@nano133/nanoterra 0.9.0 → 0.9.3

package/CHANGELOG.md

@@ -1,5 +1,45 @@
 # Changelog
 
+## 0.9.3 (2026-11-01)
+
+- **A session that ended at Buy.** A 401 from the server at Buy (the session ended, though the game's `signedIn()` still said yes) showed a
+  "Sign in" key that asked `signedIn()` again, got yes, and posted the same refused order again. The key now calls `signIn()` without asking, and the
+  new `onSessionEnd()` hook on `mountShop` lets the game mark the player signed out (the Echo Island worker found it).
+
+## 0.9.2 (2026-11-01)
+
+- Not published on npm: its changes reached npm in 0.9.3.
+- **`onSignInCancel(lookId, look)` on `mountShop`** (the Echo Island worker found the gap while it moved Echo's shop to `/shop`). A game with its own
+  looks sheet calls `shop.buy(lookId)`; when the player closes the sign-in without signing in, the kit now opens nothing (and closes its sheet if it
+  was open) and calls the hook, so the game shows its own sheet again. Before, the kit's own looks list opened. A Buy in the kit's own list still
+  goes back to that list and does not call the hook.
+- **`buy(lookId)` starts on the next frame.** A game's own `<dialog>` that closed just before has had its `close` event by then (Chromium fires it at
+  the frame), so the game's close handler can no longer take the focus and the Escape key from the kit's sheet. `dialog.close(); shop.buy(id)` is safe.
+  `shop.isOpen` is false until that frame; `open()` still opens at once. The README says to close the game's dialog first.
+- **Phone-first sizes by default** in the shop's sheets and the sign-in sheet: every text 16 px or more (was 11 to 15 px: the tabs, the Looks key,
+  each look's line, the notes, the price-source line, the time left, the address and labels by hand, the copy keys, the wallet tiles' names, "Or a
+  wallet app", the back key, the status, "Last used"), and every key, tab, close key, back key, fold summary, copy key, wallet tile and link 48 px or
+  more each way (was 44 px; the inline "open a wallet" link was 17 px tall). "Last used" sits in the flow now (under a wallet's name, at the end of
+  the passkey's row) so it never covers a word. A game that wants smaller text or keys sets them in its own stylesheet, after the kit's.
+
+## 0.9.1 (2026-11-01)
+
+- Not published on npm: its changes reached npm in 0.9.3.
+- **The words of the shop's sheets and of the player's sign-in sheet are the game's to set** (the coordinator asked for it: Echo Island's move to
+  `/shop` waited on it; Wes prefers fewer words). `words` on `mountShop`, `looksView` and `payPanel` (`ShopWords`, defaults `SHOP_WORDS`,
+  `shopWords()` merges) and on `mountPlayerSignin` and `signInView` (`PlayerSigninWords`, defaults `PLAYER_SIGNIN_WORDS`, `PlayerSigninWordsOption`
+  for a game's partial words and faults, `playerSigninWords()` merges). Every visible word, every key and every name for a screen reader; a text
+  with a value is a function (`buyTitle(look)`, `endsIn(time)`, `prices(sources)`, `waitingFor(wallet)`). `refusal(text, status)` turns the
+  server's refusals into the game's words. `faultWords(code, rpId, words?)` takes the words. Not the game's to change: the stamp "TEST MODE: DO
+  NOT PAY", and "Powered by CoinGecko" while CoinGecko is a price feed (`priceLine` adds it back).
+- **Shorter default words.** The pay sheet: 30 words in TEST MODE (was about 85) and 29 live (was about 47), no sentence over 10 words. Live:
+  "Send exactly 0.25 XNO", "Ends in 14:59.", "Waiting for payment…", "Price: Kraken, KuCoin. Powered by CoinGecko."; by hand: "Another amount
+  does not match." TEST MODE: the stamp, "Nothing can be paid here.", the wallet key "Wallet off: test mode", no timer and no status (nothing
+  waits for a payment). Paid late: "Paid after the order ended, so no look. The creator sends it back." The looks sheet: "Looks never change
+  play. Pay in Nano, straight to the creator." and "Sign in first to buy a look."; "Back" (was "Back to looks"). The sign-in sheet: the lines
+  over 10 words split or cut, with the same meaning (the spare key's note, the password manager's and the "two answers" faults, the QR lines).
+- `test/panel-words.test.ts` counts the words a player sees (happy-dom) and proves a game's words reach the page.
+
 ## 0.9.0 (2026-11-01)
 
 - **The player's sign-in** (`@nano133/nanoterra/player-signin`, `/player-signin/conformance`, `/player-signin/d1` with `/player-signin/d1.sql`,

package/README.md

@@ -91,7 +91,7 @@ Each path loads only what it needs. A page that reads a ticket loads no Three.js
 | `@nano133/nanoterra/shop` | the shop's rules and routes, the payment scan, a memory store, the CSP lists (server code; since 0.9.0) | no | 9.1 kB (all), 7.1 kB (`createShopHandler` alone) |
 | `@nano133/nanoterra/shop/d1`, `/shop/firestore` | the shop's store on D1 (the starter's tables, `/shop/d1.sql`) or Firestore: `createD1Shop`, `createFirestoreShop` (since 0.9.0) | no | 2.4 kB, 2.2 kB |
 | `@nano133/nanoterra/shop/worker` | the shop for a Worker with D1, from the starter's settings: `createShop` (since 0.9.0) | no | 10.0 kB (with the D1 store and Turnstile) |
-| `@nano133/nanoterra/shop/panel` | the Looks key, the looks sheet and the pay sheet with its own QR code: `mountShop`, and its stylesheet `@nano133/nanoterra/shop/style.css` (since 0.9.0) | no | 9.3 kB + 2.5 kB of CSS (gzip; 8.5 kB minified) |
+| `@nano133/nanoterra/shop/panel` | the Looks key, the looks sheet and the pay sheet with its own QR code: `mountShop`, and its stylesheet `@nano133/nanoterra/shop/style.css` (since 0.9.0) | no | 10.0 kB + 2.5 kB of CSS (gzip; 8.5 kB minified) |
 | `@nano133/nanoterra/shop/conformance` | the shop's money rules as test cases, for a store a game writes itself (since 0.9.0) | no | n/a |
 
