selfstore 1.3.0 → 1.5.0

package/README.md

@@ -134,7 +134,7 @@ too, as subpaths of the same install:
 |---|---|---|
 | `selfstore` | the simple store + backup files | almost always: start here |
 | `selfstore/flows` | the user journeys (connect a destination, share panel, join an invitation) as headless, tested state machines | you are building the connect/share/join UI and want the ordering and failure rules - one popup per gesture, password proven before attach, merge by default - already right |
-| `selfstore/widgets` | the same journeys as drop-in web components (`<selfstore-connect>`, `<selfstore-share>`, `<selfstore-join>`) - framework-free, themable via CSS custom properties and `::part()`, reworded/localized via a `labels` map | you want the screens ready-made and your app's look on top |
+| `selfstore/widgets` | the same journeys as drop-in web components (`<selfstore-connect>`, `<selfstore-gate>`, `<selfstore-share>`, `<selfstore-join>`) - framework-free, themable via CSS custom properties and `::part()`, reworded/localized via a `labels` map | you want the screens ready-made and your app's look on top |
 | `selfstore/advanced` | the pull-model store (`createLocalStore`), custom `BackupTarget`s, caches, headless status derivation, functional codec | your state lives in its own reactive model (Svelte runes, Redux), or you are writing a destination (S3, your KV...) |
 | `selfstore/groups` | passwordless group encryption: per-member identities, sealed envelopes, signed membership manifests | several PEOPLE share one encrypted store without a shared password ([PEERS.md](./PEERS.md)) |
 | `selfstore/sync` | the bare merge engine (HLC + per-collection strategies, no CRDT runtime) | you only want the algorithm inside your own persistence ([SYNC docs in SPEC.md](./SPEC.md)) |
@@ -306,6 +306,12 @@ const persistence = {
   full-profile copy cannot read it. One unlock per session - `cacheLock` on the
   simple facade, or `indexedDbCache(name, { lock: true })` at the store layer.
   Still bounded by the origin (unlocked, code in the page decrypts).
+  A forgotten secret is unrecoverable by design, so give your users a way
+  out rather than a dead-end prompt: `indexedDbCache(name, { lock: true })
+  .clear()` needs no key and abandons the sealed cache, after which they can
+  start again from a backup file or from scratch. Throwing from the
+  `cacheLock` callback aborts the boot and hands control back to you, which
+  is where that offer belongs.
 - Opt-in hardening for sensitive deployments: `requireEncryption` refuses to
   write or export a plaintext backup, and `passwordPolicy` refuses a password
   weaker than a length / character-class rule - both enforced at the store, so

