+  // Authentication is intentionally available only in the two official
+  // deployments. A fork can copy our declared space_repo value, but it cannot
+  // claim an official browser origin and must never generate misleading auth
+  // failures or receive a trusted handoff.
+  if (
+    window.location.hostname.endsWith(".hf.space") &&
+    !OFFICIAL_SPACE_HOSTS.has(window.location.hostname.toLowerCase())
+  ) return;
   if (
     preparedFlow &&
     Date.now() - preparedFlow.preparedAt < PREPARE_REFRESH_MS
@@ -581,10 +650,11 @@ async function prepareLogin() {
     startedAt: 0,
     loginUrl: "",
   };
-  preparePromise = postJson(START_URL, {
-    flow_id: flow.id,
-    flow_secret: flow.secret,
-  }).then((result) => {
+  preparePromise = postJson(
+    START_URL,
+    { flow_id: flow.id, flow_secret: flow.secret },
+    { retryDelays: PREPARE_RETRY_DELAYS_MS }
+  ).then((result) => {
     const loginUrl = new URL(String(result?.login_url || ""));
     if (
       loginUrl.origin !== "https://huggingface.co" ||
@@ -592,6 +662,9 @@ async function prepareLogin() {
     ) throw new Error("The OAuth login URL is invalid");
     flow.loginUrl = loginUrl.toString();
     preparedFlow = flow;
+    prepareFailureCount = 0;
+    if (prepareRecoveryTimer) window.clearTimeout(prepareRecoveryTimer);
+    prepareRecoveryTimer = null;
     if (!activeFlow) renderAuth();
     refreshNativeLoginPopover();
   }).catch((error) => {
@@ -600,7 +673,11 @@ async function prepareLogin() {
       component: "space_nav",
       failure_stage: "login_prepare",
       error_name: String(error?.name || "Error").slice(0, 80),
+      error_message: String(error?.message || "Unknown error").slice(0, 240),
+      request_status: Number(error?.status || 0) || undefined,
+      retry_count: PREPARE_RETRY_DELAYS_MS.length - 1,
     });
+    schedulePrepareRecovery();
   }).finally(() => {
     preparePromise = null;
   });