 Measured 2026-10-26 (the friends paths 2026-10-30, the options, the emotes, the player sign-in and the shop paths 2026-11-01): `esbuild --bundle --minify --format=esm --external:three`, then `gzip -9`, without Three.js.
@@ -1158,13 +1158,27 @@ const player = await signin.open();              // the shop's "sign in first":
   game's passkey, another passkey than the one just made, two answers for one passkey, the wrong host. None names a seed or a key; none says to delete a passkey.
 - A wallet: on a touch screen one key that opens the app; with a mouse its QR code. The page asks every 2 s, at most 5 minutes.
 - `signInView(options)` is the same content for a game with a sheet of its own (`{ node, stop, reset }`).
-- Phone first: every key 44 px or more, the sheet from the bottom on a phone held upright, a card in the middle on a wide or sideways screen; Escape, the close
-  key and the scrim close it; no browser dialog. Light and dark like the options panel (`data-n133-theme` on `<html>`, else the device), every colour a
+- Phone first (since 0.9.3 by default): every text 16 px or more, and every key, wallet tile, link, the back key and the close key 48 px or more each way
+  ("Last used" sits in the flow, under a wallet's name or at the end of the passkey's row). The sheet comes from the bottom on a phone held upright, and is
+  a card in the middle on a wide or sideways screen; Escape, the close key and the scrim close it; no browser dialog. Light and dark like the options panel (`data-n133-theme` on `<html>`, else the device), every colour a
   `--n133-*` variable with a `--n133-dark-*` twin; `--n133-signin-z` (default 1200) for its z-index.
 - The page loads the purse's signing code (`@nano133/signin/purse`, 40 kB gzip) only when a passkey signs in.
 - The browser remembers, in `localStorage["n133.player-signin.v1:<rpId>"]`, the ids of its passkeys, which were made here and never opened, and the last
   way: no secret and no address.
 
+**Its words** (since 0.9.3). `words` on `mountPlayerSignin` and `signInView` changes any word of the sheet, for the game's own words or language: the keys
+of `PlayerSigninWords` (the defaults are `PLAYER_SIGNIN_WORDS`), any of them, over the defaults. A text with a value in it is a function of that value, and
+`faults` changes the words of any passkey fault (`faultWords(code, rpId, words)` gives them). The wallets' names stay. `refusal(text, status)` turns the
+server's refusals (in English) into the game's words.
+
+```ts
+mountPlayerSignin(document.body, {
+  name: "My Game",
+  scheme: SCHEME,
+  words: { lead: "No password.", waitingFor: (wallet) => `Waiting for ${wallet}…`, faults: { cancelled: { title: "Stopped", text: "No passkey was used." } } },
+});
+```
+
 ## The shop (`/shop`; since 0.9.0)
 
