v1.0.0

[1.0.0] - 2026-06-22 11:27 UTC

Upstream release: v1.0.0

Added

• setAccessToken API — rotate the JWT after first initialize without re-registering the device
• Structured error types with stable error.name values
• StorageUnavailable error
• getLastGeolocationFailure() helper
• Fetch timeout with AbortController (30 s); requests never hang indefinitely
• Storage isolation — localStorage, sessionStorage, cookie, and IndexedDB written independently

Changed

• Runtime configuration is supplied by the host application at serve time; credentials never baked into the bundle
• Storage handling hardened for restricted browser environments
• Breaking: Runtime config requires baseUrl, apiKey, applicationId, and applicationVersion
• Breaking: Bundle filenames are safe-sdk.esm.min.js and safe-sdk.umd.min.js