package/dist/advanced.d.ts

@@ -1,10 +1,10 @@
-import { B as BackupTarget } from './store-2RnED1Vq.js';
-export { A as AuthExpiredError, a as BuiltinTargetKind, E as EncodeOptions, H as Header, K as KdfParams, L as LocalStore, b as LocalStoreOptions, c as LocalStoreState, M as MirrorState, d as Mode, P as PasswordCheck, e as PasswordPolicy, f as PasswordRequirement, g as PeerSource, h as PeerState, R as RESERVED_COLLECTION_PREFIX, i as RESERVED_STORE_MODES, j as RecipientStanza, k as ReplicaState, S as SelfstoreError, l as SelfstoreErrorCode, m as Severity, n as Snapshot, o as SnapshotFile, p as StatusAction, q as StatusDescriptor, r as StatusInput, s as StorageState, t as StoreError, u as StoreGroupConfig, v as SyncJournalEntry, w as SyncSource, T as TargetKind, x as checkPasswordPolicy, y as createLocalStore, z as deriveStatus, C as errorLabelKey, D as isAuthExpired, F as isReservedStoreMode, G as isSelfstoreError } from './store-2RnED1Vq.js';
-import { K as KV } from './cache-De5_sALA.js';
-export { C as CachedFile, L as LocalCache, e as LockableCache, i as indexedDbCache, f as isLockableCache, m as memoryCache } from './cache-De5_sALA.js';
-export { e as exportSnapshot, g as gisDriveAuth, i as importSnapshot, a as inspect, b as isEncrypted, p as pickFromDisk, s as saveToDisk } from './local-DsXG7QW7.js';
-import { c as connect$1, f as fromSession$1, p as preview, a as adopt, b as findOrCreateOwnFile, l as listBackups, d as createBackup, e as deleteBackup, r as renameBackup, g as connect$2, h as fromSession$2, i as connect$3, j as fromSession$3, k as peer } from './drive-DNiDXBDe.js';
-export { D as DriveAuth, m as DriveBackupInfo, n as DriveOptions, S as S3Config, o as S3ConnectOptions, W as WebdavConfig, q as WebdavConnectOptions, s as WebdavPeerOptions } from './drive-DNiDXBDe.js';
+import { B as BackupTarget } from './store-C20_6JBo.js';
+export { A as AuthExpiredError, a as BuiltinTargetKind, E as EncodeOptions, H as Header, K as KdfParams, L as LocalStore, b as LocalStoreOptions, c as LocalStoreState, M as MirrorState, d as Mode, P as PasswordCheck, e as PasswordPolicy, f as PasswordRequirement, g as PeerSource, h as PeerState, R as RESERVED_COLLECTION_PREFIX, i as RESERVED_STORE_MODES, j as RecipientStanza, k as ReplicaState, S as SelfstoreError, l as SelfstoreErrorCode, m as Severity, n as Snapshot, o as SnapshotFile, p as StatusAction, q as StatusDescriptor, r as StatusInput, s as StorageState, t as StoreError, u as StoreGroupConfig, v as SyncJournalEntry, w as SyncSource, T as TargetKind, x as checkPasswordPolicy, y as createLocalStore, z as deriveStatus, C as errorLabelKey, D as isAuthExpired, F as isReservedStoreMode, G as isSelfstoreError } from './store-C20_6JBo.js';
+import { K as KV } from './cache-ilsK3Tki.js';
+export { C as CachedFile, L as LocalCache, e as LockableCache, i as indexedDbCache, f as isLockableCache, m as memoryCache } from './cache-ilsK3Tki.js';
+export { e as exportSnapshot, g as gisDriveAuth, i as importSnapshot, a as inspect, b as isEncrypted, p as pickFromDisk, s as saveToDisk } from './local-6OALceUy.js';
+import { c as connect$1, f as fromSession$1, p as preview, a as adopt, b as findOrCreateOwnFile, l as listBackups, d as createBackup, e as deleteBackup, r as renameBackup, g as connect$2, h as fromSession$2, i as connect$3, j as fromSession$3, k as peer } from './drive-BhiTdk-Q.js';
+export { D as DriveAuth, m as DriveBackupInfo, n as DriveOptions, S as S3Config, o as S3ConnectOptions, W as WebdavConfig, q as WebdavConnectOptions, s as WebdavPeerOptions } from './drive-BhiTdk-Q.js';
 import './sync.js';
 
 /**

package/dist/advanced.js

@@ -1,4 +1,4 @@
-export { RESERVED_STORE_MODES, createLocalStore, deriveStatus, gisDriveAuth, indexedDbCache, isLockableCache, isReservedStoreMode, memoryCache } from './chunk-XI3MGK4M.js';
+export { RESERVED_STORE_MODES, createLocalStore, deriveStatus, gisDriveAuth, indexedDbCache, isLockableCache, isReservedStoreMode, memoryCache } from './chunk-FL66ACWR.js';
 export { pickFromDisk, saveToDisk } from './chunk-UWVAKBU4.js';
 import './chunk-SKWHKM25.js';
 import { FILE_ID_KEY, renameBackup, deleteBackup, createBackup, listBackups, findOrCreateOwnFile, adopt, preview, fromSession, connect, isSupported, fromSession2, connect2, fromSession4, connect4, peer, fromSession3, connect3 } from './chunk-TEIAFKFS.js';