 A shop that sells **looks** for Nano (XNO), the way the [game starter](https://github.com/nano133-com/nano-game-starter) sells them. A game
@@ -1305,12 +1319,46 @@ const shop = mountShop(document.getElementById("shop")!, {
   Wearing, or Buy. `picture(look)` gives the game's own picture instead of the swatch.
 - Buy: the game's sign-in (`signIn`) when nobody is signed in, then the person check, then the pay sheet: the amount, the QR code of the exact
   `nano:` link (drawn by the package as SVG: no QR library, no outside service), "Open wallet", the address and the amount by hand, the time
-  left, and a check every 5 seconds for 2 minutes ("Check again" after). Paid: "Paid. Thank you!" and `onOwned`. Paid late or expired: the
-  starter's words.
-- Phone first: every key 44 px or more (the buy and pay keys 48 px). On a phone held upright the sheet rises from the bottom; on a wide screen
-  it stands in the middle; on a phone held sideways the QR code stands alone on the left and the wallet key stays in view.
+  left (live only), and a check every 5 seconds for 2 minutes ("Check again" after). Paid: "Paid. Thank you!" and `onOwned`. Paid late: no look,
+  and the creator sends it back. Ended: a payment sent in time still counts.
+- Phone first (since 0.9.3 by default): every text 16 px or more (the price-source line, the time left, "Enter by hand"'s address and labels too), and
+  every key, tab, the Looks key, the close key, the fold "Enter by hand" and its copy keys 48 px or more each way. On a phone held upright the sheet
+  rises from the bottom; on a wide screen it stands in the middle; on a phone held sideways the QR code (or the stamp) stands alone on the left and
+  the wallet key stays in view. A game that wants smaller text sets it in its own stylesheet, after the kit's.
 - Light and dark: `theme: "light" | "dark" | "device"` (the default: the page's `data-n133-theme`, else the device's setting). Every colour is a
   `--n133-*` variable with a `--n133-dark-*` twin (and `--n133-sun` for Buy, `--n133-warn` for the stamp). The QR code stays dark on white.
+- **A shop that is a modal `<dialog>` of the game's own** (its own sheet around `open()`) closes it in its `signIn` hook before it opens the sign-in
+  sheet, or the sign-in sheet stays hidden behind it. The game starter's `src/client/main.ts` does this.
+- **Buy from a game's own `<dialog>`** (its own looks sheet calls `shop.buy(lookId)`): close the game's dialog first, and let it finish closing (its
+  `close` event) before the kit's sheet opens, or the game's close handler takes the focus and the Escape key from the kit's sheet. Since 0.9.2 the
+  kit does this itself: `buy(lookId)` starts on the next frame (Chromium fires a dialog's `close` event at the frame, after a `setTimeout(0)`; a
+  hidden page has no frames and starts at once), so `dialog.close(); shop.buy(id)` is safe. `shop.isOpen` is false until that frame. `open()` still opens at once.
+- **`onSessionEnd()`** (since 0.9.3): the server refused an order with 401 (the player's session ended, though `signedIn()` said yes). The
+  game marks the player signed out. The sheet's "Sign in" key then calls `signIn()` without asking `signedIn()` first, so a stale "yes" cannot
+  post the refused order again.
+- **`onSignInCancel(lookId, look)`** (since 0.9.3): when the game's own Buy (`buy(lookId)`) asks for a sign-in and the player closes it without signing
+  in, the kit opens nothing (it closes its sheet if it was open) and calls this hook: the game shows its own looks sheet again. A Buy in the kit's own
+  list goes back to that list, as before, and does not call it.
+
+  ```ts
+  const shop = mountShop(el, { ...options, key: false, onSignInCancel: () => myLooksDialog.showModal() });
+  myBuyKey.onclick = () => { myLooksDialog.close(); shop.buy(look.id); };
+  ```
+
+**Its words** (since 0.9.3). `words` on `mountShop` (and on `looksView` and `payPanel`) changes any word of the looks sheet and the pay sheet: the
+titles, the lines, every key, the states (waiting, paid, paid late, ended), the refusals (`refusal(text, status)`: the server's words are English) and
+the names for a screen reader. Give the keys of `ShopWords` you want, over the defaults (`SHOP_WORDS`); a text with a value in it is a function of
+that value:
+
+```ts
+mountShop(el, { ...options, words: { sendExactly: "Pay exactly", buyTitle: (look) => `Get ${look}` } });
+```
+
+The defaults are short: the pay sheet shows at most 30 words (TEST MODE and live) and no sentence has more than 10 (`test/panel-words.test.ts`).
+Two things are not the game's words: the stamp **"TEST MODE: DO NOT PAY"**, and **"Powered by CoinGecko"** while CoinGecko is one of the price feeds
+(its API terms; `priceLine` adds it when the game's `prices` leaves it out). Keep the meaning of the safety lines in any language: live, send the
+**exact** amount, and the order ends at the timer; in test mode nothing can be paid and the wallet key is off; a late payment gives no look and
+the creator sends it back.
 
 ### The page's Content Security Policy
 

package/ai/SPEC.md

@@ -216,6 +216,7 @@ npm install @nano133/nanoterra @nano133/signin
 6. **The sheet.** `mountPlayerSignin(document.body, { name, scheme: SCHEME, qr, personCheck, onSignedIn })` and the stylesheet; the account key and the
    shop's "sign in first" call `open()`. On `*.workers.dev` the sheet offers no passkey (it would be lost at the move to the game's own
    domain); give `mountAdmin` `playerPasskeys: true` so the admin says so. Do not write your own passkey or wallet code, and never store, log or send the seed.
+7. **The words.** For the game's own words or language, give the sheet `words` (keys of `PlayerSigninWords`, over `PLAYER_SIGNIN_WORDS`); never edit the kit's files.
 
 **Check:** on the game's real https address, with a phone (iOS 18 or a recent Android): Make a passkey, see "Keep a spare key", sign in, reload: still
 signed in; sign out, "Use my passkey": the same address. A desktop browser with no PRF shows the passkey last and its plain words. A wallet sign-in works only
@@ -241,6 +242,11 @@ import "@nano133/nanoterra/shop/style.css";
   code, no address and the wallet key off. Never show a pay screen to an address nobody holds the key for without that stamp.
 - Add the cron (`*/10 * * * *`) that calls `shop.scan()`, and give the admin `check: (at) => shop.scan(at)`.
 - Mount the panel with `onOwned(lookId)` (the game adds the look and wears it); `key: false` and `open()` when the game has its own Looks key.
+  A game with its own looks sheet calls `buy(lookId)` after it closes that sheet, and gives `onSignInCancel` to show the sheet again when the player
+  closes the sign-in without signing in.
+- The game's own words or language: `words` on `mountShop` (keys of `ShopWords`, over `SHOP_WORDS`). Keep each safety line's meaning; the stamp
+  "TEST MODE: DO NOT PAY" and "Powered by CoinGecko" are not the game's to change. A shop in a modal `<dialog>` of the game's own closes it in `signIn`
+  before the sign-in sheet opens, or the sheet stays hidden behind it.
 - Merge `SHOP_CSP` into the game's Content Security Policy with `mergeCsp`; never replace the game's policy.
 - "Delete my data" calls `store.forget(player, now)`; with `waitUntil`, ask the player to try again then.
 - Tests: the shop's money tests are the package's. The game's tests read the game's own looks file and test only the game's own routes and wiring.

package/dist/player-signin/panel/index.d.ts

@@ -3,7 +3,7 @@ export type { MountedPlayerSignin, PlayerSigninMountOptions } from "./mount.js";
 export { hostFits, passkeyName, signInView } from "./view.js";
 export { PASSKEY_PREVIEW_NOTE, previewHost } from "../host.js";
 export type { PlayerSigninView, PlayerSigninViewOptions, SignedIn } from "./view.js";
-export { faultWords } from "./words.js";
-export type { FaultWords } from "./words.js";
+export { PLAYER_SIGNIN_WORDS, faultWords, playerSigninWords } from "./words.js";
+export type { FaultText, FaultWords, PlayerSigninWords, PlayerSigninWordsOption } from "./words.js";
 export { readMemo } from "./memo.js";
 export type { SigninMemo } from "./memo.js";

package/dist/player-signin/panel/index.js

@@ -1,7 +1,8 @@
 // "@nano133/nanoterra/player-signin/panel": the player's sign-in sheet in the browser. `mountPlayerSignin` is the sheet (call `open()`);
-// `signInView` is its content, for a game that has a sheet of its own. Add "@nano133/nanoterra/player-signin/style.css" to the page.
+// `signInView` is its content, for a game that has a sheet of its own. Add "@nano133/nanoterra/player-signin/style.css" to the page. Every word of
+// the sheet can be the game's own: `words` (PlayerSigninWords; PLAYER_SIGNIN_WORDS are the defaults).
 export { mountPlayerSignin } from "./mount.js";
 export { hostFits, passkeyName, signInView } from "./view.js";
 export { PASSKEY_PREVIEW_NOTE, previewHost } from "../host.js";
-export { faultWords } from "./words.js";
+export { PLAYER_SIGNIN_WORDS, faultWords, playerSigninWords } from "./words.js";
 export { readMemo } from "./memo.js";

package/dist/player-signin/panel/mount.d.ts

@@ -1,6 +1,6 @@
 import { type PlayerSigninViewOptions, type SignedIn } from "./view.js";
 export type PlayerSigninMountOptions = PlayerSigninViewOptions & {
-    /** The sheet's title. Default "Sign in". */
+    /** The sheet's title. Default: `words.title` ("Sign in"). */
     title?: string;
     /** How long "Signed in as …" shows before the sheet closes, in ms. Default 900. */
     closeAfterMs?: number;

package/dist/player-signin/panel/mount.js

@@ -1,10 +1,11 @@
 // The sign-in sheet of a game: `mountPlayerSignin(element, options)`. It draws no key of its own: the game's account key, the shop's "sign in
 // first" and anything else call `open()`, which resolves with the player once they are signed in, or null when the sheet closes. Plain DOM; a
 // modal sheet with a scrim: from the bottom on a phone held upright, in the middle on a wide or sideways screen. Escape, the close key and a press
-// on the scrim close it. Every key is 44 px or more.
+// on the scrim close it. Phone first: text 16 px, every key 48 px or more each way.
 import { h, releaseFocus } from "../../admin/panel/dom.js";
 import { icon } from "../../admin/panel/icons.js";
 import { signInView } from "./view.js";
+import { playerSigninWords } from "./words.js";
 let mounts = 0;
 export function mountPlayerSignin(root, options) {
     const n = ++mounts;
@@ -12,6 +13,7 @@ export function mountPlayerSignin(root, options) {
     let pending = null;
     let before = null;
     let closing;
+    const words = playerSigninWords(options.words);
     const settle = (p) => {
         const was = pending;
         pending = null;
@@ -25,8 +27,8 @@ export function mountPlayerSignin(root, options) {
             closing = setTimeout(close, Math.max(0, options.closeAfterMs ?? 900));
         },
     });
-    const titleEl = h("h2", { class: "n133s-title", id: `n133s-title-${n}` }, options.title ?? "Sign in");
-    const closeKey = h("button", { class: "n133s-close", type: "button", "aria-label": "Close" }, icon("close", 20));
+    const titleEl = h("h2", { class: "n133s-title", id: `n133s-title-${n}` }, options.title ?? words.title);
+    const closeKey = h("button", { class: "n133s-close", type: "button", "aria-label": words.close }, icon("close", 20));
     const scrim = h("div", { class: "n133s-scrim" });
     const panel = h("section", { class: "n133s-panel", role: "dialog", "aria-modal": "true", "aria-labelledby": `n133s-title-${n}` }, h("header", { class: "n133s-head" }, titleEl, closeKey), h("div", { class: "n133s-body" }, view.node));
     const wrap = h("div", { class: "n133-signin n133s-sheet", "data-open": "false" }, scrim, panel);

package/dist/player-signin/panel/view.d.ts

@@ -1,5 +1,6 @@
 import { type PasskeyScheme } from "@nano133/signin/passkey";
 import { type Way } from "../types.js";
+import { type PlayerSigninWordsOption } from "./words.js";
 export type SignedIn = {
     address: string;
     via: "wallet" | "passkey";
@@ -30,6 +31,8 @@ export type PlayerSigninViewOptions = {
     fetch?: typeof fetch;
     /** A touch screen (one key that opens the app) or not (a QR code). Default: `(pointer: coarse)`. */
     touch?: boolean;
+    /** The game's words for the sheet, over the defaults (PLAYER_SIGNIN_WORDS): `{ lead: "No password.", faults: { cancelled: { ... } } }`. */
+    words?: PlayerSigninWordsOption;
 };
 export type PlayerSigninView = {
     node: HTMLElement;