package/dist/backups.d.ts

@@ -1,5 +1,5 @@
-import { K as KV } from './cache-De5_sALA.js';
-import { B as BackupTarget, L as LocalStore } from './store-2RnED1Vq.js';
+import { K as KV } from './cache-ilsK3Tki.js';
+import { B as BackupTarget, L as LocalStore } from './store-C20_6JBo.js';
 import { F as FlowStore } from './machine-ALMkT3mk.js';
 import './sync.js';
 

package/dist/{cache-De5_sALA.d.ts → cache-ilsK3Tki.d.ts}

@@ -107,6 +107,17 @@ interface LockableCache extends LocalCache {
      *  does not open existing data - the cache stays locked. The first secret on
      *  an empty cache sets the lock. */
     unlock(secret: string | CryptoKey): Promise<boolean>;
+    /**
+     * Change the secret that seals this cache, in place: re-derive the key (a
+     * fresh salt for a password) and rewrite every sealed record under it.
+     *
+     * Without this, "change my password" has no honest implementation for a
+     * locked cache - the app has to wipe and rebuild, which also throws away
+     * the durable destination's session, and a half-finished wipe leaves data
+     * no key can open. Requires the cache to be unlocked: what cannot be read
+     * cannot be re-sealed.
+     */
+    reseal(secret: string | CryptoKey): Promise<void>;
     /** Drop the in-memory key: reads and writes lock until unlock() is called. */
     lockNow(): void;
     /** Whether no seal key is currently held. */

package/dist/{chunk-XI3MGK4M.js → chunk-FL66ACWR.js}

@@ -1886,6 +1886,40 @@ function indexedDbCache(name, opts) {
     lockNow() {
       sealKey = null;
     },
+    async reseal(secret) {
+      const { keyFromPassword, freshCacheKdf } = await import('./cache-lock-NXIR6JRB.js');
+      const previous = sealKey;
+      if (previous === null) {
+        throw new SelfstoreError(
+          "PASSWORD_REQUIRED",
+          "reseal(): the local cache is locked - unlock() it first."
+        );
+      }
+      const d = await db();
+      const kdf = typeof secret === "string" ? freshCacheKdf() : null;
+      const next = kdf ? await keyFromPassword(secret, kdf) : secret;
+      const rawCollections = await d.get("kv", COLLECTIONS_KEY);
+      const collections = isEnvelope(rawCollections) ? await seal(next, await unseal(previous, rawCollections)) : null;
+      const files = [];
+      for (const fileKey of await d.getAllKeys("files")) {
+        const v = await d.get("files", fileKey);
+        if (!v) continue;
+        const bytes = await unseal(previous, v);
+        files.push({
+          id: fileKey,
+          rec: { name: v.name, mime: v.mime, ...await seal(next, bytes) }
+        });
+      }
+      const tx = d.transaction(["kv", "files"], "readwrite");
+      const store = tx.objectStore("kv");
+      if (kdf) store.put(kdf, CACHE_KDF);
+      else store.delete(CACHE_KDF);
+      if (collections) store.put(collections, COLLECTIONS_KEY);
+      const fileStore = tx.objectStore("files");
+      for (const { id, rec } of files) fileStore.put(rec, id);
+      await tx.done;
+      sealKey = next;
+    },
     async unlock(secret) {
       const { keyFromPassword, freshCacheKdf, opens } = await import('./cache-lock-NXIR6JRB.js');
       const d = await db();
@@ -1994,5 +2028,5 @@ function gisDriveAuth(opts) {
 }
 
 export { RESERVED_STORE_MODES, createLocalStore, deriveStatus, gisDriveAuth, indexedDbCache, isLockableCache, isReservedStoreMode, memoryCache };
-//# sourceMappingURL=chunk-XI3MGK4M.js.map
-//# sourceMappingURL=chunk-XI3MGK4M.js.map
+//# sourceMappingURL=chunk-FL66ACWR.js.map
+//# sourceMappingURL=chunk-FL66ACWR.js.map