package/dist/player-signin/panel/view.js

@@ -11,6 +11,8 @@
 //
 // The seed lives in local variables of one sign-in only: never in storage, a log, an error text or an address. The page remembers only the passkeys'
 // ids and the last way (./memo.ts).
+//
+// `words` changes any word of the sheet (./words.ts: PLAYER_SIGNIN_WORDS are the defaults), for a game's own words or language.
 import { firstUse, makePasskey, openPasskey, PasskeyError, passkeyFault, passkeySupport } from "@nano133/signin/passkey";
 import { ApiError, createApi } from "../../admin/panel/api.js";
 import { h, shortAddress } from "../../admin/panel/dom.js";
@@ -19,7 +21,7 @@ import { checkScheme } from "../scheme-check.js";
 import { previewHost } from "../host.js";
 import { WAYS } from "../types.js";
 import { readMemo, rememberLast, rememberMade, rememberOpened } from "./memo.js";
-import { faultWords } from "./words.js";
+import { faultWords, playerSigninWords } from "./words.js";
 /** The wallets, with letters, not logos: no wallet's licence clearly allows its logo. */
 const WALLETS = {
     berry: { name: "Berry Wallet", mark: "B" },
@@ -59,6 +61,7 @@ export function signInView(options) {
     const passkeyOn = options.passkey ?? !previewHost(rpId);
     const scheme = passkeyOn ? checkScheme(options.scheme) : null;
     const touch = () => options.touch ?? (typeof matchMedia === "function" && matchMedia("(pointer: coarse)").matches);
+    const w = playerSigninWords(options.words);
     let stopped = false;
     let timer;
     let prompt = null;
@@ -77,7 +80,7 @@ export function signInView(options) {
         node.toggleAttribute("aria-busy", on);
     };
     const key = (text, onclick, kind = "plain") => h("button", { class: `n133s-btn n133s-${kind}`, type: "button", onclick }, text);
-    const backKey = () => h("button", { class: "n133s-back", type: "button", onclick: () => showWays() }, icon("back", 18), h("span", {}, "Back"));
+    const backKey = () => h("button", { class: "n133s-back", type: "button", onclick: () => showWays() }, icon("back", 18), h("span", {}, w.back));
     const title = (text) => h("h3", { class: "n133s-step", tabindex: "-1" }, text);
     const focusFirst = () => (area.querySelector("h3, button:not([disabled])") ?? area).focus?.({ preventScroll: true });
     const setup = () => ({ rpId, rpName: options.name, scheme: scheme, userName: passkeyName(options.name), exclude: readMemo(rpId).ids });
@@ -94,7 +97,7 @@ export function signInView(options) {
     function done(player) {
         stopWaiting();
         current = null;
-        area.replaceChildren(h("p", { class: "n133s-done" }, icon("check", 22), h("span", {}, `Signed in as ${shortAddress(player.address)}`)));
+        area.replaceChildren(h("p", { class: "n133s-done" }, icon("check", 22), h("span", {}, w.signedInAs(shortAddress(player.address)))));
         say("");
         options.onSignedIn?.(player);
     }
@@ -102,29 +105,29 @@ export function signInView(options) {
     function passkeyTile() {
         const off = support === "no";
         const last = readMemo(rpId).last === "passkey";
-        return h("button", { class: `n133s-pk${off ? " is-off" : ""}`, type: "button", onclick: () => showPasskey() }, h("span", { class: "n133s-pk-mark" }, keyIcon()), h("span", { class: "n133s-pk-words" }, h("strong", {}, "Use a passkey"), h("small", {}, off ? "Not on this browser" : "Face ID, Touch ID or your device PIN")), last ? h("span", { class: "n133s-last" }, "Last used") : null);
+        return h("button", { class: `n133s-pk${off ? " is-off" : ""}`, type: "button", onclick: () => showPasskey() }, h("span", { class: "n133s-pk-mark" }, keyIcon()), h("span", { class: "n133s-pk-words" }, h("strong", {}, w.usePasskey), h("small", {}, off ? w.passkeyOff : w.passkeyHint)), last ? h("span", { class: "n133s-last" }, w.lastUsed) : null);
     }
     function walletTiles() {
         const last = readMemo(rpId).last;
-        return h("div", { class: "n133s-tiles" }, ...ways.map((w) => h("button", { class: "n133s-tile", type: "button", onclick: () => choose(w) }, h("span", { class: "n133s-mark", "aria-hidden": "true" }, WALLETS[w].mark), h("span", { class: "n133s-name" }, WALLETS[w].name), last === w ? h("span", { class: "n133s-last" }, "Last used") : null)));
+        return h("div", { class: "n133s-tiles" }, ...ways.map((way) => h("button", { class: "n133s-tile", type: "button", onclick: () => choose(way) }, h("span", { class: "n133s-mark", "aria-hidden": "true" }, WALLETS[way].mark), h("span", { class: "n133s-name" }, WALLETS[way].name), last === way ? h("span", { class: "n133s-last" }, w.lastUsed) : null)));
     }
     function showWays() {
         stopWaiting();
         busy(false);
         const pk = passkeyOn ? passkeyTile() : null;
         const first = pk && support !== "no";
-        const walletsPart = ways.length ? [h("p", { class: "n133s-or" }, pk ? "Or a wallet app" : "Choose your wallet"), walletTiles()] : [];
-        fill(h("p", { class: "n133s-lead" }, "No password and no payment."), first ? pk : null, ...walletsPart, !first && pk ? h("p", { class: "n133s-or" }, "Or a passkey") : null, !first ? pk : null);
+        const walletsPart = ways.length ? [h("p", { class: "n133s-or" }, pk ? w.orWallet : w.chooseWallet), walletTiles()] : [];
+        fill(h("p", { class: "n133s-lead" }, w.lead), first ? pk : null, ...walletsPart, !first && pk ? h("p", { class: "n133s-or" }, w.orPasskey) : null, !first ? pk : null);
         say("");
     }
     // ---- the passkey ----
     function showFault(e) {
         busy(false);
         const f = passkeyFault(e);
-        const w = faultWords(f.code, rpId);
-        if (w.next === "stay")
-            return showPasskey(w.text);
-        fill(backKey(), title(w.title), h("p", { class: "n133s-text n133s-fault", "data-fault": f.code }, w.text), ways.length ? h("p", { class: "n133s-or" }, "Sign in with a wallet app") : null, ways.length ? walletTiles() : null);
+        const fw = faultWords(f.code, rpId, w);
+        if (fw.next === "stay")
+            return showPasskey(fw.text);
+        fill(backKey(), title(fw.title), h("p", { class: "n133s-text n133s-fault", "data-fault": f.code }, fw.text), ways.length ? h("p", { class: "n133s-or" }, w.faultWallets) : null, ways.length ? walletTiles() : null);
         say("");
         focusFirst();
     }
@@ -140,15 +143,15 @@ export function signInView(options) {
         if (!hostFits(location.hostname, rpId))
             return showFault({ name: "SecurityError" });
         const known = readMemo(rpId).ids.length > 0;
-        const use = key("Use my passkey", () => void usePasskey(), known ? "primary" : "plain");
-        const make = key("Make a passkey", () => void makeNew(), known ? "plain" : "primary");
-        area.replaceChildren(backKey(), title("Passkey"), h("p", { class: "n133s-text" }, "Face ID, Touch ID or your device PIN. The passkey stays on your device: the game never sees it."), h("div", { class: "n133s-keys" }, known ? use : make, known ? make : use));
+        const use = key(w.useMine, () => void usePasskey(), known ? "primary" : "plain");
+        const make = key(w.makeOne, () => void makeNew(), known ? "plain" : "primary");
+        area.replaceChildren(backKey(), title(w.passkeyTitle), h("p", { class: "n133s-text" }, w.passkeyText), h("div", { class: "n133s-keys" }, known ? use : make, known ? make : use));
         say(note ?? "");
         focusFirst();
     }
     async function usePasskey() {
         busy(true);
-        say("Waiting for your passkey…");
+        say(w.waitingPasskey);
         prompt = new AbortController();
         try {
             const p = await openPasskey(setup(), prompt.signal);
@@ -163,7 +166,7 @@ export function signInView(options) {
     }
     async function makeNew() {
         busy(true);
-        say("Making your passkey…");
+        say(w.makingPasskey);
         prompt = new AbortController();
         let made;
         try {
@@ -183,7 +186,7 @@ export function signInView(options) {
     /** The first use of a passkey just made. Where it gives nothing (a browser that allows one prompt per press, a closed sheet), one key finishes it. */
     async function firstOpen(made, pick) {
         busy(true);
-        say("Opening your passkey…");
+        say(w.openingPasskey);
         prompt = new AbortController();
         try {
             const p = await firstUse(setup(), made, prompt.signal, pick);
@@ -198,7 +201,7 @@ export function signInView(options) {
             if (f.code !== "cancelled" && f.code !== "failed")
                 return showFault(f);
             busy(false);
-            area.replaceChildren(title("Your passkey is made"), h("p", { class: "n133s-text" }, "Press the key to open it."), h("div", { class: "n133s-keys" }, key("Open my passkey", () => void firstOpen(made, true), "primary")));
+            area.replaceChildren(title(w.madeTitle), h("p", { class: "n133s-text" }, w.madeText), h("div", { class: "n133s-keys" }, key(w.openMine, () => void firstOpen(made, true), "primary")));
             say("");
             focusFirst();
         }
@@ -210,25 +213,25 @@ export function signInView(options) {
             const code = h("p", { class: "n133s-code", translate: "no" });
             const codeBox = h("div", { class: "n133s-codebox" }, code);
             codeBox.hidden = true;
-            const go = key("Later", () => resolve(), "quiet");
-            const copyBtn = key("Copy the code", async () => {
+            const go = key(w.later, () => resolve(), "quiet");
+            const copyBtn = key(w.copyCode, async () => {
                 try {
                     await navigator.clipboard.writeText(seed);
-                    copyBtn.textContent = "Copied";
+                    copyBtn.textContent = w.copied;
                 }
                 catch {
-                    copyBtn.textContent = "Copy failed: write it down";
+                    copyBtn.textContent = w.copyFailed;
                 }
             });
             codeBox.append(copyBtn);
-            const show = key("Show my code", () => {
+            const show = key(w.showCode, () => {
                 code.textContent = seed.match(/.{1,16}/g).join("\n");
                 codeBox.hidden = false;
                 show.remove();
-                go.textContent = "Continue";
+                go.textContent = w.continue;
                 go.className = "n133s-btn n133s-primary";
             }, "primary");
-            area.replaceChildren(title("Keep a spare key"), h("p", { class: "n133s-text" }, "Your looks belong to this passkey. If you lose it, this code brings them back."), codeBox, h("p", { class: "n133s-fine" }, "Keep it secret: whoever has it can sign in as you. To use it, import it as a seed in a Nano wallet such as Nautilus, then sign in with that wallet."), h("div", { class: "n133s-keys" }, show, go));
+            area.replaceChildren(title(w.spareTitle), h("p", { class: "n133s-text" }, w.spareText), codeBox, h("p", { class: "n133s-fine" }, w.spareFine), h("div", { class: "n133s-keys" }, show, go));
             say("");
             focusFirst();
         });
@@ -240,7 +243,7 @@ export function signInView(options) {
         if (stopped)
             return;
         busy(true);
-        say("Signing in…");
+        say(w.signingIn);
         try {
             const { signinBody } = await import("@nano133/signin/purse");
             const turnstile = await personToken();
@@ -251,7 +254,7 @@ export function signInView(options) {
         }
         catch (e) {
             if (!stopped)
-                showPasskey(e instanceof ApiError ? e.message : "Sign-in did not work. Try again.");
+                showPasskey(e instanceof ApiError ? w.refusal(e.message, e.status) : w.signInFailed);
         }
     }
     // ---- a wallet app ----
@@ -261,7 +264,7 @@ export function signInView(options) {
         stopWaiting();
         current = null;
         busy(true);
-        say("Starting…");
+        say(w.starting);
         try {
             const turnstile = await personToken();
             const s = await api.post(`${base}/start`, { way, ...(turnstile ? { turnstile } : {}) });
@@ -275,13 +278,13 @@ export function signInView(options) {
         catch (e) {
             busy(false);
             showWays();
-            say(e instanceof Error ? e.message : "Sign-in did not start. Try again.");
+            say(e instanceof ApiError ? w.refusal(e.message, e.status) : e instanceof Error && e.message ? w.refusal(e.message, 0) : w.startFailed);
         }
     }
     function showWallet(s) {
         const name = WALLETS[s.way].name;
         area.replaceChildren(backKey(), title(name), ...walletSteps(s, name));
-        say(`Waiting for ${name}…`);
+        say(w.waitingFor(name));
         focusFirst();
     }
     /** What the player does with the wallet: on a touch screen, one key; with a mouse, a QR code for the phone. */
@@ -289,36 +292,36 @@ export function signInView(options) {
         const open = (text, href, newTab = false) => h("a", { class: "n133s-btn n133s-primary", href, target: newTab ? "_blank" : undefined, rel: newTab ? "noopener" : undefined }, text);
         const qr = (text) => {
             if (!options.qr)
-                return h("p", { class: "n133s-fine" }, "Open this page on your phone to sign in with ", name, ".");
+                return h("p", { class: "n133s-fine" }, w.openOnPhone(name));
             const c = options.qr(text);
-            c.setAttribute("aria-label", `QR code to sign in with ${name}`);
+            c.setAttribute("aria-label", w.qrLabel(name));
             return h("div", { class: "n133s-qr" }, c);
         };
-        const only = h("p", { class: "n133s-fine" }, `Only approve a sign-in that you started yourself, on ${location.host}.`);
-        const comeBack = h("p", { class: "n133s-fine" }, `Approve the sign-in in ${s.way === "berry" ? "your wallet" : name}, then come back to this page.`);
+        const only = h("p", { class: "n133s-fine" }, w.onlyYours(location.host));
+        const comeBack = h("p", { class: "n133s-fine" }, w.comeBack(s.way === "berry" ? w.yourWallet : name));
         if (s.way === "nautilus") {
-            const code = h("p", { class: "n133s-text" }, "Check that Nautilus shows the code ", h("strong", { class: "n133s-signcode" }, s.code ?? ""), ".");
-            return touch() ? [code, open("Open Nautilus", s.link), comeBack] : [qr(s.link), h("p", { class: "n133s-text" }, "Scan this with Nautilus on your phone, then approve the sign-in."), code, only];
+            const code = h("p", { class: "n133s-text" }, w.checkCode, h("strong", { class: "n133s-signcode" }, s.code ?? ""));
+            return touch() ? [code, open(w.openApp(name), s.link), comeBack] : [qr(s.link), h("p", { class: "n133s-text" }, w.scanWith(name)), code, only];
         }
         if (s.way === "nanchat") {
-            const here = h("p", { class: "n133s-fine" }, "On this computer: ", h("a", { href: s.link, target: "_blank", rel: "noopener" }, "open NanChat"), ".");
-            return touch() ? [open("Open NanChat", s.link, true), comeBack, only] : [qr(s.link), h("p", { class: "n133s-text" }, "Scan this with your phone's camera to open NanChat, then approve the sign-in."), only, here];
+            const here = h("p", { class: "n133s-fine" }, w.onComputer, h("a", { href: s.link, target: "_blank", rel: "noopener" }, w.openLink(name)));
+            return touch() ? [open(w.openApp(name), s.link, true), comeBack, only] : [qr(s.link), h("p", { class: "n133s-text" }, w.scanCamera(name)), only, here];
         }
-        const other = h("a", { class: "n133s-btn n133s-plain", href: s.walletLink ?? s.link }, "Another wallet");
-        const here = h("p", { class: "n133s-fine" }, "On this computer: ", h("a", { href: s.walletLink ?? s.link }, "open a wallet"), ".");
-        return touch() ? [open("Open Berry Wallet", s.link), other, comeBack] : [qr(s.link), h("p", { class: "n133s-text" }, "Scan this with Berry Wallet on your phone, then approve the sign-in."), only, here];
+        const other = h("a", { class: "n133s-btn n133s-plain", href: s.walletLink ?? s.link }, w.anotherWallet);
+        const here = h("p", { class: "n133s-fine" }, w.onComputer, h("a", { href: s.walletLink ?? s.link }, w.openLink(w.aWallet)));
+        return touch() ? [open(w.openApp(name), s.link), other, comeBack] : [qr(s.link), h("p", { class: "n133s-text" }, w.scanWith(name)), only, here];
     }
     /** The request ended without a sign-in: say why, and offer a new one. */
     function again(s, words) {
         current = null;
-        area.replaceChildren(backKey(), title(WALLETS[s.way].name), h("div", { class: "n133s-keys" }, key("Try again", () => void choose(s.way), "primary"), key("Choose another way", () => showWays())));
+        area.replaceChildren(backKey(), title(WALLETS[s.way].name), h("div", { class: "n133s-keys" }, key(w.tryAgain, () => void choose(s.way), "primary"), key(w.otherWay, () => showWays())));
         say(words);
     }
     async function poll(s) {
         if (stopped || current !== s)
             return;
         if (Date.now() > s.expiresAt + 5000)
-            return again(s, "This sign-in expired.");
+            return again(s, w.expired);
         try {
             const r = await api.post(`${base}/check`, { id: s.id, way: s.way });
             if (stopped || current !== s)
@@ -326,13 +329,13 @@ export function signInView(options) {
             if (r.status === "signedin" && r.address)
                 return done({ address: r.address, via: "wallet" });
             if (r.status === "elsewhere" || r.status === "used")
-                return again(s, "This sign-in was used in another browser. Start again.");
+                return again(s, w.usedElsewhere);
             if (r.status === "expired")
-                return again(s, "This sign-in expired.");
+                return again(s, w.expired);
         }
         catch (e) {
             if (e instanceof ApiError && e.status === 429)
-                say("Too many checks. Waiting a moment…");
+                say(w.tooManyChecks);
         }
         timer = setTimeout(() => void poll(s), 2000);
     }

package/dist/player-signin/panel/words.d.ts

@@ -5,4 +5,99 @@ export type FaultWords = {
     text: string;
     next: "stay" | "wallets";
 };
-export declare function faultWords(code: PasskeyFault, rpId: string): FaultWords;
+/** A fault's words: its title, and its text (a function when it names the game's domain, `rpId`). */
+export type FaultText = {
+    title: string;
+    text: string | ((rpId: string) => string);
+};
+export type PlayerSigninWords = {
+    /** The sheet's title. The option `title` wins over it. */
+    title: string;
+    /** The close key's name for a screen reader. */
+    close: string;
+    /** The first line of the ways. */
+    lead: string;
+    usePasskey: string;
+    /** Under "Use a passkey". */
+    passkeyHint: string;
+    /** Under "Use a passkey" where the browser reports no passkey PRF. */
+    passkeyOff: string;
+    lastUsed: string;
+    /** Before the wallet tiles, after the passkey. */
+    orWallet: string;
+    /** Before the wallet tiles, with no passkey before them. */
+    chooseWallet: string;
+    /** Before the passkey, when it comes last. */
+    orPasskey: string;
+    back: string;
+    passkeyTitle: string;
+    passkeyText: string;
+    useMine: string;
+    makeOne: string;
+    waitingPasskey: string;
+    makingPasskey: string;
+    openingPasskey: string;
+    /** A passkey just made, whose first use gave nothing: one key opens it. */
+    madeTitle: string;
+    madeText: string;
+    openMine: string;
+    spareTitle: string;
+    spareText: string;
+    /** Under the code: keep it secret; how to use it. */
+    spareFine: string;
+    showCode: string;
+    copyCode: string;
+    copied: string;
+    copyFailed: string;
+    later: string;
+    continue: string;
+    signingIn: string;
+    signInFailed: string;
+    /** After a fault that offers the wallet apps. */
+    faultWallets: string;
+    faults: Record<PasskeyFault, FaultText>;
+    starting: string;
+    startFailed: string;
+    /** The words of a refusal: the server's own (`text`, in English) and its HTTP status (0: no answer). Default: the server's words. */
+    refusal: (text: string, status: number) => string;
+    /** The status while the page waits for a wallet ("Berry Wallet"). */
+    waitingFor: (wallet: string) => string;
+    /** After a sign-in, with the player's short address. */
+    signedInAs: (address: string) => string;
+    /** The key that opens a wallet app on a touch screen. */
+    openApp: (wallet: string) => string;
+    anotherWallet: string;
+    /** Before a link that opens the wallet on this computer. */
+    onComputer: string;
+    /** The link's words: open a wallet ("NanChat", or `aWallet`). */
+    openLink: (wallet: string) => string;
+    aWallet: string;
+    /** With no QR hook, on a screen with a mouse. */
+    openOnPhone: (wallet: string) => string;
+    qrLabel: (wallet: string) => string;
+    /** Only approve a sign-in the player started, on this host. */
+    onlyYours: (host: string) => string;
+    /** After the key that opens the app (`yourWallet` for Berry Wallet, which opens any wallet). */
+    comeBack: (wallet: string) => string;
+    yourWallet: string;
+    /** Under a QR code: scan it with this wallet. */
+    scanWith: (wallet: string) => string;
+    /** Under NanChat's QR code: the phone's camera opens it. */
+    scanCamera: (wallet: string) => string;
+    /** Before Nautilus's code (the code follows, bold). */
+    checkCode: string;
+    tryAgain: string;
+    otherWay: string;
+    expired: string;
+    usedElsewhere: string;
+    tooManyChecks: string;
+};
+/** `words` as a game gives it: any of the keys, and any of the faults. */
+export type PlayerSigninWordsOption = Partial<Omit<PlayerSigninWords, "faults">> & {
+    faults?: Partial<Record<PasskeyFault, FaultText>>;
+};
+export declare const PLAYER_SIGNIN_WORDS: PlayerSigninWords;
+/** The game's words over the defaults; its faults over the default faults. A key it leaves out, or gives as undefined, keeps its default. */
+export declare function playerSigninWords(over?: PlayerSigninWordsOption): PlayerSigninWords;
+/** A fault's title, text and next step, in the game's words (default: PLAYER_SIGNIN_WORDS). An unknown code gets the words of "failed". */
+export declare function faultWords(code: PasskeyFault, rpId: string, words?: PlayerSigninWordsOption): FaultWords;